ciphermld

executablemacOS176.1 KBx86_64, arm64

System utility — manages inter-process communication and network access for shared application services

Provides IPC infrastructure for Apple-signed applications to communicate through shared application group containers and additional Mach services. Establishes outgoing network connections to 7 configured endpoints and exposes 6 XPC services for client applications to invoke. Accesses file paths beyond standard sandboxed locations through entitlements. Maintains references to 64 bundle identifiers, suggesting coordination across multiple system and third-party applications.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 176.1 KB
UUID: F73A3A2C-7572-372E-BA2D-9D5C43A11A69
Analyzed: 2026-04-09T09:44:49Z
CDHash: 61234096779dd1e43a125a61871a6acb7359193e7320c2128aae506494fdaaea

Capabilities

NetworkMake outgoing network connections

com.apple.security.network.client [object Object]

StorageException: access additional file paths

com.apple.security.exception.files.home-relative-path.read-write

/Library/Caches/com.apple.ciphermld//Library/HTTPStorages/com.apple.ciphermld//Library/Caches/com.apple.AppleMediaServices/

IpcShared application group container access

com.apple.security.application-groups

group.com.apple.PegasusConfiguration

IpcException: access additional Mach services

com.apple.security.exception.mach-lookup.global-name

com.apple.networkserviceproxy com.apple.duetactivityscheduler com.apple.kvsd com.apple.fairplayd.versioned com.apple.parsecd

Frameworks14

CipherML Foundation libobjc.A.dylib libSystem.B.dylib CoreFoundation libswiftCore.dylib libswiftCoreFoundation.dylib(weak)libswiftDispatch.dylib libswiftIOKit.dylib(weak)libswiftObjectiveC.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_DarwinFoundation1.dylib libswiftos.dylib

Entitlements20

application-identifier com.apple.ciphermld

com.apple.CipherMLService.allowtrue

com.apple.application-identifier com.apple.ciphermld

com.apple.developer.ubiquity-kvstore-identifier com.apple.ciphermld

com.apple.duet.activityscheduler.allowtrue

com.apple.pegasus.contexttrue

com.apple.private.applemediaservicestrue

com.apple.private.network.socket-delegatetrue

com.apple.private.sandbox.profile:embedded temporary-sandbox

com.apple.private.security.daemon-containertrue

com.apple.security.application-groups

group.com.apple.PegasusConfiguration

com.apple.security.exception.files.home-relative-path.read-write

/Library/Caches/com.apple.ciphermld//Library/HTTPStorages/com.apple.ciphermld//Library/Caches/com.apple.AppleMediaServices/

com.apple.security.exception.mach-lookup.global-name

com.apple.networkserviceproxy com.apple.duetactivityscheduler com.apple.kvsd com.apple.fairplayd.versioned com.apple.parsecd

com.apple.security.exception.process-infotrue

com.apple.security.exception.shared-preference.read-only

com.apple.parsecd com.apple.itunesstored com.apple.jett.switch-itms

com.apple.security.network.clienttrue

com.apple.security.ts.daemon-containertrue

com.apple.security.ts.tmpdir com.apple.ciphermld

fairplay-client 511712240

platform-applicationtrue

Interesting Strings

Bundle IDs(64)

com.apple.application-identifier !com.apple.security.network.client $/Library/Caches/com.apple.ciphermld/$com.apple.private.applemediaservices $group.com.apple.PegasusConfiguration0

File Paths(9)

$/Library/Caches/com.apple.ciphermld/*/Library/HTTPStorages/com.apple.ciphermld/-/Library/Caches/com.apple.AppleMediaServices/0 /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://www.apple.com/appleca/0

Network Surfaceentitled

Networking Frameworks

CoreFoundation Foundation libswiftCoreFoundation.dylib libswift_DarwinFoundation1.dylib

Endpoints(7)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

1

Storage

1

Hardware

0

IPC

2

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

0

File Paths

9

Bundle IDs

64

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Coded919fb57358f08ab03c936a32450b96be092789b698cab509e5e5e40bdb898f2

Imports35e7f60a31c20f171a1a87fb44b17a8c7a9017a2b1c501dce8f9f376d2d9eeff

Frameworksb9c1b2dcc64952fd3de735b37833fbab8877d86438f908784df028a7cc5b4359

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements666ee8027ef586b8dbb2c3d0dd00a52b315a4af0b03801ada7f9d70559da8903

Symbols35e7f60a31c20f171a1a87fb44b17a8c7a9017a2b1c501dce8f9f376d2d9eeff

Static Libraries0 / 40 functions identified

Functions(40)

0x100000ce0sub_100000ce0

0x1000011a4sub_1000011a4

0x1000012ccsub_1000012cc

0x100001310sub_100001310

0x100001398sub_100001398

0x1000013e4sub_1000013e4

0x1000013f4sub_1000013f4

0x1000013fcsub_1000013fc

0x100001454sub_100001454

0x10000149csub_10000149c

0x100001500sub_100001500

0x100001548sub_100001548

0x100001794sub_100001794

0x1000017f8sub_1000017f8

0x100001938sub_100001938

0x100001b84sub_100001b84

0x100001c90sub_100001c90

0x100001d94sub_100001d94

0x100001e60sub_100001e60

0x100001f6csub_100001f6c

Imports108 symbols from 9 dylibs

libswiftCore.dylib54 libSystem.B.dylib23 Foundation8 libswiftDispatch.dylib8 CipherML5

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

diagnosticextensionsd

mediacontinuityd

remotecompositorclientd

historicalaudiod

assetsubscriptiond