GamePolicyAgent
executablemacOS587.9 KBx86_64, arm64
System feature flag evaluator — determines enabled features and submits analytics
Evaluates system feature flags to determine which capabilities are enabled at runtime. Communicates with Apple's analytics infrastructure to submit usage data and telemetry. Accesses hardware and driver information through direct communication, and interacts with multiple system Mach services via XPC. Manages 36 bundle identifiers and evaluates features across different system components.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 587.9 KB
- UUID
- E3746AC5-7AC1-357B-80AE-EF638DF09F43
- Analyzed
- 2026-04-09T09:38:36Z
- CDHash
- 704e06be7b65b0fc6f4e9a08bde2fb868c90cad2475daf79674d7087ef1bac7c
Capabilities
HardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-nameAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsSystemFeature flag evaluation
/System/Library/PrivateFrameworks/FeatureFlags.framework/Versions/A/FeatureFlagsFrameworks38
CarbonGameControllerCoreAnalyticsGamePolicylibbsm.0.dylibFoundationlibobjc.A.dyliblibSystem.B.dylibAppKitApplicationServicesCombineCoreFoundationCoreGraphicsCoreServicesIOKitPreferencePanesUserNotificationsFeatureFlagsGamePolicyFoundationlibswiftAccelerate.dylib(weak)libswiftCore.dyliblibswiftCoreFoundation.dylib(weak)libswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftIntents.dylib(weak)libswiftMetal.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dyliblibswiftQuartzCore.dylib(weak)libswiftSpatial.dylib(weak)libswiftUniformTypeIdentifiers.dyliblibswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswiftos.dyliblibswiftsimd.dylib(weak)
Entitlements10
Interesting Strings
Bundle IDs(36)
File Paths(18)
/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices/System/Library/Frameworks/Carbon.framework/Versions/A/Carbon/System/Library/Frameworks/Combine.framework/Versions/A/Combine/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
Network Surface
Networking Frameworks
Endpoints(9)
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
1
IPC
1
Analytics
1
Security
0
System
1
Behavioral Profile
URL Endpoints
5
Telemetry Strings
1
File Paths
18
Bundle IDs
36
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 544 functions identified
Functions(544)
0x100001d18sub_100001d18
0x100001d20sub_100001d20
0x100001d28-[GPPowerPreferencesMonitor init]
0x100001d7c-[GPPowerPreferencesMonitor dealloc]
0x100001dd0+[GPPowerPreferencesMonitor sharedInstance]
0x100001e14sub_100001e14
0x100001e54-[GPPowerPreferencesMonitor _valueForKey:powerSource:]
0x100001f44-[GPPowerPreferencesMonitor _powerPreferences]
0x100001fb4-[GPPowerPreferencesMonitor ecoModeForBattery]
0x100002004-[GPPowerPreferencesMonitor ecoModeForACPower]
0x100002054-[GPPowerPreferencesMonitor registerPrefsChangeNotification]
0x10000215csub_10000215c
0x100002218sub_100002218
0x100002224sub_100002224
0x10000222c-[GPPowerPreferencesMonitor .cxx_destruct]
0x100002238-[GPNotificationOptions title]
0x100002240-[GPNotificationOptions setTitle:]
0x10000224c-[GPNotificationOptions body]
0x100002254-[GPNotificationOptions setBody:]
0x100002260-[GPNotificationOptions categoryID]
Imports492 symbols from 23 dylibs
Exports1
_mh_execute_header0x0