gktool

JSON
executablemacOS176.3 KBx86_64, arm64

System service — manages platform-specific configuration and connectivity

Provides core system functionality through XPC services and framework integrations. Handles network endpoint connections (7 endpoints tracked) and manages bundle-based operations across multiple service contexts. Processes file system paths and URLs to orchestrate system-level operations. Operates with minimal entitlements, suggesting constrained privilege scope and integration with macOS security boundaries.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
176.3 KB
UUID
4573F59E-034D-3114-A762-FBB5959AF67B
Analyzed
2026-04-07T05:21:13Z
CDHash
19aeda5fffa9510abc6d62035ee5019aec0c5ccb31b8b566fd9b2d26c20e4837

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
3
Bundle IDs
3
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 73 functions identified

Functions(73)

0x100000e50sub_100000e50
0x100000e88sub_100000e88
0x100000edcsub_100000edc
0x1000011f8sub_1000011f8
0x100001240sub_100001240
0x1000013fcsub_1000013fc
0x100001434sub_100001434
0x100001480sub_100001480
0x100001484sub_100001484
0x1000014d8sub_1000014d8
0x100001580sub_100001580
0x100001584sub_100001584
0x10000161csub_10000161c
0x100001620sub_100001620
0x100001674sub_100001674
0x100001678sub_100001678
0x100001690sub_100001690
0x100001694sub_100001694
0x1000016bcsub_1000016bc
0x1000016ccsub_1000016cc

Imports129 symbols from 7 dylibs

Exports1

_mh_execute_header0x0