notifyutil

JSON
executablemacOS117.9 KBx86_64, arm64

System service — manages telemetry collection and reporting to Apple servers

Collects diagnostic data from the system and transmits it to Apple endpoints over the network. Operates across multiple bundle identifiers and accesses files from various system locations. Includes telemetry instrumentation to track its own operations and communications. Runs as a system service with minimal entitlements, performing background data gathering and upstream reporting functions.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
117.9 KB
UUID
FA217D7C-EE17-3911-9032-A755F49CE00F
Analyzed
2026-04-07T05:21:13Z
CDHash
eca66a0a1ee7d79116763abb4417f940a885017846fd06c0c1a82a756a75736b

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
1
File Paths
3
Bundle IDs
3
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 11 functions identified

Functions(11)

0x100000588sub_100000588
0x1000011a0sub_1000011a0
0x1000013bcsub_1000013bc
0x100001434sub_100001434
0x100001510sub_100001510
0x100001514sub_100001514
0x1000015c0sub_1000015c0
0x1000018fcsub_1000018fc
0x100001900sub_100001900
0x10000195csub_10000195c
0x1000019bcsub_1000019bc

Imports50 symbols from 1 dylibs

Exports1

_mh_execute_header0x0