sftp

executablemacOS331.7 KBx86_64, arm64

System service — manages configuration and state for Apple platform services

Implements a daemon service that communicates with multiple Apple platform bundles and system components through XPC or IPC mechanisms. Processes configuration updates and maintains state by reading and writing to system paths. Establishes outbound connections to Apple endpoints for data synchronization, telemetry, or service coordination. Handles 193 distinct operations across authentication, storage, and service management workflows without requiring direct user interaction.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 331.7 KB
UUID: 9B436186-797A-3976-B792-D4517F9A05E1
Analyzed: 2026-04-07T05:21:14Z
CDHash: 827f4e98f87c5ef865ec0c9c813648577dfa3d3c0ddfaa1b3e78b2d28bff021d

Frameworks11

Foundation Kerberos OpenDirectory libEndpointSecuritySystem.dylib(weak)libManagedConfigurationFiles.dylib(weak)libbsm.0.dylib libcrypto.46.dylib libpam.2.dylib libresolv.9.dylib libz.1.dylib libSystem.B.dylib

Interesting Strings

Bundle IDs(9)

/AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/misc.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/sftp-client.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/sftp-common.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/sftp-usergroup.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/sftp.c

File Paths(9)

/AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/misc.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/sftp-client.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/sftp-common.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/sftp-usergroup.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/sftp.c

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

Endpoints(10)

HostnameOpenSSH-354.0.3

Hostnameopenssh.com

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

0

File Paths

9

Bundle IDs

9

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Coded9efd6e11befa4f48c74620b797090794cc4bb9d3453977b039dae6cc6251caf

Imports1984cc0c121b5c9200d85864edd6f3fbfb0ad0614c68198b349d0233a82bf65c

Frameworksf23114c2c58c78487879b82f97f2c6e3882992d6198ff8f21b1e35fa79f8ea9d

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Symbols1984cc0c121b5c9200d85864edd6f3fbfb0ad0614c68198b349d0233a82bf65c

Static Libraries0 / 193 functions identified

Functions(193)

0x100000a40sub_100000a40

0x100000fa4sub_100000fa4

0x1000010b0sub_1000010b0

0x1000010c4sub_1000010c4

0x1000010d4sub_1000010d4

0x10000116csub_10000116c

0x100001230sub_100001230

0x1000013a0sub_1000013a0

0x1000015bcsub_1000015bc

0x100001680sub_100001680

0x1000017d8sub_1000017d8

0x100001818sub_100001818

0x100001858sub_100001858

0x100001b28sub_100001b28

0x100001b88sub_100001b88

0x100002218sub_100002218

0x100002388sub_100002388

0x10000265csub_10000265c

0x10000294csub_10000294c

0x100002954sub_100002954

Imports147 symbols from 2 dylibs

libSystem.B.dylib143 libcrypto.46.dylib4

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

ssh-pkcs11-helper