proactived
executablemacOS137.0 KBx86_64, arm64
System daemon — manages private storage and inter-process communication
Runs as an Apple-signed system service with access to private storage areas. Exposes an XPC service for inter-process communication with other system components. Communicates with multiple network endpoints and manages internal state across 25 functions. Interacts with 26 distinct bundle identifiers, suggesting coordination with various system services and applications.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 137.0 KB
- UUID
- 6C0AC51C-8EA5-3414-A9BF-A6B3B51FA55E
- Analyzed
- 2026-04-09T10:00:08Z
- CDHash
- 555f45a5c6d8f9f50ade2d85d4448ba7b440066a534423c1f27f54c417f3949b
Capabilities
StoragePrivate storage area access
com.apple.private.security.storage.DuetExpertCenter[object Object]StoragePrivate storage area access
com.apple.private.security.storage.proactivepredictions[object Object]Frameworks9
Interesting Strings
Bundle IDs(26)
File Paths(6)
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/EventKit.framework/Versions/A/EventKit/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/PrivateFrameworks/AppPredictionFoundation.framework/Versions/A/AppPredictionFoundation/System/Library/PrivateFrameworks/ProactiveBlendingLayer_macOS.framework/Versions/A/ProactiveBlendingLayer_macOS
Network Surface
Networking Frameworks
Endpoints(7)
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
2
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
6
Bundle IDs
26
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 25 functions identified
Functions(25)
0x100000d80-[PSXDaemon init]
0x100000e18-[PSXDaemon registerXPCActivity]
0x100000e1c-[PSXDaemon run]
0x100000e68sub_100000e68
0x1000011c0sub_1000011c0
0x1000011dcsub_1000011dc
0x1000011e8+[ATXProactiveAgentManager sharedInstance]
0x10000122csub_10000122c
0x1000012cc-[ATXProactiveAgentManager registerForLaunchEvents]
0x100001348sub_100001348
0x100001550sub_100001550
0x100001558sub_100001558
0x100001560-[ATXProactiveAgentManager modeClassifier]
0x100001568-[ATXProactiveAgentManager setModeClassifier:]
0x100001574-[ATXProactiveAgentManager modesLogHandle]
0x10000157c-[ATXProactiveAgentManager setModesLogHandle:]
0x100001588-[ATXProactiveAgentManager .cxx_destruct]
0x1000015ccsub_1000015cc
0x100001650sub_100001650
0x1000016c8sub_1000016c8
Imports52 symbols from 8 dylibs
Exports1
_mh_execute_header0x0