mdutil

executablemacOS309.0 KBx86_64, arm64

Storage management utility — manages private application data and caching

Manages private storage areas and file operations for applications on macOS. Handles data persistence, caching, and temporary file management within restricted storage boundaries. Communicates with 7 network endpoints and accesses 13 bundle identifiers, suggesting integration with multiple system services. Compiled for both x86_64 and ARM64 architectures and signed by Apple.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 309.0 KB
UUID: 4C6AC248-6F0D-3FCC-8BFF-4149FB73F371
Analyzed: 2026-04-07T05:21:16Z
CDHash: 14125192c682e755c15c604490f5ec3d98d444f4ed010075ee049cf2c8c77e94

Capabilities

StoragePrivate storage area access

com.apple.private.security.storage.spotlight [object Object]

Frameworks7

CoreServices CoreSpotlight Foundation MetadataUtilities libobjc.A.dylib libSystem.B.dylib CoreFoundation

Entitlements2

com.apple.private.corespotlight.internaltrue

com.apple.private.security.storage.spotlighttrue

Interesting Strings

Bundle IDs(13)

(com.apple.private.corespotlight.internal ,com.apple.private.security.storage.spotlight <key>com.apple.private.corespotlight.internal</key><key>com.apple.private.security.storage.spotlight</key>com.apple.mdutil

File Paths(17)

-P volume-path Dump the VolumeConfiguration.plist for the specified volume..Spotlight-V100/VolumeConfiguration.plist /.Spotlight-V100/VolumeConfiguration.plist /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(7)

HostnameSpotlight-2400.14.402

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

API Usage

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

1

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

0

File Paths

17

Bundle IDs

13

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code9386a419d7b2b5a231f2cca0651be5a59a2ce89d7a8b98f91781eee3087b9f63

Imports1ea721c82c92c8dd271cbcb900c4c69d90c43628c4bdf23e1004b09c12c0c433

Frameworksd76c29d3a934cfefce47216dc6906ae02b5081dd2db3f306c3782543294dd863

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements5108509c67dd8704b1c2c0bda1048a444709de398a29bf780575b1ef9927ceec

Symbols1ea721c82c92c8dd271cbcb900c4c69d90c43628c4bdf23e1004b09c12c0c433

Static Libraries0 / 341 functions identified

Functions(341)

0x100000b50sub_100000b50

0x100002524sub_100002524

0x100002634sub_100002634

0x10000284csub_10000284c

0x100002b28sub_100002b28

0x100002d80sub_100002d80

0x100002de0sub_100002de0

0x1000031f0sub_1000031f0

0x10000323csub_10000323c

0x100003330sub_100003330

0x100003340sub_100003340

0x10000334csub_10000334c

0x1000033c0sub_1000033c0

0x100003410sub_100003410

0x100003454sub_100003454

0x1000034b0sub_1000034b0

0x1000034c0sub_1000034c0

0x1000034ccsub_1000034cc

0x100003528sub_100003528

0x10000352csub_10000352c

Imports273 symbols from 7 dylibs

libSystem.B.dylib159 CoreFoundation68 CoreServices24 libobjc.A.dylib9 Foundation6

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

KernelEventAgent

jetsam_priority