syspolicy_check

executablemacOS469.8 KBx86_64, arm64

MDM profile manager — processes and enforces device management configurations

Applies Mobile Device Management profiles to configure system policies, security settings, and restrictions. Reads MDM configuration data from the system, validates profiles using code signing verification, and stores sensitive configuration in the Keychain. Communicates with 33 network endpoints, likely for MDM server interactions and policy updates. Sends telemetry data about configuration states and enforcement actions.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 469.8 KB
UUID: 6D3A7AF4-4240-370F-9DF4-3635B5835DFB
Analyzed: 2026-04-07T05:21:17Z
CDHash: 285077143d48b7dc2d7dba51dc31669f530e93836d8ce7aeed82f409a204bb72

Capabilities

HardwareDirect hardware/driver communication

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

SecurityKeychain, certificates, code signing

/System/Library/Frameworks/Security.framework/Versions/A/Security

SystemMDM configuration profiles

/System/Library/PrivateFrameworks/ConfigurationProfiles.framework/Versions/A/ConfigurationProfiles

Entitlements1

com.apple.private.xprotecttrue

Interesting Strings

Bundle IDs(10)

<key>com.apple.private.xprotect</key>com.apple.private.tcc.allow com.apple.private.xprotect com.apple.syspolicy com.apple.syspolicy.downloads

File Paths(13)

%@/Contents/Info.plist /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

telemetry(1)

Check if an application is ready to be submitted for notarization.

URLs & Endpoints(18)

https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues https://developer.apple.com/forums/thread/706442 $http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0

Network Surface

Networking Frameworks

CoreFoundation Foundation libswiftCoreFoundation.dylib libswift_DarwinFoundation2.dylib

Endpoints(33)

Hostnamesyspolicyd-726.40.17

Hostnamedeveloper.apple.com

Urlhttps://developer.apple.com/documentation/technotes/tn3125-inside-code-signing-provisioning-profiles

Urlhttps://developer.apple.com/library/archive/documentation/CoreFoundation/Conceptual/CFBundles/BundleTypes/BundleTypes.html#//apple_ref/doc/uid/10000123i-CH101-SW1

Urlhttps://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution.

Urlhttps://developer.apple.com/library/archive/technotes/tn2206/_index.html#//apple_ref/doc/uid/DTS40007919

Urlhttps://help.apple.com/xcode/mac/current/#/dev154b28f09

Hostnamehelp.apple.com

Urlhttps://developer.apple.com/forums/thread/706442

Urlhttps://developer.apple.com/forums/thread/706437

Urlhttps://developer.apple.com/library/archive/technotes/tn2206/_index.html

Hostnamefield.1.2.840.113635.100.6.1.9

Hostnamefield.1.2.840.113635.100.6.2.6

Hostnamefield.1.2.840.113635.100.6.1.13

Hostnametimestamp.1.2.840.113635.100.6.1.33

Hostnamefield.1.2.840.113635.100.6.1.9.1

Hostnamefield.1.2.840.113635.100.6.2.1

Hostnamefield.1.2.840.113635.100.6.1.25.1

Hostnamefield.1.2.840.113635.100.6.1.25.2

Urlhttps://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution

Urlhttps://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

API Usage

Methods

-[PolicyScanTarget initWithURL:]

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

1

IPC

0

Analytics

0

Security

1

System

1

Behavioral Profile

URL Endpoints

18

Telemetry Strings

1

File Paths

13

Bundle IDs

10

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Codea9c5e0e6fb0a4c4a34fea84f754fff80b83468994f30c334079ed28c39f17883

Imports44fc67fd75a7005b1ee79128055e2f5f94f205474c432d813bb4759b56e68626

Frameworks69e3292e4951eeca49e61121785ba3a45ca4e17479cb9400562790e19ac00c99

Classes0fcc937754347269581eda414acf5229db6cd710673654060d33eb6d7b750e0e

Entitlements9a57c8098fa1e548abe9e0c9e986348465ac956210a7a453c99f31e5acc265cc

Symbols3f96957d392ff06f8b28b49245495a8cacbcfb5c9a2435b956aabe2e14ab3cdd

Static Libraries0 / 467 functions identified

Functions(467)

0x1000019f0sub_1000019f0

0x100001a6csub_100001a6c

0x100001a88sub_100001a88

0x1000021e0sub_1000021e0

0x1000023dcsub_1000023dc

0x100002864sub_100002864

0x100002928sub_100002928

0x100002d24sub_100002d24

0x100002d3csub_100002d3c

0x100002d4csub_100002d4c

0x100002d58sub_100002d58

0x100002de8sub_100002de8

0x100002e2csub_100002e2c

0x100002eb4sub_100002eb4

0x100003150sub_100003150

0x1000031bcsub_1000031bc

0x100003234sub_100003234

0x1000038a8sub_1000038a8

0x100003960sub_100003960

0x100003968sub_100003968

Imports368 symbols from 14 dylibs

libswiftCore.dylib117 libSystem.B.dylib51 ArgumentParserInternal47 CoreFoundation36 Foundation34

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

GamePolicyAgent

enhancedloggingd