csfdiagnose
executablemacOS397.1 KBx86_64, arm64
System service manager — handles inter-process communication and network operations
Manages communication between system processes through Mach exception services, allowing it to access additional inter-process messaging capabilities. Establishes outgoing network connections to multiple endpoints for data transmission or service communication. Exposes four XPC services to enable other system components and applications to request functionality or exchange information. Collects telemetry data and references multiple bundle identifiers, suggesting coordination with other Apple system services. Runs with Apple code signature and elevated privileges typical of core system daemons.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 397.1 KB
- UUID
- FD5291FB-241C-35E5-A222-23350FBC264F
- Analyzed
- 2026-04-07T05:21:17Z
- CDHash
- 4fe14b5ce7a6d13e54c5ee46db44d8e9692605870b87f0006725a1ab89a59cf3
Capabilities
IpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-nameFrameworks23
CloudSubscriptionFeaturesFoundationlibobjc.A.dyliblibSystem.B.dylibAccountsCoreFoundationArgumentParserInternallibswiftAccelerate.dylib(weak)libswiftCompression.dylib(weak)libswiftCore.dyliblibswiftCoreFoundation.dylib(weak)libswiftDispatch.dylib(weak)libswiftIOKit.dylib(weak)libswiftMetal.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dylib(weak)libswiftQuartzCore.dylib(weak)libswiftUniformTypeIdentifiers.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswiftos.dylib(weak)libswiftsimd.dylib(weak)
Entitlements16
com.apple.generativeexperiences.availabilityService.secureWriteCloudSubscriptionFeaturesAvailabilitytrue
com.apple.security.exception.shared-preference.read-write
com.apple.icloud.gmkCFPreferencesAnyApplicationcom.apple.cloud.quotacom.apple.mobileslideshowcom.apple.CloudSubscriptionFeaturescom.apple.CloudSubscriptionFeatures.cachecom.apple.CloudSubscriptionFeatures.diagnosticcom.apple.CloudSubscriptionFeatures.geoCachecom.apple.CloudSubscriptionFeatures.ticket.cachecom.apple.CloudSubscriptionFeatures.gm.bypasscom.apple.CloudSubscriptionFeatures.followup.engagementcom.apple.CloudSubscriptionFeatures.optIn
Interesting Strings
Bundle IDs(76)
File Paths(5)
/System/Library/Frameworks/Accounts.framework/Versions/A/Accounts/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/PrivateFrameworks/ArgumentParserInternal.framework/Versions/A/ArgumentParserInternal/System/Library/PrivateFrameworks/CloudSubscriptionFeatures.framework/Versions/A/CloudSubscriptionFeatures
telemetry(22)
Network Surfaceentitled
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
1
Storage
0
Hardware
0
IPC
1
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
22
File Paths
5
Bundle IDs
76
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 449 functions identified
Functions(449)
0x100001248sub_100001248
0x100001284sub_100001284
0x1000012dcsub_1000012dc
0x1000012e8sub_1000012e8
0x1000012fcsub_1000012fc
0x100001310sub_100001310
0x100001324sub_100001324
0x100001338sub_100001338
0x10000134csub_10000134c
0x100001554sub_100001554
0x100001558sub_100001558
0x1000015c8sub_1000015c8
0x100001660sub_100001660
0x1000016d0sub_1000016d0
0x100001714sub_100001714
0x100001728sub_100001728
0x100001870sub_100001870
0x1000018b8sub_1000018b8
0x1000018ccsub_1000018cc
0x100001a04sub_100001a04
Imports298 symbols from 9 dylibs
Exports1
_mh_execute_header0x0