{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968960":[{"is_tail_call":false,"symbol":"__stack_chk_fail","target_va":4294969064}]},"data_xrefs":{"by_data":{"4294969168":[4294968960],"4294983680":[4294968960],"4294983696":[4294968960]},"by_function":{"4294968960":[{"data_va":4294983696,"insn_va":4294968980,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968984,"kind":"Global","value":null},{"data_va":4294969168,"insn_va":4294968996,"kind":"CString","value":"LaunchDaemon"},{"data_va":4294983696,"insn_va":4294969012,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969016,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294968960":"sub_100000680"}},"capabilities":[{"category":"Storage","description":"Private storage area access","source":"com.apple.private.security.storage.AppBundles","value":{"Bool":true}},{"category":"Storage","description":"Private storage area access","source":"com.apple.private.security.storage.MobileContainerManager","value":{"Bool":true}},{"category":"Storage","description":"Private storage area access","source":"com.apple.private.security.storage.containers","value":{"Bool":true}}],"code_signature":{"code_directory":{"cdhash":"0c6559f3de7b100abfd9736935dfee6009d9dda0cdd43229884822d02d17c067","flag_names":["CS_REQUIRE_LV","CS_RUNTIME"],"flags":73728,"hash_type":2,"identifier":"com.apple.containermanagerd_system","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"5abd0997d8cd43fd8018e5d6d707d3f132a3d09043aabe144b8700f8b580e87c","frameworkhash":"8c6ce0b058cf8f43dc344c1b76913d01b81963769993ec7c0cdb8619b3bc9afc","imphash":"a14465354febac6605f4bbbf88030dbe28cdd47fe604630295ca1648c12a23c8","sha256_text":"42d60236cc91ec7dfc4bec927adb2f7254202777cf431c5e6a5150d45728c4da","symbolhash":"a14465354febac6605f4bbbf88030dbe28cdd47fe604630295ca1648c12a23c8"},"sets":{"apis_called":["__stack_chk_fail"],"bundle_ids":["\"com.apple.containermanagerd_system","%com.apple.rootless.datavault.metadata",",com.apple.private.vfs.allow-low-space-writes","-com.apple.private.security.storage.AppBundles","-com.apple.private.security.storage.containers","1com.apple.private.security.appcontainer-authority","9com.apple.private.security.storage.MobileContainerManager","<key>com.apple.private.memorystatus</key>","<key>com.apple.private.security.appcontainer-authority</key>","<key>com.apple.private.security.storage.AppBundles</key>","<key>com.apple.private.security.storage.MobileContainerManager</key>","<key>com.apple.private.security.storage.containers</key>","<key>com.apple.private.vfs.allow-low-space-writes</key>","<key>com.apple.rootless.datavault.metadata</key>","com.apple.containermanagerd_system","com.apple.private.memorystatus"],"cpp_classes":[],"entitlements":["com.apple.private.memorystatus","com.apple.private.security.appcontainer-authority","com.apple.private.security.storage.AppBundles","com.apple.private.security.storage.MobileContainerManager","com.apple.private.security.storage.containers","com.apple.private.vfs.allow-low-space-writes","com.apple.rootless.datavault.metadata"],"frameworks":["ContainerManagerCommon","ContainerManagerSystem","ContainerManagerUser","libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":["ContainerManagerCommon","ContainerManagerSystem","ContainerManagerUser"],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":16,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":3,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":7,"file_paths":3,"frameworks_private":3,"frameworks_total":4,"iokit_constants":0,"library_functions":0,"nlist_functions":1,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":7,"size_log2":16.64047,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.00086139387,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{"com.apple.private.memorystatus":{"Bool":true},"com.apple.private.security.appcontainer-authority":{"Bool":true},"com.apple.private.security.storage.AppBundles":{"Bool":true},"com.apple.private.security.storage.MobileContainerManager":{"Bool":true},"com.apple.private.security.storage.containers":{"Bool":true},"com.apple.private.vfs.allow-low-space-writes":{"Bool":true},"com.apple.rootless.datavault.metadata":{"Bool":true}},"raw_plist":"<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>com.apple.private.memorystatus</key>\n\t<true/>\n\t<key>com.apple.private.security.appcontainer-authority</key>\n\t<true/>\n\t<key>com.apple.private.security.storage.AppBundles</key>\n\t<true/>\n\t<key>com.apple.private.security.storage.MobileContainerManager</key>\n\t<true/>\n\t<key>com.apple.private.security.storage.containers</key>\n\t<true/>\n\t<key>com.apple.private.vfs.allow-low-space-writes</key>\n\t<true/>\n\t<key>com.apple.rootless.datavault.metadata</key>\n\t<true/>\n</dict>\n</plist>\n"},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-09T09:45:23Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"0c6559f3de7b100abfd9736935dfee6009d9dda0cdd43229884822d02d17c067","file_modified":"2026-04-09T09:45:23Z","file_size":102160,"is_arm64e":true,"min_os":"26.1.0","name":"containermanagerd_system","platform":"macOS","sdk":"26.1.0","sha256":"2a7be28433d1ab3e164b1b25c87d83bf098ade72a3511cf2edd417abed645396","sha256_slice":"134d7786ef5a81d10fa085436e542fbb58f25b7805fb6a6b53773db8e6e857d2","source_version":"725.40.12.0.0","team_id":null,"uuid":"1292F251-6F50-3827-AFE6-43415392C2DC"},"frameworks":[{"is_private":true,"is_weak":false,"name":"/System/Library/PrivateFrameworks/ContainerManagerCommon.framework/Versions/A/ContainerManagerCommon"},{"is_private":true,"is_weak":false,"name":"/System/Library/PrivateFrameworks/ContainerManagerSystem.framework/Versions/A/ContainerManagerSystem"},{"is_private":true,"is_weak":false,"name":"/System/Library/PrivateFrameworks/ContainerManagerUser.framework/Versions/A/ContainerManagerUser"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":1,"imports":[{"address":0,"dylib":"/System/Library/PrivateFrameworks/ContainerManagerCommon.framework/Versions/A/ContainerManagerCommon","is_lazy":false,"is_weak":false,"name":"_containermanagerd_main"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_fail"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_guard"}],"interesting_strings":{"bundle_ids":["\"com.apple.containermanagerd_system","%com.apple.rootless.datavault.metadata",",com.apple.private.vfs.allow-low-space-writes","-com.apple.private.security.storage.AppBundles","-com.apple.private.security.storage.containers","1com.apple.private.security.appcontainer-authority","9com.apple.private.security.storage.MobileContainerManager","<key>com.apple.private.memorystatus</key>","<key>com.apple.private.security.appcontainer-authority</key>","<key>com.apple.private.security.storage.AppBundles</key>","<key>com.apple.private.security.storage.MobileContainerManager</key>","<key>com.apple.private.security.storage.containers</key>","<key>com.apple.private.vfs.allow-low-space-writes</key>","<key>com.apple.rootless.datavault.metadata</key>","com.apple.containermanagerd_system","com.apple.private.memorystatus"],"file_paths":["/System/Library/PrivateFrameworks/ContainerManagerCommon.framework/Versions/A/ContainerManagerCommon","/System/Library/PrivateFrameworks/ContainerManagerSystem.framework/Versions/A/ContainerManagerSystem","/System/Library/PrivateFrameworks/ContainerManagerUser.framework/Versions/A/ContainerManagerUser"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":1,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Hostname","value":"MobileContainerManager-725.40.12"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1664,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_stubs","offset":1752,"protection":"r-x","segment":"__TEXT","size":32},{"name":"__const","offset":1784,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__cstring","offset":1872,"protection":"r-x","segment":"__TEXT","size":13},{"name":"__unwind_info","offset":1888,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":16},{"name":"__got","offset":16400,"protection":"rw-","segment":"__DATA_CONST","size":8}],"summary":"Apple-signed system executable that accesses private storage areas and communicates with remote endpoints. Operates with entitlements for controlled file system access and uses private Apple frameworks for internal functionality. Handles bundle identifiers and file paths during execution. Exposes network connectivity to seven endpoints, suggesting integration with system services or Apple infrastructure. Runs as a background service with no direct user interface.","swift_metadata":null,"title":"System service — manages private storage access and network communication","total_strings":132,"xpc_services":[]}