{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968960":[{"is_tail_call":false,"symbol":"__stack_chk_fail","target_va":4294969064}]},"data_xrefs":{"by_data":{"4294969168":[4294968960],"4294983680":[4294968960],"4294983696":[4294968960]},"by_function":{"4294968960":[{"data_va":4294983696,"insn_va":4294968980,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968984,"kind":"Global","value":null},{"data_va":4294969168,"insn_va":4294968996,"kind":"CString","value":"LaunchAgent"},{"data_va":4294983696,"insn_va":4294969012,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969016,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294968960":"sub_100000680"}},"capabilities":[{"category":"Storage","description":"Private storage area access","source":"com.apple.private.security.storage.AppBundles","value":{"Bool":true}},{"category":"Storage","description":"Private storage area access","source":"com.apple.private.security.storage.DaemonContainers","value":{"Bool":true}},{"category":"Storage","description":"Private storage area access","source":"com.apple.private.security.storage.Mail","value":{"Bool":true}},{"category":"Storage","description":"Private storage area access","source":"com.apple.private.security.storage.MobileContainerManager","value":{"Bool":true}},{"category":"Storage","description":"Private storage area access","source":"com.apple.private.security.storage.containers","value":{"Bool":true}},{"category":"Storage","description":"Private storage area access","source":"com.apple.private.security.storage.locationd","value":{"Bool":true}}],"code_signature":{"code_directory":{"cdhash":"1305699409649b11448b132d976319a8d6cf18bb56b37f01d718b1262175c7e1","flag_names":["CS_REQUIRE_LV","CS_RUNTIME"],"flags":73728,"hash_type":2,"identifier":"com.apple.containermanagerd","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"05bcb8fc018fe31986e3e10abf09e308cef438f3e44b9e736f443f66e87f8e60","frameworkhash":"8c6ce0b058cf8f43dc344c1b76913d01b81963769993ec7c0cdb8619b3bc9afc","imphash":"a14465354febac6605f4bbbf88030dbe28cdd47fe604630295ca1648c12a23c8","sha256_text":"42d60236cc91ec7dfc4bec927adb2f7254202777cf431c5e6a5150d45728c4da","symbolhash":"a14465354febac6605f4bbbf88030dbe28cdd47fe604630295ca1648c12a23c8"},"sets":{"apis_called":["__stack_chk_fail"],"bundle_ids":["$com.apple.usermanagerd.persona.fetch","%com.apple.rootless.datavault.metadata","'com.apple.private.security.storage.Mail","'com.apple.runningboard.terminateprocess","'com.apple.usermanagerd.persona.observer","*com.apple.usermanagerd.persona.fetchbundle","+com.apple.security.enterprise-volume-access",",com.apple.private.security.storage.locationd",",com.apple.private.vfs.allow-low-space-writes","-com.apple.private.security.storage.AppBundles","-com.apple.private.security.storage.containers",".com.apple.private.MobileContainerManager.proxy","/com.apple.private.MobileContainerManager.repair","1com.apple.private.security.appcontainer-authority","3com.apple.private.security.storage.DaemonContainers","4com.apple.usermanagerd.persona.grantSandboxExtension","9com.apple.private.security.storage.MobileContainerManager","<key>com.apple.mkb.usersession.info</key>","<key>com.apple.private.MobileContainerManager.proxy</key>","<key>com.apple.private.MobileContainerManager.repair</key>","<key>com.apple.private.memorystatus</key>","<key>com.apple.private.security.appcontainer-authority</key>","<key>com.apple.private.security.storage.AppBundles</key>","<key>com.apple.private.security.storage.DaemonContainers</key>","<key>com.apple.private.security.storage.Mail</key>","<key>com.apple.private.security.storage.MobileContainerManager</key>","<key>com.apple.private.security.storage.containers</key>","<key>com.apple.private.security.storage.locationd</key>","<key>com.apple.private.vfs.allow-low-space-writes</key>","<key>com.apple.rootless.datavault.metadata</key>","<key>com.apple.runningboard.terminateprocess</key>","<key>com.apple.security.enterprise-volume-access</key>","<key>com.apple.usermanagerd.persona.fetch</key>","<key>com.apple.usermanagerd.persona.fetchbundle</key>","<key>com.apple.usermanagerd.persona.grantSandboxExtension</key>","<key>com.apple.usermanagerd.persona.observer</key>","com.apple.containermanagerd","com.apple.mkb.usersession.info","com.apple.private.memorystatus"],"cpp_classes":[],"entitlements":["com.apple.mkb.usersession.info","com.apple.private.MobileContainerManager.proxy","com.apple.private.MobileContainerManager.repair","com.apple.private.memorystatus","com.apple.private.security.appcontainer-authority","com.apple.private.security.storage.AppBundles","com.apple.private.security.storage.DaemonContainers","com.apple.private.security.storage.Mail","com.apple.private.security.storage.MobileContainerManager","com.apple.private.security.storage.containers","com.apple.private.security.storage.locationd","com.apple.private.vfs.allow-low-space-writes","com.apple.rootless.datavault.metadata","com.apple.runningboard.terminateprocess","com.apple.security.enterprise-volume-access","com.apple.usermanagerd.persona.fetch","com.apple.usermanagerd.persona.fetchbundle","com.apple.usermanagerd.persona.grantSandboxExtension","com.apple.usermanagerd.persona.observer"],"frameworks":["ContainerManagerCommon","ContainerManagerSystem","ContainerManagerUser","libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":["ContainerManagerCommon","ContainerManagerSystem","ContainerManagerUser"],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":["com.apple.containermanagerd"]},"vector":{"bundle_ids":39,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":6,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":19,"file_paths":3,"frameworks_private":3,"frameworks_total":4,"iokit_constants":0,"library_functions":0,"nlist_functions":1,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":7,"size_log2":16.659327,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.0008502087,"url_endpoints":4,"xpc_provides":1}},"dwarf_metadata":null,"entitlements":{"entries":{"com.apple.mkb.usersession.info":{"Bool":true},"com.apple.private.MobileContainerManager.proxy":{"Bool":true},"com.apple.private.MobileContainerManager.repair":{"Bool":true},"com.apple.private.memorystatus":{"Bool":true},"com.apple.private.security.appcontainer-authority":{"Bool":true},"com.apple.private.security.storage.AppBundles":{"Bool":true},"com.apple.private.security.storage.DaemonContainers":{"Bool":true},"com.apple.private.security.storage.Mail":{"Bool":true},"com.apple.private.security.storage.MobileContainerManager":{"Bool":true},"com.apple.private.security.storage.containers":{"Bool":true},"com.apple.private.security.storage.locationd":{"Bool":true},"com.apple.private.vfs.allow-low-space-writes":{"Bool":true},"com.apple.rootless.datavault.metadata":{"Bool":true},"com.apple.runningboard.terminateprocess":{"Bool":true},"com.apple.security.enterprise-volume-access":{"Bool":true},"com.apple.usermanagerd.persona.fetch":{"Bool":true},"com.apple.usermanagerd.persona.fetchbundle":{"Bool":true},"com.apple.usermanagerd.persona.grantSandboxExtension":{"Bool":true},"com.apple.usermanagerd.persona.observer":{"Bool":true}},"raw_plist":"<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>com.apple.mkb.usersession.info</key>\n\t<true/>\n\t<key>com.apple.private.MobileContainerManager.proxy</key>\n\t<true/>\n\t<key>com.apple.private.MobileContainerManager.repair</key>\n\t<true/>\n\t<key>com.apple.private.memorystatus</key>\n\t<true/>\n\t<key>com.apple.private.security.appcontainer-authority</key>\n\t<true/>\n\t<key>com.apple.private.security.storage.AppBundles</key>\n\t<true/>\n\t<key>com.apple.private.security.storage.DaemonContainers</key>\n\t<true/>\n\t<key>com.apple.private.security.storage.Mail</key>\n\t<true/>\n\t<key>com.apple.private.security.storage.MobileContainerManager</key>\n\t<true/>\n\t<key>com.apple.private.security.storage.containers</key>\n\t<true/>\n\t<key>com.apple.private.security.storage.locationd</key>\n\t<true/>\n\t<key>com.apple.private.vfs.allow-low-space-writes</key>\n\t<true/>\n\t<key>com.apple.rootless.datavault.metadata</key>\n\t<true/>\n\t<key>com.apple.runningboard.terminateprocess</key>\n\t<true/>\n\t<key>com.apple.security.enterprise-volume-access</key>\n\t<true/>\n\t<key>com.apple.usermanagerd.persona.fetch</key>\n\t<true/>\n\t<key>com.apple.usermanagerd.persona.fetchbundle</key>\n\t<true/>\n\t<key>com.apple.usermanagerd.persona.grantSandboxExtension</key>\n\t<true/>\n\t<key>com.apple.usermanagerd.persona.observer</key>\n\t<true/>\n</dict>\n</plist>\n"},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-09T09:45:19Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"1305699409649b11448b132d976319a8d6cf18bb56b37f01d718b1262175c7e1","file_modified":"2026-04-09T09:45:19Z","file_size":103504,"is_arm64e":true,"min_os":"26.1.0","name":"containermanagerd","platform":"macOS","sdk":"26.1.0","sha256":"93662d1a669d053ae86ccbbf33b7eed9d25764c7e2e6c8e7229b3dccb4ac0384","sha256_slice":"6255eaa896ffc4cc7cd7f3c034cae80c8eaae25a637f34f76de8e696e85ef0f3","source_version":"725.40.12.0.0","team_id":null,"uuid":"CCF1F995-FA57-3635-A6B1-077E58D167F6"},"frameworks":[{"is_private":true,"is_weak":false,"name":"/System/Library/PrivateFrameworks/ContainerManagerCommon.framework/Versions/A/ContainerManagerCommon"},{"is_private":true,"is_weak":false,"name":"/System/Library/PrivateFrameworks/ContainerManagerSystem.framework/Versions/A/ContainerManagerSystem"},{"is_private":true,"is_weak":false,"name":"/System/Library/PrivateFrameworks/ContainerManagerUser.framework/Versions/A/ContainerManagerUser"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":1,"imports":[{"address":0,"dylib":"/System/Library/PrivateFrameworks/ContainerManagerCommon.framework/Versions/A/ContainerManagerCommon","is_lazy":false,"is_weak":false,"name":"_containermanagerd_main"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_fail"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_guard"}],"interesting_strings":{"bundle_ids":["$com.apple.usermanagerd.persona.fetch","%com.apple.rootless.datavault.metadata","'com.apple.private.security.storage.Mail","'com.apple.runningboard.terminateprocess","'com.apple.usermanagerd.persona.observer","*com.apple.usermanagerd.persona.fetchbundle","+com.apple.security.enterprise-volume-access",",com.apple.private.security.storage.locationd",",com.apple.private.vfs.allow-low-space-writes","-com.apple.private.security.storage.AppBundles","-com.apple.private.security.storage.containers",".com.apple.private.MobileContainerManager.proxy","/com.apple.private.MobileContainerManager.repair","1com.apple.private.security.appcontainer-authority","3com.apple.private.security.storage.DaemonContainers","4com.apple.usermanagerd.persona.grantSandboxExtension","9com.apple.private.security.storage.MobileContainerManager","<key>com.apple.mkb.usersession.info</key>","<key>com.apple.private.MobileContainerManager.proxy</key>","<key>com.apple.private.MobileContainerManager.repair</key>","<key>com.apple.private.memorystatus</key>","<key>com.apple.private.security.appcontainer-authority</key>","<key>com.apple.private.security.storage.AppBundles</key>","<key>com.apple.private.security.storage.DaemonContainers</key>","<key>com.apple.private.security.storage.Mail</key>","<key>com.apple.private.security.storage.MobileContainerManager</key>","<key>com.apple.private.security.storage.containers</key>","<key>com.apple.private.security.storage.locationd</key>","<key>com.apple.private.vfs.allow-low-space-writes</key>","<key>com.apple.rootless.datavault.metadata</key>","<key>com.apple.runningboard.terminateprocess</key>","<key>com.apple.security.enterprise-volume-access</key>","<key>com.apple.usermanagerd.persona.fetch</key>","<key>com.apple.usermanagerd.persona.fetchbundle</key>","<key>com.apple.usermanagerd.persona.grantSandboxExtension</key>","<key>com.apple.usermanagerd.persona.observer</key>","com.apple.containermanagerd","com.apple.mkb.usersession.info","com.apple.private.memorystatus"],"file_paths":["/System/Library/PrivateFrameworks/ContainerManagerCommon.framework/Versions/A/ContainerManagerCommon","/System/Library/PrivateFrameworks/ContainerManagerSystem.framework/Versions/A/ContainerManagerSystem","/System/Library/PrivateFrameworks/ContainerManagerUser.framework/Versions/A/ContainerManagerUser"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":1,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Hostname","value":"MobileContainerManager-725.40.12"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1664,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_stubs","offset":1752,"protection":"r-x","segment":"__TEXT","size":32},{"name":"__const","offset":1784,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__cstring","offset":1872,"protection":"r-x","segment":"__TEXT","size":12},{"name":"__unwind_info","offset":1884,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":16},{"name":"__got","offset":16400,"protection":"rw-","segment":"__DATA_CONST","size":8}],"summary":"Runs as a system service with exclusive access to private storage areas for configuration or state management. Exposes an XPC service endpoint for inter-process communication with other system components and applications. Makes network connections to 7 endpoints, likely for service coordination, telemetry, or data synchronization. Holds 19 entitlements governing resource access and sandboxed operations. References multiple bundle identifiers suggesting integration with other system services.","swift_metadata":null,"title":"Service daemon — manages private storage and system service coordination","total_strings":168,"xpc_services":["com.apple.containermanagerd"]}