sysadminctl
executablemacOS203.0 KBx86_64, arm64
Cryptographic key management — handles device encryption keys and certificate operations
Manages access to the device key bag for encryption key operations and interacts with the Keychain to store and retrieve cryptographic credentials and certificates. Implements code signing validation and Security framework extensions for cryptographic operations. Exposes two XPC services for other system components to request key management and certificate verification tasks. Accesses multiple network endpoints and file paths, suggesting integration with system security infrastructure for key provisioning or validation.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 203.0 KB
- UUID
- 94D04947-CBCC-384C-BF57-C2134106AB0A
- Analyzed
- 2026-04-07T05:21:11Z
- CDHash
- f1a7a6330bd728a96188421053f82ba50b8b691346b438c1c307da1bee556a79
Capabilities
KeychainDevice key bag (encryption keys)
/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBagSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySecuritySecurity framework extensions
/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundationFrameworks12
Entitlements10
com.apple.timedtrue
Interesting Strings
Bundle IDs(27)
File Paths(14)
/AppleInternal/Library/BuildRoots/4~B_wnugDjoddNSO38uwybs9lqEDvfVj8gYKsxeUo/Library/Caches/com.apple.xbs/Sources/Admin_sysadminctl/addremoveuser/main.m/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
1
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
2
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
14
Bundle IDs
27
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 26 functions identified
Functions(26)
0x100000d60sub_100000d60
0x100000eccsub_100000ecc
0x100000ffcsub_100000ffc
0x100002f18sub_100002f18
0x1000030a4sub_1000030a4
0x10000331csub_10000331c
0x100003728sub_100003728
0x100003874sub_100003874
0x1000038b8sub_1000038b8
0x100003a00sub_100003a00
0x100003aa4sub_100003aa4
0x100003d50sub_100003d50
0x100003eb8sub_100003eb8
0x100003ec0sub_100003ec0
0x100003ec8sub_100003ec8
0x100003ed0sub_100003ed0
0x100004094sub_100004094
0x100004118sub_100004118
0x100004188sub_100004188
0x10000420csub_10000420c
Imports94 symbols from 12 dylibs
Exports1
_mh_execute_header0x0