rtcreportingd
executablemacOS1.4 MBx86_64, arm64
Security credential manager — handles certificate validation and cryptographic operations
Manages cryptographic operations and certificate validation for system security functions. Accesses Keychain to retrieve and manage stored credentials and keys. Establishes network connections using modern networking APIs to communicate with 13 distinct endpoints, likely for certificate verification, revocation checking, or security policy updates. Exposes 3 XPC services for other system components to request cryptographic operations or credential validation. Logs telemetry related to security operations and maintains references to multiple bundle identifiers and file paths used during certificate chain validation.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 14.0.0
- SDK
- 26.1.0
- File Size
- 1.4 MB
- UUID
- 293B5F9D-8DAE-3953-9D39-7B02B85520A2
- Analyzed
- 2026-04-09T10:02:08Z
- CDHash
- c943466592b3f0d18bb50b209c369bdf54c8ff1dfeec7bbf02b93fc9fdd649f0
Capabilities
NetworkModern networking framework (NWConnection)
/System/Library/Frameworks/Network.framework/Versions/A/NetworkSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySecurityCryptographic operations
/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKitFrameworks21
CrashReporterSupportlibz.1.dyliblibMobileGestalt.dylibAppSupportFoundationSecuritylibobjc.A.dyliblibSystem.B.dylibCoreFoundationCryptoKitNetworklibsqlite3.dyliblibswiftCore.dyliblibswiftCoreFoundation.dyliblibswiftDarwin.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftObjectiveC.dyliblibswiftXPC.dyliblibswift_Concurrency.dyliblibswiftos.dylib
Entitlements5
Interesting Strings
Bundle IDs(24)
File Paths(11)
/Library/Caches/com.apple.rtcreporting/eventcache//Library/Caches/com.apple.rtcreporting/storebags//System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
telemetry(10)
Network Surface
Networking Frameworks
Endpoints(13)
Hostnamepancake.apple.com
Ipv60:8:16
Hostnamewww.apple.com
Hostnamemacosx26.1.internal
Hostnamecrl.apple.com
API Usage
DNA Capability Vector
Location
0
Keychain
0
Network
1
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
2
System
0
Behavioral Profile
URL Endpoints
8
Telemetry Strings
10
File Paths
11
Bundle IDs
24
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 2920 functions identified
Functions(2920)
0x100001658sub_100001658
0x10000172csub_10000172c
0x100001730sub_100001730
0x10000173csub_10000173c
0x100001740sub_100001740
0x100001744sub_100001744
0x100001748sub_100001748
0x100001754sub_100001754
0x100001758sub_100001758
0x10000175csub_10000175c
0x100001760sub_100001760
0x100001764sub_100001764
0x1000017dcsub_1000017dc
0x1000017ecsub_1000017ec
0x100001864sub_100001864
0x100001874sub_100001874
0x100001884sub_100001884
0x1000018acsub_1000018ac
0x1000018f4sub_1000018f4
0x100001900sub_100001900
Imports756 symbols from 18 dylibs
Exports1
_mh_execute_header0x0