chkpasswd

executablemacOS133.1 KBx86_64, arm64

System service — manages Apple service communications and telemetry

Exposes an XPC service for inter-process communication with system components. Initiates network connections to Apple endpoints for service requests and telemetry transmission. Processes bundle identifiers and file paths to track application activity and system state. Runs as a signed system daemon with minimal public framework dependencies, operating silently without user interaction or notification.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 133.1 KB
UUID: 90586B95-C6A2-30F2-84FC-821A968765B7
Analyzed: 2026-04-09T09:44:44Z
CDHash: c3e72b1a572f2e7d036a1ab581745f4a4cecc96f252bd75a5f57e3a2fc500aad

Frameworks4

libpam.2.dylib CoreFoundation OpenDirectory libSystem.B.dylib

Interesting Strings

Bundle IDs(1)

com.apple.chkpasswd

File Paths(2)

/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

Endpoints(6)

Urlhttp://www.apple.com/appleca/root.crl0

Hostnamewww.apple.com

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

0

File Paths

2

Bundle IDs

1

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code7a1d0b6668c9175d75c2aff0803a57d8d050e07097a012f9c14b241a43c4edf9

Imports2de70bca8f368b47785bae4a66c0a2c4955b9b7b400d08979e0657c1bbd3a439

Frameworks375f9397844d37eae8cf4c4a0b1ba62e83e1b50362003b1a1633a4bfa0e3f1b2

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Symbols2de70bca8f368b47785bae4a66c0a2c4955b9b7b400d08979e0657c1bbd3a439

Static Libraries0 / 14 functions identified

Functions(14)

0x1000006e8sub_1000006e8

0x100000810sub_100000810

0x100000980sub_100000980

0x100000c8csub_100000c8c

0x100000de4sub_100000de4

0x100000f00sub_100000f00

0x100000fbcsub_100000fbc

0x1000011a8sub_1000011a8

0x1000012d8sub_1000012d8

0x100001328sub_100001328

0x100001400sub_100001400

0x100001458sub_100001458

0x100001474sub_100001474

0x100001574sub_100001574

Imports53 symbols from 4 dylibs

libSystem.B.dylib37 libpam.2.dylib9 OpenDirectory6 CoreFoundation1

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable