softwareupdate

executablemacOS322.3 KBx86_64, arm64

Code signing and keychain credential manager — validates and manages cryptographic identities

Manages code signing certificates, private keys, and keychain credentials for macOS security operations. Validates code signatures on executables and frameworks, verifying developer identity and code integrity. Accesses the system keychain to store and retrieve certificates and signing keys. Exposes XPC services to other system components and applications requiring cryptographic identity validation or credential management. Communicates with Apple endpoints for certificate verification and revocation checking.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 322.3 KB
UUID: ADF051BD-06C1-3001-88F9-E22CC8BC6313
Analyzed: 2026-04-07T05:21:11Z
CDHash: caef405911b8cb8b08f5bf15aca93917c3096131fab3be5974a5e9a286fd65ae

Capabilities

SecurityKeychain, certificates, code signing

/System/Library/Frameworks/Security.framework/Versions/A/Security

Frameworks17

Foundation OSUpdate libIASUnifiedProgress.dylib libIASAuthReboot.dylib Security SoftwareUpdateCoreSupport IASUtilities SoftwareUpdate PackageKit OAHSoftwareUpdate BridgeOSInstall libobjc.A.dylib libSystem.B.dylib AppKit CoreFoundation CoreServices BridgeOSSoftwareUpdate

Entitlements19

com.apple.keystore.filevaulttrue

com.apple.private.AuthorizationServices

system.install.apple-software system.install.apple-software.standard-user com.apple.SoftwareUpdate.modify-settings com.apple.installassistant.requestpassword

com.apple.private.CoreAuthentication.BackgroundUItrue

com.apple.private.LocalAuthentication.ContextData.ExtendedMaxAgetrue

com.apple.private.OAHSoftwareUpdatetrue

com.apple.private.SoftwareUpdate.Clienttrue

com.apple.private.SoftwareUpdateNotificationManagerServicetrue

com.apple.private.applecredentialmanager.allowtrue

com.apple.private.iokit.assertonlidclosetrue

com.apple.private.logout.forcecontinuetrue

com.apple.private.opendirectoryd.ownership.readtrue

com.apple.private.securityd.stashtrue

com.apple.private.softwareupdate.disablescantrue

com.apple.private.softwareupdate.postlogoutinstalltrue

com.apple.private.softwareupdate.preferencestrue

com.apple.private.softwareupdated.OSUpdatetrue

com.apple.private.suhelperdtrue

com.apple.private.system_installd.connectiontrue

com.apple.softwareupdated.OSUpdatetrue

Interesting Strings

Bundle IDs(47)

!com.apple.private.securityd.stash "com.apple.softwareupdated.OSUpdate #com.apple.private.OAHSoftwareUpdate &com.apple.private.logout.forcecontinue 'com.apple.private.AuthorizationServices0

File Paths(14)

/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/Frameworks/Security.framework/Versions/A/Security

telemetry(1)

updateTelemetryOverridesWithMetrics:

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">I have read and agree to the terms of the software license agreement. A list of Apple SLAs may be found here: https://www.apple.com/legal/sla/https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(10)

Hostnamesystem.install.apple-software.standard-user

Hostnamesystem.install.apple-software

Urlhttps://www.apple.com/legal/sla/

Hostnamewww.apple.com

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

1

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

1

File Paths

14

Bundle IDs

47

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code68b7187f8a47c323b8d9772d7b6116ebc8fcaf7dae0bb8f6fadc39bea385be75

Importsd30d4f2f0df90cfafa0c731f101881620fd851469084e9696e7c7589be885a56

Frameworks9d94db4cb0fad076f1aaa3df68b3d04c1a9550745e014352668390fc74034fb3

Classese8fee71ea8cd054b6658744061d60fa36308e7d5c07b2373825aebc9b99a7055

Entitlementsfed8dd02887c5f05b03bf68098d266414a2771eabac6ddb42487230a28916e77

Symbolsd43469dc900ac46d9e2b3c864289e6d2fe7eb6ac015d80f9bfcffff8c6f3f7af

Static Libraries0 / 251 functions identified

Functions(251)

0x1000011f8sub_1000011f8

0x100001ef0sub_100001ef0

0x100001f84sub_100001f84

0x100001fe0sub_100001fe0

0x100002038sub_100002038

0x100002088sub_100002088

0x1000020ccsub_1000020cc

0x1000022e4sub_1000022e4

0x100002354sub_100002354

0x1000023b0sub_1000023b0

0x10000263csub_10000263c

0x10000264csub_10000264c

0x10000265csub_10000265c

0x100002668sub_100002668

0x100002670sub_100002670

0x10000267csub_10000267c

0x1000026d0sub_1000026d0

0x1000026d8sub_1000026d8

0x1000026f0sub_1000026f0

0x100002798sub_100002798

Imports166 symbols from 14 dylibs

libSystem.B.dylib65 OSUpdate22 libobjc.A.dylib20 CoreFoundation17 Foundation12

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

startupdiskhelper

findmydevice-user-agent

mobile_obliterator

uarpassetmanagerd