bputil

executablemacOS192.5 KBx86_64, arm64

System boot configuration utility — manages firmware settings and authentication

Modifies system NVRAM variables that control macOS boot behavior, firmware options, and hardware configuration. Authenticates operations through Touch ID or Face ID to gate privileged changes. Communicates with 7 network endpoints, likely for firmware validation or telemetry. Interfaces with 28 bundle identifiers across the system, indicating coordination with multiple system services and applications that depend on boot-level settings.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 192.5 KB
UUID: 02146AF4-FB4C-30B3-9AC4-18823DF98BB7
Analyzed: 2026-04-07T05:21:12Z
CDHash: 33562a3bcaf8d0ad399b938ac9a430555f31e1214ee7eb2d9a1def82db0fabaf

Capabilities

StorageRead and write system NVRAM variables

com.apple.private.iokit.system-nvram-allow [object Object]

HardwareDirect hardware/driver communication

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

SecurityTouch ID / Face ID / password auth

/System/Library/Frameworks/LocalAuthentication.framework/Versions/A/LocalAuthentication

Frameworks9

Bootability LocalAuthentication APFS Foundation IOKit libbootpolicy.dylib libSystem.B.dylib CoreFoundation libobjc.A.dylib

Entitlements11

com.apple.keystore.filevaulttrue

com.apple.private.CoreAuthentication.SPItrue

com.apple.private.IASInstallerAuthAgenttrue

com.apple.private.applecredentialmanager.allowtrue

com.apple.private.bootabilitytrue

com.apple.private.iokit.system-nvram-allowtrue

com.apple.private.security.bootpolicytrue

com.apple.rootless.volume.Preboottrue

com.apple.rootless.volume.Recoverytrue

com.apple.rootless.volume.iSCPreboottrue

com.apple.rootless.volume.iSCRecoverytrue

Interesting Strings

Bundle IDs(28)

!com.apple.rootless.volume.Preboot "com.apple.rootless.volume.Recovery $com.apple.rootless.volume.iSCPreboot %com.apple.private.security.bootpolicy %com.apple.rootless.volume.iSCRecovery

File Paths(11)

%@/var/db/AdminUserRecoveryInfo.plist /AppleInternal/Library/BuildRoots/4~B_5OugDsqWgwqJFU9f0MpruJG7Hd0j3Fa82inzY/Library/Caches/com.apple.xbs/Sources/BootPolicy_executables/bputil/bputil.m /AppleInternal/Library/BuildRoots/4~B_5OugDsqWgwqJFU9f0MpruJG7Hd0j3Fa82inzY/Library/Caches/com.apple.xbs/Sources/BootPolicy_executables/shared/image4.c /AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/ACMLib/ACMLib.c /AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/LibCall.c

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(7)

HostnameBootPolicy-289.0.1

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

1

Hardware

1

IPC

0

Analytics

0

Security

1

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

0

File Paths

11

Bundle IDs

28

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code85b5a5af15c9d40cb762f960cd55e4f042400735405f3e3226192e18e076253b

Importsdbbf4e199f434184271a05354d0d1d1abbecdafc207974eb21fe226b9ec3567f

Frameworksa12a3290233ea434f131f89e2fa350c187934e2b540592732ca6a3c1a4ae6dbc

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements33649df36fcda28ab7e167a53588944b13ded2fc89e04879f4ddce22ef39132f

Symbolsdbbf4e199f434184271a05354d0d1d1abbecdafc207974eb21fe226b9ec3567f

Static Libraries0 / 194 functions identified

Functions(194)

0x100000be8sub_100000be8

0x100000c38sub_100000c38

0x100000c40sub_100000c40

0x100000ca4sub_100000ca4

0x100000d80sub_100000d80

0x100000fc4sub_100000fc4

0x100000fd8sub_100000fd8

0x100000ff4sub_100000ff4

0x100001000sub_100001000

0x100001020sub_100001020

0x100001030sub_100001030

0x100001060sub_100001060

0x100001070sub_100001070

0x10000107csub_10000107c

0x100001094sub_100001094

0x1000010b0sub_1000010b0

0x1000010c8sub_1000010c8

0x1000010e8sub_1000010e8

0x100001110sub_100001110

0x100001384sub_100001384

Imports142 symbols from 9 dylibs

libSystem.B.dylib69 libbootpolicy.dylib22 IOKit14 CoreFoundation14 libobjc.A.dylib10

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

MSUEarlyBootTask

filecoordinationd

applessdstatistics

xartstorageremoted

NANDTaskScheduler