mcxalr
executablemacOS222.4 KBx86_64, arm64
Certificate and code signing validation — verifies digital signatures and keychain operations
Validates code signatures, manages certificate chains, and performs keychain operations through the Security framework. Accesses 16 bundle identifiers and processes 19 file paths, suggesting broad code signing verification across multiple applications. Communicates with 7 network endpoints, likely for certificate revocation checking and trust evaluation. Extends Security framework capabilities with custom validation logic for certificates and signed code.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 222.4 KB
- UUID
- CE1ED52F-C5D5-32DA-A2FD-221A1C8FDBC6
- Analyzed
- 2026-04-09T09:54:59Z
- CDHash
- dca4887c79f9565cb3f0ab337c3f5c60a2a82801f263fb1d7e0104db2df4c92f
Capabilities
SecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySecuritySecurity framework extensions
/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundationFrameworks11
Interesting Strings
Bundle IDs(16)
/AppleInternal/Library/BuildRoots/4~B_xOugCROZ_M_PPFCT_kXWJPH90G0g535F0r0vY/Library/Caches/com.apple.xbs/Sources/MCXTools/Common/AppSigningUtil.mm/AppleInternal/Library/BuildRoots/4~B_xOugCROZ_M_PPFCT_kXWJPH90G0g535F0r0vY/Library/Caches/com.apple.xbs/Sources/MCXTools/Common/CFUtil.cp/AppleInternal/Library/BuildRoots/4~B_xOugCROZ_M_PPFCT_kXWJPH90G0g535F0r0vY/Library/Caches/com.apple.xbs/Sources/MCXTools/Common/NSUtil.mm/AppleInternal/Library/BuildRoots/4~B_xOugCROZ_M_PPFCT_kXWJPH90G0g535F0r0vY/Library/Caches/com.apple.xbs/Sources/MCXTools/Common/ParseUtil.mm/AppleInternal/Library/BuildRoots/4~B_xOugCROZ_M_PPFCT_kXWJPH90G0g535F0r0vY/Library/Caches/com.apple.xbs/Sources/MCXTools/alr/StrUtil.cp
File Paths(19)
/AppleInternal/Library/BuildRoots/4~B_xOugCROZ_M_PPFCT_kXWJPH90G0g535F0r0vY/Library/Caches/com.apple.xbs/Sources/MCXTools/Common/AppSigningUtil.mm/AppleInternal/Library/BuildRoots/4~B_xOugCROZ_M_PPFCT_kXWJPH90G0g535F0r0vY/Library/Caches/com.apple.xbs/Sources/MCXTools/Common/CFUtil.cp/AppleInternal/Library/BuildRoots/4~B_xOugCROZ_M_PPFCT_kXWJPH90G0g535F0r0vY/Library/Caches/com.apple.xbs/Sources/MCXTools/Common/NSUtil.mm/AppleInternal/Library/BuildRoots/4~B_xOugCROZ_M_PPFCT_kXWJPH90G0g535F0r0vY/Library/Caches/com.apple.xbs/Sources/MCXTools/Common/ParseUtil.mm/AppleInternal/Library/BuildRoots/4~B_xOugCROZ_M_PPFCT_kXWJPH90G0g535F0r0vY/Library/Caches/com.apple.xbs/Sources/MCXTools/alr/StrUtil.cp
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
2
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
0
File Paths
19
Bundle IDs
16
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 153 functions identified
Functions(153)
0x100001018sub_100001018
0x100001070sub_100001070
0x1000010c4sub_1000010c4
0x100001124sub_100001124
0x100001138sub_100001138
0x1000012acsub_1000012ac
0x1000012e4sub_1000012e4
0x10000141csub_10000141c
0x1000014b4sub_1000014b4
0x100001508sub_100001508
0x100001590sub_100001590
0x10000160c-[CheckRightsHelper init]
0x100001650-[CheckRightsHelper dealloc]
0x1000016b4-[CheckRightsHelper setUID:seqID:path:flags:replySocket:]
0x10000173c-[CheckRightsHelper checkRights:]
0x10000199csub_10000199c
0x100001c40sub_100001c40
0x1000021a4sub_1000021a4
0x1000021f8sub_1000021f8
0x100002224sub_100002224
Imports178 symbols from 9 dylibs
Exports1
_mh_execute_header0x0