Micro Snitch
executablemacOS3.0 MBx86_64, arm64
Code signing and security validation tool — verifies digital signatures and manages cryptographic credentials
Validates code signatures, certificates, and cryptographic integrity for macOS binaries and applications. Accesses the Keychain to retrieve certificates and signing credentials, and manages code signing operations through framework integrations. Communicates with 23 network endpoints, likely for certificate validation, revocation checking, and security policy updates. Exposes 5 XPC services for other system components to request signature verification and credential management. Collects telemetry on validation outcomes and certificate operations.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 11.0.0
- SDK
- 13.1.0
- File Size
- 3.0 MB
- UUID
- 79612332-954C-39DD-906E-746979B44389
- Analyzed
- 2026-04-09T08:26:15Z
- Team ID
- MLZF7K7B5R
- CDHash
- b470ad03815f15393fef0c4bf490131f63803bca4552f3bb99ab781302453acc
Capabilities
SecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks31
Foundationlibobjc.A.dyliblibSystem.B.dylibAppKitCarbonCoreAudioCoreFoundationCoreGraphicsCoreMediaIOCoreServicesQuartzCoreSecuritySecurityInterfaceServiceManagementWebKitlibswiftAppKit.dyliblibswiftCore.dyliblibswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dyliblibswiftCoreImage.dylib(weak)libswiftCoreMedia.dylib(weak)libswiftCoreMediaIO.dylib(weak)libswiftDarwin.dyliblibswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftMetal.dylib(weak)libswiftObjectiveC.dyliblibswiftQuartzCore.dylib(weak)libswiftXPC.dylib(weak)libswiftFoundation.dyliblibswiftCoreGraphics.dylib(weak)
Entitlements2
Interesting Strings
Bundle IDs(46)
File Paths(143)
telemetry(3)
Network Surface
Networking Frameworks
Endpoints(23)
Ipv4100.6.1.13
Hostnamefield.1.2.840.113635.100.6.1.13
Ipv60:8:16
Hostnameobdev.at
Ipv60:8:16:24
Hostnamewww.apple.com
Hostnameocsp.apple.com
Hostnamecrl.apple.com
Hostnamecerts.apple.com
API Usage
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
1
System
0
Behavioral Profile
URL Endpoints
15
Telemetry Strings
3
File Paths
143
Bundle IDs
46
IOKit Constants
0
Library Functions
181
Structural HashesSHA-256
Static Libraries181 / 2281 functions identified
Identified Libraries
FLAC 1.5.0 (27 fn)SDL2 2.32.10 (24 fn)SDL2_test 2.32.10 (2 fn)X11 1.8.12 (13 fn)aom 3.13.1 (26 fn)ass 0.17.4 (4 fn)avcodec 8.0.1 (4 fn)avfilter 8.0.1 (3 fn)avformat 8.0.1 (1 fn)boost_container 1.89.0 (1 fn)boost_graph 1.89.0 (1 fn)boost_json 1.89.0 (3 fn)boost_locale 1.89.0 (1 fn)boost_log 1.89.0 (4 fn)boost_program_options 1.89.0 (1 fn)boost_python313 1.89.0 (1 fn)boost_wave 1.89.0 (2 fn)cares 1.34.5 (3 fn)crypto 3.6.1 (8 fn)fontconfig 2.17.1 (2 fn)gettextlib 0.26_1 (6 fn)gettextsrc 0.26_1 (2 fn)gio-2.0 2.86.3 (6 fn)girepository-2.0 2.86.3 (7 fn)glib-2.0 2.86.3 (1 fn)gtest 1.17.0 (2 fn)harfbuzz 12.3.0 (4 fn)harfbuzz-subset 12.3.0 (1 fn)idn2 2.3.8 (1 fn)intl 0.26_1 (1 fn)jpeg 3.1.3 (1 fn)lcms2 2.17 (1 fn)ldns 1.9.0 (1 fn)leptonica 1.87.0 (2 fn)lzma 5.8.2 (1 fn)nettle 3.10.2 (3 fn)pkgconf 2.5.1 (1 fn)rubberband 4.0.0 (3 fn)srt 1.5.4 (1 fn)ssh 0.11.3 (1 fn)tesseract 5.5.2 (1 fn)vpx 1.15.2 (2 fn)x265 4.1 (1 fn)
Function Matches(1)
ZSTD_decompresszstd 1.5.7Medium
Functions(2281)
0x10000440c-[ODCommandURL init]
0x100004418-[ODCommandURL initWithString:]
0x100004420-[ODCommandURL initWithString:convertPlusToSpace:]
0x100004950+[ODCommandURL commandURLWithString:]
0x100004998+[ODCommandURL commandURLWithString:convertPlusToSpace:]
0x1000049f0-[ODCommandURL URLRepresentation]
0x100004b4c-[ODCommandURL description]
0x100004b54-[ODCommandURL URLString]
0x100004b5c-[ODCommandURL command]
0x100004b64-[ODCommandURL subcommand]
0x100004b6c-[ODCommandURL query]
0x100004b74-[ODCommandURL arguments]
0x100004b7c-[ODCommandURL .cxx_destruct]
0x100004bd0-[ODSUReminder _defaultsObjectForKey:]
0x100004c80-[ODSUReminder _setDefaultsObject:forKey:]
0x100004d70-[ODSUReminder _alertButtonAction:]
0x100004e18-[ODSUReminder _poll:]
0x100005330-[ODSUReminder init]
0x10000533c-[ODSUReminder initWithDelegate:defaultsDomain:]
0x1000054c4-[ODSUReminder dealloc]
Imports2014 symbols from 22 dylibs
Exports164
$s12Micro_Snitch017IsRunningOnBigSurE20AppleSiliconHardwareSbyF0x4a440
$s12Micro_Snitch11MediaDeviceV11isConnectedSbvg0x49b28
$s12Micro_Snitch11MediaDeviceV11isConnectedSbvpMV0x788c4
$s12Micro_Snitch11MediaDeviceV11isSupportedSbvg0x49858
$s12Micro_Snitch11MediaDeviceV11isSupportedSbvpMV0x788c4
$s12Micro_Snitch11MediaDeviceV13enableHogModeSbyF0x24480
$s12Micro_Snitch11MediaDeviceV13transportTypeAA0cd9TransportF0Ovg0x49ab8
$s12Micro_Snitch11MediaDeviceV13transportTypeAA0cd9TransportF0OvpMV0x788c4
$s12Micro_Snitch11MediaDeviceV14currentHogModeAA0cdfG0Ovg0x24500
$s12Micro_Snitch11MediaDeviceV14currentHogModeAA0cdfG0OvpMV0x76808
$s12Micro_Snitch11MediaDeviceV14disableHogModeSbyF0x24568
$s12Micro_Snitch11MediaDeviceV15inputSourceNameSSSgvg0x49aec
$s12Micro_Snitch11MediaDeviceV15inputSourceNameSSSgvpMV0x788c4
$s12Micro_Snitch11MediaDeviceV15inputSourceNameSSSgvpfi0x200bc
$s12Micro_Snitch11MediaDeviceV16hasInputChannelsSbvg0x49848
$s12Micro_Snitch11MediaDeviceV16hasInputChannelsSbvpMV0x788c4
$s12Micro_Snitch11MediaDeviceV17inputChannelCountSuvg0x49b18
$s12Micro_Snitch11MediaDeviceV17inputChannelCountSuvpMV0x788c4
$s12Micro_Snitch11MediaDeviceV17unsupportedReasonAA0cd11UnsupportedF0OSgvg0x49b38
$s12Micro_Snitch11MediaDeviceV17unsupportedReasonAA0cd11UnsupportedF0OSgvpMV0x788c4
$s12Micro_Snitch11MediaDeviceV18outputChannelCountSuvg0x49b20
$s12Micro_Snitch11MediaDeviceV18outputChannelCountSuvpMV0x788c4
$s12Micro_Snitch11MediaDeviceV4nameSSvg0x49ac0
$s12Micro_Snitch11MediaDeviceV4nameSSvpMV0x788c4
$s12Micro_Snitch11MediaDeviceV8modelUIDSSSgvg0x49a8c
$s12Micro_Snitch11MediaDeviceV8modelUIDSSSgvpMV0x788c4
$s12Micro_Snitch11MediaDeviceV9deviceUIDSSvg0x49a60
$s12Micro_Snitch11MediaDeviceV9deviceUIDSSvpMV0x788c4
$s12Micro_Snitch11MediaDeviceV9isRunningSbvg0x49b30
$s12Micro_Snitch11MediaDeviceV9isRunningSbvpMV0x788c4
$s12Micro_Snitch11MediaDeviceV9mediaTypeAA0cF0Ovg0x49a58
$s12Micro_Snitch11MediaDeviceV9mediaTypeAA0cF0OvpMV0x788c4
$s12Micro_Snitch11MediaDeviceVMa0x4a214
$s12Micro_Snitch11MediaDeviceVMn0x78944
$s12Micro_Snitch11MediaDeviceVN0x82670
$s12Micro_Snitch16MediaDeviceEventO21__derived_enum_equalsySbAC_ACtFZ0x4b9f0
$s12Micro_Snitch16MediaDeviceEventO4hash4intoys6HasherVz_tF0x4ba00
$s12Micro_Snitch16MediaDeviceEventO9hashValueSivg0x4ba24
$s12Micro_Snitch16MediaDeviceEventO9hashValueSivpMV0x789d4
$s12Micro_Snitch16MediaDeviceEventOMa0x4bccc
$s12Micro_Snitch16MediaDeviceEventOMn0x789f4
$s12Micro_Snitch16MediaDeviceEventON0x82788
$s12Micro_Snitch16MediaDeviceEventOSHAAMc0x78994
$s12Micro_Snitch16MediaDeviceEventOSQAAMc0x7896c
$s12Micro_Snitch18MediaDeviceHogModeO21__derived_enum_equalsySbAC_ACtFZ0x243e4
$s12Micro_Snitch18MediaDeviceHogModeOMa0x24680
$s12Micro_Snitch18MediaDeviceHogModeOMn0x76824
$s12Micro_Snitch18MediaDeviceHogModeON0x812c8
$s12Micro_Snitch18MediaDeviceHogModeOSQAAMc0x767e0
$s12Micro_Snitch21MediaDeviceControllerC06_audioD8Observer33_B2E112D30631E81A0B19FC55144E6652LLAA05AudiodG0CSgvpfi0x200ac
$s12Micro_Snitch21MediaDeviceControllerC06_videoD8Observer33_B2E112D30631E81A0B19FC55144E6652LLAA05VideodG0CSgvpfi0x200b4
$s12Micro_Snitch21MediaDeviceControllerC07defaultD17EventHandlerQueueSo17OS_dispatch_queueCvau0x2b18c
$s12Micro_Snitch21MediaDeviceControllerC07defaultD17EventHandlerQueueSo17OS_dispatch_queueCvgZ0x2b1cc
$s12Micro_Snitch21MediaDeviceControllerC07defaultD17EventHandlerQueueSo17OS_dispatch_queueCvpZ0x9c3f0
$s12Micro_Snitch21MediaDeviceControllerC14observeDevicesSbvM0x2b2c0
$s12Micro_Snitch21MediaDeviceControllerC14observeDevicesSbvMTq0x7705c
$s12Micro_Snitch21MediaDeviceControllerC14observeDevicesSbvg0x2b214
$s12Micro_Snitch21MediaDeviceControllerC14observeDevicesSbvgTq0x7704c
$s12Micro_Snitch21MediaDeviceControllerC14observeDevicesSbvpMV0x76fc0
$s12Micro_Snitch21MediaDeviceControllerC14observeDevicesSbvpWvd0x76fd0
$s12Micro_Snitch21MediaDeviceControllerC14observeDevicesSbvpfi0x2008c
$s12Micro_Snitch21MediaDeviceControllerC14observeDevicesSbvs0x2b244
$s12Micro_Snitch21MediaDeviceControllerC14observeDevicesSbvsTq0x77054
$s12Micro_Snitch21MediaDeviceControllerC16connectedDevicesSayAA0cD0VGvg0x2b38c
$s12Micro_Snitch21MediaDeviceControllerC16connectedDevicesSayAA0cD0VGvgTq0x77064
$s12Micro_Snitch21MediaDeviceControllerC16connectedDevicesSayAA0cD0VGvpMV0x76fc0
$s12Micro_Snitch21MediaDeviceControllerC18deviceEventHandleryAA0cdG0O_AA0cD0VtcSgvM0x2ba04
$s12Micro_Snitch21MediaDeviceControllerC18deviceEventHandleryAA0cdG0O_AA0cD0VtcSgvMTq0x770a4
$s12Micro_Snitch21MediaDeviceControllerC18deviceEventHandleryAA0cdG0O_AA0cD0VtcSgvg0x2b940
$s12Micro_Snitch21MediaDeviceControllerC18deviceEventHandleryAA0cdG0O_AA0cD0VtcSgvgTq0x77094
$s12Micro_Snitch21MediaDeviceControllerC18deviceEventHandleryAA0cdG0O_AA0cD0VtcSgvpMV0x76fc0
$s12Micro_Snitch21MediaDeviceControllerC18deviceEventHandleryAA0cdG0O_AA0cD0VtcSgvpWvd0x76fe0
$s12Micro_Snitch21MediaDeviceControllerC18deviceEventHandleryAA0cdG0O_AA0cD0VtcSgvpfi0x200a0
$s12Micro_Snitch21MediaDeviceControllerC18deviceEventHandleryAA0cdG0O_AA0cD0VtcSgvs0x2b98c
$s12Micro_Snitch21MediaDeviceControllerC18deviceEventHandleryAA0cdG0O_AA0cD0VtcSgvsTq0x7709c
$s12Micro_Snitch21MediaDeviceControllerC21connectedInputDevicesSayAA0cD0VGvg0x2b474
$s12Micro_Snitch21MediaDeviceControllerC21connectedInputDevicesSayAA0cD0VGvgTq0x7706c
$s12Micro_Snitch21MediaDeviceControllerC21connectedInputDevicesSayAA0cD0VGvpMV0x76fc0
$s12Micro_Snitch21MediaDeviceControllerC22updatingDevicesHandlerySbcSgvM0x2b904
$s12Micro_Snitch21MediaDeviceControllerC22updatingDevicesHandlerySbcSgvMTq0x7708c
$s12Micro_Snitch21MediaDeviceControllerC22updatingDevicesHandlerySbcSgvg0x2b840
$s12Micro_Snitch21MediaDeviceControllerC22updatingDevicesHandlerySbcSgvgTq0x7707c
$s12Micro_Snitch21MediaDeviceControllerC22updatingDevicesHandlerySbcSgvpMV0x76fc0
$s12Micro_Snitch21MediaDeviceControllerC22updatingDevicesHandlerySbcSgvpWvd0x76fd8
$s12Micro_Snitch21MediaDeviceControllerC22updatingDevicesHandlerySbcSgvpfi0x20094
$s12Micro_Snitch21MediaDeviceControllerC22updatingDevicesHandlerySbcSgvs0x2b88c
$s12Micro_Snitch21MediaDeviceControllerC22updatingDevicesHandlerySbcSgvsTq0x77084
$s12Micro_Snitch21MediaDeviceControllerC23deviceEventHandlerQueueACSo17OS_dispatch_queueC_tcfC0x2c770
$s12Micro_Snitch21MediaDeviceControllerC23deviceEventHandlerQueueACSo17OS_dispatch_queueC_tcfCTq0x770f4
$s12Micro_Snitch21MediaDeviceControllerC23deviceEventHandlerQueueACSo17OS_dispatch_queueC_tcfc0x2c7b0
$s12Micro_Snitch21MediaDeviceControllerC23deviceEventHandlerQueueSo17OS_dispatch_queueCvg0x2b20c
$s12Micro_Snitch21MediaDeviceControllerC23deviceEventHandlerQueueSo17OS_dispatch_queueCvpMV0x76fc0
$s12Micro_Snitch21MediaDeviceControllerC23deviceEventHandlerQueueSo17OS_dispatch_queueCvpWvd0x76fc8
$s12Micro_Snitch21MediaDeviceControllerC25connectedSupportedDevicesSayAA0cD0VGvg0x2b654
$s12Micro_Snitch21MediaDeviceControllerC25connectedSupportedDevicesSayAA0cD0VGvgTq0x77074
$s12Micro_Snitch21MediaDeviceControllerC25connectedSupportedDevicesSayAA0cD0VGvpMV0x76fc0
$s12Micro_Snitch21MediaDeviceControllerCMa0x2c968
$s12Micro_Snitch21MediaDeviceControllerCMm0x99d28
$s12Micro_Snitch21MediaDeviceControllerCMn0x77018
$s12Micro_Snitch21MediaDeviceControllerCN0x99d60
$s12Micro_Snitch21MediaDeviceControllerCfD0x2c80c
$s12Micro_Snitch21MediaDeviceControllerCfd0x2c7cc
$s12Micro_Snitch23ComputerModelIdentifierSSSgyF0x2fd50
$s12Micro_Snitch24MediaDeviceTransportTypeO21__derived_enum_equalsySbAC_ACtFZ0x49990
$s12Micro_Snitch24MediaDeviceTransportTypeO4hash4intoys6HasherVz_tF0x49994
$s12Micro_Snitch24MediaDeviceTransportTypeO9hashValueSivg0x499b8
$s12Micro_Snitch24MediaDeviceTransportTypeO9hashValueSivpMV0x788c4
$s12Micro_Snitch24MediaDeviceTransportTypeOMa0x49eac
$s12Micro_Snitch24MediaDeviceTransportTypeOMn0x7891c
$s12Micro_Snitch24MediaDeviceTransportTypeON0x82600
$s12Micro_Snitch24MediaDeviceTransportTypeOSHAAMc0x78884
$s12Micro_Snitch24MediaDeviceTransportTypeOSQAAMc0x7885c
$s12Micro_Snitch28MediaDeviceUnsupportedReasonO21__derived_enum_equalsySbAC_ACtFZ0x2484c
$s12Micro_Snitch28MediaDeviceUnsupportedReasonO4hash4intoys6HasherVz_tF0x2485c
$s12Micro_Snitch28MediaDeviceUnsupportedReasonO9hashValueSivg0x24880
$s12Micro_Snitch28MediaDeviceUnsupportedReasonO9hashValueSivpMV0x768d4
$s12Micro_Snitch28MediaDeviceUnsupportedReasonOMa0x24b34
$s12Micro_Snitch28MediaDeviceUnsupportedReasonOMn0x76900
$s12Micro_Snitch28MediaDeviceUnsupportedReasonON0x81360
$s12Micro_Snitch28MediaDeviceUnsupportedReasonOSHAAMc0x76894
$s12Micro_Snitch28MediaDeviceUnsupportedReasonOSQAAMc0x7686c
$s12Micro_Snitch47IsRunningOSPriorToVenturaOnAppleSiliconHardwareSbyF0x4a394
$s12Micro_Snitch9MediaTypeO21__derived_enum_equalsySbAC_ACtFZ0x49838
$s12Micro_Snitch9MediaTypeO4hash4intoys6HasherVz_tF0x49868
$s12Micro_Snitch9MediaTypeO9hashValueSivg0x4988c
$s12Micro_Snitch9MediaTypeO9hashValueSivpMV0x788c4
$s12Micro_Snitch9MediaTypeOMa0x49d3c
$s12Micro_Snitch9MediaTypeOMn0x788e0
$s12Micro_Snitch9MediaTypeON0x82578
$s12Micro_Snitch9MediaTypeOSHAAMc0x7881c
$s12Micro_Snitch9MediaTypeOSQAAMc0x787f4
$sSo6CGRectV12Micro_SnitchE4maxX12CoreGraphics7CGFloatVvM0x2f2e8
$sSo6CGRectV12Micro_SnitchE4maxX12CoreGraphics7CGFloatVvg0x2f2d0
$sSo6CGRectV12Micro_SnitchE4maxX12CoreGraphics7CGFloatVvpMV0x77458
$sSo6CGRectV12Micro_SnitchE4maxX12CoreGraphics7CGFloatVvs0x2f2d8
$sSo6CGRectV12Micro_SnitchE4maxY12CoreGraphics7CGFloatVvM0x2f3d4
$sSo6CGRectV12Micro_SnitchE4maxY12CoreGraphics7CGFloatVvg0x2f214
$sSo6CGRectV12Micro_SnitchE4maxY12CoreGraphics7CGFloatVvpMV0x77458
$sSo6CGRectV12Micro_SnitchE4maxY12CoreGraphics7CGFloatVvs0x2f3c4
$sSo6CGRectV12Micro_SnitchE4midX12CoreGraphics7CGFloatVvM0x2f284
$sSo6CGRectV12Micro_SnitchE4midX12CoreGraphics7CGFloatVvg0x2f25c
$sSo6CGRectV12Micro_SnitchE4midX12CoreGraphics7CGFloatVvpMV0x77458
$sSo6CGRectV12Micro_SnitchE4midX12CoreGraphics7CGFloatVvs0x2f26c
$sSo6CGRectV12Micro_SnitchE4midY12CoreGraphics7CGFloatVvM0x2f378
$sSo6CGRectV12Micro_SnitchE4midY12CoreGraphics7CGFloatVvg0x2f350
$sSo6CGRectV12Micro_SnitchE4midY12CoreGraphics7CGFloatVvpMV0x77458
$sSo6CGRectV12Micro_SnitchE4midY12CoreGraphics7CGFloatVvs0x2f360
$sSo6CGRectV12Micro_SnitchE4minX12CoreGraphics7CGFloatVvM0x2f230
$sSo6CGRectV12Micro_SnitchE4minX12CoreGraphics7CGFloatVvg0x2f224
$sSo6CGRectV12Micro_SnitchE4minX12CoreGraphics7CGFloatVvpMV0x77458
$sSo6CGRectV12Micro_SnitchE4minX12CoreGraphics7CGFloatVvs0x2f228
$sSo6CGRectV12Micro_SnitchE4minY12CoreGraphics7CGFloatVvM0x2f324
$sSo6CGRectV12Micro_SnitchE4minY12CoreGraphics7CGFloatVvg0x2f204
$sSo6CGRectV12Micro_SnitchE4minY12CoreGraphics7CGFloatVvpMV0x77458
$sSo6CGRectV12Micro_SnitchE4minY12CoreGraphics7CGFloatVvs0x2f20c
$sSo6CGRectV12Micro_SnitchE5width12CoreGraphics7CGFloatVvM0x2f418
$sSo6CGRectV12Micro_SnitchE5width12CoreGraphics7CGFloatVvg0x2f21c
$sSo6CGRectV12Micro_SnitchE5width12CoreGraphics7CGFloatVvpMV0x77458
$sSo6CGRectV12Micro_SnitchE5width12CoreGraphics7CGFloatVvs0x2f410
$sSo6CGRectV12Micro_SnitchE6height12CoreGraphics7CGFloatVvM0x2f444
$sSo6CGRectV12Micro_SnitchE6height12CoreGraphics7CGFloatVvg0x2f1f4
$sSo6CGRectV12Micro_SnitchE6height12CoreGraphics7CGFloatVvpMV0x77458
$sSo6CGRectV12Micro_SnitchE6height12CoreGraphics7CGFloatVvs0x2f1fc
_mh_execute_header0x0