security-sysdiagnose
executablemacOS190.4 KBx86_64, arm64
Keychain credential helper — manages stored passwords, certificates, and cryptographic keys
Provides access to keychain items including passwords, certificates, and code-signing keys for authentication and encryption operations. Handles keychain lookups, credential retrieval, and certificate validation through the Security framework. Exposes an XPC service for other processes to request keychain access while enforcing entitlement-based access controls. Communicates with multiple network endpoints for certificate validation and key management services. Logs telemetry for usage monitoring.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 190.4 KB
- UUID
- D389F497-935A-3ED8-8DED-C27FDE0E2753
- Analyzed
- 2026-04-09T10:03:17Z
- CDHash
- 3ccbf62fc75249926bbe26d7df7094f1112de44b0046f1678e133a64424ba33b
Capabilities
KeychainKeychain access group membership
keychain-access-groupsSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityEntitlements6
Interesting Strings
Bundle IDs(22)
File Paths(3)
telemetry(1)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
1
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
1
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
1
File Paths
3
Bundle IDs
22
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 40 functions identified
Functions(40)
0x100000dc0+[SQLiteManager executeQuery:onDatabaseAtPath:]
0x1000010e4sub_1000010e4
0x10000111csub_10000111c
0x100001154sub_100001154
0x100001340sub_100001340
0x1000013ecsub_1000013ec
0x100002cc8sub_100002cc8
0x100002fd0sub_100002fd0
0x10000303csub_10000303c
0x1000030acsub_1000030ac
0x1000030b4sub_1000030b4
0x1000030bcsub_1000030bc
0x1000033acsub_1000033ac
0x100003408sub_100003408
0x100003414sub_100003414
0x100003424sub_100003424
0x1000034f8sub_1000034f8
0x10000361csub_10000361c
0x100003624sub_100003624
0x10000362csub_10000362c
Imports153 symbols from 6 dylibs
Exports1
_mh_execute_header0x0