FDERecoveryAgent

executablemacOS134.9 KBx86_64, arm64

System service daemon — manages hardware configuration, network settings, and certificate operations

Communicates directly with hardware and driver interfaces to configure system resources. Manages network configuration and monitors reachability states. Accesses the Keychain to retrieve and manage certificates and security credentials, supporting code signing operations. Establishes connections to six network endpoints for remote communication or synchronization. Maintains references to multiple bundle identifiers and file paths, suggesting coordination with other system components.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 134.9 KB
UUID: C5D7E1E2-41C7-3BC3-BFAD-B6EA5B75C0E3
Analyzed: 2026-04-09T09:38:24Z
CDHash: 98828604e8b3f144769eb031f570b4349021718f1bdbc8b2737cde06ac2fe035

Capabilities

NetworkNetwork configuration and reachability

/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration

HardwareDirect hardware/driver communication

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

SecurityKeychain, certificates, code signing

/System/Library/Frameworks/Security.framework/Versions/A/Security

Frameworks10

Foundation AppKit libcsfde.dylib libCoreStorage.dylib CoreFoundation Security IOKit SystemConfiguration libobjc.A.dylib libSystem.B.dylib

Interesting Strings

Bundle IDs(3)

com.apple.FDERecoveryAgent com.apple.corestorage.lvf.encryption.context com.apple.security.FDERecoveryAgent.plist

File Paths(7)

/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit /System/Library/Frameworks/Security.framework/Versions/A/Security

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(6)

Urlhttp://www.apple.com/appleca/root.crl0

Hostnamewww.apple.com

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

DNA Capability Vector

Location

0

Keychain

0

Network

1

Storage

0

Hardware

1

IPC

0

Analytics

0

Security

1

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

0

File Paths

7

Bundle IDs

3

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code1768704c481a52d4b85b938aff8a4989c137306c64f02a4eb3cfd909d16ff671

Imports928a3db64e3320a22dec64209dcf9baf7c373341146baa0d5601a1cec13bd49e

Frameworks14a85f6e5f124f80bef1b4a6ec63a5102c25c37903979f805c91226474746ab7

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Symbols928a3db64e3320a22dec64209dcf9baf7c373341146baa0d5601a1cec13bd49e

Static Libraries0 / 23 functions identified

Functions(23)

0x100000b80sub_100000b80

0x100000be8sub_100000be8

0x100000cb0sub_100000cb0

0x1000010d4sub_1000010d4

0x100001194sub_100001194

0x1000011fcsub_1000011fc

0x10000136csub_10000136c

0x100001438sub_100001438

0x10000148csub_10000148c

0x1000017b0sub_1000017b0

0x100001838sub_100001838

0x10000188csub_10000188c

0x10000189csub_10000189c

0x1000018a8sub_1000018a8

0x1000018ecsub_1000018ec

0x100001994sub_100001994

0x100001b3csub_100001b3c

0x100001b4csub_100001b4c

0x100001b58sub_100001b58

0x100001bf0sub_100001bf0

Imports65 symbols from 7 dylibs

libSystem.B.dylib24 CoreFoundation16 Foundation7 libcsfde.dylib6 libobjc.A.dylib6

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable