sysdiagnose
executablemacOS203.1 KBx86_64, arm64
Encryption key management service — accesses device keychain and hardware for cryptographic operations
Manages cryptographic keys stored in the device keychain and communicates with hardware security components for encryption and decryption operations. Exposes an XPC service for other system processes to request key operations. Accesses 13 bundle identifiers and contacts 7 network endpoints, including telemetry reporting. Operates with direct hardware communication capabilities and device key bag access, enabling secure key derivation and cryptographic material management at the system level.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 203.1 KB
- UUID
- 67117BCF-EC29-3418-BB61-C9AAD2FA749D
- Analyzed
- 2026-04-07T05:21:14Z
- CDHash
- 5f8f79b11e35632ca276d252b7030a3714fb896fc661f4d88ef1fbdf20254dc8
Capabilities
KeychainDevice key bag (encryption keys)
/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBagHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitFrameworks9
Entitlements3
Interesting Strings
Bundle IDs(13)
File Paths(8)
A great deal of information is harvested, spanning system state and configuration. The data is stored /var/tmp directory./System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit/System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport
telemetry(4)
URLs & Endpoints(5)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
1
Network
0
Storage
0
Hardware
1
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
4
File Paths
8
Bundle IDs
13
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 71 functions identified
Functions(71)
0x100000ea0sub_100000ea0
0x100000f78sub_100000f78
0x100000fc0sub_100000fc0
0x100000ff8sub_100000ff8
0x10000118csub_10000118c
0x100001248sub_100001248
0x1000012c0sub_1000012c0
0x1000013c0sub_1000013c0
0x1000013f8sub_1000013f8
0x100001414sub_100001414
0x100002a9csub_100002a9c
0x100002b7csub_100002b7c
0x100002bc0sub_100002bc0
0x100002edcsub_100002edc
0x100002ee4sub_100002ee4
0x100002eecsub_100002eec
0x100002f34sub_100002f34
0x100003050sub_100003050
0x100003528sub_100003528
0x1000035ccsub_1000035cc
Imports114 symbols from 5 dylibs
Exports1
_mh_execute_header0x0