logd_helper
executablemacOS206.6 KBx86_64, arm64
System security daemon — manages encryption keys and hardware security operations
Accesses the device keychain to retrieve and manage encryption keys stored in the secure enclave or key bag. Communicates directly with hardware security processors and drivers to perform cryptographic operations and key management tasks. Exposes an XPC service for other system components to request security operations. Collects telemetry on security events and communicates with Apple endpoints for key escrow, certificate validation, or security policy updates. Handles 13 distinct bundle identifiers, suggesting it acts as a coordinator for multiple security-related subsystems.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 206.6 KB
- UUID
- 77A9622B-3EDB-3359-A0A0-08CECA09C655
- Analyzed
- 2026-04-09T09:54:19Z
- CDHash
- b6477351f04ef14ac1141b71995a24620e688c72dab9c81240bd2644bf83c033
Capabilities
KeychainDevice key bag (encryption keys)
/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBagHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitFrameworks7
Entitlements3
Interesting Strings
Bundle IDs(13)
File Paths(10)
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit/System/Library/PrivateFrameworks/CoreSymbolication.framework/Versions/A/CoreSymbolication/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBag
Network Surface
Networking Frameworks
Endpoints(8)
DNA Capability Vector
Location
0
Keychain
1
Network
0
Storage
0
Hardware
1
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
3
File Paths
10
Bundle IDs
13
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 71 functions identified
Functions(71)
0x100000af8sub_100000af8
0x100000b94sub_100000b94
0x100000e50sub_100000e50
0x100000eacsub_100000eac
0x100000f1csub_100000f1c
0x100000f28sub_100000f28
0x100000f38sub_100000f38
0x1000011b8sub_1000011b8
0x10000121csub_10000121c
0x1000012ccsub_1000012cc
0x100001338sub_100001338
0x1000013acsub_1000013ac
0x100001468sub_100001468
0x100001598sub_100001598
0x100001788sub_100001788
0x100001804sub_100001804
0x100001934sub_100001934
0x100001c10sub_100001c10
0x10000206csub_10000206c
0x1000025acsub_1000025ac
Imports176 symbols from 6 dylibs
Exports1
_mh_execute_header0x0