ldapwhoami
executablemacOS736.8 KBx86_64, arm64
Certificate and key management daemon — validates and stores cryptographic credentials
Manages macOS certificate storage, validation, and retrieval through Keychain integration. Handles code signing verification, certificate chain validation, and secure key storage for applications and system services. Communicates with Apple's certificate validation and revocation check endpoints. Enforces security policies for certificate expiration, trust anchors, and key usage constraints. Exposes APIs for other processes to query and manage certificates and cryptographic credentials.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 736.8 KB
- UUID
- 09CFECC4-A35E-3097-B245-2AE8BF06B98F
- Analyzed
- 2026-04-07T05:21:15Z
- CDHash
- a94fee50eed399bc0dccc33168dd92fafe8672a838ef86fad8795ce35cf3604c
Capabilities
NetworkNetwork configuration and reachability
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfigurationHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks13
Interesting Strings
Bundle IDs(2)
File Paths(13)
/Library/Keychains/System.keychain/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit/System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory/System/Library/Frameworks/Security.framework/Versions/A/Security
URLs & Endpoints(5)
$http://crl.apple.com/codesigning.crl0%http://www.apple.com/appleca/root.crl0<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0root@2hxmh.p1s.plx.sd.apple.com:/AppleInternal/Library/BuildRoots/4~B_wougCJzfnfGpTsnt971aKVd4XkW4x0vj04KxE/Library/Caches/com.apple.xbs/Binaries/OpenLDAP/install/TempContent/Objects/clients/tools
Network Surface
Networking Frameworks
Endpoints(28)
Ipv41.3.6.1
Ipv44.1.42.2
Ipv427.8.5.1
Ipv4108.63.1.3
Ipv4127.0.0.1
Ipv42.5.4.3
Ipv42.5.4.4
Ipv42.5.4.6
Ipv42.5.4.7
Ipv42.5.4.8
Ipv42.5.4.10
Ipv42.5.4.11
Ipv42.5.4.12
Ipv42.5.4.41
Ipv42.5.4.42
Ipv42.5.4.43
Ipv42.5.4.44
Ipv42.5.4.46
Ipv42.5.4.35
Ipv6d:D:e
Ipv601:37:23
Hostname2hxmh.p1s.plx.sd.apple.com
Hostnamewww.apple.com
Hostnamecrl.apple.com
DNA Capability Vector
Location
0
Keychain
0
Network
1
Storage
0
Hardware
1
IPC
0
Analytics
0
Security
1
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
1
File Paths
13
Bundle IDs
2
IOKit Constants
0
Library Functions
1
Structural HashesSHA-256
Static Libraries0 / 1154 functions identified
Function Matches(1)
PEM_read_bioopenssl 3.2High
Functions(1154)
0x100000c70sub_100000c70
0x100000cd0sub_100000cd0
0x100000cd8sub_100000cd8
0x10000101csub_10000101c
0x100001030sub_100001030
0x10000103csub_10000103c
0x100001154sub_100001154
0x1000011f0sub_1000011f0
0x100001310sub_100001310
0x100002968sub_100002968
0x100002a44sub_100002a44
0x100002ac8sub_100002ac8
0x100003170sub_100003170
0x100003198sub_100003198
0x1000036bcsub_1000036bc
0x1000037e8sub_1000037e8
0x100003854sub_100003854
0x1000040a8sub_1000040a8
0x10000415csub_10000415c
0x100004374sub_100004374
Imports249 symbols from 6 dylibs
Exports1
_mh_execute_header0x0