kpasswd
executablemacOS154.7 KBx86_64, arm64
System service — manages Apple-signed operations with XPC coordination
Apple-signed executable that exposes an XPC service for inter-process communication with other system components. Communicates with nine network endpoints, likely for system updates, telemetry, or service validation. Contains 11 bundle identifiers and 4 URL/endpoint references, indicating integration with multiple Apple frameworks and services. Handles file operations across 11 paths and runs privileged operations requiring XPC-mediated access from client processes.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 154.7 KB
- UUID
- 2D362CF8-6C56-339E-8D87-0B5A288CBAEA
- Analyzed
- 2026-04-07T05:21:15Z
- CDHash
- 2da063c5626e75a4f2aecc423387778eb745a2795520120160edfe689f438a20
Frameworks2
Interesting Strings
Bundle IDs(11)
/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libroken-application.a(get_window_size.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libroken-application.a(getarg.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libroken-application.a(rand.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libvers.a(print_version.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/TempContent/Objects/Heimdal.build/kpasswd.build/DerivedSources/
File Paths(11)
/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libroken-application.a(get_window_size.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libroken-application.a(getarg.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libroken-application.a(rand.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libvers.a(print_version.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/TempContent/Objects/Heimdal.build/kpasswd.build/DerivedSources/
Network Surface
Endpoints(9)
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
11
Bundle IDs
11
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 16 functions identified
Functions(16)
0x100000640main
0x100000c70usage
0x100000cacchange_password
0x100000f80arg_printusage
0x100000fd8arg_printusage_i18n
0x100001b48builtin_i18n
0x100001b5cmandoc_template
0x100002348check_column
0x1000023bcprint_arg
0x1000025f8getarg
0x10000275carg_match_long
0x100002d94arg_match_short
0x10000329cadd_string
0x100003370rk_get_window_size
0x1000034b0rk_random_init
0x1000034d0rk_print_version
Imports61 symbols from 2 dylibs
Exports7
_mh_execute_header0x0
arg_printusage0xf80
arg_printusage_i18n0xfd8
getarg0x25f8
rk_get_window_size0x3370
rk_print_version0x34d0
rk_random_init0x34b0