KeychainStasher
executablemacOS152.8 KBx86_64, arm64
Code signing utility — manages certificates and digital signatures for macOS applications
Accesses Keychain to retrieve code signing certificates and keys for signing application binaries and bundles. Manages certificate validation and verification of existing signatures. Communicates with Apple's code signing infrastructure and telemetry endpoints to validate signing status and gather diagnostics. Stores signing metadata and logs in private storage areas. Supports signing for multiple bundle identifiers, indicating use across different application types and workflows.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 152.8 KB
- UUID
- B761525E-A8BB-3AEE-970D-6A49B1CF8C0E
- Analyzed
- 2026-04-09T09:39:00Z
- CDHash
- 8e51ccb15e8c9aa566a3dd32e0accc3ffdf804f3fd063d6294dd0dfacf0df1d4
Capabilities
SecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityEntitlements3
Interesting Strings
Bundle IDs(9)
File Paths(4)
telemetry(5)
Network Surface
Networking Frameworks
Endpoints(8)
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
1
Hardware
0
IPC
0
Analytics
0
Security
1
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
5
File Paths
4
Bundle IDs
9
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 16 functions identified
Functions(16)
0x100000c98-[ServiceDelegate listener:shouldAcceptNewConnection:]
0x100000ddcsub_100000ddc
0x10000141c-[KeychainStasher loadKeyWithReply:]
0x1000017e0-[KeychainStasher stashKey:withReply:]
0x100001ba4-[KeychainStasher baseQuery]
0x100001cf0-[KeychainStasher errorWithStatus:message:]
0x100001e6csub_100001e6c
0x100001e78sub_100001e78
0x100001e88sub_100001e88
0x100001f08sub_100001f08
0x100001f18sub_100001f18
0x100001f24sub_100001f24
0x100001f34sub_100001f34
0x100001fd0sub_100001fd0
0x100002228sub_100002228
0x1000022f0sub_1000022f0
Imports86 symbols from 5 dylibs
Exports1
_mh_execute_header0x0