misagent
executablemacOS478.0 KBx86_64, arm64
System credential manager — stores and retrieves cryptographic keys and certificates
Manages secure storage and retrieval of passwords, encryption keys, and certificates through Keychain access. Enforces code-signing validation and handles certificate operations for authentication and encryption workflows. Communicates with seven network endpoints, likely for certificate validation, revocation checking, or credential synchronization services. Maintains private storage areas and directly interfaces with hardware or driver-level security mechanisms.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 478.0 KB
- UUID
- C89F1289-63E6-3510-8BD8-EC2482DD0ED5
- Analyzed
- 2026-04-09T09:55:38Z
- CDHash
- 41dad1c36f1b53603f2bce6a064d8416699163cfb6b4ffc1773ce4eda8012122
Capabilities
StoragePrivate storage area access
com.apple.private.security.storage.MobileIdentityService[object Object]HardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks19
CoreTimelibmis.dyliblibCoreEntitlements.dylibIOKitCoreFoundationSecuritylibsqlite3.dyliblibMobileGestalt.dylibFoundationlibobjc.A.dyliblibSystem.B.dyliblibswiftCore.dyliblibswiftCoreFoundation.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftObjectiveC.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswiftos.dylib
Entitlements3
Interesting Strings
Bundle IDs(11)
File Paths(17)
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit/System/Library/Frameworks/Security.framework/Versions/A/Security/System/Library/PrivateFrameworks/CoreTime.framework/Versions/A/CoreTime
Network Surface
Networking Frameworks
Endpoints(7)
API Usage
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
1
Hardware
1
IPC
0
Analytics
0
Security
1
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
17
Bundle IDs
11
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 643 functions identified
Functions(643)
0x100001518sub_100001518
0x10000171csub_10000171c
0x1000017a4sub_1000017a4
0x1000018d0sub_1000018d0
0x1000018e4sub_1000018e4
0x100001b70sub_100001b70
0x100001b84sub_100001b84
0x100001e28sub_100001e28
0x100002118MISProvisioningProfileIsAppleInternalProfile
0x100002180MISProvisioningProfileGetTeamIdentifier
0x1000021e4sub_1000021e4
0x100002244MISProvisioningProfileProvisionsAllDevices
0x100002250MISProvisioningProfileIncludesDevice
0x100002314MISProvisioningProfileIncludesPlatform
0x1000024b0MISProvisioningProfileGetTeamName
0x1000024bcMISProvisioningProfileIsForLocalProvisioning
0x1000024c8MISProvisioningProfileGetExpirationDate
0x1000024d4MISProvisioningProfileGetName
0x1000024e0MISProvisioningProfileGetDeveloperCertificatesHashes
0x100002514MISXMLProvisioningProfileGetDeveloperCertificates
Imports336 symbols from 12 dylibs
Exports32
$sSo12MISDBManagerC8misagentE22addMonotonicTimeOffset_6cdHashySi_10Foundation4DataVSgtKF0x16408
$sSo12MISDBManagerC8misagentE22addRTCResetCountOffset_6cdHashySi_10Foundation4DataVSgtKF0x1656c
$sSo8MISErrorV8misagentE9hexStringSSyF0x107d8
MISArrayAllowsEntitlementValue0x2b70
MISEntitlementDictionaryAllowsEntitlementValue0x2c84
MISProvisioningProfileCheckValidity0x2610
MISProvisioningProfileGetDeveloperCertificatesHashes0x24e0
MISProvisioningProfileGetEmbeddedDER0x27a0
MISProvisioningProfileGetEntitlements0x25d8
MISProvisioningProfileGetExpirationDate0x24c8
MISProvisioningProfileGetName0x24d4
MISProvisioningProfileGetTeamIdentifier0x2180
MISProvisioningProfileGetTeamName0x24b0
MISProvisioningProfileGetUUID0x2568
MISProvisioningProfileGetVersion0x2574
MISProvisioningProfileIncludesDevice0x2250
MISProvisioningProfileIncludesPlatform0x2314
MISProvisioningProfileIsAppleInternalProfile0x2118
MISProvisioningProfileIsForBetaDeployment0x27ac
MISProvisioningProfileIsForLocalProvisioning0x24bc
MISProvisioningProfileProvisionsAllDevices0x2244
MISProvisioningProfileValidateSignature0x260c
MISXMLProvisioningProfileGetDeveloperCertificates0x2514
OBJC_CLASS_$_MISOnlineAuthEntry0x2d688
OBJC_CLASS_$_MISTeamIDEntryForUI0x2d598
OBJC_CLASS_$_MISTrustedProfileEntry0x2d548
OBJC_CLASS_$_MISTrustedTeamIDEntry0x2d4f8
OBJC_METACLASS_$_MISOnlineAuthEntry0x2d6b0
OBJC_METACLASS_$_MISTeamIDEntryForUI0x2d5c0
OBJC_METACLASS_$_MISTrustedProfileEntry0x2d570
OBJC_METACLASS_$_MISTrustedTeamIDEntry0x2d520
_mh_execute_header0x0