ktutil
executablemacOS296.8 KBx86_64, arm64
System service — manages bundled component lifecycle and configurations
Loads and manages multiple bundled applications or services identified by their bundle IDs. Accesses configuration files across the file system and communicates with network endpoints to fetch updates or report status. Exposes functionality through XPC interfaces for other system components. Uses one private framework alongside standard macOS frameworks for core operations.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 296.8 KB
- UUID
- A52947F7-580E-33D7-970E-3129158E3100
- Analyzed
- 2026-04-07T05:21:17Z
- CDHash
- b9b5a52bb20819f75c5dee96dbc81a283e1bba87e895667a9e272280ee41fe63
Frameworks4
Interesting Strings
Bundle IDs(46)
/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/Derived//AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/liberror-tables.a(kadm5_err.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libkadm5clnt.a(chpass_c.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libkadm5clnt.a(common_glue.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libkadm5clnt.a(create_c.o)
File Paths(47)
/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/Derived//AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/liberror-tables.a(kadm5_err.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libkadm5clnt.a(chpass_c.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libkadm5clnt.a(common_glue.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libkadm5clnt.a(create_c.o)
Network Surface
Endpoints(9)
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
47
Bundle IDs
46
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 105 functions identified
Functions(105)
0x100000770kt_add
0x100000ea0readstring
0x100000f40kt_change
0x100001570change_entry
0x10000196c_OSSwapInt16
0x100001990kt_copy
0x100002080compare_keyblock
0x100002118kt_destroy
0x1000021bckt_get
0x100002a58open_kadmin_connection
0x100002c08_OSSwapInt16
0x100002c2cktutil_open_keytab
0x100002d60help
0x100003008main
0x10000316cusage
0x1000031a8kt_list
0x1000032d4do_list
0x10000397ckt_purge
0x100003d34add_entry
0x100003e84get_entry
Imports165 symbols from 2 dylibs
Exports53
_kadm5_c_get_cache_principal0x8ddc
_kadm5_c_get_cred_cache0x9114
_kadm5_c_init_context0x88bc
_kadm5_client_recv0xb90c
_kadm5_client_send0xb74c
_kadm5_connect0x981c
_kadm5_marshal_params0xae00
_kadm5_store_ks_tuple0xba20
_mh_execute_header0x0
arg_printusage0x5708
arg_printusage_i18n0x5760
free_getarg_strings0x7a24
get_default_username0x7c64
getarg0x6d80
initialize_kadm5_error_table_r0xcbf0
k_getpwnam0x7d94
k_getpwuid0x7dcc
kadm5_c_chpass_principal0x7e24
kadm5_c_chpass_principal_with_key0x8014
kadm5_c_create_principal0x843c
kadm5_c_delete_principal0x862c
kadm5_c_destroy0x87e4
kadm5_c_flush0xbfc0
kadm5_c_get_principal0xbdd0
kadm5_c_get_principals0xbb44
kadm5_c_get_privs0xb048
kadm5_c_init_with_password_ctx0x9f44
kadm5_c_init_with_skey_ctx0xa168
kadm5_c_modify_principal0xae80
kadm5_c_randkey_principal0xb220
kadm5_c_rename_principal0xb5a0
kadm5_create_principal0x8238
kadm5_create_principal_20x8280
kadm5_destroy0x82d8
kadm5_free_key_data0xbfd4
kadm5_free_principal_ent0xc0c8
kadm5_get_principal0x8308
kadm5_modify_principal0x8350
kadm5_randkey_principal0x8390
kadm5_randkey_principal_30x83dc
kadm5_ret_key_data0xa39c
kadm5_ret_principal_ent0xa950
kadm5_ret_tl_data0xa4f4
kadm5_store_fake_key_data0xa2cc
kadm5_store_key_data0xa20c
kadm5_store_principal_ent0xa574
kadm5_store_tl_data0xa48c
rk_get_window_size0x7b24
rk_print_version0xcb24
rk_random_init0x7e04
sl_command0xcaa8
sl_help0xc378
sl_match0xc238