keyboardservicesd
executablemacOS136.2 KBx86_64, arm64
Exception handler — manages Mach service access for crash reporting and diagnostics
Handles exceptions and crashes by accessing additional Mach services to gather diagnostic data. Communicates with system services through XPC to report and log exceptions. Processes crash dumps and system state information for analysis and troubleshooting. Integrates with Apple's diagnostic infrastructure via network endpoints and internal frameworks.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 136.2 KB
- UUID
- F3157309-12B8-36D6-9AC6-620BDBC6A7D5
- Analyzed
- 2026-04-09T09:53:08Z
- CDHash
- 6ab7dfcf4316d19d19e637aecfa4631168b38daa708a3d224f29fb608c2666ba
Capabilities
IpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-nameFrameworks6
Entitlements17
Interesting Strings
Bundle IDs(48)
File Paths(10)
URLs & Endpoints(5)
$http://crl.apple.com/codesigning.crl0%http://www.apple.com/appleca/root.crl0<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0
Network Surface
Networking Frameworks
Endpoints(7)
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
1
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
0
File Paths
10
Bundle IDs
48
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 21 functions identified
Functions(21)
0x100000be8sub_100000be8
0x100000c2csub_100000c2c
0x100000c74+[_KSUtilities machServiceNameTextReplacement]
0x100000c80+[_KSUtilities keyboardDirectory]
0x100000cc4sub_100000cc4
0x100000d34sub_100000d34
0x100000d78+[_KSUtilities userDictionaryWordKeyPairsFilePathLegacy]
0x100000dd8+[_KSUtilities keyboardServicesDirectory]
0x100000e1csub_100000e1c
0x100000f48+[_KSUtilities createFileIfDoesNotExist:]
0x100000fec+[_KSUtilities userDefaultsSuiteName]
0x100000ff8+[_KSUtilities unitTestDirectoryPath]
0x100000ffc+[_KSUtilities findAllDbsInDirectory:]
0x100001154sub_100001154
0x100001194sub_100001194
0x1000012b0sub_1000012b0
0x100001384sub_100001384
0x1000013c0sub_1000013c0
0x1000013d4sub_1000013d4
0x1000013e8sub_1000013e8
Imports38 symbols from 6 dylibs
Exports1
_mh_execute_header0x0