psktool
executablemacOS69.5 KBarm64
Code signing utility — validates and manages macOS application signatures
Verifies digital signatures on macOS binaries and frameworks to ensure code integrity and authenticity. Accesses the Keychain to retrieve certificates and signing identities needed for validation operations. Communicates with 5 network endpoints, likely for certificate revocation checks or timestamp validation. Processes file paths and URLs to locate and analyze signed code objects. Operates as a command-line tool with minimal system integration.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- arm64
- Min OS
- 26.0.0
- SDK
- 26.1.0
- File Size
- 69.5 KB
- UUID
- 870E7BE7-EBC1-3758-9477-6580A7F2E6F3
- Analyzed
- 2026-04-09T09:14:19Z
- CDHash
- f200e915ecd9af89381212ffddbf39ede8ccbe93a563a0fe65f88fb603322f70
Capabilities
SecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks14
Interesting Strings
File Paths(3)
Network Surface
Networking Frameworks
Endpoints(5)
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
1
System
0
Behavioral Profile
URL Endpoints
2
Telemetry Strings
0
File Paths
3
Bundle IDs
0
IOKit Constants
0
Library Functions
2
Structural HashesSHA-256
Static Libraries2 / 14 functions identified
Identified Libraries
Functions(14)
0x100004210main
0x1000047f0process_options
0x100004c20parse_number
0x100004d2cusage
0x100004d54OUTLINED_FUNCTION_0
0x100004d5csecure_getenv
0x100004d94rpl_fopen
0x100004fdcclose_stream
0x100005058sub_100005058
0x100005068rpl_strerror
0x100005118strerror_override
0x10000512cprocess_options.cold.1
0x100005144process_options.cold.2
0x10000515cparse_number.cold.1
Imports54 symbols from 2 dylibs
Exports11
__fpending0x5058
_mh_execute_header0x0
close_stream0x4fdc
main0x4210
process_options0x47f0
psktool_options0xc000
rpl_fopen0x4d94
rpl_strerror0x5068
secure_getenv0x4d5c
strerror_override0x5118
usage0x4d2c