startupdiskhelper

JSON
executablemacOS236.3 KBx86_64, arm64

System firmware interface — manages NVRAM variables and hardware encryption keys

Communicates directly with hardware and firmware to read and write system NVRAM variables, which store boot settings, device identifiers, and configuration parameters. Accesses the device keychain to retrieve encryption keys for cryptographic operations. Establishes network connections to multiple endpoints, likely for firmware updates or telemetry. Uses both public and private Apple frameworks to interface with low-level system components and manage persistent storage outside the normal filesystem.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
236.3 KB
UUID
906BAB62-44B6-35A1-AB25-AA2969255F84
Analyzed
2026-04-09T10:06:21Z
CDHash
a3850e7d22196bfd2a5716cf69073477760444dabe3b0b7297529e9fdc495974

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
1
Network
0
Storage
1
Hardware
1
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
14
Bundle IDs
17
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 137 functions identified

Functions(137)

0x1000011c8+[SDUser supportsSecureCoding]
0x1000011d0-[SDUser initWithCoder:]
0x100001478-[SDUser encodeWithCoder:]
0x100001694-[SDUser description]
0x1000017d0-[SDUser userPicture]
0x1000019e8-[SDUser validatePassword:error:]
0x100001bdc-[SDUser userName]
0x100001be8-[SDUser setUserName:]
0x100001bf0-[SDUser shortName]
0x100001bfc-[SDUser setShortName:]
0x100001c04-[SDUser uuid]
0x100001c10-[SDUser setUuid:]
0x100001c18-[SDUser volumeName]
0x100001c24-[SDUser setVolumeName:]
0x100001c2c-[SDUser userPictureData]
0x100001c38-[SDUser setUserPictureData:]
0x100001c40-[SDUser isAdmin]
0x100001c4c-[SDUser setIsAdmin:]
0x100001c54-[SDUser isOwner]
0x100001c60-[SDUser setIsOwner:]

Imports114 symbols from 14 dylibs

Exports1

_mh_execute_header0x0