system-override
executablemacOS339.0 KBx86_64, arm64
Biometric authentication service — processes Touch ID and Face ID verification
Handles biometric authentication requests through Touch ID and Face ID hardware interfaces. Communicates with the Secure Enclave for cryptographic operations and biometric template matching. Manages authentication state, enforces rate limiting on failed attempts, and integrates with system password authentication as a fallback mechanism. Exposes authentication services to other system components and third-party applications via framework APIs. Logs authentication events and communicates with Apple endpoints for telemetry and service management.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 339.0 KB
- UUID
- B473BF6C-3BB3-3050-912F-C19B424FD347
- Analyzed
- 2026-04-07T05:21:11Z
- CDHash
- 18fae5bd1c57fca83dcc66c6df6340dc48407829c1f2ebefbba85cf1bc380b1f
Capabilities
HardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitSecurityTouch ID / Face ID / password auth
/System/Library/Frameworks/LocalAuthentication.framework/Versions/A/LocalAuthenticationFrameworks11
Entitlements4
Interesting Strings
Bundle IDs(14)
!com.apple.rootless.volume.Preboot$com.apple.rootless.volume.iSCPreboot-com.apple.private.security.disk-device-access.com.apple.private.applecredentialmanager.allow/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/ACMLib/ACMLib.c
File Paths(15)
/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/ACMLib/ACMLib.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/CommonUtil.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/LibCall.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/LibCallBlock.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/LibSerialization.c
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
1
IPC
0
Analytics
0
Security
1
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
15
Bundle IDs
14
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 445 functions identified
Functions(445)
0x100000f38sub_100000f38
0x100001054sub_100001054
0x100001128sub_100001128
0x100001434sub_100001434
0x100001594sub_100001594
0x10000159csub_10000159c
0x1000015a4sub_1000015a4
0x1000015ccsub_1000015cc
0x100001610sub_100001610
0x100001658sub_100001658
0x100001680sub_100001680
0x1000016e8sub_1000016e8
0x100001820sub_100001820
0x100001a28-[CSROSInstall initWithDiskArbitrationSession:manager:volumeEntry:volumeGroupUUID:]
0x100001e44sub_100001e44
0x100001ebc+[CSROSInstall allEligibleOSInstallations]
0x100001f00sub_100001f00
0x100002098+[CSROSInstall currentlyBootedInstall]
0x1000020dcsub_1000020dc
0x1000022b4sub_1000022b4
Imports143 symbols from 11 dylibs
Exports1
_mh_execute_header0x0