bioutil
executablemacOS335.4 KBx86_64, arm64
System cryptography service — manages encryption keys and hardware security operations
Provides cryptographic operations and key management for system components through direct hardware/driver access to security coprocessors. Accesses the device key bag to retrieve and manage encryption keys used across macOS. Communicates with 6 network endpoints and Apple telemetry services, likely reporting security events and diagnostics. Serves 18 bundle identifiers, indicating it acts as a shared system service for other applications requiring cryptographic functionality.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 335.4 KB
- UUID
- B6294ED6-6C92-3E5D-ACE9-5DF44FED01E0
- Analyzed
- 2026-04-07T05:21:14Z
- CDHash
- 4026712709774d99c43f8dc137bad21de9ed517aba4a9128c739eef7cfbe4ecc
Capabilities
KeychainDevice key bag (encryption keys)
/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBagHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitEntitlements5
Interesting Strings
Bundle IDs(18)
com.apple.keystore.device.verify+com.apple.private.biometrickit.allow-config,com.apple.private.biometrickit.allow-id-mgmt.com.apple.private.applecredentialmanager.allow/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/ACMLib/ACMLib.c
File Paths(11)
/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/ACMLib/ACMLib.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/CommonUtil.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/LibCall.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/LibCallBlock.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/LibSerialization.c
telemetry(53)
--btimeout $value Set biometric timeout (in seconds, system settings only) -a, --applepay $value Enable (1) or disable (0) biometrics for ApplePay (user settings only) -c, --count Print number of enrolled biometric templates of the current user or of all users (-s, administrator only) -d, --delete $uid Delete all enrolled biometric templates of the given user (administrator only) -f, --function Enable (1) or disable (0) biometrics functionality in general (system settings only)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
1
Network
0
Storage
0
Hardware
1
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
53
File Paths
11
Bundle IDs
18
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 391 functions identified
Functions(391)
0x100000c30sub_100000c30
0x100000d28sub_100000d28
0x100000eb4sub_100000eb4
0x1000010a8sub_1000010a8
0x10000113csub_10000113c
0x100002efcsub_100002efc
0x100002f0csub_100002f0c
0x100002f14sub_100002f14
0x100002f74sub_100002f74
0x100002fc8sub_100002fc8
0x100003018sub_100003018
0x10000305csub_10000305c
0x100003068sub_100003068
0x100003074sub_100003074
0x100003080sub_100003080
0x100003130sub_100003130
0x1000031e4sub_1000031e4
0x100003204sub_100003204
0x100003528sub_100003528
0x100003854sub_100003854
Imports82 symbols from 7 dylibs
Exports1
_mh_execute_header0x0