odproxyd

executablemacOS172.6 KBx86_64, arm64

Code signing service — validates and manages code signatures and certificates

Manages code signing operations and certificate validation for the system. Accesses the Keychain to retrieve signing certificates and credentials. Processes code signatures through XPC services exposed to other system components and applications. Communicates with external endpoints for certificate validation, revocation checking, and timestamp services. Handles telemetry reporting related to signing operations and certificate status.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 172.6 KB
UUID: B995FE18-F2B1-3113-AA39-52F0F7E4B17E
Analyzed: 2026-04-09T09:58:27Z
CDHash: e06621ece5043fe9e52300e10c59ae571062b7cd63da79a0d2f97588fe5144ce

Capabilities

SecurityKeychain, certificates, code signing

/System/Library/Frameworks/Security.framework/Versions/A/Security

Frameworks4

CoreFoundation Security OpenDirectory libSystem.B.dylib

Interesting Strings

Bundle IDs(8)

com.apple.admin_dsproxy com.apple.odproxyd com.apple.odproxyd.xpc com.apple.opendirectory.odxpc.connection com.apple.opendirectory.odxpc.rbt

File Paths(3)

/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory /System/Library/Frameworks/Security.framework/Versions/A/Security

telemetry(2)

_CSSM_CSP_CreateAsymmetricContext _CSSM_CSP_CreateSymmetricContext

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

Endpoints(6)

Urlhttp://www.apple.com/appleca/root.crl0

Hostnamewww.apple.com

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

1

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

2

File Paths

3

Bundle IDs

8

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Codef7bc41b3f7d3641f93cc3b6f38358281398278bad0d7f1a2c6ff8fbd70fbe566

Imports7a9850f7ca7941f7c39511b248fa1abb974574a8a893e96e73dcf6cb9f3cf08b

Frameworkscbf0e85c876f9f7e6d5f091540972fb0437448bf58bfcc6a735dfeaecc38d628

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Symbols7a9850f7ca7941f7c39511b248fa1abb974574a8a893e96e73dcf6cb9f3cf08b

Static Libraries0 / 79 functions identified

Functions(79)

0x1000007b0sub_1000007b0

0x10000096csub_10000096c

0x100000974sub_100000974

0x100000a10sub_100000a10

0x100000a18sub_100000a18

0x100000c64sub_100000c64

0x100000cc0sub_100000cc0

0x1000011a8sub_1000011a8

0x10000121csub_10000121c

0x1000013b0sub_1000013b0

0x100001404sub_100001404

0x100001414sub_100001414

0x100001420sub_100001420

0x100001508sub_100001508

0x10000152csub_10000152c

0x100001540sub_100001540

0x100001568sub_100001568

0x10000167csub_10000167c

0x10000168csub_10000168c

0x100001698sub_100001698

Imports145 symbols from 4 dylibs

libSystem.B.dylib104 CoreFoundation22 Security15 OpenDirectory4

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

usermanagerhelper