ssh-keysign

executablemacOS662.1 KBx86_64, arm64

System service — manages configuration and state across multiple bundle endpoints

Executes 353 functions to coordinate operations across 17 distinct bundle identifiers and services. Maintains state and configuration data through 17 file paths on the system. Communicates with 10 network endpoints and 5 URLs, likely for synchronization, updates, or cloud service integration. Uses 11 standard frameworks to interact with system services and libraries. Operates as an Apple-signed daemon with dual architecture support for x86_64 and ARM64 processors.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 662.1 KB
UUID: 561E5E52-F974-3602-948E-10221E11B537
Analyzed: 2026-04-09T10:05:47Z
CDHash: a967a537d2b6c5ff9021087977de2dbe7f6e1a40c121b31570a9362a2e0e2f23

Frameworks11

Foundation Kerberos OpenDirectory libEndpointSecuritySystem.dylib(weak)libManagedConfigurationFiles.dylib(weak)libbsm.0.dylib libcrypto.46.dylib libpam.2.dylib libresolv.9.dylib libz.1.dylib libSystem.B.dylib

Interesting Strings

Bundle IDs(17)

/AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/addrmatch.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/canohost.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/entropy.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/kex-names.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/misc.c

File Paths(17)

/AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/addrmatch.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/canohost.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/entropy.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/kex-names.c /AppleInternal/Library/BuildRoots/4~B_wougBZKNDhlawXyB5GBudIfJHQ-TzXVelqd2Q/Library/Caches/com.apple.xbs/Sources/OpenSSH/openssh/misc.c

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

Endpoints(10)

HostnameOpenSSH-354.0.3

Hostnameopenssh.com

Hostnamelibssh.org

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

0

File Paths

17

Bundle IDs

17

IOKit Constants

0

Library Functions

2

Structural HashesSHA-256

Codef4a50130c2c28652285d83e9b891c5e7992ea63eb9eace7e6bfd44f63a3e40f2

Importscec5b9d6b9dd9ab27f4bc37f3749cdbe72aec30ecfb6b368401f7358b28d933e

Frameworksf23114c2c58c78487879b82f97f2c6e3882992d6198ff8f21b1e35fa79f8ea9d

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Symbolscec5b9d6b9dd9ab27f4bc37f3749cdbe72aec30ecfb6b368401f7358b28d933e

Static Libraries2 / 353 functions identified

Identified Libraries

ssh 0.11.3 (2 fn)

Function Matches(1)

PEM_read_bioopenssl 3.2High

Functions(353)

0x1000009a0sub_1000009a0

0x100000b0csub_100000b0c

0x100000bc8sub_100000bc8

0x100000c8csub_100000c8c

0x100000dacsub_100000dac

0x100000f24sub_100000f24

0x100000f7csub_100000f7c

0x1000044fcsub_1000044fc

0x1000046b4sub_1000046b4

0x1000046e8sub_1000046e8

0x100004970sub_100004970

0x1000049ccsub_1000049cc

0x100004b7csub_100004b7c

0x1000057c4sub_1000057c4

0x100005d08sub_100005d08

0x100005f14sub_100005f14

0x100005fd4sub_100005fd4

0x100006024sub_100006024

0x1000060b8sub_1000060b8

0x100006e9csub_100006e9c

Imports231 symbols from 3 dylibs

libcrypto.46.dylib115 libSystem.B.dylib114 libresolv.9.dylib2

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

ssh-apple-pkcs11