logd_helper

JSON
executablemacOS206.6 KBx86_64, arm64

System security daemon — manages encryption keys and hardware security operations

Accesses the device keychain to retrieve and manage encryption keys stored in the secure enclave or key bag. Communicates directly with hardware security processors and drivers to perform cryptographic operations and key management tasks. Exposes an XPC service for other system components to request security operations. Collects telemetry on security events and communicates with Apple endpoints for key escrow, certificate validation, or security policy updates. Handles 13 distinct bundle identifiers, suggesting it acts as a coordinator for multiple security-related subsystems.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
206.6 KB
UUID
77A9622B-3EDB-3359-A0A0-08CECA09C655
Analyzed
2026-04-09T09:54:19Z
CDHash
b6477351f04ef14ac1141b71995a24620e688c72dab9c81240bd2644bf83c033

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
1
Network
0
Storage
0
Hardware
1
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
5
Telemetry Strings
3
File Paths
10
Bundle IDs
13
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 71 functions identified

Functions(71)

0x100000af8sub_100000af8
0x100000b94sub_100000b94
0x100000e50sub_100000e50
0x100000eacsub_100000eac
0x100000f1csub_100000f1c
0x100000f28sub_100000f28
0x100000f38sub_100000f38
0x1000011b8sub_1000011b8
0x10000121csub_10000121c
0x1000012ccsub_1000012cc
0x100001338sub_100001338
0x1000013acsub_1000013ac
0x100001468sub_100001468
0x100001598sub_100001598
0x100001788sub_100001788
0x100001804sub_100001804
0x100001934sub_100001934
0x100001c10sub_100001c10
0x10000206csub_10000206c
0x1000025acsub_1000025ac

Imports176 symbols from 6 dylibs

Exports1

_mh_execute_header0x0