tmutil
executablemacOS656.5 KBx86_64, arm64
Security framework extension — implements cryptographic operations and certificate validation
Provides security-related cryptographic functions and certificate handling services through the Security framework. Communicates with system security infrastructure via XPC and maintains direct hardware/driver access for secure operations. Processes cryptographic algorithms and validates digital certificates as part of the system's security infrastructure. Exposes endpoints for network-based certificate validation and security policy enforcement.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 656.5 KB
- UUID
- 9B50A2FD-653E-32E7-80F3-DD6416D624AA
- Analyzed
- 2026-04-07T05:21:15Z
- CDHash
- 7b0ebf63bfc90fe182680d3d165306c74e69f86801916cf7f495e54635a904f0
Capabilities
HardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitSecuritySecurity framework extensions
/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundationFrameworks33
TimeMachineTimeMachinePrivateNetAuthFoundationlibobjc.A.dyliblibSystem.B.dylibCoreFoundationCoreServicesIOKitSecurityFoundationDesktopServicesPrivSystemAdministrationlibswiftAccelerate.dylib(weak)libswiftCore.dyliblibswiftCoreFoundation.dylib(weak)libswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftIntents.dylib(weak)libswiftMetal.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dyliblibswiftQuartzCore.dylib(weak)libswiftSpatial.dylib(weak)libswiftUniformTypeIdentifiers.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswift_DarwinFoundation1.dyliblibswift_DarwinFoundation2.dyliblibswiftos.dylib(weak)libswiftsimd.dylib(weak)
Entitlements3
Interesting Strings
Bundle IDs(31)
File Paths(15)
.com.apple.backupd.mvlist.plist/AppleInternal/Library/BuildRoots/4~CAeYugAPHb8k91GSpWjrLuCCfG_R3dqz6qI6bkw/Library/Caches/com.apple.xbs/Sources/backupd/tmutil/SimpleVerbs.m/AppleInternal/Library/BuildRoots/4~CAeYugAPHb8k91GSpWjrLuCCfG_R3dqz6qI6bkw/Library/Caches/com.apple.xbs/Sources/backupd/tmutil/localsnapshots/localsnapshots.m/Library/Preferences/com.apple.TimeMachine.plist/System/Library/ExtensionKit/Extensions/TimeMachineSettings.appex
Network Surface
Networking Frameworks
Endpoints(7)
API Usage
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
1
IPC
0
Analytics
0
Security
1
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
15
Bundle IDs
31
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 607 functions identified
Functions(607)
0x100001b80-[DEBackupIteratorController _isExcluded:]
0x100001e58-[DEBackupIteratorController _isOptimizedMoveFile:atIteratorDepth:]
0x100001efc-[DEBackupIteratorController prepareOlderRoot:newerRoot:]
0x10000217csub_10000217c
0x100002394sub_100002394
0x10000239csub_10000239c
0x1000023a4-[DEBackupIteratorController iteratorWillRun]
0x100002424-[DEBackupIteratorController differenceEngine:shouldSkipOldItem:]
0x1000024e4-[DEBackupIteratorController differenceEngine:shouldSkipNewItem:]
0x1000025ec-[DEBackupIteratorController respectsExclusions]
0x100002600-[DEBackupIteratorController setRespectsExclusions:]
0x100002610-[DEBackupIteratorController deviceRulesEngine]
0x100002620-[DEBackupIteratorController setDeviceRulesEngine:]
0x10000262c-[DEBackupIteratorController .cxx_destruct]
0x100002680sub_100002680
0x10000282csub_10000282c
0x1000028b8sub_1000028b8
0x1000032acsub_1000032ac
0x100003388sub_100003388
0x100003418sub_100003418
Imports476 symbols from 17 dylibs
Exports1
_mh_execute_header0x0