aea

JSON
executablemacOS216.6 KBx86_64, arm64

Keychain management utility — stores and retrieves security credentials

Manages access to stored credentials, certificates, and keys in the system Keychain. Uses Keychain access group entitlements to retrieve and store sensitive material for authorized applications. Performs telemetry reporting to Apple endpoints and communicates with multiple network services. Handles 7 distinct bundle identifiers, suggesting coordination across multiple system components or applications requiring credential management.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
11.0.0
SDK
26.1.0
File Size
216.6 KB
UUID
D7125E2F-493D-3A53-B877-B5115A91A986
Analyzed
2026-04-07T05:21:15Z
CDHash
20c468a06c285364097371fbfae7c02d128068884eb168995e98d4d78c36fd76

Capabilities

KeychainKeychain access group membership
keychain-access-groups

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
1
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
16
File Paths
0
Bundle IDs
7
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 51 functions identified

Functions(51)

0x100000580sub_100000580
0x100000f9csub_100000f9c
0x10000114csub_10000114c
0x100001308sub_100001308
0x100001588sub_100001588
0x1000016fcsub_1000016fc
0x1000018f0sub_1000018f0
0x100001a6csub_100001a6c
0x100001cfcsub_100001cfc
0x100001e1csub_100001e1c
0x10000205csub_10000205c
0x100002204sub_100002204
0x1000022e0sub_1000022e0
0x100002418sub_100002418
0x1000024e4sub_1000024e4
0x1000025e0sub_1000025e0
0x1000027ecsub_1000027ec
0x10000286csub_10000286c
0x1000028e4sub_1000028e4
0x100002b34sub_100002b34

Imports83 symbols from 2 dylibs

Exports1

_mh_execute_header0x0