KeychainStasher

JSON
executablemacOS152.8 KBx86_64, arm64

Code signing utility — manages certificates and digital signatures for macOS applications

Accesses Keychain to retrieve code signing certificates and keys for signing application binaries and bundles. Manages certificate validation and verification of existing signatures. Communicates with Apple's code signing infrastructure and telemetry endpoints to validate signing status and gather diagnostics. Stores signing metadata and logs in private storage areas. Supports signing for multiple bundle identifiers, indicating use across different application types and workflows.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
152.8 KB
UUID
B761525E-A8BB-3AEE-970D-6A49B1CF8C0E
Analyzed
2026-04-09T09:39:00Z
CDHash
8e51ccb15e8c9aa566a3dd32e0accc3ffdf804f3fd063d6294dd0dfacf0df1d4

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
1
Hardware
0
IPC
0
Analytics
0
Security
1
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
5
File Paths
4
Bundle IDs
9
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 16 functions identified

Functions(16)

0x100000c98-[ServiceDelegate listener:shouldAcceptNewConnection:]
0x100000ddcsub_100000ddc
0x10000141c-[KeychainStasher loadKeyWithReply:]
0x1000017e0-[KeychainStasher stashKey:withReply:]
0x100001ba4-[KeychainStasher baseQuery]
0x100001cf0-[KeychainStasher errorWithStatus:message:]
0x100001e6csub_100001e6c
0x100001e78sub_100001e78
0x100001e88sub_100001e88
0x100001f08sub_100001f08
0x100001f18sub_100001f18
0x100001f24sub_100001f24
0x100001f34sub_100001f34
0x100001fd0sub_100001fd0
0x100002228sub_100002228
0x1000022f0sub_1000022f0

Imports86 symbols from 5 dylibs

Exports1

_mh_execute_header0x0