kgetcred
executablemacOS154.7 KBx86_64, arm64
Unknown utility — requires deeper analysis to determine function
This signed Apple binary exposes an XPC service for inter-process communication and links against private frameworks, suggesting it performs a system-level function. It contains 15 functions and references 11 bundle identifiers and multiple file paths. The binary communicates with 9 network endpoints and includes 4 URL references. Without access to symbol information, function signatures, or bundle metadata, the specific purpose cannot be reliably determined from the provided telemetry alone.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 154.7 KB
- UUID
- 64BE79DE-2D29-35EA-99B0-A99503B11CF3
- Analyzed
- 2026-04-07T05:21:16Z
- CDHash
- 1af46e6890f82e4657993812d39de7bbf0403868bcedaf8685c53fa76cc89186
Frameworks2
Interesting Strings
Bundle IDs(11)
/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libroken-application.a(get_window_size.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libroken-application.a(getarg.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libroken-application.a(rand.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libvers.a(print_version.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/TempContent/Objects/Heimdal.build/kgetcred.build/DerivedSources/
File Paths(11)
/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libroken-application.a(get_window_size.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libroken-application.a(getarg.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libroken-application.a(rand.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/Symbols/BuiltProducts/libvers.a(print_version.o)/AppleInternal/Library/BuildRoots/4~B_wougBGWjzM8QKbi2GuAEglYkgxmj5cFANDixA/Library/Caches/com.apple.xbs/Binaries/HeimdalExecutables/install/TempContent/Objects/Heimdal.build/kgetcred.build/DerivedSources/
Network Surface
Endpoints(9)
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
11
Bundle IDs
11
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 15 functions identified
Functions(15)
0x100000640main
0x100000d88usage
0x100000dc0rk_print_version
0x100000e8carg_printusage
0x100000ee4arg_printusage_i18n
0x100001a54builtin_i18n
0x100001a68mandoc_template
0x100002254check_column
0x1000022c8print_arg
0x100002504getarg
0x100002668arg_match_long
0x100002ca0arg_match_short
0x1000031a8add_string
0x10000327crk_get_window_size
0x1000033bcrk_random_init
Imports59 symbols from 2 dylibs
Exports7
_mh_execute_header0x0
arg_printusage0xe8c
arg_printusage_i18n0xee4
getarg0x2504
rk_get_window_size0x327c
rk_print_version0xdc0
rk_random_init0x33bc