kgetcred

JSON
executablemacOS154.7 KBx86_64, arm64

Unknown utility — requires deeper analysis to determine function

This signed Apple binary exposes an XPC service for inter-process communication and links against private frameworks, suggesting it performs a system-level function. It contains 15 functions and references 11 bundle identifiers and multiple file paths. The binary communicates with 9 network endpoints and includes 4 URL references. Without access to symbol information, function signatures, or bundle metadata, the specific purpose cannot be reliably determined from the provided telemetry alone.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
154.7 KB
UUID
64BE79DE-2D29-35EA-99B0-A99503B11CF3
Analyzed
2026-04-07T05:21:16Z
CDHash
1af46e6890f82e4657993812d39de7bbf0403868bcedaf8685c53fa76cc89186

Interesting Strings

Bundle IDs(11)

File Paths(11)

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
11
Bundle IDs
11
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 15 functions identified

Functions(15)

0x100000640main
0x100000d88usage
0x100000dc0rk_print_version
0x100000e8carg_printusage
0x100000ee4arg_printusage_i18n
0x100001a54builtin_i18n
0x100001a68mandoc_template
0x100002254check_column
0x1000022c8print_arg
0x100002504getarg
0x100002668arg_match_long
0x100002ca0arg_match_short
0x1000031a8add_string
0x10000327crk_get_window_size
0x1000033bcrk_random_init

Imports59 symbols from 2 dylibs

Exports7

_mh_execute_header0x0
arg_printusage0xe8c
arg_printusage_i18n0xee4
getarg0x2504
rk_get_window_size0x327c
rk_print_version0xdc0
rk_random_init0x33bc