coreidvd
executablemacOS10.2 MBx86_64, arm64
Apple authentication and identity service — manages authentication, encryption, and secure messaging
Handles user authentication through Touch ID, Face ID, password, and Apple ID mechanisms with access to the device keychain and encryption keys. Manages encrypted messaging and iCloud data synchronization through private Apple identity services and modern networking frameworks. Submits analytics telemetry to Apple and communicates with 14 network endpoints. Provides restricted IPC services for application group access and Bluetooth LE device operations. Performs cryptographic operations and manages certificates and code signing verification.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 10.2 MB
- UUID
- 0AE33712-087F-3FFF-BECE-9E48461BD608
- Analyzed
- 2026-04-09T09:45:57Z
- CDHash
- 4c86fd2e5939573a398c818c0adfce4fa5787bca3af8592cb10f162771af6688
Capabilities
LocationLocation services access
/System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocationLocationLocation services access
/System/Library/Frameworks/_LocationEssentials.framework/Versions/A/_LocationEssentialsKeychainDevice key bag (encryption keys)
/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBagNetworkModern networking framework (NWConnection)
/System/Library/Frameworks/Network.framework/Versions/A/NetworkHardwareBluetooth LE device access
/System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetoothIpcRestricted application group access
com.apple.private.security.restricted-application-groupsIpcShared application group container access
com.apple.security.application-groupsIpcApple identity/messaging services (iMessage)
/System/Library/PrivateFrameworks/IDS.framework/Versions/A/IDSIpcApple identity/messaging services (iMessage)
/System/Library/PrivateFrameworks/IDSFoundation.framework/Versions/A/IDSFoundationAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsSecurityCryptographic operations
/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKitSecurityTouch ID / Face ID / password auth
/System/Library/Frameworks/LocalAuthentication.framework/Versions/A/LocalAuthenticationSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySecurityApple ID authentication
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/AuthKitFrameworks64
CoreIDVSharedCoreIDCredCoreIDVFoundationlibobjc.A.dyliblibSystem.B.dylibAccountsCloudKitCoreBluetoothCoreDataCoreFoundationCoreGraphicsCoreImageCoreLocationCoreServicesCoreTelephonyCryptoKitExtensionFoundationImageIOLocalAuthenticationNetworkSecurity_LocationEssentialsAsyncAlgorithmsInternalAuthKitAuthenticationServicesCoreBiomeStreamsCBORLibraryCoreAnalyticsCrashReporterSupportGraphicsServicesIDSIDSFoundationMobileKeyBagNearFieldPassKitCoreSecureTransactionServicelibsqlite3.dyliblibswiftAccelerate.dylib(weak)libswiftCompression.dylib(weak)libswiftCore.dyliblibswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dyliblibswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftCoreMIDI.dylib(weak)libswiftDarwin.dyliblibswiftDispatch.dyliblibswiftDistributed.dyliblibswiftIOKit.dylib(weak)libswiftIntents.dylib(weak)libswiftMetal.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dyliblibswiftQuartzCore.dylib(weak)libswiftRegexBuilder.dyliblibswiftUniformTypeIdentifiers.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswift_DarwinFoundation1.dyliblibswift_StringProcessing.dyliblibswiftos.dyliblibswiftsimd.dylib(weak)
Entitlements7
Interesting Strings
Bundle IDs(70)
File Paths(40)
/System/Library/Frameworks/Accounts.framework/Versions/A/Accounts/System/Library/Frameworks/CloudKit.framework/Versions/A/CloudKit/System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetooth/System/Library/Frameworks/CoreData.framework/Versions/A/CoreData/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
telemetry(195)
Network Surface
Networking Frameworks
Endpoints(14)
Hostnamesmp-device-content.apple.com
Hostnamecstat.cdn-apple.com
Ipv60:8:16
Hostnamewww.apple.com
Hostnamemacosx26.1.internal
Hostnamecrl.apple.com
API Usage
DNA Capability Vector
Location
2
Keychain
1
Network
2
Storage
0
Hardware
1
IPC
4
Analytics
1
Security
4
System
0
Behavioral Profile
URL Endpoints
7
Telemetry Strings
195
File Paths
40
Bundle IDs
70
IOKit Constants
0
Library Functions
3
Structural HashesSHA-256
Static Libraries3 / 11716 functions identified
Identified Libraries
Functions(11716)
0x100002758-[DIGeocoder geocodeAddressString:completionHandler:]
0x10000283csub_10000283c
0x1000028d4sub_1000028d4
0x1000028e4sub_1000028e4
0x1000028ec-[DIGeocoder geocoder]
0x100002944-[DIGeocoder setGeocoder:]
0x100002950-[DIGeocoder .cxx_destruct]
0x10000295c-[IdentityProofingBiomeDataDeletionManager pruneUserProofingStream]
0x1000029b4sub_1000029b4
0x1000029bcsub_1000029bc
0x1000029d0sub_1000029d0
0x1000029e4sub_1000029e4
0x1000029f8sub_1000029f8
0x100002a0csub_100002a0c
0x100002a10sub_100002a10
0x100002a1csub_100002a1c
0x100002a3csub_100002a3c
0x100002a68sub_100002a68
0x100002a7csub_100002a7c
0x100002a90sub_100002a90
Imports3927 symbols from 49 dylibs
Exports1
_mh_execute_header0x0