Bear
executablemacOS8.8 MBx86_64, arm64
System authentication and identity manager — handles biometric, credential, and keychain authentication
Manages authentication mechanisms including Touch ID, Face ID, and password verification through the Security framework and Keychain access. Handles code signing validation and certificate management for system security operations. Accesses location services and manages network configuration and reachability monitoring. Syncs identity and authentication state with iCloud across devices. Exposes an XPC service for system components to request authentication operations. Communicates with 44 network endpoints for authentication services, telemetry, and iCloud synchronization.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 12.4.0
- SDK
- 26.2.0
- File Size
- 8.8 MB
- UUID
- 5C4709AE-0C1C-3E36-AE8D-5EE01B08BB36
- Analyzed
- 2026-04-09T08:23:02Z
- Team ID
- 9K33E3U3T4
- CDHash
- e7c9866badf8cef144235d5c6d95258adfe43b1cf6c865ec724a5a802763aab0
Capabilities
LocationLocation services access
/System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocationNetworkNetwork configuration and reachability
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfigurationSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySecurityTouch ID / Face ID / password auth
/System/Library/Frameworks/LocalAuthentication.framework/Versions/A/LocalAuthenticationFrameworks89
libz.1.dyliblibc++.1.dyliblibiconv.2.dylibSecurityGameplayKitBearCoreMDTextKitUILocalAuthenticationValet_DE9C7E33321_PackageProductSFThemeKitthemisMDExportersCocoaLumberjack_-500FEF4A7B3EDA0C_PackageProductQuickLookCloudKitSketcherKitZxcvbnZipArchive_-57F40D945DCA4E01_PackageProductCoreLocationEventKitMDImportersWebKitAppKitCocoaClassBridgeSFCodeHighlighterCoreDataBearModelBearEncryptionKitQuartzCorePolarMarkSystemConfigurationCoreServicesSocialBearWidgetsAccountsMDTextKitStoreKitTextBundleFoundationlibobjc.A.dyliblibSystem.B.dylibAppIntents(weak)CarbonCombineCoreFoundationCoreGraphicsCoreImageCoreSpotlightCoreTransferable(weak)ImageIOIntentsMetricKit(weak)PDFKitQuickLookUISwiftUIUserNotificationsWidgetKitlibswiftAVFoundation.dylib(weak)libswiftAccelerate.dylib(weak)libswiftCore.dyliblibswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dyliblibswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftCoreMIDI.dylib(weak)libswiftCoreMedia.dylib(weak)libswiftDarwin.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftIntents.dylib(weak)libswiftMetal.dylib(weak)libswiftMetalKit.dylib(weak)libswiftMetricKit.dylib(weak)libswiftModelIO.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dyliblibswiftQuartzCore.dyliblibswiftQuickLookUI.dylib(weak)libswiftSpatial.dylib(weak)libswiftUniformTypeIdentifiers.dyliblibswiftXPC.dylib(weak)libswift_Concurrency.dyliblibswiftos.dyliblibswiftsimd.dylib(weak)libswiftAppKit.dyliblibswiftCoreData.dyliblibswiftCoreGraphics.dyliblibswiftFoundation.dylib
Interesting Strings
Bundle IDs(17)
File Paths(42)
telemetry(64)
/System/Library/Frameworks/MetricKit.framework/Versions/A/MetricKit/Users/runner/work/sentry-cocoa/sentry-cocoa/Sources/Sentry/SentryMetricKitIntegration.m/Users/runner/work/sentry-cocoa/sentry-cocoa/Sources/Sentry/SentryMetricProfiler.m/usr/lib/swift/libswiftMetricKit.dylib23disableCrashDiagnosticsACSb_tcf
Network Surface
Networking Frameworks
Endpoints(44)
Hostname9K33E3U3T4.net.shinyfrog.bear
Hostnametwitter.com
Hostnamewww.reddit.com
Ipv60:8:16
Hostnametest.com
Hostnamethread.name
Hostnamesentry.io
Hostnameprevious.breadcrumbs.1.state
Hostnameprevious.breadcrumbs.2.state
Hostnamebreadcrumbs.1.state
Hostnamebreadcrumbs.2.state
Hostnamedb.name
Hostnamestackoverflow.com
Hostnamewww.apple.com
Hostname9K33E3U3T4.net.shinyfrog.bear01
Hostname9K33E3U3T4.net.shinyfrog.bear0
Hostname9K33E3U3T4.net.shinyfrog.bear06
Hostnameocsp.apple.com
Hostnamecrl.apple.com
Hostnamecerts.apple.com
API Usage
DNA Capability Vector
Location
1
Keychain
0
Network
2
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
2
System
0
Behavioral Profile
URL Endpoints
22
Telemetry Strings
64
File Paths
42
Bundle IDs
17
IOKit Constants
0
Library Functions
1,013
Structural HashesSHA-256
Static Libraries1013 / 15550 functions identified
Identified Libraries
FLAC 1.5.0 (168 fn)FLAC++ 1.5.0 (23 fn)SDL2 2.32.10 (96 fn)SDL2_test 2.32.10 (7 fn)X11 1.8.12 (66 fn)Xdmcp 1.1.5 (1 fn)Xext 1.3.6 (4 fn)Xfixes 6.0.2 (5 fn)Xi 1.8.2 (3 fn)Xtst 1.2.5 (3 fn)aom 3.13.1 (168 fn)ass 0.17.4 (19 fn)avcodec 8.0.1 (4 fn)avfilter 8.0.1 (1 fn)avformat 8.0.1 (4 fn)b2 0.98.1 (2 fn)boost_container 1.89.0 (3 fn)boost_filesystem 1.89.0 (1 fn)boost_graph 1.89.0 (10 fn)boost_json 1.89.0 (13 fn)boost_locale 1.89.0 (7 fn)boost_log 1.89.0 (53 fn)boost_log_setup 1.89.0 (3 fn)boost_math_tr1 1.89.0 (5 fn)boost_process 1.89.0 (1 fn)boost_program_options 1.89.0 (1 fn)boost_regex 1.89.0 (2 fn)boost_test_exec_monitor 1.89.0 (7 fn)boost_url 1.89.0 (2 fn)boost_wave 1.89.0 (5 fn)brotlienc 1.2.0 (1 fn)cares 1.34.5 (7 fn)crypto 3.6.1 (62 fn)event 2.1.12_1 (1 fn)extras 1.6.0 (1 fn)flatbuffers 25.9.23 (5 fn)fontconfig 2.17.1 (3 fn)freetype 2.14.1_1 (1 fn)gettextlib 0.26_1 (20 fn)gettextsrc 0.26_1 (8 fn)gio-2.0 2.86.3 (17 fn)girepository-2.0 2.86.3 (22 fn)glib-2.0 2.86.3 (4 fn)gtest 1.17.0 (9 fn)harfbuzz 12.3.0 (8 fn)harfbuzz-subset 12.3.0 (18 fn)hogweed 3.10.2 (1 fn)intl 0.26_1 (8 fn)jpeg 3.1.3 (1 fn)jq 1.7.1 (3 fn)lcms2 2.17 (4 fn)ldns 1.9.0 (8 fn)leptonica 1.87.0 (25 fn)mp3lame 3.100 (1 fn)mpdec 4.0.1 (1 fn)nettle 3.10.2 (7 fn)opus 1.6 (14 fn)pcre2-32 10.47 (1 fn)pkgconf 2.5.1 (1 fn)rav1e 0.8.1 (3 fn)rubberband 4.0.0 (8 fn)sndfile 1.2.2_1 (1 fn)srt 1.5.4 (5 fn)ssh 0.11.3 (9 fn)ssl 3.6.1 (5 fn)tesseract 5.5.2 (15 fn)unistring 1.4.1 (1 fn)uv 1.51.0 (3 fn)vorbis 1.3.7 (3 fn)vpx 1.15.2 (2 fn)websockets 4.5.2 (4 fn)x264 r3222 (1 fn)x265 4.1 (2 fn)zmq 4.3.5_2 (1 fn)zstd 1.5.7_1 (1 fn)
Function Matches(10)
PKCS12_parseopenssl 3.6Medium
LZ4F_decompresslz4 1.10.0Medium
LZ4F_decompresslz4 1.10.0Medium
RSA_signopenssl 3.6Medium
PKCS12_parseopenssl 3.6Medium
LZ4F_decompresslz4 1.10.0Medium
ZSTD_decompresszstd 1.5.7Medium
ZSTD_decompresszstd 1.5.7Medium
ZSTD_decompresszstd 1.5.7Medium
ZSTD_decompresszstd 1.5.7Medium
Functions(15550)
0x7cdd8+[SFWidgetNoteResolutionResult successWithResolvedWidgetNote:]
0x7ce14+[SFWidgetNoteResolutionResult disambiguationWithWidgetNotesToDisambiguate:]
0x7ce50+[SFWidgetNoteResolutionResult confirmationRequiredWithWidgetNoteToConfirm:]
0x7ce8c+[SFWidgetNoteResolutionResult supportsSecureCoding]
0x1afc1c-[SentryHub initWithClient:andScope:]
0x1afd0c-[SentryHub initWithClient:andScope:andCrashWrapper:andDispatchQueue:]
0x1afe9c-[SentryHub startSession]
0x1b0150-[SentryHub endSession]
0x1b01cc-[SentryHub endSessionWithTimestamp:]
0x1b02bc-[SentryHub storeCurrentSession:]
0x1b032c-[SentryHub deleteCurrentSession]
0x1b0374-[SentryHub closeCachedSessionWithTimestamp:]
0x1b0564-[SentryHub captureSession:]
0x1b0640-[SentryHub incrementSessionErrors]
0x1b06c0-[SentryHub captureFatalEvent:]
0x1b0720-[SentryHub captureFatalEvent:withScope:]
0x1b0818-[SentryHub captureTransaction:withScope:]
0x1b0828-[SentryHub captureTransaction:withScope:additionalEnvelopeItems:]
0x1b0ae4-[SentryHub saveCrashTransaction:]
0x1b0b8c-[SentryHub captureEvent:]
Imports2452 symbols from 50 dylibs
Exports2
__cxa_throw0x1b3610
_mh_execute_header0x0