wfsctl
executablemacOS218.0 KBx86_64, arm64
Security framework extension — manages certificates and code signing operations
Extends macOS security infrastructure to handle certificate validation, keychain access, and code signing verification. Processes cryptographic operations through the Security framework and manages access to stored credentials and signing keys. Communicates with network endpoints, likely for certificate revocation checking or signing service validation. Operates as a system component with direct keychain integration and certificate authority interactions.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 218.0 KB
- UUID
- 8C2DA176-FD0B-3F22-927E-9DFC97EF8518
- Analyzed
- 2026-04-07T05:21:14Z
- CDHash
- 9c9210ddbe6af2638f44529ec01bb539dee00995e7647a2353e07eff150a2fd0
Capabilities
SecuritySecurity framework extensions
/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundationSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks7
Interesting Strings
Bundle IDs(1)
File Paths(10)
Network Surface
Networking Frameworks
Endpoints(7)
API Usage
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
2
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
10
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 37 functions identified
Functions(37)
0x100000c38-[IdentityManager init]
0x100000cec-[IdentityManager initWithServerName:]
0x100000e64-[IdentityManager createIdentityAndUpdate]
0x100000edc+[IdentityManager exportIdentity:certificateRef:keyRef:]
0x1000014b0+[IdentityManager CreateSHA256HashStringWithData:]
0x100001620+[IdentityManager CertIDForIdentity:]
0x1000016fc+[IdentityManager GetPreferredIdentityForName:]
0x100001dec+[IdentityManager CreateSelfSignedIdentityNamed:allowedExecutablePaths:]
0x10000273c-[IdentityManager serverName]
0x100002748-[IdentityManager setServerName:]
0x100002750-[IdentityManager certID]
0x10000275c-[IdentityManager setCertID:]
0x100002764-[IdentityManager .cxx_destruct]
0x1000027a8-[WFSCtl init]
0x100002b08-[WFSCtl isEnabled]
0x100002b14-[WFSCtl plistPathForLabel:]
0x100002b7c-[WFSCtl launchJobIsLoaded:]
0x100002c8c-[WFSCtl loadLaunchJob:]
0x100002d80-[WFSCtl unloadLaunchJob:]
0x100002ec0-[WFSCtl configIsValid]
Imports105 symbols from 7 dylibs
Exports1
_mh_execute_header0x0