pfd

JSON
executablemacOS219.7 KBx86_64, arm64

Code signing utility — validates and manages application code signatures

Validates code signatures on macOS executables and frameworks, verifying cryptographic signatures against Apple's certificate authority and checking for tampering or revocation. Accesses the Keychain to retrieve and verify certificates used in code signing operations. Exposes an XPC service for system tools and applications to request signature validation. Communicates with network endpoints, likely for certificate revocation checking (OCSP) or timestamp validation during signature verification.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
219.7 KB
UUID
3CDF2255-CE7C-3062-B7B6-512626A10C61
Analyzed
2026-04-09T09:59:33Z
CDHash
bf6f2f12f4fe55d7aa7c9a11335b1683b8cfb97f6e36f4204de8f06afa343bf0

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
1
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
3
Bundle IDs
6
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 57 functions identified

Functions(57)

0x1000008a8sub_1000008a8
0x100000920sub_100000920
0x100000964sub_100000964
0x1000009a8sub_1000009a8
0x1000009ecsub_1000009ec
0x100000a64sub_100000a64
0x100000ae0sub_100000ae0
0x100000aecsub_100000aec
0x100000dd0sub_100000dd0
0x100000ea4sub_100000ea4
0x100000f00sub_100000f00
0x100000f50sub_100000f50
0x100001444sub_100001444
0x100001548sub_100001548
0x1000016ecsub_1000016ec
0x100001760sub_100001760
0x10000193csub_10000193c
0x100001a04sub_100001a04
0x100001a08sub_100001a08
0x100001a44sub_100001a44

Imports140 symbols from 3 dylibs

Exports1

_mh_execute_header0x0