wifiFirmwareLoader

JSON
executablemacOS220.4 KBx86_64, arm64

Wi-Fi authentication agent — performs secure credential exchange during network association

Executes Wi-Fi authentication protocols when systems associate with wireless networks. Accesses Secure Enclave sealed keys through the keychain to handle credential material securely. Controls packet capture and communicates directly with wireless hardware drivers to process authentication frames. Manages network configuration and reachability state during the authentication handshake. Contacts multiple network endpoints during operation, likely for enterprise authentication or certificate validation workflows.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
220.4 KB
UUID
97A8F185-0BFE-305B-8507-194790D74545
Analyzed
2026-04-09T10:12:02Z
CDHash
85fee5c19b904b600d4df9a1090adece9ec5359e4c4941345853be9f92e87ba4

Interesting Strings

Bundle IDs(28)

com.apple.DriverKit-AppleBCMWLAN0)$com.apple.corecapture.manager-access$com.apple.developer.hardened-process(com.apple.private.ZhuGeSupport.CopyValue(version 1)(deny default)(import "system.sb")(allow file-read-metadata (literal "/Library/Preferences"))(allow file-read-data (literal "/private/var/preferences/SystemConfiguration/com.apple.wifi.plist"))(allow file-read-data (literal "/Library/Managed Preferences/mobile/com.apple.wifiFirmwareLoader.plist"))(allow mach-lookup (global-name "com.apple.system.logger"))(allow mach-lookup (global-name "com.apple.system.notification_center"))(allow mach-lookup (global-name "com.apple.corecaptured"))(allow mach-lookup (global-name "com.apple.PowerManagement.control"))(allow ipc-posix-shm-read-data (ipc-posix-name "apple.shm.notification_center"))(allow sysctl-read)(allow iokit-open (iokit-user-client-class "IOUserUserClient"))(allow iokit-open (iokit-user-client-class "AppleBCMWLANUserClient"))(allow iokit-open (iokit-user-client-class "AppleKeyStoreUserClient"))(allow iokit-set-properties (iokit-property "PlatformConfig"))(allow iokit-set-properties (iokit-property "WiFiMSFCal"))(allow iokit-set-properties (iokit-property "WiFiFdrCal"))(allow iokit-set-properties (iokit-property "WiFiGenericCal"))(allow iokit-set-properties (iokit-property "WiFiMSFSource"))(allow iokit-set-properties (iokit-property "HWIdentifiersLate"))(allow file-read* (subpath "/usr/share/firmware/wifi"))(allow file-read* (subpath "/usr/local/share/firmware"))(allow file-read* (subpath "/AppleInternal"))(allow file-read-metadata (literal "/usr"))(allow file-read-metadata (regex #"^/usr/.*$"))(allow file-read-metadata (literal "/var"))(allow file-write* (literal "/private/var/log/wifiFirmwareLoader.log"))(allow file-read* (literal "/private/var/log/wifiFirmwareLoader.log"))(allow file-read-metadata (regex #"^/private/var/db/timezone/.*$"))(allow file-read-data (regex #"^/usr/share/zoneinfo.default/.*$"))(allow file-read-data (literal "/Library/Preferences/SystemConfiguration/com.apple.wifiFirmwareLoader.plist"))

File Paths(9)

(version 1)(deny default)(import "system.sb")(allow file-read-metadata (literal "/Library/Preferences"))(allow file-read-data (literal "/private/var/preferences/SystemConfiguration/com.apple.wifi.plist"))(allow file-read-data (literal "/Library/Managed Preferences/mobile/com.apple.wifiFirmwareLoader.plist"))(allow mach-lookup (global-name "com.apple.system.logger"))(allow mach-lookup (global-name "com.apple.system.notification_center"))(allow mach-lookup (global-name "com.apple.corecaptured"))(allow mach-lookup (global-name "com.apple.PowerManagement.control"))(allow ipc-posix-shm-read-data (ipc-posix-name "apple.shm.notification_center"))(allow sysctl-read)(allow iokit-open (iokit-user-client-class "IOUserUserClient"))(allow iokit-open (iokit-user-client-class "AppleBCMWLANUserClient"))(allow iokit-open (iokit-user-client-class "AppleKeyStoreUserClient"))(allow iokit-set-properties (iokit-property "PlatformConfig"))(allow iokit-set-properties (iokit-property "WiFiMSFCal"))(allow iokit-set-properties (iokit-property "WiFiFdrCal"))(allow iokit-set-properties (iokit-property "WiFiGenericCal"))(allow iokit-set-properties (iokit-property "WiFiMSFSource"))(allow iokit-set-properties (iokit-property "HWIdentifiersLate"))(allow file-read* (subpath "/usr/share/firmware/wifi"))(allow file-read* (subpath "/usr/local/share/firmware"))(allow file-read* (subpath "/AppleInternal"))(allow file-read-metadata (literal "/usr"))(allow file-read-metadata (regex #"^/usr/.*$"))(allow file-read-metadata (literal "/var"))(allow file-write* (literal "/private/var/log/wifiFirmwareLoader.log"))(allow file-read* (literal "/private/var/log/wifiFirmwareLoader.log"))(allow file-read-metadata (regex #"^/private/var/db/timezone/.*$"))(allow file-read-data (regex #"^/usr/share/zoneinfo.default/.*$"))(allow file-read-data (literal "/Library/Preferences/SystemConfiguration/com.apple.wifiFirmwareLoader.plist"))/Library/Preferences/SystemConfiguration/com.apple.wifiFirmwareLoader.plist/System/Library/DriverExtensions/com.apple.DriverKit-AppleBCMWLAN.dext/Firmware//System/Library/DriverExtensions/com.apple.DriverKit-AppleBCMWLAN.dext/PlatformConfig//System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation

Network Surface

Networking Frameworks

API Usage

DNA Capability Vector

Location
0
Keychain
1
Network
1
Storage
0
Hardware
2
IPC
0
Analytics
0
Security
2
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
9
Bundle IDs
28
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 23 functions identified

Functions(23)

0x100000910sub_100000910
0x100000ef0sub_100000ef0
0x100000efcsub_100000efc
0x10000161csub_10000161c
0x1000057acsub_1000057ac
0x100005968sub_100005968
0x100006ef8sub_100006ef8
0x100007064sub_100007064
0x10000708csub_10000708c
0x1000070bcsub_1000070bc
0x1000071a8sub_1000071a8
0x1000071d0sub_1000071d0
0x100007210sub_100007210
0x10000724csub_10000724c
0x100007250sub_100007250
0x10000725csub_10000725c
0x1000072bcsub_1000072bc
0x1000073e4sub_1000073e4
0x100007848sub_100007848
0x1000079a8sub_1000079a8

Imports129 symbols from 5 dylibs

Exports1

_mh_execute_header0x0