wifivelocityd
executablemacOS2.3 MBx86_64, arm64
Wi-Fi management daemon — manages wireless scanning, association, authentication, and system integration
Drives Wi-Fi hardware through CoreWiFi and low-level 802.11 drivers to scan for networks, establish associations, and manage roaming. Authenticates to networks using stored credentials from keychain and performs WiFi-based location lookup. Exposes five XPC services for system processes and applications to query network state and control wireless settings. Collects extensive telemetry on network diagnostics and device connectivity, submitting data to Apple's analytics pipeline. Accesses MDM profiles to enforce enterprise network policies and communicates with Bluetooth and paired devices to coordinate wireless behavior.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 2.3 MB
- UUID
- E6C3F514-884A-3913-A939-2E57B5A66B34
- Analyzed
- 2026-04-09T10:12:19Z
- CDHash
- 484cd83b57b58f13b3c4851e31d707986765e555655ecedefbe728a938a4a759
Capabilities
LocationAccess WiFi-based location without user consent
com.apple.wifi.bypass-location-services[object Object]NetworkRaw packet capture library
/usr/lib/libpcap.A.dylibNetworkNetwork configuration and reachability
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfigurationNetworkCore networking (HTTP, FTP, DNS)
/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetworkStorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-writeHardwareDirect DriverKit driver communication
com.apple.private.driverkit.driver-accessHardwareWiFi interface control
/System/Library/Frameworks/CoreWLAN.framework/Versions/A/CoreWLANHardwareBluetooth device access
/System/Library/Frameworks/IOBluetooth.framework/Versions/A/IOBluetoothHardwareWiFi configuration (private)
/System/Library/PrivateFrameworks/CoreWiFi.framework/Versions/A/CoreWiFiHardwareLow-level 802.11 driver interface
/System/Library/PrivateFrameworks/IO80211.framework/Versions/A/IO80211HardwareIOKit power/performance reporting
/usr/lib/libIOReport.dylibHardwareBluetooth LE device access
/System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetoothHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitIpcRestricted application group access
com.apple.private.security.restricted-application-groupsIpcShared application group container access
com.apple.security.application-groupsIpcApple identity/messaging services (iMessage)
/System/Library/PrivateFrameworks/IDS.framework/Versions/A/IDSAnalyticsSymptom/diagnostic reporting framework
/System/Library/PrivateFrameworks/Symptoms.framework/Versions/A/Frameworks/SymptomPresentationFeed.framework/Versions/A/SymptomPresentationFeedAnalyticsSymptom/diagnostic reporting framework
/System/Library/PrivateFrameworks/Symptoms.framework/Versions/A/Frameworks/SymptomAnalytics.framework/Versions/A/SymptomAnalyticsSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySystemAccess MDM configuration profiles
com.apple.private.managedclient.configurationprofiles[object Object]SystemMDM configuration profiles
/System/Library/PrivateFrameworks/ConfigurationProfiles.framework/Versions/A/ConfigurationProfilesSystemBackground task scheduling
/System/Library/PrivateFrameworks/BackgroundSystemTasks.framework/Versions/A/BackgroundSystemTasksFrameworks32
CoreWLANConfigurationProfiles(weak)IOBluetoothBloodhoundKit(weak)UserNotifications(weak)libcompression.dylibBackgroundSystemTasks(weak)Symptoms(weak)Symptoms(weak)IDS(weak)libpcap.A.dylib(weak)RapportCoreUtilslibarchive.2.dylibWiFiVelocityCoreWiFiSystemConfigurationIO80211libIOReport.dylibFoundationCoreBluetooth(weak)IOKitCFNetworkLoggingSupportBomSoftLinkingSecuritylibMobileGestalt.dylibCoreData(weak)libobjc.A.dyliblibSystem.B.dylibCoreFoundation
Entitlements40
Interesting Strings
Bundle IDs(188)
File Paths(85)
iokit_constants(1)
telemetry(345)
Network Surfaceentitled
Networking Frameworks
Endpoints(17)
Ipv600:00:00
Hostnamecaptive.apple.com
Urlhttps://%@
Ipv4255.255.255.255
Ipv417.254.0.22
Ipv417.254.0.23
Ipv417.254.0.34
Ipv417.254.0.35
Ipv60:8:16
Hostnamewww.apple.com
Hostnamemacosx26.1.internal
Hostnamecrl.apple.com
API Usage
DNA Capability Vector
Location
1
Keychain
1
Network
5
Storage
2
Hardware
12
IPC
3
Analytics
3
Security
3
System
3
Behavioral Profile
URL Endpoints
7
Telemetry Strings
345
File Paths
85
Bundle IDs
188
IOKit Constants
1
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 2474 functions identified
Functions(2474)
0x100001af0-[W5BGTaskManager init]
0x100001b74-[W5BGTaskManager scheduleRepeatingTask:interval:repeatingTask:]
0x100001f7c-[W5BGTaskManager stopAllRepeatingTasks]
0x10000212csub_10000212c
0x10000227csub_10000227c
0x1000022ccsub_1000022cc
0x100002310-[W5BGTaskManager dealloc]
0x10000236c-[W5BGTaskManager scheduler]
0x100002378-[W5BGTaskManager setScheduler:]
0x100002380-[W5BGTaskManager registeredIdentifiers]
0x10000238c-[W5BGTaskManager setRegisteredIdentifiers:]
0x100002394-[W5DiagnosticsModeManager initWithNetUsageManager:peerManager:userNotificationManager:snifferManager:statusManager:logManager:]
0x1000025bc-[W5DiagnosticsModeManager startDiagnosticsModeWithConfiguration:reply:]
0x100002a04-[W5DiagnosticsModeManager _startDiagnosticsModeWithConfiguration:currentPeer:reply:]
0x100002d6csub_100002d6c
0x100002d7csub_100002d7c
0x100002d84sub_100002d84
0x100002fe0sub_100002fe0
0x100003034sub_100003034
0x100003078sub_100003078
Imports479 symbols from 28 dylibs
Exports1
_mh_execute_header0x0