wifip2pd
executablemacOS11.6 MBx86_64, arm64
Wi-Fi management daemon — controls wireless hardware, handles authentication, and reports diagnostics
Manages Wi-Fi hardware operations including scanning, association, and roaming through direct DriverKit communication and low-level 802.11 driver interfaces. Authenticates to networks using stored credentials from the Keychain and device key bag, and performs cryptographic operations for Wi-Fi security protocols. Handles peer-to-peer Wi-Fi connections (AWDL/AirDrop) and maintains wireless configuration state. Submits Wi-Fi-specific analytics and telemetry to Apple's analytics pipeline. Exposes five XPC services for system clients to query and control wireless settings, and enforces security through hardened runtime protections.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 11.6 MB
- UUID
- 1DC4D0C9-4075-330C-87FB-E280F6C18343
- Analyzed
- 2026-04-09T10:12:11Z
- CDHash
- ab41ed1d3c78aedd8ad07a5f92acb4f381dd0a72710a804856d4156df077094d
Capabilities
KeychainDevice key bag (encryption keys)
/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBagNetworkModern networking framework (NWConnection)
/System/Library/Frameworks/Network.framework/Versions/A/NetworkNetworkNetwork configuration and reachability
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfigurationHardwareDirect DriverKit driver communication
com.apple.private.driverkit.driver-accessHardwareWiFi peer-to-peer (AWDL/AirDrop)
/System/Library/PrivateFrameworks/WiFiPeerToPeer.framework/Versions/A/WiFiPeerToPeerHardwareWiFi configuration (private)
/System/Library/PrivateFrameworks/CoreWiFi.framework/Versions/A/CoreWiFiHardwareLow-level 802.11 driver interface
/System/Library/PrivateFrameworks/IO80211.framework/Versions/A/IO80211HardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-namecom.apple.lsd.mapdbcom.apple.coreservices.quarantine-resolvercom.apple.networkd_privilegedcom.apple.private.skywalk.observe-statscom.apple.private.nehelper.privilegedcom.apple.MobileInternetSharingcom.apple.analyticsdcom.apple.securityd.ckkscom.apple.managedconfiguration.profiledcom.apple.private.corewifi.internal-xpccom.apple.SystemConfiguration.configdcom.apple.SystemConfiguration.helpercom.apple.usernotifications.usernotificationservicecom.apple.usernotifications.listenercom.apple.WirelessCoexManagercom.apple.PineBoardServicescom.apple.CARenderServercom.apple.SBUserNotificationcom.apple.rapport
AnalyticsWiFi-specific analytics pipeline
/System/Library/PrivateFrameworks/WiFiAnalytics.framework/Versions/A/WiFiAnalyticsAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsSecurityCryptographic operations
/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKitSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySystemProcess lifecycle management
/System/Library/PrivateFrameworks/RunningBoardServices.framework/Versions/A/RunningBoardServicesFrameworks45
libMobileGestalt.dylibWiFiPeerToPeerCoreWiFiIO80211IOKitMobileKeyBagNetrbWiFiAnalyticsWiFiPolicyAssertionServicesWirelessCoexManagerRunningBoardServicesFoundationlibobjc.A.dyliblibSystem.B.dylibCombineCoreFoundationCoreServicesCryptoKitLightweightCodeRequirementsNetworkSecuritySystemConfigurationUserNotificationsCoreAnalyticsRapportlibswiftAccelerate.dylib(weak)libswiftCore.dyliblibswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dyliblibswiftCoreMIDI.dylib(weak)libswiftDarwin.dyliblibswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftMetal.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dyliblibswiftQuartzCore.dylib(weak)libswiftUniformTypeIdentifiers.dylib(weak)libswiftXPC.dyliblibswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswift_DarwinFoundation1.dyliblibswiftos.dyliblibswiftsimd.dylib(weak)
Entitlements43
com.apple.security.exception.mach-lookup.global-name
com.apple.lsd.mapdbcom.apple.coreservices.quarantine-resolvercom.apple.networkd_privilegedcom.apple.private.skywalk.observe-statscom.apple.private.nehelper.privilegedcom.apple.MobileInternetSharingcom.apple.analyticsdcom.apple.securityd.ckkscom.apple.managedconfiguration.profiledcom.apple.private.corewifi.internal-xpccom.apple.SystemConfiguration.configdcom.apple.SystemConfiguration.helpercom.apple.usernotifications.usernotificationservicecom.apple.usernotifications.listenercom.apple.WirelessCoexManagercom.apple.PineBoardServicescom.apple.CARenderServercom.apple.SBUserNotificationcom.apple.rapport
Interesting Strings
Bundle IDs(166)
File Paths(30)
/Library/Preferences/SystemConfiguration/com.apple.wifip2p/Library/Preferences/SystemConfiguration/com.apple.wifip2p.plist/System/Library/Frameworks/Combine.framework/Versions/A/Combine/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
iokit_constants(37)
telemetry(118)
Network Surface
Networking Frameworks
Endpoints(9)
API Usage
DNA Capability Vector
Location
0
Keychain
2
Network
3
Storage
0
Hardware
7
IPC
1
Analytics
3
Security
4
System
1
Behavioral Profile
URL Endpoints
5
Telemetry Strings
118
File Paths
30
Bundle IDs
166
IOKit Constants
37
Library Functions
4
Structural HashesSHA-256
Static Libraries4 / 19874 functions identified
Identified Libraries
Functions(19874)
0x100001f48sub_100001f48
0x1000021b8sub_1000021b8
0x1000024f0sub_1000024f0
0x100002514sub_100002514
0x100002558sub_100002558
0x100002568sub_100002568
0x100002570sub_100002570
0x1000025c8sub_1000025c8
0x100002610sub_100002610
0x100002674sub_100002674
0x1000026bcsub_1000026bc
0x1000026c4sub_1000026c4
0x100002788sub_100002788
0x100002888sub_100002888
0x1000028d4sub_1000028d4
0x1000029ecsub_1000029ec
0x100002ad0sub_100002ad0
0x100002b40sub_100002b40
0x100002c34sub_100002c34
0x100002c80sub_100002c80
Imports1900 symbols from 33 dylibs
Exports1
_mh_execute_header0x0