nesessionmanager
executablemacOS2.4 MBx86_64, arm64
Wi-Fi management daemon — configures wireless networks and handles authentication
Manages Wi-Fi network configuration, association, and authentication on macOS systems. Performs wireless scanning, connects to networks using stored credentials from the system keychain, and handles enterprise authentication methods. Communicates with network configuration APIs and supports VPN and DNS proxy functionality. Submits Wi-Fi diagnostics and analytics to Apple. Exposes XPC services for system preferences and other clients to manage wireless settings, and writes diagnostic data to private storage areas.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 2.4 MB
- UUID
- BE0C6785-58C9-38B8-827F-4852F21F5C92
- Analyzed
- 2026-04-09T09:57:28Z
- CDHash
- 78a154e09d201bf9735cf6adb5607000aaa29a0ae119f1088353e66b2d353c2d
Capabilities
KeychainKeychain access group membership
keychain-access-groupsNetworkVPN, content filter, DNS proxy APIs
/System/Library/Frameworks/NetworkExtension.framework/Versions/A/NetworkExtensionNetworkModern networking framework (NWConnection)
/System/Library/Frameworks/Network.framework/Versions/A/NetworkNetworkNetwork configuration and reachability
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfigurationStoragePrivate storage area access
com.apple.private.security.storage.NetworkExtension[object Object]HardwareWiFi configuration (private)
/System/Library/PrivateFrameworks/CoreWiFi.framework/Versions/A/CoreWiFiHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks20
Entitlements20
Interesting Strings
Bundle IDs(109)
File Paths(28)
/Library/Preferences/com.apple.networkextension.control.plist/System/Library/CoreServices/Captive Network Assistant.app/Contents/MacOS/Captive Network Assistant/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices/System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter
telemetry(8)
Network Surface
Networking Frameworks
Endpoints(16)
Ipv4127.0.0.1
Ipv410.0.0.10
Ipv4255.0.0.0
Ipv40.0.0.0
Ipv4224.0.0.0
Ipv4255.255.255.255
Hostnameuse-application-dns.net
Ipv60:8:16
Hostnamewww.apple.com
Hostnamemacosx26.1.internal
Hostnamecrl.apple.com
DNA Capability Vector
Location
0
Keychain
2
Network
3
Storage
1
Hardware
2
IPC
0
Analytics
2
Security
2
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
8
File Paths
28
Bundle IDs
109
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 1944 functions identified
Functions(1944)
0x100001428-[NEAgentHotspotExtension .cxx_destruct]
0x1000014c8-[NEAgentHotspotExtension cancelWithError:]
0x10000159c-[NEAgentHotspotExtension handleXPCError]
0x100001800sub_100001800
0x100001934sub_100001934
0x100001970sub_100001970
0x1000019ac-[NEAgentHotspotExtension stopWithReason:]
0x100001accsub_100001acc
0x100001c94sub_100001c94
0x100001e5csub_100001e5c
0x100001e64sub_100001e64
0x100001e6c-[NEAgentHotspotExtension startAuthenticationProvider]
0x100001ef8sub_100001ef8
0x100001fa8sub_100001fa8
0x100002170-[NEAgentHotspotExtension startEvaluationProvider]
0x1000021fcsub_1000021fc
0x1000022acsub_1000022ac
0x100002474-[NEAgentHotspotExtension updateConfiguration:]
0x1000025c8sub_1000025c8
0x1000025e4-[NEAgentHotspotExtension wakeup]
Imports657 symbols from 19 dylibs
Exports1
_mh_execute_header0x0