nearbyd
executablemacOS19.6 MBx86_64, arm64
System connectivity daemon — manages Wi-Fi, Bluetooth, and location services integration
Coordinates Wi-Fi and Bluetooth hardware control, device pairing, and proximity detection across the system. Accesses location data passively without user prompts and manages location services state. Maintains encrypted keychains and Secure Enclave sealed keys for authentication and device identification. Submits wireless diagnostics and analytics to Apple servers while handling AirDrop and local device discovery. Exposes 36 XPC services to system components for network configuration, reachability queries, and background task scheduling.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 19.6 MB
- UUID
- 2B7395A6-4628-386D-8E34-14CC946A6EA5
- Analyzed
- 2026-04-09T09:57:13Z
- CDHash
- 8bdb1a34f2a0900be6803352091e9c49f6f9b77818583b3863401a07343f4300
Capabilities
LocationAccess location as a system bundle (no user prompt)
com.apple.locationd.effective_bundle[object Object]LocationLocation services access
/System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocationLocationLocation services access
/System/Library/Frameworks/_LocationEssentials.framework/Versions/A/_LocationEssentialsKeychainDevice key bag (encryption keys)
/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBagNetworkModern networking framework (NWConnection)
/System/Library/Frameworks/Network.framework/Versions/A/NetworkNetworkNetwork configuration and reachability
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfigurationStorageException: access additional file paths
com.apple.security.exception.files.home-relative-path.read-writeHardwareException: access additional IOKit user clients
com.apple.security.exception.iokit-user-client-classHardwareWiFi interface control
/System/Library/Frameworks/CoreWLAN.framework/Versions/A/CoreWLANHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitHardwareBluetooth/WiFi proximity detection
/System/Library/PrivateFrameworks/WirelessProximity.framework/Versions/A/WirelessProximityHardwareBluetooth LE device access
/System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetoothHardwareWiFi configuration (private)
/System/Library/PrivateFrameworks/CoreWiFi.framework/Versions/A/CoreWiFiIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-namecom.apple.audio.AudioSessioncom.apple.SharingServicescom.apple.privacyaccountingdcom.apple.systemstatus.publishercom.apple.audioanalyticsdcom.apple.coremedia.mediaplaybackd.player.xpccom.apple.coremedia.mediaplaybackd.remaker.xpccom.apple.coremedia.mediaplaybackd.sandboxserver.xpccom.apple.sessionservicescom.apple.cvhwa.xpccom.apple.mediasafetynet.exceptions.cam
IpcAirDrop/sharing services
/System/Library/PrivateFrameworks/Sharing.framework/Versions/A/SharingAnalyticsWireless diagnostic reporting
/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Versions/A/Libraries/libprotobuf.dylibAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySystemProcess lifecycle management
/System/Library/PrivateFrameworks/RunningBoardServices.framework/Versions/A/RunningBoardServicesSystemBackground task scheduling
/System/Library/PrivateFrameworks/BackgroundSystemTasks.framework/Versions/A/BackgroundSystemTasksFrameworks43
WirelessDiagnosticsCoreMotionCoreMotionAlgorithmsRunningBoardServicesFrontBoardServicesCoreUtilsCoreWLANSecurityAVFoundationGeoServicesCoreTimeSharingNetworklibIOAccessoryManager.dylibCoreServiceslibz.1.dylibCoreMLExternalAccessoryAccelerateCoreAnalyticsCoreNavigationCoreTelephonyMobileKeyBagFoundationEspressoHIDIOKitRapportTCCPowerLogProximitylibSystem.B.dylibSystemConfigurationWirelessProximityCoreBluetoothBackgroundSystemTaskslibMobileGestalt.dylibCoreWiFiCoreLocationlibobjc.A.dyliblibc++.1.dylibCoreFoundation_LocationEssentials
Entitlements69
com.apple.security.exception.mach-lookup.global-name
com.apple.audio.AudioSessioncom.apple.SharingServicescom.apple.privacyaccountingdcom.apple.systemstatus.publishercom.apple.audioanalyticsdcom.apple.coremedia.mediaplaybackd.player.xpccom.apple.coremedia.mediaplaybackd.remaker.xpccom.apple.coremedia.mediaplaybackd.sandboxserver.xpccom.apple.sessionservicescom.apple.cvhwa.xpccom.apple.mediasafetynet.exceptions.cam
Interesting Strings
Bundle IDs(366)
File Paths(100)
"/Library/Caches/com.apple.nearbyd///Library/Caches/com.apple.CoreMotionAlgorithms//AppleInternal/Library/BuildRoots/4~B_wrugBZK8HMR-FYEiBS9OuDT75S9HjCOVqUNQs/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX26.1.Internal.sdk/usr/local/include/google/protobuf/repeated_field.h/AppleInternal/Library/BuildRoots/4~B_wrugBZK8HMR-FYEiBS9OuDT75S9HjCOVqUNQs/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX26.1.Internal.sdk/usr/local/include/google/protobuf/wire_format_lite_inl.h/AppleInternal/Library/BuildRoots/4~B_wrugBZK8HMR-FYEiBS9OuDT75S9HjCOVqUNQs/Library/Caches/com.apple.xbs/Sources/Proximity/Daemon/Services/NearbyInteraction/AppState/PRAppStateMonitor.mm
iokit_constants(55)
telemetry(255)
#alisha-ca,Sending core analytics for Alisha request; requestState:%s sessionState:%s#alisha-ca,Sending core analytics for Alisha session; requestState:%s sessionState:%s#deep-slp PRDiagnosticsService getDeepSleepState %s#deep-slp PRDiagnosticsService getDeepSleepState nullopt#find-range,Mutual-auth still ongoing, not ready for analytics update
Network Surfaceentitled
Networking Frameworks
Endpoints(122)
DNA Capability Vector
Location
4
Keychain
4
Network
3
Storage
2
Hardware
8
IPC
2
Analytics
2
Security
2
System
2
Behavioral Profile
URL Endpoints
5
Telemetry Strings
255
File Paths
100
Bundle IDs
366
IOKit Constants
55
Library Functions
19
Structural HashesSHA-256
Static Libraries19 / 19729 functions identified
Identified Libraries
Functions(19729)
0x100001f70-[PRBTRangingService initWithQueue:]
0x10000209c+[PRBTRangingService serviceWithQueue:]
0x10000210c-[PRBTRangingService machServicesNames]
0x100002118-[PRBTRangingService shouldAcceptNewConnection:]
0x10000242csub_10000242c
0x100002534sub_100002534
0x10000257csub_10000257c
0x1000025b8sub_1000025b8
0x1000026c0-[PRBTRangingService handleXPCDisconnection:]
0x100002904-[PRBTRangingService validateClientEntitlements:]
0x100002994-[PRBTRangingService .cxx_destruct]
0x1000029e4sub_1000029e4
0x100002cb0sub_100002cb0
0x100002cd0sub_100002cd0
0x100002d88sub_100002d88
0x100002da8sub_100002da8
0x100002de4sub_100002de4
0x100002df8sub_100002df8
0x100002e0csub_100002e0c
0x100002e20sub_100002e20
Imports795 symbols from 39 dylibs
Exports1
_mh_execute_header0x0