sharingd
executablemacOS17.0 MBx86_64, arm64
System connectivity daemon — manages Wi-Fi, Bluetooth, and Apple device pairing
Manages wireless connectivity across Wi-Fi, Bluetooth, and peer-to-peer protocols (AWDL/AirDrop). Handles Wi-Fi scanning, association, authentication, and roaming through direct hardware driver access. Maintains Bluetooth connections and proximity detection for paired Apple devices. Authenticates users via Apple ID, Touch ID, and keychain credentials, storing security keys in the Secure Enclave. Exposes 122 XPC services for system preferences, iMessage, AirDrop, and location services to query and control wireless and device pairing settings. Collects usage analytics and evaluates feature flags. Listens for incoming network connections and synchronizes iCloud data.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 17.0 MB
- UUID
- A563AB5C-59D0-3CA8-9FE7-F37C8F36B9DD
- Analyzed
- 2026-04-09T10:04:11Z
- CDHash
- c0adf7ea35334be70ee24d974a984e19a8124f3eb671a59fd34e1aea20839060
Capabilities
LocationLocation services access
/System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocationKeychainKeychain access group membership
keychain-access-groupsKeychainHardware key storage (Secure Enclave)
/System/Library/PrivateFrameworks/AppleKeyStore.framework/Versions/A/AppleKeyStoreKeychainDevice key bag (encryption keys)
/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBagNetworkVPN, content filter, DNS proxy APIs
/System/Library/Frameworks/NetworkExtension.framework/Versions/A/NetworkExtensionNetworkCore networking (HTTP, FTP, DNS)
/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetworkNetworkNetwork configuration and reachability
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfigurationNetworkModern networking framework (NWConnection)
/System/Library/Frameworks/Network.framework/Versions/A/NetworkStorageAddress book access
/System/Library/Frameworks/Contacts.framework/Versions/A/ContactsStorageAddress book access
/System/Library/Frameworks/ContactsUI.framework/Versions/A/ContactsUIHardwareDirect DriverKit driver communication
com.apple.private.driverkit.driver-accessHardwareWiFi configuration (private)
/System/Library/PrivateFrameworks/CoreWiFi.framework/Versions/A/CoreWiFiHardwareLow-level 802.11 driver interface
/System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Apple80211HardwareWiFi interface control
/System/Library/Frameworks/CoreWLAN.framework/Versions/A/CoreWLANHardwareBluetooth device access
/System/Library/Frameworks/IOBluetooth.framework/Versions/A/IOBluetoothHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitHardwareBluetooth LE device access
/System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetoothHardwareBluetooth/WiFi proximity detection
/System/Library/PrivateFrameworks/WirelessProximity.framework/Versions/A/WirelessProximityHardwareWiFi peer-to-peer (AWDL/AirDrop)
/System/Library/PrivateFrameworks/WiFiPeerToPeer.framework/Versions/A/WiFiPeerToPeerIpcRestricted application group access
com.apple.private.security.restricted-application-groupsIpcShared application group container access
com.apple.security.application-groupsIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-namecom.apple.analyticsdcom.apple.mediaanalysisd.analysiscom.apple.callkit.callcontrollerhostcom.apple.CompanionLinkcom.apple.diagnosticextensionsd.sharing-wakeupcom.apple.dmdcom.apple.familycircle.agentcom.apple.homed.xpccom.apple.findmy.findmylocate.settingscom.apple.findmy.findmylocate.friendshipservicecom.apple.findmy.findmylocate.locationservicecom.apple.networkd_privilegedcom.apple.PairingManagercom.apple.rapportcom.apple.security.octagoncom.apple.sharing.transfer-observercom.apple.SharingServicescom.apple.CloudSharing.SPIHelpercom.apple.bluetooth.xpccom.apple.synapse.DocumentWorkflowsServicecom.apple.wifip2pdcom.apple.ScreenTimeAgent.communicationcom.apple.biome.access.usercom.apple.biome.compute.sourcecom.apple.mobileactivationdcom.apple.containermanagerdcom.apple.telephonyutilities.callservicesdaemon.callprovidermanagercom.apple.telephonyutilities.callservicesdaemon.conversationmanagercom.apple.commcenter.coretelephony.xpccom.apple.icloud.fmfd
IpcApple identity/messaging services (iMessage)
/System/Library/PrivateFrameworks/IDS.framework/Versions/A/IDSIpcProtocol buffer serialization
/System/Library/PrivateFrameworks/ProtocolBuffer.framework/Versions/A/ProtocolBufferIpcAirDrop/sharing services
/System/Library/PrivateFrameworks/Sharing.framework/Versions/A/SharingIpcAirDrop/sharing services
/System/Library/PrivateFrameworks/SharingXPCServices.framework/Versions/A/SharingXPCServicesIpcApple identity/messaging services (iMessage)
/System/Library/PrivateFrameworks/IDSFoundation.framework/Versions/A/IDSFoundationIpcAirDrop/sharing services
/System/Library/PrivateFrameworks/SharingUI.framework/Versions/A/SharingUIAnalyticsUsage prediction and tracking
/System/Library/PrivateFrameworks/CoreDuet.framework/Versions/A/CoreDuetAnalyticsContact/people suggestion engine
/System/Library/PrivateFrameworks/PeopleSuggester.framework/Versions/A/PeopleSuggesterSecurityApple ID authentication
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/AuthKitSecurityApple ID authentication
/System/Library/PrivateFrameworks/AuthKitUI.framework/Versions/A/AuthKitUISecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySecurityCryptographic operations
/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKitSecurityTouch ID / Face ID / password auth
/System/Library/Frameworks/LocalAuthentication.framework/Versions/A/LocalAuthenticationSystemControl display via SkyLight (window server)
com.apple.private.SkyLight.displaycontrol[object Object]SystemMDM configuration profiles
/System/Library/PrivateFrameworks/ConfigurationProfiles.framework/Versions/A/ConfigurationProfilesSystemMDM device management
/System/Library/PrivateFrameworks/DeviceManagement.framework/Versions/A/DeviceManagementSystemProcess lifecycle management
/System/Library/PrivateFrameworks/RunningBoardServices.framework/Versions/A/RunningBoardServicesSystemWindow server (display control)
/System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/SkyLightSystemFeature flag evaluation
/System/Library/PrivateFrameworks/FeatureFlags.framework/Versions/A/FeatureFlagsSystemApp installation coordination
/System/Library/PrivateFrameworks/InstallCoordination.framework/Versions/A/InstallCoordinationFrameworks118
AppleKeyStoreMobileActivationMacOSCoreWiFiCommonUtilitiesSynapseUserSafetyNearbyInteractionNetworkExtensionConfigurationProfilesAccountsAOSKitAppKitApple80211AppleAccountAudioToolboxAuthKitAuthKitUIBomCFNetworkContactsContactsUICoreCDPCoreDuetCoreGraphicsCoreLocationCoreServicesCoreUtilsCoreWLANDeviceManagementDiskArbitrationDiskImagesEmbeddedOSSupportHostFamilyCircleFoundationIconServicesToneLibraryIDSImageIOIOBluetoothIOKitlibEndpointSecuritySystem.dyliblibicucore.A.dyliblibsysdiagnose.dyliblibz.1.dylibMediaConversionServiceMobileKeyBagNetAuthNetFSPeopleSuggesterPersistentConnectionPhoneNumbersPhotosFormatsCoreBluetoothProtocolBufferQuartzCoreRapportRunningBoardServicesSecuritySharingSkyLightSharingXPCServicesSystemAdministrationSystemConfigurationTelephonyUtilitiesUniformTypeIdentifiersWirelessProximitylibobjc.A.dyliblibSystem.B.dylibCloudKitCombineCoreFoundationCryptoKitLocalAuthenticationNetworkUserNotificationsCacheDeleteClassroomKitCorePhoneNumbersCoreUtilsSwiftFeatureFlagsIDSFoundationInstallCoordinationLocalStatusKitProductKitCoreSafariCoreSharingUISoftLinkingWiFiPeerToPeerlibswiftAVFoundation.dylib(weak)libswiftAccelerate.dylib(weak)libswiftCompression.dylib(weak)libswiftCore.dyliblibswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dyliblibswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftCoreMIDI.dylib(weak)libswiftCoreMedia.dylib(weak)libswiftDarwin.dyliblibswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftIntents.dylib(weak)libswiftMLCompute.dylib(weak)libswiftMetal.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dyliblibswiftQuartzCore.dylib(weak)libswiftSpatial.dylib(weak)libswiftSystem.dyliblibswiftUniformTypeIdentifiers.dyliblibswiftVideoToolbox.dylib(weak)libswiftXPC.dyliblibswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswift_DarwinFoundation1.dyliblibswift_StringProcessing.dyliblibswiftos.dyliblibswiftsimd.dylib(weak)
Entitlements128
com.apple.security.exception.mach-lookup.global-name
com.apple.analyticsdcom.apple.mediaanalysisd.analysiscom.apple.callkit.callcontrollerhostcom.apple.CompanionLinkcom.apple.diagnosticextensionsd.sharing-wakeupcom.apple.dmdcom.apple.familycircle.agentcom.apple.homed.xpccom.apple.findmy.findmylocate.settingscom.apple.findmy.findmylocate.friendshipservicecom.apple.findmy.findmylocate.locationservicecom.apple.networkd_privilegedcom.apple.PairingManagercom.apple.rapportcom.apple.security.octagoncom.apple.sharing.transfer-observercom.apple.SharingServicescom.apple.CloudSharing.SPIHelpercom.apple.bluetooth.xpccom.apple.synapse.DocumentWorkflowsServicecom.apple.wifip2pdcom.apple.ScreenTimeAgent.communicationcom.apple.biome.access.usercom.apple.biome.compute.sourcecom.apple.mobileactivationdcom.apple.containermanagerdcom.apple.telephonyutilities.callservicesdaemon.callprovidermanagercom.apple.telephonyutilities.callservicesdaemon.conversationmanagercom.apple.commcenter.coretelephony.xpccom.apple.icloud.fmfd
Interesting Strings
Bundle IDs(728)
File Paths(144)
,/private/var/tmp/ShareSheetTestingSnapshots/0j/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/ACMLib/ACMLib.c/AppleInternal/Library/BuildRoots/4~B_wCugD1GT6JPDmhh1RrUK5pccLqhjehz9nqD_o/Library/Caches/com.apple.xbs/Sources/AppleCredentialManager_ClientLibs/common/LibCall.c/AppleInternal/Library/BuildRoots/4~B_xMugAkKgOWyTgNUzxileHU_yZ-wBAwmo2KWng/Library/Caches/com.apple.xbs/Sources/Sharing_executables/Daemon/Network+SFAirDropMessage.swift/AppleInternal/Library/BuildRoots/4~B_xMugAkKgOWyTgNUzxileHU_yZ-wBAwmo2KWng/Library/Caches/com.apple.xbs/Sources/Sharing_executables/Daemon/SDAirDropAskFanoutHelper.swift
iokit_constants(10)
telemetry(174)
Network Surfaceentitled
Networking Frameworks
Endpoints(21)
Hostnameme.com
Hostnamemac.com
Hostnameicloud.com
Hostnameaidc.apple.com
Hostnamegmail.com
Hostnamegooglemail.com
Hostnamefake.com
Hostnameitunes.apple.com
Ipv60:8:16
Hostnamewww.apple.com
Ipv420.72.2.1
Hostnamemacosx26.1.internal
Hostnamecrl.apple.com
DNA Capability Vector
Location
1
Keychain
4
Network
8
Storage
6
Hardware
10
IPC
10
Analytics
2
Security
7
System
7
Behavioral Profile
URL Endpoints
12
Telemetry Strings
174
File Paths
144
Bundle IDs
728
IOKit Constants
10
Library Functions
2
Structural HashesSHA-256
Static Libraries2 / 24121 functions identified
Identified Libraries
Functions(24121)
0x100004000-[SDAuthenticationPairingDisable setVersion:]
0x100004024-[SDAuthenticationPairingDisable setHasVersion:]
0x10000404c-[SDAuthenticationPairingDisable hasVersion]
0x100004060-[SDAuthenticationPairingDisable hasPairingID]
0x100004078-[SDAuthenticationPairingDisable setType:]
0x10000409c-[SDAuthenticationPairingDisable setHasType:]
0x1000040b8-[SDAuthenticationPairingDisable hasType]
0x1000040cc-[SDAuthenticationPairingDisable hasSessionID]
0x1000040e4-[SDAuthenticationPairingDisable description]
0x10000419c-[SDAuthenticationPairingDisable dictionaryRepresentation]
0x1000042ccsub_1000042cc
0x1000046e0-[SDAuthenticationPairingDisable readFrom:]
0x1000046e8-[SDAuthenticationPairingDisable writeTo:]
0x1000047b0-[SDAuthenticationPairingDisable copyTo:]
0x100004878-[SDAuthenticationPairingDisable copyWithZone:]
0x10000495c-[SDAuthenticationPairingDisable isEqual:]
0x100004a78-[SDAuthenticationPairingDisable hash]
0x100004b1c-[SDAuthenticationPairingDisable mergeFrom:]
0x100004be4-[SDAuthenticationPairingDisable version]
0x100004bf4-[SDAuthenticationPairingDisable pairingID]
Imports3943 symbols from 85 dylibs
Exports1
_mh_execute_header0x0