nexusd

executablemacOS142.2 KBx86_64, arm64

Wireless peer-to-peer service — manages direct device-to-device connections

Establishes and maintains direct wireless connections between paired Apple devices without requiring a network infrastructure. Communicates with the Wi-Fi peer-to-peer daemon through Mach IPC and manages keychain credentials for authentication. Listens for incoming peer connections and initiates outgoing connections to nearby devices. Stores connection state and device information in private storage. Exposes 10 XPC services for system components to discover, connect to, and communicate with nearby devices.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 142.2 KB
UUID: 7D664BD1-EB54-35FB-AE01-F51691BECE8C
Analyzed: 2026-04-09T09:57:48Z
CDHash: 097a67f9436965360169c10a79963a512233bbc94d49753e00069e2198d2a063

Capabilities

KeychainRead and write system keychain items

com.apple.private.system-keychain [object Object]

KeychainKeychain access group membership

keychain-access-groups

apple com.apple.hap.pairing com.apple.pairing com.apple.rapport

NetworkMake outgoing network connections

com.apple.security.network.client [object Object]

NetworkListen for incoming network connections

com.apple.security.network.server [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.HomeKit [object Object]

StorageException: access additional file paths

com.apple.security.exception.files.absolute-path.read-only

/Library/Ringtones//usr/libexec

StorageException: access additional file paths

com.apple.security.exception.files.absolute-path.read-write

/private/var/tmp/com.apple.nexusd/

HardwareCommunicate with paired Apple devices

com.apple.CompanionLink [object Object]

IpcException: access additional Mach services

com.apple.security.exception.mach-lookup.global-name

com.apple.audio.SystemSoundServer-iOS com.apple.bluetooth.xpc com.apple.CARenderServer com.apple.homed.xpc com.apple.identityservicesd.embedded.auth com.apple.locationd.registration com.apple.PairingManager com.apple.PineBoardServices com.apple.server.bluetooth.le.att.xpc com.apple.SiriVOXService.client com.apple.soundboardservices.server com.apple.SystemConfiguration.configd com.apple.tonelibraryd com.apple.vibrationmanagerd com.apple.voiceservices.tts com.apple.wifip2pd

IpcCommunicate with WiFi peer-to-peer daemon

com.apple.wifip2pd [object Object]

Frameworks19

CoreUtils Foundation(weak)Nexus NexusDaemon libobjc.A.dylib libSystem.B.dylib CoreUtilsSwift libswiftCore.dylib libswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dylib(weak)libswiftDispatch.dylib libswiftIOKit.dylib(weak)libswiftObjectiveC.dylib(weak)libswiftUniformTypeIdentifiers.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dylib libswift_DarwinFoundation3.dylib libswiftos.dylib(weak)

Entitlements40

application-identifier com.apple.nexusd

com.apple.CompanionLinktrue

com.apple.PairingManager.HomeKittrue

com.apple.PairingManager.Readtrue

com.apple.PairingManager.Writetrue

com.apple.SiriVOXService.clienttrue

com.apple.SystemConfiguration.SCDynamicStore-write-accesstrue

com.apple.appletv.pbs.mediaremotetrue

com.apple.appletv.pbs.user-presentation-service-accesstrue

com.apple.bluetooth.systemtrue

com.apple.developer.driverkit.userclient-access

com.apple.DriverKit-AppleBCMWLAN

com.apple.developer.homekittrue

com.apple.developer.homekit.background-modetrue

com.apple.developer.networking.multicasttrue

com.apple.homekit.private-spi-accesstrue

com.apple.private.homekittrue

com.apple.private.homekit.pairing-identitytrue

com.apple.private.homekit.pairing-identity.privatetrue

com.apple.private.ids.session <array/>

com.apple.private.ids.session-privatetrue

com.apple.private.network.socket-delegatetrue

com.apple.private.sandbox.profile:embedded temporary-sandbox

com.apple.private.security.storage.HomeKittrue

com.apple.private.system-keychaintrue

com.apple.private.tcc.allow

kTCCServiceWillow

com.apple.security.exception.files.absolute-path.read-only

/Library/Ringtones//usr/libexec

com.apple.security.exception.files.absolute-path.read-write

/private/var/tmp/com.apple.nexusd/

com.apple.security.exception.mach-lookup.global-name

com.apple.audio.SystemSoundServer-iOS com.apple.bluetooth.xpc com.apple.CARenderServer com.apple.homed.xpc com.apple.identityservicesd.embedded.auth com.apple.locationd.registration com.apple.PairingManager com.apple.PineBoardServices com.apple.server.bluetooth.le.att.xpc com.apple.SiriVOXService.client com.apple.soundboardservices.server com.apple.SystemConfiguration.configd com.apple.tonelibraryd com.apple.vibrationmanagerd com.apple.voiceservices.tts com.apple.wifip2pd

com.apple.security.exception.process-infotrue

com.apple.security.exception.shared-preference.read-only

com.apple.homed com.apple.nexus com.apple.ToneLibrary com.apple.voiceservices

com.apple.security.network.clienttrue

com.apple.security.network.servertrue

com.apple.security.ts.mobile-keybag-accesstrue

com.apple.security.ts.play-audiotrue

com.apple.security.ts.play-mediatrue

com.apple.security.ts.tmpdir com.apple.nexusd

com.apple.soundboard.systemtrue

com.apple.wifip2pdtrue

keychain-access-groups

apple com.apple.hap.pairing com.apple.pairing com.apple.rapport

platform-applicationtrue

Interesting Strings

Bundle IDs(128)

com.apple.DriverKit-AppleBCMWLAN0 com.apple.PairingManager.HomeKit com.apple.locationd.registration com.apple.security.ts.play-audio com.apple.security.ts.play-media

File Paths(9)

"/private/var/tmp/com.apple.nexusd/0 /Library/Ringtones//System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/PrivateFrameworks/CoreUtils.framework/Versions/A/CoreUtils /System/Library/PrivateFrameworks/CoreUtilsSwift.framework/Versions/A/CoreUtilsSwift

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://www.apple.com/appleca/0

Network Surfaceentitled

Networking Frameworks

Foundation libswiftCoreFoundation.dylib libswift_DarwinFoundation3.dylib

Endpoints(7)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

2

Network

2

Storage

3

Hardware

1

IPC

2

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

0

File Paths

9

Bundle IDs

128

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Codefe4740ff8ecf3e1bc25d40fe1fa05dc9250e670230b754c6dba64535fd5d1c97

Importsd9059ff4fde9c047ccd9e5b6ea6c781858c0522bd4828255f9249b506359ef31

Frameworks2422324e8f10cc9fd96685fd1f5843be4fd486a897b27dc37b4d39e7daa15dad

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementsf10c29980035569b34b87b3d58bcee2a9059d13b981bb766a2dd5e5483d51825

Symbolsd9059ff4fde9c047ccd9e5b6ea6c781858c0522bd4828255f9249b506359ef31

Static Libraries0 / 8 functions identified

Functions(8)

0x100000df8sub_100000df8

0x100001210sub_100001210

0x100001298sub_100001298

0x1000012a8sub_1000012a8

0x1000012f4sub_1000012f4

0x10000134csub_10000134c

0x100001394sub_100001394

0x1000013f8sub_1000013f8

Imports45 symbols from 10 dylibs

libswiftCore.dylib12 libswiftDispatch.dylib8 libswift_Concurrency.dylib6 libSystem.B.dylib5 CoreUtilsSwift4

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

AirPlayXPCHelper

diagnosticextensionsd

remotecompositorclientd

ContinuityCaptureAgent