diagnosticextensionsd

executablemacOS143.4 KBx86_64, arm64

Apple device companion service — manages connections with paired wireless devices

Establishes and maintains communication channels with paired Apple devices through Bluetooth and wireless protocols. Coordinates data synchronization and feature sharing between the host Mac and connected iPhone, iPad, or Apple Watch. Exposes multiple XPC services for system components to query device state and trigger device-specific actions. Connects to Apple backend services for device pairing, authentication, and feature provisioning. Stores device-related data in private application containers and accesses additional file system locations as needed.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 143.4 KB
UUID: 6A0D068A-C3BB-3F14-8E34-BF5DBA2B381A
Analyzed: 2026-04-09T09:47:12Z
CDHash: 1e6b3ca7f9ef9d8fa9a7b70ebbf2727c3ccead190bb2f3c56d59c011025c937c

Capabilities

NetworkMake outgoing network connections

com.apple.security.network.client [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.AppDataContainers [object Object]

StorageException: access additional file paths

com.apple.security.exception.files.absolute-path.read-only

/private/var/preferences/com.apple.networkextension.control.plist /private/preboot/Cryptexes/System/Library/Diagnostics/DiagnosticsEncryptionPublicKey /private/var/RPSupport/System/Library/Diagnostics/DiagnosticsEncryptionPublicKey

StorageException: access additional file paths

com.apple.security.exception.files.home-relative-path.read-write

/Library/HTTPStorages/com.apple.diagnosticextensionsd//Library/Caches/com.apple.diagnosticextensionsd//Library/Logs/com.apple.diagnosticextensionsd//Library/Caches/com.apple.nsurlsessiond/Downloads/com.apple.diagnosticextensionsd//Library/Application Support/com.apple.diagnosticextensions/

HardwareCommunicate with paired Apple devices

com.apple.CompanionLink [object Object]

IpcRestricted application group access

com.apple.private.security.restricted-application-groups

group.com.apple.feedback

IpcShared application group container access

com.apple.security.application-groups

group.com.apple.feedback

IpcException: access additional Mach services

com.apple.security.exception.mach-lookup.global-name

com.apple.usernotifications.listener com.apple.usernotifications.usernotificationservice com.apple.frontboard.systemappservices com.apple.commcenter.coretelephony.xpc com.apple.privacyaccountingd com.apple.awdd com.apple.SharingServices com.apple.corefollowup.agent com.apple.nsurlsessiond com.apple.pluginkit.pkd com.apple.identityservicesd.embedded.auth com.apple.CompanionLink com.apple.homed.xpc com.apple.locationd.registration com.apple.logd.admin com.apple.duetactivityscheduler com.apple.enhancedloggingd.bug-session-status.xpc

Frameworks8

AppleSystemInfo libMobileGestalt.dylib libSMC.dylib DiagnosticExtensionsDaemon Foundation libobjc.A.dylib libSystem.B.dylib CoreFoundation

Entitlements50

application-identifier com.apple.diagnosticextensionsd

com.apple.CompanionLinktrue

com.apple.DiagnosticExtensions.extensionHosttrue

com.apple.EnhancedLoggingState.clienttrue

com.apple.PairingManager.Readtrue

com.apple.PairingManager.Writetrue

com.apple.appletv.pbs.mediaremotetrue

com.apple.application-identifier com.apple.diagnosticextensionsd

com.apple.developer.device-information.user-assigned-device-nametrue

com.apple.developer.homekittrue

com.apple.developer.homekit.background-modetrue

com.apple.developer.icloud-container-environment Production

com.apple.developer.icloud-services

com.apple.diagnosticextensionsd.xpcclienttrue

com.apple.duet.activityscheduler.allowtrue

com.apple.nano.nanoregistrytrue

com.apple.private.MobileGestalt.AllowedProtectedKeys

BuildVersion UserAssignedDeviceName marketing-name ProductType DeviceEnclosureColor DeviceClass DeviceColor UniqueDeviceID SerialNumber

com.apple.private.cloudkit.setEnvironmenttrue

com.apple.private.cloudkit.systemServicetrue

com.apple.private.enhancedloggingd.bug-session-statustrue

com.apple.private.followuptrue

com.apple.private.homekittrue

com.apple.private.ids.messaging

com.apple.private.alloy.ded.watch com.apple.private.alloy.ded

com.apple.private.ids.messaging.high-priority

com.apple.private.alloy.ded com.apple.private.alloy.ded.watch

com.apple.private.ids.messaging.urgent-priority

com.apple.private.alloy.ded com.apple.private.alloy.ded.watch

com.apple.private.logging.preferencestrue

com.apple.private.network.socket-delegatetrue

com.apple.private.notificationcenter-system

com.apple.SystemNote

com.apple.private.nsurlsession.impersonatetrue

com.apple.private.sandbox.profile:embedded temporary-sandbox

com.apple.private.security.restricted-application-groups

group.com.apple.feedback

com.apple.private.security.storage.AppDataContainerstrue

com.apple.private.tcc.allow

kTCCServiceLiverpool kTCCServiceWillow

com.apple.private.usernotifications.bundle-identifiers

com.apple.appleseed.FeedbackAssistant com.apple.TapToRadar com.apple.Diagnostics

com.apple.security.application-groups

group.com.apple.feedback

com.apple.security.exception.files.absolute-path.read-only

/private/var/preferences/com.apple.networkextension.control.plist /private/preboot/Cryptexes/System/Library/Diagnostics/DiagnosticsEncryptionPublicKey /private/var/RPSupport/System/Library/Diagnostics/DiagnosticsEncryptionPublicKey

com.apple.security.exception.files.home-relative-path.read-write

/Library/HTTPStorages/com.apple.diagnosticextensionsd//Library/Caches/com.apple.diagnosticextensionsd//Library/Logs/com.apple.diagnosticextensionsd//Library/Caches/com.apple.nsurlsessiond/Downloads/com.apple.diagnosticextensionsd//Library/Application Support/com.apple.diagnosticextensions/

com.apple.security.exception.mach-lookup.global-name

com.apple.usernotifications.listener com.apple.usernotifications.usernotificationservice com.apple.frontboard.systemappservices com.apple.commcenter.coretelephony.xpc com.apple.privacyaccountingd com.apple.awdd com.apple.SharingServices com.apple.corefollowup.agent com.apple.nsurlsessiond com.apple.pluginkit.pkd com.apple.identityservicesd.embedded.auth com.apple.CompanionLink com.apple.homed.xpc com.apple.locationd.registration com.apple.logd.admin com.apple.duetactivityscheduler com.apple.enhancedloggingd.bug-session-status.xpc

com.apple.security.exception.shared-preference.read-only

com.apple.voicemail com.apple.Duet /var/preferences/com.apple.networkextension.control com.apple.TelephonyUtilities com.apple.logging com.apple.airplay com.apple.AppleServiceToolkit

com.apple.security.exception.shared-preference.read-write

group.com.apple.feedback com.apple.enhanced-logging-state com.apple.diagnosticextensionsd com.apple.DiagnosticExtensions.extensionTracker

com.apple.security.network.clienttrue

com.apple.security.ts.application-group-supporttrue

com.apple.security.ts.cloudkit-clienttrue

com.apple.security.ts.identity-services-clienttrue

com.apple.security.ts.tmpdir com.apple.diagnosticextensionsd

com.apple.sharing.DeviceDiscoverytrue

com.apple.sharing.Services

com.apple.sharing.DeviceDiagnostics

com.apple.sharing.Sessiontrue

com.apple.system.diagnostics.iokit-propertiestrue

platform-applicationtrue

Interesting Strings

Bundle IDs(186)

com.apple.application-identifier com.apple.enhanced-logging-state com.apple.locationd.registration !com.apple.appletv.pbs.mediaremote !com.apple.private.alloy.ded.watch

File Paths(23)

./Library/Logs/com.apple.diagnosticextensionsd//System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/PrivateFrameworks /System/Library/PrivateFrameworks/AppleSystemInfo.framework/Versions/A/AppleSystemInfo

telemetry(10)

#com.apple.sharing.DeviceDiagnostics0 -com.apple.system.diagnostics.iokit-properties <key>com.apple.system.diagnostics.iokit-properties</key><string>/private/preboot/Cryptexes/System/Library/Diagnostics/DiagnosticsEncryptionPublicKey</string><string>/private/var/RPSupport/System/Library/Diagnostics/DiagnosticsEncryptionPublicKey</string>

URLs & Endpoints(7)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 &com.apple.commcenter.coretelephony.xpc <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.commcenter.coretelephony.xpc</string>

Network Surfaceentitled

Networking Frameworks

CoreFoundation Foundation

Endpoints(7)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

1

Storage

3

Hardware

1

IPC

3

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

7

Telemetry Strings

10

File Paths

23

Bundle IDs

186

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code1577dca576987775fcc2da27c571b0a9c2ca38a92c3d0a5c67e2edcef293debb

Imports6847517374b82f357eca2bbf750339ba50c95c16ea22f13c2289e433d608b09d

Frameworksb4e11d9545c562c6bf20886a63c8978821153b306c1c3b4a0ff394ca1326be59

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementsbd0e185e09d32543464e65cabe6370b85bc21523f8420098efcbb974cc93f6ce

Symbols6847517374b82f357eca2bbf750339ba50c95c16ea22f13c2289e433d608b09d

Static Libraries0 / 18 functions identified

Functions(18)

0x100000a78sub_100000a78

0x100000ae4sub_100000ae4

0x100000b30sub_100000b30

0x100000e6csub_100000e6c

0x100000ec4sub_100000ec4

0x100000ef4sub_100000ef4

0x100000f14sub_100000f14

0x100000f20sub_100000f20

0x100000f34sub_100000f34

0x100000f78sub_100000f78

0x100000fa0sub_100000fa0

0x10000101csub_10000101c

0x100001098sub_100001098

0x100001114sub_100001114

0x100001190sub_100001190

0x10000120csub_10000120c

0x100001288sub_100001288

0x100001304sub_100001304

Imports28 symbols from 4 dylibs

libSystem.B.dylib21 libobjc.A.dylib5 DiagnosticExtensionsDaemon1 CoreFoundation1

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

assetsubscriptiond

betaenrollmentd

betaenrollmentagent