companiond
executablemacOS1.3 MBx86_64, arm64
Apple device connectivity daemon — manages pairing and communication with paired devices
Facilitates wireless communication with paired Apple devices including wearables and accessories through Bluetooth LE and proprietary Apple protocols. Handles device pairing, authentication via Apple ID, and maintains persistent connections for data synchronization and command execution. Exposes XPC services for system components and applications to query device state and send commands. Supports AirDrop and iMessage integration for cross-device messaging and file sharing. Makes outgoing connections to Apple identity services for authentication and can listen for incoming device connections.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 1.3 MB
- UUID
- C1670BF5-6AAC-388B-A25B-9680A24FC675
- Analyzed
- 2026-04-09T09:45:05Z
- CDHash
- 78103c44d8bec7bb65b43fbdcd3afb9e1e6237b427c9fc4b4f6e5ec21085ef5a
Capabilities
NetworkModern networking framework (NWConnection)
/System/Library/Frameworks/Network.framework/Versions/A/NetworkStorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-onlyStorageException: access additional file paths
com.apple.security.exception.files.home-relative-path.read-onlyStorageException: access additional file paths
com.apple.security.exception.files.home-relative-path.read-writeHardwareException: access additional IOKit user clients
com.apple.security.exception.iokit-user-client-classHardwareBluetooth LE device access
/System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetoothIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-namecom.apple.accountsd.accountmanagercom.apple.ak.authorizationservices.xpccom.apple.appprotectiond.readcom.apple.apsdcom.apple.AuthenticationServicesCore.AuthenticationServicesAgentcom.apple.bluetooth.xpccom.apple.carousel.wakegesturemonitorcom.apple.clouddcom.apple.CompanionLinkcom.apple.CompanionUIService.xpccom.apple.findmy.findmylocate.fenceservicecom.apple.findmy.findmylocate.friendshipservicecom.apple.findmy.findmylocate.locationservicecom.apple.findmy.findmylocate.settingscom.apple.frontboard.systemappservicescom.apple.homed.xpccom.apple.homehubd.managecom.apple.identityservicesd.embedded.authcom.apple.linkd.extensioncom.apple.linkd.mediatorcom.apple.linkd.registrycom.apple.linkd.transcriptcom.apple.MobileTimer.alarmservercom.apple.MobileTimer.timerservercom.apple.PineBoardServicescom.apple.SBUserNotificationcom.apple.SharedWebCredentialscom.apple.SharingServicescom.apple.SystemConfiguration.configdcom.apple.telephonyutilities.callservicesdaemon.callcapabilitiescom.apple.tvremotecore.xpccom.apple.usernotifications.listenercom.apple.usernotifications.usernotificationservicecom.apple.userprofilescom.apple.watchnotificationsui.alertservice
IpcApple identity/messaging services (iMessage)
/System/Library/PrivateFrameworks/IDS.framework/Versions/A/IDSIpcApple identity/messaging services (iMessage)
/System/Library/PrivateFrameworks/IDSFoundation.framework/Versions/A/IDSFoundationIpcAirDrop/sharing services
/System/Library/PrivateFrameworks/Sharing.framework/Versions/A/SharingSecurityApple ID authentication
/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/AuthKitFrameworks47
CompanionServicesFoundationlibobjc.A.dyliblibSystem.B.dylibAccountsCoreBluetoothCoreFoundationCoreServicesNetworkUniformTypeIdentifiersAppIntentsServicesAppleMediaServicesAuthKitBaseBoardCoreUtilsCoreUtilsSwiftDistributedTimersDaemonIDSIDSFoundationIconServicesLinkMetadataLinkServicesNexusRapportSafariFoundationSharedWebCredentialsSharinglibMobileGestalt.dyliblibswiftAccelerate.dylib(weak)libswiftCore.dyliblibswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dylib(weak)libswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftIntents.dylib(weak)libswiftMetal.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dylib(weak)libswiftQuartzCore.dylib(weak)libswiftUniformTypeIdentifiers.dylib(weak)libswiftXPC.dyliblibswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswiftos.dyliblibswiftsimd.dylib(weak)
Entitlements82
com.apple.security.exception.mach-lookup.global-name
com.apple.accountsd.accountmanagercom.apple.ak.authorizationservices.xpccom.apple.appprotectiond.readcom.apple.apsdcom.apple.AuthenticationServicesCore.AuthenticationServicesAgentcom.apple.bluetooth.xpccom.apple.carousel.wakegesturemonitorcom.apple.clouddcom.apple.CompanionLinkcom.apple.CompanionUIService.xpccom.apple.findmy.findmylocate.fenceservicecom.apple.findmy.findmylocate.friendshipservicecom.apple.findmy.findmylocate.locationservicecom.apple.findmy.findmylocate.settingscom.apple.frontboard.systemappservicescom.apple.homed.xpccom.apple.homehubd.managecom.apple.identityservicesd.embedded.authcom.apple.linkd.extensioncom.apple.linkd.mediatorcom.apple.linkd.registrycom.apple.linkd.transcriptcom.apple.MobileTimer.alarmservercom.apple.MobileTimer.timerservercom.apple.PineBoardServicescom.apple.SBUserNotificationcom.apple.SharedWebCredentialscom.apple.SharingServicescom.apple.SystemConfiguration.configdcom.apple.telephonyutilities.callservicesdaemon.callcapabilitiescom.apple.tvremotecore.xpccom.apple.usernotifications.listenercom.apple.usernotifications.usernotificationservicecom.apple.userprofilescom.apple.watchnotificationsui.alertservice
Interesting Strings
Bundle IDs(278)
File Paths(34)
telemetry(4)
Network Surfaceentitled
Networking Frameworks
Endpoints(9)
API Usage
DNA Capability Vector
Location
0
Keychain
1
Network
3
Storage
4
Hardware
3
IPC
5
Analytics
0
Security
2
System
0
Behavioral Profile
URL Endpoints
26
Telemetry Strings
4
File Paths
34
Bundle IDs
278
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 1804 functions identified
Functions(1804)
0x100002218+[CDAppSignInUtilities approvedWebCredentialsDomainsForApplicationIdentifier:completionHandler:]
0x100002224sub_100002224
0x100002350+[CDAppSignInUtilities allWebCredentialsDomainsForApplicationIdentifier:completionHandler:]
0x10000235csub_10000235c
0x1000024b0+[CDAppSignInUtilities canPerformAuthKitRequest:withAuthKitAccount:clientBundleIdentifier:completionHandler:]
0x1000024c4sub_1000024c4
0x1000025ec+[CDAppSignInUtilities sendSessionActivatedMetricsWithRequest:approvedAssociatedDomains:]
0x100002780sub_100002780
0x100002864sub_100002864
0x100002874sub_100002874
0x100002880+[CDAppSignInUtilities sendSessionCompletedMetricsWithError:]
0x100002968sub_100002968
0x100002ab0sub_100002ab0
0x100002b04sub_100002b04
0x100002b0csub_100002b0c
0x100002b14sub_100002b14
0x100002b24sub_100002b24
0x100002d0csub_100002d0c
0x100002d84sub_100002d84
0x100002dccsub_100002dcc
Imports791 symbols from 33 dylibs
Exports1
_mh_execute_header0x0