findmylocateagent

executablemacOS9.9 MBx86_64, arm64

Apple identity and messaging service — manages authentication, iMessage, and account services

Handles Apple ID authentication, iMessage messaging, and related account management functions for the system. Accesses keychain for credentials and encryption keys, manages location services, and syncs iCloud data. Communicates with 15 remote endpoints for account verification and service delivery. Exposes 21 XPC services to other system components and applications, enforces hardened runtime protections, and submits analytics to Apple. Reads contacts from the address book and evaluates feature flags to determine functionality.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 9.9 MB
UUID: 7776CAFF-A934-3C68-9A0F-F4A0CA97A9E9
Analyzed: 2026-04-09T09:49:37Z
CDHash: 2d68b27e74656e2f19b925d264159aebc20990ba487b9eb15290bb6186c7b888

Capabilities

LocationLocation services access

/System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocation

LocationLocation services access

/System/Library/Frameworks/_LocationEssentials.framework/Versions/A/_LocationEssentials

KeychainDevice key bag (encryption keys)

/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBag

NetworkiCloud data sync

/System/Library/Frameworks/CloudKit.framework/Versions/A/CloudKit

StorageException: access additional file paths

com.apple.security.exception.files.absolute-path.read-only

/usr/libexec/findmylocateagent

StorageException: access additional file paths

com.apple.security.exception.files.home-relative-path.read-write

/Library/com.apple.findmy.findmylocated/

StorageAddress book access

/System/Library/Frameworks/Contacts.framework/Versions/A/Contacts

IpcRestricted application group access

com.apple.private.security.restricted-application-groups

group.com.apple.findmy.findmylocateagent

IpcShared application group container access

com.apple.security.application-groups

group.com.apple.findmy.findmylocateagent

IpcException: access additional Mach services

com.apple.security.exception.mach-lookup.global-name

com.apple.securityd com.apple.accountsd.accountmanager com.apple.apsd com.apple.securityd com.apple.timed.xpc com.apple.geod com.apple.icloud.searchpartyd.securelocations com.apple.cloudd com.apple.usernotifications.usernotificationservice com.apple.usernotifications.listener com.apple.icloud.findmydeviced com.apple.chronoservices

IpcApple identity/messaging services (iMessage)

/System/Library/PrivateFrameworks/IDS.framework/Versions/A/IDS

AnalyticsApple unified analytics submission

/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics

SecurityHardened runtime process

com.apple.developer.hardened-process [object Object]

SecurityCryptographic operations

/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit

SecurityKeychain, certificates, code signing

/System/Library/Frameworks/Security.framework/Versions/A/Security

SecurityApple ID authentication

/System/Library/PrivateFrameworks/AuthKit.framework/Versions/A/AuthKit

SystemProcess lifecycle management

/System/Library/PrivateFrameworks/RunningBoardServices.framework/Versions/A/RunningBoardServices

SystemFeature flag evaluation

/System/Library/PrivateFrameworks/FeatureFlags.framework/Versions/A/FeatureFlags

Frameworks71

liblinkguard.dylib(weak)FindMyUnsafeAsyncBridging FindMyCrypto CoreAnalytics FMCore CoreTime FindMyCommon MobileKeyBag RunningBoardServices FindMyDaemonSupport FindMyCloudKit IDS SPOwner FindMyMessaging FindMyBase Foundation FindMyLocate libobjc.A.dylib libSystem.B.dylib Accounts AppIntents CloudKit Combine Contacts CoreFoundation CoreLocation CryptoKit NearbyInteraction Security UserNotifications _LocationEssentials AAAFoundationSwift AppleAccount ApplePushService AuthKit BiomeLibrary ChronoServices CollectionsInternal CommunicationsFilter CorePhoneNumbers FeatureFlags FindMyDevice FindMyServerInteraction FindMyStorage GeoServices SwiftSQLite libMobileGestalt.dylib libsqlite3.dylib libswiftAccelerate.dylib(weak)libswiftCompression.dylib(weak)libswiftCore.dylib libswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dylib(weak)libswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftCoreMIDI.dylib(weak)libswiftDispatch.dylib libswiftIOKit.dylib(weak)libswiftIntents.dylib(weak)libswiftMetal.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dylib libswiftQuartzCore.dylib(weak)libswiftSynchronization.dylib libswiftUniformTypeIdentifiers.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dylib libswift_DarwinFoundation1.dylib libswiftos.dylib libswiftsimd.dylib(weak)

Entitlements43

aps-connection-initiatetrue

com.apple.accounts.appleaccount.fullaccesstrue

com.apple.application-identifier com.apple.findmy.findmylocateagent

com.apple.authkit.client.privatetrue

com.apple.chrono.invalidate-timelinestrue

com.apple.chronoservicestrue

com.apple.developer.hardened-processtrue

com.apple.developer.icloud-services

com.apple.findmy.container com.apple.findmy

com.apple.icloud.findmydeviced.accesstrue

com.apple.icloud.searchpartyd.securelocations.accesstrue

com.apple.private.accounts.allaccountstrue

com.apple.private.aps-connection-initiatetrue

com.apple.private.cloudkit.masqueradetrue

com.apple.private.cloudkit.serviceNameForContainerMap <dict>

com.apple.private.cloudkit.setEnvironmenttrue

com.apple.private.cloudkit.spitrue

com.apple.private.cloudkit.systemServicetrue

com.apple.private.communicationsfiltertrue

com.apple.private.ids.messaging

com.apple.private.alloy.fmf.local com.apple.private.alloy.fmf com.apple.private.alloy.fmd

com.apple.private.ids.messaging.urgent-priority

com.apple.private.alloy.fmf com.apple.private.alloy.fmf.local com.apple.private.alloy.fmd

com.apple.private.ids.registrationtrue

com.apple.private.ids.remotecredentialstrue

com.apple.private.ids.session

com.apple.private.alloy.fmf com.apple.private.alloy.fmd

com.apple.private.ids.session-private

com.apple.private.alloy.fmf com.apple.private.alloy.fmd

com.apple.private.network.socket-delegatetrue

com.apple.private.security.allow-migrationtrue

com.apple.private.security.restricted-application-groups

group.com.apple.findmy.findmylocateagent

com.apple.private.sqlite.sqlite-encryptiontrue

com.apple.private.tcc.allow

kTCCServiceAddressBook

com.apple.private.usernotifications.bundle-identifiers

com.apple.findmy

com.apple.security.application-groups

group.com.apple.findmy.findmylocateagent

com.apple.security.exception.files.absolute-path.read-only

/usr/libexec/findmylocateagent

com.apple.security.exception.files.home-relative-path.read-write

/Library/com.apple.findmy.findmylocated/

com.apple.security.exception.mach-lookup.global-name

com.apple.securityd com.apple.accountsd.accountmanager com.apple.apsd com.apple.securityd com.apple.timed.xpc com.apple.geod com.apple.icloud.searchpartyd.securelocations com.apple.cloudd com.apple.usernotifications.usernotificationservice com.apple.usernotifications.listener com.apple.icloud.findmydeviced com.apple.chronoservices

com.apple.security.exception.shared-preference.read-only

com.apple.security.exception.shared-preference.read-write

com.apple.findmy.findmylocateagent com.apple.CloudKit

com.apple.security.exception.sysctl.read-only

kern.bootsessionuuid

com.apple.security.system-containertrue

com.apple.security.ts.application-group-supporttrue

com.apple.security.ts.mobile-keybag-accesstrue

com.apple.timedtrue

platform-applicationtrue

Interesting Strings

Bundle IDs(219)

com.apple.application-identifier com.apple.authkit.client.private !com.apple.private.alloy.fmf.local "com.apple.accountsd.accountmanager "com.apple.findmy.findmylocateagent

File Paths(60)

(/Library/com.apple.findmy.findmylocated/0 *com.apple.private.sqlite.sqlite-encryption /System/Library/Frameworks/Accounts.framework/Versions/A/Accounts /System/Library/Frameworks/AppIntents.framework/Versions/A/AppIntents /System/Library/Frameworks/CloudKit.framework/Versions/A/CloudKit

telemetry(67)

submitLocationsViaApnsUrl $s17findmylocateagent9AnalyticsO10FieldValueP $s17findmylocateagent9AnalyticsO5EventP /System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics /findmyservice/submit

URLs & Endpoints(7)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://findmyservice-prod.me.com/internal/mas/submit

Network Surface

Networking Frameworks

AAAFoundationSwift CoreFoundation Foundation libswiftCoreFoundation.dylib libswift_DarwinFoundation1.dylib

Endpoints(15)

Hostnamefmfmobile.icloud.com

Urlhttps://findmyservice-prod.me.com/internal/mas/submit

Hostnamefindmyservice-prod.me.com

Hostnamegateway.icloud.com

Hostnameicloud.com

Urlhttps://p34-fmfmobile.icloud.com/fmipservice/fmpeopleservice/

Hostnamep34-fmfmobile.icloud.com

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

2

Keychain

1

Network

1

Storage

3

Hardware

0

IPC

4

Analytics

1

Security

4

System

2

Behavioral Profile

URL Endpoints

7

Telemetry Strings

67

File Paths

60

Bundle IDs

219

IOKit Constants

0

Library Functions

3

Structural HashesSHA-256

Codec65d61fb41d7be5855b73e09fb44488e0bf7f528fa4a84532c6712ba1177846f

Importsd65f87b8575563b541e94633a6cfa6ab0d1aaf1c32763f782a9d7cd9cf9150f8

Frameworks4c46f3ee359047060929a79d9a2f217eb5fc752bd91a9a735b0d84d199c7e22d

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements4745e122ffe440ae73078704b625a861ed2e4b172306c3fbbcf8202a318cae94

Symbolsd65f87b8575563b541e94633a6cfa6ab0d1aaf1c32763f782a9d7cd9cf9150f8

Static Libraries3 / 13978 functions identified

Identified Libraries

avcodec 8.0.1 (1 fn)lz4 1.10.0 (1 fn)onig 6.9.10 (1 fn)

Functions(13978)

0x100002a00sub_100002a00

0x100002bb4sub_100002bb4

0x100002f70sub_100002f70

0x100003008sub_100003008

0x100003010sub_100003010

0x100003098sub_100003098

0x1000030fcsub_1000030fc

0x100003150sub_100003150

0x1000031b0sub_1000031b0

0x1000031e0sub_1000031e0

0x10000320csub_10000320c

0x100003218sub_100003218

0x100003220sub_100003220

0x100003228sub_100003228

0x100003450sub_100003450

0x10000349csub_10000349c

0x1000034e4sub_1000034e4

0x100003548sub_100003548

0x100003590sub_100003590

0x1000037b8sub_1000037b8

Imports2434 symbols from 51 dylibs

FindMyLocate591 libswiftCore.dylib479 Foundation256 FindMyBase178 FindMyMessaging117

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

searchpartyuseragent

findmybeaconingd