textcontextd
executablemacOS209.9 KBx86_64, arm64
System location and keychain access daemon — manages location data and credential storage
Operates as a system bundle with privileged access to location services and the Keychain without user prompts. Manages keychain access groups, stores and retrieves credentials, and handles certificate operations and code signing validation. Exposes an XPC service for other system components to query location data and access stored credentials. Communicates with 8 network endpoints and references 22 bundle identifiers, indicating integration across multiple system services.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 209.9 KB
- UUID
- 09156F17-8A70-37E5-B00A-98B134A450D9
- Analyzed
- 2026-04-09T10:08:36Z
- CDHash
- 433868fec6d078a7211c1c702ac2a0c01365d77cc116e604d4a58ed0207342bc
Capabilities
LocationAccess location as a system bundle (no user prompt)
com.apple.locationd.effective_bundle[object Object]SecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks32
ArchetypeArchetypeEngineFoundationlibobjc.A.dyliblibSystem.B.dylibCoreFoundationSecuritylibswiftAVFoundation.dylib(weak)libswiftAccelerate.dylib(weak)libswiftCompression.dylib(weak)libswiftCore.dyliblibswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dylib(weak)libswiftCoreImage.dylib(weak)libswiftCoreLocation.dylib(weak)libswiftCoreMIDI.dylib(weak)libswiftCoreMedia.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftIntents.dylib(weak)libswiftMLCompute.dylib(weak)libswiftMetal.dylib(weak)libswiftNaturalLanguage.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dyliblibswiftQuartzCore.dylib(weak)libswiftUniformTypeIdentifiers.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswiftos.dyliblibswiftsimd.dylib(weak)
Entitlements10
Interesting Strings
Bundle IDs(22)
File Paths(5)
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/Frameworks/Security.framework/Versions/A/Security/System/Library/PrivateFrameworks/Archetype.framework/Versions/A/Archetype/System/Library/PrivateFrameworks/ArchetypeEngine.framework/Versions/A/ArchetypeEngine
Network Surface
Networking Frameworks
Endpoints(8)
DNA Capability Vector
Location
1
Keychain
1
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
1
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
0
File Paths
5
Bundle IDs
22
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 121 functions identified
Functions(121)
0x1000016d8sub_1000016d8
0x1000017c4sub_1000017c4
0x100001814sub_100001814
0x100001844sub_100001844
0x100001b88sub_100001b88
0x100001bacsub_100001bac
0x100001c14sub_100001c14
0x100001c94sub_100001c94
0x100001d00sub_100001d00
0x100001d78sub_100001d78
0x100001d9csub_100001d9c
0x100002054sub_100002054
0x1000020a0sub_1000020a0
0x1000020f8sub_1000020f8
0x100002140sub_100002140
0x1000021a4sub_1000021a4
0x1000021ecsub_1000021ec
0x100002220sub_100002220
0x100002224sub_100002224
0x100002268sub_100002268
Imports115 symbols from 12 dylibs
Exports1
_mh_execute_header0x0