duetexpertd

executablemacOS171.9 KBx86_64, arm64

System location service — provides geolocation data to applications and daemons

Provides geolocation services to system bundles and applications without user prompts, leveraging location access entitlements. Manages 12 XPC services to handle location queries and telemetry from multiple clients across 308 bundle identifiers. Stores location-related data in private storage areas and communicates with 9 network endpoints, likely for calibration data, map tiles, or telemetry collection. Operates as an Apple-signed system service with access to location as a privileged system component.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 171.9 KB
UUID: 6BACECBB-CF01-3042-9CD0-A515650ACFE5
Analyzed: 2026-04-09T09:48:24Z
CDHash: 852d5c47db40f04afd27372b45c471c036f07377c3357f4f6930cf369db497d5

Capabilities

LocationAccess location as a system bundle (no user prompt)

com.apple.locationd.effective_bundle [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.DuetExpertCenter [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.Mail [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.proactivepredictions [object Object]

IpcShared application group container access

com.apple.security.application-groups

group.com.apple.notes group.com.apple.mail

Frameworks12

liblinkguard.dylib(weak)ProactiveSupport Intents EventKit AppPredictionFoundation Foundation libsqlite3.dylib AppPredictionClient AppPredictionInternal libobjc.A.dylib libSystem.B.dylib CoreFoundation

Entitlements135

FutureLifeEvent <dict>

ProactiveAppPrediction <dict>

App.InFocus App.Intent App.Intents.Transcript App.Activity Device.Wireless.Bluetooth UserFocus.InferredMode UserFocus.ComputedMode UserFocus.SleepMode UniversalRecents.UserActivity.Metadata Notification.Usage Device.Display.Backlight Device.ScreenLocked HomeKit.Client.AccessoryControl Location.PointOfInterest.Category Location.Semantic Location.MicroLocationVisit App.Clip.InFocus Audio.Route CarPlay.Connected Device.Power.PluggedIn Media.NowPlaying App.MenuItem App.DocumentInteraction ToolKit.Transcript WindowManager.StageManager.Toggled Clock.Alarm Device.Display.NightShift Device.ExternalDisplay.DisplayConnected Device.Power.LowPowerMode Device.Wireless.Bluetooth Device.Wireless.WiFi Accessibility.ClassicInvert Accessibility.ColorFilters Accessibility.Contrast Accessibility.MotionCues Accessibility.ReduceMotion Accessibility.ReduceTransparency Accessibility.SmartInvert Accessibility.VoiceControl Accessibility.VoiceOver Accessibility.Zoom App.RelevantShortcuts

com.apple.CallHistory.sync.allowtrue

com.apple.CommCenter.fine-grained

spi identity bb-xpc phone

com.apple.CoreRoutine.Applicationtrue

com.apple.CoreRoutine.LocationOfInteresttrue

com.apple.CoreRoutine.PeopleDiscoverytrue

com.apple.CoreRoutine.Predictiontrue

com.apple.CoreRoutine.Visittrue

com.apple.MobileDataTransit.allowtrue

com.apple.ModeEntityScorertrue

com.apple.Pasteboard.background-accesstrue

com.apple.Pasteboard.originating-bundle-id-querytrue

com.apple.Pasteboard.paste-uncheckedtrue

com.apple.ProactiveSummarization.feedbacktrue

com.apple.SystemConfiguration.SCPreferences-read-access

com.apple.radios.plist

com.apple.accounts.appleaccount.fullaccesstrue

com.apple.application-identifier com.apple.duetexpertd

com.apple.avfoundation.allow-identifying-output-device-detailstrue

com.apple.avfoundation.allow-system-wide-contexttrue

com.apple.avfoundation.allows-access-to-device-listtrue

com.apple.avfoundation.allows-set-output-devicetrue

com.apple.bulletinboard.observertrue

com.apple.captive.privatetrue

com.apple.captiveagent.privilegedtrue

com.apple.cards.all-accesstrue

com.apple.chrono.invalidate-timelinestrue

com.apple.chronoservicestrue

com.apple.coreduetd.allowtrue

com.apple.coreduetd.contexttrue

com.apple.coreduetd.peopletrue

com.apple.developer.device-information.user-assigned-device-nametrue

com.apple.developer.extension-host.widget-extensiontrue

com.apple.duet.activityscheduler.allowtrue

com.apple.duet.expertcenter.consumertrue

com.apple.duet.expertcenter.experttrue

com.apple.frontboard.launchapplicationstrue

com.apple.geoservices.navd.clientIdentifier /System/Library/LocationBundles/CalendarLocation.bundle

com.apple.geoservices.navd.routehypothesistrue

com.apple.intelligenceflow.contexttrue

com.apple.intelligenceflow.internaltrue

com.apple.intelligenceflow.toolboxtrue

com.apple.intelligenceflow.uiContexttrue

com.apple.intelligenceplatform.Viewtrue

com.apple.intents.extension.discoverytrue

com.apple.linkd.registrytrue

com.apple.linkd.transcript.privilegedtrue

com.apple.locationd.activitytrue

com.apple.locationd.effective_bundletrue

com.apple.locationd.place_inferencetrue

com.apple.managedconfiguration.profiled-accesstrue

com.apple.managedconfiguration.profiled.get

com.apple.mediaremote.device-infotrue

com.apple.mediaremote.remote-control-discoverytrue

com.apple.private.CallHistory.readtrue

com.apple.private.MobileContainerManager.otherIdLookuptrue

com.apple.private.assets.accessible-asset-types

com.apple.MobileAsset.DuetExpertCenterAsset

com.apple.private.assets.change-daemon-configtrue

com.apple.private.biome.client-identifier com.apple.duetexpertd

com.apple.private.biome.read-only

UserFocusComputedMode UserActivityMetadata SemanticLocation HomeKitClientAccessoryControl HealthKitWorkout Backlight Device.ScreenLocked IntelligencePlatform.Views.Updated Screen.Sharing SpringBoard.Domino.ViewAppearance SpringBoard.Domino.StackRotation SpringBoard.Domino.WidgetTap

com.apple.private.biome.read-write

AppIntent AppLaunch POICategory ContextualActions AppClipLaunch InferredMode Notification App.DocumentInteraction App.MenuItem

com.apple.private.biome.synctrue

com.apple.private.calendar.allow-suggestionstrue

com.apple.private.canGetAppLinkInfotrue

com.apple.private.communicationsfiltertrue

com.apple.private.contactstrue

com.apple.private.context.service.query-app-contenttrue

com.apple.private.corerecentstrue

com.apple.private.coreservices.cangetcurrentactivityinfotrue

com.apple.private.coreservices.canmaplsdatabasetrue

com.apple.private.coreservices.canopenactivitytrue

com.apple.private.coreservices.lsuseractivityd.bestappsuggestiontrue

com.apple.private.corespotlight.internaltrue

com.apple.private.corespotlight.receivertrue

com.apple.private.corespotlight.search.internaltrue

com.apple.private.dmd.policytrue

com.apple.private.donotdisturb.modeconfiguration.request.client-identifiers

com.apple.proactive.AppPredictionClient com.apple.DuetExpertCenter.ProactiveContextClient

com.apple.private.donotdisturb.modeconfiguration.updates.client-identifiers

com.apple.proactive.AppPredictionClient com.apple.DuetExpertCenter.ProactiveContextClient

com.apple.private.donotdisturb.settings.request.client-identifiers com.apple.proactive.AppPredictionClient

com.apple.private.donotdisturb.state.request.client-identifiers

com.apple.proactive.AppPredictionClient com.apple.proactive.ActionPredictionHeuristics

com.apple.private.donotdisturb.state.updates.client-identifiers

com.apple.proactive.AppPredictionClient com.apple.proactive.ActionPredictionHeuristics

com.apple.private.emailtrue

com.apple.private.familycircletrue

com.apple.private.healthkittrue

com.apple.private.hid.client.event-monitortrue

com.apple.private.ids.messaging

com.apple.private.alloy.apppredictionsync

com.apple.private.imcore.spi.database-accesstrue

com.apple.private.intelligenceplatform.use-cases <dict>

com.apple.private.intelligenceplatform.views.read-only

lifeEventMap lifeEventSubgraph sportsSchedules futureLifeEventMap futureLifeEventSubgraph entityTagging visualIdentifier handleMap hasAssociationSubgraph

com.apple.private.iokit.batterydataprecisetrue

com.apple.private.kernel.override-cpumontrue

com.apple.private.kernel.system-overridetrue

com.apple.private.metadata.exattrstrue

com.apple.private.mobiletimerdtrue

com.apple.private.replicator.controllertrue

com.apple.private.security.storage.DuetExpertCentertrue

com.apple.private.security.storage.Mailtrue

com.apple.private.security.storage.proactivepredictionstrue

com.apple.private.sessionkit.listenertrue

com.apple.private.sleepdtrue

com.apple.private.spotlight.search.internaltrue

com.apple.private.suggestions.contactstrue

com.apple.private.suggestions.eventstrue

com.apple.private.suggestions.reminderstrue

com.apple.private.tcc.allow

kTCCServiceLiverpool kTCCServiceCalendar kTCCServiceReminders kTCCServiceAddressBook

com.apple.private.usernotifications.bundle-identifiers

com.apple.Siri.ActionPredictionNotifications com.apple.ATXDebugNotifications

com.apple.private.usernotifications.settings

com.apple.proactive.AppPrediction.predictionstrue

com.apple.proactive.ModeAnchorModelSuggestion.xpctrue

com.apple.proactive.PersonalizationPortrait.Eventtrue

com.apple.proactive.PersonalizationPortrait.NamedEntity.readOnlytrue

com.apple.proactive.PersonalizationPortrait.NamedEntity.readWritetrue

com.apple.proactive.PersonalizationPortrait.Topic.readWritetrue

com.apple.proactive.ProactiveSuggestionClientModel.xpctrue

com.apple.proactive.eventtrackertrue

com.apple.reminderkittrue

com.apple.rootless.storage.com.apple.MobileAsset.DuetExpertCenterAssettrue

com.apple.rootless.storage.coreduet_knowledge_storetrue

com.apple.rootless.storage.proactivepredictionstrue

com.apple.rootless.storage.shortcutstrue

com.apple.runningboard.assertions.shortcutstrue

com.apple.runningboard.assertions.siritrue

com.apple.runningboard.launchprocesstrue

com.apple.security.application-groups

group.com.apple.notes group.com.apple.mail

com.apple.security.personal-information.addressbooktrue

com.apple.security.personal-information.calendarstrue

com.apple.security.system-group-containers

systemgroup.com.apple.configurationprofiles systemgroup.com.apple.osanalytics

com.apple.shortcuts.stepwise-executiontrue

com.apple.shortcuts.variable-injectiontrue

com.apple.siri.VoiceShortcuts.xpctrue

com.apple.trial.client

com.apple.watchlist.privatetrue

com.apple.wifi.manager-accesstrue

seatbelt-profiles

Interesting Strings

Bundle IDs(308)

com.apple.CallHistory.sync.allow com.apple.CoreRoutine.Prediction com.apple.application-identifier com.apple.bulletinboard.observer com.apple.proactive.eventtracker

File Paths(13)

/AppleInternal/Library/Frameworks /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/EventKit.framework/Versions/A/EventKit /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/Frameworks/Intents.framework/Versions/A/Intents

telemetry(2)

!systemgroup.com.apple.osanalytics0+<string>systemgroup.com.apple.osanalytics</string>

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

AppPredictionFoundation CoreFoundation Foundation

Endpoints(9)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

HostnameKcom.apple.private.donotdisturb.modeconfiguration.request.client-identifiers0

HostnameKcom.apple.private.donotdisturb.modeconfiguration.updates.client-identifiers0

HostnameBcom.apple.private.donotdisturb.settings.request.client-identifiers

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

1

Keychain

0

Network

0

Storage

3

Hardware

0

IPC

1

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

2

File Paths

13

Bundle IDs

308

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Codeb99b7b63959b11ffb524575c4da1009f4d4f7127a7eee2ef1662899c77713f38

Imports9992ec2bd02c58c745757befe1b1ecda566687688879379b71e41e7606c0a513

Frameworksf356e1d77dd2247f4294e3a9611cb4a2b073011c416ba821c476ede0eaa5d575

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements03e64b7cec7634abe8ad5b621cf6e04b416b2bb2df142e8e575b31dbb3df112e

Symbols9992ec2bd02c58c745757befe1b1ecda566687688879379b71e41e7606c0a513

Static Libraries0 / 12 functions identified

Functions(12)

0x100000c88sub_100000c88

0x100001070sub_100001070

0x100001404sub_100001404

0x10000140csub_10000140c

0x100001428sub_100001428

0x100001434sub_100001434

0x1000014b8sub_1000014b8

0x100001530sub_100001530

0x1000015a8sub_1000015a8

0x100001620sub_100001620

0x100001698sub_100001698

0x100001710sub_100001710

Imports49 symbols from 10 dylibs

libSystem.B.dylib25 libobjc.A.dylib8 AppPredictionInternal4 CoreFoundation4 Foundation3

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

diagnosticextensionsd

assetsubscriptiond

textunderstandingd

inputanalyticsd