locationd

executablemacOS18.1 MBx86_64, arm64

Wi-Fi and Bluetooth system daemon — manages wireless connectivity and proximity detection

Manages Wi-Fi and Bluetooth hardware through direct driver communication and DriverKit, handling regulatory domain configuration, interface control, and wireless authentication. Detects and maintains connections with nearby Apple devices via Bluetooth and Wi-Fi proximity signals, accessing location services to support location-aware networking decisions. Submits wireless diagnostics and analytics to Apple, operates DNS proxy and VPN APIs, and accesses system keychain for credential management. Exposes 22 XPC services for system components to query and control wireless state, maintains persistent private storage for configuration and logs, and reports country/region data derived from Wi-Fi networks.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 18.1 MB
UUID: 65B3771C-2CD9-34A0-9D27-C1AA2D12E7E1
Analyzed: 2026-04-09T09:54:05Z
CDHash: cf889640b49346b128bca780630fda8af184edf8d8b438307c770f854451cf17

Capabilities

LocationAccess location as a system bundle (no user prompt)

com.apple.locationd.effective_bundle [object Object]

LocationObserve location updates passively

com.apple.locationd.spectator [object Object]

LocationLocation services access

/System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocation

LocationLocation services access

/System/Library/Frameworks/_LocationEssentials.framework/Versions/A/_LocationEssentials

NetworkVPN, content filter, DNS proxy APIs

/System/Library/Frameworks/NetworkExtension.framework/Versions/A/NetworkExtension

NetworkNetwork configuration and reachability

/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration

NetworkModern networking framework (NWConnection)

/System/Library/Frameworks/Network.framework/Versions/A/Network

NetworkCore networking (HTTP, FTP, DNS)

/System/Library/Frameworks/CFNetwork.framework/Versions/A/CFNetwork

StoragePrivate storage area access

com.apple.private.security.storage.ManagedConfiguration [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.containers [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.locationd [object Object]

StorageException: access additional file paths

com.apple.security.exception.files.absolute-path.read-write

/Library/Logs/location_log_keys/

HardwareCommunicate with paired Apple devices

com.apple.CompanionLink [object Object]

HardwareDirect DriverKit driver communication

com.apple.private.driverkit.driver-access

com.apple.private.wifi.driverkit

HardwareWiFi interface control

/System/Library/Frameworks/CoreWLAN.framework/Versions/A/CoreWLAN

HardwareBluetooth/WiFi proximity detection

/System/Library/PrivateFrameworks/WirelessProximity.framework/Versions/A/WirelessProximity

HardwareBluetooth LE device access

/System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetooth

HardwareWiFi regulatory domain management

/System/Library/PrivateFrameworks/RegulatoryDomain.framework/Versions/A/RegulatoryDomain

HardwareDirect hardware/driver communication

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

IpcQuery process state from RunningBoard

com.apple.runningboard.process-state [object Object]

IpcException: access additional Mach services

com.apple.security.exception.mach-lookup.global-name

com.apple.rapport.StatusUpdates com.apple.rapport.people com.apple.rapport com.apple.CompanionLink com.apple.systemstatus.publisher com.apple.biome.access.user com.apple.biome.access.system com.apple.powerlog.plxpclogger.xpc com.apple.eligibilityd

IpcProtocol buffer serialization

/System/Library/PrivateFrameworks/ProtocolBuffer.framework/Versions/A/ProtocolBuffer

AnalyticsWireless diagnostic reporting

/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Versions/A/Libraries/libprotobuf.dylib

AnalyticsApple unified analytics submission

/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics

SecurityPerform WiFi authentication

com.apple.wlan.authentication [object Object]

SecurityCryptographic operations

/System/Library/Frameworks/CryptoKit.framework/Versions/A/CryptoKit

SecuritySecurity framework extensions

/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation

SecurityKeychain, certificates, code signing

/System/Library/Frameworks/Security.framework/Versions/A/Security

SystemContribute to country detection data

com.apple.countryd.contribute [object Object]

SystemControl display via SkyLight (window server)

com.apple.private.SkyLight.displaycontrol [object Object]

SystemProcess lifecycle management

/System/Library/PrivateFrameworks/RunningBoardServices.framework/Versions/A/RunningBoardServices

Frameworks83

WirelessDiagnostics(weak)CoreUtils(weak)CoreLocationProtobuf(weak)SystemStatus(weak)CoreTime(weak)CoreRoutine(weak)CoreAnalytics(weak)CoreMotion(weak)RunningBoardServices(weak)SPOwner(weak)BiomeFoundation(weak)BiomePubSub(weak)BiomeStorage(weak)BiomeStreams(weak)BiomeLibrary(weak)CryptoKit(weak)libAppleArchive.dylib(weak)UnifiedAssetFramework(weak)LocationLogEncryption NetworkExtension GeoServices(weak)Accelerate CoreNavigation(weak)SPFinder(weak)TimeSync(weak)CoreServices CoreWLAN SecurityFoundation WirelessProximity(weak)libbsm.0.dylib liblinkguard.dylib(weak)CoreBluetooth libMobileGestalt.dylib DistributedSensing(weak)RegulatoryDomain(weak)OpenDirectory Rapport(weak)PowerLog(weak)CoreData MobileBluetooth CardioHealth LocationSupport UserNotifications(weak)SystemConfiguration Network TCC CFNetwork libz.1.dylib libobjc.A.dylib libiconv.2.dylib CoreLocationTiles libxml2.2.dylib ProtocolBuffer libsqlite3.dylib CoreFoundation Foundation IOKit libbz2.1.0.dylib Security CoreLocation libc++.1.dylib libSystem.B.dylib _LocationEssentials InternalSwiftProtobuf(weak)ModelManagerServices(weak)libswiftAccelerate.dylib(weak)libswiftAppleArchive.dylib(weak)libswiftCompression.dylib(weak)libswiftCore.dylib libswiftCoreFoundation.dylib(weak)libswiftDispatch.dylib(weak)libswiftIOKit.dylib(weak)libswiftMetal.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dylib libswiftQuartzCore.dylib(weak)libswiftSystem.dylib libswiftUniformTypeIdentifiers.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_Concurrency.dylib libswiftos.dylib libswiftsimd.dylib(weak)

Entitlements84

com.apple.CompanionLinktrue

com.apple.CoreLocation.PrivateModetrue

com.apple.CoreRoutine.LocationOfInteresttrue

com.apple.CoreRoutine.Visittrue

com.apple.aop.hid-device.user-client <dict>

com.apple.aop.hid-driver.user-client <dict>

com.apple.bluetooth.systemtrue

com.apple.bluetoothd.can-use-adv-bufferstrue

com.apple.countryd.contributetrue

com.apple.developer.device-information.user-assigned-device-nametrue

com.apple.developer.driverkit.administratortrue

com.apple.developer.driverkit.userclient-access

com.apple.DriverKit-AppleBCMWLAN

com.apple.geoservices.geoiptrue

com.apple.hid.manager.user-access-protectedtrue

com.apple.hid.system.fast-path-motion-event-privilegedtrue

com.apple.icloud.searchpartyd.advertisementcache.accesstrue

com.apple.icloud.searchpartyd.advertisementcache.writetrue

com.apple.icloud.searchpartyd.finderstatemanager.accesstrue

com.apple.location.tilesservice.downloadstrue

com.apple.locationd.authorizeapplicationstrue

com.apple.locationd.effective_bundletrue

com.apple.locationd.emergencyplace_inferencetrue

com.apple.locationd.integritychecktrue

com.apple.locationd.mock_testingtrue

com.apple.locationd.place_inferencetrue

com.apple.locationd.simulationtrue

com.apple.locationd.spectatortrue

com.apple.locationd.statustrue

com.apple.private.AuthorizationServices

system.preferences.nvram

com.apple.private.SkyLight.displaycontroltrue

com.apple.private.admin.writeconfigtrue

com.apple.private.biome.client-identifier com.apple.locationd

com.apple.private.biome.read-only

Media.NowPlaying App.InFocus

com.apple.private.biome.read-write

MicroLocationRestrictedLocalization Location.MicroLocationVisit UserFocusComputedMode

com.apple.private.driverkit.driver-access

com.apple.private.wifi.driverkit

com.apple.private.eligibilityd.setInputtrue

com.apple.private.hid.client.event-dispatchtrue

com.apple.private.hid.client.event-monitortrue

com.apple.private.hid.client.motion-event-privilegedtrue

com.apple.private.hid.client.service-protectedtrue

com.apple.private.launchservices.entitledtoaccessothersessionstrue

com.apple.private.networkextension.configurationtrue

com.apple.private.security.daemon-containertrue

com.apple.private.security.storage.ManagedConfigurationtrue

com.apple.private.security.storage.containerstrue

com.apple.private.security.storage.locationdtrue

com.apple.private.vfs.allow-low-space-writestrue

com.apple.private.xpc.launchd.per-user-lookuptrue

com.apple.rapport.Clienttrue

com.apple.rapport.StatusUpdatestrue

com.apple.rapport.peopletrue

com.apple.runningboard.assertions.locationtrue

com.apple.runningboard.process-statetrue

com.apple.security.exception.files.absolute-path.read-write

/Library/Logs/location_log_keys/

com.apple.security.exception.mach-lookup.global-name

com.apple.rapport.StatusUpdates com.apple.rapport.people com.apple.rapport com.apple.CompanionLink com.apple.systemstatus.publisher com.apple.biome.access.user com.apple.biome.access.system com.apple.powerlog.plxpclogger.xpc com.apple.eligibilityd

com.apple.security.exception.sysctl.read-only

com.apple.security.iokit-user-client-class

IOUserUserClient IO80211APIUserClient

com.apple.security.system-containertrue

com.apple.security.temporary-exception.iokit-user-client-class

IOUserUserClient IO80211APIUserClient

com.apple.systemstatus.publisher.domains location

com.apple.timedtrue

com.apple.timed.sources

GPS LocationServer HarvestServer Location LocationBorder TimeSourceGnssValidPos TimeSourceGnss TimeSourceBBTimeTransfer TimeSourceBBTimeTagging

com.apple.wifi.eventstrue

com.apple.wifi.events.privatetrue

com.apple.wifi.priority.id core_location

com.apple.wifi.priority.internaltrue

com.apple.wifi.scantrue

com.apple.wifi.set_powertrue

com.apple.wirelessproxd-object-discoverytrue

com.apple.wlan.authenticationtrue

devmotion <dict>

devmotion10 <dict>

devmotion3 <dict>

devmotion6 <dict>

historical-memory <dict/>

orientation <dict>

send-command <dict/>

Interesting Strings

Bundle IDs(544)

@com.apple.Maps com.apple.DriverKit-AppleBCMWLAN0 com.apple.locationd.mock_testing com.apple.private.wifi.driverkit0, com.apple.systemstatus.publisher

File Paths(393)

/Library/Logs/location_log_keys/0 #AuthDatabaseMigration Top-level clients.plist value is not NSDictionary. Removing entry.#AuthDatabaseMigration from legacy clients.plist representation - deleting malformed #multi-user client key #AuthDatabaseMigration_0 successfully migrated from legacy clients.plist %@-%@.db

iokit_constants(2)

IO80211APIUserClient0(IO80211APIUserClient04

telemetry(343)

A20CLGpsJumpMetricsBase #CLProactiveLoc,CA,PerformanceMetrics,cntVisitExitSuccessfulPredict,%{public}d,cntVisitExitUnSuccessfulPredict,%{public}d,cntVisitExitMissedPredict,%{public}d,maxVisitExitPullInSec,%{public}d,avgVisitExitPullInSec,%{public}d,APSleepDurationLT2minSec,%{public}0.2f,APSleepDurationGT2minLT5minSec,%{public}0.2f,APSleepDurationGT5minSec,%{public}0.2f,APSleepDurationTotalSec,%{public}0.2f,#CLProactiveLoc,CA,small or invalid data,CA submit skipped,activeSec,%{public}0.2f,numSess,%{public}d,numApWake,%{public}d #CLProactiveLocStats,submitStats()#CLTBC, CLTransitionBreadcrumbMetrics, fMetrics, %{public}@

URLs & Endpoints(33)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>cl2.apple.com

Network Surface

Networking Frameworks

BiomeFoundation CFNetwork CoreFoundation Foundation Network SecurityFoundation libswiftCoreFoundation.dylib

Endpoints(49)

HostnameCoreLocation-3060.0.18

HostnamefKalman.dE

Hostnamegsp10-ssl.apple.com

Hostnamegs-loc.apple.com

Hostnameiphone-ld.apple.com

Ipv4100.6.27.35

Hostnameconfiguration.apple.com

Hostnamecl5.apple.com

Hostnamecl4.apple.com

Hostnamecl3.apple.com

Hostnamecl2.apple.com

Hostnameingest.apple-studies.com

Hostnameingest.stg.apple-studies.com

Urlhttp://localhost:8008

HostnameindexInfo.name

HostnameindexList.name

Urlhttps://gs-loc.apple.com/clls/wloc

Ipv6ff:ff:ff:ff:ff:ff

Urlhttps://cl3.apple.com/1/v2/

Urlhttps://cl2.apple.com/1/v1

Urlhttps://cl3.apple.com/3/v2

Urlhttps://cl3.apple.com/2/v1

Urlhttps://cl4.apple.com/1/v1/

Urlhttps://cl2.apple.com/9/v2

Urlhttps://corelocation.s3.amazonaws.com/tr/v1

Hostnamecorelocation.s3.amazonaws.com

Urlhttps://gsp10-ssl.apple.com/au

Urlhttps://gsp10-ssl.apple.com/pds/pd

Urlhttps://gsp10-ssl.apple.com/hcy/pbcwloc

Urlhttps://gsp10-ssl.apple.com/incs

Urlhttps://gsp10-ssl.apple.com/pbu

Urlhttps://gsp10-ssl.ls.apple.com/hvr/aploc

Hostnamegsp10-ssl.ls.apple.com

Urlhttps://gsp10-ssl.apple.com/psr

Urlhttps://gsp10-ssl.apple.com/hvr/trc

Urlhttps://gsp10-carry.ls.apple.com/hvr/alt

Hostnamegsp10-carry.ls.apple.com

Urlhttps://gsp10-ssl.apple.com/hvr/ion

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttps://cl2.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

API Usage

Methods

-[CLPersistenceStore initWithURL:useCloudKit:]

DNA Capability Vector

Location

4

Keychain

0

Network

4

Storage

4

Hardware

7

IPC

3

Analytics

2

Security

4

System

3

Behavioral Profile

URL Endpoints

33

Telemetry Strings

343

File Paths

393

Bundle IDs

544

IOKit Constants

2

Library Functions

34

Structural HashesSHA-256

Code7ad69ff4aeda7fecdfe6ec94d3489f33be18061e08c960641145e63c58bad474

Imports43e294f50c38bef19a488a3c61ab328913edc8bfb6a3bb3722660a2b722ebdb9

Frameworks81fbcebc2e6edf024bf290471a3ecd565b01b7c63f4433aa22e615aa6d011bbd

Classes7c49e05ce56b92430bbf5ab16e571718671dc9c7b9b16b837cbce2e6f5db3571

Entitlementse092dd194447647ec2af39918cde2b0dada3cf887d0668a08215d8107f2d30e9

Symbols7c2dbf33aef02f5cdfd3da6bc191564a8ab89242d3e62a53f91702bf145a35ec

Static Libraries34 / 24639 functions identified

Identified Libraries

boost_locale 1.89.0 (2 fn)boost_test_exec_monitor 1.89.0 (1 fn)flatbuffers 25.9.23 (4 fn)gmock 1.17.0 (1 fn)gtest 1.17.0 (3 fn)srt 1.5.4 (3 fn)tesseract 5.5.2 (20 fn)

Functions(24639)

0x100003170sub_100003170

0x100003174sub_100003174

0x100003434sub_100003434

0x1000037c4sub_1000037c4

0x100003bb4sub_100003bb4

0x100003c0csub_100003c0c

0x100003c18sub_100003c18

0x100003c68sub_100003c68

0x100003cacsub_100003cac

0x1000049d4sub_1000049d4

0x1000049ecsub_1000049ec

0x100004bccsub_100004bcc

0x100004dacsub_100004dac

0x100004dc8sub_100004dc8

0x100004ddcsub_100004ddc

0x100004e58sub_100004e58

0x100004e68sub_100004e68

0x100004e74sub_100004e74

0x100005054sub_100005054

0x1000050d0sub_1000050d0

Imports1451 symbols from 54 dylibs

libSystem.B.dylib305 CoreFoundation180 libswiftCore.dylib126 libc++.1.dylib118 CoreLocation70

Similar Binaries1,470 comparable