aonsensed
executablemacOS293.3 KBx86_64, arm64
Wireless network management daemon — configures and monitors WiFi and Bluetooth connectivity
Manages Wi-Fi hardware configuration, regulatory domain settings, and Bluetooth LE device access. Reads BSSID and WiFi configuration data, accesses system location without user prompts, and exposes 7 XPC services for controlling wireless settings. Collects diagnostic data through the Symptom framework and communicates with 8 network endpoints. Holds broad file system exceptions and Mach service privileges to coordinate with other system daemons.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 293.3 KB
- UUID
- 65518716-4ADB-3E22-8411-B90C81EE0BC5
- Analyzed
- 2026-04-09T09:41:15Z
- CDHash
- b2d1b68634692baa0c757d70235bd94bd0af3885259d86a06d31b4da2ea4904e
Capabilities
LocationAccess location as a system bundle (no user prompt)
com.apple.locationd.effective_bundle[object Object]StorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-onlyStorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-writeStorageException: access additional file paths
com.apple.security.exception.files.home-relative-path.read-only/Library/UnifiedAssetFrameworkHardwareWiFi configuration (private)
/System/Library/PrivateFrameworks/CoreWiFi.framework/Versions/A/CoreWiFiHardwareBluetooth LE device access
/System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetoothHardwareWiFi regulatory domain management
/System/Library/PrivateFrameworks/RegulatoryDomain.framework/Versions/A/RegulatoryDomainIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-namecom.apple.symptom_diagnosticscom.apple.private.corewifi-xpccom.apple.mobileasset.autoassetcom.apple.nearbyd.xpccom.apple.nearbyd.xpc.nearbyinteractioncom.apple.server.bluetooth.le.att.xpccom.apple.bluetooth.xpccom.apple.frontboard.systemappservicescom.apple.runningboardcom.apple.BacklightServices.backlightcom.apple.AudioAccessoryServicescom.apple.AccessorySensorManagercom.apple.siri.uaf.servicecom.apple.mobileasset.autoassetcom.apple.mobileassetd.v2com.apple.siri.uaf.subscription.service
AnalyticsSymptom/diagnostic reporting framework
/System/Library/PrivateFrameworks/SymptomDiagnosticReporter.framework/Versions/A/SymptomDiagnosticReporterFrameworks20
ALDataTypesFoundationCoreWiFiCoreBluetoothRegulatoryDomain(weak)libobjc.A.dyliblibSystem.B.dylibCoreFoundationSymptomDiagnosticReporter(weak)libMobileGestalt.dyliblibswiftCore.dyliblibswiftCoreFoundation.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftObjectiveC.dylib(weak)libswiftSystem.dyliblibswiftXPC.dyliblibswift_Builtin_float.dylib(weak)libswiftos.dyliblibswiftsimd.dylib(weak)
Entitlements40
com.apple.arkittrue
com.apple.security.exception.mach-lookup.global-name
com.apple.symptom_diagnosticscom.apple.private.corewifi-xpccom.apple.mobileasset.autoassetcom.apple.nearbyd.xpccom.apple.nearbyd.xpc.nearbyinteractioncom.apple.server.bluetooth.le.att.xpccom.apple.bluetooth.xpccom.apple.frontboard.systemappservicescom.apple.runningboardcom.apple.BacklightServices.backlightcom.apple.AudioAccessoryServicescom.apple.AccessorySensorManagercom.apple.siri.uaf.servicecom.apple.mobileasset.autoassetcom.apple.mobileassetd.v2com.apple.siri.uaf.subscription.service
Interesting Strings
Bundle IDs(127)
File Paths(17)
#/private/var/db/com.apple.countryd//AppleInternal/Library/BuildRoots/4~B_wpugA5U7Uvca97H7zArGU4M6PkQcBrvoZ25Cc/Library/Caches/com.apple.xbs/Sources/AONLoc/Daemon/daemon.swift/AppleInternal/Library/BuildRoots/4~B_wpugA5U7Uvca97H7zArGU4M6PkQcBrvoZ25Cc/Library/Caches/com.apple.xbs/Sources/AONLoc/Interface/XPC/ALXPCService.swift/Library/UnifiedAssetFramework0/System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetooth
Network Surface
Networking Frameworks
Endpoints(8)
DNA Capability Vector
Location
1
Keychain
0
Network
0
Storage
3
Hardware
4
IPC
1
Analytics
1
Security
0
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
2
File Paths
17
Bundle IDs
127
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 422 functions identified
Functions(422)
0x100001480sub_100001480
0x100001488sub_100001488
0x100001490sub_100001490
0x1000014e4sub_1000014e4
0x10000151csub_10000151c
0x100001574sub_100001574
0x10000159csub_10000159c
0x1000015dcsub_1000015dc
0x10000174csub_10000174c
0x1000018c0sub_1000018c0
0x1000018c4sub_1000018c4
0x1000018d0sub_1000018d0
0x100001918sub_100001918
0x100001968sub_100001968
0x1000019c0sub_1000019c0
0x100001a64sub_100001a64
0x100001a6csub_100001a6c
0x100001aa4sub_100001aa4
0x100001aecsub_100001aec
0x100001b3csub_100001b3c
Imports232 symbols from 11 dylibs
Exports1
_mh_execute_header0x0