griddatad
executablemacOS186.5 KBx86_64, arm64
Location services daemon — collects and reports positioning data to Apple
Accesses the device's location through system location services without user prompts, enabled by system bundle exceptions. Collects positioning data and submits it to Apple's analytics infrastructure via outgoing network connections to multiple endpoints. Manages location state through Mach IPC services and accesses specific file paths for storing or retrieving location-related information. Runs as a background daemon to continuously monitor and report location telemetry.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 186.5 KB
- UUID
- 4AF2CF45-85C1-3B6B-A7EC-ED7C64EDB84B
- Analyzed
- 2026-04-09T09:51:04Z
- CDHash
- cd3c667cf7a346725e5391203dd51fa18c5ec6f7b9c52daf50993e11bf1fe4c3
Capabilities
LocationAccess location as a system bundle (no user prompt)
com.apple.locationd.effective_bundle[object Object]LocationLocation services access
/System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocationStorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-writeIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-nameAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsFrameworks9
Entitlements8
Interesting Strings
Bundle IDs(38)
File Paths(12)
&/private/var/db/GridData/polygons.json/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics/System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocation/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
telemetry(2)
Network Surfaceentitled
Networking Frameworks
Endpoints(8)
DNA Capability Vector
Location
2
Keychain
0
Network
1
Storage
1
Hardware
0
IPC
1
Analytics
1
Security
0
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
2
File Paths
12
Bundle IDs
38
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 73 functions identified
Functions(73)
0x100000fe0-[_GDBAManager init]
0x10000117csub_10000117c
0x100001228sub_100001228
0x100001234sub_100001234
0x10000123csub_10000123c
0x100001244+[_GDBAManager sharedInstance]
0x100001288sub_100001288
0x1000012e4+[_GDBAManager loadNumberForPreferenceKey:]
0x100001330+[_GDBAManager saveNumber:forKey:]
0x1000013a8-[_GDBAManager locationManagerDidChangeAuthorization:]
0x10000149c-[_GDBAManager locationManager:didFailWithError:]
0x10000154c-[_GDBAManager boundaryPolygons]
0x100001978-[_GDBAManager updateBAStatusForLocationManager:]
0x100001aa0sub_100001aa0
0x100001c6csub_100001c6c
0x100001cb0sub_100001cb0
0x100001cf4-[_GDBAManager updateBA]
0x100001da8sub_100001da8
0x1000024b4sub_1000024b4
0x1000024c0sub_1000024c0
Imports80 symbols from 9 dylibs
Exports1
_mh_execute_header0x0