ospredictiond

executablemacOS1.5 MBx86_64, arm64

Location services daemon — determines device position and manages location queries

Accesses hardware location sensors and manages location data for system services and applications. Performs location determination, caches position information, and provides location services through XPC interfaces. Submits usage analytics and telemetry to Apple while managing background location updates. Accesses the device keychain for encryption keys and communicates with multiple system services through Mach IPC. Operates with location access privileges that bypass user prompts for system bundle operations.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 1.5 MB
UUID: C4A8F280-DB62-3802-83A9-A7C965742D7F
Analyzed: 2026-04-09T09:58:51Z
CDHash: a9023613b38949c9a51be7f196639df862e9ac613bb4dad9bd52b4346b745a25

Capabilities

LocationAccess location as a system bundle (no user prompt)

com.apple.locationd.effective_bundle [object Object]

LocationLocation services access

/System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocation

KeychainDevice key bag (encryption keys)

/System/Library/PrivateFrameworks/MobileKeyBag.framework/Versions/A/MobileKeyBag

HardwareDirect hardware/driver communication

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

IpcException: access additional Mach services

com.apple.security.exception.mach-lookup.global-name

com.apple.backlightd com.apple.biome.access.system com.apple.biome.access.user com.apple.biome.PublicStreamAccessService com.apple.calaccessd com.apple.coreduetd.context com.apple.duetactivityscheduler com.apple.geod com.apple.locationd.synchronous com.apple.OSIntelligence.battery com.apple.passd.library com.apple.PerfPowerTelemetryClientRegistrationService com.apple.PerfPowerTelemetryReaderService com.apple.powerd.lowpowermode com.apple.routined.registration com.apple.usernotifications.usernotificationservice

AnalyticsUsage prediction and tracking

/System/Library/PrivateFrameworks/CoreDuet.framework/Versions/A/CoreDuet

AnalyticsApple unified analytics submission

/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics

SystemBackground task scheduling

/System/Library/PrivateFrameworks/BackgroundSystemTasks.framework/Versions/A/BackgroundSystemTasks

Entitlements32

OSInactivityPrediction <dict>

application-identifier com.apple.ospredictiond

com.apple.CoreRoutine.LocationOfInteresttrue

com.apple.PerfPowerServices.data-donationtrue

com.apple.PerfPowerServices.data-readtrue

com.apple.PerfPowerServices.data-read-xpctrue

com.apple.cards.all-accesstrue

com.apple.coreduetd.allowtrue

com.apple.coreduetd.contexttrue

com.apple.coremedia.cameraviewfindertrue

com.apple.duet.activityscheduler.allowtrue

com.apple.locationd.activitytrue

com.apple.locationd.effective_bundletrue

com.apple.osintelligence.batterytrue

com.apple.powerd.lowpowermode.allowtrue

com.apple.private.biome.client-identifier com.apple.ospredictiond

com.apple.private.biome.read-only

Activity.Level Device.Power.PluggedIn NowPlaying Device.ScreenLocked Device.TimeZone Device.Power.BatteryLevel Location.MicroLocationVisit

com.apple.private.biome.read-write

Device.Activity.Prediction

com.apple.private.clpc.policytrue

com.apple.private.donotdisturb.state.request.client-identifiers ospredictiond

com.apple.private.intelligenceplatform.use-cases <dict>

com.apple.private.mobiletimerdtrue

com.apple.private.sleepdtrue

com.apple.private.tcc.allow

kTCCServiceCalendar

com.apple.private.usernotifications.bundle-identifiers

com.apple.osintelligence.inactivity.notifications com.apple.osintelligence.notifications

com.apple.proactive.eventtrackertrue

com.apple.security.exception.mach-lookup.global-name

com.apple.backlightd com.apple.biome.access.system com.apple.biome.access.user com.apple.biome.PublicStreamAccessService com.apple.calaccessd com.apple.coreduetd.context com.apple.duetactivityscheduler com.apple.geod com.apple.locationd.synchronous com.apple.OSIntelligence.battery com.apple.passd.library com.apple.PerfPowerTelemetryClientRegistrationService com.apple.PerfPowerTelemetryReaderService com.apple.powerd.lowpowermode com.apple.routined.registration com.apple.usernotifications.usernotificationservice

com.apple.security.exception.shared-preference.read-write

com.apple.osintelligence.iblm.state

com.apple.security.iokit-user-client-class

AppleCLPCUserClient

com.apple.security.personal-information.calendarstrue

com.apple.trial.client

Interesting Strings

Bundle IDs(161)

com.apple.OSIntelligence.battery com.apple.osintelligence.battery com.apple.proactive.eventtracker !com.apple.private.biome.read-only0 "com.apple.private.biome.read-write0

File Paths(30)

/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/CoreLocation.framework/Versions/A/CoreLocation /System/Library/Frameworks/CoreML.framework/Versions/A/CoreML /System/Library/Frameworks/CoreMotion.framework/Versions/A/CoreMotion /System/Library/Frameworks/EventKit.framework/Versions/A/EventKit

telemetry(32)

/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics @"OSIntelligenceAnalyticsManager"@"_OSLastLockAnalyticsManager"Failed to submit task with error: %@Logging SPN Exit Metrics %@

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation DRMFoundation Foundation

Endpoints(7)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

2

Keychain

1

Network

0

Storage

0

Hardware

1

IPC

1

Analytics

2

Security

0

System

1

Behavioral Profile

URL Endpoints

4

Telemetry Strings

32

File Paths

30

Bundle IDs

161

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code29043a260dbd8edbd44b3891f91db7e21ac29f91ca77b36f11dcfdd7cf6e6ff2

Imports7dfa61f2e8f61e1854a81bef99fb8b4d04cf93702c5f7605e7b2e13ec5cb071a

Frameworks583bc3d20bbe2152a6ab7d4d814bf697adc349c43a11d71367ae0b92068c66dc

Classes6fa07e13ceae3f4cde351ae9569a2dbd8732046e88a83191636a89c649a6d13f

Entitlementsac69b6726f6658376fd847f303d46722e89095195f5d49181f27270539476a08

Symbols3c9fe530d7ddc609f9a0b7da256d63efd8a8f64bf74e893444b15cb0b83a4e09

Static Libraries0 / 2683 functions identified

Functions(2683)

0x100001920-[_OSIAutoLPMHandler init]

0x100001a28+[_OSIAutoLPMHandler sharedInstance]

0x100001a6csub_100001a6c

0x100001aac-[_OSIAutoLPMHandler supportsAutoLPM]

0x100001ab4-[_OSIAutoLPMHandler hasPreviouslyEngagedIntoLPM]

0x100001b3c-[_OSIAutoLPMHandler recommendsAutoLPM]

0x100001e08-[_OSIAutoLPMHandler locationMonitor]

0x100001e14-[_OSIAutoLPMHandler setLocationMonitor:]

0x100001e1c-[_OSIAutoLPMHandler log]

0x100001e24-[_OSIAutoLPMHandler setLog:]

0x100001e30-[_OSIAutoLPMHandler lastEvaluateDate]

0x100001e38-[_OSIAutoLPMHandler setLastEvaluateDate:]

0x100001e44-[_OSIAutoLPMHandler inTypicalLocation]

0x100001e4c-[_OSIAutoLPMHandler setInTypicalLocation:]

0x100001e54-[_OSIAutoLPMHandler defaults]

0x100001e5c-[_OSIAutoLPMHandler setDefaults:]

0x100001e68-[_OSIAutoLPMHandler .cxx_destruct]

0x100001ec4-[_OSLowSOCEventPredictor init]

0x100001f34+[_OSLowSOCEventPredictor sharedInstance]

0x100001fd4sub_100001fd4

Imports227 symbols from 27 dylibs

libSystem.B.dylib70 libobjc.A.dylib33 Foundation27 CoreFoundation27 OSIntelligence14

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

powerexperienced

thermalmonitord

networkserviceproxy

bluetoothaudiod