tzd
executablemacOS334.3 KBx86_64, arm64
Analytics submission service — collects and transmits diagnostic data to Apple
Gathers system diagnostics, metrics, and telemetry data from local sources and packages them for submission to Apple's unified analytics infrastructure. Communicates via iMessage services and protocol buffer serialization to transport structured diagnostic payloads. Exposes 9 XPC services to allow other system processes and applications to contribute analytics events. Maintains connections to multiple network endpoints for data transmission and includes logic to handle 33 distinct bundle identifiers across the system.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 334.3 KB
- UUID
- 2CA45B74-801F-3F16-B34D-CCC259784F04
- Analyzed
- 2026-04-09T10:10:06Z
- CDHash
- ab2c5aa95841708b40627780616d0424bc27a12744af294e837d78f97403ac49
Capabilities
IpcApple identity/messaging services (iMessage)
/System/Library/PrivateFrameworks/IDS.framework/Versions/A/IDSIpcProtocol buffer serialization
/System/Library/PrivateFrameworks/ProtocolBuffer.framework/Versions/A/ProtocolBufferAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsFrameworks21
libDiagnosticMessagesClient.dylibFoundationMobileAssetIDSProtocolBufferlibobjc.A.dyliblibSystem.B.dylibCoreFoundationCoreAnalyticslibswiftCompression.dylib(weak)libswiftCore.dyliblibswiftCoreFoundation.dylib(weak)libswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dyliblibswiftUniformTypeIdentifiers.dylib(weak)libswiftXPC.dylib(weak)libswift_Builtin_float.dylib(weak)libswift_DarwinFoundation1.dyliblibswiftos.dylib
Entitlements5
Interesting Strings
Bundle IDs(33)
File Paths(6)
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics/System/Library/PrivateFrameworks/IDS.framework/Versions/A/IDS/System/Library/PrivateFrameworks/MobileAsset.framework/Versions/A/MobileAsset
telemetry(2)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
2
Analytics
1
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
2
File Paths
6
Bundle IDs
33
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 295 functions identified
Functions(295)
0x100001680+[TZDAssetDetectedMsg options]
0x1000016c4sub_1000016c4
0x1000016dc-[TZDAssetDetectedMsg description]
0x100001794-[TZDAssetDetectedMsg dictionaryRepresentation]
0x100001800sub_100001800
0x1000019d4-[TZDAssetDetectedMsg readFrom:]
0x1000019dc-[TZDAssetDetectedMsg writeTo:]
0x100001a38-[TZDAssetDetectedMsg copyTo:]
0x100001a50-[TZDAssetDetectedMsg copyWithZone:]
0x100001ab8-[TZDAssetDetectedMsg isEqual:]
0x100001b44-[TZDAssetDetectedMsg hash]
0x100001b54-[TZDAssetDetectedMsg mergeFrom:]
0x100001b6c-[TZDAssetDetectedMsg assetVersion]
0x100001b7c-[TZDAssetDetectedMsg setAssetVersion:]
0x100001b90-[TZDAssetDetectedMsg .cxx_destruct]
0x100001ba4sub_100001ba4
0x100001edcsub_100001edc
0x100001ee0sub_100001ee0
0x100001f40sub_100001f40
0x100001f54sub_100001f54
Imports268 symbols from 12 dylibs
Exports1
_mh_execute_header0x0