trace

executablemacOS583.8 KBx86_64, arm64, arm64

System telemetry service — collects and transmits diagnostic data to Apple

Gathers system metrics, performance diagnostics, and usage telemetry across the device. Connects to Apple's telemetry endpoints to upload diagnostic data, logs, and system information. Manages multiple telemetry data streams tied to different bundle identifiers. Runs with system-level access to collect comprehensive device diagnostics and health information for Apple's analytics infrastructure.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 583.8 KB
UUID: C5EE1801-DFB7-3B7D-9DFD-0DCD7CA82394
Analyzed: 2026-04-07T05:21:13Z
CDHash: 27fe10a202be3404d47c9b6141661200d7326521470d1a4c9b0daef74ac69c94

Entitlements11

com.apple.developer.device-information.user-assigned-device-nametrue

com.apple.developer.kernel.extended-virtual-addressingtrue

com.apple.private.AppleProcessorTrace.Tracetrue

com.apple.private.biome.client-identifier com.apple.libktrace.trace

com.apple.private.biome.read-only

com.apple.private.kernel.get-kernel-infotrue

com.apple.private.kernel.get-kext-infotrue

com.apple.private.logging.admintrue

com.apple.private.stackshottrue

com.apple.private.swiftuitracingsupport.recordtrue

com.apple.security.iokit-user-client-class

AppleProcessorTraceUserClient

Interesting Strings

Bundle IDs(25)

!com.apple.private.biome.read-only0 &com.apple.private.kernel.get-kext-info (com.apple.private.kernel.get-kernel-info )com.apple.private.biome.client-identifier *com.apple.security.iokit-user-client-class0

File Paths(7)

/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/Frameworks/LightweightCodeRequirements.framework/Versions/A/LightweightCodeRequirements /System/Library/PrivateFrameworks/LoggingSupport.framework/Versions/A/LoggingSupport /System/Library/PrivateFrameworks/kperf.framework/Versions/A/kperf

telemetry(2)

_$ss10SetAlgebraP19symmetricDifferenceyxxnFTq _$ss10SetAlgebraP23formSymmetricDifferenceyyxnFTq

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation libswiftCoreFoundation.dylib libswift_DarwinFoundation2.dylib

Endpoints(6)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

2

File Paths

7

Bundle IDs

25

IOKit Constants

0

Library Functions

20

Structural HashesSHA-256

Code98dbca34b70f8659874a653360f4150c227032fc81585148b19cf2e60dd1a1af

Importsb77eba1728355454c200bfc648b8d4a548596c61998003fa6c4daca979ee1d0d

Frameworksb412422356b250026612e716a7b8d7516e83cc057d5862bfa2b74fbeb460f96f

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementse62c7b276dd7f14b54b67f3214447b2c4f1c644cd62862e267ff7fa3e0f7236f

Symbolsb77eba1728355454c200bfc648b8d4a548596c61998003fa6c4daca979ee1d0d

Static Libraries20 / 310 functions identified

Identified Libraries

FLAC 1.5.0 (2 fn)SDL2 2.32.10 (3 fn)SDL2_test 2.32.10 (2 fn)X11 1.8.12 (3 fn)aom 3.13.1 (3 fn)boost_test_exec_monitor 1.89.0 (1 fn)crypto 3.6.1 (2 fn)gettextlib 0.26_1 (2 fn)harfbuzz-subset 12.3.0 (1 fn)nettle 3.10.2 (1 fn)

Function Matches(1)

ZSTD_decompresszstd 1.5.7Medium

Functions(310)

0x100001400sub_100001400

0x1000014c0sub_1000014c0

0x100001634sub_100001634

0x100002738sub_100002738

0x1000027a8sub_1000027a8

0x1000027b4sub_1000027b4

0x10000282csub_10000282c

0x100002894sub_100002894

0x100002d74sub_100002d74

0x100002decsub_100002dec

0x100002e78sub_100002e78

0x100002f64sub_100002f64

0x100003000sub_100003000

0x1000030acsub_1000030ac

0x10000313csub_10000313c

0x10000320csub_10000320c

0x100003278sub_100003278

0x1000032e4sub_1000032e4

0x1000033ccsub_1000033cc

0x100003474sub_100003474

Imports375 symbols from 11 dylibs

libswiftCore.dylib198 libSystem.B.dylib76 ktrace36 Foundation35 LightweightCodeRequirements17

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

AppleVirtualPlatformHIDBridge