open
executablemacOS299.5 KBx86_64, arm64
System service — monitors and reports telemetry data to Apple endpoints
Collects diagnostic information from the system and transmits it to Apple-controlled network endpoints. Interfaces with 2 bundle identifiers and accesses 233 file paths across the filesystem to gather metrics. Maintains network connectivity to 6 remote endpoints for telemetry transmission. Includes one telemetry-related string constant and uses only public frameworks, suggesting this is a standard system diagnostic collection process integrated into macOS.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 299.5 KB
- UUID
- DCDBFE6B-D379-34B4-BDEE-539F3A485D1A
- Analyzed
- 2026-04-07T05:21:14Z
- CDHash
- 4da75b63bfbbb79017782e0973d2b2a5e9efce17aea23c95d7142d7e09abe48b
Frameworks8
Interesting Strings
Bundle IDs(2)
File Paths(233)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
1
File Paths
233
Bundle IDs
2
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 32 functions identified
Functions(32)
0x100000e80-[HeaderOpenState initWithRemainingHeaders:]
0x100001000-[HeaderOpenState dealloc]
0x100001054-[HeaderOpenState visitPath:]
0x100001058-[HeaderOpenState finished]
0x100001060-[HeaderOpenState performFastPathSearch]
0x100001240-[HeaderOpenState headersToHeaderPaths]
0x100001248-[HeaderOpenState visitHeader:atPath:]
0x100001340sub_100001340
0x100003cc8sub_100003cc8
0x100003d98sub_100003d98
0x100003e2csub_100003e2c
0x100003e64sub_100003e64
0x1000040d0sub_1000040d0
0x100004304sub_100004304
0x100004438sub_100004438
0x1000044f8sub_1000044f8
0x100004a30sub_100004a30
0x100004ad0sub_100004ad0
0x100004b50sub_100004b50
0x100004be0sub_100004be0
Imports130 symbols from 7 dylibs
Exports1
_mh_execute_header0x0