login

JSON
executablemacOS136.0 KBx86_64, arm64

System telemetry service — collects and reports diagnostic data to Apple

Gathers system diagnostics and performance metrics, then transmits them to Apple endpoints for analysis. Operates as a signed system binary with access to telemetry frameworks and multiple bundle identifiers, indicating integration across several system components. Maintains connections to 6 network endpoints and includes telemetry strings that confirm its role in Apple's diagnostic infrastructure. Runs with minimal entitlements, suggesting it operates within tightly scoped system permissions.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
136.0 KB
UUID
399C3755-FABF-3BCD-9F48-0FADA1636237
Analyzed
2026-04-07T05:21:14Z
CDHash
c746209e0b87382af1421ff89b48d9822f39ed35278553637d5db079d67dd512

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
2
File Paths
1
Bundle IDs
5
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 26 functions identified

Functions(26)

0x100000780sub_100000780
0x100001ba0sub_100001ba0
0x100001c80sub_100001c80
0x100001c9csub_100001c9c
0x100001cecsub_100001cec
0x100001ef8sub_100001ef8
0x100001ff8sub_100001ff8
0x100002008sub_100002008
0x1000020acsub_1000020ac
0x1000020e0sub_1000020e0
0x1000021a8sub_1000021a8
0x1000021b8sub_1000021b8
0x1000022fcsub_1000022fc
0x100002520sub_100002520
0x1000026f4sub_1000026f4
0x100002834sub_100002834
0x100002850sub_100002850
0x10000286csub_10000286c
0x100002888sub_100002888
0x1000028a4sub_1000028a4

Imports102 symbols from 4 dylibs

Exports1

_mh_execute_header0x0