login
executablemacOS136.0 KBx86_64, arm64
System telemetry service — collects and reports diagnostic data to Apple
Gathers system diagnostics and performance metrics, then transmits them to Apple endpoints for analysis. Operates as a signed system binary with access to telemetry frameworks and multiple bundle identifiers, indicating integration across several system components. Maintains connections to 6 network endpoints and includes telemetry strings that confirm its role in Apple's diagnostic infrastructure. Runs with minimal entitlements, suggesting it operates within tightly scoped system permissions.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 136.0 KB
- UUID
- 399C3755-FABF-3BCD-9F48-0FADA1636237
- Analyzed
- 2026-04-07T05:21:14Z
- CDHash
- c746209e0b87382af1421ff89b48d9822f39ed35278553637d5db079d67dd512
Entitlements2
Interesting Strings
Bundle IDs(5)
File Paths(1)
telemetry(2)
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
2
File Paths
1
Bundle IDs
5
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 26 functions identified
Functions(26)
0x100000780sub_100000780
0x100001ba0sub_100001ba0
0x100001c80sub_100001c80
0x100001c9csub_100001c9c
0x100001cecsub_100001cec
0x100001ef8sub_100001ef8
0x100001ff8sub_100001ff8
0x100002008sub_100002008
0x1000020acsub_1000020ac
0x1000020e0sub_1000020e0
0x1000021a8sub_1000021a8
0x1000021b8sub_1000021b8
0x1000022fcsub_1000022fc
0x100002520sub_100002520
0x1000026f4sub_1000026f4
0x100002834sub_100002834
0x100002850sub_100002850
0x10000286csub_10000286c
0x100002888sub_100002888
0x1000028a4sub_1000028a4
Imports102 symbols from 4 dylibs
Exports1
_mh_execute_header0x0