IOMFB_bics_daemon
executablemacOS127.0 KBarm64
Hardware diagnostics tool — collects and submits device performance and sensor data
Accesses IOKit user clients and communicates directly with hardware drivers to gather diagnostics about device state, sensors, and performance metrics. Collects telemetry data through Apple's unified analytics framework and submits it to remote endpoints. Interacts with multiple system bundles and frameworks to sample hardware status. Runs with elevated hardware access permissions to monitor low-level device conditions and report findings to Apple's analytics infrastructure.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 127.0 KB
- UUID
- 22C0F192-74BE-37D0-A94A-87CFD8924DFA
- Analyzed
- 2026-04-09T09:38:49Z
- CDHash
- 6d8046f8220a6054a337e8d77d292d140ab78d944e4abed5b8403286b23491ad
Capabilities
HardwareException: access additional IOKit user clients
com.apple.security.exception.iokit-user-client-classHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsFrameworks12
Entitlements14
Interesting Strings
Bundle IDs(31)
File Paths(8)
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit/System/Library/PrivateFrameworks/AggregateDictionary.framework/Versions/A/AggregateDictionary/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics
telemetry(3)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
2
IPC
0
Analytics
1
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
3
File Paths
8
Bundle IDs
31
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 162 functions identified
Functions(162)
0x100000b80sub_100000b80
0x100000ee8sub_100000ee8
0x100000eecsub_100000eec
0x100000f44sub_100000f44
0x100000f70sub_100000f70
0x100001104sub_100001104
0x100001194sub_100001194
0x1000011a4sub_1000011a4
0x1000011b8sub_1000011b8
0x100001204sub_100001204
0x100001228sub_100001228
0x100001268sub_100001268
0x100001288sub_100001288
0x100001404sub_100001404
0x1000016acsub_1000016ac
0x100001704sub_100001704
0x1000017a0sub_1000017a0
0x100001930sub_100001930
0x100001a74sub_100001a74
0x100001a9csub_100001a9c
Imports146 symbols from 8 dylibs
Exports1
_mh_execute_header0x0