screencapture
executablemacOS1.5 MBx86_64, arm64
System analytics agent — collects and submits diagnostic data to Apple
Gathers system telemetry and diagnostic information for submission to Apple's unified analytics platform. Accesses application group containers to retrieve analytics data from multiple processes and services. Communicates with 14 network endpoints to transmit collected diagnostics. Interacts with the window server for display-related diagnostics. Exposes XPC services to allow other system components to contribute analytics events and diagnostic information.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 1.5 MB
- UUID
- 19D9674E-02CC-3E75-B46C-9D838DCA540A
- Analyzed
- 2026-04-07T05:21:14Z
- CDHash
- e1b31d082ac55e8986f620dbb0e09c06b0dd73edc2e345ad81627a5eaf89497f
Capabilities
IpcRestricted application group access
com.apple.private.security.restricted-application-groupsIpcShared application group container access
com.apple.security.application-groupsAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsSystemWindow server (display control)
/System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/SkyLightFrameworks44
ImageIOApplicationServicesAudioToolboxAVFoundationBiomeStreamsCoreAnalyticsCoreFoundationDFRFoundationSkyLightFoundationlibobjc.A.dyliblibSystem.B.dylibCoreGraphicsCoreMediaCoreServicesCoreTextIOSurfaceQuartzCoreScreenCaptureKitBiomeLibrarylibMobileGestalt.dyliblibswiftAVFoundation.dylib(weak)libswiftAccelerate.dylib(weak)libswiftCore.dyliblibswiftCoreAudio.dylib(weak)libswiftCoreFoundation.dyliblibswiftCoreImage.dylib(weak)libswiftCoreMIDI.dylib(weak)libswiftCoreMedia.dyliblibswiftDarwin.dyliblibswiftDispatch.dyliblibswiftIOKit.dylib(weak)libswiftMetal.dylib(weak)libswiftOSLog.dylib(weak)libswiftObjectiveC.dyliblibswiftQuartzCore.dylib(weak)libswiftUniformTypeIdentifiers.dyliblibswiftXPC.dyliblibswift_Builtin_float.dylib(weak)libswift_Concurrency.dyliblibswift_DarwinFoundation2.dyliblibswift_DarwinFoundation3.dyliblibswiftos.dyliblibswiftsimd.dylib(weak)
Entitlements10
Interesting Strings
Bundle IDs(39)
File Paths(19)
/System/Library/CoreServices/screencaptureui.app/System/Library/Frameworks/AVFoundation.framework/Versions/A/AVFoundation/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices/System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
telemetry(5)
URLs & Endpoints(7)
Network Surface
Networking Frameworks
Endpoints(14)
Hostnamescreencapture-379.1.6
Ipv6abB:cCdD:EfF
Ipv60:8:16
Hostnamewww.apple.com
Hostnamemacosx26.1.internal
Hostnamewww.w3.org
Hostnamens.adobe.com
Hostnamecrl.apple.com
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
2
Analytics
1
Security
0
System
1
Behavioral Profile
URL Endpoints
7
Telemetry Strings
5
File Paths
19
Bundle IDs
39
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 3737 functions identified
Functions(3737)
0x100002080sub_100002080
0x100002910sub_100002910
0x10000299csub_10000299c
0x1000029e4sub_1000029e4
0x100002c18sub_100002c18
0x100002ec4sub_100002ec4
0x100002ec8sub_100002ec8
0x100002f74sub_100002f74
0x100003254sub_100003254
0x1000032b0sub_1000032b0
0x10000351csub_10000351c
0x100003584sub_100003584
0x1000036b8sub_1000036b8
0x1000036e0sub_1000036e0
0x1000036e8sub_1000036e8
0x1000036ecsub_1000036ec
0x100003764sub_100003764
0x1000037e4sub_1000037e4
0x10000381csub_10000381c
0x100003844sub_100003844
Imports1230 symbols from 32 dylibs
Exports1
_mh_execute_header0x0