proactiveeventtrackerd
executablemacOS203.7 KBx86_64, arm64
Analytics submission daemon — collects and transmits diagnostic data to Apple servers
Gathers system diagnostics and telemetry from the device, then submits this data to Apple's analytics infrastructure via network endpoints. Handles protocol buffer serialization for efficient data transmission and uses XPC services to communicate with other system components that contribute diagnostic information. Accesses additional Mach services to interface with low-level system events. Contains multiple telemetry collection points and connects to Apple's remote servers for continuous reporting.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 203.7 KB
- UUID
- 9B04E770-785D-3157-8E0A-7737325C3F2F
- Analyzed
- 2026-04-09T10:00:13Z
- CDHash
- 82040ef47cb511a462d4cc154c2286c8f7b312419b9738b3f088ed4bc5e0af22
Capabilities
IpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-nameIpcProtocol buffer serialization
/System/Library/PrivateFrameworks/ProtocolBuffer.framework/Versions/A/ProtocolBufferAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsFrameworks13
Entitlements8
Interesting Strings
Bundle IDs(38)
File Paths(17)
/System/Library/AssetTypeDescriptors/com.apple.MobileAsset.AssetTypeDescriptor.ProactiveEventTrackerAssets.plist/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics/System/Library/PrivateFrameworks/CoreParsec.framework/Contents/MacOS/CoreParsec
telemetry(5)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
2
Analytics
1
Security
0
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
5
File Paths
17
Bundle IDs
38
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 69 functions identified
Functions(69)
0x100001180sub_100001180
0x100001488sub_100001488
0x1000014e8-[PETServiceMessageCompressor .cxx_destruct]
0x100001538-[PETServiceMessageCompressor setCompressedMessages:]
0x100001540-[PETServiceMessageCompressor compressedMessages]
0x10000154c-[PETServiceMessageCompressor close]
0x100001670-[PETServiceMessageCompressor _errorClose]
0x1000016b4-[PETServiceMessageCompressor _flushBuffer]
0x1000017f4-[PETServiceMessageCompressor addMessage:]
0x1000018b4-[PETServiceMessageCompressor init]
0x1000019e8+[PETServiceMessageCompressor decompress:]
0x100001bf8sub_100001bf8
0x1000020b8sub_1000020b8
0x1000021a4sub_1000021a4
0x100002240sub_100002240
0x100002318sub_100002318
0x1000024b4sub_1000024b4
0x1000024bcsub_1000024bc
0x1000024c4sub_1000024c4
0x10000251c-[PETService .cxx_destruct]
Imports103 symbols from 13 dylibs
Exports1
_mh_execute_header0x0