tracd

executablemacOS320.7 KBx86_64, arm64

Diagnostic reporting agent — collects and reports system health metrics and telemetry

Gathers system diagnostics and symptom data for Apple's analytics framework, then transmits collected information to remote endpoints. Monitors system health through multiple private frameworks and generates telemetry events associated with various bundle identifiers. Exposes an XPC service for other processes to log diagnostic information. Connects to multiple network endpoints to deliver anonymous usage and crash reports.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 320.7 KB
UUID: CB906A89-9B95-30B8-A2D1-2D990A2B7DBE
Analyzed: 2026-04-09T10:09:17Z
CDHash: 3d8f23d95e5824c177b5d5ba189e4c1eb78b6ba3ec0d9323dada1a6d09b0bd18

Capabilities

AnalyticsSymptom/diagnostic reporting framework

/System/Library/PrivateFrameworks/SymptomDiagnosticReporter.framework/Versions/A/SymptomDiagnosticReporter

Frameworks9

libMobileGestalt.dylib SymptomDiagnosticReporter Foundation libobjc.A.dylib libSystem.B.dylib CoreFoundation HID RemoteServiceDiscovery RemoteXPC

Entitlements3

com.apple.hid.manager.user-access-devicetrue

com.apple.hid.manager.user-access-protectedtrue

com.apple.private.trac.bridge.allowtrue

Interesting Strings

Bundle IDs(25)

#com.apple.private.trac.bridge.allow (com.apple.hid.manager.user-access-device +com.apple.hid.manager.user-access-protected <key>com.apple.hid.manager.user-access-device</key><key>com.apple.hid.manager.user-access-protected</key>

File Paths(8)

/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/PrivateFrameworks/CoreAnalytics.framework/CoreAnalytics /System/Library/PrivateFrameworks/HID.framework/Versions/A/HID /System/Library/PrivateFrameworks/RemoteServiceDiscovery.framework/Versions/A/RemoteServiceDiscovery

telemetry(16)

/System/Library/PrivateFrameworks/CoreAnalytics.framework/CoreAnalytics AnalyticsSendEventLazy TrustedAccessoryCoreAnalyticsEvent TrustedAccessoryCoreAnalyticsEvent initWithName: %@ dictionary:%@ - throwing away unsupported key: %@TrustedAccessoryCoreAnalyticsEvent(%@) dictionaryRepresentation: %d

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(7)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

1

Security

0

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

16

File Paths

8

Bundle IDs

25

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Coded9f1ec9a84697974b55927461650f61b81be5dd2c095d618eeb839b3d070d984

Imports5919fb0d28cfe2a61465054d2c4e7770334484fd50c5b30349c603b8a150526a

Frameworksc400a011a2d2ff1d6e7594a0361db2d272f2b4ec5d6d7629ebf5cae6dcdb19ee

Classes558c9c39a0075cc59a7d60b1c8b9248037391f04af8cff5f1b251c7973ff3aac

Entitlements03c3007099a61dd61faf273d95b0c83fb47217e048d64dd51c8942ed047383dd

Symbols242fdefd2243056fda5bea3845db571d083654ce57eb3a73f1ce2b8efaf8d8bf

Static Libraries0 / 223 functions identified

Functions(223)

0x100001030+[TADeviceHost start]

0x1000010f4-[TADeviceHost init]

0x100001308-[TADeviceHost connection]

0x1000013b8-[TADeviceHost startAccessoryUpdates]

0x1000015fcsub_1000015fc

0x100001608sub_100001608

0x100001610-[TADeviceHost controllerReset]

0x1000016b0sub_1000016b0

0x100001750sub_100001750

0x1000017d4sub_1000017d4

0x1000017dcsub_1000017dc

0x1000017e4-[TADeviceHost propertiesFromHIDDevice:]

0x100001d38-[TADeviceHost setReport:withIdentifier:forType:device:]

0x100001f04sub_100001f04

0x1000020f8sub_1000020f8

0x100002150sub_100002150

0x1000021a0-[TADeviceHost getReport:withLength:withIdentifier:forType:device:]

0x100002408sub_100002408

0x100002418sub_100002418

0x100002420sub_100002420

Imports177 symbols from 9 dylibs

libSystem.B.dylib88 libobjc.A.dylib36 CoreFoundation16 Foundation13 RemoteXPC9

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

mobileactivationd

gamecontrolleragentd

audioclocksyncd

securityd_system