usbctelemetryd
executablemacOS133.1 KBx86_64, arm64
Analytics submission daemon — collects and transmits system diagnostics to Apple
Gathers diagnostic data from system hardware and software components, then submits it to Apple's analytics infrastructure via HTTPS endpoints. Communicates with other system processes through XPC to collect telemetry from various subsystems. Maintains direct hardware access to read device state and performance metrics. Processes collected data and routes submissions to Apple's remote servers, enabling Apple to analyze system health and usage patterns across the install base.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 133.1 KB
- UUID
- 2EFDFA9E-6870-377F-AF23-A946B6A9D62B
- Analyzed
- 2026-04-09T10:10:59Z
- CDHash
- 18a64cfc77a2eb1f34365083ff85d055aca88c4eb58cc82f47b383543f8f87bd
Capabilities
HardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsInteresting Strings
Bundle IDs(3)
File Paths(4)
telemetry(9)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
1
IPC
0
Analytics
1
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
9
File Paths
4
Bundle IDs
3
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 26 functions identified
Functions(26)
0x100000ad0+[AppleHPM createWithBusService:andLogger:]
0x100000d2c-[AppleHPM initializeWithHPMDeviceService:andHPMInterfaceService:andLogger:atRid:]
0x100000dac-[AppleHPM collectAllAnalytics]
0x100000e20-[AppleHPM getAppLoaded]
0x100000ef4-[AppleHPM getMode]
0x100000fcc-[AppleHPM getHealthCheck]
0x100001144-[AppleHPM getFWVersion]
0x100001244-[AppleHPM getBootFlags]
0x100001250-[AppleHPM _analyticsDict]
0x10000125c-[AppleHPM set_analyticsDict:]
0x100001264-[AppleHPM _rid]
0x10000126c-[AppleHPM set_rid:]
0x100001274-[AppleHPM .cxx_destruct]
0x1000012b8-[AppleHPMType3 getBootFlags]
0x10000160c-[AppleHPMType3 getEventName]
0x100001618-[AppleHPMType6 getBootFlags]
0x100001a58-[AppleHPMType6 getEventName]
0x100001a64sub_100001a64
0x100001a80sub_100001a80
0x100001a8csub_100001a8c
Imports38 symbols from 6 dylibs
Exports1
_mh_execute_header0x0