sips

executablemacOS477.9 KBx86_64, arm64

System service — handles telemetry collection and network communication

Apple-signed daemon that collects system telemetry data and communicates with remote endpoints over the network. Manages multiple bundle identifiers and interacts with private Apple frameworks to gather diagnostic information. Processes file system paths and sends telemetry events to configured network endpoints. Runs as a background service with no direct user interface.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 477.9 KB
UUID: 8486A19F-A665-37B8-9D8A-BD336580CCEE
Analyzed: 2026-04-07T05:21:12Z
CDHash: 60a1e1d9e158a2dd75ceae5c88c7764ca76d1a28168097fc3b122ba26c7adeaf

Frameworks14

CoreFoundation ApplicationServices AppKit JavaScriptCore PDFKit UniformTypeIdentifiers CoreSVG Foundation libobjc.A.dylib libSystem.B.dylib ColorSync CoreGraphics CoreText ImageIO

Interesting Strings

Bundle IDs(3)

/AppleInternal/Library/BuildRoots/4~B_wougB2I9VzmJM4ad0uvNgOVeMAIU-GO_vd7Yg/Library/Caches/com.apple.xbs/Sources/sips/sips/ImageProcessing.m /AppleInternal/Library/BuildRoots/4~B_wougB2I9VzmJM4ad0uvNgOVeMAIU-GO_vd7Yg/Library/Caches/com.apple.xbs/Sources/sips/sips/Profile.m com.apple.sips

File Paths(14)

/AppleInternal/Library/BuildRoots/4~B_wougB2I9VzmJM4ad0uvNgOVeMAIU-GO_vd7Yg/Library/Caches/com.apple.xbs/Sources/sips/sips/ImageProcessing.m /AppleInternal/Library/BuildRoots/4~B_wougB2I9VzmJM4ad0uvNgOVeMAIU-GO_vd7Yg/Library/Caches/com.apple.xbs/Sources/sips/sips/Profile.m /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices /System/Library/Frameworks/ColorSync.framework/Versions/A/ColorSync

telemetry(2)

Parametric curve reserved field is not zero. Parametric curve type is not correct.

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(6)

Urlhttp://www.apple.com/appleca/root.crl0

Hostnamewww.apple.com

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

API Usage

Methods

-[Image initWithURL:]-[Image setURL:]-[Output setURL:]

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

2

File Paths

14

Bundle IDs

3

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code664bdc39fb0012c156793a64bd3f25391c2ec869251aba513c2d033f4009a8a2

Imports364b09646e19a2137621df4e30b7af4ff5f5f5a87260eb590db0375051946280

Frameworks6c8197be74055a00481d14f9fb5f9242539bad58b7ac3772fd39aca410047a19

Classesb62b6d4df3a8dafb8f0832ec86c3544c19556088293644b854b3a46d600fd942

Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Symbolscbed81aafb54a1dc4c0494fa28cc37e19c905b2b9f0f6b26bc289ecebae13b98

Static Libraries0 / 381 functions identified

Functions(381)

0x100001060sub_100001060

0x100001064sub_100001064

0x100001078sub_100001078

0x10000108csub_10000108c

0x1000010a0sub_1000010a0

0x1000010b4sub_1000010b4

0x1000010c8sub_1000010c8

0x1000010dcsub_1000010dc

0x1000010f0sub_1000010f0

0x100001198sub_100001198

0x1000012a8sub_1000012a8

0x1000013a8sub_1000013a8

0x1000014a8sub_1000014a8

0x1000015d4sub_1000015d4

0x1000016c4sub_1000016c4

0x100001794sub_100001794

0x100001884sub_100001884

0x1000019a8sub_1000019a8

0x100001a04sub_100001a04

0x100001a40sub_100001a40

Imports364 symbols from 13 dylibs

CoreGraphics107 CoreFoundation66 libSystem.B.dylib55 ImageIO43 libobjc.A.dylib28

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

AssetCacheLocatorUtil