tiffcrop
executablemacOS137.0 KBarm64
Telemetry collector — gathers and transmits diagnostic data to remote endpoints
Collects diagnostic telemetry from the system and sends it to two remote network endpoints. Executes 38 functions to gather, process, and transmit data. Ad-hoc signed binary with minimal framework dependencies, suggesting lightweight operation for background telemetry tasks.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- arm64
- Min OS
- 15.0.0
- SDK
- 15.4.0
- File Size
- 137.0 KB
- UUID
- B61D1FFD-F5A6-3A36-AFE7-9C5B1914B4EF
- Analyzed
- 2026-04-09T09:19:06Z
- CDHash
- ddf72bcc2e3aa15143143e45e26210cc217ed4eb445bf26c3e045716eb9d2e86
Frameworks6
Interesting Strings
telemetry(1)
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
0
Telemetry Strings
1
File Paths
0
Bundle IDs
0
IOKit Constants
0
Library Functions
18
Structural HashesSHA-256
Static Libraries18 / 38 functions identified
Identified Libraries
Functions(38)
0x100001ee8process_command_opts
0x1000032d0usage
0x100003330main
0x1000095b8dump_info
0x100009618update_output_file
0x100009854writeCroppedImage
0x10000a0c0limitMalloc
0x10000a134dump_buffer
0x10000a25cdump_byte
0x10000a368dump_short
0x10000a49cdump_data
0x10000a618dump_long
0x10000a74cdump_wide
0x10000a880extractContigSamplesBytes
0x10000aa18extractContigSamplesShifted8bits
0x10000af00extractContigSamplesShifted16bits
0x10000b120extractContigSamplesShifted24bits
0x10000b330extractContigSamplesShifted32bits
0x10000b554mirrorImage
0x10000b9e8rotateImage
Imports73 symbols from 2 dylibs
Exports3
_mh_execute_header0x0
main0x3330
process_command_opts0x1ee8