su
executablemacOS119.0 KBx86_64, arm64
Apple system daemon — manages telemetry collection and reporting
Collects diagnostic data from the system and transmits it to Apple's telemetry endpoints. Operates as a signed system daemon with network access to multiple remote servers. Monitors multiple bundle identifiers and tracks specific metrics for reporting. Includes private framework integration to access system-level diagnostic information, with entitlements enabling deeper system introspection.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 119.0 KB
- UUID
- 61AEBE82-CC4D-366D-B9DD-1F1EFA693EA4
- Analyzed
- 2026-04-07T05:21:12Z
- CDHash
- af0c9171040755087e4c21ac4f35d2d8caafd5e9ad43e02b8151cd8bc9076277
Frameworks3
Entitlements3
Interesting Strings
Bundle IDs(7)
telemetry(2)
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
2
File Paths
1
Bundle IDs
7
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 13 functions identified
Functions(13)
0x100000680sub_100000680
0x1000017b0sub_1000017b0
0x1000017e4sub_1000017e4
0x100001898sub_100001898
0x1000018f4sub_1000018f4
0x1000019f0sub_1000019f0
0x100001a40sub_100001a40
0x100001b54sub_100001b54
0x100001c04sub_100001c04
0x100001c9csub_100001c9c
0x100001cacsub_100001cac
0x100001cb8sub_100001cb8
0x100001d44sub_100001d44
Imports80 symbols from 3 dylibs
Exports1
_mh_execute_header0x0