finger

JSON
executablemacOS134.1 KBx86_64, arm64

Telemetry daemon — collects and transmits system diagnostics to Apple servers

Gathers system metrics, logs, and diagnostic data from the local machine and transmits them to Apple-controlled network endpoints. Operates as a background daemon with Apple code signing validation. Maintains references to bundle identifiers and file paths, suggesting it monitors application activity and system state. The presence of multiple network endpoints indicates data is sent to different Apple services for analytics, crash reporting, or system health monitoring.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
134.1 KB
UUID
2CB873DC-0974-3E14-B18C-584CCA2C24FF
Analyzed
2026-04-07T05:21:12Z
CDHash
effc182e22da6050d7ae9dd7b4532ddd0035d65aa3c9bcc1e956afd103cf0682

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
1
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 26 functions identified

Functions(26)

0x100000628sub_100000628
0x100000cfcsub_100000cfc
0x100000e84sub_100000e84
0x1000014c0sub_1000014c0
0x1000016c4sub_1000016c4
0x1000017a0sub_1000017a0
0x10000188csub_10000188c
0x100001cc4sub_100001cc4
0x100001cecsub_100001cec
0x100002130sub_100002130
0x100002284sub_100002284
0x1000023bcsub_1000023bc
0x100002414sub_100002414
0x100002544sub_100002544
0x100002928sub_100002928
0x10000294csub_10000294c
0x1000029d4sub_1000029d4
0x100002a90sub_100002a90
0x100002bbcsub_100002bbc
0x100002bd8sub_100002bd8

Imports79 symbols from 1 dylibs

Exports1

_mh_execute_header0x0