dasd
executablemacOS3.7 MBx86_64, arm64
System diagnostics and analytics daemon — collects and reports device telemetry
Continuously gathers device diagnostics, performance metrics, and usage data, then submits reports to Apple's analytics infrastructure. Accesses hardware state through IOKit, location information without user prompts, and keychain/Secure Enclave credentials for authentication. Manages background tasks and process lifecycle events as a system daemon with 33 XPC services for inter-process communication with other system components. Monitors network connectivity and configuration state to track device behavior patterns. Operates with broad file system exceptions and direct hardware communication capabilities.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 3.7 MB
- UUID
- F8645DE2-8BEB-30B0-A1A7-9365D81B7DEC
- Analyzed
- 2026-04-09T09:46:45Z
- CDHash
- 4e648e6f9102ada6d3a9464bfa1dc334dcbb954cad6cb65ee6441dd733e33449
Capabilities
LocationAccess location as a system bundle (no user prompt)
com.apple.locationd.effective_bundle[object Object]KeychainHardware key storage (Secure Enclave)
/System/Library/PrivateFrameworks/AppleKeyStore.framework/Versions/A/AppleKeyStoreNetworkModern networking framework (NWConnection)
/System/Library/Frameworks/Network.framework/Versions/A/NetworkNetworkNetwork configuration and reachability
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfigurationStorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-onlyStorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-writeStorageException: access additional file paths
com.apple.security.exception.files.home-relative-path.read-writeHardwareException: access additional IOKit user clients
com.apple.security.exception.iokit-user-client-classHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-namecom.apple.geodcom.apple.cache_delete.publiccom.apple.cache_deletecom.apple.biome.access.systemcom.apple.biome.access.usercom.apple.routined.registrationcom.apple.activityprogress.activityprogressui.servicescom.apple.appconduitd.device-connectioncom.apple.commcenter.carrierspace.xpccom.apple.commcenter.coretelephony.xpccom.apple.computesafeguards.managingcom.apple.coreduetd.contextcom.apple.coreduetd.knowledgecom.apple.coremedia.cameraviewfindercom.apple.coreservices.launchservicesdcom.apple.coreservices.quarantine-resolvercom.apple.duetactivityschedulercom.apple.ExposureNotificationcom.apple.FileCoordinationcom.apple.gizmoappd.appmanagercom.apple.iokit.powerdxpccom.apple.lsd.mapdbcom.apple.mobileactivationdcom.apple.MobileInternetSharingcom.apple.PerfPowerTelemetryClientRegistrationServicecom.apple.photos.servicecom.apple.powerexperienced.powermitigationsmanager.servicecom.apple.powerlog.plxpclogger.xpccom.apple.proactive.ActionPrediction.predictionscom.apple.purplebuddy.budd.cloud.xpccom.apple.PowerManagement.controlcom.apple.SystemConfiguration.configdcom.apple.terminusdcom.apple.powerd.smartpowernapcom.apple.powerd.coresmartpowernapcom.apple.OSIntelligence.chargingcom.apple.griddatad.registrationcom.apple.biome.ContextSynccom.apple.biomesyncd.sync
AnalyticsSymptom/diagnostic reporting framework
/System/Library/PrivateFrameworks/Symptoms.framework/Versions/A/Frameworks/SymptomPresentationFeed.framework/Versions/A/SymptomPresentationFeedAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsAnalyticsUsage prediction and tracking
/System/Library/PrivateFrameworks/CoreDuet.framework/Versions/A/CoreDuetAnalyticsSymptom/diagnostic reporting framework
/System/Library/PrivateFrameworks/SymptomDiagnosticReporter.framework/Versions/A/SymptomDiagnosticReporterSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecuritySystemBackground task scheduling
/System/Library/PrivateFrameworks/BackgroundSystemTasks.framework/Versions/A/BackgroundSystemTasksSystemProcess lifecycle management
/System/Library/PrivateFrameworks/RunningBoardServices.framework/Versions/A/RunningBoardServicesFrameworks38
Symptoms(weak)libDiagnosticMessagesClient.dylibBackgroundTaskManagement(weak)libperfcheck.dylib(weak)libMobileGestalt.dylib(weak)AppleKeyStore(weak)ApplicationServices(weak)AssertionServices(weak)BackgroundSystemTasksBiomeFoundation(weak)BiomeLibrary(weak)BiomePubSub(weak)BiomeStorage(weak)BiomeStreams(weak)BiomeSync(weak)CacheDelete(weak)CoreAnalytics(weak)CoreData(weak)CoreDuet(weak)CoreDuetContext(weak)CrashReporterSupport(weak)DASDelegate(weak)DiagnosticRequest(weak)DuetActivityScheduler(weak)IOKit(weak)Network(weak)PowerLog(weak)RunningBoardServices(weak)Security(weak)SoftLinking(weak)SymptomDiagnosticReporter(weak)SystemConfiguration(weak)Trial(weak)Foundationlibobjc.A.dyliblibSystem.B.dylibCoreFoundation(weak)CoreServices(weak)
Entitlements100
com.apple.security.exception.mach-lookup.global-name
com.apple.geodcom.apple.cache_delete.publiccom.apple.cache_deletecom.apple.biome.access.systemcom.apple.biome.access.usercom.apple.routined.registrationcom.apple.activityprogress.activityprogressui.servicescom.apple.appconduitd.device-connectioncom.apple.commcenter.carrierspace.xpccom.apple.commcenter.coretelephony.xpccom.apple.computesafeguards.managingcom.apple.coreduetd.contextcom.apple.coreduetd.knowledgecom.apple.coremedia.cameraviewfindercom.apple.coreservices.launchservicesdcom.apple.coreservices.quarantine-resolvercom.apple.duetactivityschedulercom.apple.ExposureNotificationcom.apple.FileCoordinationcom.apple.gizmoappd.appmanagercom.apple.iokit.powerdxpccom.apple.lsd.mapdbcom.apple.mobileactivationdcom.apple.MobileInternetSharingcom.apple.PerfPowerTelemetryClientRegistrationServicecom.apple.photos.servicecom.apple.powerexperienced.powermitigationsmanager.servicecom.apple.powerlog.plxpclogger.xpccom.apple.proactive.ActionPrediction.predictionscom.apple.purplebuddy.budd.cloud.xpccom.apple.PowerManagement.controlcom.apple.SystemConfiguration.configdcom.apple.terminusdcom.apple.powerd.smartpowernapcom.apple.powerd.coresmartpowernapcom.apple.OSIntelligence.chargingcom.apple.griddatad.registrationcom.apple.biome.ContextSynccom.apple.biomesyncd.sync
com.apple.security.exception.shared-preference.read-write
com.apple.bg.system.taskcom.apple.CoreDuetcom.apple.appResume.freezerRecommendationscom.apple.dasd.datacollectiontaskscom.apple.dasd.testingDefaultscom.apple.duetactivityschedulercom.apple.duetactivityscheduler.plugincom.apple.das.fairschedulingcom.apple.dasd.dailyPeriodiccom.apple.dasd.issueDetectorcom.apple.dasd.swapkillscom.apple.dasd.widgetRefreshBudgetscom.apple.mtcom.apple.mt.killedcom.apple.mt.launchDelaycom.apple.mt.lastLaunchcom.apple.dasd.dockcom.apple.dasd.dock.persistencecom.apple.aprscom.apple.dasd.activityDurationTrackercom.apple.gridDataServicescom.apple.gridDataServices.configcom.apple.duetactivityscheduler.trialcom.apple.duetactivityscheduler.policydatacollectioncom.apple.dasd.barMetricRecorder
Interesting Strings
Bundle IDs(669)
File Paths(65)
telemetry(231)
Network Surfaceentitled
Networking Frameworks
Endpoints(12)
Hostnameself.name
HostnameSELF.name
Hostnamegroup.apple.com
Ipv60:8:16
Hostnamewww.apple.com
Hostnamemacosx26.1.internal
Hostnamecrl.apple.com
API Usage
DNA Capability Vector
Location
1
Keychain
1
Network
3
Storage
3
Hardware
2
IPC
2
Analytics
5
Security
1
System
2
Behavioral Profile
URL Endpoints
16
Telemetry Strings
231
File Paths
65
Bundle IDs
669
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 5696 functions identified
Functions(5696)
0x100001e10-[_DASAssertion _initWithUnderlyingAssertion:forPid:]
0x100001eb8-[_DASAssertion initWithRBSAssertion:forPid:]
0x100001f20-[_DASAssertion acquireWithError:]
0x100001f68-[_DASAssertion invalidateWithError:]
0x100001f74-[_DASAssertion _invalidateCallingHandler:withError:]
0x100002084sub_100002084
0x1000020c8sub_1000020c8
0x1000020d4sub_1000020d4
0x1000020dc-[_DASAssertion invalidateAndKillWithExplanation:code:error:]
0x100002278-[_DASAssertion isValid]
0x1000022b8-[_DASAssertion _callInvalidationHandler:]
0x10000246c-[_DASAssertion _callWarningHandler]
0x10000252c-[_DASAssertion assertion:didInvalidateWithError:]
0x1000025f0-[_DASAssertion assertionWillInvalidate:]
0x1000026b0-[_DASAssertion description]
0x100002728-[_DASAssertion dealloc]
0x1000027a8-[_DASAssertion underlyingAssertion]
0x1000027b4-[_DASAssertion pid]
0x1000027bc-[_DASAssertion invalidationHandler]
0x1000027c8-[_DASAssertion setInvalidationHandler:]
Imports515 symbols from 30 dylibs
Exports1
_mh_execute_header0x0