applessdstatistics

executablemacOS218.6 KBx86_64, arm64

Analytics submission daemon — collects and transmits diagnostic data to Apple

Gathers system diagnostics and performance metrics, then submits them to Apple's telemetry infrastructure via HTTP endpoints. Accesses hardware information through direct driver communication to build diagnostic profiles. Exposes two XPC services for other system components to queue analytics events and retrieve submission status. Implements Apple's unified analytics framework to standardize data collection across multiple system services.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 218.6 KB
UUID: 52B8AE73-EB5B-397D-835F-7BF9D29D8A5D
Analyzed: 2026-04-09T09:42:04Z
CDHash: a79d448379a5b1211301a5bc6541168631aef4947fc3121570c049c4f082ffeb

Capabilities

HardwareDirect hardware/driver communication

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

AnalyticsApple unified analytics submission

/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics

Frameworks10

APFS CoreAnalytics Foundation IOKit CrashReporterSupport CoreServices libCoreStorage.dylib libobjc.A.dylib libSystem.B.dylib CoreFoundation

Entitlements2

allow-softwareupdatedtrue

com.apple.private.CacheDelete

CLIENT_ENTITLEMENT ITEMIZED_PURGEABLE_ENTITLEMENT

Interesting Strings

Bundle IDs(42)

<key>com.apple.private.CacheDelete</key>com.apple.applessdstatistics com.apple.applessdstatistics.activity com.apple.corestorage.lvf.encryption.type com.apple.corestorage.lvg.physicalVolumes

File Paths(7)

/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit /System/Library/PrivateFrameworks/APFS.framework/Versions/A/APFS

telemetry(2)

/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics _AnalyticsSendEventLazy

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(6)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

1

IPC

0

Analytics

1

Security

0

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

2

File Paths

7

Bundle IDs

42

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Code6da653f4442ba7343b14a8ccc333b0b66e22f3889ae4122ae75bc1ced34d7248

Importsf5a93d88d8abce8eb1fad9ad1933b82a8f03ca7fbf9cb20b766deada3d2f228a

Frameworks992ff8018eb20ac9c2d30c908a2948561bd05679c919472ece6a680618df76e3

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements6eaf58c17760dd317b8d3008b0689213c06be6e8eb6588f79cefc68f0110ab3b

Symbolsf5a93d88d8abce8eb1fad9ad1933b82a8f03ca7fbf9cb20b766deada3d2f228a

Static Libraries0 / 60 functions identified

Functions(60)

0x100000b18sub_100000b18

0x1000018d4sub_1000018d4

0x100001918sub_100001918

0x10000257csub_10000257c

0x1000025e8sub_1000025e8

0x1000027d0sub_1000027d0

0x1000029acsub_1000029ac

0x100002bf0sub_100002bf0

0x100002c18sub_100002c18

0x100002c28sub_100002c28

0x100002c34sub_100002c34

0x100002cd8sub_100002cd8

0x100002ce0sub_100002ce0

0x100002d50sub_100002d50

0x100002e34sub_100002e34

0x100002e3csub_100002e3c

0x100002e50sub_100002e50

0x100002e70sub_100002e70

0x100002e7csub_100002e7c

0x100002e88sub_100002e88

Imports104 symbols from 7 dylibs

libSystem.B.dylib39 CoreFoundation28 IOKit20 libCoreStorage.dylib7 libobjc.A.dylib7

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

filecoordinationd

fairplaydeviceidentityd