installer
executablemacOS233.6 KBx86_64, arm64
System component — manages Apple services and telemetry reporting
Communicates with Apple backend services through 7 network endpoints, including telemetry collection and reporting mechanisms. Operates across 15 different bundle identifiers and accesses multiple file paths for data collection. Uses private Apple frameworks alongside standard system APIs to gather system state information. Includes telemetry functionality that reports data to remote endpoints, making it part of Apple's diagnostic and analytics infrastructure.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 233.6 KB
- UUID
- 85BE68AA-DC35-3C88-83C9-D19E64E2B384
- Analyzed
- 2026-04-07T05:21:14Z
- CDHash
- 96db91a0a9888343b9fb5ed3e0ddb73727d2c75c7041afb9de09d61e986636f5
Frameworks10
Entitlements7
Interesting Strings
Bundle IDs(15)
File Paths(12)
/Library/Preferences/.GlobalPreferences.plist/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/PrivateFrameworks/IASUtilities.framework/Versions/A/IASUtilities
telemetry(2)
URLs & Endpoints(5)
$http://crl.apple.com/codesigning.crl0%http://www.apple.com/appleca/root.crl0<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
2
File Paths
12
Bundle IDs
15
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 72 functions identified
Functions(72)
0x100000ec8-[ITSession initWithInstallData:shouldSkipChecks:]
0x1000010ec-[ITSession dealloc]
0x10000115c-[ITSession install]
0x100001888-[ITSession _userIsLoggedIn]
0x100001a20-[ITSession doOSInstall]
0x100001e9c-[ITSession osInstallTargetLikeObjectGivenTargetString:]
0x100001fa4-[ITSession printChoiceChangesViaOSInstaller]
0x10000230c-[ITSession printChoicesViaOSInstaller]
0x1000024a0-[ITSession _descriptionForItem:]
0x100002804-[ITSession _applyOSInstallerCustomization:]
0x1000029e4-[ITSession _itemForID:]
0x100002a2c-[ITSession _itemForID:choicesArray:]
0x100002ba4-[ITSession boolForKey:]
0x100002bd8-[ITSession writeLanguageKeyIfNeeded]
0x100002d10-[ITSession writeAdditionalMediaDistributionsToPath:]
0x100003060-[ITSession shouldAllowInstallWithoutPrivilege:]
0x1000031b4-[ITSession connectionDidDie:]
0x1000031b8-[ITSession processInstallationCheckErrors:exitIfErrorsExist:]
0x1000033fc-[SKDummyDisk role]
0x10000340c-[SKDummyDisk type]
Imports85 symbols from 10 dylibs
Exports1
_mh_execute_header0x0