open

JSON
executablemacOS299.5 KBx86_64, arm64

System service — monitors and reports telemetry data to Apple endpoints

Collects diagnostic information from the system and transmits it to Apple-controlled network endpoints. Interfaces with 2 bundle identifiers and accesses 233 file paths across the filesystem to gather metrics. Maintains network connectivity to 6 remote endpoints for telemetry transmission. Includes one telemetry-related string constant and uses only public frameworks, suggesting this is a standard system diagnostic collection process integrated into macOS.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
299.5 KB
UUID
DCDBFE6B-D379-34B4-BDEE-539F3A485D1A
Analyzed
2026-04-07T05:21:14Z
CDHash
4da75b63bfbbb79017782e0973d2b2a5e9efce17aea23c95d7142d7e09abe48b

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
5
Telemetry Strings
1
File Paths
233
Bundle IDs
2
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 32 functions identified

Functions(32)

0x100000e80-[HeaderOpenState initWithRemainingHeaders:]
0x100001000-[HeaderOpenState dealloc]
0x100001054-[HeaderOpenState visitPath:]
0x100001058-[HeaderOpenState finished]
0x100001060-[HeaderOpenState performFastPathSearch]
0x100001240-[HeaderOpenState headersToHeaderPaths]
0x100001248-[HeaderOpenState visitHeader:atPath:]
0x100001340sub_100001340
0x100003cc8sub_100003cc8
0x100003d98sub_100003d98
0x100003e2csub_100003e2c
0x100003e64sub_100003e64
0x1000040d0sub_1000040d0
0x100004304sub_100004304
0x100004438sub_100004438
0x1000044f8sub_1000044f8
0x100004a30sub_100004a30
0x100004ad0sub_100004ad0
0x100004b50sub_100004b50
0x100004be0sub_100004be0

Imports130 symbols from 7 dylibs

Exports1

_mh_execute_header0x0