tiffutil

JSON
executablemacOS168.2 KBx86_64, arm64

System telemetry reporter — collects and transmits diagnostic data to Apple servers

Gathers system diagnostics and performance metrics from the local machine, then transmits collected data to Apple's remote endpoints via HTTP(S). Maintains bundle identifiers and references file paths to contextualize diagnostic information. Implements telemetry collection mechanisms that execute periodically or on-demand. Routes data through multiple network endpoints, likely for redundancy or regional distribution. Runs as a privileged system component with Apple's signature.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
168.2 KB
UUID
DAF1D511-6A3A-3733-A663-6D5781F981AC
Analyzed
2026-04-07T05:21:14Z
CDHash
101b0748badb7a5494e5d287a6e3dcf8721d408538ceab1382da2b7b02340339

Interesting Strings

Network Surface

Networking Frameworks

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
2
File Paths
6
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 33 functions identified

Functions(33)

0x100000a48sub_100000a48
0x100000a88sub_100000a88
0x100000b80sub_100000b80
0x100000b94sub_100000b94
0x100000b98sub_100000b98
0x100000bacsub_100000bac
0x100000bbcsub_100000bbc
0x100000bccsub_100000bcc
0x100000bf8sub_100000bf8
0x100000c20sub_100000c20
0x100000c48sub_100000c48
0x100000ca0sub_100000ca0
0x100001f70sub_100001f70
0x100001f80sub_100001f80
0x100002028sub_100002028
0x100002080sub_100002080
0x1000021dcsub_1000021dc
0x100002574sub_100002574
0x100002600sub_100002600
0x1000026a0sub_1000026a0

Imports84 symbols from 6 dylibs

Exports1

_mh_execute_header0x0