parl

executablemacOS12.4 MBx86_64, arm64

System service — manages telemetry collection and reporting to Apple endpoints

Collects diagnostic data from the system and transmits it to Apple's telemetry infrastructure across 25 network endpoints. Processes bundle identifiers and file paths as part of data gathering, with 10 telemetry-related strings indicating structured reporting mechanisms. Runs as an Apple-signed system service with embedded configuration for multiple target URLs. The large binary size and broad endpoint set suggest comprehensive system monitoring across application and kernel-level events.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 12.4 MB
UUID: 276ED222-4B42-3575-9B4D-C764F63D1F1B
Analyzed: 2026-04-09T09:32:36Z
CDHash: 3a0f3f6d587953d26a10d6936b53d2d8d3cb97062bb6dcfe9a02e15c08a293ba

Frameworks1

libSystem.B.dylib

Interesting Strings

Bundle IDs(5)

/AppleInternal/Library/BuildRoots/4~B_wougBHQ3cQov8Aj9aeEdW62al9_ZP2XF844XA/Library/Caches/com.apple.xbs/Binaries/CPAN/install/TempContent/Objects/5.34/PAR-Packer-1.050/myldr//AppleInternal/Library/BuildRoots/4~B_wougBHQ3cQov8Aj9aeEdW62al9_ZP2XF844XA/Library/Caches/com.apple.xbs/Binaries/CPAN/install/TempContent/Objects/5.34/PAR-Packer-1.050/myldr/main.o /AppleInternal/Library/BuildRoots/4~B_wougBHQ3cQov8Aj9aeEdW62al9_ZP2XF844XA/Library/Caches/com.apple.xbs/Binaries/CPAN/install/TempContent/Objects/5.34/PAR-Packer-1.050/myldr/sha1.o com.apple.libperl com.apple.parl

File Paths(16)

/AppleInternal/Library/BuildRoots/4~B_wougBHQ3cQov8Aj9aeEdW62al9_ZP2XF844XA/Library/Caches/com.apple.xbs/Binaries/CPAN/install/TempContent/Objects/5.34/PAR-Packer-1.050/myldr//AppleInternal/Library/BuildRoots/4~B_wougBHQ3cQov8Aj9aeEdW62al9_ZP2XF844XA/Library/Caches/com.apple.xbs/Binaries/CPAN/install/TempContent/Objects/5.34/PAR-Packer-1.050/myldr/main.o /AppleInternal/Library/BuildRoots/4~B_wougBHQ3cQov8Aj9aeEdW62al9_ZP2XF844XA/Library/Caches/com.apple.xbs/Binaries/CPAN/install/TempContent/Objects/5.34/PAR-Packer-1.050/myldr/sha1.o /Library/Perl/5.34 /Library/Perl/5.34/AppendToPath

telemetry(10)

Geometric Shapes Geometric Shapes Extended Geometric_Shapes Geometric_Shapes_Ext Geometric_Shapes_Extended

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">Internet, point your browser at http://www.perl.org/, the Perl Home Page.https://www.apple.com/appleca/0

Network Surface

Endpoints(25)

Hostnameprogram.pl

Hostnamepar.pl

Ipv486.16.37.07

Hostname1.00e-011.11e-011.25e-011.25e-021.43e-011.50e

Hostname001.50e-011.56e-021.67e-011.88e-012.00e-012.50e

Hostname002.50e-012.50e-02200000003.12e-023.13e-023.13e-033.33e-013.50e

Hostname003.75e-013.75e-024.00e-014.17e-014.50e

Hostname004.69e-025.00e-025.50e

Hostname005.83e-016.00e-016.25e-016.25e-026.25e-036.50e

Hostname006.67e-017.50e

Hostname007.50e-018.00e-018.33e-018.33e-028.50e

Hostname008.75e-019.17e-01armenianavagrahabalinesebassavahbugineseduployanebasegazextpict

Hostnamesitecustomize.pl

Urlhttp://www.perl.org/,

Hostnamewww.perl.org

Hostnameperl5db.pl

Hostnamewww.unicode.org

Urlhttp://www.apple.com/appleca/root.crl0

Hostnamewww.apple.com

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

10

File Paths

16

Bundle IDs

5

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Codefe61fce5a0774d2adf789e2c821d83d3c9c848e4d70f819456282a82b4cec53b

Imports2c87606201482d56baa5da11c8d404563a04b1ad6f8f9e12afea63c344b2508f

Frameworksb97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementse3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Symbols2c87606201482d56baa5da11c8d404563a04b1ad6f8f9e12afea63c344b2508f

Static Libraries0 / 21 functions identified

Functions(21)

0x100000688par_current_exec

0x100000690par_findprog

0x1000008a0sub_1000008a0

0x100000a64par_basename

0x100000a8cpar_dirname

0x100000b98par_init_env

0x100000ce8sub_100000ce8

0x100000d58par_env_clean

0x100000dbcget_username_from_getpwuid

0x100000dc4par_setup_libpath

0x100000e90par_mktmpdir

0x1000014e0sub_1000014e0

0x100001560par_cleanup

0x1000015f8sub_1000015f8

0x100001730main

0x1000018c8sub_1000018c8

0x100001a58sub_100001a58

0x100001b20sha_init

0x100001b64sha_update

0x100001c64sub_100001c64

Imports42 symbols from 1 dylibs

libSystem.B.dylib42

Exports16

_mh_execute_header0x0

get_username_from_getpwuid0xdbc

main0x1730

par_basename0xa64

par_cleanup0x1560

par_current_exec0x688

par_dirname0xa8c

par_env_clean0xd58

par_findprog0x690

par_init_env0xb98

par_mktmpdir0xe90

par_setup_libpath0xdc4

pp_version_info0x8004

sha_final0x2c5c

sha_init0x1b20

sha_update0x1b64

Similar Binaries1,470 comparable