dnsperf
executablemacOS150.2 KBarm64
Telemetry collection utility — gathers and transmits diagnostic data
Collects system diagnostic information and sends it to remote endpoints via network connections. References telemetry subsystems 6 times throughout its code, indicating multiple data collection points. Contains 3 configured network endpoints for transmitting collected data. Uses standard macOS frameworks to access system information and network APIs. Runs as an ad-hoc signed executable without requiring privileged entitlements.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- arm64
- Min OS
- 26.0.0
- SDK
- 26.2.0
- File Size
- 150.2 KB
- UUID
- 3A3B2E6D-7E70-35C5-8436-30E8356159FE
- Analyzed
- 2026-04-09T08:40:18Z
- CDHash
- e8e9ab377bebe030cdfa1b3d3b911d5f2fd5057715c04ede0fd84640a16ca1ee
Frameworks6
Interesting Strings
Network Surface
Endpoints(3)
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
2
Telemetry Strings
6
File Paths
0
Bundle IDs
0
IOKit Constants
0
Library Functions
27
Structural HashesSHA-256
Static Libraries27 / 208 functions identified
Identified Libraries
Function Matches(1)
SSL_CTX_new_exopenssl 3.6High
Functions(208)
0x100001fa8perf_datafile_open
0x100002120read_one_line
0x10000225cread_one_blob
0x10000237cperf_datafile_close
0x100002420perf_datafile_setpipefd
0x100002428perf_datafile_setmaxruns
0x100002438perf_datafile_next
0x1000025f0reopen_file
0x100002644perf_datafile_nruns
0x100002654read_more
0x100002760perf_dname_fromstring
0x100002a14perf_qtype_fromstring
0x100002b40perf_dns_buildrequest
0x100003364token_equals
0x1000033b8read_update_line
0x100003734compression_free
0x10000375cOUTLINED_FUNCTION_0
0x100003764OUTLINED_FUNCTION_1
0x10000376cOUTLINED_FUNCTION_2
0x100003774perf_log_printf
Imports163 symbols from 5 dylibs
Exports73
_mh_execute_header0x0
hg64_create0x981c
hg64_destroy0x98c0
hg64_diff0x9ddc
hg64_get0x99cc
hg64_inc0x98fc
hg64_max_key0x9ff0
hg64_mean_variance0x9afc
hg64_merge0x9be8
hg64_min_key0x9f64
hg64_next0x9a94
log_lock0x18080
main0xa098
parse_uri0x960c
perf_add_edns0x52e8
perf_add_tsig0x586c
perf_datafile_close0x237c
perf_datafile_next0x2438
perf_datafile_nruns0x2644
perf_datafile_open0x1fa8
perf_datafile_setmaxruns0x2428
perf_datafile_setpipefd0x2420
perf_dname_fromstring0x2760
perf_dns_buildrequest0x2b40
perf_dns_rcode_strings0x18000
perf_edns_destroyoption0x52b0
perf_edns_parseoption0x50ac
perf_log_fatal0x38b8
perf_log_printf0x3774
perf_log_tostdout0x3964
perf_log_warning0x390c
perf_long_opt_add0x4134
perf_long_opt_usage0x43e8
perf_net_doh_opensocket0x7a80
perf_net_doh_parse_method0x7a08
perf_net_doh_parse_uri0x79cc
perf_net_doh_set_max_concurrent_streams0x7a74
perf_net_doh_stats_compile0x9210
perf_net_doh_stats_init0x9200
perf_net_doh_stats_print0x9260
perf_net_dot_opensocket0x6a88
perf_net_opensocket0x3dbc
perf_net_parsefamily0x3a24
perf_net_parselocal0x3c90
perf_net_parsemode0x3974
perf_net_parseserver0x3b90
perf_net_stats_compile0x3f5c
perf_net_stats_init0x3f4c
perf_net_stats_print0x3f70
perf_net_tcp_opensocket0x6048
perf_net_tls_sni0x21c68
perf_net_udp_opensocket0x5dbc
perf_opt_add0x3f84
perf_opt_parse0x44d8
perf_opt_parse_suppress0x4a28
perf_opt_usage0x4224
perf_os_blocksignal0x4bd8
perf_os_handlesignal0x4c7c
perf_os_thread_setname0x5050
perf_os_waituntilanyreadable0x4d64
perf_os_waituntilanywritable0x4efc
perf_os_waituntilreadable0x4d08
perf_qtype_fromstring0x2a14
perf_sockaddr_format0x3b54
perf_sockaddr_fromin0x3ab8
perf_sockaddr_fromin60x3ae4
perf_sockaddr_port0x3b10
perf_sockaddr_setport0x3b38
perf_strerror_r0x5054
perf_tsig_destroykey0x581c
perf_tsig_parsekey0x54b8
progname0x18108
qtype_table0x14518