metrickitd

executablemacOS133.3 KBx86_64, arm64

Analytics submission daemon — collects and transmits diagnostic data to Apple

Gathers system diagnostics and usage metrics from the local machine, then submits this data to Apple's analytics infrastructure via HTTPS endpoints. Operates as a background daemon with XPC service exposure for inter-process communication with system components. Handles telemetry collection across multiple bundle identifiers and manages local data staging through file paths. Communicates with 7 distinct network endpoints, likely for redundancy and load balancing of analytics submissions.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 133.3 KB
UUID: D5365D8F-08F0-32D1-9992-7B66B6434F50
Analyzed: 2026-04-09T09:55:17Z
CDHash: 9c905e1b4f8a521e1609340fa0983d15341e3b59e3cab20aac64fba285d6727e

Capabilities

AnalyticsApple unified analytics submission

/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics

Frameworks6

Foundation MetricKitCore CoreAnalytics libobjc.A.dylib libSystem.B.dylib CoreFoundation

Entitlements7

com.apple.private.MobileContainerManager.otherIdLookuptrue

com.apple.private.kernel.global-proc-infotrue

com.apple.private.logging.diagnostictrue

com.apple.private.security.daemon-containertrue

com.apple.security.system-containertrue

platform-applicationtrue

seatbelt-profiles

Interesting Strings

Bundle IDs(13)

#com.apple.security.system-container $com.apple.private.logging.diagnostic )com.apple.private.kernel.global-proc-info +com.apple.private.security.daemon-container 6com.apple.private.MobileContainerManager.otherIdLookup

File Paths(4)

/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics /System/Library/PrivateFrameworks/MetricKitCore.framework/Versions/A/MetricKitCore

telemetry(6)

/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics /System/Library/PrivateFrameworks/MetricKitCore.framework/Versions/A/MetricKitCore <string>com.apple.metrickitd</string><string>metrickitd</string>com.apple.metrickitd

URLs & Endpoints(5)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><string>com.apple.compilers.llvm.clang.1_0</string>https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(7)

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Hostnamemacosx26.1.internal

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

0

IPC

0

Analytics

1

Security

0

System

0

Behavioral Profile

URL Endpoints

5

Telemetry Strings

6

File Paths

4

Bundle IDs

13

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Codea2a85dab5df54ca0c779b489817582397e138af03215d1cd05e1eda3e6df839b

Imports1432a26c134c986562a498e8d9a6ee67d205da6f92ca9a26b3b6ef75c54db9c1

Frameworks4feab30780a0d0fbbad705ee6165f3fd57abd63b9dad15556f4e6635e62cd2da

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlements1a4790d529a1710ef4d47b45c281ed9710c1f47d8d8daa84a17754aaed651beb

Symbols1432a26c134c986562a498e8d9a6ee67d205da6f92ca9a26b3b6ef75c54db9c1

Static Libraries0 / 12 functions identified

Functions(12)

0x100000958sub_100000958

0x100000b9csub_100000b9c

0x100000c98sub_100000c98

0x100000cb4sub_100000cb4

0x100000cc0sub_100000cc0

0x100000d08sub_100000d08

0x100000d8csub_100000d8c

0x100000e04sub_100000e04

0x100000e7csub_100000e7c

0x100000ef4sub_100000ef4

0x100000f6csub_100000f6c

0x100000fe4sub_100000fe4

Imports28 symbols from 5 dylibs

libSystem.B.dylib17 libobjc.A.dylib5 CoreFoundation4 Foundation1 MetricKitCore1

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

fairplaydeviceidentityd

IOMFB_bics_daemon

applessdstatistics

inputanalyticsd

naturallanguaged