BTLEServer
executablemacOS1.1 MBx86_64, arm64
Bluetooth device management — configures and monitors wireless accessory connections
Manages Bluetooth Low Energy device discovery, pairing, and connection lifecycle for Apple accessories. Accesses IOKit user clients and hardware drivers to communicate with Bluetooth chipsets and connected devices. Stores pairing credentials and device metadata in Keychain, and reads device certificates for authentication. Submits diagnostic telemetry and device state analytics to Apple servers. Exposes 18 XPC services for system processes and user-facing apps to query device status, initiate pairing flows, and manage connected accessories.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 1.1 MB
- UUID
- 2367EB27-3909-32CE-8057-A0EC8E17A1F3
- Analyzed
- 2026-04-07T05:21:17Z
- CDHash
- cdcee25ed0030573da0353ffb3c2e00a2492a051a3b7a66618caba5a6a30628d
Capabilities
StorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-onlyStorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-writeStorageException: access additional file paths
com.apple.security.exception.files.home-relative-path.read-writeHardwareException: access additional IOKit user clients
com.apple.security.exception.iokit-user-client-classHardwareBluetooth LE device access
/System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetoothHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-namecom.apple.telephonyutilities.callservicesdaemon.callstatecontrollercom.apple.telephonyutilities.callservicesdaemon.callcapabilitiescom.apple.corespeech.corespeechd.activation.xpccom.apple.corespeech.corespeechservicescom.apple.corespeech.xpccom.apple.bulletinboard.observerconnectioncom.apple.coremedia.systemcontroller.xpccom.apple.server.bluetooth.le.att.xpccom.apple.server.bluetooth.le.pipe.xpccom.apple.accessories.transport-servercom.apple.SystemConfiguration.configdcom.apple.accessories.blepairingcom.apple.PowerManagement.controlcom.apple.CallHistorySyncHelpercom.apple.accessoryupdater.uarpcom.apple.donotdisturb.servicecom.apple.mediaremoted.xpccom.apple.voicemail.vmdcom.apple.privacyaccountingdcom.apple.ABDatabaseDoctorcom.apple.SBUserNotificationcom.apple.installerauthagentcom.apple.AppSSO.service-xpccom.apple.assistant.analyticscom.apple.siri.activationcom.apple.usymptomsdcom.apple.securitydcom.apple.trustdcom.apple.geodcom.apple.healthd.servercom.apple.appprotectiond.readcom.apple.AudioAccessoryServicescom.apple.devicesharing.guestusermodeservicecom.apple.heartratecoordinatord.blecollectionobserver
AnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks16
Entitlements56
com.apple.security.exception.mach-lookup.global-name
com.apple.telephonyutilities.callservicesdaemon.callstatecontrollercom.apple.telephonyutilities.callservicesdaemon.callcapabilitiescom.apple.corespeech.corespeechd.activation.xpccom.apple.corespeech.corespeechservicescom.apple.corespeech.xpccom.apple.bulletinboard.observerconnectioncom.apple.coremedia.systemcontroller.xpccom.apple.server.bluetooth.le.att.xpccom.apple.server.bluetooth.le.pipe.xpccom.apple.accessories.transport-servercom.apple.SystemConfiguration.configdcom.apple.accessories.blepairingcom.apple.PowerManagement.controlcom.apple.CallHistorySyncHelpercom.apple.accessoryupdater.uarpcom.apple.donotdisturb.servicecom.apple.mediaremoted.xpccom.apple.voicemail.vmdcom.apple.privacyaccountingdcom.apple.ABDatabaseDoctorcom.apple.SBUserNotificationcom.apple.installerauthagentcom.apple.AppSSO.service-xpccom.apple.assistant.analyticscom.apple.siri.activationcom.apple.usymptomsdcom.apple.securitydcom.apple.trustdcom.apple.geodcom.apple.healthd.servercom.apple.appprotectiond.readcom.apple.AudioAccessoryServicescom.apple.devicesharing.guestusermodeservicecom.apple.heartratecoordinatord.blecollectionobserver
Interesting Strings
Bundle IDs(209)
File Paths(31)
telemetry(9)
Network Surfaceentitled
Networking Frameworks
Endpoints(9)
API Usage
DNA Capability Vector
Location
0
Keychain
1
Network
1
Storage
4
Hardware
3
IPC
1
Analytics
2
Security
2
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
9
File Paths
31
Bundle IDs
209
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 1509 functions identified
Functions(1509)
0x1000013d8sub_1000013d8
0x100001534sub_100001534
0x100001560sub_100001560
0x10000158csub_10000158c
0x1000015b8sub_1000015b8
0x1000015e4sub_1000015e4
0x100001658sub_100001658
0x10000165csub_10000165c
0x1000016d4-[BatteryLevelStatusPowerState initWithPtr:]
0x100001764-[BatteryLevelStatusPowerState description]
0x1000019b0-[BatteryLevelStatusPowerState batteryPresent]
0x1000019b8-[BatteryLevelStatusPowerState setBatteryPresent:]
0x1000019c0-[BatteryLevelStatusPowerState externalPowerSourceWired]
0x1000019c8-[BatteryLevelStatusPowerState setExternalPowerSourceWired:]
0x1000019d0-[BatteryLevelStatusPowerState externalPowerSourceWireless]
0x1000019d8-[BatteryLevelStatusPowerState setExternalPowerSourceWireless:]
0x1000019e0-[BatteryLevelStatusPowerState batteryChargeState]
0x1000019e8-[BatteryLevelStatusPowerState setBatteryChargeState:]
0x1000019f0-[BatteryLevelStatusPowerState batteryChargeLevel]
0x1000019f8-[BatteryLevelStatusPowerState setBatteryChargeLevel:]
Imports355 symbols from 14 dylibs
Exports1
_mh_execute_header0x0