ristsender
executablemacOS105.6 KBarm64
Telemetry collection agent — gathers and transmits system diagnostic data
Collects system diagnostic information and telemetry data from the host device. Processes 12 distinct telemetry data points covering various system metrics and behaviors. Executes as a standalone executable without reliance on private Apple frameworks, making it suitable for integration into monitoring or diagnostic pipelines. The ad-hoc signature indicates this is a development or internal build rather than a production-signed application.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- arm64
- Min OS
- 26.0.0
- SDK
- 26.1.0
- File Size
- 105.6 KB
- UUID
- 724CF1A3-42E6-3FC7-BE64-3C815D6F6BEE
- Analyzed
- 2026-04-09T09:15:34Z
- CDHash
- 57a70816ef2bd91d00ede18b1a2f2c6a5e294f3c56a2225b9c784364691b1963
Interesting Strings
telemetry(12)
| --metrics-multipoint | Metrics return multiple timestamped data points | | --metrics-nocreated | Metrics skip the created metric for Prometheus compat | | --metrics-tags | Additional tags to add to the metrics | | --metrics-unix | Unix socket to expose metrics on | -M | --enable-metrics | Enable OpenMetrics/Prometheus compatible metrics |
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
0
Telemetry Strings
12
File Paths
0
Bundle IDs
0
IOKit Constants
0
Library Functions
12
Structural HashesSHA-256
Static Libraries12 / 41 functions identified
Identified Libraries
Functions(41)
0x100001298main
0x100001f98intHandler
0x100001fe0usage
0x10000203csetup_rist_peer
0x1000023e4input_udp_recv
0x1000025b8input_udp_sockerr
0x1000025f8input_loop
0x1000026fccb_stats
0x100002768cb_auth_connect
0x1000028e0cb_auth_disconnect
0x1000028e8connection_status_callback
0x100002938cb_recv_oob
0x100002990populate_ip_header
0x100002a10populate_ipv4_rist_header
0x100002a14oob_build_api_payload
0x100002ab8oob_process_api_message
0x100002b1csrp_base64_decode
0x100002be4parse_line
0x100002d58user_verifier_lookup
0x100003074clock_gettime_osx
Imports89 symbols from 3 dylibs
Exports1
_mh_execute_header0x0