ANECompilerService

Before you comment to crucify me for looking in logs, please tell me if this compiler looks suspicious, I didn’t post the full log as it’s very very long.


This iPad was factory reset at the Apple Store a few weeks, no additional apps installed. My MacBook Pro and MacMini were both compromised and jailbroken.


I am wondering if this is a persistent ‘horsey’ type issue and my iPad and Macs are now back on the merry-go-round despite factory resets and new AppleID.


{"app_name":"ANECompilerService","timestamp":"2023-03-28 09:42:12.00 +1100","slice_uuid":"","build_version":"1","bundleID":"com.apple.ANECompilerService","duration_ms":"120064","share_with_app_devs":0,"is_first_party":0,"bug_type":"202","os_version":"iPhone OS 16.3.1 (20D67)","roots_installed":0,"name":"ANECompilerService","incident_id":""}
Date/Time:        2023-03-28 09:40:11.292 +1100
End time:         2023-03-28 09:42:11.356 +1100
OS Version:       iPhone OS 16.3.1 (Build 20D67)
Architecture:     arm64e
Report Version:   40
Incident Identifier: 

Data Source:      Microstackshots
Shared Cache:     
Shared Cache:     

Command:          ANECompilerService
Path:             /System/Library/PrivateFrameworks/AppleNeuralEngine.framework/XPCServices/ANECompilerService.xpc/ANECompilerService
Identifier:       com.apple.ANECompilerService
Version:          ??? (1)
Resource Coalition ID: 463
Architecture:     arm64e
Parent:           launchd [1]
PID:              1021

Event:            cpu usage
Action taken:     none
CPU:              90 seconds cpu time over 120 seconds (75% cpu average), exceeding limit of 50% cpu over 180 seconds
CPU limit:        90s
Limit duration:   180s
CPU used:         90s
CPU duration:     120s
Duration:         120.06s
Duration Sampled: 118.88s
Steps:            47

Hardware model:   iPad12,1
Active cpus:      6
HW page size:     16384
VM page size:     16384

Advisory levels:  Battery -> 3, User -> 3, ThermalPressure -> 0, Combined -> 3
Free disk space:  48.07 GB/59.59 GB, low space threshold 150 MB
Vnodes Available: 47.69% (4769/10000)

Preferred User Language: en-AU
Country Code:     AU
Keyboards:        en_AU QWERTY
OS Cryptex File Extents: 4

Heaviest stack for the target process:
  30  ??? (libsystem_pthread.dylib + 2968) [0x227d3cb98]
  30  ??? (libsystem_pthread.dylib + 3576) [0x227d3cdf8]
  30  ??? (libdispatch.dylib + 93712) [0x1e1a63e10]
  30  ??? (libdispatch.dylib + 49600) [0x1e1a591c0]
  30  ??? (libdispatch.dylib + 46360) [0x1e1a58518]
  30  ??? (libdispatch.dylib + 136524) [0x1e1a6e54c]
  30  ??? (libdispatch.dylib + 46360) [0x1e1a58518]
  30  ??? (libdispatch.dylib + 133168) [0x1e1a6d830]
  30  ??? (libdispatch.dylib + 16456) [0x1e1a51048]
  30  ??? (libxpc.dylib + 72652) [0x227d91bcc]
  30  ??? (libxpc.dylib + 71580) [0x227d9179c]
  30  ??? (Foundation + 6599156) [0x1d4e611f4]
  30  ??? (Foundation + 6600584) [0x1d4e61788]
  30  ??? (Foundation + 6594040) [0x1d4e5fdf8]
  30  ??? (Foundation + 711484) [0x1d48c3b3c]
  30  ??? (CoreFoundation + 133916) [0x1da450b1c]
  30  ??? (CoreFoundation + 476852) [0x1da4a46b4]
  30  ??? (ANECompilerService + 106728) [0x10006e0e8]
  30  ??? (libdispatch.dylib + 79220) [0x1e1a60574]
  30  ??? (libdispatch.dylib + 16264) [0x1e1a50f88]
  30  ??? (ANECompilerService + 108084) [0x10006e634]
  30  ??? (ANECompilerService + 104844) [0x10006d98c]
  30  ??? (ANECompilerService + 99644) [0x10006c53c]
  29  ??? (ANECompiler + 1597532) [0x239a1205c]
  29  ??? (ANECompiler + 1603732) [0x239a13894]
  17  ??? (ANECompiler + 3655344) [0x239c086b0]
  17  ??? (ANECompiler + 3154400) [0x239b8e1e0]
  15  ??? (ANECompiler + 3149656) [0x239b8cf58]
  9   ??? (ANECompiler + 3127684) [0x239b87984]
  9   ??? (ANECompiler + 3147156) [0x239b8c594]
  7   ??? (ANECompiler + 3113240) [0x239b84118]
  6   ??? (ANECompiler + 3111264) [0x239b83960]
  6   ??? (ANECompiler + 2186660) [0x239aa1da4]
  6   ??? (ANECompiler + 4384816) [0x239cba830]
  4   ??? (ANECompiler + 2201700) [0x239aa5864]
  3   ??? (ANECompiler + 4386556) [0x239cbaefc]
  1   ??? (ANECompiler + 4386228) [0x239cbadb4]



iPad, iPadOS 16

Posted on Apr 1, 2023 9:57 PM

Reply
Question marked as Top-ranking reply

Posted on May 4, 2023 4:47 AM

@Wattermellon


I have some further information, ANECompilerService is apparently a process that runs on Apple products with Adobe Creative Suite installed. ANE stands for Adobe Native Extensions which developers code for Adobe AIR applications. ANE files are libraries of native code, ANECompilerService compiles the code into an executable format. When there is an issue with the ANE compilation it may create a log entry, which is what we have found on our devices.


So, it’s a legitimate process, albeit an executable so worth keeping an eye on, HOWEVER, if you do NOT have Adobe AIR applications installed then it’s highly like either you have malware or an active exploit is using the compiler to execute code.


In my case, it has never had Adobe on the iPad (or my iPhone which it is also on). My compiler was accessing libcommonCrypto.dylib which is a cryptographic function for encryption, decryption etc and this is not something that ANECompilerService should be accessing along with other security processes. At the time of the crash it was using several system libraries and system level components. There was also the issue that the check for a root certificate failed or was invalid.


I also found evidence in other logs of security violations on the iPad. I also have a compromised MacbookPro and Mac mini (which has now been confirmed) which were both interacting with all of our iPads (also confirmed) even though they have different Adobe IDs for some devices.


The bad news is, if your appearance of the log is not for a legitimate reason then it may be impossible to get rid of, for me, Apple Store performed a full reset and it hasn’t gone away. The lastest security update which came out yesterday also did not make a difference. I run the iPad in lockdown mode but that hasn’t made any difference, they have altered the operating system.


I am waiting to hear back what the next steps are.

Similar questions

77 replies

Nov 25, 2023 10:05 AM in response to Squirrels007

Squirrels007 wrote:

An hes got a weird since of humor as well i was on phone with advanced tech telling me theres no way but im like the logs dont lie an another no1 ever has access to my phone it’s always on me an if coworker barrows to call im right there (doesnt happen oftn) bit when i dont use my health app except when i got phone to put med ID for health reasons an everything is changed on it ik something is up yet i believed them last time again ive been hacked multiple times for what reason none but it’s annoying that my phone is slow an crashes all the time

There is definitely something wrong with your phone. Your keyboard is not functioning properly. All the punctuation is missing in your post. Also, some letters.

Dec 19, 2023 10:36 AM in response to gravityfed

Hello apple community well I have a big issue I back up my phone reset it have gotten a new number and u still fell like the hackers are still using my phone but I know I’m not triping I try to call banks phone gets disconnected I try to call apple I can’t share my screen I’m at the point I need new everything without kicking out a Penney because I shouldn’t have to keep going to apple for false information 🤦🏾‍♂️

Dec 22, 2023 1:17 PM in response to gravityfed

This is so helpful. Thank you for taking the time to post this. I have been searching all these terms and processes and types of software firmware middleware in these logs (four years now.) After seeing Pegasus I knew I was right regardless of what senior advisors were telling me. I should say not telling me. So, I want to say thank you again. This was one of the most helpful posts I’ve seen since 2019 when this began.

Dec 26, 2023 5:01 AM in response to gravityfed

I have all of the same issues with privacy my phone has a mind of its own! It’s always got the camera and microphone on! I’m unable to access iCloud haven’t been able to for months and now since the last update I can’t do the security checks either!

Private relay gets turned off, settings are changed daily and family sharing gets turned on!


every thing points to me having key chain yet I’ve never used it, i have money being spent on my Apple ID that isn’t me , I had advanced data protection on for months and every time I tried turning it off I’d just get an email saying I had just turned it on!


its very confusing I could go on about this for hours but I choose not to on here but honestly what is going on it’s really starting to send me insane trying to keep my identity in check!


i have emails being encrypted my tax was was updated and more! I’ve changed phones, bank accounts Apple IDs and now when I read what you’re saying and I check my analytic logs I have all the same logs!


i have some developer apps under accessibility that I was told shouldn’t be there and I have interactions made on the support app that aren’t from me! I’m at a loss as to what I’m meant to do or think anymore as it doesn’t seem to make any difference as to what I do the phone iPhone 13 just seems to work against me as opposed to work for me! I had the same issue with my android phone but it was a lot simpler as I could see the other device in my settings what or how are you meant to know with iPhone?


my settings always show just me until I do an update or the safety check where it will every now and again reveal other devices!

Dec 29, 2023 3:36 AM in response to gravityfed

I’m so glad I finally found these posts! I’m litterally going insane and looking like and *** at the same time upon boot using the teminal command you provided look similar as well looking at my keychain there are Kerberos login tokens and as well my logs show verbiage about single sing on and my brand new user account. I was able to Open Directory utility app and delete all the users but about the time I finished I was both locked out of changing root password as well I tried to run the log command once more to be met with sudo command not found which is on par with this hack I’m disabled and the system used as a weapon against me the owner/user. Any device that has an ip address ie CCTV overtaken, Sonos speakers, smart tv’s the microphones open and can hear “hushing” etc in the background. Trace route shows all my internet traffic routed through the same set of IP’s and 100% of packets lost on the first hop which is loopback and then routed out to these criminals. Firewall will be flooded with outside connections all through legitimate or it appears at lease apple services ie remoted 85 connections and the list goes on and is ever changing as I block each service at about that time my firewall application is disabled and double signin starts and they get into my sonic wall and disable it and allow their internet highway of ipv6 connections to silently flood my machine. Shoot I’m seriously lost at the same time relieved I found your post! And while we maybe experiencing different vector of compromise it’s all same in the fact it’s every apple device I own as well as a brand new MacBook that was overtaken in minutes of boot I’m assuming my local network? I dunno however I did see in /library/preferences plist file indicating my name and most apple services in guessing in search of all apple accounts? Thanks for the post I’ll keep my eye to see where this goes! Thx

Jan 2, 2024 1:50 AM in response to gravityfed

Hello Gravityfed, I feel alive again! My analytic logs mimics yours almost word for word excuse me code for code...except my device is iPhone 12 Pro Max but hardware OS 13,4. I want to say more but after being booted off a while back... I chant. In my experience dealing with the Dev who work against everything that should flow normally in a device just to see what happens? To create chaos? It is not for the greater good of Tech? Those EXPERIMENTS, ROLLOUTS, If a person has nobody to bounce their thoughts off 🤨😞 I just want to thank you for, explaining in simple enough jargon, your thoughts on what is happening here!

I feel good! Thank you!

Jan 2, 2024 10:33 AM in response to gravityfed

@gravityfed I've come onto ANE Compiler Service conversation 8 months later looking at my logs the next morning. I have a build 21c66

training_type. I think that means my iPhone 12 Pro Max original system has been changed to something lesser unable to perform as it should? Or something like that? My problems are identical to all of the other users commenting on your post! If I wasn't booted off the forum last year being stifled and having to suppress all that I was going through! My health took a toll for it! I am so thankful to have found you all to reference from! Can you please tell me if I'm partially correct? What I should do about the 21c66 build? Thank you

Jan 22, 2024 6:48 AM in response to gravityfed

You device is using a service call mdm. ( mobile device management) some one is harrassing you. Look up on Apple support , Apple supplies all the tools to allow anyone with your cereal number to crest a school, business , or what ever account which uses your google account ( workspaces , and then gives the person full control of your device . They monitor everything on your phone and you have no control , the modify apps and restrict you from getting a normal phone. Search device management.. it’s a nightmare to put it lightly . They need no passwords , Apple supplies login tokens , do can’t bother changing passwords ..

https://support.apple.com/kb/index?q=mdm&src=globalnav_support&type=organic&page=search&locale=en_US



start here and read on … you will never get control of your device ..

mall the criminal has to do is send you a text with a photo and load it with JavaScript callback code from GitHub or whatever and get all info off your device and set up this great monitoring tool to basically distort your life … support has no idea and will deny any and all information or knowledge ..


Jan 29, 2024 3:27 PM in response to gravityfed

Hi to all in this forum!

thank you gravityfed for this post I can’t thank you enough for this information!!! I too, have been experiencing the same things and just found the same similar ANE complier information in my analytics data as well!

ive been dealing with this for two years on two Apple devices, and believed it to be an ex-boyfriend, and still believed to be the ex-boyfriend either having someone do these things to my devices, or using some kind of program! The police think so as well

I just went to Apple three days ago deleted my entire phone did not back it up and this is like the 10th iCloud I’ve had to create not to mention change my number 10 times and when I turn my phone back on it actually came back with contacts in it when I signed back into the Apple ID. I have never backed up this phone or Apple ID, so I left the store and went back and they acted like they were confused and said someone backed up contacts but it was not me ! My phone before we wiped it even said no back ups ever.

my phone tells me that I am sharing my location and Find My but I am not. I am being tracked according to my phone company no matter what password I changed no matter what iCloud I create how many times I deleted it never fully gets rid of the problem now on two devices.

I did find a grabify link that the ex-boyfriend put in a Instagram messenger account to my deceased best friends account from my account three years ago. It make s sense now looking back, but to think of this person has been tracking me. The entire time is sickening and I’m assuming because I logged into Instagram, that’s how again on the devices.

someone else posted about the grabify links and Java script iimbedding info in images being sent in text, and that also makes sense this person. Usually every time I would clear my phone would send an image to me a random one from the past I had sent them.

I had my Hilton honors app hacked. They were controlling Bluetooth devices in my room. It said that the digital key card was in use on another iPhone, which was impossible.. I had fake 911 calls done in two different locations. I was falsely arrested. My insurance canceled all kinds of things I can go on for hours.. they somehow changed the iCloud email on my McAfee protection and were using with two devices linked to this phone . I also removed a television that was not ours off of our Wi-Fi per my ISP provider

i had to get a new router they crashed it. It took four hours and three technicians to change our Wi-Fi router password on the Internet provider side to new one !

any laptop I buy or phone gets hacked or tracked, and then they attach provision packets to the laptops and record everything I do it’s super annoying, and the nightmare never ends. I was told that I had to get all new devices again new phone numbers and brand new accounts and another Wi-Fi router and never login into any accounts previously moving forward..


thank you, all who contributed to this information because it makes me feel better that I am not losing my mind and that I’m not the only one it’s happening to unfortunately! I wish everyone the best of luck and hope all this gets resolved, but it is totally ridiculous to me that our security continues to get breached, no matter what we do! and the level of harassment I’ve had to go through is pure ****!!

Apr 10, 2024 3:28 PM in response to gravityfed

I am constantly having diskwrites, message runners, and blockers power perf and software installed on my phone without my knowledge. Have five case numbers with Apple Apple does not care they just give you the runaround. Everything is Google API, visual studio code scripting and Microsoft and they tell me that’s normal iOS software. That is what the senior advisor told me from Apple last night that is normal iOS software.

Apr 17, 2024 11:23 AM in response to Jessmiami

Acerca de esto no se absolutamente nada como ustedes ,yo ando 24/7 en la calle y ustedes son los que saben ,esa captura es de mi iPhone y no se como explicarlo pero si se que a través de eso existen intermediarios entre uber y los conductores ,si un viaje uber lo lanza en 20 usd ellos son los que los interceptan como un broker y lo lanzan a 15 digamos ganando 5 free ,el conductor solo nota que los viajes que antes realizaba por un precio ahora lo pagan en menos ,otro detalle es que si lo rechazas te entra una y otra vez y muchas veces a menor precio aún,no se en otras cosas que lo estén usando pero en esto lo hacen así ,al igual que imagino que eso lo saben es noticia vieja ,en Amazon flex y demás similares .

Apr 23, 2024 11:58 PM in response to gravityfed

{"app_name":"ANECompilerService","timestamp":"2024-04-19 16:46:55.00 -0700","slice_uuid":"3EB46B7D-10F2-361A-BC01-C72239375F57","build_version":"1","bundleID":"com.apple.ANECompilerService","duration_ms":"7340528","share_with_app_devs":0,"is_first_party":0,"bug_type":"145","os_version":"iPhone OS 17.4.1 (21E236)","roots_installed":0,"name":"ANECompilerService","incident_id":"AE581D14-D563-4FDE-8368-30B02F547A0F"}

Date/Time: 2024-04-19 14:44:33.272 -0700

End time: 2024-04-19 16:46:53.800 -0700

OS Version: iPhone OS 17.4.1 (Build 21E236)

Architecture: arm64e

Report Version: 47

Incident Identifier: AE581D14-D563-4FDE-8368-30B02F547A0F


Data Source: Microstackshots

Shared Cache: 4FF1286C-1178-3E62-B46B-D149AD0B3822 slid base address 0x180044000, slide 0x44000


Command: ANECompilerService

Path: /System/Library/PrivateFrameworks/AppleNeuralEngine.framework/XPCServices/ANECompilerService.xpc/ANECompilerService

Identifier: com.apple.ANECompilerService

Version: ??? (1)

Resource Coalition ID: 479

On Behalf Of: 102 samples UNKNOWN [303] (101 samples originated by UNKNOWN [1681], 1 sample originated by mediaanalysisd-service [1673])

Architecture: arm64e

Parent: launchd [1]

PID: 1676


Event: disk writes

Action taken: none

Writes: 1073.76 MB of file backed memory dirtied over 7341 seconds (146.28 KB per second average), exceeding limit of 12.43 KB per second over 86400 seconds

Writes limit: 1073.74 MB

Limit duration: 86400s

Writes caused: 1073.76 MB

Writes duration: 7341s

Duration: 7340.53s

Duration Sampled: 7339.89s

Steps: 665 (10.49 MB/step)


Hardware model: iPhone14,5

Active cpus: 6

HW page size: 16384

VM page size: 16384


Time Since Boot: 23s

Time Awake Since Boot: 23s


pleaze help

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

ANECompilerService

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.