User profile for user: gravityfed
gravityfed Author
User level: Level 1
146 points

ANECompilerService

Before you comment to crucify me for looking in logs, please tell me if this compiler looks suspicious, I didn’t post the full log as it’s very very long.


This iPad was factory reset at the Apple Store a few weeks, no additional apps installed. My MacBook Pro and MacMini were both compromised and jailbroken.


I am wondering if this is a persistent ‘horsey’ type issue and my iPad and Macs are now back on the merry-go-round despite factory resets and new AppleID.


{"app_name":"ANECompilerService","timestamp":"2023-03-28 09:42:12.00 +1100","slice_uuid":"","build_version":"1","bundleID":"com.apple.ANECompilerService","duration_ms":"120064","share_with_app_devs":0,"is_first_party":0,"bug_type":"202","os_version":"iPhone OS 16.3.1 (20D67)","roots_installed":0,"name":"ANECompilerService","incident_id":""}
Date/Time:        2023-03-28 09:40:11.292 +1100
End time:         2023-03-28 09:42:11.356 +1100
OS Version:       iPhone OS 16.3.1 (Build 20D67)
Architecture:     arm64e
Report Version:   40
Incident Identifier: 

Data Source:      Microstackshots
Shared Cache:     
Shared Cache:     

Command:          ANECompilerService
Path:             /System/Library/PrivateFrameworks/AppleNeuralEngine.framework/XPCServices/ANECompilerService.xpc/ANECompilerService
Identifier:       com.apple.ANECompilerService
Version:          ??? (1)
Resource Coalition ID: 463
Architecture:     arm64e
Parent:           launchd [1]
PID:              1021

Event:            cpu usage
Action taken:     none
CPU:              90 seconds cpu time over 120 seconds (75% cpu average), exceeding limit of 50% cpu over 180 seconds
CPU limit:        90s
Limit duration:   180s
CPU used:         90s
CPU duration:     120s
Duration:         120.06s
Duration Sampled: 118.88s
Steps:            47

Hardware model:   iPad12,1
Active cpus:      6
HW page size:     16384
VM page size:     16384

Advisory levels:  Battery -> 3, User -> 3, ThermalPressure -> 0, Combined -> 3
Free disk space:  48.07 GB/59.59 GB, low space threshold 150 MB
Vnodes Available: 47.69% (4769/10000)

Preferred User Language: en-AU
Country Code:     AU
Keyboards:        en_AU QWERTY
OS Cryptex File Extents: 4

Heaviest stack for the target process:
  30  ??? (libsystem_pthread.dylib + 2968) [0x227d3cb98]
  30  ??? (libsystem_pthread.dylib + 3576) [0x227d3cdf8]
  30  ??? (libdispatch.dylib + 93712) [0x1e1a63e10]
  30  ??? (libdispatch.dylib + 49600) [0x1e1a591c0]
  30  ??? (libdispatch.dylib + 46360) [0x1e1a58518]
  30  ??? (libdispatch.dylib + 136524) [0x1e1a6e54c]
  30  ??? (libdispatch.dylib + 46360) [0x1e1a58518]
  30  ??? (libdispatch.dylib + 133168) [0x1e1a6d830]
  30  ??? (libdispatch.dylib + 16456) [0x1e1a51048]
  30  ??? (libxpc.dylib + 72652) [0x227d91bcc]
  30  ??? (libxpc.dylib + 71580) [0x227d9179c]
  30  ??? (Foundation + 6599156) [0x1d4e611f4]
  30  ??? (Foundation + 6600584) [0x1d4e61788]
  30  ??? (Foundation + 6594040) [0x1d4e5fdf8]
  30  ??? (Foundation + 711484) [0x1d48c3b3c]
  30  ??? (CoreFoundation + 133916) [0x1da450b1c]
  30  ??? (CoreFoundation + 476852) [0x1da4a46b4]
  30  ??? (ANECompilerService + 106728) [0x10006e0e8]
  30  ??? (libdispatch.dylib + 79220) [0x1e1a60574]
  30  ??? (libdispatch.dylib + 16264) [0x1e1a50f88]
  30  ??? (ANECompilerService + 108084) [0x10006e634]
  30  ??? (ANECompilerService + 104844) [0x10006d98c]
  30  ??? (ANECompilerService + 99644) [0x10006c53c]
  29  ??? (ANECompiler + 1597532) [0x239a1205c]
  29  ??? (ANECompiler + 1603732) [0x239a13894]
  17  ??? (ANECompiler + 3655344) [0x239c086b0]
  17  ??? (ANECompiler + 3154400) [0x239b8e1e0]
  15  ??? (ANECompiler + 3149656) [0x239b8cf58]
  9   ??? (ANECompiler + 3127684) [0x239b87984]
  9   ??? (ANECompiler + 3147156) [0x239b8c594]
  7   ??? (ANECompiler + 3113240) [0x239b84118]
  6   ??? (ANECompiler + 3111264) [0x239b83960]
  6   ??? (ANECompiler + 2186660) [0x239aa1da4]
  6   ??? (ANECompiler + 4384816) [0x239cba830]
  4   ??? (ANECompiler + 2201700) [0x239aa5864]
  3   ??? (ANECompiler + 4386556) [0x239cbaefc]
  1   ??? (ANECompiler + 4386228) [0x239cbadb4]



iPad, iPadOS 16

Posted on Apr 1, 2023 9:57 PM

Reply
Question marked as Top-ranking reply
User profile for user: gravityfed
gravityfed Author
User level: Level 1
146 points

Posted on May 4, 2023 4:47 AM

@Wattermellon


I have some further information, ANECompilerService is apparently a process that runs on Apple products with Adobe Creative Suite installed. ANE stands for Adobe Native Extensions which developers code for Adobe AIR applications. ANE files are libraries of native code, ANECompilerService compiles the code into an executable format. When there is an issue with the ANE compilation it may create a log entry, which is what we have found on our devices.


So, it’s a legitimate process, albeit an executable so worth keeping an eye on, HOWEVER, if you do NOT have Adobe AIR applications installed then it’s highly like either you have malware or an active exploit is using the compiler to execute code.


In my case, it has never had Adobe on the iPad (or my iPhone which it is also on). My compiler was accessing libcommonCrypto.dylib which is a cryptographic function for encryption, decryption etc and this is not something that ANECompilerService should be accessing along with other security processes. At the time of the crash it was using several system libraries and system level components. There was also the issue that the check for a root certificate failed or was invalid.


I also found evidence in other logs of security violations on the iPad. I also have a compromised MacbookPro and Mac mini (which has now been confirmed) which were both interacting with all of our iPads (also confirmed) even though they have different Adobe IDs for some devices.


The bad news is, if your appearance of the log is not for a legitimate reason then it may be impossible to get rid of, for me, Apple Store performed a full reset and it hasn’t gone away. The lastest security update which came out yesterday also did not make a difference. I run the iPad in lockdown mode but that hasn’t made any difference, they have altered the operating system.


I am waiting to hear back what the next steps are.

View in context

Similar questions

77 replies
User profile for user: 1studlydad77
1studlydad77
User level: Level 1
8 points

May 3, 2024 9:40 PM in response to gravityfed

I’ve got a compiler had one god knows how long and I got this ExcUserFault_icloudsubscriptionoptimizerd

i got some real nasty bugs inside iPhone all source “p” Verizon and Apple known months I even know who’s responsible and Russian Moscow unsuccessfully login Microsoft I counted one day it was 27 I need lol I’m going crazy and I’m still paying my monthly for this abuse

Reply
User profile for user: 1studlydad77
1studlydad77
User level: Level 1
8 points

May 3, 2024 9:55 PM in response to 1studlydad77

My guess is they’re watching my screen right now. I don’t what else to I’ve been at it hard since beginning January omg HELP ME LIKE THE FELLA BEGINNING IM LOSING MY BLEEP IPHONE 14 un hacked my patoot analytics loader with capture codes GitHub or employees of are involved has to do with bitcoin man o man anyone you who…? Feels like a Verizon or Apple chat lately no seriously uhh.

Reply
User profile for user: Humble-Compromised101
Humble-Compromised101
User level: Level 1
8 points

May 20, 2024 9:20 PM in response to gravityfed

ok im the newb,i have the same problem as everyone else and i just picked up this iphone a couple weeks ago , i seem to have other shared data on other accounts as well as Apple ID I reset back down to the bone and tried to start brand new and ended up retaining what i reset my continue button would not let me move forward .my analytics ane compiler , spring board , i supposedly have an iphone 8,12 should reset and try again . my phone gets pretty warm and my battery is getting chewed up pretty fast i cant find how my 2024 is starting off hacked stalked or what?

Reply
User profile for user: Humble-Compromised101
Humble-Compromised101
User level: Level 1
8 points

May 21, 2024 11:53 AM in response to lmob09

I agree not technical,but didnt help are we or I prone to get phone searched when there is no doubt to someones advantage who thru this in amongst other mishaps of our wonderful technology that were blessed with ,people cant stop it all from happening ,what is privacy worth i apologize if im out of my skull with all this its just not the phones , computer, laptops ,and are good ol cameras .I apologize if i upset anyone

Reply
User profile for user: IdrisSeabright
IdrisSeabright
Community+ 2026
User level: Level 10
196,869 points

May 22, 2024 10:10 AM in response to Humble-Compromised101

Humble-Compromised101 wrote:

I agree not technical,but didnt help are we or I prone to get phone searched when there is no doubt to someones advantage who thru this in amongst other mishaps of our wonderful technology that were blessed with ,people cant stop it all from happening ,what is privacy worth i apologize if im out of my skull with all this its just not the phones , computer, laptops ,and are good ol cameras .I apologize if i upset anyone

I'm sorry, but that doesn't make sense in English. You nay want to consider posting in your native language.

Reply
User profile for user: shell276
shell276
User level: Level 1
8 points

May 25, 2024 7:52 PM in response to kn0sNuk3m

I think they are using FaceTime and Game Center along with the find my app. All of these keep getting turned back on in my iCloud even after I have turned off iCloud access and deleted FaceTime and find my apps. I have never used Game Center and was unable to get it to load. I tried using screen time to block some things and nearby multiplayer would get turned back on. Keep an eye on the vehicles in your street, whenever I use my mobile or turn on my wifi this car comes. (Yes I contacted the police, they think I’m paranoid and said they can’t do anything until money or my identity is stolen).

If you have a Mac Book check you hard drive for a virtual machine, I found one on my Mac book and got it removed by computer technicians and a few days later it was back on. There were folders named Ruby and Perl, when I googled them it’s some type of software for developers. Wouldn’t be surprised if this is for AI App development.

Reply
User profile for user: Chris7511
Chris7511
User level: Level 1
8 points

Jun 2, 2024 11:34 AM in response to gravityfed

I also discovered three ANE compiler entries in my iPhone log a few days ago.


In addition, I have noticed some other error logs that are strange to me, such as


OTACrashCopier,

ExcUserFault_MessagesBlastDoorSevice 

SetStoreUpdateService CPU res. 

UsageTrackingAgent CPU res. 


and many more.


All analysis data is often deleted

Overnight when the iPhone charges.

The strange entries concern not only my iPhone but also my two-week-old iPad Air, and my Apple TV.


After reading all this, I'm completely scared.

So far, I can still access everything.


Are there any other signs I can verify in the logs besides the ANE compiler, which also stands for Apple Neutral Engine for the hacks?

I have over 60 entries in the logs in the last 24 hrs after the last erase of them included a low battery issue.  


What were the consequences of the hack?


I spoke to Apple on the phone, they told me that there is no way to analyze my error logs and that it is highly unlikely that all my devices have been hacked. There was then the reference to password changes and the mandatory reset.


As a user you should not pay attention to these logs, write a lot of user here. But I can see them and I can google the Prozesses and i never felt so insecure and powerless as now. Nobody can help me, not even Apple. What can I do as a normal user?


All devices are running with iOS 17.5.1

iPhone 12 mini 64 MB with the most suspicious entries. 

iPad Air 13“ M2 2014. 256 MB

Reply

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

ANECompilerService

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.
Learn more Sign up