Suspicious "CheckCarrierProfileAtPath" "Carrier Profile Removal" entries

[justarandylol3242]

I know this is probably not "malicious", but I just find it really weird and wanted to share it with you.

profile_events.json contains multiple entries referencing a "carrier profile", but I don't remember swapping phone networks, and I don't understand why the profile id is called "gavins-macbook-pro". I have never installed profiles except for the official apple beta profile.

iOS 14.5 backup from 2 years ago, iPhone 12 Pro Max. No "detections" were found. However, I do remember that my phone kept failing to update iOS via OTA, and I had to do it via my computer.

  "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-04-08 12:16:42.188653",
        "operation": "remove",
        "process": "Carrier Profile Removal"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-04-08 12:16:42.056130",
        "operation": "install",
        "process": "MCProfileServiceServer._workerQueueCheckCarrierProfileAtPath"
    },

Full profile_events.json:

[
    {
        "profile_id": "com.apple.applebetasoftware-18D7AE5C-594B-4C7B-B331-A3AA19D5A8D2",
        "timestamp": "2021-04-22 06:52:14.560466",
        "operation": "remove",
        "process": "com.apple.Preferences"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-04-08 12:16:42.188653",
        "operation": "remove",
        "process": "Carrier Profile Removal"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-04-08 12:16:42.056130",
        "operation": "install",
        "process": "MCProfileServiceServer._workerQueueCheckCarrierProfileAtPath"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-04-08 12:16:13.027510",
        "operation": "remove",
        "process": "Carrier Profile Removal"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-21 01:18:39.547332",
        "operation": "install",
        "process": "MCProfileServiceServer._workerQueueCheckCarrierProfileAtPath"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-21 01:18:30.680433",
        "operation": "remove",
        "process": "Carrier Profile Removal"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-20 01:21:50.732400",
        "operation": "install",
        "process": "MCProfileServiceServer._workerQueueCheckCarrierProfileAtPath"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-20 01:21:47.513162",
        "operation": "remove",
        "process": "Carrier Profile Removal"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-19 17:43:59.069700",
        "operation": "install",
        "process": "MCProfileServiceServer._workerQueueCheckCarrierProfileAtPath"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-19 14:08:57.999584",
        "operation": "remove",
        "process": "Carrier Profile Removal"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-19 14:08:57.888158",
        "operation": "install",
        "process": "MCProfileServiceServer._workerQueueCheckCarrierProfileAtPath"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-19 14:08:44.406926",
        "operation": "remove",
        "process": "Carrier Profile Removal"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-18 19:28:09.795294",
        "operation": "install",
        "process": "MCProfileServiceServer._workerQueueCheckCarrierProfileAtPath"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-18 14:57:58.088739",
        "operation": "remove",
        "process": "Carrier Profile Removal"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-18 14:57:58.038290",
        "operation": "install",
        "process": "MCProfileServiceServer._workerQueueCheckCarrierProfileAtPath"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-18 14:57:37.272865",
        "operation": "remove",
        "process": "Carrier Profile Removal"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-18 14:31:55.214477",
        "operation": "install",
        "process": "MCProfileServiceServer._workerQueueCheckCarrierProfileAtPath"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-17 18:58:30.992789",
        "operation": "remove",
        "process": "Carrier Profile Removal"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-17 18:58:30.895195",
        "operation": "install",
        "process": "MCProfileServiceServer._workerQueueCheckCarrierProfileAtPath"
    },
    {
        "profile_id": "gavins-macbook-pro.local.D8A9293D-1784-4AB5-A7FC-7BB84D019513-02A5D3B4-6CA0-4112-8C86-E25AB7C4AE75",
        "timestamp": "2021-03-17 18:58:15.038627",
        "operation": "remove",
        "process": "Carrier Profile Removal"
    }

[Abrax-ass]

I have the same exact thing. I’ve been having issues with receiving iMessages from people. I can send them and I could see the “…” indicating they were responding, but they wouldn’t come through. If I was lucky I’d get them on my MacBook. A lot of other strange behaviors have been occurring with my phone. Did you ever figure out what this was?

“ «key»ProfileEvents</key> carray»
«dict>
«key›com. apple. Verizon_LTE_US.€4a790-daße-11eb-bee9-
+45c89abb0d9-e4a7ebBc-daße-11eb-bee9-f45c89abb0d9</key>
‹dict>
<key>Operation</key>
«string>install</string>
<key>Process</key>
‹string>MCProfileServiceServer._workerQueueCheckCarrierProfileAtPath</string>
<key>Timestamp</key>
<date>2024-04-01T17:44:38Z</date>
</dict>
</dict>
‹dict>
<key>com. apple.Verizon_LTE_US.e4a7e9e®-dae-11eb-bee9-
f45c89abb0d9-e4a7ebBc-dabe-11eb-bee9-f45c89abb8d9</key>
‹dict>
<key>Operation</key>
«string>remove</string>
‹key>Process</key>
«string>carrier Profile Removal</string>
<key>Timestamp</key>
<date>2024-04-01T17:44:362</date>
</dict>
</dict>
«dict>