mtree
executablemacOS201.9 KBx86_64, arm64
System telemetry agent — collects and transmits device diagnostics to Apple servers
Gathers system metrics, hardware information, and usage telemetry from the local device. Transmits collected data to remote Apple endpoints over HTTP/HTTPS connections. Manages multiple bundle identifiers and maintains state across executions. Includes telemetry collection logic that runs as a system component with network egress capabilities.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 11.0.0
- SDK
- 26.1.0
- File Size
- 201.9 KB
- UUID
- 222174B0-B059-384E-A303-95BFA0B76688
- Analyzed
- 2026-04-07T05:21:14Z
- CDHash
- 004328609f70af1330324c56b02852a4714614ba774ac75689ecaf4b9f01172c
Frameworks2
Interesting Strings
telemetry(1)
Network Surface
Networking Frameworks
Endpoints(10)
API Usage
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
1
File Paths
1
Bundle IDs
3
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 139 functions identified
Functions(139)
0x1000007e8sub_1000007e8
0x10000098csub_10000098c
0x100000cb4sub_100000cb4
0x100000d14sub_100000d14
0x100000d24sub_100000d24
0x100000d30sub_100000d30
0x100000ddcsub_100000ddc
0x100000e1csub_100000e1c
0x100000e6csub_100000e6c
0x100000eb0sub_100000eb0
0x100000ed8sub_100000ed8
0x100001084sub_100001084
0x100001398sub_100001398
0x1000013a4sub_1000013a4
0x100001504sub_100001504
0x100001624sub_100001624
0x100001688sub_100001688
0x100001760sub_100001760
0x100001808sub_100001808
0x100001858sub_100001858
Imports136 symbols from 2 dylibs
Exports1
_mh_execute_header0x0