{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968560":[{"is_tail_call":false,"symbol":"fwrite","target_va":4294969264},{"is_tail_call":false,"symbol":"sub_100000678","target_va":4294968952},{"is_tail_call":false,"symbol":"__stderrp","target_va":4294969184},{"is_tail_call":false,"symbol":"fclose","target_va":4294969232},{"is_tail_call":false,"symbol":"__stderrp","target_va":4294969184},{"is_tail_call":false,"symbol":"exit","target_va":4294969216},{"is_tail_call":false,"symbol":"optind","target_va":4294969312},{"is_tail_call":false,"symbol":"getc","target_va":4294969280},{"is_tail_call":false,"symbol":"sub_100000678","target_va":4294968952},{"is_tail_call":false,"symbol":"__stdinp","target_va":4294969200}],"4294968952":[{"is_tail_call":false,"symbol":"fopen","target_va":4294969248},{"is_tail_call":false,"symbol":"fopen","target_va":4294969248},{"is_tail_call":false,"symbol":"fopen","target_va":4294969248},{"is_tail_call":false,"symbol":"fopen","target_va":4294969248},{"is_tail_call":false,"symbol":"fopen","target_va":4294969248},{"is_tail_call":false,"symbol":"getopt","target_va":4294969296},{"is_tail_call":false,"symbol":"getopt","target_va":4294969296}]},"data_xrefs":{"by_data":{"4294967297":[4294968560],"4294969394":[4294968560],"4294969397":[4294968560],"4294969399":[4294968560],"4294969402":[4294968560],"4294969407":[4294968560],"4294983680":[4294968560],"4294983752":[4294968560],"4294983760":[4294968560],"4294983768":[4294968560]},"by_function":{"4294968560":[{"data_va":4294969394,"insn_va":4294968616,"kind":"CString","value":"qs"},{"data_va":4294983768,"insn_va":4294968684,"kind":"Global","value":null},{"data_va":4294983760,"insn_va":4294968704,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968708,"kind":"Global","value":null},{"data_va":4294983752,"insn_va":4294968744,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968748,"kind":"Global","value":null},{"data_va":4294969407,"insn_va":4294968756,"kind":"CString","value":"usage: what [-qs] [file ...]\n"},{"data_va":4294969397,"insn_va":4294968804,"kind":"CString","value":null},{"data_va":4294969399,"insn_va":4294968812,"kind":"CString","value":"%s"},{"data_va":4294967297,"insn_va":4294968848,"kind":"Global","value":null},{"data_va":4294969402,"insn_va":4294968900,"kind":"CString","value":"%s:\n"}]}},"noreturn_vas":[],"symbols":{"4294968560":"sub_1000004f0","4294968952":"sub_100000678"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"5cc606a7f1e96a401daa9e532da903fcca44543a384a81afba055d4de193588e","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.what","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"b97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed","imphash":"26a91dc14f2d37750d9b96c0fb2ca10f0ba2408f8c39244a2edd4520b074588c","sha256_text":"6d8097c1fc716ac8249095577b949cc108716206d748e395f85a9ef0fa81e1dc","symbolhash":"26a91dc14f2d37750d9b96c0fb2ca10f0ba2408f8c39244a2edd4520b074588c"},"sets":{"apis_called":["__stderrp","__stdinp","exit","fclose","fopen","fwrite","getc","getopt","optind","sub_100000678"],"bundle_ids":["com.apple.what"],"cpp_classes":[],"entitlements":[],"frameworks":["libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":1,"iokit_constants":0,"library_functions":0,"nlist_functions":2,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":7,"size_log2":16.627077,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.006165033,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:10Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"5cc606a7f1e96a401daa9e532da903fcca44543a384a81afba055d4de193588e","file_modified":"2026-04-06T12:06:39Z","file_size":101216,"is_arm64e":true,"min_os":"26.1.0","name":"what","platform":"macOS","sdk":"26.1.0","sha256":"1184d4c838d22567198c81af05aeff9984064343da477c7d276aed3be371a626","sha256_slice":"054df1cdc99025cfa8f83918372fb971feea35c95817ddd751577610a03615c8","source_version":"326.0.0.0.0","team_id":null,"uuid":"07BB94DE-FB71-34B8-8C4F-6EA3B6E0A1ED"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":2,"imports":[{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"exit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fclose"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fopen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fwrite"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getc"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getopt"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"printf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"putchar"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"warn"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stdinp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"optind"}],"interesting_strings":{"bundle_ids":["com.apple.what"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":2,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1264,"protection":"r-x","segment":"__TEXT","size":624},{"name":"__auth_stubs","offset":1888,"protection":"r-x","segment":"__TEXT","size":144},{"name":"__const","offset":2032,"protection":"r-x","segment":"__TEXT","size":66},{"name":"__cstring","offset":2098,"protection":"r-x","segment":"__TEXT","size":43},{"name":"__unwind_info","offset":2144,"protection":"r-x","segment":"__TEXT","size":96},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":72},{"name":"__got","offset":16456,"protection":"rw-","segment":"__DATA_CONST","size":24}],"summary":"Connects to multiple Apple network endpoints to exchange data with backend services. Operates as a signed system component with minimal local functionality. Includes embedded bundle identifiers and network endpoints suggesting integration with Apple's infrastructure for telemetry, configuration, or service provisioning.","swift_metadata":null,"title":"System service — communicates with Apple backend services","total_strings":122,"xpc_services":[]}