{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294969640":[{"is_tail_call":false,"symbol":"NSLog","target_va":4294970876},{"is_tail_call":false,"symbol":"NDR_record","target_va":4294970700},{"is_tail_call":false,"symbol":"bootstrap_look_up2","target_va":4294970780},{"is_tail_call":false,"symbol":"geteuid","target_va":4294970812},{"is_tail_call":false,"symbol":"mach_msg","target_va":4294970908},{"is_tail_call":false,"symbol":"bootstrap_port","target_va":4294970796},{"is_tail_call":false,"symbol":"__stack_chk_fail","target_va":4294970732},{"is_tail_call":false,"symbol":"objc_msgSend$stringWithUTF8String:","target_va":4294970976},{"is_tail_call":false,"symbol":"NDR_record","target_va":4294970700},{"is_tail_call":false,"symbol":"NDR_record","target_va":4294970700},{"is_tail_call":false,"symbol":"__strlcpy_chk","target_va":4294970764},{"is_tail_call":false,"symbol":"MCX_RecompositeWithAuthentication","target_va":4294970684},{"is_tail_call":false,"symbol":"NDR_record","target_va":4294970700},{"is_tail_call":false,"symbol":"MCX_Recomposite","target_va":4294970668},{"is_tail_call":false,"symbol":"NDR_record","target_va":4294970700},{"is_tail_call":false,"symbol":"OBJC_CLASS_$_NSString","target_va":4294970892}],"4294970360":[{"is_tail_call":false,"symbol":"getpwnam","target_va":4294970860},{"is_tail_call":false,"symbol":"getpass","target_va":4294970844},{"is_tail_call":false,"symbol":"mig_strncpy","target_va":4294970924},{"is_tail_call":false,"symbol":"getopt","target_va":4294970828}]},"data_xrefs":{"by_data":{"4294971055":[4294969640],"4294971070":[4294969640],"4294971172":[4294969640],"4294983680":[4294969640,4294970360],"4294983688":[4294969640],"4294983696":[4294969640],"4294983724":[4294970360],"4294983824":[4294969640],"4294983832":[4294969640],"4294983840":[4294970360],"4294983848":[4294969640,4294970360],"4294983864":[4294969640],"4294983872":[4294970360],"4294983880":[4294970360],"4294983888":[4294969640],"4294983920":[4294969640],"4294983952":[4294969640],"4294983984":[4294969640],"4294984016":[4294969640],"4294984736":[4294969640]},"by_function":{"4294969640":[{"data_va":4294983848,"insn_va":4294969688,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969692,"kind":"Global","value":null},{"data_va":4294983824,"insn_va":4294969704,"kind":"Global","value":null},{"data_va":4294983888,"insn_va":4294969732,"kind":"CFString","value":"mcxrefresh- requires uid or username parameter"},{"data_va":4294971055,"insn_va":4294969756,"kind":"CString","value":"n:N:u:U:p:P:aA"},{"data_va":4294983864,"insn_va":4294969764,"kind":"Global","value":null},{"data_va":4294971070,"insn_va":4294969772,"kind":"CString","value":"Password:"},{"data_va":4294983688,"insn_va":4294969780,"kind":"Global","value":null},{"data_va":4294971172,"insn_va":4294969788,"kind":"CString","value":"%ud"},{"data_va":4294983688,"insn_va":4294969868,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969876,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294969888,"kind":"Global","value":null},{"data_va":4294983688,"insn_va":4294969928,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969936,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969988,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294969992,"kind":"Global","value":null},{"data_va":4294983832,"insn_va":4294970008,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294970012,"kind":"Global","value":null},{"data_va":4294983920,"insn_va":4294970036,"kind":"CFString","value":"mcxrefresh: uid %d already specified - too many arguments"},{"data_va":4294983680,"insn_va":4294970052,"kind":"Global","value":null},{"data_va":4294983952,"insn_va":4294970064,"kind":"CFString","value":"mcxrefresh: unable to locate '%s'"},{"data_va":4294983688,"insn_va":4294970080,"kind":"Global","value":null},{"data_va":4294983984,"insn_va":4294970124,"kind":"CFString","value":"mcxrefresh- error: unknown argument '%c'\n\n"},{"data_va":4294984016,"insn_va":4294970160,"kind":"CFString","value":"mcxrefresh- returned error status %d"},{"data_va":4294983848,"insn_va":4294970184,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970188,"kind":"Global","value":null},{"data_va":4294984736,"insn_va":4294970204,"kind":"Global","value":null}],"4294970360":[{"data_va":4294983848,"insn_va":4294970392,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970396,"kind":"Global","value":null},{"data_va":4294983840,"insn_va":4294970472,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970480,"kind":"Global","value":null},{"data_va":4294983872,"insn_va":4294970496,"kind":"Global","value":null},{"data_va":4294983724,"insn_va":4294970504,"kind":"Global","value":null},{"data_va":4294983880,"insn_va":4294970564,"kind":"Global","value":null},{"data_va":4294983848,"insn_va":4294970628,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970632,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294969640":"sub_100000928","4294970360":"sub_100000bf8"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"6893050a759d458f55766511037effc3fa02a92fc94053ba9dd3e567868cf9eb","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.mcxrefresh","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"b64f6ed3f82971df899c8ad686d5a694e6c5e7d2d4df74c87e6596eb10a26d00","imphash":"f6567dbf6c55a81fc32e478ef0f3fcafd72baf992ed0543ebff46c1fe409e9dc","sha256_text":"c86db24882b04afaff721c9c5bb7a2196f9333a6b4e6884aa125e6e2f0520fe8","symbolhash":"f6567dbf6c55a81fc32e478ef0f3fcafd72baf992ed0543ebff46c1fe409e9dc"},"sets":{"apis_called":["MCX_Recomposite","MCX_RecompositeWithAuthentication","NDR_record","__stack_chk_fail","__strlcpy_chk","bootstrap_look_up2","bootstrap_port","geteuid","getopt","getpass","getpwnam","mach_msg","mig_strncpy"],"bundle_ids":["<string>com.apple.compilers.llvm.clang.1_0</string>","<string>com.apple.mcxrefresh</string>","com.apple.ManagedClient.agent","com.apple.mcxrefresh"],"cpp_classes":[],"entitlements":[],"frameworks":["libMobileGestalt.dylib","ManagedClient","Foundation","libobjc.A.dylib","libSystem.B.dylib","CoreFoundation"],"iokit_constants":[],"objc_classes":[],"private_frameworks":["ManagedClient"],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":4,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":3,"frameworks_private":1,"frameworks_total":6,"iokit_constants":0,"library_functions":0,"nlist_functions":2,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":14,"size_log2":17.043882,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.007608052,"url_endpoints":5,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:11Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"6893050a759d458f55766511037effc3fa02a92fc94053ba9dd3e567868cf9eb","file_modified":"2026-04-06T11:55:33Z","file_size":135120,"is_arm64e":true,"min_os":"26.1.0","name":"mcxrefresh","platform":"macOS","sdk":"26.1.0","sha256":"35a970a2804e97fe573d2ec867e7afab3f53ee5021c8223d1855617b12a26071","sha256_slice":"ea28d1200b420af0948c55c9388133f61a5a1d9560d51bbe47d435ee2f138f65","source_version":"1881.40.2.0.0","team_id":null,"uuid":"5C2DC557-E492-3681-A0A6-81165F6FF732"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libMobileGestalt.dylib"},{"is_private":true,"is_weak":false,"name":"/System/Library/PrivateFrameworks/ManagedClient.framework/Versions/A/ManagedClient"},{"is_private":false,"is_weak":false,"name":"/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libobjc.A.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"},{"is_private":false,"is_weak":false,"name":"/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"}],"function_starts_count":2,"imports":[{"address":0,"dylib":"/System/Library/PrivateFrameworks/ManagedClient.framework/Versions/A/ManagedClient","is_lazy":false,"is_weak":false,"name":"MCX_Recomposite"},{"address":0,"dylib":"/System/Library/PrivateFrameworks/ManagedClient.framework/Versions/A/ManagedClient","is_lazy":false,"is_weak":false,"name":"MCX_RecompositeWithAuthentication"},{"address":0,"dylib":"/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation","is_lazy":false,"is_weak":false,"name":"NSLog"},{"address":0,"dylib":"/usr/lib/libobjc.A.dylib","is_lazy":false,"is_weak":false,"name":"objc_alloc_init"},{"address":0,"dylib":"/usr/lib/libobjc.A.dylib","is_lazy":false,"is_weak":false,"name":"objc_msgSend"},{"address":0,"dylib":"/usr/lib/libobjc.A.dylib","is_lazy":false,"is_weak":false,"name":"objc_release"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_fail"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__strlcpy_chk"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"bootstrap_look_up2"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"geteuid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getopt"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getpass"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getpwnam"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"mach_msg"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"mig_strncpy"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":true,"name":"mig_strncpy_zerofill"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"sscanf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":true,"name":"voucher_mach_msg_set"},{"address":0,"dylib":"/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation","is_lazy":false,"is_weak":false,"name":"OBJC_CLASS_$_NSAutoreleasePool"},{"address":0,"dylib":"/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation","is_lazy":false,"is_weak":false,"name":"OBJC_CLASS_$_NSString"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"NDR_record"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_guard"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"bootstrap_port"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"optarg"},{"address":0,"dylib":"/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation","is_lazy":false,"is_weak":false,"name":"__CFConstantStringClassReference"}],"interesting_strings":{"bundle_ids":["<string>com.apple.compilers.llvm.clang.1_0</string>","<string>com.apple.mcxrefresh</string>","com.apple.ManagedClient.agent","com.apple.mcxrefresh"],"file_paths":["/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation","/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation","/System/Library/PrivateFrameworks/ManagedClient.framework/Versions/A/ManagedClient"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","<string>com.apple.compilers.llvm.clang.1_0</string>","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":2,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Hostname","value":"macosx26.1.internal"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"}],"has_network_entitlement":false,"network_frameworks":["CoreFoundation","Foundation"]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":2344,"protection":"r-x","segment":"__TEXT","size":1028},{"name":"__auth_stubs","offset":3372,"protection":"r-x","segment":"__TEXT","size":272},{"name":"__objc_stubs","offset":3648,"protection":"r-x","segment":"__TEXT","size":64},{"name":"__cstring","offset":3712,"protection":"r-x","segment":"__TEXT","size":279},{"name":"__info_plist","offset":3991,"protection":"r-x","segment":"__TEXT","size":1136},{"name":"__objc_methname","offset":5127,"protection":"r-x","segment":"__TEXT","size":44},{"name":"__unwind_info","offset":5172,"protection":"r-x","segment":"__TEXT","size":96},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":144},{"name":"__got","offset":16528,"protection":"rw-","segment":"__DATA_CONST","size":48},{"name":"__auth_ptr","offset":16576,"protection":"rw-","segment":"__DATA_CONST","size":16},{"name":"__cfstring","offset":16592,"protection":"rw-","segment":"__DATA_CONST","size":192},{"name":"__objc_imageinfo","offset":16784,"protection":"rw-","segment":"__DATA_CONST","size":8},{"name":"__objc_selrefs","offset":32768,"protection":"rw-","segment":"__DATA","size":16},{"name":"__bss","offset":0,"protection":"rw-","segment":"__DATA","size":4}],"summary":"Collects diagnostic and telemetry data from the macOS system and transmits it to Apple servers. Communicates with multiple network endpoints to upload system metrics, crash reports, or usage statistics. Interacts with other system components through private frameworks to gather diagnostic information. Runs as a background daemon with no direct user interaction.","swift_metadata":null,"title":"Apple system service — manages telemetry and diagnostic data collection","total_strings":212,"xpc_services":[]}