{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968560":[{"is_tail_call":false,"symbol":"memcpy","target_va":4294968860},{"is_tail_call":false,"symbol":"err","target_va":4294968844},{"is_tail_call":false,"symbol":"strlen","target_va":4294968876},{"is_tail_call":false,"symbol":"strlen","target_va":4294968876},{"is_tail_call":false,"symbol":"__chkstk_darwin","target_va":4294968828}]},"data_xrefs":{"by_data":{"4294968952":[4294968560],"4294983680":[4294968560],"4294983688":[4294968560],"4294983696":[4294968560],"4294983704":[4294968560],"4294983712":[4294968560]},"by_function":{"4294968560":[{"data_va":4294983712,"insn_va":4294968592,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968596,"kind":"Global","value":null},{"data_va":4294968952,"insn_va":4294968804,"kind":"CString","value":"stdout"},{"data_va":4294983680,"insn_va":4294968832,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968836,"kind":"Global","value":null},{"data_va":4294983688,"insn_va":4294968848,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968852,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294968864,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968868,"kind":"Global","value":null},{"data_va":4294983704,"insn_va":4294968880,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968884,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294968560":"sub_1000004f0"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"0592692c2f9b5e50f75d6faf495c0094fb1e43b1bfe0b5c9d6818e9d871ea3d7","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.yes","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"b97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed","imphash":"552302bef592b544a5cc743416cb4269932cd635e0cf07b65023601b71771d15","sha256_text":"28e279c1061a88579d418b7d03bffbe8c242d183a3ffbd47722afaba2309a8d3","symbolhash":"552302bef592b544a5cc743416cb4269932cd635e0cf07b65023601b71771d15"},"sets":{"apis_called":["__chkstk_darwin","err","memcpy","strlen"],"bundle_ids":["com.apple.yes"],"cpp_classes":[],"entitlements":[],"frameworks":["libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":1,"iokit_constants":0,"library_functions":0,"nlist_functions":1,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":7,"size_log2":16.622967,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.0026553583,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:12Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"0592692c2f9b5e50f75d6faf495c0094fb1e43b1bfe0b5c9d6818e9d871ea3d7","file_modified":"2026-04-06T12:07:33Z","file_size":100928,"is_arm64e":true,"min_os":"26.1.0","name":"yes","platform":"macOS","sdk":"26.1.0","sha256":"45bfcfe582423ffe5eb10d128f8892880226fb72f78c18af61f9426401788b90","sha256_slice":"6c7147614d9c82d2f79d89eff7a0e13e4fd7e20c3732a604b501af5d29c8387b","source_version":"326.0.0.0.0","team_id":null,"uuid":"B4F1843A-59BC-3E10-8004-3A00E9D044DE"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":1,"imports":[{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"err"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"memcpy"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strlen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"write"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__chkstk_darwin"}],"interesting_strings":{"bundle_ids":["com.apple.yes"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":1,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1264,"protection":"r-x","segment":"__TEXT","size":268},{"name":"__auth_stubs","offset":1532,"protection":"r-x","segment":"__TEXT","size":64},{"name":"__const","offset":1600,"protection":"r-x","segment":"__TEXT","size":56},{"name":"__cstring","offset":1656,"protection":"r-x","segment":"__TEXT","size":7},{"name":"__unwind_info","offset":1664,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":32},{"name":"__auth_ptr","offset":16416,"protection":"rw-","segment":"__DATA_CONST","size":8}],"summary":"Apple-signed executable that contacts multiple network endpoints during operation, suggesting communication with Apple services or infrastructure. Contains minimal code surface with a single exported function and references to one bundle identifier, indicating a narrowly scoped utility rather than a general-purpose tool. Network connectivity and external endpoints suggest this may perform diagnostics, updates, or service-related operations. Absence of private frameworks indicates it relies on system-level functionality rather than internal Apple libraries.","swift_metadata":null,"title":"System utility — performs Apple-signed maintenance or diagnostic task","total_strings":104,"xpc_services":[]}