{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968712":[{"is_tail_call":false,"symbol":"fwrite","target_va":4294969424},{"is_tail_call":false,"symbol":"optind","target_va":4294969488},{"is_tail_call":false,"symbol":"fwrite","target_va":4294969424},{"is_tail_call":false,"symbol":"getopt","target_va":4294969440},{"is_tail_call":false,"symbol":"sub_1000007a8","target_va":4294969256},{"is_tail_call":false,"symbol":"open","target_va":4294969472},{"is_tail_call":false,"symbol":"read","target_va":4294969504},{"is_tail_call":false,"symbol":"signal","target_va":4294969520},{"is_tail_call":false,"symbol":"open","target_va":4294969472},{"is_tail_call":false,"symbol":"__stderrp","target_va":4294969376},{"is_tail_call":false,"symbol":"malloc_type_malloc","target_va":4294969456},{"is_tail_call":false,"symbol":"sub_1000007a8","target_va":4294969256},{"is_tail_call":false,"symbol":"read","target_va":4294969504},{"is_tail_call":false,"symbol":"err","target_va":4294969392},{"is_tail_call":false,"symbol":"exit","target_va":4294969408},{"is_tail_call":false,"symbol":"err","target_va":4294969392}],"4294969256":[{"is_tail_call":false,"symbol":"getopt","target_va":4294969440}],"4294969348":[{"is_tail_call":false,"symbol":"__stderrp","target_va":4294969376}]},"data_xrefs":{"by_data":{"4294969592":[4294968712],"4294969595":[4294968712,4294969348],"4294969602":[4294968712],"4294969609":[4294968712],"4294969612":[4294968712],"4294969617":[4294968712],"4294983680":[4294968712,4294969348],"4294983688":[4294968712,4294969348],"4294983696":[4294969348],"4294983704":[4294969348],"4294983712":[4294969348],"4294983720":[4294969348],"4294983728":[4294969348],"4294983736":[4294969348],"4294983744":[4294969348],"4294983752":[4294969348],"4294983760":[4294968712],"4294983768":[4294968712],"4295000064":[4294968712,4294969256]},"by_function":{"4294968712":[{"data_va":4294969592,"insn_va":4294968756,"kind":"CString","value":"ai"},{"data_va":4294969592,"insn_va":4294968788,"kind":"CString","value":"ai"},{"data_va":4294983768,"insn_va":4294968880,"kind":"Global","value":null},{"data_va":4294969595,"insn_va":4294968912,"kind":"CString","value":"malloc"},{"data_va":4294969602,"insn_va":4294968928,"kind":"CString","value":"stdout"},{"data_va":4294969609,"insn_va":4294968988,"kind":"CString","value":"%s"},{"data_va":4295000064,"insn_va":4294968992,"kind":"Global","value":null},{"data_va":4294969612,"insn_va":4294969116,"kind":"CString","value":"read"},{"data_va":4294983688,"insn_va":4294969136,"kind":"Global","value":null},{"data_va":4294969609,"insn_va":4294969148,"kind":"CString","value":"%s"},{"data_va":4294983760,"insn_va":4294969220,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969224,"kind":"Global","value":null},{"data_va":4294969617,"insn_va":4294969232,"kind":"CString","value":"usage: tee [-ai] [file ...]\n"}],"4294969256":[{"data_va":4295000064,"insn_va":4294969320,"kind":"Global","value":null}],"4294969348":[{"data_va":4294969595,"insn_va":4294969364,"kind":"CString","value":"malloc"},{"data_va":4294983680,"insn_va":4294969380,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969384,"kind":"Global","value":null},{"data_va":4294983688,"insn_va":4294969396,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969400,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294969412,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969416,"kind":"Global","value":null},{"data_va":4294983704,"insn_va":4294969428,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969432,"kind":"Global","value":null},{"data_va":4294983712,"insn_va":4294969444,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969448,"kind":"Global","value":null},{"data_va":4294983720,"insn_va":4294969460,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969464,"kind":"Global","value":null},{"data_va":4294983728,"insn_va":4294969476,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969480,"kind":"Global","value":null},{"data_va":4294983736,"insn_va":4294969492,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969496,"kind":"Global","value":null},{"data_va":4294983744,"insn_va":4294969508,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969512,"kind":"Global","value":null},{"data_va":4294983752,"insn_va":4294969524,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969528,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294968712":"sub_100000588","4294969256":"sub_1000007a8","4294969348":"sub_100000804"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"e70c57aecec8454090b8a62bcac20bfb2f9f14becd2fc6e8fffc1e0edcf62948","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.tee","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"b97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed","imphash":"e09aa9f04acbd1e71b74e61a49f2c897c3628731f614f6e2b37efee97df794ee","sha256_text":"a6b7664cd3727722b7e90e2c534c8530e8586963661bb6b90de2e7b0908308f6","symbolhash":"e09aa9f04acbd1e71b74e61a49f2c897c3628731f614f6e2b37efee97df794ee"},"sets":{"apis_called":["__stderrp","err","exit","fwrite","getopt","malloc_type_malloc","open","optind","read","signal","sub_1000007a8"],"bundle_ids":["com.apple.tee"],"cpp_classes":[],"entitlements":[],"frameworks":["libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":1,"iokit_constants":0,"library_functions":0,"nlist_functions":3,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":8,"size_log2":16.627306,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.006559191,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:12Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"e70c57aecec8454090b8a62bcac20bfb2f9f14becd2fc6e8fffc1e0edcf62948","file_modified":"2026-04-06T12:03:20Z","file_size":101232,"is_arm64e":true,"min_os":"26.1.0","name":"tee","platform":"macOS","sdk":"26.1.0","sha256":"5bd24e8db44c370f0545756612c3d36774d1368e6b6fa6f41515843dbb5e1c81","sha256_slice":"7af92320ea1b29754245ecb6bafadd475833bc9f73714e836a55099fb0032d90","source_version":"326.0.0.0.0","team_id":null,"uuid":"D22A990F-BE8F-39EA-823B-143BF657BBF1"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":3,"imports":[{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"err"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"exit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fwrite"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getopt"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"malloc_type_malloc"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"open"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"read"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"signal"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"warn"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"write"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"optind"}],"interesting_strings":{"bundle_ids":["com.apple.tee"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":3,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1416,"protection":"r-x","segment":"__TEXT","size":664},{"name":"__auth_stubs","offset":2080,"protection":"r-x","segment":"__TEXT","size":160},{"name":"__const","offset":2240,"protection":"r-x","segment":"__TEXT","size":56},{"name":"__cstring","offset":2296,"protection":"r-x","segment":"__TEXT","size":54},{"name":"__unwind_info","offset":2352,"protection":"r-x","segment":"__TEXT","size":104},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":80},{"name":"__got","offset":16464,"protection":"rw-","segment":"__DATA_CONST","size":16},{"name":"__bss","offset":0,"protection":"rw-","segment":"__DATA","size":8}],"summary":"Executable signed by Apple that runs as a system service with embedded bundle identifier. Establishes network connections to 6 Apple-controlled endpoints, likely for fetching configuration, sending telemetry, or receiving updates. Contains 4 URL strings indicating predefined communication targets. Limited function count suggests focused, single-purpose operation. Uses only public frameworks, indicating standard system library dependencies.","swift_metadata":null,"title":"System service — connects to Apple endpoints for configuration or telemetry","total_strings":127,"xpc_services":[]}