{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968712":[{"is_tail_call":false,"symbol":"putchar","target_va":4294971952},{"is_tail_call":false,"symbol":"printf","target_va":4294971936},{"is_tail_call":false,"symbol":"printf","target_va":4294971936},{"is_tail_call":false,"symbol":"getgroups","target_va":4294971808},{"is_tail_call":false,"symbol":"sub_1000009e8","target_va":4294969832},{"is_tail_call":false,"symbol":"getlogin","target_va":4294971824},{"is_tail_call":false,"symbol":"puts","target_va":4294971968},{"is_tail_call":false,"symbol":"getopt","target_va":4294971840},{"is_tail_call":false,"symbol":"__stdoutp","target_va":4294971568},{"is_tail_call":false,"symbol":"free","target_va":4294971680},{"is_tail_call":false,"symbol":"getpwnam","target_va":4294971856},{"is_tail_call":false,"symbol":"getopt","target_va":4294971840},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"getpwnam","target_va":4294971856},{"is_tail_call":false,"symbol":"getopt","target_va":4294971840},{"is_tail_call":false,"symbol":"optind","target_va":4294971920},{"is_tail_call":false,"symbol":"fwrite","target_va":4294971696},{"is_tail_call":false,"symbol":"getaudit_addr","target_va":4294971712},{"is_tail_call":false,"symbol":"sub_100000acc","target_va":4294970060},{"is_tail_call":false,"symbol":"getegid","target_va":4294971728},{"is_tail_call":false,"symbol":"geteuid","target_va":4294971744},{"is_tail_call":false,"symbol":"sub_100000c14","target_va":4294970388},{"is_tail_call":false,"symbol":"getpwnam","target_va":4294971856},{"is_tail_call":false,"symbol":"getopt","target_va":4294971840},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"errx","target_va":4294971600},{"is_tail_call":false,"symbol":"exit","target_va":4294971616},{"is_tail_call":false,"symbol":"err","target_va":4294971584},{"is_tail_call":false,"symbol":"__stderrp","target_va":4294971552},{"is_tail_call":false,"symbol":"sub_100000c78","target_va":4294970488},{"is_tail_call":false,"symbol":"sub_100000df4","target_va":4294970868}],"4294969832":[{"is_tail_call":false,"symbol":"fprintf","target_va":4294971664},{"is_tail_call":false,"symbol":"ferror","target_va":4294971632},{"is_tail_call":false,"symbol":"err","target_va":4294971584}],"4294970060":[{"is_tail_call":false,"symbol":"getpwnam","target_va":4294971856},{"is_tail_call":false,"symbol":"getopt","target_va":4294971840},{"is_tail_call":false,"symbol":"getgid","target_va":4294971760},{"is_tail_call":false,"symbol":"geteuid","target_va":4294971744},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"malloc_type_malloc","target_va":4294971904},{"is_tail_call":false,"symbol":"fflush","target_va":4294971648}],"4294970388":[{"is_tail_call":false,"symbol":"getpwnam","target_va":4294971856},{"is_tail_call":false,"symbol":"getopt","target_va":4294971840},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888}],"4294970488":[{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"getgrouplist_2","target_va":4294971792},{"is_tail_call":false,"symbol":"getpwnam","target_va":4294971856},{"is_tail_call":false,"symbol":"getopt","target_va":4294971840},{"is_tail_call":false,"symbol":"printf","target_va":4294971936},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"getaudit_addr","target_va":4294971712},{"is_tail_call":false,"symbol":"getopt","target_va":4294971840},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"getegid","target_va":4294971728},{"is_tail_call":false,"symbol":"fwrite","target_va":4294971696},{"is_tail_call":false,"symbol":"geteuid","target_va":4294971744},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":true,"symbol":"sub_100000acc","target_va":4294970060},{"is_tail_call":false,"symbol":"sub_100001084","target_va":4294971524}],"4294970868":[{"is_tail_call":false,"symbol":"getpwnam","target_va":4294971856},{"is_tail_call":false,"symbol":"getopt","target_va":4294971840},{"is_tail_call":false,"symbol":"getgid","target_va":4294971760},{"is_tail_call":false,"symbol":"getpwnam","target_va":4294971856},{"is_tail_call":false,"symbol":"getpwnam","target_va":4294971856},{"is_tail_call":false,"symbol":"getegid","target_va":4294971728},{"is_tail_call":false,"symbol":"strcmp","target_va":4294971984},{"is_tail_call":false,"symbol":"getpwuid","target_va":4294971872},{"is_tail_call":false,"symbol":"getgrgid","target_va":4294971776},{"is_tail_call":false,"symbol":"strrchr","target_va":4294972000},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"geteuid","target_va":4294971744},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"getaudit_addr","target_va":4294971712},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"getopt","target_va":4294971840},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"fwrite","target_va":4294971696},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"geteuid","target_va":4294971744},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"geteuid","target_va":4294971744},{"is_tail_call":false,"symbol":"getuid","target_va":4294971888},{"is_tail_call":false,"symbol":"malloc_type_malloc","target_va":4294971904},{"is_tail_call":false,"symbol":"fflush","target_va":4294971648}],"4294971468":[{"is_tail_call":false,"symbol":"__stderrp","target_va":4294971552}],"4294971496":[{"is_tail_call":false,"symbol":"__stderrp","target_va":4294971552}],"4294971524":[{"is_tail_call":false,"symbol":"__stderrp","target_va":4294971552}]},"data_xrefs":{"by_data":{"4294971392":[4294968712,4294970488,4294970868],"4294971393":[4294970868],"4294971408":[4294968712],"4294971412":[4294968712],"4294971416":[4294970868],"4294971432":[4294968712],"4294971456":[4294970488],"4294971472":[4294968712],"4294971488":[4294970388],"4294971504":[4294970868],"4294971528":[4294968712],"4294972074":[4294968712],"4294972081":[4294968712],"4294972088":[4294968712,4294969832,4294970060],"4294972089":[4294968712],"4294972100":[4294968712],"4294972104":[4294968712],"4294972111":[4294970488],"4294972119":[4294970488],"4294972127":[4294971524],"4294972136":[4294970488],"4294972146":[4294970488],"4294972154":[4294970488],"4294972163":[4294970488],"4294972172":[4294970488],"4294972181":[4294970488],"4294972190":[4294971468],"4294972197":[4294970868],"4294972227":[4294970868],"4294972238":[4294970868],"4294972245":[4294970868],"4294972253":[4294970868],"4294972258":[4294970868],"4294972267":[4294970868],"4294972276":[4294970868],"4294972287":[4294970868],"4294972291":[4294968712],"4294972305":[4294968712],"4294972495":[4294968712],"4294972509":[4294968712,4294971496],"4294972518":[4294970060],"4294972523":[4294970060],"4294972525":[4294970060],"4294972530":[4294968712],"4294972547":[4294970388],"4294972580":[4294969832],"4294972602":[4294969832],"4294972617":[4294969832],"4294972644":[4294969832],"4294972661":[4294969832],"4294972675":[4294969832],"4294972695":[4294969832],"4294972720":[4294969832],"4294972740":[4294969832],"4294972766":[4294969832],"4294972786":[4294969832],"4294983680":[4294968712,4294969832,4294971524],"4294983688":[4294971524],"4294983696":[4294971524],"4294983704":[4294971524],"4294983712":[4294971524],"4294983720":[4294971524],"4294983728":[4294971524],"4294983736":[4294971524],"4294983744":[4294971524],"4294983752":[4294971524],"4294983760":[4294971524],"4294983768":[4294971524],"4294983776":[4294971524],"4294983784":[4294971524],"4294983792":[4294971524],"4294983800":[4294971524],"4294983808":[4294971524],"4294983816":[4294971524],"4294983824":[4294971524],"4294983832":[4294971524],"4294983840":[4294971524],"4294983848":[4294971524],"4294983856":[4294971524],"4294983864":[4294971524],"4294983872":[4294971524],"4294983880":[4294971524],"4294983888":[4294971524],"4294983896":[4294971524],"4294983904":[4294971524],"4294983912":[4294969832],"4294983920":[4294968712],"4294983928":[4294968712],"4295000064":[4294968712],"4295000068":[4294968712]},"by_function":{"4294968712":[{"data_va":4294972074,"insn_va":4294968784,"kind":"CString","value":"groups"},{"data_va":4295000064,"insn_va":4294968812,"kind":"Global","value":null},{"data_va":4294972081,"insn_va":4294968828,"kind":"CString","value":"whoami"},{"data_va":4295000068,"insn_va":4294968860,"kind":"Global","value":null},{"data_va":4294972089,"insn_va":4294968928,"kind":"CString","value":"AFPGagnpru"},{"data_va":4294972088,"insn_va":4294968936,"kind":"CString","value":null},{"data_va":4294983928,"insn_va":4294969184,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969188,"kind":"Global","value":null},{"data_va":4294972530,"insn_va":4294969372,"kind":"CString","value":"%s: no such user"},{"data_va":4294972291,"insn_va":4294969420,"kind":"CString","value":"getaudit_addr"},{"data_va":4294972305,"insn_va":4294969520,"kind":"CString","value":"auid=%d\nmask.success=0x%08x\nmask.failure=0x%08x\nasid=%d\ntermid_addr.port=0x%08jx\ntermid_addr.addr[0]=0x%08x\ntermid_addr.addr[1]=0x%08x\ntermid_addr.addr[2]=0x%08x\ntermid_addr.addr[3]=0x%08x\n"},{"data_va":4294971528,"insn_va":4294969532,"kind":"Global","value":null},{"data_va":4294972495,"insn_va":4294969544,"kind":"CString","value":"flags=0x%llx\n"},{"data_va":4294972509,"insn_va":4294969572,"kind":"CString","value":"getpwuid"},{"data_va":4294971432,"insn_va":4294969580,"kind":"Global","value":null},{"data_va":4294971412,"insn_va":4294969632,"kind":"Global","value":null},{"data_va":4294971472,"insn_va":4294969636,"kind":"Global","value":null},{"data_va":4294971472,"insn_va":4294969644,"kind":"Global","value":null},{"data_va":4294971408,"insn_va":4294969684,"kind":"Global","value":null},{"data_va":4294971472,"insn_va":4294969688,"kind":"Global","value":null},{"data_va":4294972100,"insn_va":4294969736,"kind":"CString","value":"%u\n"},{"data_va":4294983920,"insn_va":4294969748,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969752,"kind":"Global","value":null},{"data_va":4294972104,"insn_va":4294969788,"kind":"CString","value":"stdout"},{"data_va":4294971392,"insn_va":4294969800,"kind":"Global","value":null}],"4294969832":[{"data_va":4294983912,"insn_va":4294969868,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969872,"kind":"Global","value":null},{"data_va":4294972580,"insn_va":4294969880,"kind":"CString","value":"usage: groups [user]\n"},{"data_va":4294983912,"insn_va":4294969904,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969908,"kind":"Global","value":null},{"data_va":4294972602,"insn_va":4294969924,"kind":"CString","value":"usage: whoami\n"},{"data_va":4294972786,"insn_va":4294969948,"kind":"CString","value":"       id -u [-nr] [user]"},{"data_va":4294972766,"insn_va":4294969956,"kind":"CString","value":"       id -p [user]"},{"data_va":4294972740,"insn_va":4294969964,"kind":"CString","value":"       id -g [-nr] [user]"},{"data_va":4294972720,"insn_va":4294969976,"kind":"CString","value":"       id -P [user]"},{"data_va":4294972088,"insn_va":4294969984,"kind":"CString","value":null},{"data_va":4294972695,"insn_va":4294969996,"kind":"CString","value":"       id -G [-n] [user]"},{"data_va":4294972675,"insn_va":4294970004,"kind":"CString","value":"       id -F [user]"},{"data_va":4294972661,"insn_va":4294970016,"kind":"CString","value":"       id -A\n"},{"data_va":4294972644,"insn_va":4294970024,"kind":"CString","value":"usage: id [user]"},{"data_va":4294972617,"insn_va":4294970040,"kind":"CString","value":"%s\n%s%s\n%s\n%s\n%s\n%s\n%s\n%s\n"}],"4294970060":[{"data_va":4294972523,"insn_va":4294970160,"kind":"CString","value":null},{"data_va":4294972088,"insn_va":4294970168,"kind":"CString","value":null},{"data_va":4294972525,"insn_va":4294970176,"kind":"CString","value":"%s%u"},{"data_va":4294972518,"insn_va":4294970184,"kind":"CString","value":"%s%s"}],"4294970388":[{"data_va":4294972547,"insn_va":4294970460,"kind":"CString","value":"%s:%s:%d:%d:%s:%ld:%ld:%s:%s:%s\n"},{"data_va":4294971488,"insn_va":4294970476,"kind":"Global","value":null}],"4294970488":[{"data_va":4294972111,"insn_va":4294970532,"kind":"CString","value":"uid\t%s\n"},{"data_va":4294972119,"insn_va":4294970544,"kind":"CString","value":"groups\t"},{"data_va":4294971392,"insn_va":4294970592,"kind":"Global","value":null},{"data_va":4294972136,"insn_va":4294970620,"kind":"CString","value":"login\t%s\n"},{"data_va":4294972111,"insn_va":4294970640,"kind":"CString","value":"uid\t%s\n"},{"data_va":4294972136,"insn_va":4294970656,"kind":"CString","value":"login\t%s\n"},{"data_va":4294972146,"insn_va":4294970672,"kind":"CString","value":"uid\t%u\n"},{"data_va":4294971392,"insn_va":4294970704,"kind":"Global","value":null},{"data_va":4294972154,"insn_va":4294970716,"kind":"CString","value":"euid\t%s\n"},{"data_va":4294972163,"insn_va":4294970732,"kind":"CString","value":"euid\t%u\n"},{"data_va":4294971392,"insn_va":4294970772,"kind":"Global","value":null},{"data_va":4294972172,"insn_va":4294970784,"kind":"CString","value":"rgid\t%s\n"},{"data_va":4294972181,"insn_va":4294970800,"kind":"CString","value":"rgid\t%u\n"},{"data_va":4294972119,"insn_va":4294970812,"kind":"CString","value":"groups\t"},{"data_va":4294971456,"insn_va":4294970840,"kind":"Global","value":null}],"4294970868":[{"data_va":4294972238,"insn_va":4294970984,"kind":"CString","value":"uid=%u"},{"data_va":4294971393,"insn_va":4294971016,"kind":"Global","value":null},{"data_va":4294972197,"insn_va":4294971084,"kind":"CString","value":"failed to retrieve group list"},{"data_va":4294972227,"insn_va":4294971108,"kind":"CString","value":"uid=%u(%s)"},{"data_va":4294972245,"insn_va":4294971124,"kind":"CString","value":" gid=%u"},{"data_va":4294971392,"insn_va":4294971144,"kind":"Global","value":null},{"data_va":4294972253,"insn_va":4294971156,"kind":"CString","value":"(%s)"},{"data_va":4294972258,"insn_va":4294971192,"kind":"CString","value":" euid=%u"},{"data_va":4294971392,"insn_va":4294971212,"kind":"Global","value":null},{"data_va":4294972253,"insn_va":4294971224,"kind":"CString","value":"(%s)"},{"data_va":4294972267,"insn_va":4294971260,"kind":"CString","value":" egid=%u"},{"data_va":4294971392,"insn_va":4294971280,"kind":"Global","value":null},{"data_va":4294972253,"insn_va":4294971292,"kind":"CString","value":"(%s)"},{"data_va":4294972287,"insn_va":4294971324,"kind":"CString","value":",%u"},{"data_va":4294972276,"insn_va":4294971332,"kind":"CString","value":" groups=%u"},{"data_va":4294972253,"insn_va":4294971340,"kind":"CString","value":"(%s)"},{"data_va":4294971416,"insn_va":4294971344,"kind":"Global","value":null},{"data_va":4294971392,"insn_va":4294971388,"kind":"Global","value":null},{"data_va":4294971416,"insn_va":4294971428,"kind":"Global","value":null},{"data_va":4294971504,"insn_va":4294971456,"kind":"Global","value":null}],"4294971468":[{"data_va":4294972190,"insn_va":4294971484,"kind":"CString","value":"malloc"}],"4294971496":[{"data_va":4294972509,"insn_va":4294971512,"kind":"CString","value":"getpwuid"}],"4294971524":[{"data_va":4294972127,"insn_va":4294971540,"kind":"CString","value":"getlogin"},{"data_va":4294983680,"insn_va":4294971556,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971560,"kind":"Global","value":null},{"data_va":4294983688,"insn_va":4294971572,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971576,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294971588,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971592,"kind":"Global","value":null},{"data_va":4294983704,"insn_va":4294971604,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971608,"kind":"Global","value":null},{"data_va":4294983712,"insn_va":4294971620,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971624,"kind":"Global","value":null},{"data_va":4294983720,"insn_va":4294971636,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971640,"kind":"Global","value":null},{"data_va":4294983728,"insn_va":4294971652,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971656,"kind":"Global","value":null},{"data_va":4294983736,"insn_va":4294971668,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971672,"kind":"Global","value":null},{"data_va":4294983744,"insn_va":4294971684,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971688,"kind":"Global","value":null},{"data_va":4294983752,"insn_va":4294971700,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971704,"kind":"Global","value":null},{"data_va":4294983760,"insn_va":4294971716,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971720,"kind":"Global","value":null},{"data_va":4294983768,"insn_va":4294971732,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971736,"kind":"Global","value":null},{"data_va":4294983776,"insn_va":4294971748,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971752,"kind":"Global","value":null},{"data_va":4294983784,"insn_va":4294971764,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971768,"kind":"Global","value":null},{"data_va":4294983792,"insn_va":4294971780,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971784,"kind":"Global","value":null},{"data_va":4294983800,"insn_va":4294971796,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971800,"kind":"Global","value":null},{"data_va":4294983808,"insn_va":4294971812,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971816,"kind":"Global","value":null},{"data_va":4294983816,"insn_va":4294971828,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971832,"kind":"Global","value":null},{"data_va":4294983824,"insn_va":4294971844,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971848,"kind":"Global","value":null},{"data_va":4294983832,"insn_va":4294971860,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971864,"kind":"Global","value":null},{"data_va":4294983840,"insn_va":4294971876,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971880,"kind":"Global","value":null},{"data_va":4294983848,"insn_va":4294971892,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971896,"kind":"Global","value":null},{"data_va":4294983856,"insn_va":4294971908,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971912,"kind":"Global","value":null},{"data_va":4294983864,"insn_va":4294971924,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971928,"kind":"Global","value":null},{"data_va":4294983872,"insn_va":4294971940,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971944,"kind":"Global","value":null},{"data_va":4294983880,"insn_va":4294971956,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971960,"kind":"Global","value":null},{"data_va":4294983888,"insn_va":4294971972,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971976,"kind":"Global","value":null},{"data_va":4294983896,"insn_va":4294971988,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971992,"kind":"Global","value":null},{"data_va":4294983904,"insn_va":4294972004,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294972008,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294968712":"sub_100000588","4294969832":"sub_1000009e8","4294970060":"sub_100000acc","4294970388":"sub_100000c14","4294970488":"sub_100000c78","4294970868":"sub_100000df4","4294971468":"sub_10000104c","4294971496":"sub_100001068","4294971524":"sub_100001084"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"90b15a494d266b8478fcf8d8fc7b64a63e4b200a3d7c5b7162956ebda469a53e","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.whoami","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"b97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed","imphash":"584d07426546e9d7dd59188e3b10bffef277f739629cbd1dde92c36045f97647","sha256_text":"77fa1319d9ee0191488af3d3a8a249c0ffb39039567add2c615c679e5b6ce7fe","symbolhash":"584d07426546e9d7dd59188e3b10bffef277f739629cbd1dde92c36045f97647"},"sets":{"apis_called":["__stderrp","__stdoutp","err","errx","exit","ferror","fflush","fprintf","free","fwrite","getaudit_addr","getegid","geteuid","getgid","getgrgid","getgrouplist_2","getgroups","getlogin","getopt","getpwnam","getpwuid","getuid","malloc_type_malloc","optind","printf","putchar","puts","strcmp","strrchr","sub_1000009e8","sub_100000acc","sub_100000c14","sub_100000c78","sub_100000df4","sub_100001084"],"bundle_ids":["com.apple.whoami"],"cpp_classes":[],"entitlements":[],"frameworks":["libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":1,"iokit_constants":0,"library_functions":0,"nlist_functions":9,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":8,"size_log2":16.640697,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.027795177,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:13Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"90b15a494d266b8478fcf8d8fc7b64a63e4b200a3d7c5b7162956ebda469a53e","file_modified":"2026-04-06T11:50:38Z","file_size":102176,"is_arm64e":true,"min_os":"26.1.0","name":"groups","platform":"macOS","sdk":"26.1.0","sha256":"7173523150fdc268018a7df0cbae2dfa219c126cb53d0e8a6e4000dd2576c09d","sha256_slice":"04040c74995bdf6c5a83aea0263e9c90703a472ea5c2ff78043b3d638e76de1f","source_version":"326.0.0.0.0","team_id":null,"uuid":"F99ADE96-45F6-328F-9CD8-9459ED161A21"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":9,"imports":[{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"err"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"errx"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"exit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"ferror"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fflush"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fprintf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"free"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fwrite"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getaudit_addr"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getegid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"geteuid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getgid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getgrgid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getgrouplist_2"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getgroups"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getlogin"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getopt"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getpwnam"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getpwuid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getuid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"malloc_type_malloc"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"printf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"putchar"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"puts"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strcmp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strrchr"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strtol"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"sysconf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"warn"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stdoutp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"optind"}],"interesting_strings":{"bundle_ids":["com.apple.whoami"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":9,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1416,"protection":"r-x","segment":"__TEXT","size":2840},{"name":"__auth_stubs","offset":4256,"protection":"r-x","segment":"__TEXT","size":464},{"name":"__const","offset":4720,"protection":"r-x","segment":"__TEXT","size":58},{"name":"__cstring","offset":4778,"protection":"r-x","segment":"__TEXT","size":738},{"name":"__unwind_info","offset":5516,"protection":"r-x","segment":"__TEXT","size":120},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":232},{"name":"__got","offset":16616,"protection":"rw-","segment":"__DATA_CONST","size":24},{"name":"__bss","offset":0,"protection":"rw-","segment":"__DATA","size":5}],"summary":"Apple-signed executable that establishes outbound network connections to Apple endpoints. Contains bundle identifiers and multiple URLs indicating integration with Apple's infrastructure. Minimal function count suggests focused, specialized purpose—either periodic data collection, service registration, or configuration retrieval from remote servers. Runs as a system component with no private frameworks, indicating reliance on standard system libraries for its operations.","swift_metadata":null,"title":"System service — communicates with Apple servers for configuration or telemetry","total_strings":213,"xpc_services":[]}