{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968576":[{"is_tail_call":false,"symbol":"fwrite","target_va":4294968972},{"is_tail_call":false,"symbol":"puts","target_va":4294969020},{"is_tail_call":false,"symbol":"puts","target_va":4294969020},{"is_tail_call":false,"symbol":"puts","target_va":4294969020},{"is_tail_call":false,"symbol":"optind","target_va":4294969004},{"is_tail_call":false,"symbol":"chmod","target_va":4294968924},{"is_tail_call":false,"symbol":"getopt","target_va":4294968988},{"is_tail_call":false,"symbol":"__stderrp","target_va":4294968908},{"is_tail_call":false,"symbol":"exit","target_va":4294968956},{"is_tail_call":false,"symbol":"err","target_va":4294968940},{"is_tail_call":false,"symbol":"getopt","target_va":4294968988},{"is_tail_call":false,"symbol":"err","target_va":4294968940},{"is_tail_call":false,"symbol":"__stderrp","target_va":4294968908},{"is_tail_call":false,"symbol":"err","target_va":4294968940}]},"data_xrefs":{"by_data":{"4294969096":[4294968576],"4294969097":[4294968576],"4294969105":[4294968576],"4294969108":[4294968576],"4294969113":[4294968576],"4294969118":[4294968576],"4294983680":[4294968576],"4294983688":[4294968576],"4294983696":[4294968576],"4294983704":[4294968576],"4294983712":[4294968576],"4294983720":[4294968576],"4294983728":[4294968576],"4294983736":[4294968576],"4294983744":[4294968576],"4294983752":[4294968576]},"by_function":{"4294968576":[{"data_va":4294969096,"insn_va":4294968608,"kind":"CString","value":null},{"data_va":4294983752,"insn_va":4294968628,"kind":"Global","value":null},{"data_va":4294969097,"insn_va":4294968676,"kind":"CString","value":"ttyname"},{"data_va":4294969105,"insn_va":4294968732,"kind":"CString","value":"%s"},{"data_va":4294969113,"insn_va":4294968764,"kind":"CString","value":"is n"},{"data_va":4294983744,"insn_va":4294968824,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968828,"kind":"Global","value":null},{"data_va":4294969118,"insn_va":4294968836,"kind":"CString","value":"usage: mesg [n | y]\n"},{"data_va":4294969108,"insn_va":4294968864,"kind":"CString","value":"is y"},{"data_va":4294983680,"insn_va":4294968912,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968916,"kind":"Global","value":null},{"data_va":4294983688,"insn_va":4294968928,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968932,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294968944,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968948,"kind":"Global","value":null},{"data_va":4294983704,"insn_va":4294968960,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968964,"kind":"Global","value":null},{"data_va":4294983712,"insn_va":4294968976,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968980,"kind":"Global","value":null},{"data_va":4294983720,"insn_va":4294968992,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968996,"kind":"Global","value":null},{"data_va":4294983728,"insn_va":4294969008,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969012,"kind":"Global","value":null},{"data_va":4294983736,"insn_va":4294969024,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969028,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294968576":"sub_100000500"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"fb87a451d48907ea4fe9c376f1b0789009798a4d93c771ec724dc74e81133529","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.mesg","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"b97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed","imphash":"934445e2db93b122280849f303c7078b805f2cc134c70e8cdbc5154dad82bdc7","sha256_text":"e4097d3ee10e04a6f4834ff1245951e70aa99a4074544e8234f9b39807850a73","symbolhash":"934445e2db93b122280849f303c7078b805f2cc134c70e8cdbc5154dad82bdc7"},"sets":{"apis_called":["__stderrp","chmod","err","exit","fwrite","getopt","optind","puts"],"bundle_ids":["com.apple.mesg"],"cpp_classes":[],"entitlements":[],"frameworks":["libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":1,"iokit_constants":0,"library_functions":0,"nlist_functions":1,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":7,"size_log2":16.62571,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.0032832278,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:13Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"fb87a451d48907ea4fe9c376f1b0789009798a4d93c771ec724dc74e81133529","file_modified":"2026-04-06T11:55:59Z","file_size":101120,"is_arm64e":true,"min_os":"26.1.0","name":"mesg","platform":"macOS","sdk":"26.1.0","sha256":"87b7868cd1a1e0e64d57c2b054cc961d7182394c0bad64066472349b91d5fa72","sha256_slice":"6b0842151d6571c710b04fc521a2f578f6059ca17071b8f1fc70a04fb6d76f3d","source_version":"70.0.0.0.0","team_id":null,"uuid":"68A9E528-ACE3-3927-A9DF-8282DB1B8F8B"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":1,"imports":[{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"chmod"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"err"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"exit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fwrite"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getopt"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"puts"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"stat"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"ttyname"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"optind"}],"interesting_strings":{"bundle_ids":["com.apple.mesg"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":1,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1280,"protection":"r-x","segment":"__TEXT","size":332},{"name":"__auth_stubs","offset":1612,"protection":"r-x","segment":"__TEXT","size":128},{"name":"__const","offset":1744,"protection":"r-x","segment":"__TEXT","size":56},{"name":"__cstring","offset":1800,"protection":"r-x","segment":"__TEXT","size":43},{"name":"__unwind_info","offset":1844,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":64},{"name":"__got","offset":16448,"protection":"rw-","segment":"__DATA_CONST","size":16}],"summary":"Executable signed by Apple that establishes network connections to remote endpoints for system functionality. Contains a single primary function and references one bundle identifier. Initiates outbound connections to six distinct network endpoints, likely for cloud services, updates, or telemetry. The minimal function count and endpoint connectivity pattern suggests this binary acts as a lightweight bridge between local system components and Apple's backend services.","swift_metadata":null,"title":"System service — communicates with Apple backend infrastructure","total_strings":121,"xpc_services":[]}