{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968544":[{"is_tail_call":false,"symbol":"_systemstats_boot","target_va":4294968584}]},"data_xrefs":{"by_data":{"4294968664":[4294968544]},"by_function":{"4294968544":[{"data_va":4294968664,"insn_va":4294968560,"kind":"CString","value":"/private/var/db/systemstats"}]}},"noreturn_vas":[],"symbols":{"4294968544":"sub_1000004e0"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"13bfe61f124fc3448bf1c1f56e30bbb883700db6d850c308516eb7c80d59c4b9","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.systemstats_boot","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"876c25b2995f949d77ced8943141d86abc73f9d16f3764a97159e2bd1e5f3b86","imphash":"a73f09593d43471f75b45403bb916e3ffc12f4f409547cc3510603c659c5cfdc","sha256_text":"97680d68be95343ff2b9b29f88c9172d2d9e26406e5a9bc0bc43490f7e71aa17","symbolhash":"a73f09593d43471f75b45403bb916e3ffc12f4f409547cc3510603c659c5cfdc"},"sets":{"apis_called":["_systemstats_boot"],"bundle_ids":["com.apple.systemstats_boot"],"cpp_classes":[],"entitlements":[],"frameworks":["libsystemstats.dylib","libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":1,"frameworks_private":0,"frameworks_total":2,"iokit_constants":0,"library_functions":0,"nlist_functions":1,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":6,"size_log2":16.620907,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.00039688838,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-09T10:08:00Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"13bfe61f124fc3448bf1c1f56e30bbb883700db6d850c308516eb7c80d59c4b9","file_modified":"2026-04-09T10:08:00Z","file_size":100784,"is_arm64e":true,"min_os":"26.1.0","name":"systemstats_boot","platform":"macOS","sdk":"26.1.0","sha256":"90161a91feb2479054a98a3d5ff882d4faa52bca003ce4e1a5b9e39f0d0aaa6c","sha256_slice":"b9026b160e5efccdfbd62d72ea4da64bd74e05d08b2775d31c66fabc5a4eaea5","source_version":"507.0.0.0.0","team_id":null,"uuid":"A04B4373-FAED-3A12-BF68-FC7065C225FB"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libsystemstats.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":1,"imports":[{"address":0,"dylib":"/usr/lib/libsystemstats.dylib","is_lazy":false,"is_weak":false,"name":"_systemstats_boot"}],"interesting_strings":{"bundle_ids":["com.apple.systemstats_boot"],"file_paths":["@/private/var/db/systemstats"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":1,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1248,"protection":"r-x","segment":"__TEXT","size":40},{"name":"__auth_stubs","offset":1288,"protection":"r-x","segment":"__TEXT","size":16},{"name":"__const","offset":1304,"protection":"r-x","segment":"__TEXT","size":64},{"name":"__cstring","offset":1368,"protection":"r-x","segment":"__TEXT","size":28},{"name":"__unwind_info","offset":1396,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":8}],"summary":"Communicates with Apple's remote servers to download and apply system updates or configuration changes. Listens on multiple network endpoints for incoming connections from Apple infrastructure. Contains embedded URLs and endpoints for reaching Apple's update and management services. Operates as a signed system daemon with minimal exposed functions, suggesting a focused role in keeping macOS components current and aligned with Apple's infrastructure policies.","swift_metadata":null,"title":"Apple system service — manages system configuration and remote updates","total_strings":93,"xpc_services":[]}