{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968560":[{"is_tail_call":false,"symbol":"fts_set","target_va":4294970408},{"is_tail_call":false,"symbol":"strdup","target_va":4294970584},{"is_tail_call":false,"symbol":"fwrite","target_va":4294970424},{"is_tail_call":false,"symbol":"sub_100000688","target_va":4294968968},{"is_tail_call":false,"symbol":"fts_set","target_va":4294970408},{"is_tail_call":false,"symbol":"sub_100000688","target_va":4294968968},{"is_tail_call":false,"symbol":"malloc_type_calloc","target_va":4294970472},{"is_tail_call":false,"symbol":"malloc_type_calloc","target_va":4294970472},{"is_tail_call":false,"symbol":"malloc_type_calloc","target_va":4294970472}],"4294968968":[{"is_tail_call":false,"symbol":"getenv","target_va":4294970440},{"is_tail_call":false,"symbol":"fts_set","target_va":4294970408},{"is_tail_call":false,"symbol":"__stack_chk_guard","target_va":4294970232},{"is_tail_call":false,"symbol":"__stack_chk_guard","target_va":4294970232},{"is_tail_call":false,"symbol":"fopen","target_va":4294970344},{"is_tail_call":false,"symbol":"fts_close","target_va":4294970360},{"is_tail_call":false,"symbol":"fclose","target_va":4294970312},{"is_tail_call":false,"symbol":"exit","target_va":4294970296},{"is_tail_call":false,"symbol":"getenv","target_va":4294970440},{"is_tail_call":false,"symbol":"sub_100000a5c","target_va":4294969948},{"is_tail_call":false,"symbol":"fts_open","target_va":4294970376},{"is_tail_call":false,"symbol":"err","target_va":4294970280},{"is_tail_call":false,"symbol":"fts_close","target_va":4294970360},{"is_tail_call":false,"symbol":"strlen","target_va":4294970616},{"is_tail_call":false,"symbol":"fgetln","target_va":4294970328},{"is_tail_call":false,"symbol":"fts_set","target_va":4294970408},{"is_tail_call":false,"symbol":"reallocf","target_va":4294970536},{"is_tail_call":false,"symbol":"perror","target_va":4294970504},{"is_tail_call":false,"symbol":"sub_100000a5c","target_va":4294969948},{"is_tail_call":false,"symbol":"perror","target_va":4294970504},{"is_tail_call":false,"symbol":"sub_100000a5c","target_va":4294969948}],"4294969732":[{"is_tail_call":false,"symbol":"strlcat","target_va":4294970600},{"is_tail_call":false,"symbol":"strlcat","target_va":4294970600},{"is_tail_call":true,"symbol":"printf","target_va":4294970520}],"4294969948":[{"is_tail_call":false,"symbol":"strcoll","target_va":4294970568},{"is_tail_call":false,"symbol":"strcoll","target_va":4294970568},{"is_tail_call":false,"symbol":"strdup","target_va":4294970584},{"is_tail_call":false,"symbol":"optind","target_va":4294970488},{"is_tail_call":false,"symbol":"strchr","target_va":4294970552},{"is_tail_call":true,"symbol":"strchr","target_va":4294970552}],"4294970192":[{"is_tail_call":false,"symbol":"__stderrp","target_va":4294970248}]},"data_xrefs":{"by_data":{"4294967312":[4294968968],"4294967320":[4294968968],"4294967328":[4294968968],"4294967352":[4294968968],"4294967360":[4294968560],"4294967456":[4294968968],"4294969732":[4294968968],"4294970696":[4294968560],"4294970702":[4294968560],"4294970706":[4294968560],"4294970709":[4294968560],"4294970714":[4294968560],"4294970725":[4294968560],"4294970738":[4294968560],"4294970746":[4294968560],"4294970760":[4294968560],"4294970776":[4294968560],"4294970795":[4294968560],"4294970818":[4294968560],"4294970843":[4294968560],"4294970904":[4294968968],"4294970921":[4294968968],"4294970926":[4294968968],"4294970928":[4294968968],"4294970931":[4294969948],"4294983680":[4294968560,4294968968,4294970192],"4294983681":[4294968968],"4294983688":[4294968968,4294970192],"4294983696":[4294970192],"4294983704":[4294970192],"4294983712":[4294970192],"4294983720":[4294970192],"4294983728":[4294970192],"4294983736":[4294970192],"4294983744":[4294970192],"4294983752":[4294970192],"4294983760":[4294970192],"4294983768":[4294970192],"4294983776":[4294970192],"4294983784":[4294970192],"4294983792":[4294970192],"4294983800":[4294970192],"4294983808":[4294970192],"4294983816":[4294970192],"4294983824":[4294970192],"4294983832":[4294970192],"4294983840":[4294970192],"4294983848":[4294970192],"4294983856":[4294970192],"4294983864":[4294970192],"4294983872":[4294970192],"4294983880":[4294970192],"4294983888":[4294968968],"4294983904":[4294968560]},"by_function":{"4294968560":[{"data_va":4294970696,"insn_va":4294968596,"kind":"CString","value":"SHELL"},{"data_va":4294970702,"insn_va":4294968612,"kind":"CString","value":"csh"},{"data_va":4294970706,"insn_va":4294968640,"kind":"CString","value":"cs"},{"data_va":4294983904,"insn_va":4294968704,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968708,"kind":"Global","value":null},{"data_va":4294970709,"insn_va":4294968724,"kind":"CString","value":"PATH"},{"data_va":4294970714,"insn_va":4294968732,"kind":"CString","value":"/etc/paths"},{"data_va":4294970725,"insn_va":4294968740,"kind":"CString","value":"/etc/paths.d"},{"data_va":4294970738,"insn_va":4294968756,"kind":"CString","value":"MANPATH"},{"data_va":4294970738,"insn_va":4294968772,"kind":"CString","value":"MANPATH"},{"data_va":4294970746,"insn_va":4294968780,"kind":"CString","value":"/etc/manpaths"},{"data_va":4294970760,"insn_va":4294968788,"kind":"CString","value":"/etc/manpaths.d"},{"data_va":4294970776,"insn_va":4294968812,"kind":"CString","value":"setenv PATH \"%s\";\n"},{"data_va":4294970795,"insn_va":4294968828,"kind":"CString","value":"setenv MANPATH \"%s\":;\n"},{"data_va":4294970776,"insn_va":4294968848,"kind":"CString","value":"setenv PATH \"%s\";\n"},{"data_va":4294970818,"insn_va":4294968864,"kind":"CString","value":"PATH=\"%s\"; export PATH;\n"},{"data_va":4294970843,"insn_va":4294968880,"kind":"CString","value":"MANPATH=\"%s:\"; export MANPATH;\n"},{"data_va":4294970818,"insn_va":4294968896,"kind":"CString","value":"PATH=\"%s\"; export PATH;\n"},{"data_va":4294967360,"insn_va":4294968920,"kind":"Global","value":null}],"4294968968":[{"data_va":4294983888,"insn_va":4294969020,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969024,"kind":"Global","value":null},{"data_va":4294970904,"insn_va":4294969064,"kind":"CString","value":"PATH_HELPER_ROOT"},{"data_va":4294970921,"insn_va":4294969088,"kind":"CString","value":"%s%s"},{"data_va":4294967328,"insn_va":4294969092,"kind":"Global","value":null},{"data_va":4294967328,"insn_va":4294969104,"kind":"Global","value":null},{"data_va":4294970921,"insn_va":4294969116,"kind":"CString","value":"%s%s"},{"data_va":4294983688,"insn_va":4294969120,"kind":"Global","value":null},{"data_va":4294969732,"insn_va":4294969136,"kind":"Global","value":null},{"data_va":4294967328,"insn_va":4294969148,"kind":"Global","value":null},{"data_va":4294970926,"insn_va":4294969184,"kind":"CString","value":null},{"data_va":4294970928,"insn_va":4294969204,"kind":"CString","value":"%s"},{"data_va":4294967312,"insn_va":4294969244,"kind":"Global","value":null},{"data_va":4294967312,"insn_va":4294969264,"kind":"Global","value":null},{"data_va":4294983681,"insn_va":4294969332,"kind":"Global","value":null},{"data_va":4294967320,"insn_va":4294969368,"kind":"Global","value":null},{"data_va":4294983681,"insn_va":4294969428,"kind":"Global","value":null},{"data_va":4294983681,"insn_va":4294969436,"kind":"Global","value":null},{"data_va":4294967320,"insn_va":4294969600,"kind":"Global","value":null},{"data_va":4294967320,"insn_va":4294969636,"kind":"Global","value":null},{"data_va":4294967320,"insn_va":4294969648,"kind":"Global","value":null},{"data_va":4294967352,"insn_va":4294969652,"kind":"Global","value":null},{"data_va":4294983888,"insn_va":4294969660,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969664,"kind":"Global","value":null},{"data_va":4294967456,"insn_va":4294969700,"kind":"Global","value":null}],"4294969948":[{"data_va":4294970931,"insn_va":4294970112,"kind":"CString","value":null}],"4294970192":[{"data_va":4294983680,"insn_va":4294970220,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970224,"kind":"Global","value":null},{"data_va":4294983688,"insn_va":4294970236,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970240,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294970252,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970256,"kind":"Global","value":null},{"data_va":4294983704,"insn_va":4294970268,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970272,"kind":"Global","value":null},{"data_va":4294983712,"insn_va":4294970284,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970288,"kind":"Global","value":null},{"data_va":4294983720,"insn_va":4294970300,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970304,"kind":"Global","value":null},{"data_va":4294983728,"insn_va":4294970316,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970320,"kind":"Global","value":null},{"data_va":4294983736,"insn_va":4294970332,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970336,"kind":"Global","value":null},{"data_va":4294983744,"insn_va":4294970348,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970352,"kind":"Global","value":null},{"data_va":4294983752,"insn_va":4294970364,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970368,"kind":"Global","value":null},{"data_va":4294983760,"insn_va":4294970380,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970384,"kind":"Global","value":null},{"data_va":4294983768,"insn_va":4294970396,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970400,"kind":"Global","value":null},{"data_va":4294983776,"insn_va":4294970412,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970416,"kind":"Global","value":null},{"data_va":4294983784,"insn_va":4294970428,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970432,"kind":"Global","value":null},{"data_va":4294983792,"insn_va":4294970444,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970448,"kind":"Global","value":null},{"data_va":4294983800,"insn_va":4294970460,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970464,"kind":"Global","value":null},{"data_va":4294983808,"insn_va":4294970476,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970480,"kind":"Global","value":null},{"data_va":4294983816,"insn_va":4294970492,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970496,"kind":"Global","value":null},{"data_va":4294983824,"insn_va":4294970508,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970512,"kind":"Global","value":null},{"data_va":4294983832,"insn_va":4294970524,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970528,"kind":"Global","value":null},{"data_va":4294983840,"insn_va":4294970540,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970544,"kind":"Global","value":null},{"data_va":4294983848,"insn_va":4294970556,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970560,"kind":"Global","value":null},{"data_va":4294983856,"insn_va":4294970572,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970576,"kind":"Global","value":null},{"data_va":4294983864,"insn_va":4294970588,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970592,"kind":"Global","value":null},{"data_va":4294983872,"insn_va":4294970604,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970608,"kind":"Global","value":null},{"data_va":4294983880,"insn_va":4294970620,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970624,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294968560":"sub_1000004f0","4294968968":"sub_100000688","4294969732":"sub_100000984","4294969948":"sub_100000a5c","4294970192":"sub_100000b50"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"99e95bfd45d5d82b559a3e80ca353e5c9f337cfaa95439daf25573fe80a75068","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.path_helper","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"b97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed","imphash":"7592b0bff6a5e984df65b85a91cadfcec6841af44606fe2d7bdb3ccfec17472d","sha256_text":"66dceb3ea7ca3edcdb49520f30b4e68f892ae0904ccf9a37f659427c70eea1d2","symbolhash":"7592b0bff6a5e984df65b85a91cadfcec6841af44606fe2d7bdb3ccfec17472d"},"sets":{"apis_called":["__stack_chk_guard","__stderrp","err","exit","fclose","fgetln","fopen","fts_close","fts_open","fts_set","fwrite","getenv","malloc_type_calloc","optind","perror","printf","reallocf","strchr","strcoll","strdup","strlcat","strlen","sub_100000688","sub_100000a5c"],"bundle_ids":["com.apple.path_helper"],"cpp_classes":[],"entitlements":[],"frameworks":["libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":1,"iokit_constants":0,"library_functions":0,"nlist_functions":5,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":7,"size_log2":16.639341,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.01622257,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-09T09:59:03Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"99e95bfd45d5d82b559a3e80ca353e5c9f337cfaa95439daf25573fe80a75068","file_modified":"2026-04-09T09:59:03Z","file_size":102080,"is_arm64e":true,"min_os":"26.1.0","name":"path_helper","platform":"macOS","sdk":"26.1.0","sha256":"9d6e556a3e640df3d48a73dbbb7f0efeadd1995e61c49095ccc74d8bb81b6175","sha256_slice":"014888de082a5cf12898ce1a657cbf23c783a46af364cf902f46f871a67bc028","source_version":"326.0.0.0.0","team_id":null,"uuid":"A9BF8E61-E8D2-3778-9DEF-0BD8A4B4EB9E"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":5,"imports":[{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_fail"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"asprintf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"err"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"exit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fclose"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fgetln"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fopen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fts_close"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fts_open"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fts_read"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fts_set"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fwrite"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getenv"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getopt"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"malloc_type_calloc"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"perror"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"printf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"reallocf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strchr"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strcoll"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strdup"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strlcat"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strlen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strstr"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strtol"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"warn"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_guard"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"optind"}],"interesting_strings":{"bundle_ids":["com.apple.path_helper"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":5,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1264,"protection":"r-x","segment":"__TEXT","size":1656},{"name":"__auth_stubs","offset":2920,"protection":"r-x","segment":"__TEXT","size":416},{"name":"__const","offset":3336,"protection":"r-x","segment":"__TEXT","size":64},{"name":"__cstring","offset":3400,"protection":"r-x","segment":"__TEXT","size":237},{"name":"__unwind_info","offset":3640,"protection":"r-x","segment":"__TEXT","size":112},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":208},{"name":"__got","offset":16592,"protection":"rw-","segment":"__DATA_CONST","size":24}],"summary":"Executes signed operations involving a single framework bundle and manages network communication across six distinct endpoints. Contains five primary functions that process URLs and network endpoints, suggesting a role in system service orchestration or verification. The presence of multiple network endpoints indicates it communicates with remote services, possibly for validation, synchronization, or system health checks. Runs as an Apple-signed binary with minimal privileged framework dependencies.","swift_metadata":null,"title":"Apple system utility — handles signed framework operations and network communication","total_strings":169,"xpc_services":[]}