{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294969344":[{"is_tail_call":false,"symbol":"objc_msgSend$sharedInstance","target_va":4294969408},{"is_tail_call":false,"symbol":"objc_msgSend$start","target_va":4294969440},{"is_tail_call":false,"symbol":"OBJC_CLASS_$_FigCaptureCMIOExtensionProvider","target_va":4294969388}]},"data_xrefs":{"by_data":{"4294983696":[4294969344]},"by_function":{"4294969344":[{"data_va":4294983696,"insn_va":4294969360,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294969344":"sub_100000800"}},"capabilities":[{"category":"Hardware","description":"Exception: access additional IOKit user clients","source":"com.apple.security.exception.iokit-user-client-class","value":{"StringArray":["IOSurfaceRootUserClient","RootDomainUserClient","AppleH13CamInUserClient"]}}],"code_signature":{"code_directory":{"cdhash":"1ad48fd05fe517bea93287148f36c925da507d404b32c00f4a5809b62b2f340f","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.cameracaptured","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"9093df2767d45b9f20c1b65e72f371746e5b3287bbabf617addd25d178e7670d","frameworkhash":"2cfdfdd1bd1510815f71626df101b06d1a06f66534cb4d3842c9af2256db4a4b","imphash":"fe40ca5398005b91dd6740065b55ea223a5fa06b2cc1ec01c272bdd612a3bf95","sha256_text":"7bb65788cbdfcf20a1e5fd41936c25986c3c246cce700abdc96e45e64fc94d5d","symbolhash":"fe40ca5398005b91dd6740065b55ea223a5fa06b2cc1ec01c272bdd612a3bf95"},"sets":{"apis_called":[],"bundle_ids":["!com.apple.pearl.iokit-user-access","\"com.apple.camera.iokit-user-access","%com.apple.private.applecamerad.client","&com.apple.TapToRadarKit.service-access","(com.apple.private.exclaves.conclave-host","(com.apple.systemstatus.publisher.domains0",",com.apple.hid.manager.user-access-privileged","-com.apple.security.exception.sysctl.read-only0@",".com.apple.ane.memoryUnwiringOptOutAccess.allow",".com.apple.private.cmio.extension.configuration","2com.apple.private.tcc.manager.check-by-audit-token0","4com.apple.security.exception.iokit-user-client-class0H","5com.apple.private.avfoundation.metadata-cameras.allow","<key>com.apple.TapToRadarKit.service-access</key>","<key>com.apple.ane.memoryUnwiringOptOutAccess.allow</key>","<key>com.apple.camera.iokit-user-access</key>","<key>com.apple.hid.manager.user-access-privileged</key>","<key>com.apple.pearl.iokit-user-access</key>","<key>com.apple.private.applecamerad.client</key>","<key>com.apple.private.avfoundation.metadata-cameras.allow</key>","<key>com.apple.private.cmio.extension.configuration</key>","<key>com.apple.private.exclaves.conclave-host</key>","<key>com.apple.private.tcc.allow</key>","<key>com.apple.private.tcc.manager.check-by-audit-token</key>","<key>com.apple.security.exception.iokit-user-client-class</key>","<key>com.apple.security.exception.sysctl.read-only</key>","<key>com.apple.security.temporary-exception.mach-lookup.global-name</key>","<key>com.apple.systemstatus.publisher.domains</key>","<string>com.apple.TapToRadarKit.service</string>","<string>com.apple.cameracaptured</string>","<string>com.apple.compilers.llvm.clang.1_0</string>",">com.apple.security.temporary-exception.mach-lookup.global-name0!","com.apple.TapToRadarKit.service03","com.apple.cameracaptured","com.apple.private.tcc.allow0."],"cpp_classes":[],"entitlements":["com.apple.TapToRadarKit.service-access","com.apple.ane.memoryUnwiringOptOutAccess.allow","com.apple.camera.iokit-user-access","com.apple.hid.manager.user-access-privileged","com.apple.pearl.iokit-user-access","com.apple.private.applecamerad.client","com.apple.private.avfoundation.metadata-cameras.allow","com.apple.private.cmio.extension.configuration","com.apple.private.exclaves.conclave-host","com.apple.private.tcc.allow","com.apple.private.tcc.manager.check-by-audit-token","com.apple.security.exception.iokit-user-client-class","com.apple.security.exception.sysctl.read-only","com.apple.security.temporary-exception.mach-lookup.global-name","com.apple.systemstatus.publisher.domains"],"frameworks":["CoreMedia","CMCapture","Foundation","libobjc.A.dylib","libSystem.B.dylib","CoreFoundation"],"iokit_constants":[],"objc_classes":[],"private_frameworks":["CMCapture"],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":["com.apple.TapToRadarKit.service03","com.apple.cameracaptured"]},"vector":{"bundle_ids":35,"cap_analytics":0,"cap_hardware":1,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":15,"file_paths":4,"frameworks_private":1,"frameworks_total":6,"iokit_constants":0,"library_functions":0,"nlist_functions":1,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":10,"size_log2":17.060696,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.0003218633,"url_endpoints":5,"xpc_provides":2}},"dwarf_metadata":null,"entitlements":{"entries":{"com.apple.TapToRadarKit.service-access":{"Bool":true},"com.apple.ane.memoryUnwiringOptOutAccess.allow":{"Bool":true},"com.apple.camera.iokit-user-access":{"Bool":true},"com.apple.hid.manager.user-access-privileged":{"Bool":true},"com.apple.pearl.iokit-user-access":{"Bool":true},"com.apple.private.applecamerad.client":{"Bool":true},"com.apple.private.avfoundation.metadata-cameras.allow":{"Bool":true},"com.apple.private.cmio.extension.configuration":{"Bool":true},"com.apple.private.exclaves.conclave-host":{"Bool":true},"com.apple.private.tcc.allow":{"StringArray":["kTCCServiceListenEvent","kTCCServicePostEvent"]},"com.apple.private.tcc.manager.check-by-audit-token":{"StringArray":["kTCCServiceCamera"]},"com.apple.security.exception.iokit-user-client-class":{"StringArray":["IOSurfaceRootUserClient","RootDomainUserClient","AppleH13CamInUserClient"]},"com.apple.security.exception.sysctl.read-only":{"StringArray":["kern.stackshot_stats","kern.exclaves_status","kern.task_conclave"]},"com.apple.security.temporary-exception.mach-lookup.global-name":{"StringArray":["com.apple.TapToRadarKit.service"]},"com.apple.systemstatus.publisher.domains":{"StringArray":["media"]}},"raw_plist":"<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>com.apple.TapToRadarKit.service-access</key>\n\t<true/>\n\t<key>com.apple.ane.memoryUnwiringOptOutAccess.allow</key>\n\t<true/>\n\t<key>com.apple.camera.iokit-user-access</key>\n\t<true/>\n\t<key>com.apple.hid.manager.user-access-privileged</key>\n\t<true/>\n\t<key>com.apple.pearl.iokit-user-access</key>\n\t<true/>\n\t<key>com.apple.private.applecamerad.client</key>\n\t<true/>\n\t<key>com.apple.private.avfoundation.metadata-cameras.allow</key>\n\t<true/>\n\t<key>com.apple.private.cmio.extension.configuration</key>\n\t<true/>\n\t<key>com.apple.private.exclaves.conclave-host</key>\n\t<true/>\n\t<key>com.apple.private.tcc.allow</key>\n\t<array>\n\t\t<string>kTCCServiceListenEvent</string>\n\t\t<string>kTCCServicePostEvent</string>\n\t</array>\n\t<key>com.apple.private.tcc.manager.check-by-audit-token</key>\n\t<array>\n\t\t<string>kTCCServiceCamera</string>\n\t</array>\n\t<key>com.apple.security.exception.iokit-user-client-class</key>\n\t<array>\n\t\t<string>IOSurfaceRootUserClient</string>\n\t\t<string>RootDomainUserClient</string>\n\t\t<string>AppleH13CamInUserClient</string>\n\t</array>\n\t<key>com.apple.security.exception.sysctl.read-only</key>\n\t<array>\n\t\t<string>kern.stackshot_stats</string>\n\t\t<string>kern.exclaves_status</string>\n\t\t<string>kern.task_conclave</string>\n\t</array>\n\t<key>com.apple.security.temporary-exception.mach-lookup.global-name</key>\n\t<array>\n\t\t<string>com.apple.TapToRadarKit.service</string>\n\t</array>\n\t<key>com.apple.systemstatus.publisher.domains</key>\n\t<array>\n\t\t<string>media</string>\n\t</array>\n</dict>\n</plist>\n"},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-09T09:44:26Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"1ad48fd05fe517bea93287148f36c925da507d404b32c00f4a5809b62b2f340f","file_modified":"2026-04-09T09:44:26Z","file_size":136704,"is_arm64e":true,"min_os":"26.1.0","name":"cameracaptured","platform":"macOS","sdk":"26.1.0","sha256":"a143f030c9167283bb204a34ea09a6683d59cd3adc5842583c228e320319cbbd","sha256_slice":"08641cf5c7e4c5ba815e6a209623dab139a691fb5969d3847cd00999458a6ea0","source_version":"664.40.19.0.0","team_id":null,"uuid":"1202AA08-FA53-3BA8-9EDB-3CC3552907E7"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/System/Library/Frameworks/CoreMedia.framework/Versions/A/CoreMedia"},{"is_private":true,"is_weak":false,"name":"/System/Library/PrivateFrameworks/CMCapture.framework/Versions/A/CMCapture"},{"is_private":false,"is_weak":false,"name":"/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libobjc.A.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"},{"is_private":false,"is_weak":false,"name":"/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"}],"function_starts_count":1,"imports":[{"address":0,"dylib":"/usr/lib/libobjc.A.dylib","is_lazy":false,"is_weak":false,"name":"objc_msgSend"},{"address":0,"dylib":"/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation","is_lazy":false,"is_weak":false,"name":"CFRunLoopRun"},{"address":0,"dylib":"/System/Library/PrivateFrameworks/CMCapture.framework/Versions/A/CMCapture","is_lazy":false,"is_weak":false,"name":"OBJC_CLASS_$_FigCaptureCMIOExtensionProvider"}],"interesting_strings":{"bundle_ids":["!com.apple.pearl.iokit-user-access","\"com.apple.camera.iokit-user-access","%com.apple.private.applecamerad.client","&com.apple.TapToRadarKit.service-access","(com.apple.private.exclaves.conclave-host","(com.apple.systemstatus.publisher.domains0",",com.apple.hid.manager.user-access-privileged","-com.apple.security.exception.sysctl.read-only0@",".com.apple.ane.memoryUnwiringOptOutAccess.allow",".com.apple.private.cmio.extension.configuration","2com.apple.private.tcc.manager.check-by-audit-token0","4com.apple.security.exception.iokit-user-client-class0H","5com.apple.private.avfoundation.metadata-cameras.allow","<key>com.apple.TapToRadarKit.service-access</key>","<key>com.apple.ane.memoryUnwiringOptOutAccess.allow</key>","<key>com.apple.camera.iokit-user-access</key>","<key>com.apple.hid.manager.user-access-privileged</key>","<key>com.apple.pearl.iokit-user-access</key>","<key>com.apple.private.applecamerad.client</key>","<key>com.apple.private.avfoundation.metadata-cameras.allow</key>","<key>com.apple.private.cmio.extension.configuration</key>","<key>com.apple.private.exclaves.conclave-host</key>","<key>com.apple.private.tcc.allow</key>","<key>com.apple.private.tcc.manager.check-by-audit-token</key>","<key>com.apple.security.exception.iokit-user-client-class</key>","<key>com.apple.security.exception.sysctl.read-only</key>","<key>com.apple.security.temporary-exception.mach-lookup.global-name</key>","<key>com.apple.systemstatus.publisher.domains</key>","<string>com.apple.TapToRadarKit.service</string>","<string>com.apple.cameracaptured</string>","<string>com.apple.compilers.llvm.clang.1_0</string>",">com.apple.security.temporary-exception.mach-lookup.global-name0!","com.apple.TapToRadarKit.service03","com.apple.cameracaptured","com.apple.private.tcc.allow0."],"file_paths":["/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation","/System/Library/Frameworks/CoreMedia.framework/Versions/A/CoreMedia","/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation","/System/Library/PrivateFrameworks/CMCapture.framework/Versions/A/CMCapture"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","<string>com.apple.compilers.llvm.clang.1_0</string>","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":1,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Hostname","value":"macosx26.1.internal"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"}],"has_network_entitlement":false,"network_frameworks":["CoreFoundation","Foundation"]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":2048,"protection":"r-x","segment":"__TEXT","size":44},{"name":"__auth_stubs","offset":2092,"protection":"r-x","segment":"__TEXT","size":16},{"name":"__objc_stubs","offset":2112,"protection":"r-x","segment":"__TEXT","size":64},{"name":"__info_plist","offset":2176,"protection":"r-x","segment":"__TEXT","size":1547},{"name":"__objc_methname","offset":3723,"protection":"r-x","segment":"__TEXT","size":21},{"name":"__unwind_info","offset":3744,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":16},{"name":"__got","offset":16400,"protection":"rw-","segment":"__DATA_CONST","size":8},{"name":"__objc_imageinfo","offset":16408,"protection":"rw-","segment":"__DATA_CONST","size":8},{"name":"__objc_selrefs","offset":32768,"protection":"rw-","segment":"__DATA","size":16}],"summary":"Executes privileged hardware operations through IOKit user clients, with entitlement to access additional kernel interfaces beyond standard restrictions. Exposes functionality via two XPC services for inter-process communication with other system components. Connects to seven network endpoints and references 35 bundle identifiers, indicating integration with multiple macOS subsystems. The exception entitlement for IOKit access suggests direct hardware interaction or low-level device control not available to standard applications.","swift_metadata":null,"title":"System utility — accesses IOKit hardware interfaces with XPC service exposure","total_strings":248,"xpc_services":["com.apple.TapToRadarKit.service03","com.apple.cameracaptured"]}