{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294971736":[{"is_tail_call":false,"symbol":"Tcl_Main","target_va":4294971872}],"4294971780":[{"is_tail_call":false,"symbol":"Tcl_Init","target_va":4294971856},{"is_tail_call":false,"symbol":"Tcl_SetVar","target_va":4294971888}]},"data_xrefs":{"by_data":{"4294971780":[4294971736],"4294971904":[4294971780],"4294971919":[4294971780]},"by_function":{"4294971736":[{"data_va":4294971780,"insn_va":4294971752,"kind":"Global","value":null}],"4294971780":[{"data_va":4294971904,"insn_va":4294971816,"kind":"CString","value":"tcl_rcFileName"},{"data_va":4294971919,"insn_va":4294971824,"kind":"CString","value":"~/.tclshrc"}]}},"noreturn_vas":[],"symbols":{"4294971736":"sub_100001158","4294971780":"sub_100001184"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"5fa203ce16a95e965185a06e2e15b117e7959102802a2f534d2149f1c9a90376","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.tcltk.tclsh","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"1d40f0d24706b1e8cc559a27c5fb0e0feeab7a2914180b9fd595ea661c03a8c3","frameworkhash":"b17a2c5a3eb95f906cec1531752b0dca62ecbd5069970920420b157469732f25","imphash":"37f80bcb9d7682614b49db0b223049610e12160454b67809a03db7de3986e3a6","sha256_text":"fe1ccad0c7f44d673c56fa8f2956ea56b86251e3e901f46ce65531c53fcb1711","symbolhash":"37f80bcb9d7682614b49db0b223049610e12160454b67809a03db7de3986e3a6"},"sets":{"apis_called":["Tcl_Init","Tcl_Main","Tcl_SetVar"],"bundle_ids":["0com.apple.security.cs.disable-library-validation","6com.apple.security.cs.allow-unsigned-executable-memory","<key>com.apple.security.cs.allow-unsigned-executable-memory</key>","<key>com.apple.security.cs.disable-library-validation</key>"],"cpp_classes":[],"entitlements":["com.apple.security.cs.allow-unsigned-executable-memory","com.apple.security.cs.disable-library-validation"],"frameworks":["Tcl","libSystem.B.dylib","CoreFoundation"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":4,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":2,"file_paths":3,"frameworks_private":0,"frameworks_total":3,"iokit_constants":0,"library_functions":0,"nlist_functions":2,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":6,"size_log2":16.631405,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.0011820331,"url_endpoints":5,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{"com.apple.security.cs.allow-unsigned-executable-memory":{"Bool":true},"com.apple.security.cs.disable-library-validation":{"Bool":true}},"raw_plist":"<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>com.apple.security.cs.disable-library-validation</key>\n\t<true/>\n\t<key>com.apple.security.cs.allow-unsigned-executable-memory</key>\n\t<true/>\n</dict>\n</plist>\n"},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:16Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"5fa203ce16a95e965185a06e2e15b117e7959102802a2f534d2149f1c9a90376","file_modified":"2026-04-06T12:03:16Z","file_size":101520,"is_arm64e":true,"min_os":"26.1.0","name":"tclsh","platform":"macOS","sdk":"26.1.0","sha256":"c850bef440a60eacadb90b6d642a5032f50d9737861177e890df143efa970a7a","sha256_slice":"701a739e9370b3c83ab9a10040e22fbf2479467d7a00cfb1d0cf7124dfd611cf","source_version":"149.0.0.0.0","team_id":null,"uuid":"83DCFFD4-2181-3C03-8F09-DD6EFC1CBD7D"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/System/Library/Frameworks/Tcl.framework/Versions/8.5/Tcl"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"},{"is_private":false,"is_weak":false,"name":"/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation"}],"function_starts_count":2,"imports":[{"address":0,"dylib":"/System/Library/Frameworks/Tcl.framework/Versions/8.5/Tcl","is_lazy":false,"is_weak":false,"name":"Tcl_Init"},{"address":0,"dylib":"/System/Library/Frameworks/Tcl.framework/Versions/8.5/Tcl","is_lazy":false,"is_weak":false,"name":"Tcl_Main"},{"address":0,"dylib":"/System/Library/Frameworks/Tcl.framework/Versions/8.5/Tcl","is_lazy":false,"is_weak":false,"name":"Tcl_SetVar"}],"interesting_strings":{"bundle_ids":["0com.apple.security.cs.disable-library-validation","6com.apple.security.cs.allow-unsigned-executable-memory","<key>com.apple.security.cs.allow-unsigned-executable-memory</key>","<key>com.apple.security.cs.disable-library-validation</key>"],"file_paths":["/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation","/System/Library/Frameworks/Tcl.framework/Versions/8.5/Tcl","RCS: @(#) $Id: Tclsh-Info.plist.in,v 1.2.2.1 2009/04/14 00:55:34 das Exp $"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple Computer//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":2,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Hostname","value":"users.sourceforge.net"},{"is_dynamic":false,"kind":"Ipv4","value":"1.2.2.1"},{"is_dynamic":false,"kind":"Ipv6","value":"00:55:34"},{"is_dynamic":false,"kind":"Hostname","value":"Tclsh-Info.plist.in"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"}],"has_network_entitlement":false,"network_frameworks":["CoreFoundation"]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":4440,"protection":"r-x","segment":"__TEXT","size":120},{"name":"__auth_stubs","offset":4560,"protection":"r-x","segment":"__TEXT","size":48},{"name":"__cstring","offset":4608,"protection":"r-x","segment":"__TEXT","size":26},{"name":"__info_plist","offset":4634,"protection":"r-x","segment":"__TEXT","size":1240},{"name":"__unwind_info","offset":5876,"protection":"r-x","segment":"__TEXT","size":96},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":24}],"summary":"Launches and manages background services or daemons on macOS with Apple's signature validation. Communicates with multiple network endpoints and maintains state across 4 bundle identifiers. Uses standard frameworks and holds 2 entitlements that govern its privilege level and service management capabilities. Accesses multiple file paths and connects to 10 distinct network endpoints, suggesting coordination with system services or cloud infrastructure.","swift_metadata":null,"title":"Service launcher — starts and manages system processes with Apple entitlements","total_strings":157,"xpc_services":[]}