{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294969704":[{"is_tail_call":false,"symbol":"$ss27_stringCompareWithSmolCheck__9expectingSbs11_StringGutsV_ADs01_G16ComparisonResultOtF","target_va":4294969948},{"is_tail_call":false,"symbol":"_swift_FORCE_LOAD_$_swiftCoreFoundation","target_va":4294969964},{"is_tail_call":false,"symbol":"_swift_FORCE_LOAD_$_swiftFoundation","target_va":4294970012},{"is_tail_call":false,"symbol":"SymptomDistribution.NDFDaemon (metadata accessor)","target_va":4294969932},{"is_tail_call":false,"symbol":"_swift_FORCE_LOAD_$_swiftDispatch","target_va":4294969996},{"is_tail_call":false,"symbol":"SymptomDistribution.NDFDaemon.isAgent","target_va":4294969916},{"is_tail_call":false,"symbol":"SymptomDistribution.NDFDaemon.start","target_va":4294969900},{"is_tail_call":false,"symbol":"$ss11CommandLineO9argumentsSaySSGvgZ","target_va":4294969980}]},"data_xrefs":{"by_data":{"4294983680":[4294969704],"4294983688":[4294969704],"4294983696":[4294969704],"4294983704":[4294969704],"4294983712":[4294969704],"4294983720":[4294969704],"4294983728":[4294969704],"4294983736":[4294969704]},"by_function":{"4294969704":[{"data_va":4294983680,"insn_va":4294969904,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969908,"kind":"Global","value":null},{"data_va":4294983688,"insn_va":4294969920,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969924,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294969936,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969940,"kind":"Global","value":null},{"data_va":4294983712,"insn_va":4294969952,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969956,"kind":"Global","value":null},{"data_va":4294983720,"insn_va":4294969968,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969972,"kind":"Global","value":null},{"data_va":4294983704,"insn_va":4294969984,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969988,"kind":"Global","value":null},{"data_va":4294983728,"insn_va":4294970000,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970004,"kind":"Global","value":null},{"data_va":4294983736,"insn_va":4294970016,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970020,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294969704":"sub_100000968"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"523a0d7f7bd40fc06819f67b216275a531240c25957c5a52e38f0cb87a677d85","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.symptomsd-distributed","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"5af592d286c98bb3d4362fa4df7ba38b8b31bf3cdd86d9084892d602b8a43d3e","frameworkhash":"ab4ce2b591b8869b7b654a0fb5b01f300831213ce2ecc8bcba776c5aeac88823","imphash":"25e40f99a1d7b347f9e6df2495888b789cc1c92fe5705b26df4079ba182e1cee","sha256_text":"ffef09c421305ce2ead1d047626ed159a62173e373f6d3fa2603a756fea170bc","symbolhash":"25e40f99a1d7b347f9e6df2495888b789cc1c92fe5705b26df4079ba182e1cee"},"sets":{"apis_called":["$ss11CommandLineO9argumentsSaySSGvgZ","$ss27_stringCompareWithSmolCheck__9expectingSbs11_StringGutsV_ADs01_G16ComparisonResultOtF","SymptomDistribution.NDFDaemon (metadata accessor)","SymptomDistribution.NDFDaemon.isAgent","SymptomDistribution.NDFDaemon.start","_swift_FORCE_LOAD_$_swiftCoreFoundation","_swift_FORCE_LOAD_$_swiftDispatch","_swift_FORCE_LOAD_$_swiftFoundation"],"bundle_ids":["(com.apple.developer.networking.multicast",",com.apple.private.application-service-browse","<key>com.apple.developer.networking.multicast</key>","<key>com.apple.private.application-service-browse</key>","<string>com.apple.compilers.llvm.clang.1_0</string>","<string>com.apple.symptomsd-distributed</string>","com.apple.symptomsd-distributed","com.apple.symptomsd-distributed0-"],"cpp_classes":[],"entitlements":["application-identifier","com.apple.developer.networking.multicast","com.apple.private.application-service-browse"],"frameworks":["Foundation","SymptomDistribution","libobjc.A.dylib","libSystem.B.dylib","libswiftCore.dylib","libswiftCoreFoundation.dylib","libswiftDispatch.dylib","libswiftIOKit.dylib","libswiftObjectiveC.dylib","libswiftXPC.dylib","libswift_Builtin_float.dylib","libswiftos.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":["SymptomDistribution"],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":["com.apple.symptomsd-distributed"]},"vector":{"bundle_ids":8,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":3,"file_paths":2,"frameworks_private":1,"frameworks_total":12,"iokit_constants":0,"library_functions":0,"nlist_functions":1,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":10,"size_log2":16.64948,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.0019066148,"url_endpoints":5,"xpc_provides":1}},"dwarf_metadata":null,"entitlements":{"entries":{"application-identifier":{"String":"com.apple.symptomsd-distributed"},"com.apple.developer.networking.multicast":{"Bool":true},"com.apple.private.application-service-browse":{"Bool":true}},"raw_plist":"<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>application-identifier</key>\n\t<string>com.apple.symptomsd-distributed</string>\n\t<key>com.apple.developer.networking.multicast</key>\n\t<true/>\n\t<key>com.apple.private.application-service-browse</key>\n\t<true/>\n</dict>\n</plist>\n"},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-09T10:07:24Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"523a0d7f7bd40fc06819f67b216275a531240c25957c5a52e38f0cb87a677d85","file_modified":"2026-04-09T10:07:24Z","file_size":102800,"is_arm64e":true,"min_os":"26.1.0","name":"symptomsd-distributed","platform":"macOS","sdk":"26.1.0","sha256":"d8564c1d7d4ece7e9dd89b593e4db84e46c8bcd549a8f7713813f99b6ad26ca1","sha256_slice":"ab0a74909d51ee3e3cdfffb731cc8b5237770bb9b501cc85310c32df332e5e38","source_version":"2158.40.9.0.0","team_id":null,"uuid":"A3227673-D592-3A22-96FD-5EEFF46EDFAA"},"frameworks":[{"is_private":false,"is_weak":true,"name":"/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation"},{"is_private":true,"is_weak":false,"name":"/System/Library/PrivateFrameworks/SymptomDistribution.framework/Versions/A/SymptomDistribution"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libobjc.A.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/swift/libswiftCore.dylib"},{"is_private":false,"is_weak":true,"name":"/usr/lib/swift/libswiftCoreFoundation.dylib"},{"is_private":false,"is_weak":true,"name":"/usr/lib/swift/libswiftDispatch.dylib"},{"is_private":false,"is_weak":true,"name":"/usr/lib/swift/libswiftIOKit.dylib"},{"is_private":false,"is_weak":true,"name":"/usr/lib/swift/libswiftObjectiveC.dylib"},{"is_private":false,"is_weak":true,"name":"/usr/lib/swift/libswiftXPC.dylib"},{"is_private":false,"is_weak":true,"name":"/usr/lib/swift/libswift_Builtin_float.dylib"},{"is_private":false,"is_weak":true,"name":"/usr/lib/swift/libswiftos.dylib"}],"function_starts_count":1,"imports":[{"address":0,"dylib":"/System/Library/PrivateFrameworks/SymptomDistribution.framework/Versions/A/SymptomDistribution","is_lazy":false,"is_weak":false,"name":"$s19SymptomDistribution9NDFDaemonC5startyyFTj"},{"address":0,"dylib":"/System/Library/PrivateFrameworks/SymptomDistribution.framework/Versions/A/SymptomDistribution","is_lazy":false,"is_weak":false,"name":"$s19SymptomDistribution9NDFDaemonC7isAgentACSb_tcfc"},{"address":0,"dylib":"/System/Library/PrivateFrameworks/SymptomDistribution.framework/Versions/A/SymptomDistribution","is_lazy":false,"is_weak":false,"name":"$s19SymptomDistribution9NDFDaemonCMa"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"dispatch_main"},{"address":0,"dylib":"/usr/lib/swift/libswiftCore.dylib","is_lazy":false,"is_weak":false,"name":"$ss11CommandLineO9argumentsSaySSGvgZ"},{"address":0,"dylib":"/usr/lib/swift/libswiftCore.dylib","is_lazy":false,"is_weak":false,"name":"$ss27_stringCompareWithSmolCheck__9expectingSbs11_StringGutsV_ADs01_G16ComparisonResultOtF"},{"address":0,"dylib":"/usr/lib/swift/libswiftCore.dylib","is_lazy":false,"is_weak":false,"name":"swift_allocObject"},{"address":0,"dylib":"/usr/lib/swift/libswiftCore.dylib","is_lazy":false,"is_weak":false,"name":"swift_bridgeObjectRelease"}],"interesting_strings":{"bundle_ids":["(com.apple.developer.networking.multicast",",com.apple.private.application-service-browse","<key>com.apple.developer.networking.multicast</key>","<key>com.apple.private.application-service-browse</key>","<string>com.apple.compilers.llvm.clang.1_0</string>","<string>com.apple.symptomsd-distributed</string>","com.apple.symptomsd-distributed","com.apple.symptomsd-distributed0-"],"file_paths":["/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation","/System/Library/PrivateFrameworks/SymptomDistribution.framework/Versions/A/SymptomDistribution"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","<string>com.apple.compilers.llvm.clang.1_0</string>","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":1,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Hostname","value":"macosx26.1.internal"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"}],"has_network_entitlement":false,"network_frameworks":["Foundation","libswiftCoreFoundation.dylib"]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":2408,"protection":"r-x","segment":"__TEXT","size":196},{"name":"__auth_stubs","offset":2604,"protection":"r-x","segment":"__TEXT","size":128},{"name":"__swift5_entry","offset":2732,"protection":"r-x","segment":"__TEXT","size":8},{"name":"__const","offset":2740,"protection":"r-x","segment":"__TEXT","size":2},{"name":"__info_plist","offset":2742,"protection":"r-x","segment":"__TEXT","size":1148},{"name":"__unwind_info","offset":3892,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":64},{"name":"__const","offset":16448,"protection":"rw-","segment":"__DATA_CONST","size":64},{"name":"__objc_imageinfo","offset":16512,"protection":"rw-","segment":"__DATA_CONST","size":8},{"name":"__common","offset":0,"protection":"rw-","segment":"__DATA","size":16}],"summary":"Coordinates system configuration updates across local and remote services through XPC interfaces. Monitors network endpoints and manages device settings state, communicating with multiple Apple services for configuration synchronization. Accesses file system paths and references multiple bundle identifiers to route configuration changes to appropriate system components. Operates as a background daemon with limited user interaction.","swift_metadata":null,"title":"System configuration daemon — manages network and device settings synchronization","total_strings":193,"xpc_services":["com.apple.symptomsd-distributed"]}