{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968792":[{"is_tail_call":false,"symbol":"getopt","target_va":4294970312},{"is_tail_call":false,"symbol":"fread","target_va":4294970264},{"is_tail_call":false,"symbol":"fread","target_va":4294970264},{"is_tail_call":false,"symbol":"exit","target_va":4294970184},{"is_tail_call":false,"symbol":"devname","target_va":4294970152},{"is_tail_call":false,"symbol":"fprintf","target_va":4294970248}]},"data_xrefs":{"by_data":{"4294970594":[4294968792],"4294970612":[4294968792],"4294970616":[4294968792],"4294983680":[4294968792],"4294983848":[4294968792],"4294983864":[4294968792],"4294983872":[4294968792]},"by_function":{"4294968792":[{"data_va":4294983848,"insn_va":4294968848,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968852,"kind":"Global","value":null},{"data_va":4294970612,"insn_va":4294968872,"kind":"CString","value":"f:w"},{"data_va":4294970594,"insn_va":4294968892,"kind":"CString","value":"/var/account/acct"},{"data_va":4294983864,"insn_va":4294968908,"kind":"Global","value":null},{"data_va":4294970612,"insn_va":4294968916,"kind":"CString","value":"f:w"},{"data_va":4294983680,"insn_va":4294968944,"kind":"Global","value":null},{"data_va":4294983872,"insn_va":4294969012,"kind":"Global","value":null},{"data_va":4294970616,"insn_va":4294969024,"kind":"CString","value":null},{"data_va":4294983848,"insn_va":4294969112,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969116,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294968792":"sub_1000005d8"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"cdea82245d515c9c47872ac143623ef14e8649a1898c4e1801ecaf5e4a0ace88","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.lastcomm","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"b97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed","imphash":"964439a1901135a91c38f527b7743fd476839e39833dd0f939dcc3635e6fb16e","sha256_text":"7c8dc2ba3d28624416e36575ce155018ce32714e8b05915a31b6a91e96472324","symbolhash":"964439a1901135a91c38f527b7743fd476839e39833dd0f939dcc3635e6fb16e"},"sets":{"apis_called":["devname","exit","fprintf","fread","getopt"],"bundle_ids":["com.apple.lastcomm"],"cpp_classes":[],"entitlements":[],"frameworks":["libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":1,"frameworks_private":0,"frameworks_total":1,"iokit_constants":0,"library_functions":0,"nlist_functions":1,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":9,"size_log2":16.853115,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.010677119,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:16Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"cdea82245d515c9c47872ac143623ef14e8649a1898c4e1801ecaf5e4a0ace88","file_modified":"2026-04-06T11:53:18Z","file_size":118384,"is_arm64e":true,"min_os":"26.1.0","name":"lastcomm","platform":"macOS","sdk":"26.1.0","sha256":"db9fcb6b6c63f26e803724f4f0d6cb0f8c71e80d3d21b82f8dcd26c829fb55a5","sha256_slice":"471a10a2f049382d5831ea765692d27c793135805f0f67b10cf4dad96da4560f","source_version":"326.0.0.0.0","team_id":null,"uuid":"C05DFDF0-ED0F-382A-8060-E3F15959439B"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":1,"imports":[{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__maskrune"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_fail"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"ctime"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"devname"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"err"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"exit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fileno"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fmod"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fopen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fprintf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fread"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fseeko"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fstat"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getopt"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getprogname"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"printf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"setprogname"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strcmp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strncmp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"user_from_uid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"_DefaultRuneLocale"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_guard"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"optarg"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"optind"}],"interesting_strings":{"bundle_ids":["com.apple.lastcomm"],"file_paths":["/var/account/acct"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":1,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Ipv6","value":"21:53:42"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1496,"protection":"r-x","segment":"__TEXT","size":1264},{"name":"__auth_stubs","offset":2760,"protection":"r-x","segment":"__TEXT","size":320},{"name":"__const","offset":3080,"protection":"r-x","segment":"__TEXT","size":218},{"name":"__cstring","offset":3298,"protection":"r-x","segment":"__TEXT","size":166},{"name":"__unwind_info","offset":3464,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":160},{"name":"__got","offset":16544,"protection":"rw-","segment":"__DATA_CONST","size":40},{"name":"__data","offset":32768,"protection":"rw-","segment":"__DATA","size":20},{"name":"__bss","offset":0,"protection":"rw-","segment":"__DATA","size":8}],"summary":"A signed Apple executable that handles network communication through multiple endpoints. Contains bundle identifiers and file path references that direct its initialization and service discovery. Connects to 7 distinct network endpoints, likely for service registration, health checks, or inter-process communication within Apple's system architecture. The minimal function count and endpoint pattern suggest it acts as a connector or daemon managing system services rather than a user-facing application.","swift_metadata":null,"title":"Apple system component — manages signed service communication","total_strings":163,"xpc_services":[]}