{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968712":[{"is_tail_call":false,"symbol":"getenv","target_va":4294969452},{"is_tail_call":false,"symbol":"exit","target_va":4294969420},{"is_tail_call":false,"symbol":"err","target_va":4294969404},{"is_tail_call":false,"symbol":"fwrite","target_va":4294969436},{"is_tail_call":false,"symbol":"stat","target_va":4294969580},{"is_tail_call":false,"symbol":"getuid","target_va":4294969484},{"is_tail_call":false,"symbol":"access","target_va":4294969388},{"is_tail_call":false,"symbol":"malloc_type_malloc","target_va":4294969500},{"is_tail_call":false,"symbol":"stat","target_va":4294969580},{"is_tail_call":false,"symbol":"snprintf","target_va":4294969564},{"is_tail_call":false,"symbol":"sub_100000778","target_va":4294969208},{"is_tail_call":false,"symbol":"strchr","target_va":4294969596},{"is_tail_call":false,"symbol":"optind","target_va":4294969532},{"is_tail_call":false,"symbol":"sub_100000778","target_va":4294969208},{"is_tail_call":false,"symbol":"err","target_va":4294969404}],"4294969208":[{"is_tail_call":false,"symbol":"__stderrp","target_va":4294969372},{"is_tail_call":false,"symbol":"puts","target_va":4294969548},{"is_tail_call":false,"symbol":"getopt","target_va":4294969468},{"is_tail_call":false,"symbol":"memcpy","target_va":4294969516}]},"data_xrefs":{"by_data":{"4294967297":[4294968712],"4294967324":[4294968712],"4294967328":[4294968712],"4294969682":[4294968712],"4294969685":[4294968712],"4294969690":[4294968712],"4294969722":[4294968712],"4294969724":[4294968712],"4294969726":[4294968712],"4294983680":[4294968712],"4294983800":[4294968712],"4294983808":[4294968712],"4295000064":[4294968712],"4295000068":[4294968712]},"by_function":{"4294968712":[{"data_va":4294969682,"insn_va":4294968760,"kind":"CString","value":"as"},{"data_va":4295000064,"insn_va":4294968768,"kind":"Global","value":null},{"data_va":4295000068,"insn_va":4294968780,"kind":"Global","value":null},{"data_va":4294983808,"insn_va":4294968844,"kind":"Global","value":null},{"data_va":4294983800,"insn_va":4294968864,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294968868,"kind":"Global","value":null},{"data_va":4294969690,"insn_va":4294968876,"kind":"CString","value":"usage: which [-as] program ...\n"},{"data_va":4294969685,"insn_va":4294968904,"kind":"CString","value":"PATH"},{"data_va":4294967297,"insn_va":4294968928,"kind":"Global","value":null},{"data_va":4294969722,"insn_va":4294968980,"kind":"CString","value":null},{"data_va":4294969724,"insn_va":4294968992,"kind":"CString","value":null},{"data_va":4294969726,"insn_va":4294969000,"kind":"CString","value":"%s/%s"},{"data_va":4294967297,"insn_va":4294969004,"kind":"Global","value":null},{"data_va":4294967328,"insn_va":4294969136,"kind":"Global","value":null},{"data_va":4294967328,"insn_va":4294969160,"kind":"Global","value":null},{"data_va":4294967324,"insn_va":4294969200,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294968712":"sub_100000588","4294969208":"sub_100000778"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"11d42a16f5b3d2113a4d0f1a42bc29422544844a33ddd2dbb494691759760de2","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.which","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"b97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed","imphash":"9338206076c803d3baa3450fc3d69d375d78a19d6f3a77858e089f8e5faa9fd4","sha256_text":"eba97cdf9c3ec23ba3e22471026bbffcc35483b57deb0d2e398c282c0a257eec","symbolhash":"9338206076c803d3baa3450fc3d69d375d78a19d6f3a77858e089f8e5faa9fd4"},"sets":{"apis_called":["__stderrp","access","err","exit","fwrite","getenv","getopt","getuid","malloc_type_malloc","memcpy","optind","puts","snprintf","stat","strchr","sub_100000778"],"bundle_ids":["com.apple.which"],"cpp_classes":[],"entitlements":[],"frameworks":["libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":1,"iokit_constants":0,"library_functions":0,"nlist_functions":2,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":8,"size_log2":16.630495,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.006505283,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:17Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"11d42a16f5b3d2113a4d0f1a42bc29422544844a33ddd2dbb494691759760de2","file_modified":"2026-04-06T12:06:43Z","file_size":101456,"is_arm64e":true,"min_os":"26.1.0","name":"which","platform":"macOS","sdk":"26.1.0","sha256":"fd4f88d8a89a2fd5e600d1ba121e4ae7c6ddb3525d3a393fb5e0a9755204a165","sha256_slice":"5026f783afe397d216a56f10bfef9b3d3a9de6dc12b73445600f476d21f89505","source_version":"326.0.0.0.0","team_id":null,"uuid":"A62F472B-2673-3810-A28C-327182A86DC4"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":2,"imports":[{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"access"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"err"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"exit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fwrite"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getenv"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getopt"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getuid"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"malloc_type_malloc"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"memcpy"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"puts"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"snprintf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"stat"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strchr"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strlen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strsep"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"optind"}],"interesting_strings":{"bundle_ids":["com.apple.which"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":2,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1416,"protection":"r-x","segment":"__TEXT","size":660},{"name":"__auth_stubs","offset":2076,"protection":"r-x","segment":"__TEXT","size":240},{"name":"__const","offset":2320,"protection":"r-x","segment":"__TEXT","size":66},{"name":"__cstring","offset":2386,"protection":"r-x","segment":"__TEXT","size":50},{"name":"__unwind_info","offset":2436,"protection":"r-x","segment":"__TEXT","size":96},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":120},{"name":"__got","offset":16504,"protection":"rw-","segment":"__DATA_CONST","size":16},{"name":"__bss","offset":0,"protection":"rw-","segment":"__DATA","size":5}],"summary":"Establishes network connections to six remote endpoints, likely for configuration retrieval, telemetry, or service communication. References bundle identifiers and processes application metadata. The minimal function count and small binary size suggest a focused utility for system integration tasks. Compiled for both Intel and Apple Silicon architectures.","swift_metadata":null,"title":"System utility — connects to remote services and manages application bundles","total_strings":138,"xpc_services":[]}