[{"source":"filesystem","logical_path":"/usr/sbin/repquota","architecture":"arm64e","file_type":"EXECUTE","size":167296,"records":97},{"source":"filesystem","logical_path":"/usr/sbin/rotatelogs","architecture":"arm64e","file_type":"EXECUTE","size":185600,"records":182},{"source":"filesystem","logical_path":"/usr/sbin/rpc.lockd","architecture":"arm64e","file_type":"EXECUTE","size":370208,"records":660},{"source":"filesystem","logical_path":"/usr/sbin/rpc.statd","architecture":"arm64e","file_type":"EXECUTE","size":237744,"records":394},{"source":"filesystem","logical_path":"/usr/sbin/rpcbind","architecture":"arm64e","file_type":"EXECUTE","size":273792,"records":445},{"source":"filesystem","logical_path":"/usr/sbin/rpcinfo","architecture":"arm64e","file_type":"EXECUTE","size":251792,"records":294},{"source":"filesystem","logical_path":"/usr/sbin/rtadvd","architecture":"arm64e","file_type":"EXECUTE","size":317648,"records":489},{"source":"filesystem","logical_path":"/usr/sbin/sa","architecture":"arm64e","file_type":"EXECUTE","size":216720,"records":154},{"source":"filesystem","logical_path":"/usr/sbin/screencapture","architecture":"arm64e","file_type":"EXECUTE","size":3578432,"records":4008},{"source":"filesystem","logical_path":"/usr/sbin/scselect","architecture":"arm64e","file_type":"EXECUTE","size":185152,"records":130},{"source":"filesystem","logical_path":"/usr/sbin/scutil","architecture":"arm64e","file_type":"EXECUTE","size":889360,"records":2359},{"source":"filesystem","logical_path":"/usr/sbin/securityd","architecture":"arm64e","file_type":"EXECUTE","size":2026816,"records":1886},{"source":"filesystem","logical_path":"/usr/sbin/sendmail","architecture":"arm64e","file_type":"EXECUTE","size":861472,"records":2167},{"source":"filesystem","logical_path":"/usr/sbin/setkey","architecture":"arm64e","file_type":"EXECUTE","size":366992,"records":426},{"source":"filesystem","logical_path":"/usr/sbin/setquota","architecture":"arm64e","file_type":"EXECUTE","size":168000,"records":133},{"source":"filesystem","logical_path":"/usr/sbin/sharing","architecture":"arm64e","file_type":"EXECUTE","size":170032,"records":238},{"source":"filesystem","logical_path":"/usr/sbin/skywalkctl","architecture":"arm64e","file_type":"EXECUTE","size":614944,"records":2357},{"source":"filesystem","logical_path":"/usr/sbin/slapconfig","architecture":"arm64e","file_type":"EXECUTE","size":1704048,"records":4460},{"source":"filesystem","logical_path":"/usr/sbin/smbd","architecture":"arm64e","file_type":"EXECUTE","size":2944976,"records":4392},{"source":"filesystem","logical_path":"/usr/sbin/snmptrapd","architecture":"arm64e","file_type":"EXECUTE","size":238912,"records":348},{"source":"filesystem","logical_path":"/usr/sbin/sntpd","architecture":"arm64e","file_type":"EXECUTE","size":184704,"records":102},{"source":"filesystem","logical_path":"/usr/sbin/softwareupdate","architecture":"arm64e","file_type":"EXECUTE","size":476400,"records":1347},{"source":"filesystem","logical_path":"/usr/sbin/spctl","architecture":"arm64e","file_type":"EXECUTE","size":531552,"records":1530},{"source":"filesystem","logical_path":"/usr/sbin/spindump","architecture":"arm64e","file_type":"EXECUTE","size":3453808,"records":6782},{"source":"filesystem","logical_path":"/usr/sbin/spray","architecture":"arm64e","file_type":"EXECUTE","size":199680,"records":66},{"source":"filesystem","logical_path":"/usr/sbin/sshd","architecture":"arm64e","file_type":"EXECUTE","size":958480,"records":1592},{"source":"filesystem","logical_path":"/usr/sbin/sso_util","architecture":"arm64e","file_type":"EXECUTE","size":411920,"records":901},{"source":"filesystem","logical_path":"/usr/sbin/sysadminctl","architecture":"arm64e","file_type":"EXECUTE","size":289280,"records":544},{"source":"filesystem","logical_path":"/usr/sbin/sysctl","architecture":"arm64e","file_type":"EXECUTE","size":184624,"records":203},{"source":"filesystem","logical_path":"/usr/sbin/syslogd","architecture":"arm64e","file_type":"EXECUTE","size":510848,"records":1094},{"source":"filesystem","logical_path":"/usr/sbin/system_profiler","architecture":"arm64e","file_type":"EXECUTE","size":286544,"records":427},{"source":"filesystem","logical_path":"/usr/sbin/systemkeychain","architecture":"arm64e","file_type":"EXECUTE","size":331008,"records":514},{"source":"filesystem","logical_path":"/usr/sbin/systemsetup","architecture":"arm64e","file_type":"EXECUTE","size":342512,"records":1517},{"source":"filesystem","logical_path":"/usr/sbin/systemsoundserverd","architecture":"arm64e","file_type":"EXECUTE","size":561664,"records":842},{"source":"filesystem","logical_path":"/usr/sbin/systemstats","architecture":"arm64e","file_type":"EXECUTE","size":4488304,"records":14642},{"source":"filesystem","logical_path":"/usr/sbin/taskpolicy","architecture":"arm64e","file_type":"EXECUTE","size":185632,"records":189},{"source":"filesystem","logical_path":"/usr/sbin/tcpdump","architecture":"arm64e","file_type":"EXECUTE","size":3481680,"records":12886},{"source":"filesystem","logical_path":"/usr/sbin/traceroute","architecture":"arm64e","file_type":"EXECUTE","size":269936,"records":374},{"source":"filesystem","logical_path":"/usr/sbin/traceroute6","architecture":"arm64e","file_type":"EXECUTE","size":269856,"records":338},{"source":"filesystem","logical_path":"/usr/sbin/uasysdiagnose","architecture":"arm64e","file_type":"EXECUTE","size":268800,"records":252},{"source":"filesystem","logical_path":"/usr/sbin/universalaccessd","architecture":"arm64e","file_type":"EXECUTE","size":222928,"records":235},{"source":"filesystem","logical_path":"/usr/sbin/unsetpassword","architecture":"arm64e","file_type":"EXECUTE","size":168368,"records":124},{"source":"filesystem","logical_path":"/usr/sbin/usernoted","architecture":"arm64e","file_type":"EXECUTE","size":6223536,"records":4955},{"source":"filesystem","logical_path":"/usr/sbin/uuchk","architecture":"arm64e","file_type":"EXECUTE","size":334544,"records":459},{"source":"filesystem","logical_path":"/usr/sbin/uucico","architecture":"arm64e","file_type":"EXECUTE","size":804976,"records":1245},{"source":"filesystem","logical_path":"/usr/sbin/uuconv","architecture":"arm64e","file_type":"EXECUTE","size":383760,"records":441},{"source":"filesystem","logical_path":"/usr/sbin/uuxqt","architecture":"arm64e","file_type":"EXECUTE","size":438544,"records":688},{"source":"filesystem","logical_path":"/usr/sbin/vifs","architecture":"arm64e","file_type":"EXECUTE","size":199680,"records":65},{"source":"filesystem","logical_path":"/usr/sbin/vipw","architecture":"arm64e","file_type":"EXECUTE","size":217264,"records":134},{"source":"filesystem","logical_path":"/usr/sbin/visudo","architecture":"arm64e","file_type":"EXECUTE","size":1032944,"records":1522},{"source":"filesystem","logical_path":"/usr/sbin/vpnd","architecture":"arm64e","file_type":"EXECUTE","size":482032,"records":1149},{"source":"filesystem","logical_path":"/usr/sbin/vsdbutil","architecture":"arm64e","file_type":"EXECUTE","size":168112,"records":156},{"source":"filesystem","logical_path":"/usr/sbin/wfsctl","architecture":"arm64e","file_type":"EXECUTE","size":239200,"records":716},{"source":"filesystem","logical_path":"/usr/sbin/xartutil","architecture":"arm64e","file_type":"EXECUTE","size":219456,"records":219},{"source":"filesystem","logical_path":"/usr/sbin/xscertadmin","architecture":"arm64e","file_type":"EXECUTE","size":297712,"records":846},{"source":"filesystem","logical_path":"/usr/sbin/zdump","architecture":"arm64e","file_type":"EXECUTE","size":183872,"records":121},{"source":"filesystem","logical_path":"/usr/sbin/zic","architecture":"arm64e","file_type":"EXECUTE","size":316432,"records":334},{"source":"filesystem","logical_path":"/usr/share/sandbox/BTLEServer.sb","architecture":"","file_type":"SBPL source","size":3398,"records":82},{"source":"filesystem","logical_path":"/usr/share/sandbox/airportd.sb","architecture":"","file_type":"SBPL source","size":9865,"records":213},{"source":"filesystem","logical_path":"/usr/share/sandbox/bluetoothd.sb","architecture":"","file_type":"SBPL source","size":14686,"records":329},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.CommCenter.sb","architecture":"","file_type":"SBPL source","size":10004,"records":188},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.FontValidator.sb","architecture":"","file_type":"SBPL source","size":4491,"records":99},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.bootinstalld.sb","architecture":"","file_type":"SBPL source","size":3221,"records":58},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.ckdiscretionaryd.sb","architecture":"","file_type":"SBPL source","size":242,"records":9},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.cloudd.sb","architecture":"","file_type":"SBPL source","size":12166,"records":201},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.corespotlightservice.sb","architecture":"","file_type":"SBPL source","size":1711,"records":28},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.fontd.internal.sb","architecture":"","file_type":"SBPL source","size":4147,"records":96},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.fontd.support.sb","architecture":"","file_type":"SBPL source","size":3528,"records":97},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.managedcorespotlightd.sb","architecture":"","file_type":"SBPL source","size":2395,"records":42},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.mobileassetd.sb","architecture":"","file_type":"SBPL source","size":12926,"records":257},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.msrpc.lsarpc.sb","architecture":"","file_type":"SBPL source","size":666,"records":19},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.msrpc.mdssvc.sb","architecture":"","file_type":"SBPL source","size":654,"records":19},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.msrpc.netlogon.sb","architecture":"","file_type":"SBPL source","size":2475,"records":68},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.msrpc.srvsvc.sb","architecture":"","file_type":"SBPL source","size":690,"records":17},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.msrpc.wkssvc.sb","architecture":"","file_type":"SBPL source","size":553,"records":12},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.netbiosd.sb","architecture":"","file_type":"SBPL source","size":2616,"records":62},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.smbd.sb","architecture":"","file_type":"SBPL source","size":2038,"records":36},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.softwareupdated.sb","architecture":"","file_type":"SBPL source","size":7675,"records":135},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.taskgated-helper.sb","architecture":"","file_type":"SBPL source","size":3436,"records":63},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.xscertd-helper.sb","architecture":"","file_type":"SBPL source","size":2116,"records":48},{"source":"filesystem","logical_path":"/usr/share/sandbox/com.apple.xscertd.sb","architecture":"","file_type":"SBPL source","size":1065,"records":26},{"source":"filesystem","logical_path":"/usr/share/sandbox/cvmsCompAgent.sb","architecture":"","file_type":"SBPL source","size":490,"records":17},{"source":"filesystem","logical_path":"/usr/share/sandbox/cvmsServer.sb","architecture":"","file_type":"SBPL source","size":5112,"records":122},{"source":"filesystem","logical_path":"/usr/share/sandbox/fontmover.sb","architecture":"","file_type":"SBPL source","size":355,"records":5},{"source":"filesystem","logical_path":"/usr/share/sandbox/fontmoverinternal.sb","architecture":"","file_type":"SBPL source","size":894,"records":19},{"source":"filesystem","logical_path":"/usr/share/sandbox/fontworkerinternal.sb","architecture":"","file_type":"SBPL source","size":2019,"records":56},{"source":"filesystem","logical_path":"/usr/share/sandbox/ftp-proxy.sb","architecture":"","file_type":"SBPL source","size":744,"records":13},{"source":"filesystem","logical_path":"/usr/share/sandbox/gss-acceptor.sb","architecture":"","file_type":"SBPL source","size":1596,"records":31},{"source":"filesystem","logical_path":"/usr/share/sandbox/gss-initiator.sb","architecture":"","file_type":"SBPL source","size":1537,"records":30},{"source":"filesystem","logical_path":"/usr/share/sandbox/kadmind.sb","architecture":"","file_type":"SBPL source","size":3087,"records":72},{"source":"filesystem","logical_path":"/usr/share/sandbox/kcm.sb","architecture":"","file_type":"SBPL source","size":2805,"records":66},{"source":"filesystem","logical_path":"/usr/share/sandbox/kdc.sb","architecture":"","file_type":"SBPL source","size":3112,"records":70},{"source":"filesystem","logical_path":"/usr/share/sandbox/mDNSResponder.sb","architecture":"","file_type":"SBPL source","size":10849,"records":128},{"source":"filesystem","logical_path":"/usr/share/sandbox/mdflagwriter.sb","architecture":"","file_type":"SBPL source","size":587,"records":4},{"source":"filesystem","logical_path":"/usr/share/sandbox/mds.sb","architecture":"","file_type":"SBPL source","size":5660,"records":107},{"source":"filesystem","logical_path":"/usr/share/sandbox/mds_stores-readonly.sb","architecture":"","file_type":"SBPL source","size":3140,"records":56},{"source":"filesystem","logical_path":"/usr/share/sandbox/mds_stores.sb","architecture":"","file_type":"SBPL source","size":3183,"records":57},{"source":"filesystem","logical_path":"/usr/share/sandbox/mdworker-application.sb","architecture":"","file_type":"SBPL source","size":1094,"records":10},{"source":"filesystem","logical_path":"/usr/share/sandbox/mdworker-bundle.sb","architecture":"","file_type":"SBPL source","size":2513,"records":39},{"source":"filesystem","logical_path":"/usr/share/sandbox/mdworker-mail.sb","architecture":"","file_type":"SBPL source","size":1352,"records":11}]