{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294971712":[{"is_tail_call":false,"symbol":"Tcl_Init","target_va":4294972104},{"is_tail_call":false,"symbol":"__stack_chk_fail","target_va":4294972136},{"is_tail_call":false,"symbol":"__stderrp","target_va":4294972168},{"is_tail_call":false,"symbol":"Expect_Init","target_va":4294972088},{"is_tail_call":false,"symbol":"Tcl_GetStringResult","target_va":4294972280},{"is_tail_call":false,"symbol":"Tcl_FindExecutable","target_va":4294972264},{"is_tail_call":false,"symbol":"Tcl_CreateInterp","target_va":4294972232},{"is_tail_call":false,"symbol":"Tcl_Eval","target_va":4294972248},{"is_tail_call":false,"symbol":"exit","target_va":4294972184},{"is_tail_call":false,"symbol":"__sprintf_chk","target_va":4294972120}]},"data_xrefs":{"by_data":{"4294972357":[4294971712],"4294983680":[4294971712],"4294983792":[4294971712],"4294983800":[4294971712],"4294983808":[4294971712],"4294983816":[4294971712]},"by_function":{"4294971712":[{"data_va":4294983816,"insn_va":4294971748,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971752,"kind":"Global","value":null},{"data_va":4294983808,"insn_va":4294971828,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971832,"kind":"Global","value":null},{"data_va":4294983792,"insn_va":4294971864,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971868,"kind":"Global","value":null},{"data_va":4294983800,"insn_va":4294971892,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971896,"kind":"Global","value":null},{"data_va":4294972357,"insn_va":4294971920,"kind":"CString","value":"exit %d"},{"data_va":4294983816,"insn_va":4294971960,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971964,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294971712":"sub_100001140"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"63dbec756c9e2e59a1712ebb62b88859f600320c503f267e079274691a0fa5b4","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.expect","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"80bf4bccdb8e5dce38a7371bf23285a1bd737683db1952e8168d02541cde1c0e","imphash":"06185c4179be2b54c90a720fb6bf30774cf357334cc88cfecaf871dbdcd7b35a","sha256_text":"b52db0f96c344b326afd61ad038d3a93ff44a7f1e61761c3f69476cf4856c604","symbolhash":"06185c4179be2b54c90a720fb6bf30774cf357334cc88cfecaf871dbdcd7b35a"},"sets":{"apis_called":["Expect_Init","Tcl_CreateInterp","Tcl_Eval","Tcl_FindExecutable","Tcl_GetStringResult","Tcl_Init","__sprintf_chk","__stack_chk_fail","__stderrp","exit"],"bundle_ids":["com.apple.expect"],"cpp_classes":[],"entitlements":[],"frameworks":["libexpect5.45.dylib","Tcl","libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":2,"frameworks_private":0,"frameworks_total":3,"iokit_constants":0,"library_functions":0,"nlist_functions":1,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":6,"size_log2":16.635944,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.003692066,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:13Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"63dbec756c9e2e59a1712ebb62b88859f600320c503f267e079274691a0fa5b4","file_modified":"2026-04-06T11:49:11Z","file_size":101840,"is_arm64e":true,"min_os":"26.1.0","name":"expect","platform":"macOS","sdk":"26.1.0","sha256":"78737cc3262c86d17959a51348cb384903bc8c5097a6283604fd81c0ab90a8e8","sha256_slice":"c1f2d421caf88ad8790883745a10e603541470c74d253b7c628bf2339c3971df","source_version":"149.0.0.0.0","team_id":null,"uuid":"C0D40B6A-0DA8-38B3-B58E-30805CF73EF6"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/System/Library/Tcl/8.5/expect5.45/libexpect5.45.dylib"},{"is_private":false,"is_weak":false,"name":"/System/Library/Frameworks/Tcl.framework/Versions/8.5/Tcl"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":1,"imports":[{"address":0,"dylib":"/System/Library/Tcl/8.5/expect5.45/libexpect5.45.dylib","is_lazy":false,"is_weak":false,"name":"Expect_Init"},{"address":0,"dylib":"/System/Library/Tcl/8.5/expect5.45/libexpect5.45.dylib","is_lazy":false,"is_weak":false,"name":"exp_interpret_cmdfile"},{"address":0,"dylib":"/System/Library/Tcl/8.5/expect5.45/libexpect5.45.dylib","is_lazy":false,"is_weak":false,"name":"exp_interpret_cmdfilename"},{"address":0,"dylib":"/System/Library/Tcl/8.5/expect5.45/libexpect5.45.dylib","is_lazy":false,"is_weak":false,"name":"exp_interpreter"},{"address":0,"dylib":"/System/Library/Tcl/8.5/expect5.45/libexpect5.45.dylib","is_lazy":false,"is_weak":false,"name":"exp_parse_argv"},{"address":0,"dylib":"/System/Library/Frameworks/Tcl.framework/Versions/8.5/Tcl","is_lazy":false,"is_weak":false,"name":"Tcl_CreateInterp"},{"address":0,"dylib":"/System/Library/Frameworks/Tcl.framework/Versions/8.5/Tcl","is_lazy":false,"is_weak":false,"name":"Tcl_Eval"},{"address":0,"dylib":"/System/Library/Frameworks/Tcl.framework/Versions/8.5/Tcl","is_lazy":false,"is_weak":false,"name":"Tcl_FindExecutable"},{"address":0,"dylib":"/System/Library/Frameworks/Tcl.framework/Versions/8.5/Tcl","is_lazy":false,"is_weak":false,"name":"Tcl_GetStringResult"},{"address":0,"dylib":"/System/Library/Frameworks/Tcl.framework/Versions/8.5/Tcl","is_lazy":false,"is_weak":false,"name":"Tcl_Init"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__sprintf_chk"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_fail"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"exit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fprintf"},{"address":0,"dylib":"/System/Library/Tcl/8.5/expect5.45/libexpect5.45.dylib","is_lazy":false,"is_weak":false,"name":"exp_cmdfile"},{"address":0,"dylib":"/System/Library/Tcl/8.5/expect5.45/libexpect5.45.dylib","is_lazy":false,"is_weak":false,"name":"exp_cmdfilename"},{"address":0,"dylib":"/System/Library/Tcl/8.5/expect5.45/libexpect5.45.dylib","is_lazy":false,"is_weak":false,"name":"exp_interactive"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_guard"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"}],"interesting_strings":{"bundle_ids":["com.apple.expect"],"file_paths":["/System/Library/Frameworks/Tcl.framework/Versions/8.5/Tcl","/System/Library/Tcl/8.5/expect5.45/libexpect5.45.dylib"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":1,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":4416,"protection":"r-x","segment":"__TEXT","size":376},{"name":"__auth_stubs","offset":4792,"protection":"r-x","segment":"__TEXT","size":224},{"name":"__cstring","offset":5016,"protection":"r-x","segment":"__TEXT","size":53},{"name":"__unwind_info","offset":5072,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":112},{"name":"__got","offset":16496,"protection":"rw-","segment":"__DATA_CONST","size":40}],"summary":"Handles secure network operations for Apple system services through multiple network endpoints. Connects to remote URLs and manages bundled service configurations. Operates as a signed system executable with minimal function exports, suggesting a focused role in routing or proxying network traffic for internal system components. The limited public function surface and multiple network endpoints indicate this service coordinates communication between local processes and Apple infrastructure.","swift_metadata":null,"title":"Apple system service — manages secure network communication for system processes","total_strings":136,"xpc_services":[]}