{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968480":[{"is_tail_call":false,"symbol":"vfs_purge","target_va":4294968544}]},"data_xrefs":{"by_data":{},"by_function":{}},"noreturn_vas":[],"symbols":{"4294968480":"sub_1000004a0"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"5ad75f13b2b29baa392eb3c12695de9eb7fd058d85f841d69a8cb6fd5caa4997","flag_names":[],"flags":0,"hash_type":2,"identifier":"com.apple.purge","platform":26,"team_id":null},"signing_status":"AppleSigned"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"b97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed","imphash":"291d4c71a875cb4250f205bb251d59cf33eeeb4a5514d36895233d17dd7d3494","sha256_text":"37b43ae412855ff34e125e6bf09d6ef7d7e021d305a3a9824539e27c6fd98b43","symbolhash":"291d4c71a875cb4250f205bb251d59cf33eeeb4a5514d36895233d17dd7d3494"},"sets":{"apis_called":["vfs_purge"],"bundle_ids":["com.apple.purge"],"cpp_classes":[],"entitlements":[],"frameworks":["libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Apple Signed","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":1,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":1,"iokit_constants":0,"library_functions":0,"nlist_functions":1,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":6,"size_log2":16.621136,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.00047619047,"url_endpoints":4,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-07T05:21:17Z","available_arches":["x86_64","arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"5ad75f13b2b29baa392eb3c12695de9eb7fd058d85f841d69a8cb6fd5caa4997","file_modified":"2026-04-06T12:12:34Z","file_size":100800,"is_arm64e":true,"min_os":"26.1.0","name":"purge","platform":"macOS","sdk":"26.1.0","sha256":"fc48c36736c7727e6c36750f5879b263e1b27f1d0b9e5d240ce7e860428f7aa3","sha256_slice":"848bbf6823c4c434e12bad1eb34575822480ce38bd45ff1ae72e1d4d91a1667b","source_version":"1039.0.0.0.0","team_id":null,"uuid":"EB4695A8-427E-37C8-8E7C-A61B1F212111"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":1,"imports":[{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"perror"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"vfs_purge"}],"interesting_strings":{"bundle_ids":["com.apple.purge"],"urls_and_endpoints":["$http://crl.apple.com/codesigning.crl0","%http://www.apple.com/appleca/root.crl0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":1,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/codesigning.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"}],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1184,"protection":"r-x","segment":"__TEXT","size":48},{"name":"__auth_stubs","offset":1232,"protection":"r-x","segment":"__TEXT","size":32},{"name":"__const","offset":1264,"protection":"r-x","segment":"__TEXT","size":56},{"name":"__cstring","offset":1320,"protection":"r-x","segment":"__TEXT","size":29},{"name":"__unwind_info","offset":1352,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__auth_got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":16}],"summary":"Apple-signed daemon that establishes network connections to six remote endpoints, likely for status checks, telemetry reporting, or service discovery. Contains one exported function and references a single bundle identifier. Minimal framework dependencies suggest lightweight, focused operations without complex system integration. The multiple network endpoints indicate periodic communication or redundant connection handling.","swift_metadata":null,"title":"System service — connects to Apple network endpoints for status or telemetry","total_strings":97,"xpc_services":[]}