{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294969640":[{"is_tail_call":false,"symbol":"puts","target_va":4294970240},{"is_tail_call":false,"symbol":"fopen","target_va":4294970180},{"is_tail_call":false,"symbol":"atoi","target_va":4294970156},{"is_tail_call":false,"symbol":"atoi","target_va":4294970156},{"is_tail_call":false,"symbol":"atoi","target_va":4294970156},{"is_tail_call":false,"symbol":"checked_seek","target_va":4294970096},{"is_tail_call":false,"symbol":"ftell","target_va":4294970204},{"is_tail_call":false,"symbol":"checked_seek","target_va":4294970096},{"is_tail_call":false,"symbol":"checked_seek","target_va":4294970096},{"is_tail_call":false,"symbol":"fwrite","target_va":4294970216}],"4294970096":[{"is_tail_call":false,"symbol":"fseek","target_va":4294970192}]},"data_xrefs":{"by_data":{"4294967296":[4294969640],"4294967304":[4294969640],"4294967312":[4294969640],"4294967324":[4294969640],"4294967328":[4294969640],"4294970252":[4294969640],"4294970269":[4294969640],"4295000064":[4294969640]},"by_function":{"4294969640":[{"data_va":4294970269,"insn_va":4294969684,"kind":"CString","value":"USAGE: trasher <filename> <count> <maxburst> <seed>"},{"data_va":4294970252,"insn_va":4294969712,"kind":"CString","value":"rb+"},{"data_va":4295000064,"insn_va":4294969872,"kind":"Global","value":null},{"data_va":4294967304,"insn_va":4294969880,"kind":"Global","value":null},{"data_va":4294967296,"insn_va":4294969912,"kind":"Global","value":null},{"data_va":4294967312,"insn_va":4294969956,"kind":"Global","value":null},{"data_va":4295000064,"insn_va":4294969976,"kind":"Global","value":null},{"data_va":4294967324,"insn_va":4294970012,"kind":"Global","value":null},{"data_va":4294967328,"insn_va":4294970048,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294969640":"main","4294970096":"checked_seek"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"4174b0bb5972acf46feba420eacb43bd178470dfd08d76164d17d1ea3f8ea565","flag_names":["CS_ADHOC","CS_LINKER_SIGNED"],"flags":131074,"hash_type":2,"identifier":"trasher","platform":0,"team_id":null},"signing_status":"AdHoc"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"b97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed","imphash":"c9d171f9598175a6c4c8a844d31a42817e491bd6a7c9a9fefbecc0bbe09b0ed8","sha256_text":"048d1712f37e5fdf4cf5483c054135efd85fa4034e3c694f9641c93cd65084a9","symbolhash":"c9d171f9598175a6c4c8a844d31a42817e491bd6a7c9a9fefbecc0bbe09b0ed8"},"sets":{"apis_called":["atoi","checked_seek","fopen","fseek","ftell","fwrite","puts"],"bundle_ids":[],"cpp_classes":[],"entitlements":[],"frameworks":["libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Ad-Hoc","static_libs":["gettextlib-0.26_1"],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":0,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":1,"iokit_constants":0,"library_functions":1,"nlist_functions":2,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":7,"size_log2":15.045419,"static_lib_count":1,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.015259049,"url_endpoints":0,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"},{"address":2344,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"main"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-09T09:20:02Z","available_arches":["arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"4174b0bb5972acf46feba420eacb43bd178470dfd08d76164d17d1ea3f8ea565","file_modified":"2026-04-09T09:20:02Z","file_size":33816,"is_arm64e":false,"min_os":"26.0.0","name":"trasher","platform":"macOS","sdk":"26.1.0","sha256":"101385600746644d7b16296d06c63f876e06ebb99aff70f9f3767a793ab92ce7","sha256_slice":"101385600746644d7b16296d06c63f876e06ebb99aff70f9f3767a793ab92ce7","source_version":null,"team_id":null,"uuid":"BC575DB2-F78D-38E7-8685-A842E7EBFEF2"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":2,"imports":[{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"atoi"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"exit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fopen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fseek"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"ftell"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fwrite"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"perror"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"puts"}],"interesting_strings":{},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{"gettextlib":["0.26_1",1]},"library_ratio":0.5,"total_functions":2,"total_identified":1},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":2344,"protection":"r-x","segment":"__TEXT","size":516},{"name":"__stubs","offset":2860,"protection":"r-x","segment":"__TEXT","size":96},{"name":"__cstring","offset":2956,"protection":"r-x","segment":"__TEXT","size":69},{"name":"__unwind_info","offset":3028,"protection":"r-x","segment":"__TEXT","size":96},{"name":"__eh_frame","offset":3128,"protection":"r-x","segment":"__TEXT","size":56},{"name":"__got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":72},{"name":"__bss","offset":0,"protection":"rw-","segment":"__DATA","size":4}],"summary":"This ad-hoc signed arm64 executable is 33 KB with minimal public framework dependencies and only 2 exported functions. Without access to symbol names, strings, or function implementations, its specific purpose cannot be determined. The small function count and generic UUID filename suggest it may be a small utility, tool, or helper process. Security analysis requires binary disassembly or runtime behavior monitoring to establish intent.","swift_metadata":null,"title":"Unknown utility — insufficient analysis data available","total_strings":50,"xpc_services":[]}