{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294969488":[{"is_tail_call":false,"symbol":"strcmp","target_va":4294973516},{"is_tail_call":false,"symbol":"fopen","target_va":4294973372},{"is_tail_call":false,"symbol":"feof","target_va":4294973360},{"is_tail_call":false,"symbol":"puts","target_va":4294973504},{"is_tail_call":false,"symbol":"fwrite","target_va":4294973444},{"is_tail_call":false,"symbol":"fread","target_va":4294973396},{"is_tail_call":false,"symbol":"free","target_va":4294973408},{"is_tail_call":false,"symbol":"malloc","target_va":4294973456},{"is_tail_call":false,"symbol":"fseeko","target_va":4294973420},{"is_tail_call":false,"symbol":"fread","target_va":4294973396},{"is_tail_call":false,"symbol":"ftello","target_va":4294973432},{"is_tail_call":false,"symbol":"printf","target_va":4294973492},{"is_tail_call":false,"symbol":"fread","target_va":4294973396},{"is_tail_call":false,"symbol":"fseeko","target_va":4294973420},{"is_tail_call":false,"symbol":"printf","target_va":4294973492},{"is_tail_call":false,"symbol":"feof","target_va":4294973360},{"is_tail_call":false,"symbol":"fread","target_va":4294973396},{"is_tail_call":false,"symbol":"fwrite","target_va":4294973444},{"is_tail_call":false,"symbol":"fclose","target_va":4294973348},{"is_tail_call":false,"symbol":"fclose","target_va":4294973348},{"is_tail_call":false,"symbol":"fseeko","target_va":4294973420},{"is_tail_call":false,"symbol":"ftello","target_va":4294973432},{"is_tail_call":false,"symbol":"malloc","target_va":4294973456},{"is_tail_call":false,"symbol":"fread","target_va":4294973396},{"is_tail_call":false,"symbol":"perror","target_va":4294973480},{"is_tail_call":false,"symbol":"free","target_va":4294973408},{"is_tail_call":false,"symbol":"free","target_va":4294973408},{"is_tail_call":false,"symbol":"free","target_va":4294973408},{"is_tail_call":false,"symbol":"fprintf","target_va":4294973384},{"is_tail_call":false,"symbol":"fprintf","target_va":4294973384},{"is_tail_call":false,"symbol":"fprintf","target_va":4294973384},{"is_tail_call":false,"symbol":"fclose","target_va":4294973348},{"is_tail_call":false,"symbol":"update_moov_atom","target_va":4294971364},{"is_tail_call":false,"symbol":"fopen","target_va":4294973372},{"is_tail_call":false,"symbol":"fseeko","target_va":4294973420},{"is_tail_call":false,"symbol":"fopen","target_va":4294973372},{"is_tail_call":false,"symbol":"puts","target_va":4294973504},{"is_tail_call":false,"symbol":"fwrite","target_va":4294973444},{"is_tail_call":false,"symbol":"puts","target_va":4294973504},{"is_tail_call":false,"symbol":"fwrite","target_va":4294973444},{"is_tail_call":false,"symbol":"malloc","target_va":4294973456},{"is_tail_call":false,"symbol":"puts","target_va":4294973504},{"is_tail_call":false,"symbol":"fread","target_va":4294973396},{"is_tail_call":false,"symbol":"fwrite","target_va":4294973444},{"is_tail_call":false,"symbol":"fclose","target_va":4294973348},{"is_tail_call":false,"symbol":"fclose","target_va":4294973348},{"is_tail_call":false,"symbol":"free","target_va":4294973408},{"is_tail_call":false,"symbol":"free","target_va":4294973408},{"is_tail_call":false,"symbol":"free","target_va":4294973408},{"is_tail_call":false,"symbol":"perror","target_va":4294973480},{"is_tail_call":false,"symbol":"puts","target_va":4294973504},{"is_tail_call":false,"symbol":"free","target_va":4294973408},{"is_tail_call":false,"symbol":"fclose","target_va":4294973348}],"4294971364":[{"is_tail_call":false,"symbol":"parse_atoms","target_va":4294971664},{"is_tail_call":false,"symbol":"puts","target_va":4294973504},{"is_tail_call":false,"symbol":"malloc","target_va":4294973456},{"is_tail_call":false,"symbol":"parse_atoms","target_va":4294971664},{"is_tail_call":false,"symbol":"free","target_va":4294973408},{"is_tail_call":false,"symbol":"fwrite","target_va":4294973444},{"is_tail_call":false,"symbol":"fprintf","target_va":4294973384},{"is_tail_call":false,"symbol":"free","target_va":4294973408}],"4294972016":[{"is_tail_call":false,"symbol":"fwrite","target_va":4294973444},{"is_tail_call":false,"symbol":"parse_atoms","target_va":4294971664},{"is_tail_call":false,"symbol":"puts","target_va":4294973504},{"is_tail_call":false,"symbol":"puts","target_va":4294973504},{"is_tail_call":false,"symbol":"fprintf","target_va":4294973384}],"4294972656":[{"is_tail_call":false,"symbol":"memcpy","target_va":4294973468},{"is_tail_call":false,"symbol":"parse_atoms","target_va":4294971664},{"is_tail_call":false,"symbol":"set_atom_size","target_va":4294973220},{"is_tail_call":false,"symbol":"memcpy","target_va":4294973468},{"is_tail_call":false,"symbol":"set_atom_size","target_va":4294973220},{"is_tail_call":false,"symbol":"memcpy","target_va":4294973468}]},"data_xrefs":{"by_data":{"4294971400":[4294971364],"4294971416":[4294971364],"4294971440":[4294972016],"4294971456":[4294969488],"4294971464":[4294969488],"4294971472":[4294969488],"4294971480":[4294969488],"4294971488":[4294969488],"4294971496":[4294969488],"4294971504":[4294969488],"4294971520":[4294971364],"4294972016":[4294971364,4294972016],"4294972656":[4294971364,4294972656],"4294973528":[4294969488],"4294973573":[4294969488],"4294973576":[4294969488],"4294973605":[4294969488],"4294973650":[4294969488],"4294973735":[4294969488],"4294973755":[4294969488],"4294973800":[4294969488],"4294973857":[4294969488],"4294973905":[4294971364],"4294973958":[4294971364],"4294974095":[4294972016],"4294974120":[4294972016],"4294974151":[4294972016],"4294974181":[4294972016],"4294974212":[4294972016],"4294974242":[4294969488],"4294974264":[4294969488],"4294974286":[4294969488],"4294974311":[4294969488],"4294974349":[4294969488],"4294974459":[4294971364],"4294974492":[4294972016],"4294974515":[4294972016],"4294983680":[4294969488,4294971364,4294972016],"4294983684":[4294972016],"4294983688":[4294969488],"4294983696":[4294969488,4294971364,4294972016]},"by_function":{"4294969488":[{"data_va":4294983688,"insn_va":4294969524,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969528,"kind":"Global","value":null},{"data_va":4294973573,"insn_va":4294969572,"kind":"CString","value":"rb"},{"data_va":4294974349,"insn_va":4294969612,"kind":"CString","value":"Usage: qt-faststart <infile.mov> <outfile.mov>\nNote: alternatively you can use -movflags +faststart in ffmpeg"},{"data_va":4294983696,"insn_va":4294969628,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294969632,"kind":"Global","value":null},{"data_va":4294973528,"insn_va":4294969640,"kind":"CString","value":"input and output files need to be different\n"},{"data_va":4294971488,"insn_va":4294969664,"kind":"Global","value":null},{"data_va":4294971488,"insn_va":4294969716,"kind":"Global","value":null},{"data_va":4294971464,"insn_va":4294969780,"kind":"Global","value":null},{"data_va":4294971464,"insn_va":4294969824,"kind":"Global","value":null},{"data_va":4294973650,"insn_va":4294969884,"kind":"CString","value":"%c%c%c%c %10llu %llu\n"},{"data_va":4294971488,"insn_va":4294969908,"kind":"Global","value":null},{"data_va":4294971488,"insn_va":4294969936,"kind":"Global","value":null},{"data_va":4294973650,"insn_va":4294969988,"kind":"CString","value":"%c%c%c%c %10llu %llu\n"},{"data_va":4294971488,"insn_va":4294970232,"kind":"Global","value":null},{"data_va":4294971464,"insn_va":4294970280,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294970344,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970348,"kind":"Global","value":null},{"data_va":4294973735,"insn_va":4294970356,"kind":"CString","value":"bad moov atom size\n"},{"data_va":4294983696,"insn_va":4294970524,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970528,"kind":"Global","value":null},{"data_va":4294973800,"insn_va":4294970536,"kind":"CString","value":"this utility does not support compressed moov atoms yet\n"},{"data_va":4294971480,"insn_va":4294970564,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294970600,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970604,"kind":"Global","value":null},{"data_va":4294973755,"insn_va":4294970616,"kind":"CString","value":"could not allocate %llu bytes for moov atom\n"},{"data_va":4294983696,"insn_va":4294970632,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970636,"kind":"Global","value":null},{"data_va":4294973576,"insn_va":4294970648,"kind":"CString","value":"ftyp atom size %llu too big\n"},{"data_va":4294971464,"insn_va":4294970664,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294970676,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294970680,"kind":"Global","value":null},{"data_va":4294973605,"insn_va":4294970692,"kind":"CString","value":"could not allocate %llu bytes for ftyp atom\n"},{"data_va":4294971480,"insn_va":4294970720,"kind":"Global","value":null},{"data_va":4294971472,"insn_va":4294970724,"kind":"Global","value":null},{"data_va":4294973573,"insn_va":4294970744,"kind":"CString","value":"rb"},{"data_va":4294971456,"insn_va":4294970760,"kind":"Global","value":null},{"data_va":4294973857,"insn_va":4294970804,"kind":"CString","value":"wb"},{"data_va":4294974242,"insn_va":4294970828,"kind":"CString","value":" writing ftyp atom..."},{"data_va":4294974264,"insn_va":4294970868,"kind":"CString","value":" writing moov atom..."},{"data_va":4294974286,"insn_va":4294970940,"kind":"CString","value":" copying rest of file..."},{"data_va":4294971464,"insn_va":4294971100,"kind":"Global","value":null},{"data_va":4294974311,"insn_va":4294971112,"kind":"CString","value":"last atom in file was not a moov atom"},{"data_va":4294971496,"insn_va":4294971140,"kind":"Global","value":null},{"data_va":4294983688,"insn_va":4294971148,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971152,"kind":"Global","value":null},{"data_va":4294971504,"insn_va":4294971168,"kind":"Global","value":null}],"4294971364":[{"data_va":4294972016,"insn_va":4294971412,"kind":"Global","value":null},{"data_va":4294974459,"insn_va":4294971440,"kind":"CString","value":" upgrading stco atoms to co64..."},{"data_va":4294972656,"insn_va":4294971496,"kind":"Global","value":null},{"data_va":4294971400,"insn_va":4294971500,"kind":"Global","value":null},{"data_va":4294971416,"insn_va":4294971528,"kind":"Global","value":null},{"data_va":4294971400,"insn_va":4294971532,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294971556,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971560,"kind":"Global","value":null},{"data_va":4294973958,"insn_va":4294971568,"kind":"CString","value":"unexpected - wrong number of moov bytes written\n"},{"data_va":4294983696,"insn_va":4294971600,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971604,"kind":"Global","value":null},{"data_va":4294973905,"insn_va":4294971616,"kind":"CString","value":"could not allocate %llu bytes for updated moov atom\n"},{"data_va":4294971520,"insn_va":4294971656,"kind":"Global","value":null}],"4294972016":[{"data_va":4294983696,"insn_va":4294972168,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294972172,"kind":"Global","value":null},{"data_va":4294974095,"insn_va":4294972180,"kind":"CString","value":"atoms too deeply nested\n"},{"data_va":4294972016,"insn_va":4294972208,"kind":"Global","value":null},{"data_va":4294974492,"insn_va":4294972272,"kind":"CString","value":" patching stco atom..."},{"data_va":4294983696,"insn_va":4294972296,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294972300,"kind":"Global","value":null},{"data_va":4294974120,"insn_va":4294972312,"kind":"CString","value":"stco atom size %llu too small\n"},{"data_va":4294974515,"insn_va":4294972324,"kind":"CString","value":" patching co64 atom..."},{"data_va":4294983696,"insn_va":4294972348,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294972352,"kind":"Global","value":null},{"data_va":4294974181,"insn_va":4294972364,"kind":"CString","value":"co64 atom size %llu too small\n"},{"data_va":4294983684,"insn_va":4294972376,"kind":"Global","value":null},{"data_va":4294983696,"insn_va":4294972400,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294972404,"kind":"Global","value":null},{"data_va":4294974212,"insn_va":4294972416,"kind":"CString","value":"co64 offset count %u too big\n"},{"data_va":4294983696,"insn_va":4294972452,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294972456,"kind":"Global","value":null},{"data_va":4294974151,"insn_va":4294972468,"kind":"CString","value":"stco offset count %u too big\n"},{"data_va":4294971440,"insn_va":4294972488,"kind":"Global","value":null}],"4294972656":[{"data_va":4294972656,"insn_va":4294972812,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294969488":"main","4294971364":"update_moov_atom","4294971664":"parse_atoms","4294972016":"update_chunk_offsets_callback","4294972656":"upgrade_stco_callback","4294973220":"set_atom_size"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"0fb0e1a572d80967fce34e1a640fe8aee20f6b636cf2da36bedb7e241655f05f","flag_names":["CS_ADHOC","CS_LINKER_SIGNED"],"flags":131074,"hash_type":2,"identifier":"qt-faststart","platform":0,"team_id":null},"signing_status":"AdHoc"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"b97e2cdeefa15f4389f6b3af8effe69a9a08ff67358c734e7ad450bacde906ed","imphash":"d5aca71d163d697f62a1db4ca491e7be42ab02b021daa567c44a27bac8f7d06e","sha256_text":"338ccf3ce49fac9e4949536d0598c15bd5eb7c34c7f413d1309e880164e5931d","symbolhash":"d5aca71d163d697f62a1db4ca491e7be42ab02b021daa567c44a27bac8f7d06e"},"sets":{"apis_called":["fclose","feof","fopen","fprintf","fread","free","fseeko","ftello","fwrite","malloc","memcpy","parse_atoms","perror","printf","puts","set_atom_size","strcmp","update_moov_atom"],"bundle_ids":[],"cpp_classes":[],"entitlements":[],"frameworks":["libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Ad-Hoc","static_libs":["gio-2.0-2.86.3"],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":0,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":1,"iokit_constants":0,"library_functions":1,"nlist_functions":6,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":6,"size_log2":15.070121,"static_lib_count":1,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.11186046,"url_endpoints":0,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"},{"address":2192,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"main"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-09T09:14:43Z","available_arches":["arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"0fb0e1a572d80967fce34e1a640fe8aee20f6b636cf2da36bedb7e241655f05f","file_modified":"2026-04-09T09:14:43Z","file_size":34400,"is_arm64e":false,"min_os":"26.0.0","name":"qt-faststart","platform":"macOS","sdk":"26.1.0","sha256":"46ec6661faea4afc78e88b32bca22e21a0b11b4ef7f50d7abaf0f58e1cec09a6","sha256_slice":"46ec6661faea4afc78e88b32bca22e21a0b11b4ef7f50d7abaf0f58e1cec09a6","source_version":null,"team_id":null,"uuid":"B0D984FF-3DA0-3FCB-843C-57E09C3F1130"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":6,"imports":[{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_fail"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_guard"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fclose"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"feof"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fopen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fprintf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fread"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"free"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fseeko"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"ftello"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fwrite"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"malloc"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"memcpy"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"perror"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"printf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"puts"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strcmp"}],"interesting_strings":{},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{"gio-2.0":["2.86.3",1]},"library_ratio":0.16666667,"total_functions":6,"total_identified":1},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":2192,"protection":"r-x","segment":"__TEXT","size":3848},{"name":"__stubs","offset":6040,"protection":"r-x","segment":"__TEXT","size":192},{"name":"__cstring","offset":6232,"protection":"r-x","segment":"__TEXT","size":1010},{"name":"__unwind_info","offset":7244,"protection":"r-x","segment":"__TEXT","size":128},{"name":"__eh_frame","offset":7376,"protection":"r-x","segment":"__TEXT","size":200},{"name":"__got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":144}],"summary":"This ad-hoc signed arm64 executable contains minimal metadata and only 6 functions, making its purpose unclear from static analysis alone. The absence of framework dependencies, code signing by a recognized entity, and sparse symbol information prevents reliable determination of what this binary does. Security analysts should execute this in an isolated environment or use dynamic analysis to understand its behavior.","swift_metadata":null,"title":"Unknown utility — purpose cannot be determined from available metadata","total_strings":94,"xpc_services":[]}