{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294968420":[{"is_tail_call":false,"symbol":"sub_1000004c0","target_va":4294968512},{"is_tail_call":false,"symbol":"getenv","target_va":4294968800},{"is_tail_call":true,"symbol":"electron::fuses::IsRunAsNodeEnabled()","target_va":4294968788},{"is_tail_call":false,"symbol":"ElectronMain","target_va":4294968776},{"is_tail_call":true,"symbol":"ElectronInitializeICUandStartNode","target_va":4294968764}],"4294968516":[{"is_tail_call":false,"symbol":"fstat","target_va":4294968836},{"is_tail_call":false,"symbol":"fstat","target_va":4294968836},{"is_tail_call":false,"symbol":"fstat","target_va":4294968836}]},"data_xrefs":{"by_data":{},"by_function":{}},"noreturn_vas":[],"symbols":{"4294968420":"sub_100000464","4294968512":"sub_1000004c0","4294968516":"sub_1000004c4"}},"capabilities":[{"category":"Network","description":"Make outgoing network connections","source":"com.apple.security.network.client","value":{"Bool":true}}],"code_signature":{"code_directory":{"cdhash":"70061c35a974bb70b28ead532b3b7859d69c438c66e9a88e16839de6f4aea002","flag_names":["CS_RUNTIME"],"flags":65536,"hash_type":2,"identifier":"com.openai.codex","platform":0,"team_id":"2DC432GLL2"},"signing_status":{"DeveloperSigned":{"team_id":"2DC432GLL2"}}},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"bb5264b846daa2da460870098267db4e001ef00f5cce76b665d011913e832b19","frameworkhash":"24e4a343ed1bc0c2c7aeb5829ee3cbea6eb4969e6609cd6c98d5c495e9f35fa3","imphash":"08a4f8c7f52cf5fbcdabb85bb8cc81a475902e1fd45de9d94831c1f3b4b253ed","sha256_text":"5e423bc109b903a678e58e868229187a2e52ed8e96d5d94dc110ce25784a5365","symbolhash":"08a4f8c7f52cf5fbcdabb85bb8cc81a475902e1fd45de9d94831c1f3b4b253ed"},"sets":{"apis_called":["ElectronInitializeICUandStartNode","ElectronMain","electron::fuses::IsRunAsNodeEnabled()","fstat","getenv","sub_1000004c0"],"bundle_ids":["    <key>com.apple.security.app-sandbox</key>","    <key>com.apple.security.cs.allow-jit</key>","    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>","    <key>com.apple.security.device.audio-input</key>","    <key>com.apple.security.files.user-selected.read-write</key>","    <key>com.apple.security.network.client</key>","!com.apple.security.network.client","%com.apple.security.device.audio-input","1com.apple.security.files.user-selected.read-write","6com.apple.security.cs.allow-unsigned-executable-memory","com.apple.security.app-sandbox","com.apple.security.cs.allow-jit"],"cpp_classes":[],"entitlements":["com.apple.security.app-sandbox","com.apple.security.cs.allow-jit","com.apple.security.cs.allow-unsigned-executable-memory","com.apple.security.device.audio-input","com.apple.security.files.user-selected.read-write","com.apple.security.network.client"],"frameworks":["Electron Framework","libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Developer Signed (2DC432GLL2)","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":12,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":1,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":6,"file_paths":0,"frameworks_private":0,"frameworks_total":2,"iokit_constants":0,"library_functions":0,"nlist_functions":3,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":4,"size_log2":15.697402,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.006549232,"url_endpoints":9,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{"com.apple.security.app-sandbox":{"Bool":false},"com.apple.security.cs.allow-jit":{"Bool":true},"com.apple.security.cs.allow-unsigned-executable-memory":{"Bool":true},"com.apple.security.device.audio-input":{"Bool":true},"com.apple.security.files.user-selected.read-write":{"Bool":true},"com.apple.security.network.client":{"Bool":true}},"raw_plist":"<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n  <dict>\n    <key>com.apple.security.app-sandbox</key>\n    <false/>\n    <key>com.apple.security.cs.allow-jit</key>\n    <true/>\n    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>\n    <true/>\n    <key>com.apple.security.device.audio-input</key>\n    <true/>\n    <key>com.apple.security.files.user-selected.read-write</key>\n    <true/>\n    <key>com.apple.security.network.client</key>\n    <true/>\n  </dict>\n</plist>\n"},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-09T08:23:33Z","available_arches":["arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"70061c35a974bb70b28ead532b3b7859d69c438c66e9a88e16839de6f4aea002","file_modified":"2026-04-09T08:23:33Z","file_size":53136,"is_arm64e":false,"min_os":"12.0.0","name":"Codex","platform":"macOS","sdk":"26.1.0","sha256":"55eab2bd48152f26ca0f4677141005ac3b24c122472b2f968be90eb934f546e0","sha256_slice":"55eab2bd48152f26ca0f4677141005ac3b24c122472b2f968be90eb934f546e0","source_version":null,"team_id":"2DC432GLL2","uuid":"4C4C44D4-5555-3144-A1CF-E6A33E2C33C1"},"frameworks":[{"is_private":false,"is_weak":false,"name":"@rpath/Electron Framework.framework/Electron Framework"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":0,"imports":[{"address":0,"dylib":"@rpath/Electron Framework.framework/Electron Framework","is_lazy":false,"is_weak":false,"name":"ElectronInitializeICUandStartNode"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"getenv"},{"address":0,"dylib":"@rpath/Electron Framework.framework/Electron Framework","is_lazy":false,"is_weak":false,"name":"ElectronMain"},{"address":0,"dylib":"@rpath/Electron Framework.framework/Electron Framework","is_lazy":false,"is_weak":false,"name":"_ZN8electron5fuses18IsRunAsNodeEnabledEv"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"freopen"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stdinp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__error"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stdoutp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fstat"}],"interesting_strings":{"bundle_ids":["    <key>com.apple.security.app-sandbox</key>","    <key>com.apple.security.cs.allow-jit</key>","    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>","    <key>com.apple.security.device.audio-input</key>","    <key>com.apple.security.files.user-selected.read-write</key>","    <key>com.apple.security.network.client</key>","!com.apple.security.network.client","%com.apple.security.device.audio-input","1com.apple.security.files.user-selected.read-write","6com.apple.security.cs.allow-unsigned-executable-memory","com.apple.security.app-sandbox","com.apple.security.cs.allow-jit"],"urls_and_endpoints":["\"http://certs.apple.com/devidg2.der02","\"http://crl.apple.com/timestamp.crl0","&http://ocsp.apple.com/ocsp03-devidg2010","(http://ocsp.apple.com/ocsp03-applerootca0.","+https://www.apple.com/certificateauthority/0","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">","http://crl.apple.com/root.crl0","http://www.apple.com/appleca0","https://www.apple.com/appleca/0"]},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":3,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">"},{"is_dynamic":false,"kind":"Hostname","value":"www.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://ocsp.apple.com/ocsp03-applerootca0."},{"is_dynamic":false,"kind":"Hostname","value":"ocsp.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/root.crl0"},{"is_dynamic":false,"kind":"Hostname","value":"crl.apple.com"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/appleca/0"},{"is_dynamic":false,"kind":"Url","value":"http://certs.apple.com/devidg2.der02"},{"is_dynamic":false,"kind":"Hostname","value":"certs.apple.com"},{"is_dynamic":false,"kind":"Url","value":"http://ocsp.apple.com/ocsp03-devidg2010"},{"is_dynamic":false,"kind":"Url","value":"https://www.apple.com/certificateauthority/0"},{"is_dynamic":false,"kind":"Url","value":"http://www.apple.com/appleca0"},{"is_dynamic":false,"kind":"Url","value":"http://crl.apple.com/timestamp.crl0"}],"has_network_entitlement":true,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":1120,"protection":"r-x","segment":"__TEXT","size":348},{"name":"__stubs","offset":1468,"protection":"r-x","segment":"__TEXT","size":84},{"name":"__cstring","offset":1552,"protection":"r-x","segment":"__TEXT","size":35},{"name":"__got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":80}],"summary":"Establishes outgoing network connections to multiple remote endpoints, with 13 identified network targets and 9 URLs or endpoints embedded in the binary. Contains 12 bundle identifiers suggesting interaction with multiple applications or services. Uses standard macOS frameworks for networking operations. The binary's minimal function count and reliance on network capabilities indicates it primarily orchestrates connections rather than performing complex local processing.","swift_metadata":null,"title":"Network client — makes outbound connections to remote services","total_strings":216,"xpc_services":[]}