{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294973424":[{"is_tail_call":false,"symbol":"g_enum_get_value","target_va":4294974020},{"is_tail_call":false,"symbol":"g_free","target_va":4294974032},{"is_tail_call":false,"symbol":"g_strrstr","target_va":4294973912},{"is_tail_call":false,"symbol":"strlen","target_va":4294974068},{"is_tail_call":false,"symbol":"strlen","target_va":4294974068},{"is_tail_call":false,"symbol":"g_strdup","target_va":4294973960},{"is_tail_call":false,"symbol":"gtk_init","target_va":4294973996},{"is_tail_call":false,"symbol":"g_type_check_value_holds","target_va":4294973924},{"is_tail_call":false,"symbol":"g_value_init","target_va":4294973972},{"is_tail_call":false,"symbol":"g_value_unset","target_va":4294973984},{"is_tail_call":false,"symbol":"g_strdup_value_contents","target_va":4294973888},{"is_tail_call":false,"symbol":"g_object_get_property","target_va":4294973936},{"is_tail_call":false,"symbol":"putchar","target_va":4294974056},{"is_tail_call":false,"symbol":"putchar","target_va":4294974056},{"is_tail_call":false,"symbol":"printf","target_va":4294974044},{"is_tail_call":false,"symbol":"g_object_class_list_properties","target_va":4294973900},{"is_tail_call":false,"symbol":"gtk_settings_get_default","target_va":4294974008},{"is_tail_call":false,"symbol":"g_value_get_enum","target_va":4294973948},{"is_tail_call":false,"symbol":"g_object_class_list_properties","target_va":4294973900}]},"data_xrefs":{"by_data":{"4294974080":[4294973424]},"by_function":{"4294973424":[{"data_va":4294974080,"insn_va":4294973580,"kind":"CString","value":"%s: %s\n"}]}},"noreturn_vas":[],"symbols":{"4294973424":"main"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"a9f8682c99368630f41b542fb88519486bf2a8906e9a5a77f29ec8b057aeb8e3","flag_names":["CS_ADHOC"],"flags":2,"hash_type":2,"identifier":"gtk-query-settings-55554944b69701ec91bf34d9976dcd37cc36d4df","platform":0,"team_id":null},"signing_status":"AdHoc"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"da2f2c2b849629abd8327d320c6bfefda25dd197de26e2b4cf08564bb274f198","imphash":"0d6e4079e36703ebd37c00722f5891d28b0e2811dc114b129215123adcce3605","sha256_text":"049bc087f9d462379bd89383b4fa040eea7dbec7c90eab47fe4c3ff62cdcbdb4","symbolhash":"0d6e4079e36703ebd37c00722f5891d28b0e2811dc114b129215123adcce3605"},"sets":{"apis_called":["g_enum_get_value","g_free","g_object_class_list_properties","g_object_get_property","g_strdup","g_strdup_value_contents","g_strrstr","g_type_check_value_holds","g_value_get_enum","g_value_init","g_value_unset","gtk_init","gtk_settings_get_default","printf","putchar","strlen"],"bundle_ids":[],"cpp_classes":[],"entitlements":[],"frameworks":["libgtk-3.0.dylib","libglib-2.0.0.dylib","libgobject-2.0.0.dylib","libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Ad-Hoc","static_libs":[],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":0,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":4,"iokit_constants":0,"library_functions":0,"nlist_functions":1,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":6,"size_log2":15.68036,"static_lib_count":0,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.008836076,"url_endpoints":0,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"},{"address":6128,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"main"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-09T08:52:40Z","available_arches":["arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"a9f8682c99368630f41b542fb88519486bf2a8906e9a5a77f29ec8b057aeb8e3","file_modified":"2026-04-09T08:52:40Z","file_size":52512,"is_arm64e":false,"min_os":"15.0.0","name":"gtk-query-settings","platform":"macOS","sdk":"15.4.0","sha256":"6345644be0fe779d900b1c4ff209e9a8358b39ea1ec85396d80c7f69c743f317","sha256_slice":"6345644be0fe779d900b1c4ff209e9a8358b39ea1ec85396d80c7f69c743f317","source_version":null,"team_id":null,"uuid":"B69701EC-91BF-34D9-976D-CD37CC36D4DF"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/opt/homebrew/Cellar/gtk+3/3.24.51/lib/libgtk-3.0.dylib"},{"is_private":false,"is_weak":false,"name":"/opt/homebrew/opt/glib/lib/libglib-2.0.0.dylib"},{"is_private":false,"is_weak":false,"name":"/opt/homebrew/opt/glib/lib/libgobject-2.0.0.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":1,"imports":[{"address":0,"dylib":"/opt/homebrew/Cellar/gtk+3/3.24.51/lib/libgtk-3.0.dylib","is_lazy":false,"is_weak":false,"name":"gtk_init"},{"address":0,"dylib":"/opt/homebrew/Cellar/gtk+3/3.24.51/lib/libgtk-3.0.dylib","is_lazy":false,"is_weak":false,"name":"gtk_settings_get_default"},{"address":0,"dylib":"/opt/homebrew/opt/glib/lib/libglib-2.0.0.dylib","is_lazy":false,"is_weak":false,"name":"g_free"},{"address":0,"dylib":"/opt/homebrew/opt/glib/lib/libglib-2.0.0.dylib","is_lazy":false,"is_weak":false,"name":"g_strdup"},{"address":0,"dylib":"/opt/homebrew/opt/glib/lib/libglib-2.0.0.dylib","is_lazy":false,"is_weak":false,"name":"g_strrstr"},{"address":0,"dylib":"/opt/homebrew/opt/glib/lib/libgobject-2.0.0.dylib","is_lazy":false,"is_weak":false,"name":"g_enum_get_value"},{"address":0,"dylib":"/opt/homebrew/opt/glib/lib/libgobject-2.0.0.dylib","is_lazy":false,"is_weak":false,"name":"g_object_class_list_properties"},{"address":0,"dylib":"/opt/homebrew/opt/glib/lib/libgobject-2.0.0.dylib","is_lazy":false,"is_weak":false,"name":"g_object_get_property"},{"address":0,"dylib":"/opt/homebrew/opt/glib/lib/libgobject-2.0.0.dylib","is_lazy":false,"is_weak":false,"name":"g_strdup_value_contents"},{"address":0,"dylib":"/opt/homebrew/opt/glib/lib/libgobject-2.0.0.dylib","is_lazy":false,"is_weak":false,"name":"g_type_check_value_holds"},{"address":0,"dylib":"/opt/homebrew/opt/glib/lib/libgobject-2.0.0.dylib","is_lazy":false,"is_weak":false,"name":"g_value_get_enum"},{"address":0,"dylib":"/opt/homebrew/opt/glib/lib/libgobject-2.0.0.dylib","is_lazy":false,"is_weak":false,"name":"g_value_init"},{"address":0,"dylib":"/opt/homebrew/opt/glib/lib/libgobject-2.0.0.dylib","is_lazy":false,"is_weak":false,"name":"g_value_unset"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"printf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"putchar"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strlen"}],"interesting_strings":{},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{},"library_ratio":0.0,"total_functions":1,"total_identified":0},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":6128,"protection":"r-x","segment":"__TEXT","size":464},{"name":"__stubs","offset":6592,"protection":"r-x","segment":"__TEXT","size":192},{"name":"__cstring","offset":6784,"protection":"r-x","segment":"__TEXT","size":8},{"name":"__unwind_info","offset":6792,"protection":"r-x","segment":"__TEXT","size":88},{"name":"__got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":128},{"name":"__objc_imageinfo","offset":16512,"protection":"rw-","segment":"__DATA_CONST","size":8}],"summary":"This ad-hoc signed executable contains only one function and links against 4 standard frameworks. The minimal function count suggests it performs a narrow, specific task, though the exact purpose cannot be determined from the binary metadata alone. The ad-hoc signature indicates it was signed locally rather than by a certificate authority, typical of development builds or unsigned distribution. Without additional context such as the binary name, command-line arguments, or imported symbols, the security implications and operational role remain unclear.","swift_metadata":null,"title":"Unknown utility — minimal functionality with single entry point","total_strings":61,"xpc_services":[]}