{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294971744":[{"is_tail_call":false,"symbol":"__error","target_va":4294972740},{"is_tail_call":false,"symbol":"gettimeofday","target_va":4294972692},{"is_tail_call":false,"symbol":"gettimeofday","target_va":4294972692},{"is_tail_call":false,"symbol":"__stack_chk_guard","target_va":4294972764},{"is_tail_call":false,"symbol":"__stack_chk_guard","target_va":4294972764},{"is_tail_call":false,"symbol":"librist_get_ng_constants","target_va":4294972716},{"is_tail_call":false,"symbol":"librist_get_ng_constants","target_va":4294972716},{"is_tail_call":false,"symbol":"printf","target_va":4294972776}],"4294972024":[{"is_tail_call":false,"symbol":"__stack_chk_fail","target_va":4294972752},{"is_tail_call":false,"symbol":"create_and_print","target_va":4294971744},{"is_tail_call":false,"symbol":"create_and_print","target_va":4294971744},{"is_tail_call":false,"symbol":"librist_crypto_srp_create_verifier","target_va":4294972704}],"4294972168":[{"is_tail_call":false,"symbol":"rist__get_system_boottime","target_va":4294972400},{"is_tail_call":false,"symbol":"mbedtls_base64_encode","target_va":4294972728},{"is_tail_call":false,"symbol":"rist__get_system_boottime","target_va":4294972400},{"is_tail_call":false,"symbol":"mbedtls_base64_encode","target_va":4294972728},{"is_tail_call":false,"symbol":"__stderrp","target_va":4294972668}],"4294972400":[{"is_tail_call":false,"symbol":"sysctl","target_va":4294972800},{"is_tail_call":false,"symbol":"__stderrp","target_va":4294972668}],"4294972528":[{"is_tail_call":false,"symbol":"mbedtls_base64_encode","target_va":4294972728},{"is_tail_call":false,"symbol":"pthread_cond_timedwait","target_va":4294972788}]},"data_xrefs":{"by_data":{"4294972812":[4294971744],"4294972827":[4294972024],"4294972864":[4294972400],"4294973536":[4294971744],"4294983680":[4294971744,4294972024,4294972400],"4294983720":[4294971744,4294972400],"4294983728":[4294972024]},"by_function":{"4294971744":[{"data_va":4294983720,"insn_va":4294971784,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971788,"kind":"Global","value":null},{"data_va":4294972812,"insn_va":4294971960,"kind":"CString","value":"%s:%s:%s:3:%d\n"},{"data_va":4294983720,"insn_va":4294971976,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971980,"kind":"Global","value":null},{"data_va":4294973536,"insn_va":4294971996,"kind":"Global","value":null}],"4294972024":[{"data_va":4294983728,"insn_va":4294972120,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294972124,"kind":"Global","value":null},{"data_va":4294972827,"insn_va":4294972140,"kind":"CString","value":"Usage: %s [username] [password]\n"}],"4294972400":[{"data_va":4294983720,"insn_va":4294972420,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294972424,"kind":"Global","value":null},{"data_va":4294972864,"insn_va":4294972436,"kind":"Global","value":null},{"data_va":4294983720,"insn_va":4294972496,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294972500,"kind":"Global","value":null}]}},"noreturn_vas":[],"symbols":{"4294971744":"create_and_print","4294972024":"main","4294972168":"clock_gettime_osx","4294972400":"rist__get_system_boottime","4294972528":"pthread_cond_timedwait_ms"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"d7e90a8edb3fc2a7884b79034a5d32075d30dda77f1ec2db400956b7e4f64014","flag_names":["CS_ADHOC"],"flags":2,"hash_type":2,"identifier":"ristsrppasswd-555549447d6d2b98cdec33d2bce6122af31d91a4","platform":0,"team_id":null},"signing_status":"AdHoc"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"2c4792dd7a4b1455be440bfad0b694931c37bbef4a5f7cb37c2d26bdf40da0b8","imphash":"6517b3120bf537c86c8ff98db22e28f3b5673621d74474e81d828bef35c99276","sha256_text":"a2ac06427cf3812a3874600223ac53baef57a06a661b523a3b5843264422b185","symbolhash":"6517b3120bf537c86c8ff98db22e28f3b5673621d74474e81d828bef35c99276"},"sets":{"apis_called":["__error","__stack_chk_fail","__stack_chk_guard","__stderrp","create_and_print","gettimeofday","librist_crypto_srp_create_verifier","librist_get_ng_constants","mbedtls_base64_encode","printf","pthread_cond_timedwait","rist__get_system_boottime","sysctl"],"bundle_ids":[],"cpp_classes":[],"entitlements":[],"frameworks":["librist.4.dylib","libmbedcrypto.16.dylib","libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Ad-Hoc","static_libs":["girepository-2.0-2.86.3","rist-0.2.11_1"],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":0,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":3,"iokit_constants":0,"library_functions":2,"nlist_functions":5,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":6,"size_log2":15.675075,"static_lib_count":2,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.01766055,"url_endpoints":0,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-09T09:15:39Z","available_arches":["arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"d7e90a8edb3fc2a7884b79034a5d32075d30dda77f1ec2db400956b7e4f64014","file_modified":"2026-04-09T09:15:39Z","file_size":52320,"is_arm64e":false,"min_os":"26.0.0","name":"ristsrppasswd","platform":"macOS","sdk":"26.1.0","sha256":"dd5b6713669080feaeb2a460e56c9355879b87a5ffcc5da294ec1a7c44531c4e","sha256_slice":"dd5b6713669080feaeb2a460e56c9355879b87a5ffcc5da294ec1a7c44531c4e","source_version":null,"team_id":null,"uuid":"7D6D2B98-CDEC-33D2-BCE6-122AF31D91A4"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/opt/homebrew/Cellar/librist/0.2.11_1/lib/librist.4.dylib"},{"is_private":false,"is_weak":false,"name":"/opt/homebrew/opt/mbedtls@3/lib/libmbedcrypto.16.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":5,"imports":[{"address":0,"dylib":"/opt/homebrew/Cellar/librist/0.2.11_1/lib/librist.4.dylib","is_lazy":false,"is_weak":false,"name":"librist_crypto_srp_create_verifier"},{"address":0,"dylib":"/opt/homebrew/Cellar/librist/0.2.11_1/lib/librist.4.dylib","is_lazy":false,"is_weak":false,"name":"librist_get_ng_constants"},{"address":0,"dylib":"/opt/homebrew/opt/mbedtls@3/lib/libmbedcrypto.16.dylib","is_lazy":false,"is_weak":false,"name":"mbedtls_base64_encode"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__error"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_fail"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_guard"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stderrp"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"bzero"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"fprintf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"free"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"gettimeofday"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"printf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"pthread_cond_timedwait"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"sysctl"}],"interesting_strings":{},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{"girepository-2.0":["2.86.3",1],"rist":["0.2.11_1",1]},"library_ratio":0.4,"total_functions":5,"total_identified":2},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":4448,"protection":"r-x","segment":"__TEXT","size":924},{"name":"__stubs","offset":5372,"protection":"r-x","segment":"__TEXT","size":144},{"name":"__cstring","offset":5516,"protection":"r-x","segment":"__TEXT","size":48},{"name":"__const","offset":5568,"protection":"r-x","segment":"__TEXT","size":8},{"name":"__unwind_info","offset":5576,"protection":"r-x","segment":"__TEXT","size":112},{"name":"__got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":112}],"summary":"This ad-hoc signed arm64 executable cannot be meaningfully analyzed without access to symbol information, string constants, or function names. The binary contains 5 exported functions and links against 3 standard frameworks, but the UUID-based filename and lack of identifying metadata prevent determination of its actual purpose or functionality. Security analysts should analyze the binary directly using a disassembler or dynamic execution to understand its behavior.","swift_metadata":null,"title":"Unknown utility — insufficient analysis data available","total_strings":63,"xpc_services":[]}