{"arch":"arm64","build_provenance":null,"call_graph":{"calls":{"4294971848":[{"is_tail_call":false,"symbol":"printf","target_va":4294974924},{"is_tail_call":false,"symbol":"strchr","target_va":4294974948},{"is_tail_call":false,"symbol":"ldns_wire2pkt","target_va":4294974684},{"is_tail_call":false,"symbol":"ldns_wire2pkt","target_va":4294974684},{"is_tail_call":false,"symbol":"get_packet","target_va":4294972580},{"is_tail_call":false,"symbol":"check_packet","target_va":4294973148},{"is_tail_call":false,"symbol":"get_packet","target_va":4294972580},{"is_tail_call":false,"symbol":"check_packet","target_va":4294973148},{"is_tail_call":false,"symbol":"puts","target_va":4294974936},{"is_tail_call":false,"symbol":"printf","target_va":4294974924},{"is_tail_call":false,"symbol":"printf","target_va":4294974924},{"is_tail_call":false,"symbol":"puts","target_va":4294974936}],"4294972580":[{"is_tail_call":false,"symbol":"__maskrune","target_va":4294974708},{"is_tail_call":false,"symbol":"ldns_buffer_free","target_va":4294974792},{"is_tail_call":false,"symbol":"__stack_chk_fail","target_va":4294974720},{"is_tail_call":false,"symbol":"printf","target_va":4294974924},{"is_tail_call":false,"symbol":"puts","target_va":4294974936},{"is_tail_call":false,"symbol":"ldns_get_random","target_va":4294974828},{"is_tail_call":false,"symbol":"ldns_pkt2buffer_wire","target_va":4294974840},{"is_tail_call":false,"symbol":"__stack_chk_guard","target_va":4294974732},{"is_tail_call":false,"symbol":"ldns_pkt_arcount","target_va":4294974852},{"is_tail_call":false,"symbol":"abort","target_va":4294974744},{"is_tail_call":false,"symbol":"__stack_chk_fail","target_va":4294974720},{"is_tail_call":false,"symbol":"printf","target_va":4294974924},{"is_tail_call":false,"symbol":"free","target_va":4294974768},{"is_tail_call":false,"symbol":"puts","target_va":4294974936},{"is_tail_call":false,"symbol":"_DefaultRuneLocale","target_va":4294974696}],"4294973148":[{"is_tail_call":false,"symbol":"ldns_pkt_rcode2str","target_va":4294974900},{"is_tail_call":false,"symbol":"__stack_chk_fail","target_va":4294974720},{"is_tail_call":false,"symbol":"printf","target_va":4294974924},{"is_tail_call":false,"symbol":"inet_pton","target_va":4294974780},{"is_tail_call":false,"symbol":"inet_pton","target_va":4294974780},{"is_tail_call":false,"symbol":"ldns_buffer_new","target_va":4294974804},{"is_tail_call":false,"symbol":"printf","target_va":4294974924},{"is_tail_call":false,"symbol":"ldns_udp_send","target_va":4294974672},{"is_tail_call":false,"symbol":"exit","target_va":4294974756},{"is_tail_call":false,"symbol":"puts","target_va":4294974936},{"is_tail_call":false,"symbol":"ldns_udp_send","target_va":4294974672},{"is_tail_call":false,"symbol":"free","target_va":4294974768}],"4294973492":[{"is_tail_call":false,"symbol":"ldns_get_errorstr_by_id","target_va":4294974816},{"is_tail_call":false,"symbol":"ldns_pkt_free","target_va":4294974864},{"is_tail_call":false,"symbol":"ldns_pkt_get_rcode","target_va":4294974876},{"is_tail_call":false,"symbol":"printf","target_va":4294974924},{"is_tail_call":false,"symbol":"ldns_udp_send","target_va":4294974672}],"4294973620":[{"is_tail_call":false,"symbol":"ldns_pkt_set_edns_do","target_va":4294974624},{"is_tail_call":false,"symbol":"memchr","target_va":4294974912},{"is_tail_call":false,"symbol":"ldns_pkt_set_edns_do","target_va":4294974624},{"is_tail_call":false,"symbol":"ldns_pkt_set_edns_do","target_va":4294974624}]},"data_xrefs":{"by_data":{"4294971393":[4294971848],"4294971400":[4294971848,4294972580,4294973148],"4294971404":[4294971848],"4294971440":[4294973148,4294973492],"4294971504":[4294972580],"4294971664":[4294971848],"4294974960":[4294971848],"4294974964":[4294971848],"4294974966":[4294971848],"4294974970":[4294971848],"4294974974":[4294971848],"4294975009":[4294972580,4294973148],"4294975020":[4294973148],"4294975035":[4294973148,4294973492],"4294975051":[4294973492],"4294975065":[4294971848],"4294975287":[4294971848],"4294975298":[4294973148],"4294975306":[4294972580,4294973148],"4294975327":[4294974264],"4294975392":[4294973620],"4294983680":[4294971848],"4294983824":[4294973620],"4294983848":[4294971848]},"by_function":{"4294971848":[{"data_va":4294983848,"insn_va":4294971884,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294971888,"kind":"Global","value":null},{"data_va":4294974964,"insn_va":4294972028,"kind":"CString","value":null},{"data_va":4294974960,"insn_va":4294972044,"kind":"CString","value":"%s "},{"data_va":4294974966,"insn_va":4294972256,"kind":"CString","value":"se."},{"data_va":4294975287,"insn_va":4294972300,"kind":"CString","value":"OK"},{"data_va":4294971400,"insn_va":4294972308,"kind":"Global","value":null},{"data_va":4294974970,"insn_va":4294972324,"kind":"CString","value":" %s"},{"data_va":4294971404,"insn_va":4294972336,"kind":"Global","value":null},{"data_va":4294971393,"insn_va":4294972340,"kind":"Global","value":null},{"data_va":4294974974,"insn_va":4294972368,"kind":"CString","value":"error: cannot parse IP address %s\n"},{"data_va":4294975065,"insn_va":4294972440,"kind":"CString","value":"off"},{"data_va":4294983848,"insn_va":4294972456,"kind":"Global","value":null},{"data_va":4294983680,"insn_va":4294972460,"kind":"Global","value":null},{"data_va":4294971664,"insn_va":4294972500,"kind":"Global","value":null}],"4294972580":[{"data_va":4294975009,"insn_va":4294972704,"kind":"CString","value":"error: %s\n"},{"data_va":4294975306,"insn_va":4294972732,"kind":"CString","value":"error: out of memory"},{"data_va":4294971400,"insn_va":4294972744,"kind":"Global","value":null},{"data_va":4294971400,"insn_va":4294972760,"kind":"Global","value":null},{"data_va":4294971400,"insn_va":4294972772,"kind":"Global","value":null},{"data_va":4294971400,"insn_va":4294972792,"kind":"Global","value":null},{"data_va":4294975009,"insn_va":4294972832,"kind":"CString","value":"error: %s\n"},{"data_va":4294971400,"insn_va":4294972840,"kind":"Global","value":null},{"data_va":4294975306,"insn_va":4294972868,"kind":"CString","value":"error: out of memory"},{"data_va":4294971504,"insn_va":4294972912,"kind":"Global","value":null}],"4294973148":[{"data_va":4294975009,"insn_va":4294973220,"kind":"CString","value":"error: %s\n"},{"data_va":4294971400,"insn_va":4294973232,"kind":"Global","value":null},{"data_va":4294971400,"insn_va":4294973248,"kind":"Global","value":null},{"data_va":4294975035,"insn_va":4294973280,"kind":"CString","value":"(out of memory)"},{"data_va":4294975020,"insn_va":4294973300,"kind":"CString","value":"no answer, %s\n"},{"data_va":4294975306,"insn_va":4294973336,"kind":"CString","value":"error: out of memory"},{"data_va":4294971400,"insn_va":4294973356,"kind":"Global","value":null},{"data_va":4294975298,"insn_va":4294973396,"kind":"CString","value":"no EDNS"},{"data_va":4294971400,"insn_va":4294973416,"kind":"Global","value":null},{"data_va":4294971440,"insn_va":4294973436,"kind":"Global","value":null}],"4294973492":[{"data_va":4294975035,"insn_va":4294973564,"kind":"CString","value":"(out of memory)"},{"data_va":4294975051,"insn_va":4294973584,"kind":"CString","value":"no DNSSEC %s\n"},{"data_va":4294971440,"insn_va":4294973612,"kind":"Global","value":null}],"4294973620":[{"data_va":4294983824,"insn_va":4294973676,"kind":"Global","value":null},{"data_va":4294975392,"insn_va":4294973684,"kind":"Global","value":null}],"4294974264":[{"data_va":4294975327,"insn_va":4294974296,"kind":"CString","value":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"}]}},"noreturn_vas":[],"symbols":{"4294971848":"main","4294972580":"get_packet","4294973148":"check_packet","4294973492":"check_type_in_answer","4294973620":"ldns_b64_pton","4294974264":"ldns_b64_ntop"}},"capabilities":[],"code_signature":{"code_directory":{"cdhash":"8f3f541e533e38a7e564f7b60781dbe2541aea6f92f62bb8a50af9e3de9fb7ef","flag_names":["CS_ADHOC"],"flags":2,"hash_type":2,"identifier":"ldns-test-edns-555549445d5159e9aad3330489c2a43335b0e463","platform":0,"team_id":null},"signing_status":"AdHoc"},"cpp_hierarchy":null,"data_in_code":[],"dna":{"hashes":{"classhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","cpp_classhash":null,"entitlementhash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","frameworkhash":"8bcb91b9a1e3cafd96a12cf64ed3b1dab21f2042ab901b259d16a4ee1c3ea64d","imphash":"d893d4c771ee69d2889d695e9e69f1a8928763e7a8a7b154f2e6b2ca63cdf9cf","sha256_text":"d4595bf6cd7d7a60705c9ff275804e7d250d16738d6fcb698fe5e7aea7ea0140","symbolhash":"d893d4c771ee69d2889d695e9e69f1a8928763e7a8a7b154f2e6b2ca63cdf9cf"},"sets":{"apis_called":["_DefaultRuneLocale","__maskrune","__stack_chk_fail","__stack_chk_guard","abort","check_packet","exit","free","get_packet","inet_pton","ldns_buffer_free","ldns_buffer_new","ldns_get_errorstr_by_id","ldns_get_random","ldns_pkt2buffer_wire","ldns_pkt_arcount","ldns_pkt_free","ldns_pkt_get_rcode","ldns_pkt_rcode2str","ldns_pkt_set_edns_do","ldns_udp_send","ldns_wire2pkt","memchr","printf","puts","strchr"],"bundle_ids":[],"cpp_classes":[],"entitlements":[],"frameworks":["libldns.3.dylib","libcrypto.3.dylib","libSystem.B.dylib"],"iokit_constants":[],"objc_classes":[],"private_frameworks":[],"protocols":[],"signing_status":"Ad-Hoc","static_libs":["FLAC-1.5.0","Xdmcp-1.1.5","ldns-1.9.0"],"swift_protocol_names":[],"swift_type_names":[],"xpc_services":[]},"vector":{"bundle_ids":0,"cap_analytics":0,"cap_hardware":0,"cap_ipc":0,"cap_keychain":0,"cap_location":0,"cap_network":0,"cap_security":0,"cap_storage":0,"cap_system":0,"cpp_classes":0,"cpp_vtable_entries":0,"entitlements_total":0,"file_paths":0,"frameworks_private":0,"frameworks_total":3,"iokit_constants":0,"library_functions":3,"nlist_functions":6,"objc_classes":0,"objc_ivars":0,"objc_methods":0,"objc_protocols":0,"section_count":7,"size_log2":15.705632,"static_lib_count":3,"swift_conformances":0,"swift_protocols":0,"swift_types":0,"telemetry_strings":0,"text_ratio":0.051946107,"url_endpoints":0,"xpc_provides":0}},"dwarf_metadata":null,"entitlements":{"entries":{},"raw_plist":null},"exports":[{"address":0,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"_mh_execute_header"},{"address":6968,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"ldns_b64_ntop"},{"address":6324,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"ldns_b64_pton"},{"address":4552,"is_reexport":false,"is_thread_local":false,"is_weak":false,"name":"main"}],"fileset_entries":[],"fingerprint":{"analyzed_at":"2026-04-09T09:03:15Z","available_arches":["arm64"],"binary_type":"executable","bundle_id":null,"cdhash":"8f3f541e533e38a7e564f7b60781dbe2541aea6f92f62bb8a50af9e3de9fb7ef","file_modified":"2026-04-09T09:03:15Z","file_size":53440,"is_arm64e":false,"min_os":"26.0.0","name":"ldns-test-edns","platform":"macOS","sdk":"26.1.0","sha256":"ebf4bd95de2cb33dde9189413753f8935d9ef672d5a771adefe2d53d1da2fc7f","sha256_slice":"ebf4bd95de2cb33dde9189413753f8935d9ef672d5a771adefe2d53d1da2fc7f","source_version":null,"team_id":null,"uuid":"5D5159E9-AAD3-3304-89C2-A43335B0E463"},"frameworks":[{"is_private":false,"is_weak":false,"name":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib"},{"is_private":false,"is_weak":false,"name":"/opt/homebrew/opt/openssl@3/lib/libcrypto.3.dylib"},{"is_private":false,"is_weak":false,"name":"/usr/lib/libSystem.B.dylib"}],"function_starts_count":6,"imports":[{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_buffer_free"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_buffer_new"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_get_errorstr_by_id"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_get_random"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_pkt2buffer_wire"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_pkt_arcount"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_pkt_free"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_pkt_get_rcode"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_pkt_query_new_frm_str"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_pkt_rcode2str"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_pkt_rr_list_by_type"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_pkt_set_edns_do"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_pkt_set_edns_udp_size"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_pkt_set_id"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_rr_list_deep_free"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_rr_type2str"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_udp_send"},{"address":0,"dylib":"/opt/homebrew/Cellar/ldns/1.9.0/lib/libldns.3.dylib","is_lazy":false,"is_weak":false,"name":"ldns_wire2pkt"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"_DefaultRuneLocale"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__maskrune"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_fail"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"__stack_chk_guard"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"abort"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"exit"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"free"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"inet_pton"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"memchr"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"printf"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"puts"},{"address":0,"dylib":"/usr/lib/libSystem.B.dylib","is_lazy":false,"is_weak":false,"name":"strchr"}],"interesting_strings":{},"iokit_surface":null,"library_matches":[],"library_profile":{"libraries":{"FLAC":["1.5.0",1],"Xdmcp":["1.1.5",1],"ldns":["1.9.0",1]},"library_ratio":0.5,"total_functions":6,"total_identified":3},"network_surface":{"api_usage":{"callers":[],"classes":[],"methods":[]},"endpoints":[],"has_network_entitlement":false,"network_frameworks":[]},"objc_classes":{},"objc_metadata":{"classes":{}},"sections":[{"name":"__text","offset":4552,"protection":"r-x","segment":"__TEXT","size":2776},{"name":"__stubs","offset":7328,"protection":"r-x","segment":"__TEXT","size":336},{"name":"__cstring","offset":7664,"protection":"r-x","segment":"__TEXT","size":432},{"name":"__const","offset":8096,"protection":"r-x","segment":"__TEXT","size":65},{"name":"__unwind_info","offset":8164,"protection":"r-x","segment":"__TEXT","size":112},{"name":"__got","offset":16384,"protection":"rw-","segment":"__DATA_CONST","size":240},{"name":"__bss","offset":0,"protection":"rw-","segment":"__DATA","size":1}],"summary":"Binary lacks code signing identity and contains minimal function exports (6 functions), making behavioral purpose unclear from static properties alone. Ad-hoc signature indicates local compilation or unsigned distribution. No named frameworks or entitlements are visible in the analysis. Functional analysis of the actual code would be required to determine what operations this executable performs.","swift_metadata":null,"title":"Unknown executable — insufficient metadata for behavioral analysis","total_strings":137,"xpc_services":[]}