ldns-signzone

JSON
executablemacOS88.5 KBarm64

Unidentified utility — network communication and data transfer

An ad-hoc signed arm64 executable that initiates network connections to external endpoints. Contains URL and network endpoint references suggesting HTTP or similar protocol communication. The small function count and minimal framework dependencies indicate a focused utility rather than a system service. Ad-hoc signing and lack of identified private frameworks suggest this is a development, test, or third-party tool rather than a standard macOS system component. A security analyst should identify the three network endpoints and URL to determine the purpose and legitimacy of outbound connections.AI

Fingerprint

Platform
macOS
Type
executable
Arch
arm64
Min OS
26.0.0
SDK
26.1.0
File Size
88.5 KB
UUID
D1C87D26-6151-3AEE-BCA4-57D72144F53F
Analyzed
2026-04-09T09:03:06Z
CDHash
f37050ea2f84e4c2b366462d22e163a4236c5eb03d975b149fb4f9dfb4888c72

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
1
Telemetry Strings
0
File Paths
0
Bundle IDs
0
IOKit Constants
0
Library Functions
3

Structural HashesSHA-256

Static Libraries3 / 11 functions identified

Functions(11)

0x100001218str2zonemd_signflag
0x100001350main
0x1000020eccheck_tm
0x1000021f0usage
0x100002708load_key
0x100002b10find_or_create_pubkey
0x100002ed0post_process_engine_key
0x100002f54shutdown_openssl
0x100002f70find_key_in_file
0x100003068ldns_b64_pton
0x1000032ecldns_b64_ntop

Imports96 symbols from 3 dylibs

Exports7

_mh_execute_header0x0
ldns_b64_ntop0x32ec
ldns_b64_pton0x3068
main0x1350
prog0xc008
str2zonemd_signflag0x1218
verbosity0xc000