ldns-signzone
executablemacOS88.5 KBarm64
Unidentified utility — network communication and data transfer
An ad-hoc signed arm64 executable that initiates network connections to external endpoints. Contains URL and network endpoint references suggesting HTTP or similar protocol communication. The small function count and minimal framework dependencies indicate a focused utility rather than a system service. Ad-hoc signing and lack of identified private frameworks suggest this is a development, test, or third-party tool rather than a standard macOS system component. A security analyst should identify the three network endpoints and URL to determine the purpose and legitimacy of outbound connections.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- arm64
- Min OS
- 26.0.0
- SDK
- 26.1.0
- File Size
- 88.5 KB
- UUID
- D1C87D26-6151-3AEE-BCA4-57D72144F53F
- Analyzed
- 2026-04-09T09:03:06Z
- CDHash
- f37050ea2f84e4c2b366462d22e163a4236c5eb03d975b149fb4f9dfb4888c72
Interesting Strings
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
1
Telemetry Strings
0
File Paths
0
Bundle IDs
0
IOKit Constants
0
Library Functions
3
Structural HashesSHA-256
Static Libraries3 / 11 functions identified
Identified Libraries
Functions(11)
0x100001218str2zonemd_signflag
0x100001350main
0x1000020eccheck_tm
0x1000021f0usage
0x100002708load_key
0x100002b10find_or_create_pubkey
0x100002ed0post_process_engine_key
0x100002f54shutdown_openssl
0x100002f70find_key_in_file
0x100003068ldns_b64_pton
0x1000032ecldns_b64_ntop
Imports96 symbols from 3 dylibs
Exports7
_mh_execute_header0x0
ldns_b64_ntop0x32ec
ldns_b64_pton0x3068
main0x1350
prog0xc008
str2zonemd_signflag0x1218
verbosity0xc000