asn1Decoding

JSON
executablemacOS70.9 KBarm64

Unknown executable — lacks identifying metadata or signing chain

Ad-hoc signed arm64 binary with minimal framework dependencies and 33 exported functions. Contains 3 URL/endpoint strings and communicates with 5 network endpoints, indicating network-aware functionality. The lack of standard Apple code signing and absence of clear naming make its purpose difficult to determine; a security analyst should obtain additional context about its origin and deployment method before execution.AI

Fingerprint

Platform
macOS
Type
executable
Arch
arm64
Min OS
15.0.0
SDK
15.2.0
File Size
70.9 KB
UUID
075958CA-45BF-30C6-88D1-5B9A7C6E71D0
Analyzed
2026-04-09T08:34:57Z
CDHash
0788f5ff261640bc596f2079edb0a51141939cc79549dff0a156f2fa1e2caa5c

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
3
Telemetry Strings
0
File Paths
0
Bundle IDs
0
IOKit Constants
0
Library Functions
7

Structural HashesSHA-256

Static Libraries7 / 33 functions identified

Functions(33)

0x100001420main
0x100001888usage
0x10000190csimple_decode
0x100001a88start_benchmark
0x100001ad4alarm_handler
0x100001ae4stop_benchmark
0x100001c9cset_cloexec_flag
0x100001d0cdup_cloexec
0x100001d30rpl_free
0x100001d64rpl_fstat
0x100001df0_getopt_internal_r
0x1000022e0exchange
0x100002394process_long_option
0x1000027d8rpl_getopt_internal
0x100002838rpl_getopt
0x1000028a4rpl_getopt_long
0x1000028b0_getopt_long_r
0x1000028c0rpl_getopt_long_only
0x1000028cc_getopt_long_only_r
0x1000028dcgettime

Imports50 symbols from 2 dylibs

Exports35

_getopt_internal_r0x1df0
_getopt_long_only_r0x28cc
_getopt_long_r0x28b0
_mh_execute_header0x0
benchmark_must_finish0x8010
current_timespec0x28e8
dup_cloexec0x1d0c
emit_bug_reporting_address0x3134
fread_file0x2b38
gettime0x28dc
main0x1420
memset_explicit0x2910
program_name0x8020
read_file0x2dc4
rpl_fopen0x31b4
rpl_free0x1d30
rpl_fstat0x1d64
rpl_getopt0x2838
rpl_getopt_internal0x27d8
rpl_getopt_long0x28a4
rpl_getopt_long_only0x28c0
rpl_open0x2940
rpl_optarg0x8018
rpl_opterr0x8004
rpl_optind0x8000
rpl_optopt0x8008
set_cloexec_flag0x1c9c
set_program_name0x2ab4
start_benchmark0x1a88
stop_benchmark0x1ae4
version_etc0x310c
version_etc_ar0x3078
version_etc_arn0x2e70
version_etc_copyright0x3f00
version_etc_va0x3090