postkick

JSON
executablemacOS418.7 KBx86_64, arm64

System service — manages multiple network endpoints and bundle integration

Executable service that communicates with six distinct network endpoints, suggesting coordination with backend systems or service discovery. Registers or interacts with one bundle identifier and maintains references to four file paths, indicating filesystem and application integration points. Contains 465 functions distributed across nine standard frameworks with no private framework dependencies, pointing to a utility daemon using public system APIs for standard macOS operations.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
418.7 KB
UUID
CE94EB53-2D63-39EC-A5A8-9910E94ABB53
Analyzed
2026-04-07T05:21:11Z
CDHash
f288973a6d149fac2e5c9885f566b009c50f20e837dcbf3413427bf476a5735e

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
4
Bundle IDs
1
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 465 functions identified

Functions(465)

0x100000890main
0x100000b18sub_100000b18
0x100000b38been_here_init
0x100000b84been_here_free
0x100000bc4been_here
0x100000c34been_here_fixed
0x100000d24been_here_check
0x100000d94been_here_check_fixed
0x100000e50conv_time
0x100000f84mail_conf_checkdir
0x100001144mail_conf_read
0x10000116cmail_conf_suck
0x100001268mail_conf_flush
0x1000012acmail_conf_eval
0x1000012c0mail_conf_eval_once
0x1000012d4mail_conf_lookup
0x1000012e4mail_conf_lookup_eval
0x100001334mail_conf_update
0x100001348get_mail_conf_bool
0x1000013b0sub_1000013b0

Imports117 symbols from 1 dylibs

Exports490

_mh_execute_header0x0
allascii_len0x150e8
alldig0x409c
argv_add0x41d4
argv_addn0x427c
argv_alloc0x412c
argv_delete0x4520
argv_free0x40d0
argv_insert_one0x43d8
argv_replace_one0x44a0
argv_sort0x4184
argv_split0x45e4
argv_split_append0x4758
argv_split_count0x4668
argv_splitq0x17fcc
argv_splitq_append0x18150
argv_splitq_count0x18058
argv_terminate0x4350
argv_truncate0x435c
auto_clnt_access0x48ac
auto_clnt_create0x4a38
auto_clnt_free0x4b94
auto_clnt_name0x4b8c
auto_clnt_recover0x47d0
balpar0x181d0
been_here0xbc4
been_here_check0xd24
been_here_check_fixed0xd94
been_here_fixed0xc34
been_here_free0xb84
been_here_init0xb38
casefoldx0x18a4c
check_mail_conf_int0x155c
check_mail_conf_str0x1e64
check_mail_conf_time0x2174
cidr_match_endif0x5124
cidr_match_execute0x4c14
cidr_match_parse0x4e28
cidr_match_parse_if0x50f4
clean_env0x5140
close_on_exec0x5338
concatenate0x53dc
conv_time0xe50
ctable_create0x5464
ctable_free0x5774
ctable_locate0x5504
ctable_newcontext0x576c
ctable_refresh0x5688
ctable_walk0x5818
dict_alloc0x6510
dict_allow_surrogate0x244d8
dict_btree_open0x7240
dict_changed0x6468
dict_changed_name0x6360
dict_cidr_open0x6764
dict_db_cache_size0x24008
dict_debug0x7a48
dict_delete0x5c44
dict_env_open0x7db8
dict_error0x5db8
dict_eval0x6180
dict_fail_open0x15674
dict_flags_mask0x64e8
dict_flags_str0x6488
dict_free0x66cc
dict_handle0x5944
dict_hash_open0x6ec4
dict_ht_open0x7f9c
dict_inline_open0x18798
dict_jmp_alloc0x6728
dict_lmdb_map_size0x24000
dict_load_file_xt0x5dfc
dict_load_fp0x5f4c
dict_lookup0x5b60
dict_mapnames0x8658
dict_mapnames_extend0x872c
dict_open0x82d0
dict_open30x8350
dict_open_extend0x8644
dict_open_register0x85b0
dict_pcre_open0x163b8
dict_pipe_open0x17490
dict_random_open0x17848
dict_regexp_open0x8778
dict_register0x5864
dict_sequence0x5cf0
dict_sockmap_open0x15ad4
dict_static_open0x97cc
dict_surrogate0x15778
dict_tcp_open0x9904
dict_thash_open0x151f4
dict_type_override0x8740
dict_union_open0x18228
dict_unix_open0x9dc4
dict_unregister0x5978
dict_update0x5a98
dict_utf8_activate0x18c54
dict_walk0x62f0
doze0xa1c4
event_cancel_timer0xb1c4
event_disable_readwrite0xaeb8
event_drain0xa400
event_enable_read0xab8c
event_enable_write0xa9c4
event_fork0xa8a8
event_loop0xa534
event_request_timer0xb058
event_time0xa23c
extpar0x18650
fifo_trigger0xb298
get_hostname0xb3e0
get_mail_conf_bool0x1348
get_mail_conf_bool_fn0x1454
get_mail_conf_bool_fn_table0x1510
get_mail_conf_bool_table0x14c4
get_mail_conf_int0x15b8
get_mail_conf_int20x17a4
get_mail_conf_int_fn0x187c
get_mail_conf_int_fn_table0x1998
get_mail_conf_int_table0x194c
get_mail_conf_long0x19e4
get_mail_conf_long20x1c1c
get_mail_conf_long_fn0x1cf4
get_mail_conf_long_fn_table0x1e14
get_mail_conf_long_table0x1dc4
get_mail_conf_nbool0x3e30
get_mail_conf_nbool_fn0x3ea0
get_mail_conf_nbool_fn_table0x3f5c
get_mail_conf_nbool_table0x3f10
get_mail_conf_str0x1ef0
get_mail_conf_str20x1f78
get_mail_conf_str_fn0x2018
get_mail_conf_str_fn_table0x210c
get_mail_conf_str_table0x20a4
get_mail_conf_time0x21d0
get_mail_conf_time20x2324
get_mail_conf_time_table0x249c
hex_quote0xb484
hex_unquote0xb578
host_port0xb6a8
hostaddr_to_sockaddr0xe1d8
hostname_to_sockaddr_pf0xe138
htable_create0xb880
htable_delete0xbbf0
htable_enter0xb8e8
htable_find0xba7c
htable_free0xbd44
htable_list0xbe80
htable_locate0xbb38
htable_sequence0xbf0c
htable_walk0xbe08
inet_addr_host0xbf98
inet_addr_list_append0xc194
inet_addr_list_free0xc3bc
inet_addr_list_init0xc15c
inet_addr_list_uniq0xc2c8
inet_addr_local0xc3c4
inet_connect0xc608
inet_proto_init0xc8f0
inet_proto_table0x244c0
inet_windowsize0x244d4
long_name_mask_delim_opt0xf004
lowercase0xcc38
mac_expand0xcc98
mac_parse0xd4fc
mail_conf_checkdir0xf84
mail_conf_eval0x12ac
mail_conf_eval_once0x12c0
mail_conf_flush0x1268
mail_conf_lookup0x12d4
mail_conf_lookup_eval0x12e4
mail_conf_read0x1144
mail_conf_suck0x116c
mail_conf_update0x1334
mail_params_init0x24e8
mail_parm_split0x3fa8
mail_pathname0x2e84
mail_trigger0x2eb4
mail_version_stamp0x244e0
main0x890
mask_addr0xd85c
midna_domain_cache_size0x243d8
midna_domain_suffix_to_ascii0x17ed8
midna_domain_suffix_to_utf80x17f3c
midna_domain_to_ascii0x17af4
midna_domain_to_utf80x17cf0
midna_domain_transitional0x244dc
msg_cleanup0xdb20
msg_error0xd968
msg_error_clear0xdb48
msg_error_limit0xdb34
msg_exiting0x244cc
msg_fatal0xd9e4
msg_fatal_status0xda54
msg_info0xd8e0
msg_output0xdb54
msg_panic0xdac4
msg_printf0xdbd4
msg_syslog_facility0xdef8
msg_syslog_init0xdda0
msg_text0xdcc8
msg_text_lock0x24850
msg_verbose0x244c8
msg_vprintf0xdc00
msg_vprintf_lock0x24854
msg_vstream_init0xdf50
msg_warn0xd924
mvect_alloc0xe024
mvect_free0xe0f8
mvect_realloc0xe080
myaddrinfo_control0xe394
myflock0xe3d4
myfree0xe730
mymalloc0xe554
mymemdup0xe930
mynetworks0x2fcc
mynetworks_host0x34e8
myrand0xe9a8
myrealloc0xe5e8
mysrand0xe984
mystrdup0xe808
mystrndup0xe888
mystrtok0xea00
mystrtokq0xea74
name_code0xeb4c
name_mask_delim_opt0xebf0
netstring_except0xf3a4
netstring_fflush0xf8c8
netstring_get0xf5fc
netstring_get_data0xf4c4
netstring_get_length0xf3b8
netstring_get_terminator0xf5a0
netstring_memcat0xf998
netstring_memcpy0xf90c
netstring_put0xf664
netstring_put_multi0xf748
netstring_setup0xf374
netstring_strerror0xfa24
non_blocking0xfa4c
null_format_string0x1f5a0
open_limit0xfaf4
own_inet_addr0x3520
own_inet_addr_list0x39d4
own_inet_mask_list0x3a04
percentm0xfbac
poll_fd0x162b8
poll_fd_bsd0x160f8
printable0xfd1c
proxy_inet_addr0x3a34
proxy_inet_addr_list0x3bac
readllines0xfd90
ring_append0x10034
ring_detach0x1005c
ring_init0x1002c
ring_prepend0x10048
safe_getenv0x10070
safe_open0x100bc
sane_basename0x14efc
sane_connect0x10530
sane_dirname0x14fe8
set_inet_windowsize0x15154
set_mail_conf_bool0x1438
set_mail_conf_int0x1728
set_mail_conf_long0x1b44
set_mail_conf_nbool0x3e9c
set_mail_conf_str0x20a0
set_mail_conf_time0x2320
set_mail_conf_time_int0x2420
sock_addr_cmp_addr0x105a4
sock_addr_cmp_port0x10640
sock_addr_in_loopback0x10694
sockaddr_to_hostaddr0xe27c
sockaddr_to_hostname0xe2f4
split_at0x10708
split_at_right0x10728
split_nameval0x10748
split_qnameval0x19304
str_long_name_mask_opt0xf1b4
str_name_code0xebbc
str_name_mask_opt0xee44
strcasecmp_utf8x0x19110
strncasecmp_utf8x0x19204
timed_connect0x108cc
timed_read0x10990
timed_write0x10a7c
trimblanks0x10b68
unix_connect0x10bb4
unix_trigger0x10d00
unsafe0x10f24
update_env0x5258
util_utf8_enable0x244d0
valid_hostaddr0x11128
valid_hostname0x10f80
valid_hostport0x115a8
valid_ipv4_hostaddr0x11414
valid_ipv6_hostaddr0x111d8
valid_utf8_hostname0x17a34
valid_utf8_string0x19464
var_alias_db_map0x244e8
var_bounce_service0x244f0
var_bundle_rcpt0x244f8
var_cleanup_service0x24500
var_command_dir0x24508
var_compat_level0x24510
var_config_dir0x24518
var_config_dirs0x24520
var_cyrus_sasl_authzid0x24528
var_daemon_dir0x24530
var_daemon_open_fatal0x24538
var_daemon_timeout0x2453c
var_data_dir0x24540
var_db_create_buf0x24548
var_db_read_buf0x2454c
var_db_type0x24550
var_debug_peer_level0x24558
var_debug_peer_list0x24560
var_default_gid0x24568
var_default_privs0x24570
var_default_uid0x24578
var_defer_service0x24580
var_delay_max_res0x24588
var_disable_dns0x2458c
var_disable_mime_input0x24590
var_disable_mime_oconv0x24594
var_dns_ncache_ttl_fix0x24598
var_dont_remove0x2459c
var_double_bounce_sender0x245a0
var_drop_hdrs0x245a8
var_dsn_filter0x245b0
var_error_service0x245b8
var_event_drain0x245c0
var_export_environ0x245c8
var_fault_inj_code0x245d0
var_fflush_domains0x245d8
var_flock_delay0x245e0
var_flock_stale0x245e4
var_flock_tries0x245e8
var_flush_service0x245f0
var_fork_delay0x245f8
var_fork_tries0x245fc
var_hash_queue_depth0x24600
var_hash_queue_names0x24608
var_header_limit0x24610
var_helpful_warnings0x24614
var_idle_limit0x24618
var_idna2003_compat0x2461c
var_import_environ0x24620
var_in_flow_delay0x24628
var_inet_interfaces0x24630
var_inet_protocols0x24638
var_inet_windowsize0x24640
var_int_filt_classes0x24648
var_ipc_idle_limit0x24650
var_ipc_timeout0x24654
var_ipc_ttl_limit0x24658
var_line_limit0x2465c
var_lmdb_map_size0x24660
var_long_queue_ids0x24668
var_mail_name0x24670
var_mail_owner0x24678
var_mail_release0x24680
var_mail_version0x24688
var_message_limit0x24690
var_meta_dir0x24698
var_mime_bound_len0x246a0
var_mime_maxdepth0x246a4
var_multi_conf_dirs0x246a8
var_multi_enable0x246b0
var_multi_group0x246b8
var_multi_name0x246c0
var_multi_wrapper0x246c8
var_mydest0x246d0
var_mydomain0x246d8
var_myhostname0x246e0
var_mynetworks0x246e8
var_mynetworks_style0x246f0
var_myorigin0x246f8
var_oldlog_compat0x24700
var_owner_gid0x24704
var_owner_uid0x24708
var_ownreq_special0x2470c
var_par_dom_match0x24710
var_pickup_service0x24718
var_pid0x24720
var_pid_dir0x24728
var_proc_limit0x24730
var_procname0x24738
var_proxy_interfaces0x24740
var_proxymap_service0x24748
var_proxywrite_service0x24750
var_queue_dir0x24758
var_queue_service0x24760
var_rcpt_delim0x24768
var_relay_domains0x24770
var_relayhost0x24778
var_rewrite_service0x24780
var_server_config_dir0x24788
var_sgid_gid0x24790
var_sgid_group0x24798
var_shlib_dir0x247a0
var_showq_service0x247a8
var_smtputf8_autoclass0x247b0
var_smtputf8_enable0x247b8
var_soft_bounce0x247bc
var_starttime0x247c0
var_strict_7bit_hdrs0x247c8
var_strict_8bit_body0x247cc
var_strict_8bitmime0x247d0
var_strict_encoding0x247d4
var_strict_smtputf80x247d8
var_syslog_facility0x247e0
var_syslog_name0x247e8
var_token_limit0x247f0
var_trace_service0x247f8
var_transit_dest0x24800
var_transit_origin0x24808
var_trigger_timeout0x24810
var_use_limit0x24814
var_verify_neg_cache0x24818
var_verify_service0x24820
var_verp_delims0x24828
var_verp_filter0x24830
vbuf_get0x116b0
vbuf_print0x118a0
vbuf_put0x11704
vbuf_read0x11760
vbuf_unget0x1165c
vbuf_write0x11800
verp_delims_verify0x3db4
verp_sender0x3bf4
vmsg_error0xd994
vmsg_fatal0xda04
vmsg_fatal_status0xda74
vmsg_info0xd914
vmsg_panic0xdae4
vmsg_warn0xd958
vstream_bufstat0x13adc
vstream_control0x135e8
vstream_fclose0x132f8
vstream_fdclose0x13488
vstream_fdopen0x13088
vstream_fflush0x131d0
vstream_fopen0x13174
vstream_fprintf0x13534
vstream_fpurge0x1291c
vstream_fputs0x13570
vstream_fseek0x12a28
vstream_fstd0x24018
vstream_ftell0x12fec
vstream_peek0x13b88
vstream_peek_data0x13bb4
vstream_printf0x134ec
vstream_vfprintf0x13ab4
vstream_vprintf0x13a7c
vstring_alloc0x13cd0
vstring_ctl0x13e38
vstring_export0x14470
vstring_free0x13e00
vstring_get0x147e0
vstring_get_bound0x14a9c
vstring_get_nonl0x148c0
vstring_get_nonl_bound0x14bac
vstring_get_null0x149b4
vstring_get_null_bound0x14ccc
vstring_import0x1449c
vstring_insert0x142c4
vstring_memcat0x14224
vstring_memchr0x14290
vstring_memcpy0x141bc
vstring_prepend0x143b4
vstring_sprintf0x1451c
vstring_sprintf_append0x1459c
vstring_sprintf_prepend0x14648
vstring_strcat0x14084
vstring_strcpy0x13f44
vstring_strncat0x14114
vstring_strncpy0x13fd8
vstring_truncate0x13ec8
vstring_vsprintf0x14548
vstring_vsprintf_append0x145fc
warn_compat_break_app_dot_mydomain0x24838
warn_compat_break_chroot0x2483c
warn_compat_break_flush_domains0x24840
warn_compat_break_mynetworks_style0x24844
warn_compat_break_relay_domains0x24848
warn_compat_break_smtputf8_enable0x2484c
warn_fstat0x15aa4
warn_lstat0x15a74
warn_stat0x15a44
write_buf0x14de4