postlog
executablemacOS418.6 KBx86_64, arm64
System component — communicates with remote endpoints and manages bundle resources
Apple-signed executable that loads and manages bundled resources while maintaining network communication with six remote endpoints. Processes four file paths and references a single bundle identifier during execution. Implements 459 functions across public frameworks, suggesting coordination with standard system services. Network activity and resource handling indicate this binary serves as infrastructure for system-level operations or service coordination.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 418.6 KB
- UUID
- A9ED8657-BF65-33AA-AA07-B90FADA8E474
- Analyzed
- 2026-04-07T05:21:16Z
- CDHash
- bc2274a4d3a6676fea09a8e78109711a772960ccefa8be506e61d0e161502644
Frameworks9
Interesting Strings
Bundle IDs(1)
File Paths(4)
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
4
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 459 functions identified
Functions(459)
0x100000890main
0x100000c04been_here_init
0x100000c50been_here_free
0x100000c90been_here
0x100000d00been_here_fixed
0x100000df0been_here_check
0x100000e60been_here_check_fixed
0x100000f1cconv_time
0x100001050mail_conf_checkdir
0x100001210mail_conf_read
0x100001238mail_conf_suck
0x100001334mail_conf_flush
0x100001378mail_conf_eval
0x10000138cmail_conf_eval_once
0x1000013a0mail_conf_lookup
0x1000013b0mail_conf_lookup_eval
0x100001400mail_conf_update
0x100001414get_mail_conf_bool
0x10000147csub_10000147c
0x100001504set_mail_conf_bool
Imports117 symbols from 1 dylibs
Exports487
_mh_execute_header0x0
allascii_len0x148b8
alldig0x4350
argv_add0x4488
argv_addn0x4530
argv_alloc0x43e0
argv_delete0x47d4
argv_free0x4384
argv_insert_one0x468c
argv_replace_one0x4754
argv_sort0x4438
argv_split0x4898
argv_split_append0x4a0c
argv_split_count0x491c
argv_splitq0x1779c
argv_splitq_append0x17920
argv_splitq_count0x17828
argv_terminate0x4604
argv_truncate0x4610
auto_clnt_access0x4b60
auto_clnt_create0x4cec
auto_clnt_free0x4e48
auto_clnt_name0x4e40
auto_clnt_recover0x4a84
balpar0x179a0
been_here0xc90
been_here_check0xdf0
been_here_check_fixed0xe60
been_here_fixed0xd00
been_here_free0xc50
been_here_init0xc04
casefoldx0x1821c
check_mail_conf_int0x1628
check_mail_conf_str0x1f30
check_mail_conf_time0x2240
check_mail_version0x418c
cidr_match_endif0x53d8
cidr_match_execute0x4ec8
cidr_match_parse0x50dc
cidr_match_parse_if0x53a8
clean_env0x53f4
close_on_exec0x55ec
concatenate0x5690
conv_time0xf1c
ctable_create0x5718
ctable_free0x5a28
ctable_locate0x57b8
ctable_newcontext0x5a20
ctable_refresh0x593c
ctable_walk0x5acc
dict_alloc0x67c4
dict_allow_surrogate0x244d8
dict_btree_open0x74f4
dict_changed0x671c
dict_changed_name0x6614
dict_cidr_open0x6a18
dict_db_cache_size0x24008
dict_debug0x7cfc
dict_delete0x5ef8
dict_env_open0x806c
dict_error0x606c
dict_eval0x6434
dict_fail_open0x14e44
dict_flags_mask0x679c
dict_flags_str0x673c
dict_free0x6980
dict_handle0x5bf8
dict_hash_open0x7178
dict_ht_open0x8250
dict_inline_open0x17f68
dict_jmp_alloc0x69dc
dict_lmdb_map_size0x24000
dict_load_file_xt0x60b0
dict_load_fp0x6200
dict_lookup0x5e14
dict_mapnames0x890c
dict_mapnames_extend0x89e0
dict_open0x8584
dict_open30x8604
dict_open_extend0x88f8
dict_open_register0x8864
dict_pcre_open0x15b88
dict_pipe_open0x16c60
dict_random_open0x17018
dict_regexp_open0x8a2c
dict_register0x5b18
dict_sequence0x5fa4
dict_sockmap_open0x152a4
dict_static_open0x9a80
dict_surrogate0x14f48
dict_tcp_open0x9bb8
dict_thash_open0x149c4
dict_type_override0x89f4
dict_union_open0x179f8
dict_unix_open0xa078
dict_unregister0x5c2c
dict_update0x5d4c
dict_utf8_activate0x18424
dict_walk0x65a4
doze0xa478
event_cancel_timer0xb478
event_disable_readwrite0xb16c
event_drain0xa6b4
event_enable_read0xae40
event_enable_write0xac78
event_fork0xab5c
event_loop0xa7e8
event_request_timer0xb30c
event_time0xa4f0
extpar0x17e20
get_hostname0xb54c
get_mail_conf_bool0x1414
get_mail_conf_bool_fn0x1520
get_mail_conf_bool_fn_table0x15dc
get_mail_conf_bool_table0x1590
get_mail_conf_int0x1684
get_mail_conf_int20x1870
get_mail_conf_int_fn0x1948
get_mail_conf_int_fn_table0x1a64
get_mail_conf_int_table0x1a18
get_mail_conf_long0x1ab0
get_mail_conf_long20x1ce8
get_mail_conf_long_fn0x1dc0
get_mail_conf_long_fn_table0x1ee0
get_mail_conf_long_table0x1e90
get_mail_conf_nbool0x3e5c
get_mail_conf_nbool_fn0x3ecc
get_mail_conf_nbool_fn_table0x3f88
get_mail_conf_nbool_table0x3f3c
get_mail_conf_str0x1fbc
get_mail_conf_str20x2044
get_mail_conf_str_fn0x20e4
get_mail_conf_str_fn_table0x21d8
get_mail_conf_str_table0x2170
get_mail_conf_time0x229c
get_mail_conf_time20x23f0
get_mail_conf_time_table0x2568
get_mail_version0x4180
hex_quote0xb5f0
hex_unquote0xb6e4
host_port0xb814
hostaddr_to_sockaddr0xe344
hostname_to_sockaddr_pf0xe2a4
htable_create0xb9ec
htable_delete0xbd5c
htable_enter0xba54
htable_find0xbbe8
htable_free0xbeb0
htable_list0xbfec
htable_locate0xbca4
htable_sequence0xc078
htable_walk0xbf74
inet_addr_host0xc104
inet_addr_list_append0xc300
inet_addr_list_free0xc528
inet_addr_list_init0xc2c8
inet_addr_list_uniq0xc434
inet_addr_local0xc530
inet_connect0xc774
inet_proto_init0xca5c
inet_proto_table0x244c0
inet_windowsize0x244d4
long_name_mask_delim_opt0xf170
lowercase0xcda4
mac_expand0xce04
mac_parse0xd668
mail_conf_checkdir0x1050
mail_conf_eval0x1378
mail_conf_eval_once0x138c
mail_conf_flush0x1334
mail_conf_lookup0x13a0
mail_conf_lookup_eval0x13b0
mail_conf_read0x1210
mail_conf_suck0x1238
mail_conf_update0x1400
mail_params_init0x25b4
mail_parm_split0x425c
mail_task0x2f50
mail_version_free0x4144
mail_version_parse0x3fd4
mail_version_stamp0x244e0
main0x890
mask_addr0xd9c8
midna_domain_cache_size0x243d8
midna_domain_suffix_to_ascii0x176a8
midna_domain_suffix_to_utf80x1770c
midna_domain_to_ascii0x172c4
midna_domain_to_utf80x174c0
midna_domain_transitional0x244dc
msg_cleanup0xdc8c
msg_error0xdad4
msg_error_clear0xdcb4
msg_error_limit0xdca0
msg_exiting0x244cc
msg_fatal0xdb50
msg_fatal_status0xdbc0
msg_info0xda4c
msg_output0xdcc0
msg_panic0xdc30
msg_printf0xdd40
msg_syslog_facility0xe064
msg_syslog_init0xdf0c
msg_text0xde34
msg_text_lock0x24850
msg_verbose0x244c8
msg_vprintf0xdd6c
msg_vprintf_lock0x24854
msg_vstream_init0xe0bc
msg_warn0xda90
mvect_alloc0xe190
mvect_free0xe264
mvect_realloc0xe1ec
myaddrinfo_control0xe500
myflock0xe540
myfree0xe89c
mymalloc0xe6c0
mymemdup0xea9c
mynetworks0x2ff8
mynetworks_host0x3514
myrand0xeb14
myrealloc0xe754
mysrand0xeaf0
mystrdup0xe974
mystrndup0xe9f4
mystrtok0xeb6c
mystrtokq0xebe0
name_code0xecb8
name_mask_delim_opt0xed5c
netstring_except0xf510
netstring_fflush0xfa34
netstring_get0xf768
netstring_get_data0xf630
netstring_get_length0xf524
netstring_get_terminator0xf70c
netstring_memcat0xfb04
netstring_memcpy0xfa78
netstring_put0xf7d0
netstring_put_multi0xf8b4
netstring_setup0xf4e0
netstring_strerror0xfb90
non_blocking0xfbb8
null_format_string0x1ebe0
open_limit0xfc60
own_inet_addr0x354c
own_inet_addr_list0x3a00
own_inet_mask_list0x3a30
percentm0xfd18
poll_fd0x15a88
poll_fd_bsd0x158c8
printable0xfe88
proxy_inet_addr0x3a60
proxy_inet_addr_list0x3bd8
readllines0xfefc
ring_append0x101a0
ring_detach0x101c8
ring_init0x10198
ring_prepend0x101b4
safe_getenv0x101dc
sane_connect0x10228
set_inet_windowsize0x14924
set_mail_conf_bool0x1504
set_mail_conf_int0x17f4
set_mail_conf_long0x1c10
set_mail_conf_nbool0x3ec8
set_mail_conf_str0x216c
set_mail_conf_time0x23ec
set_mail_conf_time_int0x24ec
sock_addr_cmp_addr0x1029c
sock_addr_cmp_port0x10338
sock_addr_in_loopback0x1038c
sockaddr_to_hostaddr0xe3e8
sockaddr_to_hostname0xe460
split_at0x10400
split_at_right0x10420
split_nameval0x10440
split_qnameval0x18ad4
str_long_name_mask_opt0xf320
str_name_code0xed28
str_name_mask_opt0xefb0
strcasecmp_utf8x0x188e0
strncasecmp_utf8x0x189d4
timed_connect0x105c4
timed_read0x10688
timed_write0x10774
trimblanks0x10860
unix_connect0x108ac
unsafe0x109f8
update_env0x550c
util_utf8_enable0x244d0
valid_hostaddr0x10bfc
valid_hostname0x10a54
valid_hostport0x1107c
valid_ipv4_hostaddr0x10ee8
valid_ipv6_hostaddr0x10cac
valid_utf8_hostname0x17204
valid_utf8_string0x18c34
var_alias_db_map0x244e8
var_bounce_service0x244f0
var_bundle_rcpt0x244f8
var_cleanup_service0x24500
var_command_dir0x24508
var_compat_level0x24510
var_config_dir0x24518
var_config_dirs0x24520
var_cyrus_sasl_authzid0x24528
var_daemon_dir0x24530
var_daemon_open_fatal0x24538
var_daemon_timeout0x2453c
var_data_dir0x24540
var_db_create_buf0x24548
var_db_read_buf0x2454c
var_db_type0x24550
var_debug_peer_level0x24558
var_debug_peer_list0x24560
var_default_gid0x24568
var_default_privs0x24570
var_default_uid0x24578
var_defer_service0x24580
var_delay_max_res0x24588
var_disable_dns0x2458c
var_disable_mime_input0x24590
var_disable_mime_oconv0x24594
var_dns_ncache_ttl_fix0x24598
var_dont_remove0x2459c
var_double_bounce_sender0x245a0
var_drop_hdrs0x245a8
var_dsn_filter0x245b0
var_error_service0x245b8
var_event_drain0x245c0
var_export_environ0x245c8
var_fault_inj_code0x245d0
var_fflush_domains0x245d8
var_flock_delay0x245e0
var_flock_stale0x245e4
var_flock_tries0x245e8
var_flush_service0x245f0
var_fork_delay0x245f8
var_fork_tries0x245fc
var_hash_queue_depth0x24600
var_hash_queue_names0x24608
var_header_limit0x24610
var_helpful_warnings0x24614
var_idle_limit0x24618
var_idna2003_compat0x2461c
var_import_environ0x24620
var_in_flow_delay0x24628
var_inet_interfaces0x24630
var_inet_protocols0x24638
var_inet_windowsize0x24640
var_int_filt_classes0x24648
var_ipc_idle_limit0x24650
var_ipc_timeout0x24654
var_ipc_ttl_limit0x24658
var_line_limit0x2465c
var_lmdb_map_size0x24660
var_long_queue_ids0x24668
var_mail_name0x24670
var_mail_owner0x24678
var_mail_release0x24680
var_mail_version0x24688
var_message_limit0x24690
var_meta_dir0x24698
var_mime_bound_len0x246a0
var_mime_maxdepth0x246a4
var_multi_conf_dirs0x246a8
var_multi_enable0x246b0
var_multi_group0x246b8
var_multi_name0x246c0
var_multi_wrapper0x246c8
var_mydest0x246d0
var_mydomain0x246d8
var_myhostname0x246e0
var_mynetworks0x246e8
var_mynetworks_style0x246f0
var_myorigin0x246f8
var_oldlog_compat0x24700
var_owner_gid0x24704
var_owner_uid0x24708
var_ownreq_special0x2470c
var_par_dom_match0x24710
var_pickup_service0x24718
var_pid0x24720
var_pid_dir0x24728
var_proc_limit0x24730
var_procname0x24738
var_proxy_interfaces0x24740
var_proxymap_service0x24748
var_proxywrite_service0x24750
var_queue_dir0x24758
var_queue_service0x24760
var_rcpt_delim0x24768
var_relay_domains0x24770
var_relayhost0x24778
var_rewrite_service0x24780
var_server_config_dir0x24788
var_sgid_gid0x24790
var_sgid_group0x24798
var_shlib_dir0x247a0
var_showq_service0x247a8
var_smtputf8_autoclass0x247b0
var_smtputf8_enable0x247b8
var_soft_bounce0x247bc
var_starttime0x247c0
var_strict_7bit_hdrs0x247c8
var_strict_8bit_body0x247cc
var_strict_8bitmime0x247d0
var_strict_encoding0x247d4
var_strict_smtputf80x247d8
var_syslog_facility0x247e0
var_syslog_name0x247e8
var_token_limit0x247f0
var_trace_service0x247f8
var_transit_dest0x24800
var_transit_origin0x24808
var_trigger_timeout0x24810
var_use_limit0x24814
var_verify_neg_cache0x24818
var_verify_service0x24820
var_verp_delims0x24828
var_verp_filter0x24830
vbuf_get0x11184
vbuf_print0x11374
vbuf_put0x111d8
vbuf_read0x11234
vbuf_unget0x11130
vbuf_write0x112d4
verp_delims_verify0x3de0
verp_sender0x3c20
vmsg_error0xdb00
vmsg_fatal0xdb70
vmsg_fatal_status0xdbe0
vmsg_info0xda80
vmsg_panic0xdc50
vmsg_warn0xdac4
vstream_bufstat0x135b0
vstream_control0x130bc
vstream_fclose0x12dcc
vstream_fdclose0x12f5c
vstream_fdopen0x12b5c
vstream_fflush0x12ca4
vstream_fopen0x12c48
vstream_fprintf0x13008
vstream_fpurge0x123f0
vstream_fputs0x13044
vstream_fseek0x124fc
vstream_fstd0x24018
vstream_ftell0x12ac0
vstream_peek0x1365c
vstream_peek_data0x13688
vstream_printf0x12fc0
vstream_vfprintf0x13588
vstream_vprintf0x13550
vstring_alloc0x137a4
vstring_ctl0x1390c
vstring_export0x13f44
vstring_free0x138d4
vstring_get0x142b4
vstring_get_bound0x14570
vstring_get_nonl0x14394
vstring_get_nonl_bound0x14680
vstring_get_null0x14488
vstring_get_null_bound0x147a0
vstring_import0x13f70
vstring_insert0x13d98
vstring_memcat0x13cf8
vstring_memchr0x13d64
vstring_memcpy0x13c90
vstring_prepend0x13e88
vstring_sprintf0x13ff0
vstring_sprintf_append0x14070
vstring_sprintf_prepend0x1411c
vstring_strcat0x13b58
vstring_strcpy0x13a18
vstring_strncat0x13be8
vstring_strncpy0x13aac
vstring_truncate0x1399c
vstring_vsprintf0x1401c
vstring_vsprintf_append0x140d0
warn_compat_break_app_dot_mydomain0x24838
warn_compat_break_chroot0x2483c
warn_compat_break_flush_domains0x24840
warn_compat_break_mynetworks_style0x24844
warn_compat_break_relay_domains0x24848
warn_compat_break_smtputf8_enable0x2484c
warn_fstat0x15274
warn_lstat0x15244
warn_stat0x15214