postalias
executablemacOS553.9 KBx86_64, arm64
System utility — unknown functionality (insufficient detail)
This Apple-signed executable contains 599 functions and communicates with 6 network endpoints, but the analysis lacks function names, string content, and endpoint details needed to determine its purpose. It uses only public frameworks, suggesting standard system functionality rather than privileged operations. Security analysis requires detailed inspection of the network endpoints, bundle identifiers, and exported function symbols to assess its role and behaviors.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 553.9 KB
- UUID
- 067C2450-AC11-347C-B444-78ADAD573495
- Analyzed
- 2026-04-07T05:21:12Z
- CDHash
- 9cb53954c89ae241b09946efd067d7fe78706922b78cdd0a40ae4fa06997c679
Frameworks9
Interesting Strings
Bundle IDs(1)
File Paths(4)
Network Surface
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
4
Bundle IDs
1
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 599 functions identified
Functions(599)
0x100000890main
0x100000dc4sub_100000dc4
0x100000e18sub_100000e18
0x100000e38sub_100000e38
0x100000ff8sub_100000ff8
0x1000010a4sub_1000010a4
0x1000012acsub_1000012ac
0x10000138csub_10000138c
0x1000014e4sub_1000014e4
0x1000019fcbeen_here_init
0x100001a48been_here_free
0x100001a88been_here
0x100001af8been_here_fixed
0x100001be8been_here_check
0x100001c58been_here_check_fixed
0x100001d14cfg_parser_alloc
0x100001e48sub_100001e48
0x100001f0csub_100001f0c
0x10000201csub_10000201c
0x1000020b0sub_1000020b0
Imports155 symbols from 1 dylibs
Exports574
_mh_execute_header0x0
allascii_len0x201b0
alldig0xd61c
argv_add0xd754
argv_addn0xd7fc
argv_alloc0xd6ac
argv_delete0xdaa0
argv_free0xd650
argv_insert_one0xd958
argv_replace_one0xda20
argv_sort0xd704
argv_split0xdb64
argv_split_append0xdcd8
argv_split_count0xdbe8
argv_splitq0x23094
argv_splitq_append0x23218
argv_splitq_count0x23120
argv_terminate0xd8d0
argv_truncate0xd8dc
attr_print00xe1b0
attr_scan00xe8fc
attr_scan_more00xe928
attr_vprint00xdd50
attr_vscan00xe1dc
auto_clnt_access0xeb08
auto_clnt_create0xec94
auto_clnt_free0xedf0
auto_clnt_name0xede8
auto_clnt_recover0xea2c
balpar0x23298
base64_decode0xf118
base64_decode_opt0xf120
base64_encode0xee70
base64_encode_opt0xee78
been_here0x1a88
been_here_check0x1be8
been_here_check_fixed0x1c58
been_here_fixed0x1af8
been_here_free0x1a48
been_here_init0x19fc
binhash_create0xf310
binhash_delete0xf6c8
binhash_enter0xf374
binhash_find0xf52c
binhash_free0xf82c
binhash_list0xf954
binhash_locate0xf5fc
binhash_walk0xf8dc
casefoldx0x23b14
cfg_get_bool0x2384
cfg_get_int0x2310
cfg_get_str0x2260
cfg_parser_alloc0x1d14
cfg_parser_free0x2410
check_mail_conf_int0x48c0
check_mail_conf_str0x51c8
check_mail_conf_time0x54d8
check_mail_version0xa4f8
cidr_match_endif0xfef0
cidr_match_execute0xf9e0
cidr_match_parse0xfbf4
cidr_match_parse_if0xfec0
clean_env0xff0c
clnt_stream_access0x2550
clnt_stream_create0x26a8
clnt_stream_free0x2714
clnt_stream_recover0x2498
close_on_exec0x10104
concatenate0x101a8
conv_time0x279c
ctable_create0x10230
ctable_free0x10540
ctable_locate0x102d0
ctable_newcontext0x10538
ctable_refresh0x10454
ctable_walk0x105e4
db_common_alloc0x28d0
db_common_check_domain0x3144
db_common_dict_partial0x2b30
db_common_expand0x2b78
db_common_free_ctx0x2b38
db_common_parse0x2900
db_common_parse_domain0x2a74
db_common_sql_build_query0x31c4
dict_alloc0x112dc
dict_allow_surrogate0x344f0
dict_btree_open0x1200c
dict_changed0x11234
dict_changed_name0x1112c
dict_cidr_open0x11530
dict_db_cache_size0x34020
dict_debug0x12814
dict_delete0x10a10
dict_env_open0x12b84
dict_error0x10b84
dict_eval0x10f4c
dict_fail_open0x2073c
dict_flags_mask0x112b4
dict_flags_str0x11254
dict_free0x11498
dict_handle0x10710
dict_hash_open0x11c90
dict_ht_open0x12d68
dict_inline_open0x23860
dict_jmp_alloc0x114f4
dict_ldap_open0xac18
dict_lmdb_map_size0x34018
dict_load_file_xt0x10bc8
dict_load_fp0x10d18
dict_lookup0x1092c
dict_mapnames0x13424
dict_mapnames_extend0x134f8
dict_memcache_open0x9454
dict_open0x1309c
dict_open30x1311c
dict_open_extend0x13410
dict_open_register0x1337c
dict_pcre_open0x21480
dict_pipe_open0x22558
dict_proxy_open0x331c
dict_random_open0x22910
dict_regexp_open0x13544
dict_register0x10630
dict_sequence0x10abc
dict_sockmap_open0x20b9c
dict_static_open0x14598
dict_surrogate0x20840
dict_tcp_open0x146d0
dict_thash_open0x202bc
dict_type_override0x1350c
dict_union_open0x232f0
dict_unix_open0x14b90
dict_unregister0x10744
dict_update0x10864
dict_utf8_activate0x23d1c
dict_walk0x110bc
doze0x14f90
event_cancel_timer0x15f90
event_disable_readwrite0x15c84
event_drain0x151cc
event_enable_read0x15958
event_enable_write0x15790
event_fork0x15674
event_loop0x15300
event_request_timer0x15e24
event_time0x15008
extpar0x23718
get_hostname0x16064
get_mail_conf_bool0x46ac
get_mail_conf_bool_fn0x47b8
get_mail_conf_bool_fn_table0x4874
get_mail_conf_bool_table0x4828
get_mail_conf_int0x491c
get_mail_conf_int20x4b08
get_mail_conf_int_fn0x4be0
get_mail_conf_int_fn_table0x4cfc
get_mail_conf_int_table0x4cb0
get_mail_conf_long0x4d48
get_mail_conf_long20x4f80
get_mail_conf_long_fn0x5058
get_mail_conf_long_fn_table0x5178
get_mail_conf_long_table0x5128
get_mail_conf_nbool0x92dc
get_mail_conf_nbool_fn0x934c
get_mail_conf_nbool_fn_table0x9408
get_mail_conf_nbool_table0x93bc
get_mail_conf_str0x5254
get_mail_conf_str20x52dc
get_mail_conf_str_fn0x537c
get_mail_conf_str_fn_table0x5470
get_mail_conf_str_table0x5408
get_mail_conf_time0x5534
get_mail_conf_time20x5688
get_mail_conf_time_table0x5800
get_mail_version0xa4ec
hex_quote0x16108
hex_unquote0x161fc
host_port0x1632c
hostaddr_to_sockaddr0x19a88
hostname_to_sockaddr_pf0x199e8
htable_create0x16504
htable_delete0x16874
htable_enter0x1656c
htable_find0x16700
htable_free0x169c8
htable_list0x16b04
htable_locate0x167bc
htable_sequence0x16b90
htable_walk0x16a8c
inet_addr_host0x16c1c
inet_addr_list_append0x16e18
inet_addr_list_free0x17040
inet_addr_list_init0x16de0
inet_addr_list_uniq0x16f4c
inet_addr_local0x17048
inet_connect0x1728c
inet_proto_init0x17574
inet_proto_table0x344d8
inet_windowsize0x344ec
long_name_mask_delim_opt0x1a8b4
lowercase0x178bc
mac_expand0x1791c
mac_parse0x18180
mail_conf_checkdir0x42e8
mail_conf_eval0x4610
mail_conf_eval_once0x4624
mail_conf_flush0x45cc
mail_conf_lookup0x4638
mail_conf_lookup_eval0x4648
mail_conf_read0x44a8
mail_conf_suck0x44d0
mail_conf_update0x4698
mail_connect0x584c
mail_connect_wait0x5924
mail_dict_init0x59c0
mail_params_init0x59fc
mail_parm_split0xab24
mail_pathname0x6398
mail_task0x63c8
mail_version_free0xa4b0
mail_version_parse0xa340
mail_version_stamp0x344f8
main0x890
mask_addr0x184e0
match_hostaddr0x18f0c
match_hostname0x18cf0
match_list_free0x18b04
match_list_init0x18564
match_list_match0x1898c
match_string0x18b60
memcache_fread0xa85c
memcache_fwrite0xa7a0
memcache_get0xa5c8
memcache_printf0xaa28
memcache_vprintf0xa9e4
midna_domain_cache_size0x343f0
midna_domain_suffix_to_ascii0x22fa0
midna_domain_suffix_to_utf80x23004
midna_domain_to_ascii0x22bbc
midna_domain_to_utf80x22db8
midna_domain_transitional0x344f4
mkmap_append0x6824
mkmap_btree_open0x660c
mkmap_close0x6878
mkmap_fail_open0xaaf4
mkmap_hash_open0x6470
mkmap_open0x68d4
mkmap_open_extend0x6810
mkmap_open_register0x6704
msg_cleanup0x193d0
msg_error0x19218
msg_error_clear0x193f8
msg_error_limit0x193e4
msg_exiting0x344e4
msg_fatal0x19294
msg_fatal_status0x19304
msg_info0x19190
msg_output0x19404
msg_panic0x19374
msg_printf0x19484
msg_syslog_facility0x197a8
msg_syslog_init0x19650
msg_text0x19578
msg_text_lock0x34868
msg_verbose0x344e0
msg_vprintf0x194b0
msg_vprintf_lock0x3486c
msg_vstream_init0x19800
msg_warn0x191d4
mvect_alloc0x198d4
mvect_free0x199a8
mvect_realloc0x19930
myaddrinfo_control0x19c44
myflock0x19c84
myfree0x19fe0
mymalloc0x19e04
mymemdup0x1a1e0
mynetworks0x6a38
mynetworks_host0x6f54
myrand0x1a258
myrealloc0x19e98
mysrand0x1a234
mystrdup0x1a0b8
mystrndup0x1a138
mystrtok0x1a2b0
mystrtokq0x1a324
name_code0x1a3fc
name_mask_delim_opt0x1a4a0
netstring_except0x1ac54
netstring_fflush0x1b178
netstring_get0x1aeac
netstring_get_data0x1ad74
netstring_get_length0x1ac68
netstring_get_terminator0x1ae50
netstring_memcat0x1b248
netstring_memcpy0x1b1bc
netstring_put0x1af14
netstring_put_multi0x1aff8
netstring_setup0x1ac24
netstring_strerror0x1b2d4
non_blocking0x1b2fc
null_format_string0x2ce90
open_limit0x1b3a4
own_inet_addr0x6f8c
own_inet_addr_list0x7440
own_inet_mask_list0x7470
percentm0x1b45c
poll_fd0x21380
poll_fd_bsd0x211c0
printable0x1b5cc
proxy_inet_addr0x74a0
proxy_inet_addr_list0x7618
quote_822_local_flags0x7660
readllines0x1b640
ring_append0x1b8e4
ring_detach0x1b90c
ring_init0x1b8dc
ring_prepend0x1b8f8
safe_getenv0x1b920
sane_connect0x1b96c
set_eugid0x1b9e0
set_inet_windowsize0x2021c
set_mail_conf_bool0x479c
set_mail_conf_int0x4a8c
set_mail_conf_long0x4ea8
set_mail_conf_nbool0x9348
set_mail_conf_str0x5404
set_mail_conf_time0x5684
set_mail_conf_time_int0x5784
sigdelay0x1bb24
sigresume0x1bad8
sock_addr_cmp_addr0x1bb94
sock_addr_cmp_port0x1bc30
sock_addr_in_loopback0x1bc84
sockaddr_to_hostaddr0x19b2c
sockaddr_to_hostname0x19ba4
split_at0x1bcf8
split_at_right0x1bd18
split_nameval0x1bd38
split_qnameval0x243cc
str_long_name_mask_opt0x1aa64
str_name_code0x1a46c
str_name_mask_opt0x1a6f4
strcasecmp_utf8x0x241d8
strncasecmp_utf8x0x242cc
timed_connect0x1bebc
timed_ipc_setup0x7a70
timed_read0x1bf80
timed_write0x1c06c
tok822_alloc0x7af4
tok822_append0x8d50
tok822_apply0x8fac
tok822_cut_after0x8de8
tok822_cut_before0x8dd0
tok822_externalize0x7e98
tok822_find_type0x7abc
tok822_free0x7b84
tok822_free_tree0x8f60
tok822_grep0x900c
tok822_internalize0x7bbc
tok822_parse_limit0x89d0
tok822_prepend0x8d90
tok822_rfind_type0x7ad8
tok822_scan_addr0x8d08
tok822_scan_limit0x84d4
tok822_sub_append0x8e20
tok822_sub_keep_after0x8f38
tok822_sub_keep_before0x8f10
tok822_sub_prepend0x8e94
tok822_unlink0x8e00
trimblanks0x1c158
unix_connect0x1c1a4
unquote_822_local0x7900
unsafe0x1c2f0
update_env0x10024
util_utf8_enable0x344e8
valid_hostaddr0x1c4f4
valid_hostname0x1c34c
valid_hostport0x1c974
valid_ipv4_hostaddr0x1c7e0
valid_ipv6_hostaddr0x1c5a4
valid_utf8_hostname0x22afc
valid_utf8_string0x2452c
var_alias_db_map0x34500
var_bounce_service0x34508
var_bundle_rcpt0x34510
var_cleanup_service0x34518
var_command_dir0x34520
var_compat_level0x34528
var_config_dir0x34530
var_config_dirs0x34538
var_cyrus_sasl_authzid0x34540
var_daemon_dir0x34548
var_daemon_open_fatal0x34550
var_daemon_timeout0x34554
var_data_dir0x34558
var_db_create_buf0x34560
var_db_read_buf0x34564
var_db_type0x34568
var_debug_peer_level0x34570
var_debug_peer_list0x34578
var_default_gid0x34580
var_default_privs0x34588
var_default_uid0x34590
var_defer_service0x34598
var_delay_max_res0x345a0
var_disable_dns0x345a4
var_disable_mime_input0x345a8
var_disable_mime_oconv0x345ac
var_dns_ncache_ttl_fix0x345b0
var_dont_remove0x345b4
var_double_bounce_sender0x345b8
var_drop_hdrs0x345c0
var_dsn_filter0x345c8
var_error_service0x345d0
var_event_drain0x345d8
var_export_environ0x345e0
var_fault_inj_code0x345e8
var_fflush_domains0x345f0
var_flock_delay0x345f8
var_flock_stale0x345fc
var_flock_tries0x34600
var_flush_service0x34608
var_fork_delay0x34610
var_fork_tries0x34614
var_hash_queue_depth0x34618
var_hash_queue_names0x34620
var_header_limit0x34628
var_helpful_warnings0x3462c
var_idle_limit0x34630
var_idna2003_compat0x34634
var_import_environ0x34638
var_in_flow_delay0x34640
var_inet_interfaces0x34648
var_inet_protocols0x34650
var_inet_windowsize0x34658
var_int_filt_classes0x34660
var_ipc_idle_limit0x34668
var_ipc_timeout0x3466c
var_ipc_ttl_limit0x34670
var_line_limit0x34674
var_lmdb_map_size0x34678
var_long_queue_ids0x34680
var_mail_name0x34688
var_mail_owner0x34690
var_mail_release0x34698
var_mail_version0x346a0
var_message_limit0x346a8
var_meta_dir0x346b0
var_mime_bound_len0x346b8
var_mime_maxdepth0x346bc
var_multi_conf_dirs0x346c0
var_multi_enable0x346c8
var_multi_group0x346d0
var_multi_name0x346d8
var_multi_wrapper0x346e0
var_mydest0x346e8
var_mydomain0x346f0
var_myhostname0x346f8
var_mynetworks0x34700
var_mynetworks_style0x34708
var_myorigin0x34710
var_oldlog_compat0x34718
var_owner_gid0x3471c
var_owner_uid0x34720
var_ownreq_special0x34724
var_par_dom_match0x34728
var_pickup_service0x34730
var_pid0x34738
var_pid_dir0x34740
var_proc_limit0x34748
var_procname0x34750
var_proxy_interfaces0x34758
var_proxymap_service0x34760
var_proxywrite_service0x34768
var_queue_dir0x34770
var_queue_service0x34778
var_rcpt_delim0x34780
var_relay_domains0x34788
var_relayhost0x34790
var_rewrite_service0x34798
var_server_config_dir0x347a0
var_sgid_gid0x347a8
var_sgid_group0x347b0
var_shlib_dir0x347b8
var_showq_service0x347c0
var_smtputf8_autoclass0x347c8
var_smtputf8_enable0x347d0
var_soft_bounce0x347d4
var_starttime0x347d8
var_strict_7bit_hdrs0x347e0
var_strict_8bit_body0x347e4
var_strict_8bitmime0x347e8
var_strict_encoding0x347ec
var_strict_smtputf80x347f0
var_syslog_facility0x347f8
var_syslog_name0x34800
var_token_limit0x34808
var_trace_service0x34810
var_transit_dest0x34818
var_transit_origin0x34820
var_trigger_timeout0x34828
var_use_limit0x3482c
var_verify_neg_cache0x34830
var_verify_service0x34838
var_verp_delims0x34840
var_verp_filter0x34848
vbuf_get0x1ca7c
vbuf_print0x1cc6c
vbuf_put0x1cad0
vbuf_read0x1cb2c
vbuf_unget0x1ca28
vbuf_write0x1cbcc
verp_delims_verify0x9260
verp_sender0x90a0
vmsg_error0x19244
vmsg_fatal0x192b4
vmsg_fatal_status0x19324
vmsg_info0x191c4
vmsg_panic0x19394
vmsg_warn0x19208
vstream_bufstat0x1eea8
vstream_control0x1e9b4
vstream_fclose0x1e6c4
vstream_fdclose0x1e854
vstream_fdopen0x1e454
vstream_fflush0x1e59c
vstream_fopen0x1e540
vstream_fprintf0x1e900
vstream_fpurge0x1dce8
vstream_fputs0x1e93c
vstream_fseek0x1ddf4
vstream_fstd0x34030
vstream_ftell0x1e3b8
vstream_peek0x1ef54
vstream_peek_data0x1ef80
vstream_printf0x1e8b8
vstream_vfprintf0x1ee80
vstream_vprintf0x1ee48
vstring_alloc0x1f09c
vstring_ctl0x1f204
vstring_export0x1f83c
vstring_free0x1f1cc
vstring_get0x1fbac
vstring_get_bound0x1fe68
vstring_get_nonl0x1fc8c
vstring_get_nonl_bound0x1ff78
vstring_get_null0x1fd80
vstring_get_null_bound0x20098
vstring_import0x1f868
vstring_insert0x1f690
vstring_memcat0x1f5f0
vstring_memchr0x1f65c
vstring_memcpy0x1f588
vstring_prepend0x1f780
vstring_sprintf0x1f8e8
vstring_sprintf_append0x1f968
vstring_sprintf_prepend0x1fa14
vstring_strcat0x1f450
vstring_strcpy0x1f310
vstring_strncat0x1f4e0
vstring_strncpy0x1f3a4
vstring_truncate0x1f294
vstring_vsprintf0x1f914
vstring_vsprintf_append0x1f9c8
warn_compat_break_app_dot_mydomain0x34850
warn_compat_break_chroot0x34854
warn_compat_break_flush_domains0x34858
warn_compat_break_mynetworks_style0x3485c
warn_compat_break_relay_domains0x34860
warn_compat_break_smtputf8_enable0x34864
warn_fstat0x20b6c
warn_lstat0x20b3c
warn_stat0x20b0c