racoon
executablemacOS1.3 MBx86_64, arm64
Network configuration daemon — manages VPN, DNS proxy, content filtering, and network reachability
Manages network configuration policies including VPN tunnels, DNS proxying, and content filtering. Uses NWConnection for modern networking and accesses Keychain for credential storage and certificate validation. Configures network reachability monitoring and responds to network state changes. Exposes two XPC services for system clients to query and modify network settings. Communicates with seven network endpoints for policy updates and service management.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 1.3 MB
- UUID
- F71C793F-A722-352C-BCD0-4F2303AD56A5
- Analyzed
- 2026-04-07T05:21:11Z
- CDHash
- f89f9854eab5a86f4191fb9ae0fc66a48ec8ad137c923e0b14613de3f901ab9b
Capabilities
NetworkModern networking framework (NWConnection)
/System/Library/Frameworks/Network.framework/Versions/A/NetworkNetworkVPN, content filter, DNS proxy APIs
/System/Library/Frameworks/NetworkExtension.framework/Versions/A/NetworkExtensionNetworkNetwork configuration and reachability
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfigurationHardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks11
Entitlements1
Interesting Strings
Bundle IDs(11)
File Paths(11)
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit/System/Library/Frameworks/Network.framework/Versions/A/Network/System/Library/Frameworks/NetworkExtension.framework/Versions/A/NetworkExtension
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
3
Storage
0
Hardware
1
IPC
0
Analytics
0
Security
1
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
0
File Paths
11
Bundle IDs
11
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 2167 functions identified
Functions(2167)
0x100000af0sub_100000af0
0x100000b10sub_100000b10
0x100000b90sub_100000b90
0x100000bc4sub_100000bc4
0x100000c04sub_100000c04
0x100000c30sub_100000c30
0x100000c88sub_100000c88
0x100000cbcsub_100000cbc
0x100000d60sub_100000d60
0x100000d80sub_100000d80
0x100000e00sub_100000e00
0x100000e34sub_100000e34
0x100000e88sub_100000e88
0x100000eb0sub_100000eb0
0x100000edcsub_100000edc
0x100000f4csub_100000f4c
0x100000fbcsub_100000fbc
0x100000ff0sub_100000ff0
0x10000108csub_10000108c
0x1000010c0sub_1000010c0
Imports328 symbols from 9 dylibs
Exports1
_mh_execute_header0x0