srp-mdns-proxy
executablemacOS1.5 MBx86_64, arm64
Network system service — manages VPN, DNS proxying, and content filtering
System daemon that handles VPN connections, DNS proxy services, and content filtering for the network stack. Reads and writes keychain items for credential storage and manages system certificates for authentication. Listens for incoming network connections and makes outgoing ones using modern networking frameworks. Exposes six XPC services for inter-process communication with other system components. Submits analytics to Apple and accesses multiple file paths and network configuration APIs. Enforces privileged network daemon access controls.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 15.0.0
- SDK
- 26.1.0
- File Size
- 1.5 MB
- UUID
- B34F7E8D-81AC-3104-A69F-DB6DB622CC9E
- Analyzed
- 2026-04-09T10:05:31Z
- CDHash
- 536e6f34f7d5326df02dabf45a5ff330f05e0b87da4a290a97d0c069a67867df
Capabilities
NetworkVPN, content filter, DNS proxy APIs
/System/Library/Frameworks/NetworkExtension.framework/Versions/A/NetworkExtensionNetworkModern networking framework (NWConnection)
/System/Library/Frameworks/Network.framework/Versions/A/NetworkNetworkNetwork configuration and reachability
/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfigurationStorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-onlyStorageException: access additional file paths
com.apple.security.exception.files.absolute-path.read-writeIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-nameAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsSecurityKeychain, certificates, code signing
/System/Library/Frameworks/Security.framework/Versions/A/SecurityFrameworks15
Entitlements30
Interesting Strings
Bundle IDs(101)
File Paths(36)
/AppleInternal/Library/BuildRoots/4~B_wqugDH8b7fudagi6_e7_-0yHebZQz6Q2f-Ig0/Library/Caches/com.apple.xbs/Sources/mDNSResponderExtras/ServiceRegistration/adv-ctl-server.c/AppleInternal/Library/BuildRoots/4~B_wqugDH8b7fudagi6_e7_-0yHebZQz6Q2f-Ig0/Library/Caches/com.apple.xbs/Sources/mDNSResponderExtras/ServiceRegistration/cti-services.c/AppleInternal/Library/BuildRoots/4~B_wqugDH8b7fudagi6_e7_-0yHebZQz6Q2f-Ig0/Library/Caches/com.apple.xbs/Sources/mDNSResponderExtras/ServiceRegistration/dnssd-client.c/AppleInternal/Library/BuildRoots/4~B_wqugDH8b7fudagi6_e7_-0yHebZQz6Q2f-Ig0/Library/Caches/com.apple.xbs/Sources/mDNSResponderExtras/ServiceRegistration/dnssd-proxy.c/AppleInternal/Library/BuildRoots/4~B_wqugDH8b7fudagi6_e7_-0yHebZQz6Q2f-Ig0/Library/Caches/com.apple.xbs/Sources/mDNSResponderExtras/ServiceRegistration/ioloop.c
telemetry(5)
%{public}s: Got prefix (%{public}s) {%{public}s%{private, mask.hash, srp:in6_addr_segment}.6P:%{public, mask.hash, srp:in6_addr_segment}.2P:%{private, mask.hash, srp:in6_addr_segment}.8P} len %d stable:%{public}s flags:0x%04x metric:%d rloc:0x%04x%{public}s: prefixes array %zu: Metric appears twice./System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsMetric_os_variant_has_internal_diagnostics
Network Surfaceentitled
Networking Frameworks
Endpoints(8)
DNA Capability Vector
Location
0
Keychain
2
Network
6
Storage
2
Hardware
0
IPC
1
Analytics
1
Security
1
System
0
Behavioral Profile
URL Endpoints
5
Telemetry Strings
5
File Paths
36
Bundle IDs
101
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 444 functions identified
Functions(444)
0x100000d30ConnectToServer
0x100001168put_attribute_tlvs
0x1000012e0create_hdr
0x1000013f0deliver_request
0x1000017ecDNSServiceRefDeallocate
0x100001958write_all
0x100001a98FreeDNSServiceOp
0x100001bd8sub_100001bd8
0x100001c00read_all
0x100001d90handle_query_response
0x10000212cDNSServiceAttributeDeallocate
0x10000218cCallbackWithError
0x100002444handle_regservice_response
0x100002608DNSServiceRegisterWithAttribute
0x10000292cConnectionResponse
0x100002aecDNSServiceRegisterRecordWithAttribute
0x100002e24DNSServiceReconfirmRecord
0x100002f78sub_100002f78
0x10000338csub_10000338c
0x100003394DNSServiceRecordValidate
Imports348 symbols from 8 dylibs
Exports1
_mh_execute_header0x0