home

mDNSResponder.exe

Bonjour

Group Logic, Inc.

It runs as a windows Service named “Bonjour Service”.
Publisher:
Apple Inc.  (signed by Group Logic, Inc.)

Product:
Bonjour

Description:
Bonjour Service

Version:
3,0,0,10

MD5:
0f6e14b66299bc013d4ac1cb66bc1bda

SHA-1:
554385a3f7e26f6e11653ebf79a29daab721dc39

SHA-256:
e49c3f4510b4b68d7d1bc395bf13c69d0acfc9990078dc324d019b4bd85cc72d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/28/2024 2:34:29 AM UTC  (today)

File size:
451.5 KB (462,328 bytes)

Product version:
3,0,0,10

Copyright:
Copyright (C) 2003-2011 Apple Inc.

Original file name:
mDNSResponder.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\bonjour\mdnsresponder.exe

Digital Signature
Signed by:
Group Logic, Inc.

Authority:
Symantec Corporation

Valid from:
5/18/2016 3:00:00 AM

Valid to:
6/13/2017 2:59:59 AM

Subject:
CN="Group Logic, Inc.", O="Group Logic, Inc.", L=Arlington, S=Virginia, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
65FE3D0E977C5047C98CB2BA374B6F85

File PE Metadata
Compilation timestamp:
6/8/2016 4:55:50 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
12288:srRKBjL9CD/LbGuBq6X+fMCKnJ4Mpg/5vs:srRwjL9CXbTY6X+ECKnJ4h5k

Entry address:
0x45D00

Entry point:
48, 83, EC, 28, E8, DF, 57, 00, 00, 48, 83, C4, 28, E9, 76, FE, FF, FF, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 89, 91, 04, 00, FF, 15, 5B, A6, 00, 00, 48, 8B, 05, 74, 92, 04, 00, 48, 89, 44, 24, 58, 45, 33, C0, 48, 8D, 54, 24, 60, 48, 8B, 4C, 24, 58, E8, 8B, 99, 00, 00, 48, 89, 44, 24, 50, 48, 83, 7C, 24, 50, 00, 74, 41, 48, C7, 44, 24, 38, 00, 00, 00, 00, 48, 8D, 44, 24, 48, 48, 89, 44, 24, 30, 48, 8D, 44, 24, 40, 48, 89, 44, 24, 28, 48, 8D, 05, 34, 91, 04, 00, 48, 89, 44, 24...
 
[+]

Entropy:
6.5141

Code size:
314.5 KB (322,048 bytes)

Service
Display name:
Bonjour Service

Description:
Enables hardware devices and software services to automatically configure themselves on the network and advertise their presence, so that users can discover and use those services without any unnecess

Type:
Win32ShareProcess

Depends on:
Tcpip


Scan mDNSResponder.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.