mDNSResponder.exe
Summary
Bonjour/mDNS Responder - Apple Bonjour zero-configuration networking service (mDNS/DNS-SD).
mDNSResponder.exe is the 945th most commonly executed Windows program in EchoTrail's dataset, observed 2,410 times across enterprise environments. It typically runs from C:\Program Files\Bonjour and it is most often launched by services.exe.
Behavior
Top Paths
- C:\Program Files\Bonjour89.2%
- C:\Program Files (x86)\Bonjour6.54%
- C:\Program Files (x86)\Xamarin\Bonjour3.43%
- C:\...0.83%
Top Hashes (SHA256)
- e399c390687589194d8aad385055f0cfa7d52ad9e837d8ff95008b8eb2b34e5065.5%
- 17bffc5df609ce3b2f0cab4bd6c118608c66a3ad86116a47e90b2bb7d895412227.05%
- f7e145f5d8db1017d5b7b9d5380100f170fe5cc2050b5f7346a521b7b72d21666.56%
- 10f21999ff6b1d410ebf280f7f27deaca5289739cf12f4293b614b8fc6c88dcc0.89%
Process Ancestry
Top Grandparents
- wininit.exe100%
Top Parents
- services.exe100%
Top Children
- WerFault.exe70%
- net1.exe10%
- pcaui.exe10%
- regsvr32.exe10%
Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.
Ask Rocky about mDNSResponder.exe
Rocky answers questions about mDNSResponder.exe grounded in this same dataset — free, no account needed.
Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.
Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.