Flagged in Carbon Black: /usr/libexec/xpcproxy Is This Malicious?

Since the Catalina and later System partition is read-only, anything in /usr/libexec is provided exclusively by Apple as part of the operating system. This is the problem with all so-called endpoint security solutions throwing up false positives for legitimate files in the operating system.

man xpcproxy

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc is a legitimate macOS file. Make no attempt to delete or "quarantine" system files.

I don't know what "Carbon Black" is.

KCSOS1300 wrote:

Thanks for the response! VMware Carbon Black Cloud is a software as a service (SaaS) solution that provides next-generation anti-virus (NGAV), endpoint detection and response (EDR), advanced threat hunting

It is most likely unnecessary on your Mac and may in fact, cause problems. See here for more information:

Effective defenses against malware and ot… - Apple Community

Ok thanks.

There are no viruses that affect macOS. There have never been any viruses that affect macOS. There will never be any viruses that affect macOS. But there will always be opportunists who profit by exploiting fear of mythical threats.