Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Process searchpartyd

Is this a legit Monterey process?


This program resides in the \usr\libexec folder but is frequently reported online as malware. A sample of the process shows:

Analysis of sampling searchpartyd (pid 314) every 1 millisecond

Process: searchpartyd [314]

Path: /usr/libexec/searchpartyd

Load Address: 0x108223000

Identifier: searchpartyd

Version: 1.0 (225.4.21)

Code Type: X86-64

Platform: macOS

Parent Process: launchd [1]


Date/Time: 2022-09-22 14:52:55.484 +0100

Launch Time: 2022-09-22 14:50:42.559 +0100

OS Version: macOS 12.6 (21G115)

Report Version: 7

Analysis Tool: /usr/bin/sample


Physical footprint: 2128K

Physical footprint (peak): 3920K

----


Call graph:

2551 Thread_1869 DispatchQueue_1: com.apple.main-thread (serial)

+ 2551 start (in dyld) + 462 [0x1120f652e]

+ 2551 ??? (in searchpartyd) load address 0x108223000 + 0x5e30 [0x108228e30]

+ 2551 -[NSRunLoop(NSRunLoop) run] (in Foundation) + 76 [0x7ff816282797]

+ 2551 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] (in Foundation) + 216 [0x7ff8161f7d4a]

+ 2551 CFRunLoopRunSpecific (in CoreFoundation) + 562 [0x7ff815399e3c]

+ 2551 __CFRunLoopRun (in CoreFoundation) + 1276 [0x7ff81539a9f8]

+ 2551 __CFRunLoopServiceMachPort (in CoreFoundation) + 319 [0x7ff81539c36d]

+ 2551 mach_msg (in libsystem_kernel.dylib) + 56 [0x7ff815298ce8]

+ 2551 mach_msg_trap (in libsystem_kernel.dylib) + 10 [0x7ff81529897a]

2551 Thread_1896

2551 start_wqthread (in libsystem_pthread.dylib) + 15 [0x7ff8152d0f57]

2551 _pthread_wqthread (in libsystem_pthread.dylib) + 426 [0x7ff8152d2034]

2551 __workq_kernreturn (in libsystem_kernel.dylib) + 10 [0x7ff81529a05a]


Total number in stack (recursive counted multiple, when >=5):


MacBook Pro 13″, macOS 12.6

Posted on Sep 22, 2022 6:59 AM

Reply
Question marked as Best reply

Posted on Sep 22, 2022 7:14 AM

User wrote " online as malware "


A - On -line, one can find a great deal of Stuff including Mis-Information, False- Information or out right Deceptive-Information


A - The Process is a Native Apple Process . Refer to below image


Similar questions

4 replies

Process searchpartyd

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.