Process searchpartyd
Is this a legit Monterey process?
This program resides in the \usr\libexec folder but is frequently reported online as malware. A sample of the process shows:
Analysis of sampling searchpartyd (pid 314) every 1 millisecond
Process: searchpartyd [314]
Path: /usr/libexec/searchpartyd
Load Address: 0x108223000
Identifier: searchpartyd
Version: 1.0 (225.4.21)
Code Type: X86-64
Platform: macOS
Parent Process: launchd [1]
Date/Time: 2022-09-22 14:52:55.484 +0100
Launch Time: 2022-09-22 14:50:42.559 +0100
OS Version: macOS 12.6 (21G115)
Report Version: 7
Analysis Tool: /usr/bin/sample
Physical footprint: 2128K
Physical footprint (peak): 3920K
----
Call graph:
2551 Thread_1869 DispatchQueue_1: com.apple.main-thread (serial)
+ 2551 start (in dyld) + 462 [0x1120f652e]
+ 2551 ??? (in searchpartyd) load address 0x108223000 + 0x5e30 [0x108228e30]
+ 2551 -[NSRunLoop(NSRunLoop) run] (in Foundation) + 76 [0x7ff816282797]
+ 2551 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] (in Foundation) + 216 [0x7ff8161f7d4a]
+ 2551 CFRunLoopRunSpecific (in CoreFoundation) + 562 [0x7ff815399e3c]
+ 2551 __CFRunLoopRun (in CoreFoundation) + 1276 [0x7ff81539a9f8]
+ 2551 __CFRunLoopServiceMachPort (in CoreFoundation) + 319 [0x7ff81539c36d]
+ 2551 mach_msg (in libsystem_kernel.dylib) + 56 [0x7ff815298ce8]
+ 2551 mach_msg_trap (in libsystem_kernel.dylib) + 10 [0x7ff81529897a]
2551 Thread_1896
2551 start_wqthread (in libsystem_pthread.dylib) + 15 [0x7ff8152d0f57]
2551 _pthread_wqthread (in libsystem_pthread.dylib) + 426 [0x7ff8152d2034]
2551 __workq_kernreturn (in libsystem_kernel.dylib) + 10 [0x7ff81529a05a]
Total number in stack (recursive counted multiple, when >=5):
MacBook Pro 13″, macOS 12.6