[root:/] $ find / -name com.apple.activi*
/Applications/Utilities/Activity Monitor.app/Contents/XPCServices/com.apple.activititymonitor.helper.xpc
/Applications/Utilities/Activity Monitor.app/Contents/XPCServices/com.apple.activititymonitor.helper.xpc/Content s/MacOS/com.apple.activititymonitor.helper
/private/var/run/com.apple.xpcproxy.RoleAccount.staging/com.apple.activititymoni tor.helper.16777218.7792553.xpc
/private/var/run/com.apple.xpcproxy.RoleAccount.staging/com.apple.activititymoni tor.helper.16777218.7792553.xpc/Contents/MacOS/com.apple.activititymonitor.helpe r
when looking at the app:
drwxr-xr-x 3 root wheel 102 May 19 19:23 Activity Monitor.app
drwxr-xr-x 9 root wheel 306 May 19 19:21 Contents
In Contents:
-rw-r--r-- 1 root wheel 1877 May 19 19:18 Info.plist
drwxr-xr-x 3 root wheel 102 May 19 19:21 MacOS
-rw-r--r-- 1 root wheel 8 Oct 22 2013 PkgInfo
drwxr-xr-x 34 root wheel 1156 Jun 2 21:32 Resources
drwxr-xr-x 3 root wheel 102 Sep 9 2013 XPCServices
drwxr-xr-x 3 root wheel 102 May 19 19:21 _CodeSignature
-rw-r--r-- 1 root wheel 467 May 19 19:18 version.plist
In XPCServices:
drwxr-xr-x 3 root wheel 102 Sep 9 2013 com.apple.activititymonitor.helper.xpc
Look at the dates, only the last line and the host folder (XPCServices) have much older dates.
I checked on my other computer and the files are there with the same dates.
Not sure what to think of this.