Process corpus

Every published process identity Anomalous grounds its diagnosis cards on — a real, cited answer for each process, never a language-model guess. 15 entries published.

• Battle.net Battle.net Battle.net is Blizzard Entertainment's official desktop app for Mac. It serves as the central hub and launcher for all Blizzard games — such as World of Warcraft, Diablo, Overwatch, and Hearthstone — letting you install, update, and open them from one place. It also handles your Blizzard account, friends list, in-app messaging, voice chat, and the Blizzard game shop.
• Proton VPN – WireGuard Network Extension ch.protonvpn.mac.WireGuard-Exte This is a background helper that belongs to the Proton VPN app on your Mac. When you use the WireGuard protocol (or Smart Protocol) in Proton VPN, macOS requires a dedicated network extension to handle the encrypted VPN tunnel. That extension — identified by the bundle prefix "ch.protonvpn.mac" — runs quietly in the background, outside the core of macOS, to keep your internet traffic routed securely through Proton's servers. Proton VPN is made by Proton AG, a Swiss privacy company, and WireGuard is the fast, open-source protocol it uses by default.
• MobileSoftwareUpdate — Update Brain Service com.apple.MobileSoftwareUpdate. This is a background helper that Apple builds into macOS to handle the preparation phase of macOS software updates. When your Mac checks for or downloads an update, this helper assembles all the required pieces, verifies them, and decompresses the data so it is ready for the final installation step. It is a fully legitimate, Apple-owned part of the macOS update system — not third-party software.
• WebKit Web Content Process com.apple.WebKit.WebContent A background helper that Apple's WebKit engine uses to load and run each web page on your Mac. WebKit is the engine behind Safari and many other Apple apps — Mail, the App Store, News, and more — and it runs each open website in its own separate process so that one bad page can't bring down the whole browser. You'll often see several of these in Activity Monitor at once, one per open site or web-capable app; that's completely normal.
• Ghostty Terminal Emulator ghostty Ghostty (bundle ID com.mitchellh.ghostty) is a free, open-source terminal emulator for macOS and Linux, created by Mitchell Hashimoto (co-founder of HashiCorp). It gives you a command-line window — like macOS's built-in Terminal app — but with GPU-accelerated rendering (using Apple's Metal on Mac), native split panes, tabs, extensive theme support, and shell integration. On macOS it is built with a SwiftUI interface, so it looks and behaves like a proper native Mac app. It launched publicly at version 1.0 in December 2024 and is actively maintained.
• llama-server (llama.cpp) llama-server llama-server is a local AI inference background server from the open-source llama.cpp project, created by Georgi Gerganov. It loads large language models (LLMs) — AI models capable of answering questions and generating text — onto your Mac and serves them through a web interface and an API that other apps can talk to. On Apple Silicon Macs, it uses Apple's Metal graphics framework to run AI models using your chip's GPU, which means all the AI processing stays entirely on your machine without sending anything to the cloud. Tools like Ollama and LM Studio use the same underlying technology, but llama-server is the direct, no-frills version. You or a developer tool you installed put it there — macOS itself does not include it.
• Apple News News Apple News (com.apple.news) is Apple's built-in news-reading app, pre-installed on every Mac since macOS Mojave. It shows you a personalised feed of articles from publishers and topics you choose, with Apple's own editors curating a Top Stories section. It also powers the News widget in Notification Center and on the desktop. A free tier is included; an optional paid tier called News+ adds hundreds of magazines and newspapers. Your reading preferences sync across your iPhone, iPad, and Mac via iCloud.
• StarCraft II SC2 StarCraft II (SC2) is a real-time strategy video game made by Blizzard Entertainment. It is a commercial game — the sequel to the original StarCraft — where players build bases, gather resources, and command armies across sci-fi battles. It runs natively on macOS (both Intel and Apple Silicon Macs) and is launched through Blizzard's Battle.net app. The multiplayer mode and first campaign are free to play.
• SimRenderServer (Xcode Simulator Rendering Service) SimRenderServer SimRenderServer is a background helper that is part of Apple's CoreSimulator framework, which ships with Xcode. It handles Metal GPU rendering for iOS (and other Apple platform) simulators running on your Mac — specifically, it manages connections to the Metal graphics pipeline that lets simulator windows display graphics on screen. It runs as an XPC service inside CoreSimulator's SimRenderingServices bundle, and only appears when a simulator is active.
• Slack Helper Slack Helper A small background component that Slack (the team messaging app by Slack Technologies) launches alongside itself on macOS. Because Slack is built on the Electron framework — essentially a web browser running Slack's interface — it spawns several helper processes to divide work: one handles rendering your workspace windows, others manage background tasks such as automatic updates, reliable notifications, and secure communication between Slack's own internal parts. The helper you see here is one of those supporting pieces; it lives inside the Slack app bundle and is signed by Slack Technologies, which macOS verifies before allowing it to run.
• Speedtest by Ookla Speedtest Speedtest by Ookla is a free internet speed-testing app made by Ookla and available on the Mac App Store. It lives in the macOS menu bar and lets you check your download speed, upload speed, ping, and connection stability with a single click, using Ookla's global network of servers. It keeps a history of past tests so you can track your connection over time, and it lets you share results via the built-in macOS share menu.
• Spotlight Knowledge Updater spotlightknowledged.updater A background helper that Apple ships as part of the CoreSpotlight framework — the engine behind Spotlight search on your Mac. Its job is to keep a special knowledge index up to date so that Spotlight (and, where enabled, Apple Intelligence) can give you fast, contextually relevant search results across your documents, messages, photos, and apps. It runs quietly on its own and is owned entirely by macOS, not by any app you installed.
• Steam (macOS Client) steam_osx Steam is Valve's gaming platform app for Mac — the storefront, library, and social hub you use to buy, download, and launch PC and Mac games. The file "steam_osx" is the main Steam program itself, sitting inside the Steam.app bundle on your Mac.
• Apple Intelligence On-Device Inference Service TGOnDeviceInferenceProviderServ This is a background helper built into macOS Sequoia (15) that belongs entirely to Apple. It is the engine that runs Apple Intelligence tasks directly on your Mac — things like rewriting text in Mail, generating images, and powering Siri's smarter responses — without sending your data to a server. It lives inside your macOS system files and starts up automatically whenever Apple Intelligence is active.
• Windows App (Microsoft Remote Desktop) Windows App Windows App (bundle ID com.microsoft.rdc.macos) is Microsoft's official remote desktop client for Mac, previously called Microsoft Remote Desktop. It lets you connect from your Mac to a remote Windows PC, a corporate virtual desktop, or cloud services such as Azure Virtual Desktop and Windows 365 — essentially giving you a live view of and control over a Windows environment, all streamed securely over the network. Nothing Windows-related is stored on your Mac; the Windows session runs on the remote machine. It is a free download from the Mac App Store and is owned entirely by Microsoft.