Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

BlueMacawBird

macrumors regular
Original poster
Jun 28, 2019
113
31
Washington, D.C. USA
I have found a large number of what I'll call .exe files on my Mac. They are in a folder called libexec, under usr. See the attached screen shot. While the files do not display an actual file extension, the icons are just a black rectangle with exe in the upper left corner. Get Info describes them as Unix executable files which is reassuring.

I became suspicious when I found my machine (in this case, an M2 Pro Mac Studio) running an awful resource hog named diskimagesiod. Following the process in Activity Monitor led to the folder described above.

I have three primary machines (the Studio discussed above, a Mac Mini M4, and a MBP 16" M1Pro). All of them have these files on them. All of these machines are running MacOS 15.3.2

So, are these files a legitimate part of MacOS or are they malware? I'm coming to the conclusion that they are legitimate, but I had not seen them before. The only security I run beyond native MacOS defenses is Malwarebytes (free version with limited functionality) and Little Snitch.

Thanks,

John
 

Attachments

  • Screenshot 2025-03-27 at 8.17.32 PM.png
    Screenshot 2025-03-27 at 8.17.32 PM.png
    706.9 KB · Views: 82
"EXEC" files are UNIX executables, not windows ".EXE" executables. Generally, a Windows .exe in the normal MacOS file system will display the blank-page icon, and will be inert if you try to launch it.
1743125107310.png


FYI, Among linux and unix files, that "d" at the end of a filename typically stands for "Daemon", a style of executable that is or supports runnable app/services.
 
  • Like
Reactions: apostolosdt
I became suspicious when I found my machine (in this case, an M2 Pro Mac Studio) running an awful resource hog named diskimagesiod.
From the manual (man diskimagesiod in Terminal):
"diskimagesiod - Handles I/O for disk images
diskimagesiod manages attached disk images, and is part of DiskImages2 framework"
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.