macOS / binaries /

XProtectRemediatorSnowDrift

/Library/Apple/System/Library/CoreServices/XProtect.app/Contents/MacOS/XProtectRemediatorSnowDrift
Executable code module which both scan for and remediate detected malware

XProtect Remediator consists of executable code modules which both scan for and remediate detected malware. SnowDrift, identified by Stuart Ashenbrenner of Jamf as CloudMensis, spyware first identified by ESET.

The binary is a part of XProtectRemediatorSnowDrift application.