/usr/libexec/promotedcontentd # What does promotedcontentd do? Paraphrased from a support case reply: “promotedcontentd” is related ( but not limited ) to the advertisements, recommendations and related user preferences that is used by multiple applications including AppStore, however, there is no public documentation that can be accessed. # Where was that found? During execution of file hash e5184e4e31b9a3416c3c5859967cf52216f89885e8470ba810cc510b9e35a22c in the virus total sandbox there are multiple entries in the com.apple.ap.promotedcontentd directory similar to the below ones: - /Users/maria/Library/Application Support/com.apple.ap.promotedcontentd/EFS/a/p/APAdPolicy - /Users/maria/Library/Application Support/com.apple.ap.promotedcontentd/EFS/s/f/8dfcfb291b4fa378b52703e1231526a83622635d949af670104173eeb061d49c