Rocky Raccoon

apsdaemon.exe

by Apple
Application Support

Summary

Apple Push Service Daemon - handles Apple push notifications on Windows.

apsdaemon.exe is the 1181st most commonly executed Windows program in EchoTrail's dataset, observed 1,386 times across enterprise environments. It typically runs from C:\Program Files (x86)\Common Files\Apple\Apple Application Support and it is most often launched by runonce.exe.

1181st
most commonly executed Windows program
1,386
observed executions
low
statistical confidence

Behavior

Top Paths

  • C:\Program Files (x86)\Common Files\Apple\Apple Application Support100%

Top Hashes (SHA256)

  • 1d0f4034e0111cf5758f470c15a22a0a28eb8269cb5bf07222c9c0fb07a15c5558.59%
  • 3339646581afb846ee6b71b9972bd17ab0a98b496917d96f82e210f8bae9074112.51%
  • 1e9d3e136bd61f77d3c48f9eaf32926e66f796fa75735be6e226f0706111dc909.56%
  • aa0bf8f9ddf86ba5e995463c41270ab40f41932a9c72fd1d994fcbf1014647ce6.06%
  • 018f85dcd9eb33dc775cccb58b999a640b6f8fef37898ea45600b433e77cf9ae4.43%
  • 4a58623ccc52c5ce939f97654bc8904fff411130c91135feeebd413b386ebe2b2.56%
  • 0d44c56196c93f68d7ca670b75d5a8739ed4bf3be9858411523b2aee8ffaaed51.55%
  • 03c993a42858da4041a34a3b6e7b560b89db1901917adf9afc72f0bc1f5508d81.24%
  • 33951b2d03a172be8a06d1824a8e376d6becda4167957fd2fbe8d1b1c5fd3a711.09%
  • 4d4c40dd7a894e8b6f6e5ba8057e28292784631cb7edb9d62f1c9bcb99f31e500.85%

Process Ancestry

Top Grandparents

Top Parents

Rare or environment-specific process names are omitted from ancestry tables. Percentages are of all observed relationships.

Ask Rocky about apsdaemon.exe

Rocky answers questions about apsdaemon.exe grounded in this same dataset — free, no account needed.

Need this data programmatically? The Rocky API includes 500 free lookups a month. Or just ask Rocky.

Data from EchoTrail's dataset of ~346M Windows process executions. Last extracted 2026-08-04.