EtreCheckPro version: 6.8.12 (68084) Report generated: 2025-10-17 16:54:13 Download EtreCheckPro from https://etrecheck.com Runtime: 33:55 Performance: Poor Problem: Computer is too slow Description: Apps and files take a while to open, and text takes a while to display both on browser and on local applications. Memory usage, background a pplications, storage etc. all seems normal. Major Issues: Anything that appears on this list needs immediate attention. Automatic updates disabled - Automatic updates are disabled. This computer is at risk of malware infection. Security updates disabled - Security updates are disabled. This computer is at risk of malware infection. Poor performance - EtreCheck report shows poor performance. This is unusual. Apple security disabled - Apple security software is disabled. This computer is at risk of malware infection. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. System extensions installed - This computer has system extensions installed. System extensions can be difficult to uninstall. Heavy RAM usage - Apps are using a large amount of RAM. Apps crashing - There have been numerous app crashes. Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage. Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed. System modifications - There are a large number of system modifications running in the background. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: MacBook Pro (14-inch, 2021) Status: Supported MacBook Pro Model: MacBookPro18,4 Apple M1 Max (m1 max) CPU: 10-core 64 GB RAM - Not upgradeable Battery: Health = Normal - Cycle count = 684 Video Information: Apple M1 Max Color LCD 3024 x 1964 Drives: disk0 - APPLE SSD AP4096R 4.00 TB (Solid State - TRIM: Yes) Internal Apple Fabric NVM Express S.M.A.R.T. Details: 1% used, 36.73 TB written, 100% health, 16 unsafe shutdowns disk0s1 [APFS Container] 524 MB disk1 [APFS Virtual drive] 524 MB (Shared by 4 volumes) disk1s1 - iSCPreboot (APFS) [APFS Preboot] (6 MB used) disk1s2 - xART (APFS) (6 MB used) disk1s3 - Hardware (APFS) (2 MB used) disk1s4 - Recovery (APFS) [Recovery] (20 KB used) disk0s2 [APFS Container] 4.00 TB disk3 [APFS Virtual drive] 4.00 TB (Shared by 6 volumes) disk3s1 (APFS) [APFS Container] (10.26 GB used) disk3s1s1 - Macintosh HD (APFS) [APFS Snapshot] (10.26 GB used) disk3s2 - Preboot (APFS) [APFS Preboot] (6.19 GB used) disk3s3 - Recovery (APFS) [Recovery] (942 MB used) disk3s4 - Update (APFS) (4 MB used) disk3s5 - Data (APFS) [APFS Virtual drive] (1.18 TB used) disk3s6 - VM (APFS) [APFS VM] (20 KB used) disk0s3 [APFS Container] 5.37 GB disk2 [APFS Virtual drive] 5.37 GB (Shared by 2 volumes) disk2s1 - Recovery (APFS) [Recovery] (2.00 GB used) disk2s2 - Update (APFS) (2 MB used) Mounted Volumes: disk1s1 - iSCPreboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/iSCPreboot Used: 6 MB Shared values Size: 524 MB Free: 505 MB disk1s2 - xART Filesystem: APFS Mount point: /System/Volumes/xarts Used: 6 MB Shared values Size: 524 MB Free: 505 MB disk1s3 - Hardware Filesystem: APFS Mount point: /System/Volumes/Hardware Used: 2 MB Shared values Size: 524 MB Free: 505 MB disk3s1s1 - Macintosh HD [APFS Snapshot] Filesystem: APFS Mount point: / Read-only: Yes Used: 10.26 GB Shared values Size: 4.00 TB Free: 2.80 TB Available: 3.12 TB disk3s2 - Preboot [APFS Preboot] Filesystem: APFS Mount point: /System/Volumes/Preboot Used: 6.19 GB Shared values Size: 4.00 TB Free: 2.80 TB disk3s4 - Update Filesystem: APFS Mount point: /System/Volumes/Update Used: 4 MB Shared values Size: 4.00 TB Free: 2.80 TB disk3s5 - Data [APFS Virtual drive] Filesystem: APFS Mount point: /System/Volumes/Data Encrypted Used: 1.18 TB Shared values Size: 4.00 TB Free: 2.80 TB Available: 3.12 TB disk3s6 - VM [APFS VM] Filesystem: APFS Mount point: /System/Volumes/VM Used: 20 KB Shared values Size: 4.00 TB Free: 2.80 TB USB: USB 3.1 bus USB 3.1 bus USB 3.1 bus Network: Interface usbmodem14100: MT65xx Preloader Interface en10: Thunderbolt Ethernet Interface en5: Ethernet Adapter (en5) Interface en6: Ethernet Adapter (en6) Interface en9: Thunderbolt Ethernet Slot 0 Interface en11: USB 10/100/1000 LAN 2 Interface en4: Ethernet Adapter (en4) Interface en8: AX88179A Interface fw0: Thunderbolt FireWire Interface en0: Wi-Fi 802.11 a/b/g/n/ac/ax Interface en7: iPhone Interface bridge0: Thunderbolt Bridge Interface bridge0: Thunderbolt Bridge 2 iCloud is limited without Full Disk Access Firewall: Blocked apps: None System Software: macOS Sonoma 14.8.1 (23J30) Installed 2025-10-17 Time since boot: About an hour Configuration Files: /etc/hosts - Count: 1 Notifications: LogiMgrDaemon.app one notification (one scheduled) Microsoft Teams.app 13 notifications Slack.app 20 notifications WithSecure Agent.app one notification Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Secure Boot: Full Security Automatic Updates: Disabled Security Updates: Disabled Antivirus software: Malwarebytes Unsigned Files: Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist Command: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.panopto.uploaddaemon.plist Command: /var/panopto/upload-daemon-wrapper '-l info' Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist Command: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility -mode=logon Details: Exact match found in the legitimate list - probably OK Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist Command: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist Command: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool Details: Exact match found in the legitimate list - probably OK Login Item: ~/Library/Application Support/SCOPIA Desktop/ScopiaDesktopLauncher.app Apps: 28 System Extensions: [Running] networkextension - version 1.0 (Sophos - installed 2023-08-16) Application: Not found! [Running] Cisco Secure Client - Socket Filter Extension - version 5.1.7.39 (Cisco - installed 2024-11-19) Application: /Applications/Cisco/Cisco Secure Client - Socket Filter.app - version 5.1.7.39 (Cisco - installed 2025-04-23) Description: This system extension provides socket filter capabilities. [Running] com.sophos.endpoint.scanextension - version 1.0 (Sophos - installed 2023-08-16) Application: Not found! Description: Scanning Services [Running] WithSecureâ„¢ System Extension - version 3.0.52312 (WithSecure Oyj - installed 2024-10-21) Application: /Applications/WithSecure/WithSecure Agent.app - version 3.0.52312 (WithSecure Oyj - installed 2024-10-21) Description: Firewall for WithSecure Corporation products Kernel Extensions: /Library/Application Support/Cisco/Cisco Secure Client [Not Loaded] acsock.kext - com.cisco.kext.acsock (5.1.05 - SDK 12) /Library/Application Support/Logitech.localized/Logitech Options.localized [Not Loaded] LogiMgrDriver.kext - com.logitech.manager.kernel.driver (7.12.1 - SDK 10.12) /Library/Application Support/VirtualBox [Not Loaded] VBoxDrv.kext - org.virtualbox.kext.VBoxDrv (5.0.10) [Not Loaded] VBoxNetAdp.kext - org.virtualbox.kext.VBoxNetAdp (5.0.10) [Not Loaded] VBoxNetFlt.kext - org.virtualbox.kext.VBoxNetFlt (5.0.10) [Not Loaded] VBoxUSB.kext - org.virtualbox.kext.VBoxUSB (5.0.10) System Launch Daemons: [Not Loaded] 43 Apple tasks [Loaded] 184 Apple tasks [Running] 175 Apple tasks [Other] One Apple task System Launch Agents: [Not Loaded] 20 Apple tasks [Loaded] 201 Apple tasks [Running] 202 Apple tasks [Other] One Apple task Launch Daemons: [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Inc. - installed 2024-12-06) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Inc. - installed 2024-12-06) Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper [Running] com.cisco.secureclient.vpn.service.agent.plist (Cisco - installed 2024-11-19) Command: /opt/cisco/secureclient/bin/Cisco Secure Client - AnyConnect VPN Service.app/Contents/MacOS/vpnagentd -execv_instance Location: /opt/cisco/secureclient/bin/Cisco Secure Client - AnyConnect VPN Service.app [Running] com.docker.vmnetd.plist (Docker Inc - installed 2022-02-09) Executable: /Library/PrivilegedHelperTools/com.docker.vmnetd [Not Loaded] com.echo360.universalcapture.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/echo_spinner [Running] com.echo360.universalcapture.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/echo_spinner [Running] com.google.GoogleUpdater.wake.system.plist (Google LLC - installed 2025-09-23) Command: /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2 --system [Not Loaded] com.google.keystone.daemon.plist (Not signed - installed 2023-12-09) [Not Loaded] com.malwarebytes.mbam.rtprotection.daemon.plist (Malwarebytes Corporation - installed 2025-10-16) Command: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS/RTProtectionDaemon -i Malwarebytes-Mac-5.18.2.3483.pkg [Not Loaded] com.malwarebytes.mbam.settings.daemon.plist (Malwarebytes Corporation - installed 2025-10-16) Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/SettingsDaemon.app/Contents/MacOS/SettingsDaemon [Not Loaded] com.microsoft.office.licensing.helper.plist (Not signed - installed 2022-02-02) Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2024-02-23) Executable: /Applications/Microsoft Teams classic.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon [Loaded] com.omnigroup.OmniSoftwareUpdate.OSUInstallerPrivilegedHelper.8.plist (The Omni Group - installed 2022-08-12) Executable: /Library/PrivilegedHelperTools/com.omnigroup.OmniSoftwareUpdate.OSUInstallerPrivilegedHelper.8 [Not Loaded] com.oracle.java.Helper-Tool.plist (Not signed - installed 2016-10-25) Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool [Running] com.panopto.panoptod.plist (Panopto, Inc. - installed 2022-12-01) Executable: /Applications/Panopto.app/Contents/MacOS/panoptod [Running] com.panopto.uploaddaemon.plist (Not signed - installed 2022-12-01) Command: /var/panopto/upload-daemon-wrapper '-l info' [Not Loaded] com.sophos.sophoscbr.plist (Sophos - installed 2023-08-16) Executable: /Library/SophosCBR/SophosCBR.bundle/Contents/MacOS/SophosCBR [Loaded] com.withsecure.licensetooldaemon.plist (WithSecure Oyj - installed 2024-10-21) Command: /Library/WithSecure/bin/wslicensetoolwrapper --task-name com.withsecure.licensetool --license-tool-path /Library/WithSecure/fssp/bin/licensetool --mode update [Running] com.withsecure.sp.doormandaemon.plist (WithSecure Oyj - installed 2024-10-21) Command: /Library/WithSecure/Bedrock/bin/wscdoormand -machServiceName com.withsecure.sp.doormand -baseStorageDir /Library/WithSecure/Bedrock/store -productDescription 'bs/16.00 (operator 11000; build 52312)' [Running] com.withsecure.sp.securityclouddaemon.plist (WithSecure Oyj - installed 2024-10-21) Command: /Library/WithSecure/Bedrock/bin/wscsecuritycloudd -machServiceName com.withsecure.sp.securitycloudd -baseStorageDir /Library/WithSecure/Bedrock/store -doormanMachServiceName com.withsecure.sp.doormand -upstreamMachServiceName com.withsecure.sp.upstreamd -productDescription 'bs/16.00 (operator 11000; build 52312)' [Running] com.withsecure.sp.upstreamdaemon.plist (WithSecure Oyj - installed 2024-10-21) Command: /Library/WithSecure/Bedrock/bin/wscupstreamd -machServiceName com.withsecure.sp.upstreamd -baseStorageDir /Library/WithSecure/Bedrock/store -doormanMachServiceName com.withsecure.sp.doormand -productDescription 'bs/16.00 (operator 11000; build 52312)' [Running] com.withsecure.ultralight.wssmdaemon.plist (WithSecure Oyj - installed 2024-06-19) Command: /Applications/WithSecure/WithSecure Agent.app/Contents/MacOS/wsulservicewrapper wssmd /Library/WithSecure/ultralight/var [Running] com.withsecure.ultralight.wsulcoredaemon.plist (WithSecure Oyj - installed 2024-06-19) Command: /Applications/WithSecure/WithSecure Agent.app/Contents/MacOS/wsulservicewrapper wsulcored /Library/WithSecure/ultralight/var [Running] com.withsecure.wsadmindaemon.plist (WithSecure Oyj - installed 2024-10-21) Command: /Library/WithSecure/bin/wssandboxexecwrapper --daemon-name wsadmind --bundle-extension xpc --namespace-id withsecure --namespace-path WithSecure [Loaded] com.withsecure.wsavd.dbhelperdaemon.plist (WithSecure Oyj - installed 2024-06-19) Command: /Applications/WithSecure/WithSecure Agent.app/Contents/XPCServices/dbhelperwrapper /Library/WithSecure/fssp/var/reports.noindex /Library/WithSecure/fssp/var/infections/infections.db [Running] com.withsecure.wsavdaemon.plist (WithSecure Oyj - installed 2024-06-19) Executable: /Applications/WithSecure/WithSecure Agent.app/Contents/XPCServices/wsavdwrapper [Running] com.withsecure.wsesproviderdaemon.plist (WithSecure Oyj - installed 2024-06-19) Executable: /Applications/WithSecure/WithSecure Agent.app/Contents/XPCServices/wsesproviderdwrapper [Loaded] com.withsecure.wshotfixdaemon.plist (WithSecure Oyj - installed 2024-06-19) Executable: /Library/WithSecure/bin/wshotfix.app/Contents/MacOS/wshotfix [Running] com.withsecure.wsreputationdaemon.plist (WithSecure Oyj - installed 2024-10-21) Command: /Library/WithSecure/bin/wssandboxexecwrapper --daemon-name wsreputationd --bundle-extension xpc --namespace-id withsecure --namespace-path WithSecure [Running] com.withsecure.wssettingsdaemon.plist (WithSecure Oyj - installed 2024-10-21) Command: /Library/WithSecure/bin/wssandboxexecwrapper --daemon-name wssettingsd --bundle-extension xpc --namespace-id withsecure --namespace-path WithSecure [Loaded] com.withsecure.wsupdatedaemon.plist (WithSecure Oyj - installed 2024-06-19) Executable: /Library/WithSecure/bin/wsupdated.xpc/Contents/MacOS/wsupdated [Loaded] com.withsecure.wsupdatedownloaddaemon.plist (WithSecure Oyj - installed 2024-10-21) Command: /Library/WithSecure/bin/wssandboxexecwrapper --daemon-name wsupdatedownloadd --bundle-extension xpc --namespace-id withsecure --namespace-path WithSecure [Running] com.withsecure.wsuplinkdaemon.plist (WithSecure Oyj - installed 2024-10-21) Command: /Library/WithSecure/bin/wssandboxexecwrapper --daemon-name wsuplinkd --bundle-extension xpc --namespace-id withsecure --namespace-path WithSecure [Running] com.withsecure.wsxfencedaemon.plist (WithSecure Oyj - installed 2024-06-19) Executable: /Applications/WithSecure/WithSecure Agent.app/Contents/XPCServices/wsxfencedwrapper [Loaded] com.xerox.AnalyticsAgent.plist (Xerox Corporation - installed 2022-02-02) Executable: /Library/PrivilegedHelperTools/com.xerox.AnalyticsAgent [Not Loaded] org.virtualbox.startup.plist (Not signed - installed 2022-02-02) Command: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart [Loaded] org.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2021-04-25) Command: /opt/X11/libexec/privileged_startx -d /opt/X11/etc/X11/xinit/privileged_startx.d [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2025-09-04) Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon Launch Agents: [Not Loaded] com.adobe.AAM.Updater-1.0.plist (Not signed - installed 2022-02-02) Command: /Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility -mode=logon [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Inc. - installed 2024-12-06) Executable: /Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper [Not Loaded] com.cisco.secureclient.gui.plist (Cisco - installed 2025-04-23) Command: /usr/bin/open -W '/Applications/Cisco/Cisco Secure Client.app' --args -autolaunched Location: /Applications/Cisco/Cisco Secure Client.app [Running] com.cisco.secureclient.iseposture.plist (Cisco - installed 2024-11-19) Command: /opt/cisco/secureclient/bin/csc_iseposture --fullposture [Not Loaded] com.cisco.secureclient.vpn.notification.plist (Cisco - installed 2024-11-19) Executable: /opt/cisco/secureclient/bin/Cisco Secure Client - Notification.app/Contents/MacOS/Cisco Secure Client - Notification Location: /opt/cisco/secureclient/bin/Cisco Secure Client - AnyConnect VPN Service.app [Running] com.echo360.universalcapture.session_agent.plist (Echo360 Inc - installed 2025-09-08) Command: /Applications/Echo360 Capture.app/Contents/Resources/bin/session_agent/echo_session_agent -r '/Library/Application Support/Echo360/UniversalCapture' [Not Loaded] com.echo360.universalcapture.session_agent.plist (Echo360 Inc - installed 2025-09-08) Command: /Applications/Echo360 Capture.app/Contents/Resources/bin/session_agent/echo_session_agent -r '/Library/Application Support/Echo360/UniversalCapture' [Not Loaded] com.echo360.universalcapture.src_ch0.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/uni_capture/echo_uni_capture_src [Loaded] com.echo360.universalcapture.src_ch0.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/uni_capture/echo_uni_capture_src [Loaded] com.echo360.universalcapture.src_ch1.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/uni_capture/echo_uni_capture_src [Not Loaded] com.echo360.universalcapture.src_ch1.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/uni_capture/echo_uni_capture_src [Loaded] com.echo360.universalcapture.src_ch2.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/uni_capture/echo_uni_capture_src [Not Loaded] com.echo360.universalcapture.src_ch2.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/uni_capture/echo_uni_capture_src [Not Loaded] com.echo360.universalcapture.src_ch3.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/uni_capture/echo_uni_capture_src [Loaded] com.echo360.universalcapture.src_ch3.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/uni_capture/echo_uni_capture_src [Loaded] com.echo360.universalcapture.src_mic0.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/uni_capture/echo_uni_capture_src [Not Loaded] com.echo360.universalcapture.src_mic0.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/uni_capture/echo_uni_capture_src [Loaded] com.echo360.universalcapture.src_sys_audio.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/uni_capture/echo_uni_capture_src [Not Loaded] com.echo360.universalcapture.src_sys_audio.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/uni_capture/echo_uni_capture_src [Not Loaded] com.echo360.universalcapture.user_agent.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/user_agent/echo_user_agent [Running] com.echo360.universalcapture.user_agent.plist (Echo360 Inc - installed 2025-09-08) Executable: /Applications/Echo360 Capture.app/Contents/Resources/bin/user_agent/echo_user_agent [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2023-12-09) [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2023-12-09) [Running] com.kinoni.epoccam.daemon.plist (Kinoni Oy - installed 2020-04-20) Executable: /Library/CoreMediaIO/Plug-Ins/DAL/EpocCamPlugin.plugin/Contents/Resources/EpocCam.app/Contents/MacOS/EpocCam [Running] com.logitech.manager.daemon.plist (Logitech Inc. - installed 2022-05-24) Command: /Applications/Logi Options.app/Contents/Support/LogiMgrDaemon.app/Contents/MacOS/LogiMgrDaemon --launchd [Running] com.logitech.vc.LogiVCCoreService.plist (Logitech Inc. - installed 2019-09-17) Executable: /Library/Application Support/Logitech/com.logitech.vc.LogiVCCoreService/LogiVCCoreService.app/Contents/MacOS/LogiVCCoreService [Not Loaded] com.malwarebytes.mbam.frontend.agent.plist (Malwarebytes Corporation - installed 2025-10-16) Executable: /Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/FrontendAgent.app/Contents/MacOS/FrontendAgent [Not Loaded] com.microsoft.teams2.agent.plist (Microsoft Corporation - installed 2025-08-12) Executable: /Applications/Microsoft Teams.app/Contents/Library/LaunchAgents/com.microsoft.teams2.agent Location: /Applications/Microsoft Teams.app [Not Loaded] com.openai.chat-helper.plist (OpenAI, L.L.C. - installed 2025-10-17) Executable: /Applications/ChatGPT.app/Contents/Resources/ChatGPTHelper Location: /Applications/ChatGPT.app [Not Loaded] com.oracle.java.Java-Updater.plist (Not signed - installed 2016-10-25) Command: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck [Running] com.withsecure.wsagent.plist (WithSecure Oyj - installed 2024-06-19) Executable: /Applications/WithSecure/WithSecure Agent.app/Contents/MacOS/wsagent [Loaded] org.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2021-04-25) Command: /opt/X11/libexec/launchd_startx /opt/X11/bin/startx -- /opt/X11/bin/Xquartz [Loaded] us.zoom.updater.login.check.plist (Zoom Video Communications, Inc. - installed 2025-09-04) Command: /Applications/zoom.us.app/Contents/Library/LaunchAgents/ZoomUpdater.app/Contents/MacOS/ZoomUpdater --login-check [Loaded] us.zoom.updater.plist (Zoom Video Communications, Inc. - installed 2025-09-04) Command: /Applications/zoom.us.app/Contents/Library/LaunchAgents/ZoomUpdater.app/Contents/MacOS/ZoomUpdater --update User Launch Agents: [Loaded] com.dropbox.DropboxUpdater.wake.plist (Dropbox, Inc. - installed 2025-07-01) Command: ~/Library/Application Support/Dropbox/DropboxUpdater/Current/DropboxUpdater.app/Contents/MacOS/DropboxUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/updater/*=2 [Not Loaded] com.dropbox.dropboxmacupdate.agent.plist (Not signed - installed 2025-03-07) [Not Loaded] com.dropbox.dropboxmacupdate.xpcservice.plist (Not signed - installed 2025-03-07) [Running] com.spotify.webhelper.plist (Spotify - installed 2025-06-03) Executable: ~/Library/Application Support/Spotify/SpotifyWebHelper [Loaded] com.valvesoftware.steamclean.plist (Valve Corporation - installed 2025-04-25) Command: ~/Library/Application Support/Steam/SteamApps/steamclean Public User Login Items: [Loaded] Battle.net (Blizzard Entertainment, Inc. - installed 2024-06-27) Application /Applications/Battle.net.app [Loaded] DockerHelper (Docker Inc - installed 2022-01-13) Modern Login Item /Applications/Docker.app/Contents/Library/LoginItems/DockerHelper.app [Running] Dropbox (Dropbox, Inc. - installed 2025-10-09) Application /Applications/Dropbox.app [Running] Google Chrome (Google LLC - installed 2025-10-17) Application /Applications/Google Chrome.app [Not Loaded] NordVPNLauncher (App Store - installed 2025-10-17) Modern Login Item /Applications/NordVPN.app/Contents/Library/LoginItems/NordVPNLauncher.app [Not Loaded] Launcher Disabler (App Store - installed 2025-10-16) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (App Store - installed 2025-10-16) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app [Not Loaded] ViberLoginHelper (Viber Media SARL. - installed 2022-09-06) Modern Login Item /Applications/Viber.app/Contents/Library/LoginItems/ViberLoginHelper.app [Not Loaded] EngageLauncher (Aviata, Inc. - installed 2022-02-02) Modern Login Item /Applications/Xerox PowerENGAGE.app/Contents/Library/LoginItems/EngageLauncher.app [Loaded] Android File Transfer Agent (Google, Inc. - installed 2022-02-02) Application ~/Library/Application Support/Google/Android File Transfer/Android File Transfer Agent.app [Loaded] ScopiaDesktopLauncher (Not signed - installed 2022-02-02) Application ~/Library/Application Support/SCOPIA Desktop/ScopiaDesktopLauncher.app [Not Loaded] LoginItemHelper (Cisco - installed 2025-04-23) Modern Login Item /opt/cisco/secureclient/bin/Cisco Secure Client - AnyConnect VPN Service.app/Contents/Library/LoginItems/LoginItemHelper.app Applications: 668 Apple apps 328 3rd party apps 112 x86-only apps 27 unsigned apps App Extensions: Widgets: [Loaded] PowerPointWidgetKit - /Applications/Microsoft PowerPoint.app [Loaded] ChatGPT - /Applications/ChatGPT.app [Loaded] WordWidgetKit - /Applications/Microsoft Word.app [Loaded] ExcelWidgetKit - /Applications/Microsoft Excel.app [Loaded] CalendarWidgetExtension - /Applications/Microsoft Outlook.app Plugins: [Loaded] Intents - /Applications/WhatsApp.app VPNs: [Loaded] NordLynx - /Applications/NordVPN.app [Loaded] NordLynx - /Applications/NordVPN IKE.app [Loaded] NordWhisper - /Applications/NordVPN.app [Loaded] OpenVPNTunnel - /Applications/NordVPN.app [Loaded] tunnelExtension - /Applications/NordVPN IKE.app Finder sync extensions: [Not Loaded] FinderSyncExtension - /Applications/Google Drive.app/Contents/Applications/FinderHelper.app [Loaded] OneDrive Finder Integration - /Applications/OneDrive.app [Loaded] Dropbox Finder Extension - /Applications/Dropbox.app Notification providers: [Loaded] T2P Delivery Agent - /Applications/Teachers2Parents.app [Loaded] ServiceExtension - /Applications/WhatsApp.app [Loaded] NotificationService - /Applications/Prime Video.app File providers: [Loaded] Google Drive - /Applications/Google Drive.app [Loaded] Dropbox - /Applications/Dropbox.app [Loaded] OneDrive File Provider - /Applications/OneDrive.app Share services: [Loaded] Telegram - /Applications/Telegram.app [Loaded] Dropbox Transfer - /Applications/Dropbox.app [Loaded] Viber - /Applications/Viber.app Action services: [Loaded] LaTeXiT App Extension - /Applications/TeX/LaTeXiT.app Safari extensions: [Loaded] NordPass Password Manager & Digital Vault - /Applications/NordPass.app [Loaded] Bitwarden - /Applications/Bitwarden.app [Loaded] Browsing protection - /Applications/WithSecure/WithSecure Agent.app [Loaded] Webex - ~/Library/Application Support/WebEx Folder/Add-ons/Cisco WebEx Start.app QuickLook Previews: [Loaded] OmniGraffleQuickLook - /Applications/OmniGraffle.app com.omnigroup.omnigraffle.graffle *.graffle com.omnigroup.omnigraffle.graffle-package *.graffle com.omnigroup.omnigraffle.gstencil *.gstencil com.omnigroup.omnigraffle.gstencil-package *.gstencil com.omnigroup.omnigraffle.template *.gtemplate com.omnigroup.omnigraffle.template-package *.gtemplate com.omnigroup.omnigraffle.diagramstyle *.gdiagramstyle com.omnigroup.omnigraffle.diagramstyle-package *.gdiagramstyle [Loaded] EtreCheckQuickLook - ~/Downloads/EtreCheckPro.app com.etresoft.etrecheck4 *.etrecheck QuickLook Thumbnails: [Loaded] OmniGraffleThumbnail - /Applications/OmniGraffle.app com.omnigroup.omnigraffle.graffle *.graffle com.omnigroup.omnigraffle.graffle-package *.graffle com.omnigroup.omnigraffle.gstencil *.gstencil com.omnigroup.omnigraffle.gstencil-package *.gstencil com.omnigroup.omnigraffle.template *.gtemplate com.omnigroup.omnigraffle.template-package *.gtemplate com.omnigroup.omnigraffle.diagramstyle *.gdiagramstyle com.omnigroup.omnigraffle.diagramstyle-package *.gdiagramstyle [Loaded] WhiskyThumbnail - ~/Downloads/Whisky.app com.microsoft.windows-executable *.exe QuickLook Previews (legacy): OmniGraffle - /Applications/OmniGraffle.app com.omnigroup.omnigraffle.template *.gtemplate com.omnigroup.omnigraffle.graffle *.graffle com.omnigroup.omnigraffle.template-package *.gtemplate com.omnigroup.omnigraffle.gstencil-package *.gstencil com.omnigroup.omnigraffle.gstencil *.gstencil com.omnigroup.omnigraffle.graffle-package *.graffle DropboxQL - ~/Library/QuickLook/DropboxQL.qlgenerator com.adobe.illustrator.ai-image *.ai public.text org.oasis-open.opendocument.spreadsheet *.ods org.oasis-open.opendocument.presentation *.odp com.adobe.encapsulated-postscript *.eps BibDesk - /Applications/TeX/BibDesk.app net.sourceforge.bibdesk.ris *.ris net.sourceforge.bibdesk.bdsksearch *.bdsksearch net.sourceforge.bibdesk.webofscience org.tug.tex.bibtex *.bib net.sourceforge.bibdesk.bdskcache *.bdskcache DVI - /Applications/TeX/TeX Live Utility.app net.sourceforge.skim-app.dvi org.tug.tex.dvi *.dvi com.mac.amaxwell.dvi Internet Plug-ins: Silverlight: 5.1.50901.0 (? - installed 2022-02-02) AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2022-02-02) AdobePDFViewer: 21.005.20058 (Adobe Systems, Inc. - installed 2022-02-02) JavaAppletPlugin: Java 8 Update 111 build 14 (? - installed 2022-02-02) AdobeAAMDetect: AdobeAAMDetect 1.0.0.0 (? - installed 2022-02-02) SharePointBrowserPlugin: 14.0.0 (? - installed 2022-02-02) Audio Plug-ins: Echo360SystemAudio: 1.0 (Echo360 Inc - installed 2025-10-02) VirtualMic: 1.0 (Kinoni Oy - installed 2020-04-20) MSTeamsAudioDevice: 2025.30.00.37 (Microsoft Corporation - installed 2025-07-22) CoreMediaIO Plug-ins: EpocCamPlugIn: 1.1 (Kinoni Oy - installed 2022-02-02) 3rd Party Preference panels: Java (? - installed 2016-09-22) Backup: Time Machine information is limited without Full Disk Access Destinations: B*****************e [Local] (Last used) 5 local snapshots Oldest local snapshot: 2025-10-16 12:27:15 Last local snapshot: 2025-10-17 11:35:40 Performance: System Load: 2.82 (1 min ago) 3.12 (5 min ago) 6.45 (15 min ago) Nominal I/O usage: 1.20 MB/s File system: 9.78 seconds Write speed: 4714 MB/s Read speed: 5673 MB/s CPU Usage Snapshot: Type Overall System: 5 % User: 13 % Idle: 82 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) wsavd (3) 67.74 % (WithSecure Oyj) WindowServer 35.82 % (Apple) EtreCheckPro 20.80 % (Etresoft, Inc.) Slack Helper (Renderer) 14.22 % (SLACK TECHNOLOGIES L.L.C.) coreaudiod 11.32 % (Apple) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) Google Chrome Helper (Renderer) (15) 3.35 GB (Google LLC) EtreCheckPro 1.42 GB (Etresoft, Inc.) MTLCompilerService (33) 748 MB (Apple) wsavd (4) 597 MB (WithSecure Oyj) Google Chrome 553 MB (Google LLC) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) mDNSResponder 518 KB / 462 KB (Apple) apsd 70 KB / 435 KB (Apple) ChatGPT 195 KB / 200 KB (OpenAI, L.L.C.) rapportd 67 KB / 47 KB (Apple) Music 25 KB / 6 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 10 (Apple) Slack Helper (Renderer) 7 (SLACK TECHNOLOGIES L.L.C.) coreaudiod 6 (Apple) ChatGPT 4 (OpenAI, L.L.C.) WiFiAgent 2 (Apple) Virtual Memory Information: Physical RAM: 64 GB Free RAM: 27.45 GB Used RAM: 16.10 GB Cached files: 20.45 GB Available RAM: 47.90 GB Swap Used: 0 B Software Installs (past 60 days): Install Date Name (Version) 2025-08-21 Adobe Acrobat (25.001.20630) (25.001.20630) - Installer 2025-08-25 Google Drive (0) - Installer 2025-08-28 Microsoft Teams (25212.2404.3875.1360) - Installer 2025-08-28 Adobe Acrobat (25.001.20643) (25.001.20643) - Installer 2025-09-04 Zoom Workplace (6.5.9.61929) - Installer 2025-09-16 Google Drive (0) - Installer 2025-09-21 Sky Go - Installer 2025-09-27 Adobe Acrobat (25.001.20693) (25.001.20693) - Installer 2025-10-01 Adobe Acrobat (25.001.20756) (25.001.20756) - Installer 2025-10-07 Google Drive (0) - Installer 2025-10-16 Malwarebytes for Mac (1.0) - Installer 2025-10-16 The Unarchiver (4.3.9) - App Store 2025-10-16 OneDrive (25.174.0907) - App Store 2025-10-16 Numbers (14.4) - App Store 2025-10-16 Keynote (14.4) - App Store 2025-10-16 Prime Video (10.100) - App Store 2025-10-16 Pages (14.4) - App Store 2025-10-17 NordVPN (9.6.1) - App Store 2025-10-17 GarageBand (10.4.12) - App Store 2025-10-17 macOS 14.8.1 (14.8.1) - Software update 2025-10-17 RosettaUpdateAuto (1.0.0.0.1.1758600057) - Install on demand Clean up: [Running] networkextension - version 1.0 (Sophos - installed 2023-08-16) Application: Not found! [Running] com.sophos.endpoint.scanextension - version 1.0 (Sophos - installed 2023-08-16) Application: Not found! Description: Scanning Services Diagnostics Information (past 60 days): 2025-10-17 16:06:02 EtreCheckPro.app Hang 2025-10-17 14:42:32 wsavd Crash (52 times) First occurrence: 2025-10-15 20:48:07 Executable: /Library/WithSecure/bin/wsavd.app Details: CoreFoundation: *** multi-threaded process forked *** libsystem_c.dylib: crashed on child side of fork pre-exec 2025-10-17 14:42:28 wsesproviderd Crash (50 times) First occurrence: 2025-10-15 22:01:17 2025-10-17 13:55:10 LoginItems Crash Executable: /System/Library/ExtensionKit/Extensions/LoginItems.appex/Contents/MacOS/LoginItems 2025-10-17 09:27:00 spotlightknowledged High CPU Use (4 times) First occurrence: 2025-10-14 12:39:14 Executable: /System/Library/Frameworks/CoreSpotlight.framework/spotlightknowledged 2025-10-17 09:25:41 apfsd High CPU Use (2 times) First occurrence: 2025-10-16 12:05:51 Executable: /usr/libexec/apfsd 2025-10-16 22:54:09 Microsoft Excel.app Hang Executable: /Applications/Microsoft Excel.app 2025-10-16 11:20:12 Safari.app Hang 2025-10-15 22:22:13 Microsoft Outlook.app Hang Executable: /Applications/Microsoft Outlook.app End of report