EtreCheckPro version: 6.5.6 (6F041) Report generated: 2022-03-18 12:44:36 Download EtreCheckPro from https://etrecheck.com Runtime: 2:35 Performance: Excellent Problem: Computer is too slow Major Issues: Anything that appears on this list needs immediate attention. Unsigned files - There are unsigned software files installed that could be adware and should be reviewed. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. No Time Machine backup - Time Machine backup not found. Configuration profiles found - This computer may have configuration profiles installed. These are sometimes used by adware and malware. Apps crashing - There have been numerous app crashes. Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage. Clean up - There are orphan files that could be removed. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. x86-only Apps - This computer has x86-only apps might not work on future versions of the operating system. Limited drive access - More information may be available with Full Drive Access. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: MacBook Pro (13-inch, M1, 2020) MacBook Pro Model: MacBookPro17,1 2.40 GHz Apple M1 (m1) CPU: 8-core 8 GB RAM - Not upgradeable Battery: Health = Normal - Cycle count = 112 Video Information: Apple M1 Color LCD (built-in) 2880 x 1800 VZ239 1920 x 1080 Drives: disk0 - APPLE SSD AP0256Q 251.00 GB (Solid State - TRIM: Yes) Internal Apple Fabric NVM Express disk0s1 [APFS Container] 524 MB disk1 [APFS Virtual drive] 524 MB (Shared by 4 volumes) disk1s1 - iSCPreboot (APFS) [APFS Preboot] (Shared - 8 MB used) disk1s2 - xART (APFS) (Shared - 6 MB used) disk1s3 - Hardware (APFS) (Shared - 659 KB used) disk1s4 - Recovery (APFS) [Recovery] (Shared - 20 KB used) disk0s2 [APFS Container] 245.11 GB disk3 [APFS Virtual drive] 245.11 GB (Shared by 6 volumes) disk3s1 - Macintosh HD - Data (APFS) [APFS Virtual drive] (Shared - 133.18 GB used) disk3s2 - Update (APFS) (Shared - 70 MB used) disk3s3 (APFS) [APFS Container] (Shared - 15.19 GB used) disk3s3s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 15.19 GB used) disk3s4 - Preboot (APFS) [APFS Preboot] (Shared - 708 MB used) disk3s5 - Recovery (APFS) [Recovery] (Shared - 799 MB used) disk3s6 - VM (APFS) [APFS VM] (Shared - 2.15 GB used) disk0s3 [APFS Container] 5.37 GB disk2 [APFS Virtual drive] 5.37 GB (Shared by 2 volumes) disk2s1 - Recovery (APFS) [Recovery] (Shared - 1.71 GB used) disk2s2 - Update (APFS) (Shared - 119 KB used) Mounted Volumes: disk1s1 - iSCPreboot [APFS Preboot] 524 MB (Shared - 8 MB used, 505 MB free) APFS Mount point: /System/Volumes/iSCPreboot disk1s2 - xART 524 MB (Shared - 6 MB used, 505 MB free) APFS Mount point: /System/Volumes/xarts disk1s3 - Hardware 524 MB (Shared - 659 KB used, 505 MB free) APFS Mount point: /System/Volumes/Hardware disk3s1 - Macintosh HD - Data [APFS Virtual drive] 245.11 GB (Shared - 133.18 GB used, 105.88 GB available, 92.87 GB free) APFS Mount point: /System/Volumes/Data Encrypted disk3s2 - Update 245.11 GB (Shared - 70 MB used, 92.87 GB free) APFS Mount point: /System/Volumes/Update disk3s3s1 - Macintosh HD [APFS Snapshot] 245.11 GB (Shared - 15.19 GB used, 105.88 GB available, 92.87 GB free) APFS Mount point: / Read-only: Yes disk3s4 - Preboot [APFS Preboot] 245.11 GB (Shared - 708 MB used, 92.87 GB free) APFS Mount point: /System/Volumes/Preboot disk3s6 - VM [APFS VM] 245.11 GB (Shared - 2.15 GB used, 92.87 GB free) APFS Mount point: /System/Volumes/VM Network: Interface en3: Ethernet Adapter (en3) Interface en4: USB 10/100/1000 LAN Interface en5: Ethernet Adapter (en5) Interface bridge0: Thunderbolt Bridge Interface en0: Wi-Fi 802.11 a/b/g/n/ac/ax System Software: macOS Monterey 12.3 (21E230) Time since boot: About a day Configuration Files: /etc/hosts - Count: 4 Configuration Profiles: com.jamf.management.jamfAAD - disableUPNLoginHint com.microsoft.wdav - cloudService com.microsoft.wdav - antivirusEngine com.microsoft.autoupdate2 - StartDaemonOnAppLaunch com.microsoft.autoupdate2 - HowToCheck com.microsoft.autoupdate2 - EnableCheckForUpdatesButton com.microsoft.autoupdate2 - UpdateCheckFrequency com.microsoft.autoupdate2 - Applications com.microsoft.autoupdate2 - AcknowledgedDataCollectionPolicy com.microsoft.wdav.atp - PayloadEnabled com.microsoft.wdav.atp - PayloadDisplayName com.microsoft.wdav.atp - PayloadScope com.microsoft.wdav.atp - PayloadType com.microsoft.wdav.atp - PayloadRemovalDisallowed com.microsoft.wdav.atp - PayloadIdentifier com.microsoft.wdav.atp - PayloadContent com.microsoft.wdav.atp - PayloadDescription com.microsoft.wdav.atp - PayloadOrganization com.microsoft.wdav.atp - PayloadVersion com.microsoft.wdav.atp - PayloadUUID com.microsoft.office - DefaultEmailAddressOrDomain com.microsoft.office - OfficeAutoSignIn com.microsoft.office - OfficeActivationEmailAddress com.apple.coreservices.uiagent - CSUIDisable32BitWarnings com.apple.dock - static-others com.apple.dock - static-apps com.accenture.applesso - Window com.accenture.applesso - Slides com.accenture.applesso - FontStyles com.accenture.applesso - Admin com.accenture.applesso - Navigation com.accenture.applesso - General com.accenture.applesso - ColorStyles Notifications: Microsoft Outlook.app 42 notifications Google Chrome Helper (Alerts).app 88 notifications Google Chrome.app one notification Insomnia.app one notification Creative Cloud.app 2 notifications Security: Gatekeeper: App Store and identified developers System Integrity Protection: Enabled Antivirus software: Apple Unsigned Files: Launchd: /Library/LaunchDaemons/com.microsoft.fresno.uninstall.plist Executable: /Library/Application Support/Microsoft/Defender/uninstall/uninstall --post-uninstall-hook Launchd: /Library/LaunchDaemons/com.microsoft.dlp.install_monitor.plist Executable: /Library/Application Support/Microsoft/DLP/scripts/install_monitor Launchd: /Library/LaunchDaemons/com.nexthink.collector.nxtbsm.plist Executable: /Library/Application Support/Nexthink/nxtbsm Details: Restrictive app permissions - possibly adware Launchd: /Library/LaunchDaemons/com.accenture.maintenance.plist Executable: /bin/bash /usr/local/.accenture/maintenance.sh Launchd: /Library/LaunchDaemons/com.nexthink.collector.nxtcoordinator.plist Executable: /Library/Application Support/Nexthink/nxtcoordinator Details: Restrictive app permissions - possibly adware Launchd: /Library/LaunchDaemons/com.nexthink.collector.driver.nxtsvc.plist Executable: /Library/Application Support/Nexthink/nxtsvc Details: Restrictive app permissions - possibly adware Launchd: /Library/LaunchDaemons/net.pulsesecure.UninstallPulse.plist Executable: /Library/Application Support/Pulse Secure/Pulse/Uninstall.app/Contents/Resources/uninstaller Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.microsoft.wdav.schedweeklyscan.plist Executable: /bin/sh -c '/usr/local/bin/mdatp scan quick' Launchd: /Library/LaunchDaemons/com.nexthink.audit.config.plist Executable: /Library/Application Support/Nexthink/nxtaccfg.sh Details: Restrictive app permissions - possibly adware Launchd: /Library/LaunchDaemons/com.microsoft.wdav.schedquickscan.plist Executable: /bin/sh -c '/usr/local/bin/mdatp scan quick' Launchd: /Library/LaunchDaemons/com.nexthink.collector.nxtcod.plist Executable: /Library/Application Support/Nexthink/nxtcod Details: Restrictive app permissions - possibly adware Launchd: /Library/LaunchAgents/com.amaris.octory.launch.plist Executable: /Library/Application Support/Octory/Octory.launch.sh Launchd: /Library/LaunchDaemons/com.nexthink.collector.nxteufb.plist Executable: /Library/Application Support/Nexthink/nxteufb Details: Restrictive app permissions - possibly adware Launchd: /Library/LaunchAgents/com.nexthink.collector.nxtusm.plist Executable: /Library/Application Support/Nexthink/nxtusm Details: Restrictive app permissions - possibly adware Launchd: /Library/Application Support/Nexthink/com.nexthink.collector.nxtbsm.plist Executable: /Library/Application Support/Nexthink/nxtbsm Details: Restrictive app permissions - possibly adware Launchd: /Library/LaunchDaemons/com.tanium.taniumclient.plist Executable: /Library/Tanium/TaniumClient/TaniumClient -d Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.jamfsoftware.startupItem.plist Executable: /Library/Application Support/JAMF/ManagementFrameworkScripts/StartupScript.sh Details: Exact match found in the legitimate list - probably OK Apps: 5 Old Applications: 12 x86-only apps System Extensions: [Running] Microsoft Defender Network Extension - version 101.56.62 (Microsoft Corporation - 2022-02-11) Application: /Applications/Microsoft Defender.app - version 101.60.91 (Microsoft Corporation - 2022-03-17) Description: MdAtp Network Filter extension [Not Loaded] PulseSecureFirewallSysExt - version 4.0 (Pulse Secure LLC - 2021-09-27) Application: /Applications/Pulse Secure.app - version 9.1.13 (Pulse Secure LLC - 2022-03-16) [Running] Microsoft Defender Endpoint Security Extension - version 101.60.91 (Microsoft Corporation - 2022-03-17) Application: /Applications/Microsoft Defender.app - version 101.60.91 (Microsoft Corporation - 2022-03-17) Description: MdAtp Endpoint Security extension Kernel Extensions: /Applications/Microsoft Defender.app [Not Loaded] wdavkext.kext - com.microsoft.wdavkext (101.60.91) System Launch Daemons: [Not Loaded] 39 Apple tasks [Loaded] 207 Apple tasks [Running] 132 Apple tasks [Other] One Apple task System Launch Agents: [Not Loaded] 16 Apple tasks [Loaded] 191 Apple tasks [Running] 149 Apple tasks Launch Daemons: [Not Loaded] com.Tanium.taniumclientupgrade.plist (? 0 - installed 2021-11-08) [Loaded] com.accenture.maintenance.plist (? b4f44490 - installed 2022-02-26) [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Inc. - installed 2022-01-07) [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Inc. - installed 2022-01-07) [Running] com.adobe.acc.installer.v2.plist (Adobe Inc. - installed 2021-10-15) [Loaded] com.adobe.agsservice.plist (Adobe Inc. - installed 2021-12-18) [Other] com.docker.vmnetd.plist (? f9884eaf - installed 2022-01-14) [Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2021-12-08) [Running] com.jamf.management.daemon.plist (JAMF Software - installed 2021-11-08) [Not Loaded] com.jamfsoftware.startupItem.plist (? 44b5eabd - installed 2022-03-17) [Loaded] com.jamfsoftware.task.1.plist (JAMF Software - installed 2022-03-17) [Other] com.kollectiveDaemon.plist (Kontiki, Inc. - installed 2021-07-01) [Loaded] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2022-03-08) [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2022-03-08) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2022-03-17) [Loaded] com.microsoft.dlp.install_monitor.plist (? c157e9f0 - installed 2022-03-17) [Running] com.microsoft.fresno.plist (Microsoft Corporation - installed 2022-03-17) [Loaded] com.microsoft.fresno.uninstall.plist (? 5f09f528 - installed 2022-03-17) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2021-11-16) [Running] com.microsoft.teams.TeamsUpdaterDaemon.plist (Microsoft Corporation - installed 2022-02-28) [Loaded] com.microsoft.wdav.schedquickscan.plist (? 8fa1c2d1 - installed 2022-02-26) [Other] com.microsoft.wdav.schedweeklyscan.plist (? c080a8ea - installed 2022-02-26) [Loaded] com.nexthink.audit.config.plist (? 8215b9e - installed 2021-10-08) [Loaded] com.nexthink.collector.driver.nxtsvc.plist (? f4dd91e7 - installed 2021-10-08) [Not Loaded] com.nexthink.collector.nxtbsm.plist (? 3d40f57f - installed 2022-02-07) [Running] com.nexthink.collector.nxtcod.plist (? 4f0bd41d - installed 2021-10-08) [Running] com.nexthink.collector.nxtcoordinator.plist (? d0f85b3f - installed 2021-10-08) [Running] com.nexthink.collector.nxteufb.plist (? 656eefdf - installed 2021-10-08) [Loaded] com.piriform.ccleaner.CCleanerAgent.plist (Piriform Ltd - installed 2021-07-07) [Running] com.tanium.taniumclient.plist (? 0 - installed 2021-08-04) [Running] net.pulsesecure.AccessService.plist (Pulse Secure LLC - installed 2021-10-26) [Loaded] net.pulsesecure.PulseOpswatServiceAgentbased.plist (Pulse Secure LLC - installed 2021-10-26) [Loaded] net.pulsesecure.PulseOpswatServiceAgentbased_x86_64.plist (Pulse Secure LLC - installed 2021-10-26) [Loaded] net.pulsesecure.UninstallPulse.plist (? 54408489 - installed 2021-10-26) [Running] org.openvpn.client.plist (OPENVPN TECHNOLOGIES, INC. - installed 2021-07-07) [Running] org.openvpn.helper.plist (OPENVPN TECHNOLOGIES, INC. - installed 2021-07-07) Launch Agents: [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Inc. - installed 2022-01-07) [Running] com.adobe.AdobeCreativeCloud.plist (Adobe Inc. - installed 2022-02-04) [Running] com.adobe.GC.AGM.plist (Adobe Inc. - installed 2021-12-18) [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2021-12-18) [Loaded] com.adobe.ccxprocess.plist (Adobe Inc. - installed 2022-03-01) [Other] com.amaris.octory.launch.plist (? 75e8fa67 - installed 2021-07-01) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2021-12-08) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2021-12-08) [Loaded] com.jamf.management.agent.plist (JAMF Software - installed 2022-03-17) [Loaded] com.jamf.management.jamfAAD.agent.plist (JAMF Software - installed 2022-03-17) [Running] com.kollectiveAgent.plist (Kontiki, Inc. - installed 2021-07-01) [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2022-03-08) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2022-03-17) [Running] com.microsoft.wdav.tray.plist (Microsoft Corporation - installed 2022-03-17) [Not Loaded] com.nexthink.collector.nxtray.plist (Nexthink SA - installed 2022-02-07) [Running] com.nexthink.collector.nxtusm.plist (? 2015579a - installed 2021-10-08) [Running] net.pulsesecure.pulsetray.plist (Pulse Secure LLC - installed 2021-10-26) User Launch Agents: [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Inc. - installed 2021-12-18) [Loaded] net.pulsesecure.SetupClient.plist (Pulse Secure LLC - installed 2021-10-26) User Login Items: [Loaded] Google Drive (Google, Inc. - installed 2022-03-04) Application /Applications/Google Drive.app [Running] OneDrive (Microsoft Corporation - installed 2022-03-08) Application /Applications/OneDrive.app [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2022-03-08) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2022-03-08) Modern Login Item /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app Internet Plug-ins: AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2021-08-26) AdobeAAMDetect: 3.0.0.0 (Adobe Inc. - installed 2022-02-04) AdobePDFViewer: 21.005.20058 (Adobe Systems, Inc. - installed 2021-08-26) Backup: Time Machine Not Configured! Performance: System Load: 2.31 (1 min ago) 13.21 (5 min ago) 15.48 (15 min ago) Nominal I/O speed: 5.78 MB/s File system: 19.42 seconds Write speed: 963 MB/s Read speed: 1087 MB/s CPU Usage Snapshot: Type Overall System: 8 % User: 12 % Idle: 80 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) WindowServer 32.22 % (Apple) EtreCheckPro 24.58 % (Etresoft, Inc.) osqueryi 22.20 % (Microsoft Corporation) kernel_task 17.90 % (Apple) Google Chrome Helper (Renderer) (16) 13.90 % (Google LLC) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) Google Chrome Helper (Renderer) (16) 1.17 GB (Google LLC) EtreCheckPro 327 MB (Etresoft, Inc.) Google Chrome 159 MB (Google LLC) mdworker_shared (13) 153 MB (Apple) wdavdaemon_unprivileged 130 MB (Microsoft Corporation) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) mDNSResponder 51 MB / 9 MB (Apple) netbiosd 236 KB / 22 KB (Apple) rapportd 49 KB / 58 KB (Apple) apsd 20 KB / 36 KB (Apple) trustd 45 KB / 3 KB (Apple) Top Processes Snapshot by Energy Use: Process (count) Energy (0-100) (Source - Location) WindowServer 11 (Apple) Google Chrome 3 (Google LLC) Google Chrome Helper (GPU) 3 (Google LLC) Google Chrome Helper (Renderer) (16) 2 (Google LLC) config.ini 1 (? - /Library/Tanium/TaniumClient/Tools/EPI/TaniumEndpointIndex -i -c /Library/Tanium/TaniumClient/Tools/EPI) Virtual Memory Information: Physical RAM: 8 GB Free RAM: 16 MB Used RAM: 7.58 GB Cached files: 410 MB Available RAM: 426 MB Swap Used: 646 MB Software Installs (past 60 days): Install Date Name (Version) 2022-01-28 macOS 12.2 (12.2) 2022-01-28 Command Line Tools beta 4 for Xcode (13.0) 2022-01-29 Microsoft Defender ATP (101.54.16) 2022-02-07 Nexthink Collector 21.8.1.24 (1) 2022-02-10 CCleaner (2.3.137) 2022-02-11 macOS 12.2.1 (12.2.1) 2022-02-28 Microsoft Teams (1.00.504683) 2022-03-04 Google Drive (1.3.16.180) 2022-03-08 Microsoft To Do (2.65) 2022-03-15 Command Line Tools for Xcode (13.3) 2022-03-15 RosettaUpdateAuto (1.0.0.0.1.1645871684) 2022-03-15 macOS 12.3 (12.3) 2022-03-15 Microsoft AutoUpdate (4.38.21080801) 2022-03-15 Microsoft OneNote (16.59.22031300) 2022-03-15 Microsoft Outlook (16.59.22031300) 2022-03-15 Microsoft PowerPoint (16.59.22031300) 2022-03-15 Microsoft Word (16.59.22031300) 2022-03-15 Intune Company Portal (5.2203.0) 2022-03-15 GoPro Player (1.3.4) 2022-03-15 Affinity Photo (1.10.5) 2022-03-16 Microsoft Excel (16.59.22031300) 2022-03-16 Adobe Acrobat DC (22.001.20085) (22.001.20085) 2022-03-17 Microsoft Defender (101.60.91) 2022-03-18 XProtectPlistConfigData (2158) 2022-03-18 MRTConfigData (1.91) Clean up: /Library/LaunchDaemons/com.docker.vmnetd.plist /Library/PrivilegedHelperTools/com.docker.vmnetd Executable not found Diagnostics Information (past 7-30 days): 2022-03-17 19:13:16 nxtsvc Crash Executable: /Library/Application Support/Nexthink/nxtsvc Details: libsystem_c.dylib: abort() called libsystem_malloc.dylib: nxtsvc(377,0x16f8bf000) malloc: Incorrect chec ksum for freed object 0x11e72a938: probably modified after being freed . Corrupt value: 0x0 2022-03-16 22:45:20 photoanalysisd High CPU Use (2 times) Executable: /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd 2022-03-16 22:26:59 signpost_reporter High CPU Use (4 times) Executable: /usr/libexec/signpost_reporter 2022-03-16 21:17:55 Microsoft Defender Helper Crash (3 times) Executable: /Applications/Microsoft Defender.app Details: libc++abi.dylib: terminating with uncaught exception of type stdext::e rror_code_exception: {"code":{"category":"generic","value":32,"message ":"Broken pipe"},"call_stack":{"frames":[{"file":"objc_ipc.mm","line": 728}]},"context":[]} libsystem_c.dylib: abort() called 2022-03-16 17:48:46 epsext Crash (8 times) Executable: /Library/SystemExtensions/*/epsext 2022-03-16 15:13:26 coreaudiod Crash (3 times) Executable: /usr/sbin/coreaudiod Details: objc: objc_msgSend() selector name: isProxy 2022-03-15 22:22:14 dsAccessService Crash Executable: /Applications/Pulse Secure.app Details: libsystem_c.dylib: Assertion failed: (delayMs < 0xFFFFFFFFull), functi on SetTimer, file ../dsaccessworkqueue.cpp, line 335. 2022-03-15 14:34:45 triald High CPU Use Executable: /usr/libexec/triald End of report