EtreCheckPro version: 6.8.8 (68072)
Report generated: 2025-02-02 10:31:06
Download EtreCheckPro from https://etrecheck.com
Runtime: 2:49
Performance: Excellent

Problem: Other problem
Description: 
kernel_task and launchd constantly writing to SSD – 400GB overnight wh
en the computer was asleep.

Major Issues: None

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  Apps crashing - There have been numerous app crashes.
  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.
  Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed.
  Limited permissions - More information may be available with Full Disk Access.
  Sharing enabled - This computer has sharing services enabled that could be a security risk.

Hardware Information:
  MacBook Pro (14-inch, 2023)
    Status: Supported
  MacBook Pro Model: Mac14,9
  Apple M2 Pro (m2 pro) CPU: 12-core
  32 GB RAM - Not upgradeable
  Battery: Health = Normal - Cycle count = 37

Video Information:
  Apple M2 Pro
    Color LCD 3600 x 2338

Drives:
  disk0 - APPLE SSD AP1024Z 1.00 TB (Solid State - TRIM: Yes) 
  Internal Apple Fabric NVM Express
  S.M.A.R.T. Details: 1% used, 40.25 TB written, 100% health, 13 unsafe shutdowns
    disk0s1 [APFS Container] 524 MB
      disk1 [APFS Virtual drive] 524 MB (Shared by 4 volumes)
        disk1s1 - iSCPreboot (APFS) [APFS Preboot] (6 MB used)
        disk1s2 - xART (APFS) (6 MB used)
        disk1s3 - Hardware (APFS) (3 MB used)
        disk1s4 - Recovery (APFS) [Recovery] (20 KB used)
    disk0s2 [APFS Container] 994.66 GB
      disk3 [APFS Virtual drive] 994.66 GB (Shared by 6 volumes)
        disk3s1 (APFS) [APFS Container] (11.16 GB used)
          disk3s1s1 - Macintosh HD (APFS) [APFS Snapshot] (11.16 GB used)
        disk3s2 - Preboot (APFS) [APFS Preboot] (6.93 GB used)
        disk3s3 - Recovery (APFS) [Recovery] (1.03 GB used)
        disk3s4 - Update (APFS) (2 MB used)
        disk3s5 - Data (APFS) [APFS Virtual drive] (798.14 GB used)
        disk3s6 - VM (APFS) [APFS VM] (25 KB used)
    disk0s3 [APFS Container] 5.37 GB
      disk2 [APFS Virtual drive] 5.37 GB (Shared by 2 volumes)
        disk2s1 - Recovery (APFS) [Recovery] (1.87 GB used)
        disk2s2 - Update (APFS) (3 MB used)

Mounted Volumes:
  disk1s1 - iSCPreboot [APFS Preboot]
    Filesystem: APFS
    Mount point: /System/Volumes/iSCPreboot
    Used: 6 MB
    Shared values
      Size: 524 MB
      Free: 505 MB

  disk1s2 - xART
    Filesystem: APFS
    Mount point: /System/Volumes/xarts
    Used: 6 MB
    Shared values
      Size: 524 MB
      Free: 505 MB

  disk1s3 - Hardware
    Filesystem: APFS
    Mount point: /System/Volumes/Hardware
    Used: 3 MB
    Shared values
      Size: 524 MB
      Free: 505 MB

  disk3s1s1 - Macintosh HD [APFS Snapshot]
    Filesystem: APFS
    Mount point: /
    Read-only: Yes
    Used: 11.16 GB
    Shared values
      Size: 994.66 GB
      Free: 177.19 GB
      Available: 191.65 GB

  disk3s2 - Preboot [APFS Preboot]
    Filesystem: APFS
    Mount point: /System/Volumes/Preboot
    Used: 6.93 GB
    Shared values
      Size: 994.66 GB
      Free: 177.19 GB

  disk3s3 - Recovery [Recovery]
    Filesystem: APFS
    Mount point: /Volumes/Recovery
    Used: 1.03 GB
    Shared values
      Size: 994.66 GB
      Free: 177.19 GB

  disk3s4 - Update
    Filesystem: APFS
    Mount point: /System/Volumes/Update
    Used: 2 MB
    Shared values
      Size: 994.66 GB
      Free: 177.19 GB

  disk3s5 - Data [APFS Virtual drive]
    Filesystem: APFS
    Mount point: /System/Volumes/Data
    Encrypted
    Used: 798.14 GB
    Shared values
      Size: 994.66 GB
      Free: 177.19 GB
      Available: 191.65 GB

  disk3s6 - VM [APFS VM]
    Filesystem: APFS
    Mount point: /System/Volumes/VM
    Used: 25 KB
    Shared values
      Size: 994.66 GB
      Free: 177.19 GB

USB:
  USB 3.1 bus
    <Empty>

  USB 3.1 bus
    <Empty>

  USB 3.1 bus
    <Empty>

Network:
  Interface en7: USB 10/100/1000 LAN
  Interface en4: Ethernet Adapter (en4)
  Interface en5: Ethernet Adapter (en5)
  Interface en6: Ethernet Adapter (en6)
  Interface en0: Wi-Fi
    802.11 a/b/g/n/ac/ax
  Interface bridge0: Thunderbolt Bridge

  Screen sharing: Enabled

System Software:
  macOS Sequoia 15.3 (24D60) 
  Time since boot: About a day

Security:
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled
  Secure Boot: Full Security

  Antivirus software: Apple

  Screen sharing: Enabled

Unsigned Files:
  Launchd: /Library/LaunchDaemons/com.microsoft.teams.TeamsUpdaterDaemon.plist
    Executable: /Applications/Microsoft Teams.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon
    Details: Restrictive config permissions - possibly malware

  Apps: 9

System Launch Daemons:
  [Not Loaded]  39 Apple tasks
  [Loaded]  179 Apple tasks
  [Running]  190 Apple tasks
  [Other]  2 Apple tasks

System Launch Agents:
  [Not Loaded]  21 Apple tasks
  [Loaded]  191 Apple tasks
  [Running]  234 Apple tasks

Launch Daemons:
  [Not Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2025-01-15)
    Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper
    Location: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2025-01-15)
    Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper

  [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Not signed - installed 2023-06-13)
    Executable: /Applications/Microsoft Teams.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon

  [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2025-01-30)
    Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon

Launch Agents:
  [Not Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2024-12-20)
    Command: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant --launchByAgent
    Location: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

  [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2025-01-15)
    Command: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant --launchByAgent

User Launch Agents:
  [Not Loaded] com.google.GoogleUpdater.wake.plist (Google LLC - installed 2024-07-20)
    Command: ~/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/updater/*=2

  [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2023-12-06)
    <Empty>

  [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2023-12-06)
    <Empty>

  [Loaded] com.valvesoftware.steamclean.plist (Valve Corporation - installed 2025-02-01)
    Command: ~/Library/Application Support/Steam/SteamApps/steamclean Public

User Login Items:
  [Not Loaded] Launcher Disabler (App Store - installed 2025-01-30)
    Modern Login Item
    /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app

  [Loaded] OneDrive Launcher (App Store - installed 2025-01-30)
    Modern Login Item
    /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app

  [Loaded] Steam (Valve Corporation - installed 2024-07-30)
    Application
    /Applications/Steam.app

  [Not Loaded] HP Device Monitor (HP Inc. - installed 2024-07-30)
    Modern Login Item
    /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app

  [Not Loaded] PasswordsMenuBarExtra (Apple - installed 2025-01-16)
    Modern Login Item
    /System/Applications/Passwords.app/Contents/Library/LoginItems/PasswordsMenuBarExtra.app

  [Not Loaded] WeatherMenu (Apple - installed 2025-01-16)
    Modern Login Item
    /System/Applications/Weather.app/Contents/Library/LoginItems/WeatherMenu.app

  [Loaded] Macs Fan Control (Ilya Parniuk - installed 2024-07-30)
    Application
    ~/Applications/Macs Fan Control.app

  [Not Loaded] DriveDxLoginItemHelper (Kirill Luzanov - installed 2025-01-31)
    Modern Login Item
    ~/Downloads/DriveDx.app/Contents/Library/LoginItems/DriveDxLoginItemHelper.app

Applications:
  796 Apple apps
  136 3rd party apps
  58 x86-only apps
  9 unsigned apps

App Extensions:
  Action services:
    [Loaded] Remove Background - /Applications/Pixelmator Pro.app

  Widgets:
    [Loaded] PowerPointWidgetKit - /Applications/Microsoft PowerPoint.app
    [Loaded] WordWidgetKit - /Applications/Microsoft Word.app
    [Not Loaded] ExcelWidgetKit - /Applications/Microsoft Excel.app

  Notification providers:
    [Loaded] ServiceExtension - /Applications/WhatsApp.app

  Photo editing extensions:
    [Loaded] Pixelmator Pro - /Applications/Pixelmator Pro.app
    [Loaded] Affinity Haze Removal - /Applications/Affinity Photo.app
    [Loaded] Affinity Retouch - /Applications/Affinity Photo.app
    [Loaded] Affinity Liquify - /Applications/Affinity Photo.app
    [Loaded] Affinity Develop - /Applications/Affinity Photo.app
    [Loaded] Edit in Affinity Photo - /Applications/Affinity Photo.app
    [Loaded] Affinity Miniature - /Applications/Affinity Photo.app
    [Loaded] Affinity Monochrome - /Applications/Affinity Photo.app

  File providers:
    [Loaded] OneDrive File Provider - /Applications/OneDrive.app

  Share services:
    [Loaded] Send to Kindle - /Applications/Amazon Kindle.app
    [Loaded] OneNote - /Applications/Microsoft OneNote.app

  Plugins:
    [Loaded] Intents - /Applications/WhatsApp.app

  Finder sync extensions:
    [Not Loaded] OneDrive Finder Integration - /Applications/OneDrive.app

  QuickLook Previews:
    [Loaded] Full Size Previews - /Applications/Pixelmator Pro.app
      com.pixelmatorteam.pixelmator.document.binary *.pxd
      com.pixelmatorteam.pixelmator.document.package *.pxd
      com.pixelmatorteam.pixelmator-photo.document.binary *.photo
      com.pixelmatorteam.pixelmator-photo.document.package *.photo
      com.pixelmatorteam.pixelmator.document-pro-sidecar.binary *.pxd-sidecar
      com.pixelmatorteam.pixelmator.document-pro-sidecar.package *.pxd-sidecar
      com.pixelmatorteam.pixelmator-photo-edit.document.binary *.photo-edit
      com.pixelmatorteam.pixelmator-photo-edit.document.package *.photo-edit
      com.pixelmator.pxm *.pxm
      public.pxd
    [Loaded] EtreCheckQuickLook - ~/Downloads/EtreCheckPro.app
      com.etresoft.etrecheck4 *.etrecheck

  QuickLook Thumbnails:
    [Loaded] Thumbnails - /Applications/Pixelmator Pro.app
      com.pixelmatorteam.pixelmator.document.binary *.pxd
      com.pixelmatorteam.pixelmator.document.package *.pxd
      com.pixelmatorteam.pixelmator-photo.document.binary *.photo
      com.pixelmatorteam.pixelmator-photo.document.package *.photo
      com.pixelmatorteam.pixelmator.document-pro-sidecar.binary *.pxd-sidecar
      com.pixelmatorteam.pixelmator.document-pro-sidecar.package *.pxd-sidecar
      com.pixelmatorteam.pixelmator-photo-edit.document.binary *.photo-edit
      com.pixelmatorteam.pixelmator-photo-edit.document.package *.photo-edit
      com.pixelmator.pxm *.pxm
      public.pxd
      com.apple.videoapps.cube *.cube
      com.blackmagicdesign.cube *.cube

Internet Plug-ins:
  AdobePDFViewer: 21.005.20058 (Adobe Systems, Inc. - installed 2024-07-30)
  AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2024-07-30)

Audio Plug-ins:
  MSTeamsAudioDevice: 2024.45.00.6 (Microsoft Corporation - installed 2024-10-28)

CoreMediaIO Plug-ins:
  obs-mac-virtualcam: 27.1.3 (Wizards of OBS LLC - installed 2024-07-30)

Backup:
  Time Machine information is limited without Full Disk Access
  Destinations: 
    Macintosh HD [Local]

Performance:
  System Load: 5.03 (1 min ago) 6.54 (5 min ago) 6.36 (15 min ago)
  Nominal I/O usage: 2.07 MB/s
  File system: 8.86 seconds
  Write speed: 2225 MB/s
  Read speed: 3797 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 3 %
  User: 6 %
  Idle: 91 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  WindowServer 33.44 % (Apple)
  com.apple.WebKit.WebContent (14) 15.30 % (Apple)
  EtreCheckPro 13.64 % (Etresoft, Inc.)
  AppleSpell 9.16 % (Apple)
  com.apple.WebKit.GPU (3) 8.92 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  com.apple.WebKit.WebContent (14) 1.90 GB (Apple)
  EtreCheckPro 1.49 GB (Etresoft, Inc.)
  corespotlightd 921 MB (Apple)
  com.apple.quicklook.ThumbnailsAgent 435 MB (Apple)
  mediaanalysisd 341 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  mDNSResponder 31 MB / 6 MB (Apple)
  com.apple.WebKit.Networking 10 MB / 91 KB (Apple)
  apsd 4 MB / 3 MB (Apple)
  netbiosd 418 KB / 765 KB (Apple)
  exchangesyncd 741 KB / 159 KB (Apple)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  WindowServer 9 (Apple)
  AppleSpell 8 (Apple)
  Safari 3 (Apple)
  com.apple.WebKit.WebContent (14) 3 (Apple)
  com.apple.WebKit.GPU (3) 2 (Apple)

Virtual Memory Information:
  Physical RAM: 32 GB

  Free RAM: 1.24 GB
  Used RAM: 12.15 GB
  Cached files: 18.60 GB

  Available RAM: 19.85 GB
  Swap Used: 0 B

Software Installs (past 60 days):
  Install Date Name (Version)
  2024-12-13 Keynote (14.3)
  2024-12-13 Pages (14.3)
  2024-12-13 Numbers (14.3)
  2024-12-18 XProtectPayloads (149)
  2024-12-23 ‎WhatsApp (24.25.79)
  2025-01-08 Pixelmator Pro (3.6.14)
  2025-01-15 Microsoft AutoUpdate (4.77.24121924)
  2025-01-15 XProtectCloudKitUpdate (5285)
  2025-01-15 Microsoft Teams (24335.207.3345.5574)
  2025-01-21 Kindle (7.24)
  2025-01-22 macOS 15.2 (15.2)
  2025-01-30 XProtectPlistConfigData (5286)
  2025-01-30 OneDrive (24.232.1118)
  2025-01-30 Zoom Workplace (6.2.11.43613)
  2025-01-31 GarageBand (10.4.12)
  2025-02-01 macOS 15.3 (15.3)
  2025-02-01 RosettaUpdateAuto (1.0.0.0.1.1737030012)

Diagnostics Information (past 60 days):
  2025-02-01 23:33:53 knowledgeconstructiond High CPU Use (2 times)
    First occurrence: 2025-01-29 19:10:15
    Executable: /System/Library/PrivateFrameworks/IntelligencePlatformCore.framework/Versions/A/knowledgeconstructiond

  2025-02-01 15:44:16 signpost_reporter High CPU Use (2 times)
    First occurrence: 2025-01-31 15:43:25
    Executable: /usr/libexec/signpost_reporter

  2025-02-01 12:34:21 com.apple.WebKit.WebContent High CPU Use (2 times)
    First occurrence: 2025-02-01 10:36:09
    Details:
      "com.apple.Safari"(1060)

  2025-02-01 12:23:15 Numbers.app Hang
    Executable: /Applications/Numbers.app

  2025-02-01 10:57:21 lsd Crash (10 times)
    First occurrence: 2025-02-01 10:25:30
    Executable: /usr/libexec/lsd

  2025-02-01 00:35:06 spotlightknowledged High CPU Use (2 times)
    First occurrence: 2025-01-30 01:27:23
    Executable: /System/Library/Frameworks/CoreSpotlight.framework/spotlightknowledged

  2025-01-30 00:33:59 photoanalysisd High CPU Use
    Executable: /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Versions/A/Support/photoanalysisd

  2025-01-29 22:13:50 suggestd High CPU Use
    Executable: /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd

  2025-01-29 18:15:00 corespotlightd High CPU Use (3 times)
    First occurrence: 2025-01-29 17:41:24
    Executable: /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/corespotlightd

  2025-01-29 17:39:15 OneDrive File Provider Crash
    Executable: /Applications/OneDrive.app
    Details:
      libsystem_c.dylib: abort() called


End of report