EtreCheckPro version: 6.8.12 (68084)
Report generated: 2025-12-13 10:33:30
Download EtreCheckPro from https://etrecheck.com
Runtime: 4:15
Performance: Below Average

Problem: Beachballing

Major Issues: None

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  Apps crashing - There have been numerous app crashes.
  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.
  Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed.
  Low performance - EtreCheck report took an unusually long time to run.

Hardware Information:
  Mac mini (M1, 2020)
    Status: Supported
  Mac mini Model: Macmini9,1
  2.40 GHz Apple M1 (m1) CPU: 8-core
  8 GB RAM - Not upgradeable

Video Information:
  Apple M1
    LG ULTRAWIDE 2560 x 1080

Drives:
  disk0 - APPLE SSD AP0512Q 500.28 GB (Solid State - TRIM: Yes) 
  Internal Apple Fabric NVM Express
  S.M.A.R.T. Details: 0% used, 16.90 TB written, 100% health, 49 unsafe shutdowns
    disk0s1 [APFS Container] 524 MB
      disk1 [APFS Virtual drive] 524 MB (Shared by 4 volumes)
        disk1s1 - iSCPreboot (APFS) [APFS Preboot] (6 MB used)
        disk1s2 - xART (APFS) (6 MB used)
        disk1s3 - Hardware (APFS) (655 KB used)
        disk1s4 - Recovery (APFS) [Recovery] (20 KB used)
    disk0s2 [APFS Container] 494.38 GB
      disk3 [APFS Virtual drive] 494.38 GB (Shared by 6 volumes)
        disk3s1 (APFS) [APFS Container] (12.27 GB used)
          disk3s1s1 - Macintosh HD (APFS) [APFS Snapshot] (12.27 GB used)
        disk3s2 - Preboot (APFS) [APFS Preboot] (8.29 GB used)
        disk3s3 - Recovery (APFS) [Recovery] (1.32 GB used)
        disk3s4 - Update (APFS) (5 MB used)
        disk3s5 - Macintosh HD - Data (APFS) [APFS Virtual drive] (131.37 GB used)
        disk3s6 - VM (APFS) [APFS VM] (20 KB used)
    disk0s3 [APFS Container] 5.37 GB
      disk2 [APFS Virtual drive] 5.37 GB (Shared by 2 volumes)
        disk2s1 - Recovery (APFS) [Recovery] (2.07 GB used)
        disk2s2 - Update (APFS) (3 MB used)

Mounted Volumes:
  disk1s1 - iSCPreboot [APFS Preboot]
    Filesystem: APFS
    Mount point: /System/Volumes/iSCPreboot
    Used: 6 MB
    Shared values
      Size: 524 MB
      Free: 506 MB

  disk1s2 - xART
    Filesystem: APFS
    Mount point: /System/Volumes/xarts
    Used: 6 MB
    Shared values
      Size: 524 MB
      Free: 506 MB

  disk1s3 - Hardware
    Filesystem: APFS
    Mount point: /System/Volumes/Hardware
    Used: 655 KB
    Shared values
      Size: 524 MB
      Free: 506 MB

  disk3s1s1 - Macintosh HD [APFS Snapshot]
    Filesystem: APFS
    Mount point: /
    Read-only: Yes
    Used: 12.27 GB
    Shared values
      Size: 494.38 GB
      Free: 340.97 GB
      Available: 386.66 GB

  disk3s2 - Preboot [APFS Preboot]
    Filesystem: APFS
    Mount point: /System/Volumes/Preboot
    Used: 8.29 GB
    Shared values
      Size: 494.38 GB
      Free: 340.97 GB

  disk3s4 - Update
    Filesystem: APFS
    Mount point: /System/Volumes/Update
    Used: 5 MB
    Shared values
      Size: 494.38 GB
      Free: 340.97 GB

  disk3s5 - Macintosh HD - Data [APFS Virtual drive]
    Filesystem: APFS
    Mount point: /System/Volumes/Data
    Encrypted
    Used: 131.37 GB
    Shared values
      Size: 494.38 GB
      Free: 340.97 GB
      Available: 386.66 GB

  disk3s6 - VM [APFS VM]
    Filesystem: APFS
    Mount point: /System/Volumes/VM
    Used: 20 KB
    Shared values
      Size: 494.38 GB
      Free: 340.97 GB

USB:
  USB 3.1 Bus
    BillBoard Device

  USB 3.1 Bus
    <Empty>

  USB 3.0 Bus
    USB Receiver
    USB Receiver

Network:
  Interface en1: Wi-Fi
    802.11 a/b/g/n/ac/ax
  Interface en6: iPhone

  iCloud is limited without Full Disk Access

  Firewall:
    Blocked apps: None

System Software:
  macOS Tahoe 26.2 (25C56) 
  Installed 2025-12-13
  Time since boot: About 3 hours

Security:
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled
  Secure Boot: Full Security

  Antivirus software: Apple and Sophos

Unsigned Files:
  Launchd: /Library/LaunchDaemons/com.wdc.WDPrivilegedHelper.plist
    Executable: /Library/PrivilegedHelperTools/com.wdc.WDPrivilegedHelper
    Details: Exact match found in the legitimate list - probably OK

System Extensions:
  [Running] com.sophos.endpoint.scanextension - version 10.11.4 (Sophos - installed 2025-12-13)
    Application: /Applications/Sophos/Sophos Detection.app - version 10.11.4 (Sophos - installed 2025-12-13)
    Description: Scanning Services

  [Running] Check Point Firewall - version 872012001 (Check Point Software Technologies - installed 2022-07-21)
    Application: /Applications/Check Point Firewall.app - version 872012001 (Check Point Software Technologies - installed 2022-07-21)

  [Running] networkextension - version 10.11.4 (Sophos - installed 2025-11-13)
    Application: /Applications/Sophos/Sophos Network Extension.app - version 10.11.4 (Sophos - installed 2025-11-13)

  [Not Loaded] DuckDuckGo VPN Network Extension - version 1.167.0 (App Store - installed 2025-12-03)
    Application: /Applications/DuckDuckGo.app/Contents/Library/LoginItems/DuckDuckGo VPN.app - version 1.167.0 (App Store - installed 2025-12-03)
    Description: DuckDuckGo VPN

  [Not Loaded] TransparentProxyTestExtension - version 10.11.4 (Sophos - installed 2025-11-13)
    Application: /Applications/Sophos/Tools/Sophos Transparent Proxy Test Tool.app - version 10.11.4 (Sophos - installed 2025-11-13)

  [Not Loaded] ContentFilterTestExtension - version 10.11.4 (Sophos - installed 2025-11-13)
    Application: /Applications/Sophos/Tools/Sophos Content Filter Test Tool.app - version 10.11.4 (Sophos - installed 2025-11-13)

System Launch Daemons:
  [Not Loaded]  44 Apple tasks
  [Loaded]  194 Apple tasks
  [Running]  186 Apple tasks
  [Other]  2 Apple tasks

System Launch Agents:
  [Not Loaded]  21 Apple tasks
  [Loaded]  226 Apple tasks
  [Running]  226 Apple tasks
  [Other]  One Apple task

Launch Daemons:
  [Running] com.checkpoint.epc.service.plist (Check Point Software Technologies - installed 2022-07-21)
    Executable: /Library/Application Support/Checkpoint/Endpoint Connect/TracSrvWrapper

  [Running] com.logi.optionsplus.updater.plist (Logitech Inc. - installed 2025-12-04)
    Executable: /Library/Application Support/Logitech.localized/LogiOptionsPlus/logioptionsplus_agent.app/Contents/Frameworks/logioptionsplus_updater.app/Contents/MacOS/logioptionsplus_updater

  [Running] com.sophos.common.servicemanager.plist (Sophos - installed 2025-03-04)
    Executable: /Library/Sophos Anti-Virus/SophosServiceManager.app/Contents/MacOS/SophosServiceManager

  [Not Loaded] com.sophos.sophoscbr.plist (Sophos - installed 2022-08-22)
    Executable: /Library/SophosCBR/SophosCBR.bundle/Contents/MacOS/SophosCBR

  [Loaded] com.wdc.WDPrivilegedHelper.plist (Not signed - installed 2025-02-01)
    Executable: /Library/PrivilegedHelperTools/com.wdc.WDPrivilegedHelper

Launch Agents:
  [Running] com.checkpoint.eps.gui.plist (Check Point Software Technologies - installed 2022-04-24)
    Executable: /Applications/Endpoint Security VPN.app/Contents/MacOS/Endpoint_Security_VPN

  [Loaded] com.checkpoint.eps.upgrader.plist (Check Point Software Technologies - installed 2022-04-24)
    Executable: /Library/Application Support/Checkpoint/Endpoint Connect/Upgrader

  [Loaded] com.checkpoint.fw.app.plist (Check Point Software Technologies - installed 2022-07-21)
    Command: /usr/bin/open -a '/Applications/Check Point Firewall.app'

  [Running] com.logi.optionsplus.plist (Logitech Inc. - installed 2025-12-04)
    Command: /Library/Application Support/Logitech.localized/LogiOptionsPlus/logioptionsplus_agent.app/Contents/MacOS/logioptionsplus_agent --launchd

  [Running] com.logitech.LogiRightSight.Agent.plist (Logitech Inc. - installed 2025-12-04)
    Executable: /Library/Application Support/Logitech.localized/LogiRightSightForWebcams/LogiRightSight.app/Contents/MacOS/LogiRightSight

  [Running] com.sophos.home.ui.plist (Sophos - installed 2025-03-04)
    Executable: /Applications/Sophos/Sophos Home.app/Contents/MacOS/Sophos Home

  [Loaded] com.wdc.WD-Discovery.plist (Western Digital Corporation Branded Products Group - installed 2025-02-01)
    Command: /Applications/WD Discovery/WD Discovery.app/Contents/MacOS/WD Discovery --autolaunch

  [Running] com.wdc.WD-Drive-Agent.plist (Western Digital Corporation Branded Products Group - installed 2017-04-10)
    Executable: /Library/Application Support/WD Drive Agent/WD Drive Agent.app/Contents/MacOS/WD Drive Agent

  [Running] com.wdc.WDTrashObserver.plist (Western Digital Corporation Branded Products Group - installed 2025-02-01)
    Executable: /Applications/WD Discovery/WD Discovery.app/Contents/WDTrashObserver

User Login Items:
  [Running] DuckDuckGo Personal Information Removal (App Store - installed 2025-12-03)
    Modern Login Item
    /Applications/DuckDuckGo.app/Contents/Library/LoginItems/DuckDuckGo Personal Information Removal.app

  [Not Loaded] DuckDuckGo VPN (App Store - installed 2025-12-03)
    Modern Login Item
    /Applications/DuckDuckGo.app/Contents/Library/LoginItems/DuckDuckGo VPN.app

  [Not Loaded] LaunchService (LG Electronics - installed 2022-09-29)
    Modern Login Item
    /Applications/OnScreen Control.app/Contents/Library/LoginItems/LaunchService.app

  [Not Loaded] PasswordsMenuBarExtra (Apple - installed 2025-11-22)
    Modern Login Item
    /System/Applications/Passwords.app/Contents/Library/LoginItems/PasswordsMenuBarExtra.app

  [Not Loaded] WeatherMenu (Apple - installed 2025-11-22)
    Modern Login Item
    /System/Applications/Weather.app/Contents/Library/LoginItems/WeatherMenu.app

Applications:
  786 Apple apps
  61 3rd party apps
  19 x86-only apps
  No unsigned apps

App Extensions:
  Ad-blockers:
    [Loaded] Privacy Protection - /Applications/DuckDuckGo Privacy for Safari.app

  VPNs:
    [Loaded] DuckDuckGo VPN Network Extension - /Applications/DuckDuckGo.app/Contents/Library/LoginItems/DuckDuckGo VPN.app

  Plugins:
    [Loaded] Okta Verify - /Applications/Okta Verify.app
    [Loaded] VPNProxyExtension - /Applications/DuckDuckGo.app/Contents/Library/LoginItems/DuckDuckGo VPN.app

  Safari extensions:
    [Loaded] Privacy Dashboard - /Applications/DuckDuckGo Privacy for Safari.app

  QuickLook Previews:
    [Not Loaded] EtreCheckQuickLook - ~/Downloads/EtreCheckPro.app
      com.etresoft.etrecheck4 *.etrecheck

Audio Plug-ins:
  ParrotAudioPlugin: 1.0 (Apple - installed 2025-11-22)

Backup:
  Time Machine information is limited without Full Disk Access
  Destinations: 
    Macintosh HD [Local]

Performance:
  System Load: 2.51 (1 min ago) 2.27 (5 min ago) 2.12 (15 min ago)
  Nominal I/O usage: 2.51 MB/s
  File system: 10.96 seconds
  Write speed: 2885 MB/s
  Read speed: 1969 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 3 %
  User: 6 %
  Idle: 91 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  WindowServer 11.72 % (Apple)
  sandboxd 6.74 % (Apple)
  AMPDevicesAgent 6.70 % (Apple)
  kernel_task 6.40 % (Apple)
  EtreCheckPro 5.30 % (Etresoft, Inc.)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  EtreCheckPro 1.08 GB (Etresoft, Inc.)
  Sophos Detection 253 MB (Not signed)
  MTLCompilerService (27) 139 MB (Apple)
  DuckDuckGo 129 MB (App Store)
  com.apple.WebKit.WebContent (3) 128 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  mDNSResponder 5 MB / 668 KB (Apple)
  rapportd 3 MB / 104 KB (Apple)
  apsd 230 KB / 244 KB (Apple)
  cloudd 74 KB / 37 KB (Apple)
  SophosMcsAgentD 26 KB / 57 KB (Not signed)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  WindowServer 7 (Apple)
  runningboardd 3 (Apple)
  ContinuityCaptureAgent 1 (Apple)
  DuckDuckGo Personal Information Removal.app 1 (App Store)
  com.apple.AppleUserHIDDrivers 1 (Apple)

Virtual Memory Information:
  Physical RAM: 8 GB

  Free RAM: 165 MB
  Used RAM: 6.02 GB
  Cached files: 1.82 GB

  Available RAM: 1.98 GB
  Swap Used: 0 B

Software Installs (past 60 days):
  Install Date Name (Version)
  2025-10-15 XProtectCloudKitUpdate (5319) - XProtectUpdateService
  2025-10-15 XProtectPlistConfigData (5319) - Software update
  2025-10-21 XProtectPlistConfigData (5320) - Software update
  2025-10-22 XProtectCloudKitUpdate (5321) - XProtectUpdateService
  2025-10-23 XProtectPlistConfigData (5321) - Software update
  2025-10-28 Logi Plugin Service (1.0) - Installer
  2025-11-04 XProtectPlistConfigData (5322) - Software update
  2025-11-04 XProtectPayloads (156) - Software update
  2025-11-05 macOS 26.1 (26.1) - Software update
  2025-11-05 RosettaUpdateAuto (1.0.0.0.1763820096) - Install on demand
  2025-11-11 XProtectPlistConfigData (5323) - Software update
  2025-12-04 RightSight for WebCams Service (0) - Installer
  2025-12-04 Logi Plugin Service (1.0) - Installer
  2025-12-10 XProtectCloudKitUpdate (5324) - XProtectUpdateService
  2025-12-10 XProtectPlistConfigData (5324) - Software update
  2025-12-13 macOS 26.2 (26.2) - Software update
  2025-12-13 RosettaUpdateAuto (1.0.0.0.1763820096) - Install on demand

Diagnostics Information (past 60 days):
  2025-12-13 10:17:32 spotlightknowledged High CPU Use (14 times)
    First occurrence: 2025-12-06 10:16:58
    Executable: /System/Library/Frameworks/CoreSpotlight.framework/spotlightknowledged

  2025-12-13 07:10:46 ANECompilerService High CPU Use
    Executable: /System/Library/PrivateFrameworks/AppleNeuralEngine.framework/XPCServices/ANECompilerService.xpc/Contents/MacOS/ANECompilerService

  2025-12-13 05:56:56 com.sophos.endpoint.scanextension Crash (178 times)
    First occurrence: 2025-12-07 14:14:20

  2025-12-11 20:00:00 Sophos Detection.app High CPU Use
    Executable: /Applications/Sophos/Sophos Detection.app

  2025-12-11 17:11:25 logd High CPU Use
    Executable: /usr/libexec/logd

  2025-12-11 10:47:50 SophosUpdater.app High CPU Use
    Executable: /Library/Sophos Anti-Virus/SophosUpdater.app

  2025-12-09 14:26:38 com.apple.WebKit.WebContent High CPU Use
    Details:
      "com.duckduckgo.mobile.ios.DBP.backgroundAgent"(948)


End of report