EtreCheckPro version: 6.8.7 (68068)
Report generated: 2025-01-24 10:49:50
Download EtreCheckPro from https://etrecheck.com
Runtime: 9:30
Performance: Poor

Problem: Storage problems
Description: 
A lot of files and space occupied in folder:
~/Library/Metadata/SpotlightKnowledgeEvents/index.V2/journals/11/cs_default

Major Issues:
  Anything that appears on this list needs immediate attention. 
  Poor performance - EtreCheck report shows poor performance. This is unusual.
  Heavy CPU usage - Some processes are using an unusually high amount of CPU.

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  Low disk space - This computer is running low on free hard drive space.
  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.
  Clean up - There are orphan files that could be removed.
  Unsigned files - There are unsigned software files installed. These files could be old, incompatible, and cause problems. They should be reviewed.
  System modifications - There are a large number of system modifications running in the background.
  Runaway user process - A user process is using a large percentage of your CPU.
  Vintage hardware - This computer may be considered vintage.
  Limited permissions - More information may be available with Full Disk Access.
  Kernel extensions present - This computer has kernel extensions that may not work in the future.

Hardware Information:
  MacBook Pro (15-inch, 2018)
    Status: Vintage
  MacBook Pro Model: MacBookPro15,1
  2,6 GHz 6-Core Intel Core i7 (i7-8850H) CPU: 6-core
  16 GB RAM - Not upgradeable
    BANK 0/ChannelA-DIMM0 - 8 GB DDR4 2400  
    BANK 2/ChannelB-DIMM0 - 8 GB DDR4 2400  
  Battery: Health = Normal - Cycle count = 311

Video Information:
  Intel UHD Graphics 630 - VRAM: 1536 MB
    Color LCD (built-in) 3360 x 2100
  Radeon Pro 560X - VRAM: 4 GB

Drives:
  disk0 - APPLE SSD AP0512M 500.28 GB (Solid State - TRIM: Yes) 
  Internal PCI-Express 8.0 GT/s x4 NVM Express
    disk0s1 - EFI [EFI] 315 MB
    disk0s2 [APFS Container] 499.96 GB
      disk1 [APFS Virtual drive] 499.96 GB (Shared by 6 volumes)
        disk1s1 - M******************s (APFS) [APFS Virtual drive] (434.24 GB used)
        disk1s2 - Preboot (APFS) [APFS Preboot] (2.36 GB used)
        disk1s3 - Recovery (APFS) [Recovery] (1.31 GB used)
        disk1s4 - VM (APFS) [APFS VM] (2.15 GB used)
        disk1s5 (APFS) [APFS Container] (11.20 GB used)
          disk1s5s1 - Macintosh HD (APFS) [APFS Snapshot] (11.20 GB used)
        disk1s6 - Update (APFS) (3 MB used)

Mounted Volumes:
  disk1s1 - M******************s [APFS Virtual drive]
    Filesystem: APFS
    Mount point: /System/Volumes/Data
    Encrypted
    Used: 434.24 GB
    Shared values
      Size: 499.96 GB
      Free: 48.54 GB
      Available: 72.20 GB

  disk1s2 - Preboot [APFS Preboot]
    Filesystem: APFS
    Mount point: /System/Volumes/Preboot
    Used: 2.36 GB
    Shared values
      Size: 499.96 GB
      Free: 48.54 GB
      Available: 72.20 GB

  disk1s3 - Recovery [Recovery]
    Filesystem: APFS
    Mount point: /Volumes/Recovery
    Used: 1.31 GB
    Shared values
      Size: 499.96 GB
      Free: 48.54 GB

  disk1s4 - VM [APFS VM]
    Filesystem: APFS
    Mount point: /System/Volumes/VM
    Used: 2.15 GB
    Shared values
      Size: 499.96 GB
      Free: 48.54 GB
      Available: 72.20 GB

  disk1s5s1 - Macintosh HD [APFS Snapshot]
    Filesystem: APFS
    Mount point: /
    Read-only: Yes
    Used: 11.20 GB
    Shared values
      Size: 499.96 GB
      Free: 48.54 GB
      Available: 72.20 GB

  disk1s6 - Update
    Filesystem: APFS
    Mount point: /System/Volumes/Update
    Used: 3 MB
    Shared values
      Size: 499.96 GB
      Free: 48.54 GB
      Available: 72.20 GB

USB:
  USB 3.1 bus
    <Empty>

  USB 3.1 bus
    <Empty>

  USB 3.1 bus
    <Empty>

  T2Bus
    Apple Inc. - Touch Bar Backlight
    Apple Inc. - Touch Bar Display
    Apple Inc. - Apple Internal Keyboard / Trackpad
    Apple - Headset
    Apple Inc. - Ambient Light Sensor
    Apple Inc. - FaceTime HD Camera (Built-in)
    Apple Inc. - Apple T2 Controller

Network:
  Interface en0: Wi-Fi
    802.11 a/b/g/n/ac
  Interface en6: iPhone
  Interface bridge0: Thunderbolt Bridge

System Software:
  macOS Sequoia 15.2 (24C101) 
  Time since boot: About a day

Configuration Files:
  /etc/hosts - Count: 10

Security:
  Gatekeeper: App Store and identified developers
  System Integrity Protection: Enabled

  Antivirus software: Apple

Unsigned Files:
  Launchd: /Library/LaunchDaemons/com.microsoft.teams.TeamsUpdaterDaemon.plist
    Executable: /Applications/Microsoft Teams classic.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon
    Details: Restrictive config permissions - possibly malware

  Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Java-Updater.plist
    Command: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist
    Command: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck
    Details: Exact match found in the legitimate list - probably OK

  Launchd: ~/Library/LaunchAgents/net.pulsesecure.SetupClient.plist
    Executable: ~/Library/Application Support/Pulse Secure/SetupClient/PulseSetupClient.app/Contents/MacOS/PulseSetupClient
    Details: Exact match found in the legitimate list - probably OK

  Launchd: ~/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist
    Executable: /Applications/Tunnelblick.app/Contents/Resources/launchAtLogin.sh
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchDaemons/com.adobe.fpsaud.plist
    Executable: /Library/Application Support/Adobe/Flash Player Install Manager/fpsaud
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/com.oracle.java.Helper-Tool.plist
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool
    Details: Exact match found in the legitimate list - probably OK

  Running app: /Library/DropboxHelperTools/Dropbox_u501/dbkextd
    Details: Domain name invalid - possibly malware
  Running app: /Applications/MacPass.app/Contents/MacOS/MacPass

  Apps: 12

System Extensions:
  [Running] Check Point Firewall - version 872013304 (Check Point Software Technologies - installed 2024-06-05)
    Application: /Applications/Check Point Firewall.app - version 872013304 (Check Point Software Technologies - installed 2024-06-05)

  [Not Loaded] FortiClientProxy - version 7.4.0 (Fortinet, Inc - installed 2024-06-01)
    Application: /Applications/FortiClient.app/Contents/Resources/runtime.helper/FortiClientNetwork.app - version 7.4.0 (Fortinet, Inc - installed 2024-06-01)

  [Not Loaded] OBS Virtual Camera - version 31.0.0 (Wizards of OBS LLC - installed 2024-12-07)
    Application: /Applications/OBS.app - version 31.0.0 (Wizards of OBS LLC - installed 2024-12-24)
    Description: This Camera Extension enables virtual camera functionality in OBS Studio.

  [Running] vpnprovider - version 7.4.0 (Fortinet, Inc - installed 2024-06-01)
    Application: /Applications/FortiClient.app - version 7.4.0 (Fortinet, Inc - installed 2024-06-01)

  [Not Loaded] FortiClientPacketFilter - version 7.4.0 (Fortinet, Inc - installed 2024-06-01)
    Application: /Applications/FortiClient.app/Contents/Resources/runtime.helper/FortiClientNetwork.app - version 7.4.0 (Fortinet, Inc - installed 2024-06-01)

Kernel Extensions:
  /Applications/Tunnelblick.app
    [Not Loaded] tap-notarized.kext - net.tunnelblick.tap (20141104 (Tunnelblick build 5300))
    [Not Loaded] tun-notarized.kext - net.tunnelblick.tun (20141104 (Tunnelblick build 5300))

  /Library/Extensions
    [Loaded] Soundflower.kext - com.Cycling74.driver.Soundflower (2.0b2 - SDK 10.10)
    [Not Loaded] acsock.kext - com.cisco.kext.acsock (4.8.0 - SDK 10.14)
    [Not Loaded] hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.4.0)

System Launch Daemons:
  [Not Loaded]  42 Apple tasks
  [Loaded]  177 Apple tasks
  [Running]  188 Apple tasks
  [Other]  3 Apple tasks

System Launch Agents:
  [Not Loaded]  23 Apple tasks
  [Loaded]  187 Apple tasks
  [Running]  236 Apple tasks

Launch Daemons:
  [Loaded] com.acustica.HelperTool.plist (ACUSTICAUDIO SRL - installed 2024-11-03)
    Executable: /Library/PrivilegedHelperTools/com.acustica.HelperTool

  [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Inc. - installed 2024-12-09)
    Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.Communicator

  [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Inc. - installed 2024-12-09)
    Executable: /Library/PrivilegedHelperTools/com.adobe.ARMDC.SMJobBlessHelper

  [Not Loaded] com.adobe.fpsaud.plist (Not signed - installed 2021-04-28)
    Executable: /Library/Application Support/Adobe/Flash Player Install Manager/fpsaud

  [Not Loaded] com.checkpoint.epc.service.plist (Check Point Software Technologies - installed 2024-06-05)
    Executable: /Library/Application Support/Checkpoint/Endpoint Connect/TracSrvWrapper

  [Running] com.cisco.anyconnect.vpnagentd.plist (Cisco - installed 2020-04-16)
    Command: /opt/cisco/anyconnect/bin/vpnagentd -execv_instance

  [Running] com.citrix.CtxWorkspaceHelperDaemon.plist (Citrix Systems, Inc. - installed 2025-01-13)
    Executable: /Library/Application Support/Citrix Receiver/CtxWorkspaceHelperDaemon.app/Contents/MacOS/CtxWorkspaceHelperDaemon

  [Running] com.citrix.ctxusbd.plist (Citrix Systems, Inc. - installed 2025-01-13)
    Executable: /Library/Application Support/Citrix Receiver/ctxusbd

  [Running] com.citrix.ctxworkspaceupdater.plist (Citrix Systems, Inc. - installed 2025-01-13)
    Executable: /Library/Application Support/Citrix Receiver/ctxworkspaceupdater

  [Loaded] com.fortinet.forticlient.config.plist (Fortinet, Inc - installed 2024-07-29)
    Command: /Library/Application Support/Fortinet/FortiClient/bin/fctservctl2 run '/Library/Application Support/Fortinet/FortiClient/bin/fcconfig'

  [Loaded] com.fortinet.forticlient.fortiagent.plist (Fortinet, Inc - installed 2024-06-01)
    Command: /usr/bin/open -W /Applications/FortiClient.app/Contents/Resources/runtime.helper/FortiClientAgent.app

  [Loaded] com.fortinet.forticlient.fssoagent_launchdaemon.plist (Fortinet, Inc - installed 2024-07-29)
    Executable: /Library/Application Support/Fortinet/FortiClient/bin/fssoagent_launchdaemon

  [Loaded] com.fortinet.forticlient.macos.PrivilegedHelper.plist (Fortinet, Inc - installed 2024-07-29)
    Executable: /Library/PrivilegedHelperTools/com.fortinet.forticlient.macos.PrivilegedHelper

  [Running] com.fortinet.forticlient.servctl2.plist (Fortinet, Inc - installed 2024-07-29)
    Executable: /Library/Application Support/Fortinet/FortiClient/bin/fctservctl2

  [Loaded] com.fortinet.forticlient.vpn.plist (Fortinet, Inc - installed 2024-07-29)
    Executable: /Library/Application Support/Fortinet/FortiClient/bin/fctctld

  [Other] com.fortinet.forticlient.ztnafw.plist (Not signed - installed 2024-06-01)
    Executable: /Library/Application Support/Fortinet/FortiClient/bin/ztnafw

  [Loaded] com.google.GoogleUpdater.wake.system.plist (Google LLC - installed 2024-11-21)
    Command: /Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2 --system

  [Not Loaded] com.google.keystone.daemon.plist (Not signed - installed 2023-12-07)
    <Empty>

  [Running] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2024-12-14)
    Executable: /Applications/OneDrive.app/Contents/StandaloneUpdaterDaemon.xpc/Contents/MacOS/StandaloneUpdaterDaemon

  [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2024-12-14)
    Executable: /Applications/OneDrive.app/Contents/OneDriveUpdaterDaemon.xpc/Contents/MacOS/OneDriveUpdaterDaemon

  [Not Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2025-01-07)
    Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper
    Location: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2025-01-07)
    Executable: /Library/PrivilegedHelperTools/com.microsoft.autoupdate.helper

  [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2023-11-01)
    Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensingV2.helper

  [Loaded] com.microsoft.teams.TeamsUpdaterDaemon.plist (Not signed - installed 2024-02-09)
    Executable: /Applications/Microsoft Teams classic.app/Contents/TeamsUpdaterDaemon.xpc/Contents/MacOS/TeamsUpdaterDaemon

  [Not Loaded] com.oracle.java.Helper-Tool.plist (Not signed - installed 2019-04-02)
    Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

  [Loaded] net.tunnelblick.tunnelblick.tunnelblickd.plist (Jonathan Bullard - installed 2020-11-23)
    Executable: /Applications/Tunnelblick.app/Contents/Resources/tunnelblickd

  [Loaded] org.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2022-07-01)
    Command: /opt/X11/libexec/privileged_startx -d /opt/X11/etc/X11/xinit/privileged_startx.d

  [Loaded] us.zoom.ZoomDaemon.plist (Zoom Video Communications, Inc. - installed 2024-01-11)
    Executable: /Library/PrivilegedHelperTools/us.zoom.ZoomDaemon

Launch Agents:
  [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Inc. - installed 2024-12-09)
    Executable: /Library/Application Support/Adobe/ARMDC/Application/Acrobat Update Helper.app/Contents/MacOS/Acrobat Update Helper

  [Not Loaded] com.checkpoint.eps.gui.plist (Check Point Software Technologies - installed 2023-08-02)
    Executable: /Applications/Endpoint Security VPN.app/Contents/MacOS/Endpoint_Security_VPN

  [Loaded] com.checkpoint.eps.upgrader.plist (Check Point Software Technologies - installed 2024-06-05)
    Executable: /Library/Application Support/Checkpoint/Endpoint Connect/Upgrader

  [Not Loaded] com.checkpoint.fw.app.plist (Check Point Software Technologies - installed 2024-06-05)
    Command: /usr/bin/open -a '/Applications/Check Point Firewall.app'

  [Loaded] com.cisco.anyconnect.gui.plist (Cisco - installed 2021-03-12)
    Command: /usr/bin/open --wait-apps '/Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app'

  [Running] com.cisco.anyconnect.notification.plist (Cisco - installed 2021-03-12)
    Command: /usr/bin/open --wait-apps '/opt/cisco/anyconnect/bin/Cisco AnyConnect Secure Mobility Client Notification.app'

  [Loaded] com.citrix.AuthManager_Mac.plist (Citrix Systems, Inc. - installed 2025-01-13)
    Executable: /usr/local/libexec/AuthManager_Mac.app/Contents/MacOS/AuthManager_Mac

  [Running] com.citrix.ReceiverHelper.plist (Citrix Systems, Inc. - installed 2025-01-13)
    Executable: /usr/local/libexec/Citrix Workspace Helper.app/Contents/MacOS/Citrix Workspace Helper

  [Running] com.citrix.ServiceRecords.plist (Citrix Systems, Inc. - installed 2025-01-13)
    Executable: /usr/local/libexec/ServiceRecords.app/Contents/MacOS/ServiceRecords

  [Running] com.citrix.WebLauncher.plist (Citrix Systems, Inc. - installed 2024-12-11)
    Executable: /Library/Application Support/Citrix Receiver/Citrix Workspace Launcher.app/Contents/MacOS/Citrix Workspace Launcher

  [Running] com.citrix.safariadapter.plist (Citrix Systems, Inc. - installed 2025-01-13)
    Executable: /Library/Application Support/Citrix Receiver/SafariAdapter.app/Contents/MacOS/SafariAdapter

  [Running] com.fortinet.forticlient.credential_store.plist (Fortinet, Inc - installed 2024-07-29)
    Executable: /Library/Application Support/Fortinet/FortiClient/bin/CredentialStore

  [Loaded] com.fortinet.forticlient.fct_launcher.plist (Fortinet, Inc - installed 2024-07-29)
    Executable: /Library/Application Support/Fortinet/FortiClient/bin/FCTLauncher

  [Loaded] com.fortinet.forticlient.fortitray.plist (Fortinet, Inc - installed 2024-06-01)
    Command: /usr/bin/open -W /Applications/FortiClient.app/Contents/Resources/runtime.helper/FortiTray.app

  [Loaded] com.fortinet.forticlient.fssoagent_launchagent.plist (Fortinet, Inc - installed 2024-07-29)
    Executable: /Library/Application Support/Fortinet/FortiClient/bin/fssoagent_launchagent

  [Other] com.fortinet.forticlient.ztagent.plist (Not signed - installed 2024-06-01)
    Executable: /Library/Application Support/Fortinet/FortiClient/bin/ztagent

  [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2023-12-07)
    <Empty>

  [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2023-12-07)
    <Empty>

  [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2024-12-14)
    Executable: /Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater

  [Loaded] com.microsoft.SyncReporter.plist (Microsoft Corporation - installed 2025-01-19)
    Executable: /Applications/OneDrive.app/Contents/SyncReporter.app/Contents/MacOS/SyncReporter

  [Not Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2024-12-20)
    Command: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant --launchByAgent
    Location: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app

  [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2025-01-07)
    Command: /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant --launchByAgent

  [Not Loaded] com.oracle.java.Java-Updater.plist (Not signed - installed 2019-04-02)
    Command: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

  [Loaded] org.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2022-07-01)
    Command: /opt/X11/libexec/launchd_startx /opt/X11/bin/startx -- /opt/X11/bin/Xquartz

User Launch Agents:
  [Not Loaded] com.DigiDNA.iMazing2Mac.Mini.plist (Not signed - installed 2022-05-05)
    Executable: /Applications/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/MacOS/iMazing Mini

  [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2025-01-15)
    Command: ~/Library/Dropbox/DropboxMacUpdate.app/Contents/MacOS/DropboxMacUpdate -check periodic

  [Loaded] com.google.GoogleUpdater.wake.plist (Google LLC - installed 2024-11-21)
    Command: ~/Library/Application Support/Google/GoogleUpdater/Current/GoogleUpdater.app/Contents/MacOS/GoogleUpdater --wake-all --enable-logging --vmodule=*/components/update_client/*=2,*/chrome/enterprise_companion/*=2,*/chrome/updater/*=2

  [Not Loaded] com.google.keystone.agent.plist (Not signed - installed 2024-01-01)
    <Empty>

  [Not Loaded] com.google.keystone.xpcservice.plist (Not signed - installed 2024-01-01)
    <Empty>

  [Not Loaded] com.imobie.AnyTransToolHelper.plist (iMobie Inc. - installed 2019-01-27)
    Executable: ~/Library/Application Support/com.imobie.AnyTrans/AnyTransToolHelper.app/Contents/MacOS/AnyTransToolHelper

  [Loaded] com.synology.SynologyDrive.plist (Synology Inc. - installed 2020-09-23)
    Command: /usr/bin/open '/Applications/Synology Drive.app'

  [Not Loaded] com.valvesoftware.steamclean.plist (Valve Corporation - installed 2023-09-20)
    Command: ~/Library/Application Support/Steam/SteamApps/steamclean Public

  [Not Loaded] net.pulsesecure.SetupClient.plist (Not signed - installed 2019-01-30)
    Executable: ~/Library/Application Support/Pulse Secure/SetupClient/PulseSetupClient.app/Contents/MacOS/PulseSetupClient

  [Loaded] net.tunnelblick.tunnelblick.LaunchAtLogin.plist (Not signed - installed 2020-11-09)
    Executable: /Applications/Tunnelblick.app/Contents/Resources/launchAtLogin.sh

  [Not Loaded] org.virtualbox.vboxwebsrv.plist (Oracle America, Inc. - installed 2024-10-17)
    Executable: /Applications/VirtualBox.app/Contents/MacOS/vboxwebsrv

User Login Items:
  [Not Loaded] AppCleaner SmartDelete (Julien Ramseier - installed 2019-10-30)
    Modern Login Item
    /Applications/AppCleaner.app/Contents/Library/LoginItems/AppCleaner SmartDelete.app

  [Running] Dropbox (Dropbox, Inc. - installed 2025-01-23)
    Application
    /Applications/Dropbox.app

  [Running] Google Drive (Google LLC - installed 2025-01-23)
    Application
    /Applications/Google Drive.app

  [Not Loaded] MountyHelper (Uwe Hollatz - installed 2022-08-28)
    Modern Login Item
    /Applications/Mounty.app/Contents/Library/LoginItems/MountyHelper.app

  [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2025-01-19)
    Modern Login Item
    /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app

  [Loaded] OneDrive Launcher (Microsoft Corporation - installed 2025-01-19)
    Modern Login Item
    /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app

  [Not Loaded] StartUpHelper (Spotify - installed 2023-01-31)
    Modern Login Item
    /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app

  [Not Loaded] HDXCastHelper (Citrix Systems, Inc. - installed 2025-01-13)
    Modern Login Item
    /Library/Application Support/Citrix Receiver/Citrix Casting.app/Contents/Library/LoginItems/HDXCastHelper.app

  [Not Loaded] HP Device Monitor (HP Inc. - installed 2019-03-23)
    Modern Login Item
    /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app

  [Not Loaded] HP Product Research (HP Inc. - installed 2019-03-23)
    Modern Login Item
    /Library/Printers/hp/Utilities/HPPU Plugins/ProductImprovementStudy.hptask/Contents/Helpers/HP Product Research Manager.app/Contents/Library/LoginItems/HP Product Research.app

  [Not Loaded] PasswordsMenuBarExtra (Apple - installed 2024-12-07)
    Modern Login Item
    /System/Applications/Passwords.app/Contents/Library/LoginItems/PasswordsMenuBarExtra.app

  [Not Loaded] WeatherMenu (Apple - installed 2024-12-07)
    Modern Login Item
    /System/Applications/Weather.app/Contents/Library/LoginItems/WeatherMenu.app

Applications:
  805 Apple apps
  209 3rd party apps
  95 x86-only apps
  11 unsigned apps

App Extensions:
  Widgets:
    [Loaded] PowerPointWidgetKit - /Applications/Microsoft PowerPoint.app
    [Loaded] WordWidgetKit - /Applications/Microsoft Word.app
    [Loaded] ExcelWidgetKit - /Applications/Microsoft Excel.app
    [Loaded] QuickAccessWidget - /Applications/Citrix Workspace.app

  Safari extensions:
    [Loaded] Auto Reload - /Applications/Auto Reload.app

  File providers:
    [Loaded] Google Drive - /Applications/Google Drive.app
    [Loaded] Dropbox - /Applications/Dropbox.app
    [Loaded] OneDrive File Provider - /Applications/OneDrive.app

  Share services:
    [Loaded] Dropbox Transfer - /Applications/Dropbox.app
    [Loaded] OneNote - /Applications/Microsoft OneNote.app
    [Loaded] Compress with BetterZip - /Applications/BetterZip.app

  Finder sync extensions:
    [Loaded] BetterZip Finder Extension - /Applications/BetterZip.app
    [Loaded] Dropbox Finder Extension - /Applications/Dropbox.app
    [Not Loaded] OneDrive Finder Integration - /Applications/OneDrive.app
    [Loaded] FinderSyncExtension - /Applications/Google Drive.app/Contents/Applications/FinderHelper.app

  QuickLook Previews:
    [Loaded] EtreCheckQuickLook - ~/Downloads/EtreCheckPro.app
      com.etresoft.etrecheck4 *.etrecheck
    [Loaded] MainStageQuickLook - /Applications/MainStage.app
      com.apple.mainstage.concert *.concert
    [Loaded] LogicProQuickLookExtension - /Applications/Logic Pro.app
      com.apple.logicx.project *.logicx
    [Loaded] BetterZip Quick Look Extension - /Applications/BetterZip.app
      com.pkware.zip-archive
      public.zip-archive *.zip
      com.android.package-archive *.apk
      com.rarlab.rar-archive *.rar
      com.rarlab.rar-legacy-archive *.r00
      com.macitbetter.cbr-archive *.cbr
      com.macitbetter.cbz-archive *.cbz
      com.macitbetter.zip-archive *.pk3
      org.7-zip.7-zip-archive *.7z
      public.archive.arj
      org.7-zip.arj-archive *.arj
      public.archive.lha *.lha
      org.7-zip.lha-archive *.lha
      org.7-zip.nsis-archive *.nsis
      com.stuffit.archive.sit *.sit
      com.allume.stuffit-archive
      com.symantec.diskdoubler-archive *.dd
      com.apple.binhex-archive *.hqx
      com.apple.macbinary-archive *.bin
      com.apple.xar-archive *.xar
      com.microsoft.tnef *.dat
      com.macitbetter.betterzip.user-defined *.user-zip
      public.archive.cab
      com.microsoft.cab-archive *.cab
      com.microsoft.chm-archive *.chm
      public.iso-image *.iso
      public.iso-diskimage *.iso
      org.debian.deb-archive *.deb
      com.redhat.rpm-archive *.rpm
      public.cpio-archive *.cpio
      public.tar-archive *.tar
      com.apple.bom-compressed-cpio *.cpgz
      org.chromium.extension *.crx
      com.macitbetter.segmented-archive *.000
      com.sun.java-archive *.jar
      org.python.python-egg *.egg
      com.stuffit.archive.sit *.sit
      public.tar-archive *.tar
      org.gnu.gnu-zip-archive *.gz
      org.gnu.gnu-zip-tar-archive *.tgz
      public.archive.bzip2
      public.bzip2-archive *.bz2
      org.bzip.bzip2-archive *.bz2
      org.bzip.bzip2-tar-archive *.tbz
      public.tar-bzip2-archive *.tbz2
      org.tukaani.tar-xz-archive *.txz
      org.tukaani.xz-archive *.xz
      com.facebook.tar-zst-archive *.tzst
      com.facebook.zst-archive *.zst
      com.google.tar-br-archive *.tbr
      com.google.br-archive *.br

  QuickLook Thumbnails:
    [Loaded] LogicProThumbnailExtension - /Applications/Logic Pro.app
      com.apple.logicx.project *.logicx

Internet Plug-ins:
  AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2021-07-14)
  AdobePDFViewer: 21.005.20058 (Adobe Systems, Inc. - installed 2021-07-14)
  JavaAppletPlugin: Java 8 Update 211 build 12 (? - installed 2019-04-21)
  MeetingJoinPlugin: 1.0 (? - installed 2019-01-08)

Audio Plug-ins:
  COFFEEPUN x64: 2.3.5 (ACUSTICAUDIO SRL - installed 2022-12-19)
  MSTeamsAudioDevice: 2024.45.00.6 (Microsoft Corporation - installed 2024-10-28)
  mvMeter2: 2.6.1 (Thomas Baier - installed 2024-10-06)
  CHANNEV: 2.0.0 (Ridvan Kucuk - installed 2023-02-22)
  ZoomAudioDevice: 1.0 (Zoom Video Communications, Inc. - installed 2020-03-25)
  AppleAES3Audio: 3.0 (? - installed 2024-12-11)
  COFFEEPUNZL x64: 2.3.5 (ACUSTICAUDIO SRL - installed 2022-12-19)

3rd Party Preference panels:
  Flash Player (? - installed 2017-07-25)
  Java (? - installed 2019-04-21)
  MouseZoom (? - installed 2019-01-25)

Backup:
  Time Machine information is limited without Full Disk Access
  Destinations: 
    h**e [Network] (Last used)
    h**e [Network]

Performance:
  System Load: 1.51 (1 min ago) 2.33 (5 min ago) 2.46 (15 min ago)
  Nominal I/O usage: 0.02 MB/s
  File system: 29.19 seconds
  Write speed: 1066 MB/s
  Read speed: 2892 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 3 %
  User: 16 %
  Idle: 81 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  MSTeams 91.62 % (Microsoft Corporation)
  EtreCheckPro 43.86 % (Etresoft, Inc.)
  Microsoft Teams WebView Helper (Renderer) 41.80 % (Microsoft Corporation)
  coreaudiod 25.84 % (Apple)
  WindowServer 15.82 % (Apple)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  plugin-container (29) 1.32 GB (Mozilla Corporation)
  EtreCheckPro 884 MB (Etresoft, Inc.)
  kernel_task 872 MB (Apple)
  Microsoft Teams WebView Helper (Renderer) 531 MB (Microsoft Corporation)
  firefox 438 MB (Mozilla Corporation)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  MSTeams 150 MB / 34 MB (Microsoft Corporation)
  Mail 28 MB / 24 MB (Apple)
  mDNSResponder 4 MB / 1 MB (Apple)
  Stocks 2 MB / 245 KB (Apple)
  Dropbox 486 KB / 422 KB (Dropbox, Inc.)

Top Processes Snapshot by Energy Use:
  Process (count) Energy (0-100) (Source - Location)
  MSTeams 31 (Microsoft Corporation)
  coreaudiod 8 (Apple)
  WindowServer 7 (Apple)
  bluetoothd 2 (Apple)
  Citrix Viewer 1 (Citrix Systems, Inc.)

Virtual Memory Information:
  Physical RAM: 16 GB

  Free RAM: 22 MB
  Used RAM: 11.95 GB
  Cached files: 4.03 GB

  Available RAM: 4.05 GB
  Swap Used: 646 MB

Software Installs (past 60 days):
  Install Date Name (Version)
  2024-11-25 Compressor (4.9)
  2024-11-25 Final Cut Pro (11.0)
  2024-11-25 iMovie (10.4.3)
  2024-11-25 Motion (5.9)
  2024-12-09 ARMDCAgentInstaller (1.0.0)
  2024-12-11 macOS 15.2 (15.2)
  2024-12-11 MRTConfigData (1.93)
  2024-12-11 Gatekeeper Compatibility Data (1.0)
  2024-12-11 Pro Video Formats (2.3.2)
  2024-12-12 Adobe Acrobat (24.005.20320) (24.005.20320)
  2024-12-12 Command Line Tools for Xcode (16.2)
  2024-12-13 Numbers (14.3)
  2024-12-13 Keynote (14.3)
  2024-12-13 Pages (14.3)
  2024-12-18 XProtectPayloads (149)
  2025-01-07 Microsoft AutoUpdate (4.77.24121924)
  2025-01-13 Citrix Workspace (24.11.0)
  2025-01-14 XProtectPlistConfigData (5285)
  2025-01-15 Microsoft OneNote (16.93.25011212)
  2025-01-15 Microsoft PowerPoint (16.93.25011212)
  2025-01-15 Microsoft Word (16.93.25011212)
  2025-01-15 XProtectCloudKitUpdate (5285)
  2025-01-16 Microsoft Teams (24335.207.3345.5574)
  2025-01-18 Logic Pro (11.1.2)
  2025-01-19 Microsoft OneDrive (24.244.1204)
  2025-01-22 Microsoft Excel (16.93.25011917)
  2025-01-23 WiFi Scanner (3.2)
  2025-01-23 Google Drive (0)

Clean up:
  /Library/LaunchDaemons/com.fortinet.forticlient.ztnafw.plist
    /Library/Application Support/Fortinet/FortiClient/bin/ztnafw
    Executable not found
  ~/Library/LaunchAgents/com.DigiDNA.iMazing2Mac.Mini.plist
    /Applications/iMazing.app/Contents/MacOS/iMazing Mini.app/Contents/MacOS/iMazing Mini
    Executable not found
  /Library/LaunchAgents/com.fortinet.forticlient.ztagent.plist
    /Library/Application Support/Fortinet/FortiClient/bin/ztagent
    Executable not found

Diagnostics Information (past 60 days):
  2025-01-24 10:23:47 spotlightknowledged High CPU Use (11 times)
    First occurrence: 2025-01-17 16:15:21
    Executable: /System/Library/Frameworks/CoreSpotlight.framework/spotlightknowledged

  2025-01-24 08:40:49 Mail.app High CPU Use
    Executable: /System/Applications/Mail.app

  2025-01-23 18:02:34 ApplicationsStorageExtension High CPU Use
    Executable: /System/Library/PrivateFrameworks/StorageManagement.framework/PlugIns/ApplicationsStorageExtension.appex/Contents/MacOS/ApplicationsStorageExtension

  2025-01-23 16:50:24 Disk Inventory X Crash
    Executable: /Applications/Disk Inventory X.app

  2025-01-23 16:50:16 sudo Crash
    Executable: /usr/bin/sudo

  2025-01-23 16:22:00 lsd Crash (2 times)
    Executable: /usr/libexec/lsd

  2025-01-23 16:08:28 mdwrite High CPU Use
    Executable: /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Support/mdwrite

  2025-01-23 15:35:36 UltraEdit.app High CPU Use (9 times)
    First occurrence: 2025-01-21 14:41:03
    Executable: /Applications/UltraEdit.app
    Details:
      libsystem_c.dylib: abort() called

  2025-01-23 14:44:22 suggestd High CPU Use
    Executable: /System/Library/PrivateFrameworks/CoreSuggestions.framework/Versions/A/Support/suggestd

  2025-01-23 14:28:21 knowledgeconstructiond High CPU Use (6 times)
    First occurrence: 2025-01-17 16:00:29
    Executable: /System/Library/PrivateFrameworks/IntelligencePlatformCore.framework/Versions/A/knowledgeconstructiond

  2025-01-23 14:27:28 apfsd High CPU Use
    Executable: /usr/libexec/apfsd

  2025-01-23 14:23:26 signpost_reporter High CPU Use (3 times)
    First occurrence: 2025-01-20 14:24:28
    Executable: /usr/libexec/signpost_reporter

  2025-01-23 14:15:07 Mail.app High CPU Use (3 times)
    First occurrence: 2025-01-21 11:24:43
    Executable: /System/Applications/Mail.app

  2025-01-23 11:03:06 replayd High CPU Use (3 times)
    First occurrence: 2025-01-20 13:26:43
    Executable: /usr/libexec/replayd


End of report