EtreCheck version: 5.7.2 (5247) Report generated: 2021-03-25 20:03:40 Download EtreCheck from https://etrecheck.com Runtime: 2:23 Performance: Excellent Sandbox: Enabled Full drive access: Enabled Problem: No problem - just checking Description: After 11.2.3 update Major Issues: Anything that appears on this list needs immediate attention. Time Machine backup out-of-date - The last Time Machine backup is over 10 days old. Minor Issues: These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. Apps crashing - There have been numerous app crashes. Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system. System modifications - There are a large number of system modifications running in the background. Kernel extensions present - This computer has kernel extensions that may not work in the future. Hardware Information: MacBook Pro (13-inch, 2020, Four Thunderbolt 3 ports) MacBook Pro Model: MacBookPro16,2 2 GHz Quad-Core Intel Core i5 (i5-1038NG7) CPU: 4-core 16 GB RAM - Not upgradeable BANK 0/ChannelA-DIMM0 - 8 GB LPDDR4X 3733 BANK 2/ChannelB-DIMM0 - 8 GB LPDDR4X 3733 Battery: Health = Normal - Cycle count = 74 Video Information: Intel Iris Plus Graphics - VRAM: 1536 MB Color LCD (built-in) 2880 x 1800 HP 24y 1920 x 1080 Drives: disk0 - APPLE SSD AP0512N 500.28 GB (Solid State - TRIM: Yes) Internal PCI-Express 8.0 GT/s x4 NVM Express disk0s1 - EFI [EFI] 315 MB disk0s2 [APFS Container] 499.96 GB disk1 [APFS Virtual drive] 499.96 GB (Shared by 6 volumes) disk1s1 - M******************s (APFS) [APFS Virtual drive] (Shared - 186.98 GB used) disk1s2 (APFS) [APFS Container] (Shared) disk1s2s1 - Macintosh HD (APFS) [APFS Snapshot] (Shared - 15.05 GB used) disk1s3 - Preboot (APFS) [APFS Preboot] (Shared - 468 MB used) disk1s4 - Recovery (APFS) [Recovery] (Shared) disk1s5 - VM (APFS) [APFS VM] (Shared - 20 KB used) disk1s6 - Update (APFS) (Shared - 3 MB used) Mounted Volumes: disk1s1 - M******************s [APFS Virtual drive] 499.96 GB (Shared - 186.98 GB used, 380.97 GB available, 296.69 GB free) APFS Mount point: /System/Volumes/Data Encrypted disk1s2s1 - Macintosh HD [APFS Snapshot] 499.96 GB (Shared - 15.05 GB used, 380.97 GB available, 296.69 GB free) APFS Mount point: / Read-only: Yes disk1s3 - Preboot [APFS Preboot] 499.96 GB (Shared - 468 MB used, 296.69 GB free) APFS Mount point: /System/Volumes/Preboot disk1s5 - VM [APFS VM] 499.96 GB (Shared - 20 KB used, 296.69 GB free) APFS Mount point: /System/Volumes/VM disk1s6 - Update 499.96 GB (Shared - 3 MB used, 296.69 GB free) APFS Mount point: /System/Volumes/Update Network: Interface en7: USB 10/100/1000 LAN Interface en8: USB 10/100/1000 LAN 2 Interface en0: Wi-Fi 802.11 a/b/g/n/ac Interface en6: Bluetooth PAN Interface bridge0: Thunderbolt Bridge System Software: macOS Big Sur 11.2.3 (20D91) Time since boot: Less than an hour Configuration Files: /etc/hosts - Count: 32 Notifications: Tunnelblick.app one notification Slack.app 74 notifications BetterZip.app 6 notifications Spark.app 6 notifications Security: Gatekeeper: Enabled System Integrity Protection: Enabled Antivirus software: Apple Unsigned Files: Launchd: /Library/LaunchDaemons/net.pulsesecure.AccessService.plist Executable: /Applications/Pulse Secure.app/Contents/Plugins/JUNS/dsAccessService Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/com.zerotier.one.plist Executable: /Library/Application Support/ZeroTier/One/launch.sh Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/org.virtualbox.startup.plist Executable: /Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh restart Details: Exact match found in the legitimate list - probably OK Launchd: ~/Library/LaunchAgents/net.tunnelblick.tunnelblick.LaunchAtLogin.plist Executable: /Applications/Tunnelblick.app/Contents/Resources/launchAtLogin.sh Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/net.pulsesecure.UninstallPulse.plist Executable: /Library/Application Support/Pulse Secure/Pulse/Uninstall.app/Contents/Resources/uninstaller Details: Exact match found in the legitimate list - probably OK Launchd: /Library/LaunchDaemons/org.ocsng.agent.plist Executable: /Applications/OCSNG.app/Contents/MacOS/OCSNG Details: Exact match found in the legitimate list - probably OK Apps: 7 System Extensions: [Running] Cisco AnyConnect Socket Filter Extension - version 4.9.06037 (Cisco - 2021-01-22) Application: /Applications/Cisco/Cisco AnyConnect Socket Filter.app - version 4.9.06037 (Cisco - 2021-02-25) Description: This system extension provides socket filter capabilities. Kernel Extensions: /Applications/Pulse Secure.app PulseSecureFirewall.kext - net.pulsesecure.PulseSecureFirewall (9.1.7 - SDK 10.12) /Applications/Tunnelblick.app tap-notarized.kext - net.tunnelblick.tap (20141104 (Tunnelblick build 5300)) tun-notarized.kext - net.tunnelblick.tun (20141104 (Tunnelblick build 5300)) /Library/Application Support/Cisco/AnyConnect Secure Mobility Client acsock.kext - com.cisco.kext.acsock (4.9.40 - SDK 10.14) /Library/Application Support/VirtualBox VBoxDrv.kext - org.virtualbox.kext.VBoxDrv (6.1.18) VBoxNetAdp.kext - org.virtualbox.kext.VBoxNetAdp (6.1.18) VBoxNetFlt.kext - org.virtualbox.kext.VBoxNetFlt (6.1.18) VBoxUSB.kext - org.virtualbox.kext.VBoxUSB (6.1.18) /Library/Application Support/ZeroTier/One tap.kext - com.zerotier.tap (20150118) /Library/Extensions hp_io_enabler_compound.kext - com.hp.kext.io.enabler.compound (3.4.0) System Launch Agents: [Not Loaded] 17 Apple tasks [Loaded] 194 Apple tasks [Running] 120 Apple tasks System Launch Daemons: [Not Loaded] 34 Apple tasks [Loaded] 193 Apple tasks [Running] 133 Apple tasks [Other] One Apple task Launch Agents: [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2021-02-11) [Loaded] com.cisco.anyconnect.gui.plist (Cisco - installed 2021-02-25) [Loaded] com.cisco.anyconnect.notification.plist (Cisco - installed 2021-02-25) [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2021-03-18) [Loaded] org.pqrs.karabiner.agent.karabiner_grabber.plist (Fumihiko Takayama - installed 2021-01-29) [Loaded] org.pqrs.karabiner.agent.karabiner_observer.plist (Fumihiko Takayama - installed 2021-01-29) [Running] org.pqrs.karabiner.karabiner_console_user_server.plist (Fumihiko Takayama - installed 2021-01-29) [Running] org.pqrs.karabiner.karabiner_session_monitor.plist (Fumihiko Takayama - installed 2021-01-29) [Loaded] org.xquartz.startx.plist (Apple Inc. - XQuartz - installed 2021-03-16) Launch Daemons: [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2021-01-09) [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2021-01-09) [Running] com.canonical.multipassd.plist (Canonical Group Limited - installed 2021-02-12) [Running] com.cisco.anyconnect.vpnagentd.plist (Cisco - installed 2021-01-22) [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2021-03-18) [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-08-04) [Running] com.tildeslash.monit.helper.plist (Tildeslash Norge Ltd - installed 2020-07-07) [Running] com.zerotier.one.plist (? 9d52f065 - installed 2019-02-28) [Running] net.pulsesecure.AccessService.plist (? 1d36417 - installed 2020-08-05) [Loaded] net.pulsesecure.UninstallPulse.plist (? 54408489 - installed 2020-08-05) [Loaded] net.tunnelblick.tunnelblick.tunnelblickd.plist (Jonathan Bullard - installed 2021-02-12) [Loaded] org.ocsng.agent.plist (? 6f79a84d - installed 2020-08-04) [Running] org.openvpn.client.plist (OPENVPN TECHNOLOGIES, INC. - installed 2021-03-10) [Running] org.openvpn.helper.plist (OPENVPN TECHNOLOGIES, INC. - installed 2021-03-10) [Running] org.pqrs.Karabiner-DriverKit-VirtualHIDDeviceClient.plist (Fumihiko Takayama - installed 2020-12-26) [Running] org.pqrs.karabiner.karabiner_grabber.plist (Fumihiko Takayama - installed 2021-01-29) [Running] org.pqrs.karabiner.karabiner_observer.plist (Fumihiko Takayama - installed 2021-01-29) [Not Loaded] org.virtualbox.startup.plist (? 700b9385 - installed 2021-02-25) [Loaded] org.wireshark.ChmodBPF.plist (Wireshark Foundation, Inc. - installed 2020-07-01) [Loaded] org.xquartz.privileged_startx.plist (Apple Inc. - XQuartz - installed 2021-03-16) User Launch Agents: [Not Loaded] com.canonical.multipass.gui.autostart.plist (Canonical Group Limited - installed 2021-02-12) [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2021-03-05) [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2021-03-05) [Loaded] net.tunnelblick.tunnelblick.LaunchAtLogin.plist (? 0 - installed 2020-12-14) [Not Loaded] org.virtualbox.vboxwebsrv.plist (Oracle America, Inc. - installed 2021-02-25) User Login Items: [Running] Alfred 4 (Running with Crayons Ltd - installed 2021-02-16) Application /Applications/Alfred 4.app [Not Loaded] AppCleaner SmartDelete (Julien Ramseier - installed 2021-02-17) Modern Login Item /Applications/AppCleaner.app/Contents/Library/LoginItems/AppCleaner SmartDelete.app [Not Loaded] Evernote Login Helper (App Store - installed 2021-03-17) Modern Login Item /Applications/Evernote.app/Contents/Library/LoginItems/Evernote Login Helper.app [Not Loaded] Kite Autostart (MANHATTAN ENGINEERING INC - installed 2020-10-02) Modern Login Item /Applications/Kite.app/Contents/Library/LoginItems/KiteAutostart.app [Not Loaded] Kite Helper (MANHATTAN ENGINEERING INC - installed 2020-10-02) Modern Login Item /Applications/Kite.app/Contents/Library/LoginItems/KiteHelper.app [Running] Magnet (App Store - installed 2020-11-17) Application /Applications/Magnet.app [Not Loaded] Slack Login Helper (App Store - installed 2021-02-24) Modern Login Item /Applications/Slack.app/Contents/Library/LoginItems/Slack Login Helper.app [Not Loaded] StartUpHelper (Spotify - installed 2021-03-15) Modern Login Item /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app [Not Loaded] WhatsApp Login Helper (App Store - installed 2021-03-17) Modern Login Item /Applications/WhatsApp.app/Contents/Library/LoginItems/WhatsApp Login Helper.app [Not Loaded] WireGuardLoginItemHelper (App Store - installed 2021-01-02) Modern Login Item /Applications/WireGuard.app/Contents/Library/LoginItems/WireGuardLoginItemHelper.app [Not Loaded] HP Device Monitor (HP Inc. - installed 2020-07-25) Modern Login Item /Library/Printers/hp/Frameworks/HPDeviceMonitoring.framework/Versions/1.0/Helpers/HP Device Monitor Manager.app/Contents/Library/LoginItems/HP Device Monitor.app Internet Plug-ins: AdobePDFViewer: 21.001.20145 (Adobe Systems, Inc. - installed 2021-03-13) AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2021-03-13) Backup: Skip System Files: No Auto backup: Yes Destinations: T*********e [Local] (Last used) Total size: 999.50 GB Total number of backups: 11 Oldest backup: 2020-10-14 21:19:07 Last backup: 2021-03-11 00:02:10 10 local snapshots Oldest local snapshot: 2021-03-10 22:33:57 Last local snapshot: 2021-03-25 18:56:46 Performance: System Load: 2.70 (1 min ago) 4.96 (5 min ago) 2.83 (15 min ago) Nominal I/O speed: 0.59 MB/s File system: 22.39 seconds Write speed: 2398 MB/s Read speed: 2090 MB/s CPU Usage Snapshot: Type Overall System: 3 % User: 6 % Idle: 91 % Top Processes Snapshot by CPU: Process (count) CPU (Source - Location) Other processes 42.65 % (?) EtreCheck 17.85 % (App Store) firefox 9.51 % (Mozilla Corporation) ControlStrip 0.56 % (Apple) Spark 0.29 % (App Store) Top Processes Snapshot by Memory: Process (count) RAM usage (Source - Location) EtreCheck 595 MB (App Store) firefox 408 MB (Mozilla Corporation) loginwindow 322 MB (Apple) TextInputMenuAgent 206 MB (Apple) Spark 205 MB (App Store) Top Processes Snapshot by Network Use: Process (count) Input / Output (Source - Location) Other processes 250 KB / 7 MB (?) com.apple.WebKit.Networking.xpc 1007 KB / 5 KB (Apple) firefox 360 KB / 33 KB (Mozilla Corporation) Spark 127 KB / 85 KB (App Store) spindump_agent 0 B / 0 B (Apple) Virtual Memory Information: Physical RAM: 16 GB Free RAM: 5.02 GB Used RAM: 6.54 GB Cached files: 4.44 GB Available RAM: 9.46 GB Swap Used: 0 B Software Installs (past 30 days): Install Date Name (Version) 2021-02-23 macOS 11.2.1 (11.2.1) 2021-02-24 Slack (4.13.0) 2021-02-24 Adobe Acrobat Reader DC (21.001.20140) (21.001.20140) 2021-02-25 Oracle VM VirtualBox (6.1.18) 2021-02-25 AnyConnect Secure Mobility Client (4.9.06037) 2021-02-26 macOS 11.2.2 (11.2.2) 2021-02-28 Adobe Acrobat Reader DC (21.001.20142) (21.001.20142) 2021-03-10 macOS 11.2.3 (11.2.3) 2021-03-11 iMovie (10.2.3) 2021-03-11 EtreCheck (5.7.2) 2021-03-13 Adobe Acrobat Reader DC (21.001.20145) (21.001.20145) 2021-03-17 Microsoft Word (16.47.21031401) 2021-03-17 Microsoft PowerPoint (16.47.21031401) 2021-03-17 WhatsApp (2.2108.9) 2021-03-17 Evernote (10.9.10) 2021-03-18 Microsoft AutoUpdate (4.33.21031401) 2021-03-19 MRTConfigData (1.76) 2021-03-19 XProtectPlistConfigData (2142) 2021-03-19 OpenVPN Connect (3.2.7-3220) 2021-03-22 Microsoft To Do (2.40) 2021-03-24 Microsoft Excel (16.47.21032301) 2021-03-24 Spark (2.9.17) Diagnostics Information (past 7-30 days): 2021-03-25 19:25:14 WindowServer High CPU Use Executable: /System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/Resources/WindowServer 2021-03-25 17:47:58 remoted Crash (20 times) Executable: /usr/libexec/remoted Details: dyld3 mode 2021-03-22 12:07:10 coreaudiod Crash Executable: /usr/sbin/coreaudiod Details: dyld3 mode End of report