|
Ursnif Trojaner auf Mac Hallo! Ich habe letzte Woche eine email bekommen, mit einer zip Datei inkl. Passwort, welches eine Word Datei beinhaltete. Nachdem ich heute erfuhr, dass diese email nicht von der Person verschickt wurde, von der ich ausging und nach einiger Recherche, wurde ich auf das Phänomen Ursnif aufmerksam, das genau meinen Fall beschreibt. Nun, ich habe die Datei leider mehrfach geöffnet und auch die Makros erlaubt, welche zunächst blockiert waren. Ich hoffe es bleibt unnötig zu sagen, dass ich dachte, die Mail würde einer vertrauenswürdigen Quelle entspringen. Ich besitze einen Mac und frage mich nun: Ist der Trojaner aktiv? Wie kann ich ihn entfernen? Ich habe heute ein Antivirusprogramm laufen lassen, welches nichts entdeckt hat. Ich bitte um Hilfe! LG :stirn::daumenrunter: |
:hallo: Appel gehört nicht zu den Kernkompetenzen des TB. Ich würde Dir aber mal einen Link im TB empfehlen. Dort sind bezüglich Malwarebites und anderer Programme ein paar nützliche Links. Vielleicht hast Du auch des Glück, dass Dante12 der Tage mal wieder im Forum vorbeischaut. |
Was soll den großartig bei einem Mac passieren, Felix? Hast du schon jemals Malware gesehen, die per Makro als DOC oder XLS kam und dann OSX infizieren wollte? Zitat:
|
Zitat:
Zitat:
|
Zitat:
Zitat:
|
Bitte bleibt bei Anhängen eher skeptisch. Es kommt zu oft Müll rum. Das beste wäre wenn man per Mail sich nur noch abspricht und grundsätzlich keine Dateien mehr schickt, denn dafür ist Mail auch garnicht da!!! Nehmt bitte sowas wie https://wetransfer.com/ |
Hallo elisabeth69, Bitte lese dir alles vorher genau durch bevor du die Schritte ausführst. Solltest du Fragen haben, bitte gleich stellen. Hinweis: Ab Catalina, Big Sur benötigen manche Programme die Zustimmung zum Festplattenvollzugriff. Sofern das nicht vom Programm selbst angezeigt wird, dann folgende Schritte durchführen: 1. Systemeinstellung -> Sicherheit & Datenschutz -> Button "Datenschutz" auwählen. 2. Auf das Schloss klicken und das Passwort eingeben. 3. Linke Spalte hinunterscrollen bis zu dem Punkt "Festplattenvollzugriff". 4. Klicke bitte auf den (+)-Button und wähle aus deinem Programm-Ordner das entsprechende Programm aus (in diesem Fall: DetectX Swift.app). 5. Systemeinstellungen wieder schliessen, und Programm neu starten. Scan mit MalwareBytes 4 for Mac
Prüfen mit DetectX Swift
http://dante.trojaner-board.de/bilder/detectX-Swift.png
http://dante.trojaner-board.de/bilde...ad-Profile.png  Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
|
Hallo Dante!! Hier der Bericht von DetectX! Ich danke dir vielmals für die Zeit!!!!!!!!!! Code: Timestamp (5): Mon May 03 10:17:51 2021 |
Frage: Bei dir läuft ein ajax-Server, der gehört zu HotSpot Shield hast du diesen bewusst installiert? Schritt 1 Bitte TotalAV deinstallieren das hat mehr mit Schlangenöl als mit echtem Schutz zu tun:
Schritt 2
Code: Alle Einträge mit TotalAVSchritt 3
Code: pkgutil --pkgs > ~/Desktop/pkgList.txt |& sudo pkgutil --pkgs >> ~/Desktop/pkgList.txt
EtreCheck installieren
Programme löschen mit AppCleaner AppCleaner ist ein Programm das dabei hilft Programme und dessen Dateien / Ordner zu entfernen. Wichtiger Hinweis: Programme können Fehler enthalten das ist bei AppCleaner auch nicht anders. Deshalb vergewissere dich, dass alle vorgeschlagenen (ausgewählten) Einträge zu dem Programm passen. Hier ein Beispiel: <domain>.<Anbieter / Hersteller>.<Programmname>.<Dateibeschreibung> Beispiel hier: net.kovidgoyal.calibre.xxxxx Vergewissere dich das alle Einträge den Hersteller und / oder Programmnamen enthalten. Andere Dateien oder Ordner die nicht übereinstimmen bitte nicht löschen!
http://dante.trojaner-board.de/bilde...escription.jpg
|
Auf deine Frage bezogen, nein den Ajax Server habe ich nicht bewusst installiert. 1)pkgList.txt Code: com.apple.pkg.MRTConfigData.16U4001Code: Timestamp (7): Mon May 03 14:25:59 2021Code: EtreCheckPro version: 6.4.4 (6E015)Ich hoffe das passt so! DANKE, Dante12! Außerdem : 1. Unter Systemeinstellungen, Benutzer und Gruppen, Button Anmeldeobjekte: keine Einträge von TotalAV, dementsprechend nicht deaktivierbar 2. Appcleaner findet keine totalAv Dateien 3. Habe manuell gesucht und dieses gefunden, lässt sich nicht löschen, habe auch nach eingeben des PW keinen Zugriff: net.protected.macos.TotalAV.ESAVExtension.systemextension |
Danke für deine Mithilfe, Wichtig: Bitte mache zwischendurch keinen Neustart bis ich dir das weiter unten geschrieben habe. Fragen: EtreCheck ohne Root-Rechte Hast du ExtreCheck unter Systemeinstellungen -> Sicherheit & Datenschutz -> Reiter Datenschutz -> Festplattenvollzugriff die Rechte zugewiesen? Sieht so aus das EtreCheck nur auf User-Ebene läuft. Bitte die Anweisungen befolgen wie ich dir bei der Rechtevergabe zu DetectX gegeben habe. Hier EtreCheck die Rechte unter Festplattenvollzugriff geben, Programm neu starten und ein neues Log erstellen. Adobe Flash Player Benötigst du den Flashplayer? Der wird nicht mehr aktualiert. Also wenn nicht, dann deinstallieren. In Safari unter Einstellungen -> Erweiterungen das Plugin löschen. Schau mal bitte im Finder unter Programme -> Dienstprogramme ob dort bereits ein uninstaller vorhanden ist. Dann diesen ausführen. Alternativ den Flash-Uninstaller herunterladen. Öffnen und ausführen. Terminal öffnen kopiere den Inhalt aus den Codeboxen, einfügen und mit Enter bestätigen. Eventuell musst du dein Admin-Passwort angeben. Code: sudo launchctl remove net.protected.macos.AVHelperweiter... Bitte die Zeilen hier einzeln in das Terminal kopieren und ausführen - Bei Fehlermeldungen hier posten. Code: sudo pkgutil --forget com.jdi.pkg.TotalAV
Hinweis: Das nachfolgende AppleScript-Programm löscht die Daten in der Liste trashPaths.txt. Aufgrund von Beschränkungen im System, muss jedoch beim Löschen in Systemordnern immer das Admin-Passwort eingegeben werden.
Code: /Library/LaunchDaemons/net.protected.macos.AVHelper.plist,1. Log mit DetectX 2. Log mit EtreCheck (bitte mit Root-Rechten) |
1) Root Rechte gewährt! Check 2) Adobe Flashplayer deinstalliert. Check 3) Inhalt kopiert und in Terminal eingegeben, gebe admin Passwort ein, wird nicht akzeptiert Code: Last login: Mon May 3 15:01:04 on ttys000Code: Last login: Mon May 3 22:38:20 on ttys000Code: Last login: Mon May 3 22:42:00 on ttys000Code: Last login: Mon May 3 22:42:50 on ttys0004) MoveToTrash hat die Datei /Library/LaunchDaemons/net.protected.macos.AVHelper.plist, entfernt, jedoch nicht Applications/TotalAV.app , jedenfalls konnte ich es visuell nicht nachvollziehen 5)DetectX Log Code: Timestamp (10): Mon May 03 22:57:57 20216) Ehre Check Log mit root rechten Code: EtreCheckPro version: 6.4.4 (6E015)In ewiger Dankbarkeit Elisabeth Dieses TotalAV hat sich da irgendwie reingebohrt und will nicht raus !!:lmaa: Ich finde bei suche auch immer noch net.protected.macos.TotalAV.ESAVExtension.systemextension und beim Versuch es zu entfernen- ich gebe also mein admin pw ein- erscheint: The operation can’t be completed because you don’t have permission to access some of the items. !? |
Zitat:
|
Hallo Dante12, habe die Änderungen vernommen, leider bleibt das Problem bestehen. Fehlermeldung: Sorry, try again. Password: Das PW ist ganz sicher richtig eingegeben worden.. mehrmals.... AH ok. jetzt funktioniert es. ich arbeite nämlich nie direkt auf dem admin Konto, sondern immer auf einem anderen Benutzer Konto.. jetzt habe ich Terminal dort ausgeführt und es hat funktioniert Detect X Code: Timestamp (12): Tue May 04 10:23:03 2021Etre Check Code: EtreCheckPro version: 6.4.4 (6E015)Also, hier, unverändert leider.... Die MoveToTrash Datei hat bei Ausführung angegeben "Nothing was removed".. |
OK Sorry für die ganzen Meldungen! Ich bin jetzt im Admin Konto und konnte ein AV helper tool manuell löschen... Hier der Detect X Log Code: Timestamp (6): Tue May 04 10:54:22 2021Code: EtreCheckPro version: 6.4.4 (6E015)und es lässt sich nicht löschen... The operation can’t be completed because you don’t have permission to access some of the items. Wie kann das sein? |
Zitat:
Zitat:
Code: The operation can’t be completed because you don’t have permission to access some of the items.Wenn du im Terminal Code: sudo suAch so, falls es geklappt hat, dann mit exit den Admin-Bereich verlassen. Nebenbei gesagt: Das Terminal welches du benutzt benötigt in diesem Fall auf Festplattenvorllzugriff :D Zum Überprüfen: Lade dir bitte die Programme KnockKnock und KextViewr herunter. Enpacken und in den Programm-Ordner verschieben. Beide Programme benötigen volle Festplattenvollzugriffs-Rechte. 1. KnockKnock Klicke auf Start Scan du kannst jetzt selbst nach den betroffenen Daten suchen sofern diese noch vorhanden sind, werden die angezeigt. Mit klick auf das Auge auf der rechten Seite wird der Speicherort geöffnet. Versuche es manuell zu löschen. Du brauchst Admin-Rechte wenn du nicht als Admin eingeloggt bist funktioniert das nicht. Wenn du alles überprüft hast dann klicke unten links auf das Download-Symbol (Pfeil nach unten). Speichere das Log auf deinem Desktop und füge es hier als Anhang ein. 2. KextViewr Diese App scannt beim Start automatisch nach Systemerweiterungen. Standardmäßig werden auch die Apple-Systemerweiterungen angezeigt. Klicke unten rechts auf Show OS Kexts um es abzuwählen, dann werden nur noch Dritt-Anbieter Erweiterungen angezeigt. Wie bei KnockKnock speichere bitte das Log und füge es hier als Anhang ein. |
Auch mit Admin Rechten, kann ich die vorher angegebene Datei nicht löschen, weil ich anscheinend keine Rechte habe, was mir doch sehr suspekt vorkommt!! jedenfalls hier die Logs knockknock Code: {"Authorization Plugins":[],"Browser Extensions":[],"Cron Jobs":[],"Dir. Services Plugins":[],"Event Rules":[],"Extensions and Widgets":[],"Kernel Extensions":[{"name": "NIUSBAudio2DJ", "path": "/Library/Extensions/NIUSBAudio2DJ.kext/Contents/MacOS/NIUSBAudio2DJ", "plist": "n/a", "hashes": {"md5":"98210C3CCAD613AD4CA35B7106C9A0DC","sha1":"3A90B3B7728AA1057332A2B1F38C4DD290B079C3"}, "signature(s)": {"signatureStatus":-67062}, "VT detection": "0/57"},{"name": "NIUSBAudio4DJ", "path": "/Library/Extensions/NIUSBAudio4DJ.kext/Contents/MacOS/NIUSBAudio4DJ", "plist": "n/a", "hashes": {"md5":"AA6D5E3052E82EE4B82032F7D69E012C","sha1":"41A1ACE59F7C607B3F54BFE49872C95A441DA048"}, "signature(s)": {"signatureStatus":-67062}, "VT detection": "0/72"},{"name": "SiLabsUSBDriver64", "path": "/Library/Extensions/SiLabsUSBDriver64.kext/Contents/MacOS/SiLabsUSBDriver64", "plist": "n/a", "hashes": {"md5":"56C99F64D44F0D4BD8EA893FD18920B3","sha1":"F44DB2F03C339C2E66B8F992A5A6E32BC244BB87"}, "signature(s)": {"signatureIdentifier":"com.silabs.driver.CP210xVCPDriver64","signatureStatus":0,"signatureSigner":3,"signatureAuthorities":["Developer ID Application: Wacom Technology Corp. (EG27766DY7)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "JMicron JMB368 CF Card Reader Driver", "path": "/Library/Extensions/JMicronATA.kext/Contents/MacOS/JMicronATA", "plist": "n/a", "hashes": {"md5":"9C8207D44446861A5B40E2AC4C6F5DBA","sha1":"D7894CA7F78BBC970CE45A249FF72ED26843F557"}, "signature(s)": {"signatureStatus":-67062}, "VT detection": "0/75"},{"name": "fabio", "path": "/Library/Extensions/fabio.kext/Contents/MacOS/fabio", "plist": "n/a", "hashes": {"md5":"E50B80668C3F90C0FC7BA0F1220B9F71","sha1":"E9897F21C4D9EE92CC4B3CE63F64BFCC4B50319A"}, "signature(s)": {"signatureStatus":-67062}, "VT detection": "0/71"},{"name": "NIUSBTraktorKontrolX1", "path": "/Library/Extensions/NIUSBTraktorKontrolX1.kext/Contents/MacOS/NIUSBTraktorKontrolX1", "plist": "n/a", "hashes": {"md5":"0CB272D07C6618CD30DD990D9272AFC7","sha1":"8202BD54CB0135932164A4F22AC1280D222FCB6F"}, "signature(s)": {"signatureStatus":-67062}, "VT detection": "0/70"},{"name": "Dropbox", "path": "/Library/Extensions/Dropbox.kext/Contents/MacOS/Dropbox", "plist": "n/a", "hashes": {"md5":"30F16183AF38E316CD4B967266F9A311","sha1":"BEDF28C13F447D3B0D3056AEFC05A23DF291BB99"}, "signature(s)": {"signatureIdentifier":"com.getdropbox.dropbox.kext","signatureStatus":0,"signatureSigner":3,"signatureAuthorities":["Developer ID Application: Dropbox, Inc. (G7HH3F8CAK)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "NIUSBDeviceHelper", "path": "/Library/Extensions/NIUSBDeviceHelper.kext/Contents/MacOS/NIUSBDeviceHelper", "plist": "n/a", "hashes": {"md5":"F0758EFD1952A9AFE6E9F782003DDBC1","sha1":"0E67D544AFC35C088358C8A94C609648020E91A2"}, "signature(s)": {"signatureStatus":-67062}, "VT detection": "0/64"},{"name": "NIUSBAudioDriver", "path": "/Library/Extensions/NIUSBAudioDriver.kext/Contents/MacOS/NIUSBAudioDriver", "plist": "n/a", "hashes": {"md5":"41E041DD75B812532565296060E84500","sha1":"67B3342FCA90A9C4073DEED688ED7B72B90BCEC9"}, "signature(s)": {"signatureStatus":-67062}, "VT detection": "0/71"}],"Launch Items":[{"name": "hdjsd", "path": "/var/hercules/hdjsd", "plist": "/Library/LaunchDaemons/hdjsd.plist", "hashes": {"md5":"C18C0952364B8D508B389CBDCD6B6A8D","sha1":"CC44D393B25ABEF08964C2D1D43B0533957551B0"}, "signature(s)": {"signatureIdentifier":"hdjsd","signatureStatus":0,"signatureSigner":3,"signatureAuthorities":["Developer ID Application: Guillemot Research & Development Inc.","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "AGSService", "path": "/Library/Application Support/Adobe/AdobeGCClient/AGSService", "plist": "/Library/LaunchDaemons/com.adobe.agsservice.plist", "hashes": {"md5":"ED95303A6CC42352F29596A981911F14","sha1":"3BEFEC4C251006163689D25040F310E6B66B7FE2"}, "signature(s)": {"signatureIdentifier":"com.adobe.ags","signatureStatus":0,"signatureSigner":3,"signatureAuthorities":["Developer ID Application: Adobe Systems, Inc. (JQ525L2MZD)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "RTProtectionDaemon", "path": "/Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app/Contents/MacOS/RTProtectionDaemon", "plist": "/Library/LaunchDaemons/com.malwarebytes.mbam.rtprotection.daemon.plist", "hashes": {"md5":"D7BFB433D6712EE4E6CCD62811C06A4E","sha1":"827125BCE92F991054036580C0754027FB3F7295"}, "signature(s)": {"signatureIdentifier":"com.malwarebytes.mbam.rtprotection.daemon","signatureStatus":0,"signatureSigner":3,"signatureEntitlements":{"com.apple.developer.team-identifier":"GVZRY6KDKR","com.apple.application-identifier":"GVZRY6KDKR.com.malwarebytes.mbam.rtprotection.daemon","com.apple.developer.endpoint-security.client":true},"signatureAuthorities":["Developer ID Application: Malwarebytes Corporation (GVZRY6KDKR)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "VirtualBoxStartup.sh", "path": "/Library/Application Support/VirtualBox/LaunchDaemons/VirtualBoxStartup.sh", "plist": "/Library/LaunchDaemons/org.virtualbox.startup.plist", "hashes": {"md5":"A0FBEB6091D67DD0727139B47587E77E","sha1":"010ADE81031AA87C0A83544A4E772F3ABE986CD7"}, "signature(s)": {"signatureStatus":-67062}, "VT detection": "0/74"},{"name": "com.wacom.UpdateHelper", "path": "/Library/PrivilegedHelperTools/com.wacom.UpdateHelper.app/Contents/MacOS/com.wacom.UpdateHelper", "plist": "/Library/LaunchDaemons/com.wacom.UpdateHelper.plist", "hashes": {"md5":"44BF989386F352BAFE043332D247FB96","sha1":"E609248A6C21FFCA3D6CF19370B9AC0185B2D193"}, "signature(s)": {"signatureIdentifier":"com.wacom.UpdateHelper","signatureStatus":0,"signatureSigner":3,"signatureEntitlements":{"com.apple.security.network.client":true,"com.apple.security.temporary-exception.mach-register.global-name":["com.wacom.UpdateHelper"],"com.apple.security.temporary-exception.sbpl":["(allow file-write*)","(allow file-read-xattr)","(allow file-write-xattr)","(allow hid-control)","(allow file-write-create)","(allow file-write-owner)","(allow file-write-setugid)","(allow file-write-data)","(allow file-write-mode)","(allow file-read* file-write* (subpath \"\/private\/tmp\"))","(allow file-read* file-write* (subpath \"\/tmp\/\"))","(allow file-read* file-write* (subpath \"\/private\/tmp\/Wacom\"))","(allow file-read* (regex #\"FirmwareUpdater\\.app\"))","(allow file-write-unlink (literal \"\/Library\/Application Support\/Tablet\/\"))","(allow file-write-unlink (literal \"\/Library\/LaunchAgents\/com.wacom.TabletKeyHelper.plist\"))","(allow file-write-unlink (literal \"\/Library\/LaunchDaemons\/com.wacom.DisplayHelper.plist\"))","(allow file-write-unlink (literal \"\/Library\/LaunchDaemons\/com.wacom.displayhelper.plist\"))","(allow file-write-unlink (literal \"\/Library\/LaunchDaemons\/com.wacom.TabletHelper.plist\"))","(allow file-write-unlink (literal \"\/Library\/PrivilegedHelperTools\/com.wacom.TabletHelper.app\"))","(allow file-write-unlink (literal \"\/System\/Library\/Extensions\/FTDIKext.kext\/\"))","(allow file-write-unlink (literal \"\/System\/Library\/Extensions\/SiLabsUSBDriver.kext\/\"))","(allow file-write-unlink (literal \"\/System\/Library\/Extensions\/SiLabsUSBDriver64.kext\/\"))","(allow file-write-unlink (literal \"\/System\/Library\/Extensions\/Wacom Tablet.kext\/\"))","(allow file-read-data)","(allow process-fork)","(allow process-exec (literal \"\/bin\/ps\")(literal \"\/usr\/bin\/sudo\")(literal \"\/usr\/bin\/xattr\")(literal \"\/usr\/bin\/tar\")(with no-sandbox))","(allow appleevent-send (appleevent-destination \"com.wacom.WacomTouchDriver\")(appleevent-destination \"com.wacom.wacomtablet\"))","(allow signal)"],"com.apple.security.temporary-exception.file.absolute-path.read-write":["\/Applications\/","\/Applications\/Wacom Tablet.localized\/","\/Library\/Application Support\/Tablet\/","\/Library\/Application Support\/Tablet\/UserHelp\/","\/Library\/Extensions\/","\/Library\/Frameworks\/","\/Library\/LaunchDaemons\/","\/Library\/PreferencePanes","\/Library\/Preferences\/Tablet\/","\/Library\/Preferences\/Tablet\/Wacom App Specific Settings\/","\/Library\/Preferences\/Tablet\/foo.plist","\/Library\/Preferences\/Tablet\/too.plist","\/Library\/PrivilegedHelperTools\/com.wacom.TabletHelper.app\/","\/System\/Library\/Extensions\/","\/System\/Library\/Extensions\/FTDIKext.kext\/","\/System\/Library\/Extensions\/SiLabsUSBDriver.kext\/","\/System\/Library\/Extensions\/SiLabsUSBDriver64.kext\/","\/System\/Library\/Extensions\/Wacom Tablet.kext\/","\/private\/tmp","\/private\/tmp\/Wacom"],"com.apple.security.temporary-exception.shared-preference.read-write":["com.wacom.Wacom-Desktop-Center.plist","com.wacom.wacomtablet.prefs","com.wacom.wacomtouch.prefs"],"com.apple.security.app-sandbox":true,"com.apple.security.network.server":true,"com.apple.security.application-groups":["group.EG27766DY7.com.wacom.WacomTabletDriver"],"com.apple.security.temporary-exception.file.home-relative-path.read-write":["\/Library\/Preferences\/","\/Library\/Group Containers\/group.EG27766DY7.com.wacom.WacomTabletDriver\/","\/Library\/Containers\/com.wacom.RemoveWacomTablet\/","\/Library\/Containers\/com.wacom.Wacom-Desktop-Center\/","\/Library\/Containers\/com.wacom.Wacom-Display-Settings\/"],"com.apple.security.inherit":false,"com.apple.security.temporary-exception.mach-lookup.global-name":["com.apple.windowserver","com.wacom.TabletUtility","com.wacom.TabletHelper","com.wacom.Tester","com.wacom.TabletDriver","com.wacom.wacomtablet","com.wacom.WacomTouchDriver","com.wacom.WacomMultiTouch","com.wacom.WacomDeskTopCenterMessageServer"]},"signatureAuthorities":["Developer ID Application: Wacom Technology Corp. (EG27766DY7)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Creative Cloud", "path": "/Applications/Utilities/Adobe Creative Cloud/ACC/Creative Cloud.app/Contents/MacOS/Creative Cloud", "plist": "/Library/LaunchAgents/com.adobe.AdobeCreativeCloud.plist", "hashes": {"md5":"6011DA94767CA1C0A5B5745AF1636749","sha1":"BD7C861C4AA76683AFD9D8105D1D943F172F6E2A"}, "signature(s)": {"signatureIdentifier":"com.adobe.acc.AdobeCreativeCloud","signatureStatus":0,"signatureSigner":3,"signatureAuthorities":["Developer ID Application: Adobe Systems, Inc. (JQ525L2MZD)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/76"},{"name": "com.wacom.DataStoreMgr", "path": "/Library/PrivilegedHelperTools/com.wacom.DataStoreMgr.app/Contents/MacOS/com.wacom.DataStoreMgr", "plist": "/Library/LaunchAgents/com.wacom.DataStoreMgr.plist", "hashes": {"md5":"73D193403CB0F6A9DA371596C56C2D04","sha1":"F03AEAC7086DB787F0545364D585D9C19F93B2D9"}, "signature(s)": {"signatureIdentifier":"com.wacom.DataStoreMgr","signatureStatus":0,"signatureSigner":3,"signatureEntitlements":{"com.apple.security.network.client":true,"com.apple.security.temporary-exception.mach-register.global-name":["com.wacom.DataStoreMgr"],"com.apple.security.temporary-exception.sbpl":["(allow file-write-create)","(allow file-write-owner)","(allow file-write-setugid)","(allow file-write-data)","(allow file-write-mode)","(allow file-write*)","(allow file-read-data)"],"com.apple.security.temporary-exception.file.absolute-path.read-write":["\/tmp","\/private\/tmp","\/private\/tmp\/Wacom"],"com.apple.security.app-sandbox":true,"com.apple.security.network.server":true,"com.apple.security.application-groups":["group.EG27766DY7.com.wacom.WacomTabletDriver"],"com.apple.security.temporary-exception.file.home-relative-path.read-write":["\/","\/Library\/Preferences\/.wacom","\/Library\/Group Containers\/group.EG27766DY7.com.wacom.WacomTabletDriver\/"],"com.apple.security.inherit":false,"com.apple.security.temporary-exception.mach-lookup.global-name":["com.apple.windowserver","EG27766DY7.com.wacom.TabletUtility","EG27766DY7.com.wacom.TabletHelper","EG27766DY7.com.wacom.Tester","EG27766DY7.com.wacom.TabletDriver","EG27766DY7.com.wacom.WacomMultiTouch","EG27766DY7.com.wacom.Wacom-Desktop-Center","EG27766DY7.com.wacom.WacomDesktopCenter"]},"signatureAuthorities":["Developer ID Application: Wacom Technology Corp. (EG27766DY7)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AGMService", "path": "/Library/Application Support/Adobe/AdobeGCClient/AGMService", "plist": "/Library/LaunchAgents/com.adobe.GC.AGM.plist", "hashes": {"md5":"A44AB3900C5F0475E3F426254AEA3AE1","sha1":"651E5EAF817A5CD8295FCF972E0DBEEB9506430B"}, "signature(s)": {"signatureIdentifier":"com.adobe.ags","signatureStatus":0,"signatureSigner":3,"signatureAuthorities":["Developer ID Application: Adobe Systems, Inc. (JQ525L2MZD)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "FrontendAgent", "path": "/Library/Application Support/Malwarebytes/MBAM/Engine.bundle/Contents/PlugIns/FrontendAgent.app/Contents/MacOS/FrontendAgent", "plist": "/Library/LaunchAgents/com.malwarebytes.mbam.frontend.agent.plist", "hashes": {"md5":"F0A3C0D907669D7C7F705DF102F1F70C","sha1":"58EEF4ADDA2AE8A2B064D81DB467E2406372C117"}, "signature(s)": {"signatureIdentifier":"com.malwarebytes.mbam.frontend.agent","signatureStatus":0,"signatureSigner":3,"signatureAuthorities":["Developer ID Application: Malwarebytes Corporation (GVZRY6KDKR)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "UpdaterStartupUtility", "path": "/Library/Application Support/Adobe/OOBE/PDApp/UWA/UpdaterStartupUtility", "plist": "/Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist", "hashes": {"md5":"7DDD9BC75345BD2BEDCD17DE0D41A45A","sha1":"543CB1504C2EF234F1D469160818ED2CF7344FE3"}, "signature(s)": {"signatureIdentifier":"com.adobe.AAM.AdobeUpdaterStartupUtility","signatureStatus":0,"signatureSigner":3,"signatureAuthorities":["Developer ID Application: Adobe Systems, Inc.","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/66"},{"name": "agcinvokerutility", "path": "/Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility", "plist": "/Library/LaunchAgents/com.adobe.GC.Invoker-1.0.plist", "hashes": {"md5":"1BACA43BEA1513862B7EC9ACCF66F5EA","sha1":"4812D1A1EF8308B50203D31CF80449482A85C552"}, "signature(s)": {"signatureIdentifier":"com.adobe.gcinvokerutility","signatureStatus":0,"signatureSigner":3,"signatureAuthorities":["Developer ID Application: Adobe Systems, Inc. (JQ525L2MZD)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "StandaloneUpdater", "path": "/Applications/OneDrive.app/Contents/StandaloneUpdater.app/Contents/MacOS/OneDriveStandaloneUpdater", "plist": "/Library/LaunchAgents/com.microsoft.OneDriveStandaloneUpdater.plist", "hashes": {"md5":"071CB12A9253786178CE3C7E027023EF","sha1":"0306D0EF636B753511C0622762E50F2A6ACD9475"}, "signature(s)": {"signatureIdentifier":"com.microsoft.OneDriveStandaloneUpdater","signatureStatus":0,"signatureSigner":3,"signatureEntitlements":{"com.apple.security.application-groups":["UBF8T346G9.OneDriveStandaloneSuite"],"com.apple.security.app-sandbox":false},"signatureAuthorities":["Developer ID Application: Microsoft Corporation (UBF8T346G9)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/73"},{"name": "WacomTabletDriver", "path": "/Applications/Wacom Tablet.localized/.Tablet/WacomTabletDriver.app/Contents/MacOS/WacomTabletDriver", "plist": "/Library/LaunchAgents/com.wacom.wacomtablet.plist", "hashes": {"md5":"8BA0F605120F264D102C587390F5918E","sha1":"5BA53D3FAED24BC03101A5B3E24B6D813DADF308"}, "signature(s)": {"signatureIdentifier":"com.wacom.wacomtablet","signatureStatus":0,"signatureSigner":3,"signatureEntitlements":{"com.apple.security.temporary-exception.files.home-relative-path.read-write":["\/Library\/Preferences\/","\/Library\/Group Containers\/group.EG27766DY7.com.wacom.WacomTabletDriver\/"],"com.apple.security.temporary-exception.mach-register.global-name":["Wacom_Driver","com.wacom.WacomTabletDriverMessageServer","com.wacom.wacomtablet.WacomTouch"],"com.apple.security.network.server":true,"com.apple.security.temporary-exception.mach-lookup.global-name":["com.apple.sysmond","com.wacom.TabletDriver","com.wacom.tabletdriver","com.wacom.WacomDeskTopCenterMessageServer","com.wacom.DataStoreMgr","com.wacom.CoordinatorMessageServer","com.wacom.ProfessionalTouchDriverMessageServer","com.wacom.IOManager"],"com.apple.security.automation.apple-events":true,"com.apple.security.device.bluetooth":true,"com.apple.security.network.client":true,"com.apple.security.temporary-exception.sbpl":["(allow file-read* file-write* (subpath \"\/Library\/Application Support\/Tablet\"))","(allow file-read* file-write* (subpath \"\/Library\/Preferences\/Tablet\"))","(allow file-read* (subpath \"\/\"))","(allow file-read-xattr)","(allow process-exec (subpath \"\/Applications\"))","(allow file-write-data (subpath \"\/dev\"))","(allow iokit-open)","(allow hid-control)","(allow distributed-notification-post)","(allow appleevent-send)","(allow process-exec (literal \"\/usr\/bin\/osascript\")(with no-sandbox))"],"com.apple.security.device.usb":true,"com.apple.security.application-groups":["group.EG27766DY7.com.wacom.WacomTabletDriver","group.com.wacom.TabletDriver"],"com.apple.security.files.user-selected.read-only":true,"com.apple.security.temporary-exception.shared-preference.read-write":["com.wacom."],"com.apple.security.app-sandbox":true},"signatureAuthorities":["Developer ID Application: Wacom Technology Corp. (EG27766DY7)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/73"},{"name": "Microsoft Update Assistant", "path": "/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft Update Assistant.app/Contents/MacOS/Microsoft Update Assistant", "plist": "/Library/LaunchAgents/com.microsoft.update.agent.plist", "hashes": {"md5":"044C89DCECBE1C93FE8E52AF383DCABB","sha1":"280016D3D3A34253454B304161662BDB7B63BCC4"}, "signature(s)": {"signatureIdentifier":"com.microsoft.autoupdate.fba","signatureStatus":0,"signatureSigner":3,"signatureEntitlements":{"com.apple.security.automation.apple-events":true,"com.apple.security.app-sandbox":false},"signatureAuthorities":["Developer ID Application: Microsoft Corporation (UBF8T346G9)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "agcinvokerutility", "path": "/Library/Application Support/Adobe/AdobeGCClient/agcinvokerutility", "plist": "/Users/admin/Library/LaunchAgents/com.adobe.GC.Invoker-1.0.plist", "hashes": {"md5":"1BACA43BEA1513862B7EC9ACCF66F5EA","sha1":"4812D1A1EF8308B50203D31CF80449482A85C552"}, "signature(s)": {"signatureIdentifier":"com.adobe.gcinvokerutility","signatureStatus":0,"signatureSigner":3,"signatureAuthorities":["Developer ID Application: Adobe Systems, Inc. (JQ525L2MZD)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "bstupdater", "path": "/Applications/BlueStacks.app/Contents/MacOS/bstupdater", "plist": "/Users/admin/Library/LaunchAgents/com.BlueStacks.AppPlayer.Updater.plist", "hashes": {"md5":"F3C3242045353BFEABEE925080B26D2E","sha1":"A11BDEA2F334218D63094597C0D58E22AA9572C5"}, "signature(s)": {"signatureIdentifier":"bstupdater","signatureStatus":0,"signatureSigner":3,"signatureEntitlements":{"com.apple.security.cs.disable-executable-page-protection":true,"com.apple.security.cs.disable-library-validation":true,"com.apple.security.cs.allow-unsigned-executable-memory":true,"com.apple.security.personal-information.calendars":true,"com.apple.security.cs.allow-dyld-environment-variables":true,"com.apple.security.device.audio-input":true,"com.apple.security.cs.debugger":true,"com.apple.security.personal-information.photos-library":true,"com.apple.security.automation.apple-events":true,"com.apple.security.cs.allow-jit":true,"com.apple.security.device.camera":true,"com.apple.security.get-task-allow":true,"com.apple.security.personal-information.addressbook":true,"com.apple.security.personal-information.location":true},"signatureAuthorities":["Developer ID Application: BlueStack Systems, Inc. (QX5T8D6EDU)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/76"}],"Library Inserts":[],"Library Proxies":[],"Login Items":[],"Login/Logout Hooks":[],"Periodic Scripts":[{"name": "periodic.conf", "path": "/etc/defaults/periodic.conf", "plist": "n/a", "hashes": {"md5":"62842E4978D878DA44697BA81EAC797C","sha1":"8F1B8862248D44EF2EE23D22FD80813CF5777954"}, "signature(s)": {"signatureStatus":-67062}, "VT detection": "0/74"}],"Quicklook Plugins":[{"name": "PaintQuickLook", "path": "/Applications/Paint S.app/Contents/Library/QuickLook/PaintQuickLook.qlgenerator/Contents/MacOS/PaintQuickLook", "plist": "n/a", "hashes": {"md5":"3E36AE835E7ABCDF47E532B48BB9FB20","sha1":"74D0E41CBDE10716EEC75D167123B29210CBD6AD"}, "signature(s)": {"signatureIdentifier":"com.TryBest.PaintDocQuickLook","signatureStatus":0,"signatureSigner":2,"signatureEntitlements":{},"signatureAuthorities":["Apple Mac OS Application Signing","Apple Worldwide Developer Relations Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "EtreCheckProQL", "path": "/Applications/EtreCheckPro.app/Contents/Library/QuickLook/EtreCheckProQL.qlgenerator/Contents/MacOS/EtreCheckProQL", "plist": "n/a", "hashes": {"md5":"C7FCC04EC5A5F90564EE2110510AF9F2","sha1":"7C12827EA98357609160EE506199740A8B6C9214"}, "signature(s)": {"signatureIdentifier":"com.etresoft.EtreCheck4QL","signatureStatus":0,"signatureSigner":3,"signatureEntitlements":{},"signatureAuthorities":["Developer ID Application: Etresoft, Inc. (U87NE528LC)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "Toucan", "path": "/Applications/Rhinoceros.app/Contents/Library/QuickLook/Toucan.qlgenerator/Contents/MacOS/Toucan", "plist": "n/a", "hashes": {"md5":"F4B6FDD6433E256823CED08FFF4A3E11","sha1":"D60F71EE85918CCBB106EE2E724BFC5181E41741"}, "signature(s)": {"signatureStatus":-67062}, "VT detection": "0/55"},{"name": "Rhinoceros", "path": "/Applications/Rhinoceros.app/Contents/Library/QuickLook/Rhinoceros.qlgenerator/Contents/MacOS/Rhinoceros", "plist": "n/a", "hashes": {"md5":"F2C67A91E8843E554ACAD7FD756C90A6","sha1":"F2D9DE6BC1F7593E5D3439A6312B103127F33E04"}, "signature(s)": {"signatureStatus":-67062}, "VT detection": "0/56"},{"name": "RhinoRender", "path": "/Applications/Rhinoceros.app/Contents/Library/QuickLook/RhinoRender.qlgenerator/Contents/MacOS/RhinoRender", "plist": "n/a", "hashes": {"md5":"A32D9D4A20D2E07A7E4A6A716C7E7873","sha1":"DCF1D9292562255DCAC64FCBFFAABDD2AAACFF0B"}, "signature(s)": {"signatureStatus":-67062}, "VT detection": "0/56"}],"Spotlight Importers":[],"Startup Scripts":[]}kextviewr Code: {"kexts:":[{"name": "BSD Kernel Pseudoextension", "path": "/System/Library/Extensions/System.kext/PlugIns/BSDKernel.kext/BSDKernel", "hashes": {"md5":"505606020B0211194D883ED619B91034","sha1":"E9B6C720056FA24011D514F9182CA667CE4E4A34"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/76"},{"name": "MAC Framework Pseudoextension", "path": "/System/Library/Extensions/System.kext/PlugIns/MACFramework.kext/MACFramework", "hashes": {"md5":"7FAB4B82020D8484E3D413CA26F9DBBE","sha1":"A2DFEDB807E476885C08577305FC246C489B55EB"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/76"},{"name": "I/O Kit Pseudoextension", "path": "/System/Library/Extensions/System.kext/PlugIns/IOKit.kext/IOKit", "hashes": {"md5":"BAC7D6B474E8CC33D77FD879B595B62A","sha1":"D49F644D2E37E81F7C10C2359C8389182B72C414"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/71"},{"name": "Kasan Pseudoextension", "path": "/System/Library/Extensions/System.kext/PlugIns/Kasan.kext/Kasan", "hashes": {"md5":"3A40D71B5D2222B62031905356A6E7F4","sha1":"595A2D9361B491234B8FCD3990B1B0E9839F0699"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/72"},{"name": "Libkern Pseudoextension", "path": "/System/Library/Extensions/System.kext/PlugIns/Libkern.kext/Libkern", "hashes": {"md5":"FABEC0B21C2682C2E6371189752C47CE","sha1":"A38D5D4A4204D8378E69C7AE1D505C622AF8C768"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Mach Kernel Pseudoextension", "path": "/System/Library/Extensions/System.kext/PlugIns/Mach.kext/Mach", "hashes": {"md5":"D2B96B4192CD8D02A4527A51AE592A2E","sha1":"1F1B490879986FEA2B6986E7A91D5340457A5ED9"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Private Pseudoextension", "path": "/System/Library/Extensions/System.kext/PlugIns/Private.kext/Private", "hashes": {"md5":"01512059B5D4392C3DE695911D2AFC7C","sha1":"5DD79B1B726AD828250C9B51897D5FD7E4978D18"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Unsupported Pseudoextension", "path": "/System/Library/Extensions/System.kext/PlugIns/Unsupported.kext/Unsupported", "hashes": {"md5":"E9A897E2FD4DB554AA0B1E5E6DF9FE10","sha1":"31A904FC357EDC7B1F434959BEA6353B0D747CE1"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "Libm.kext", "path": "/System/Library/Extensions/Libm.kext/Contents/MacOS/Libm", "hashes": {"md5":"07EB8566F9B1F86ECB73983CE1A17D81","sha1":"44AC41FFFD18CA2E8F44A166B05ACE25F1C174B2"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "corecrypto", "path": "/System/Library/Extensions/corecrypto.kext/Contents/MacOS/corecrypto", "hashes": {"md5":"2D758AEF15217FC4A8F0B2F556CEE1D5","sha1":"03A4616B2520AE1FDA67BCC2ECD49D7618FDD0B0"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "pthread", "path": "/System/Library/Extensions/pthread.kext/Contents/MacOS/pthread", "hashes": {"md5":"BC00D9B4DFB3414477635351C0AF1489","sha1":"66F6935F3723ACAC12874E4F6B2EC7315534E2B1"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "I/O Kit ACPI Family", "path": "/System/Library/Extensions/IOACPIFamily.kext/Contents/MacOS/IOACPIFamily", "hashes": {"md5":"533CB14D05845FC2048880DCA88F488C","sha1":"235F37EC5902CAA6C2D0556A1E63CA74A8EA9E73"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "I/O Kit PCI Family", "path": "/System/Library/Extensions/IOPCIFamily.kext/IOPCIFamily", "hashes": {"md5":"FFAC535A965973FF6790334663B67974","sha1":"4C8F8C7928D98871F10C04A39CE2EB124A6CE911"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "watchdog", "path": "/System/Library/Extensions/watchdog.kext/Contents/MacOS/watchdog", "hashes": {"md5":"C87650F9364D480DD3E5B92186F33208","sha1":"6045C3054D6CC778F4709DD55BC933AD1975BFD3"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleSMC", "path": "/System/Library/Extensions/AppleSMC.kext/Contents/MacOS/AppleSMC", "hashes": {"md5":"7845487FC5BFD6AA619695D8B92419E3","sha1":"483A4A1F35D56A5B4641EF9FA1D238C2B7A40E03"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/76"},{"name": "AppleACPIPlatform", "path": "/System/Library/Extensions/AppleACPIPlatform.kext/Contents/MacOS/AppleACPIPlatform", "hashes": {"md5":"A90739B8C01FFABF99643E21EFEF2F58","sha1":"6FB03080E49C70BA2F8394C4C5B35FFDD502A319"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOReportFamily", "path": "/System/Library/Extensions/IOReportFamily.kext/Contents/MacOS/IOReportFamily", "hashes": {"md5":"1E28F6FE44DA98E9115AED8D52B8DE12","sha1":"A4CE59BC0C79FE70503C7CC81C5B6691C8F1C5D7"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "I/O Kit Networking Family", "path": "/System/Library/Extensions/IONetworkingFamily.kext/Contents/MacOS/IONetworkingFamily", "hashes": {"md5":"AB6FEE0C2906959C471C34412C76C41F","sha1":"E1BFD3A50F98917CF496FB4A12C5922B99B55D9B"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOTimeSyncFamily", "path": "/System/Library/Extensions/IOTimeSyncFamily.kext/Contents/MacOS/IOTimeSyncFamily", "hashes": {"md5":"DA1CC95854E0D4B07B234520FF35CCA8","sha1":"00E126A6B4A4A8B14178E117374EA82AC3B070E2"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "CoreTrust", "path": "/System/Library/Extensions/CoreTrust.kext/Contents/MacOS/CoreTrust", "hashes": {"md5":"B48A6836E712D4C51234C8EA794C0598","sha1":"411A57110FB900F9A363695791AED33EBC5B4CE7"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleMobileFileIntegrity", "path": "/System/Library/Extensions/AppleMobileFileIntegrity.kext/Contents/MacOS/AppleMobileFileIntegrity", "hashes": {"md5":"798FB938ED0BABEC21CC109304601149","sha1":"C03A3687F6E2C5F8A7BE2BF169FDC909993E329A"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "EndpointSecurity", "path": "/System/Library/Extensions/EndpointSecurity.kext/Contents/MacOS/EndpointSecurity", "hashes": {"md5":"72341A5B80717489831EE6FB33E4CB93","sha1":"D37945E90AC2CF9486B6ACF3BFDBC981422048AA"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "CoreAnalyticsFamily", "path": "/System/Library/Extensions/CoreAnalyticsFamily.kext/Contents/MacOS/CoreAnalyticsFamily", "hashes": {"md5":"E872909BD5A711488510C6BF296B796D","sha1":"45B9E5BCBA3E8685DD44F4ECEBFCCF3131F63808"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleBusPowerController", "path": "/System/Library/Extensions/AppleBusPowerController.kext/Contents/MacOS/AppleBusPowerController", "hashes": {"md5":"0703DE77E7169095F3966E23DFB89ACF","sha1":"0B95E88C3C8617A0EC182FA3FE04630BD05D5A23"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/72"},{"name": "AppleUSBCommon", "path": "/System/Library/Extensions/AppleUSBCommon.kext/Contents/MacOS/AppleUSBCommon", "hashes": {"md5":"4DA1A4D63B69037D6D837A19B6D6E4BB","sha1":"FED82700063D15DBDF44EBF90BEA362FC698E603"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "I/O Kit Driver for USB Devices", "path": "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBHostMergeProperties.kext/Contents/MacOS/AppleUSBHostMergeProperties", "hashes": {"md5":"D5D846C106E01937080FDC5B833298BF","sha1":"CD0D6289357952A82286C32CDCF200179B5EA5A6"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOKit USB host family", "path": "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/MacOS/IOUSBHostFamily", "hashes": {"md5":"8D148177990CD4381ADABE3E2C705608","sha1":"DA40CBFDD809D4685A4BB38ED695B98794C1E95C"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "I/O Kit Storage Family", "path": "/System/Library/Extensions/IOStorageFamily.kext/Contents/MacOS/IOStorageFamily", "hashes": {"md5":"A6C61AAC5D32B2DF87B65E41A77E2E6A","sha1":"376492A5AF5F6F94E84CCCBC8E6B49AF0FDF2461"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOSCSIArchitectureModelFamily", "path": "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext/Contents/MacOS/IOSCSIArchitectureModelFamily", "hashes": {"md5":"73998253D681BFD584E32E883BF9C0B1","sha1":"50C5FD87A1300DACFDD03407B70A67FAB6E40043"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOUSBMassStorageDriver", "path": "/System/Library/Extensions/IOUSBMassStorageDriver.kext/Contents/MacOS/IOUSBMassStorageDriver", "hashes": {"md5":"CA258CE47BDEF3E6CC9660C372EC211F","sha1":"B2A9188D2C95C9EBA9CBAE0D5A929A82EEB31700"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOSlaveProcessor", "path": "/System/Library/Extensions/IOSlaveProcessor.kext/Contents/MacOS/IOSlaveProcessor", "hashes": {"md5":"2B1939254B83ACE6DC00998AB0988369","sha1":"D74B1F499921859BDA09D01D8ADFD8BA17639244"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleSEPManager", "path": "/System/Library/Extensions/AppleSEPManager.kext/Contents/MacOS/AppleSEPManager", "hashes": {"md5":"E0AB97697C8AB558D332182D8710D89F","sha1":"136D7C996CA744FADC18C4D6DEDD503C9D7961BC"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "KernelRelayHost", "path": "/System/Library/Extensions/KernelRelayHost.kext/Contents/MacOS/KernelRelayHost", "hashes": {"md5":"E931F6F5BD9FAD047047A0AB4A386FD0","sha1":"6E8185A2F014D2DB9C4367FC7A9FB46CF0612795"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleCredentialManager", "path": "/System/Library/Extensions/AppleCredentialManager.kext/Contents/MacOS/AppleCredentialManager", "hashes": {"md5":"13E17E9DFCE85A3E90DF11D8A4B42570","sha1":"6AEE817D6C2E5DEB41F2C095FFD22334A61E3371"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOSCSIBlockCommandsDevice", "path": "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext/Contents/PlugIns/IOSCSIBlockCommandsDevice.kext/Contents/MacOS/IOSCSIBlockCommandsDevice", "hashes": {"md5":"44A73969C76534A46F583B29329A0A15","sha1":"8CF46371E4B990D7EE180FB1A2CE22E94BD79ABF"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleUSBTDM", "path": "/System/Library/Extensions/AppleStorageDrivers.kext/Contents/PlugIns/AppleUSBTDM.kext/Contents/MacOS/AppleUSBTDM", "hashes": {"md5":"176F11ABF168BA1C37BCC74C6129F4F3","sha1":"AF5A013989495B234135EDB54840D01DDF83A5D5"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleKeyStore", "path": "/System/Library/Extensions/AppleKeyStore.kext/Contents/MacOS/AppleKeyStore", "hashes": {"md5":"CBA711C243E100225F167F4360C9EB0D","sha1":"DFDC1AB9E4F03AD9048AC7B3C6AC1EF5919CE786"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleSSE", "path": "/System/Library/Extensions/AppleSSE.kext/Contents/MacOS/AppleSSE", "hashes": {"md5":"5A91871B6E1FBF08BB820B8B0776669C","sha1":"1FA4811D880C069CC7866B556148EF01A3326D20"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleEffaceableStorage", "path": "/System/Library/Extensions/AppleEffaceableStorage.kext/Contents/MacOS/AppleEffaceableStorage", "hashes": {"md5":"9CEE6A0D1B314AD6B0F1D7559B78D992","sha1":"B242CE5FE64E19E23CC5233804BFB0829276E152"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleFDEKeyStore", "path": "/System/Library/Extensions/AppleFDEKeyStore.kext/Contents/MacOS/AppleFDEKeyStore", "hashes": {"md5":"185479BC231E83939BDA5AA839A05E35","sha1":"21E1459B7E5C9EFC622CCD6EB9B2D1EA28455ADA"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Intel CPU Low Level Power Management", "path": "/System/Library/Extensions/AppleIntelCPUPowerManagement.kext/Contents/MacOS/AppleIntelCPUPowerManagement", "hashes": {"md5":"E3AA7592DCB7B8DBD5BB57D2CCEE223A","sha1":"74F3836EBC4E49EA1A2EE33644DD11FC27084AB7"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "AppleDiskImageDriver", "path": "/System/Library/Extensions/IOHDIXController.kext/Contents/MacOS/IOHDIXController", "hashes": {"md5":"81D88291FBD420C012E45778317252B7","sha1":"DCC614762F2E1433B57374294D6639FEAFA840B7"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Regular Expression Matching Engine", "path": "/System/Library/Extensions/AppleMatch.kext/Contents/MacOS/AppleMatch", "hashes": {"md5":"8EA2ABF57A2EFD0AF06EAF8D6925A3B0","sha1":"EFFBEADA27DD267856C310CCA7C522AA8C5EE5E7"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Seatbelt sandbox policy", "path": "/System/Library/Extensions/Sandbox.kext/Contents/MacOS/Sandbox", "hashes": {"md5":"308378ED078625717C0816594BD4A692","sha1":"B560BC99CFB97D2FF6B1F531B8B20A9FBEE44F04"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Quarantine policy", "path": "/System/Library/Extensions/Quarantine.kext/Contents/MacOS/Quarantine", "hashes": {"md5":"31B6CED0D0331D8B2BDBFA45ED240571","sha1":"D543D7A6C6787FEE48DDAEFFF6490BF4EF44FE26"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleSystemPolicy", "path": "/System/Library/Extensions/AppleSystemPolicy.kext/Contents/MacOS/AppleSystemPolicy", "hashes": {"md5":"A2211F59E3878018C29555E71DEA7DEB","sha1":"B0E4A99DF75A1D2D79E05566B13FBDED15DBF93B"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "TMSafetyNet", "path": "/System/Library/Extensions/TMSafetyNet.kext/Contents/MacOS/TMSafetyNet", "hashes": {"md5":"11E73EEB8B464C58E0D3EE2D32277AD9","sha1":"0A9514AB3ADC3BE3115727A69F069589D6DAC2B8"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "ALF", "path": "/System/Library/Extensions/ALF.kext/Contents/MacOS/ALF", "hashes": {"md5":"CB2F3516F12708C14D996A90FC8F9B40","sha1":"1FAC6A7F94115C496E79544E0C4AC56B968BE93E"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleImage4", "path": "/System/Library/Extensions/AppleImage4.kext/Contents/MacOS/AppleImage4", "hashes": {"md5":"70CFF0F9FEE2AC1DE145E28385244A5A","sha1":"E5A492E6A9C7C829A5EA6AAC5943ED42CAC2AEF2"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Intel CPU Power Management Interfaces", "path": "/System/Library/Extensions/AppleIntelCPUPowerManagementClient.kext/Contents/MacOS/AppleIntelCPUPowerManagementClient", "hashes": {"md5":"BEB1DF97BCD850CC94CC9FEFE0D8F30F","sha1":"612BB237E897057E5797880C2F910AC547A7C599"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "I/O APIC Interrupt Controller Driver", "path": "/System/Library/Extensions/AppleAPIC.kext/Contents/MacOS/AppleAPIC", "hashes": {"md5":"A5357FBED46E83098EFD02E900B636DA","sha1":"5A2514F802CC257F5770816CA2F0ADE78585C53D"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOHIDFamily", "path": "/System/Library/Extensions/IOHIDFamily.kext/Contents/MacOS/IOHIDFamily", "hashes": {"md5":"EF2C527F4C27543A6E475DF755CAD338","sha1":"0210F27C3448D76AFC7A98B7F77725E878EFA732"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOSMBusFamily", "path": "/System/Library/Extensions/IOSMBusFamily.kext/Contents/MacOS/IOSMBusFamily", "hashes": {"md5":"A1A0055BB0774E159D50715330D150A9","sha1":"25EFED8F3AA072ED06EA4574BB67E3489E9C90A1"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleACPIEC", "path": "/System/Library/Extensions/AppleACPIPlatform.kext/Contents/PlugIns/AppleACPIEC.kext/Contents/MacOS/AppleACPIEC", "hashes": {"md5":"4ED69569A4E7FD0F192B3B0FE83854BB","sha1":"FCAECECEDED70CB7CCC4541E5C55C2B1E00B24CC"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "System Management BIOS Driver", "path": "/System/Library/Extensions/AppleSMBIOS.kext/Contents/MacOS/AppleSMBIOS", "hashes": {"md5":"A8E438CC55702109C1AB5FBC0D100843","sha1":"CFBA86ED4E969F73F2A33201FDCDCCA2F1E5CC21"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "High Precision Event Timer Driver", "path": "/System/Library/Extensions/AppleHPET.kext/Contents/MacOS/AppleHPET", "hashes": {"md5":"724A88AEC11F2E02DB17C08E1DD2E41F","sha1":"B991A5F8BA3C1972228CC057B704EC6D87B7DA65"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleACPIButtons", "path": "/System/Library/Extensions/AppleACPIPlatform.kext/Contents/PlugIns/AppleACPIButtons.kext/Contents/MacOS/AppleACPIButtons", "hashes": {"md5":"A61B3D9C4CF6EA52295EFC9D133DB4C7","sha1":"DD250D846F75974FF03E8A14DE21182F8D03A4D1"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Apple RTC Driver", "path": "/System/Library/Extensions/AppleRTC.kext/Contents/MacOS/AppleRTC", "hashes": {"md5":"6E0357905FBC3197BFF54ECB1CC00366","sha1":"095B9E2C44A1B7EF48E6AEEBFB644A2B9FEFF225"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleEFIRuntime", "path": "/System/Library/Extensions/AppleEFIRuntime.kext/Contents/MacOS/AppleEFIRuntime", "hashes": {"md5":"46E211D7EDCC27D8DA3ABBC76394B46A","sha1":"38629585D5E5B8C754E956DFAFFFBE8E8C3A12F9"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleSmartBatteryManagerKEXT", "path": "/System/Library/Extensions/AppleSmartBatteryManager.kext/Contents/MacOS/AppleSmartBatteryManager", "hashes": {"md5":"42720E7C6FE97F7EA0DD72A316015C94","sha1":"21C4238E687102079C993AA33CB9BFC97258D738"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleEFINVRAM", "path": "/System/Library/Extensions/AppleEFIRuntime.kext/Contents/PlugIns/AppleEFINVRAM.kext/Contents/MacOS/AppleEFINVRAM", "hashes": {"md5":"9110FC357EEC1F1654B58BF48A81D69B","sha1":"02C808F2F97E42B4FD8005B9BEB4A5AD8AC754AA"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "I/O Kit USB Family", "path": "/System/Library/Extensions/IOUSBFamily.kext/Contents/MacOS/IOUSBFamily", "hashes": {"md5":"01EB9EECF8DA457645781344E0C38273","sha1":"51746861AFAA8B512B5C3AE0B15BCF4ADC86B3F5"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/76"},{"name": "I/O Kit Driver for USB EHCI Controllers", "path": "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBEHCIPCI.kext/Contents/MacOS/AppleUSBEHCIPCI", "hashes": {"md5":"17429470FE523D043984393026B51834","sha1":"2E8AB660B78559FC3EDE184F65803AFB04C5759E"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "I/O Kit Driver for USB XHCI Controllers", "path": "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBXHCIPCI.kext/Contents/MacOS/AppleUSBXHCIPCI", "hashes": {"md5":"94A1F05B396061E43FF7DBAA68F0B3F9","sha1":"FE2A87BC650C0414D4950AFCCD4187EFD51538B4"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOAHCIFamily", "path": "/System/Library/Extensions/IOAHCIFamily.kext/Contents/MacOS/IOAHCIFamily", "hashes": {"md5":"493CA5D95873F72B4DD72C2D65FF91F0","sha1":"B532901704C9A8D0BB281957909ABDB12109AFD5"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleAHCI", "path": "/System/Library/Extensions/AppleAHCIPort.kext/Contents/MacOS/AppleAHCIPort", "hashes": {"md5":"6E4A98F7501D9C8EE1D3F398FA307355","sha1":"5C12DC4192B6FF736F4DCB7955A61B1553F605B0"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "corecapture", "path": "/System/Library/Extensions/corecapture.kext/Contents/MacOS/corecapture", "hashes": {"md5":"448F4A0EA8E589C32CF0B1F2ECB2A297","sha1":"857AFF5FE41C8C2FE37F4A93A55A1F0D802C68F3"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "mDNSOffloadUserClient", "path": "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/mDNSOffloadUserClient.kext/Contents/MacOS/mDNSOffloadUserClient", "hashes": {"md5":"841B6F69AA104753366DBA54BDDD0274","sha1":"80725F9137096EA86EEC9772446B965B4D83286F"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOSkywalkFamily", "path": "/System/Library/Extensions/IOSkywalkFamily.kext/Contents/MacOS/IOSkywalkFamily", "hashes": {"md5":"F638425979A71899187738577638D9F2","sha1":"1702AE3695DFD00952A5315221EEA4D427B24552"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IO80211Family", "path": "/System/Library/Extensions/IO80211Family.kext/Contents/MacOS/IO80211Family", "hashes": {"md5":"3418FC3531E383B1A66B464F1E08F6FC","sha1":"30C0180A709160BE1FE0E6228D356DC96048E3F5"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AirPortBrcm4360", "path": "/System/Library/Extensions/IO80211Family.kext/Contents/PlugIns/AirPortBrcm4360.kext/Contents/MacOS/AirPortBrcm4360", "hashes": {"md5":"9604947E45130D5E76FC7BC7235F28E9","sha1":"7E998E0818DDFFC62EE721B2FE5E5F8D8741C702"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "IOEthernetAVBController", "path": "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/IOEthernetAVBController.kext/Contents/MacOS/IOEthernetAVBController", "hashes": {"md5":"1685A0C12AB6322BAC0985CE684BD6BD","sha1":"F5EB0FA16373C9990CEE9529E56E667266599083"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "AppleBCM5701Ethernet", "path": "/System/Library/Extensions/IONetworkingFamily.kext/Contents/PlugIns/AppleBCM5701Ethernet.kext/Contents/MacOS/AppleBCM5701Ethernet", "hashes": {"md5":"A38BC2268D4A3DB4FE5C0AAF8DB70D14","sha1":"0C08D33A62674C6C4ABCCFE3A363E8B49BA2F76D"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "KextAudit", "path": "/System/Library/Extensions/KextAudit.kext/Contents/MacOS/KextAudit", "hashes": {"md5":"47AFD9D29A4F79F72A26DCEF5EE84497","sha1":"C6D18D610E389A2CCD8A35A4B074DB7682C6AD2F"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "AppleSDXC", "path": "/System/Library/Extensions/AppleSDXC.kext/Contents/MacOS/AppleSDXC", "hashes": {"md5":"AF69E8ADA14F0A2F9BE22B27327D0405","sha1":"FE1C96CE5D8C1FD29E23CD07D5C2A70FD4B5B15F"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "IOThunderboltFamily", "path": "/System/Library/Extensions/IOThunderboltFamily.kext/Contents/MacOS/IOThunderboltFamily", "hashes": {"md5":"26B7C14E1ACFD6960917652019F95952","sha1":"400EDE2A011BC4F6BDCBEBF39CB62E4529A19A04"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "AppleThunderboltNHI", "path": "/System/Library/Extensions/AppleThunderboltNHI.kext/Contents/MacOS/AppleThunderboltNHI", "hashes": {"md5":"6B54644E35D4F1DE80A87929B541D740","sha1":"3E0FE9D699B87226C5FC7BF3B68F935661E2D5BD"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "IOAHCIBlockStorage", "path": "/System/Library/Extensions/IOAHCIFamily.kext/Contents/PlugIns/IOAHCIBlockStorage.kext/Contents/MacOS/IOAHCIBlockStorage", "hashes": {"md5":"E1541D90C90501D134FC5DCC0C4E399B","sha1":"D32555F4857DADC64C0E8644C48A6228FA7A94CD"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOAHCISerialATAPI", "path": "/System/Library/Extensions/IOAHCIFamily.kext/Contents/PlugIns/IOAHCISerialATAPI.kext/Contents/MacOS/IOAHCISerialATAPI", "hashes": {"md5":"E9A4240660244D8911207FEC9D7DDA28","sha1":"91DC39BB98C21D2D0F99AEAF27EBFA31991BCDD1"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "AppleThunderboltPCIDownAdapter", "path": "/System/Library/Extensions/AppleThunderboltPCIAdapters.kext/Contents/PlugIns/AppleThunderboltPCIDownAdapter.kext/Contents/MacOS/AppleThunderboltPCIDownAdapter", "hashes": {"md5":"334E28DAA897576F4EA782378C36B8BC","sha1":"B9DB0607523A439D91596A4BA9020746E2D6E658"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleThunderboltDPAdapterFamily", "path": "/System/Library/Extensions/AppleThunderboltDPAdapters.kext/Contents/PlugIns/AppleThunderboltDPAdapterFamily.kext/Contents/MacOS/AppleThunderboltDPAdapterFamily", "hashes": {"md5":"8686B216B69812BAEE2DA25660F65B07","sha1":"45413961227E0F93EA0FE4DB7B07D9E220EA359A"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleThunderboltDPInAdapter", "path": "/System/Library/Extensions/AppleThunderboltDPAdapters.kext/Contents/PlugIns/AppleThunderboltDPInAdapter.kext/Contents/MacOS/AppleThunderboltDPInAdapter", "hashes": {"md5":"0A0438D510C7BBCA5BCC95751391F163","sha1":"D7A985FCAF0C0063B2CAD780E1E86D971F8BD292"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "I/O Kit CD Storage Family", "path": "/System/Library/Extensions/IOCDStorageFamily.kext/Contents/MacOS/IOCDStorageFamily", "hashes": {"md5":"144EBD50EB1D32A4AD9D79E3F214A930","sha1":"2051E998FE6C39279E85E92E923FDBA9E0B6929C"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "I/O Kit DVD Storage Family", "path": "/System/Library/Extensions/IODVDStorageFamily.kext/Contents/MacOS/IODVDStorageFamily", "hashes": {"md5":"8950BBB7328F1F99FC7740826A085565","sha1":"2B26BE96FA6B7F7E5F261F18737FC97FF1337B23"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "I/O Kit BD Storage Family", "path": "/System/Library/Extensions/IOBDStorageFamily.kext/Contents/MacOS/IOBDStorageFamily", "hashes": {"md5":"83F85FF41A44B6463422FD77CDDE447E","sha1":"506EFE32ACB097B660C973876388AF0D08E4E3B8"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "IOSCSIMultimediaCommandsDevice", "path": "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext/Contents/PlugIns/IOSCSIMultimediaCommandsDevice.kext/Contents/MacOS/IOSCSIMultimediaCommandsDevice", "hashes": {"md5":"EEC7824739E70400F71F1B617FF63FA6","sha1":"9FDFD1966FB68AB40A46E82E353BBCDA5E85651C"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "SCSITaskUserClient", "path": "/System/Library/Extensions/IOSCSIArchitectureModelFamily.kext/Contents/PlugIns/SCSITaskUserClient.kext/Contents/MacOS/SCSITaskUserClient", "hashes": {"md5":"AC16937FE9883C7C56929444E406414C","sha1":"818B89ED32A5EDBDA358CF97F3EBC2C23B05DCFA"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "HFSEncodings", "path": "/System/Library/Extensions/HFSEncodings.kext/Contents/MacOS/HFSEncodings", "hashes": {"md5":"098BD004F214F7A681C53A2A78FB99E0","sha1":"F87418673B2CE82FBCCD84610986B71E93CACB94"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleFSCompressionTypeZlib", "path": "/System/Library/Extensions/AppleFSCompressionTypeZlib.kext/Contents/MacOS/AppleFSCompressionTypeZlib", "hashes": {"md5":"4F0CD34DEABECDC0A7A3E40D5E05DAC6","sha1":"5649712E4027CCDF490D1ADAEDECF147485457D7"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOSurface", "path": "/System/Library/Extensions/IOSurface.kext/Contents/MacOS/IOSurface", "hashes": {"md5":"FF7B4ECE107168E9D71892EDDA936335","sha1":"0C09EB33E683293F6D1B8A5AA8D952CAAF88EC43"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "BootCache", "path": "/System/Library/Extensions/BootCache.kext/Contents/MacOS/BootCache", "hashes": {"md5":"FDEDEBC722B1EDEA531CD5400350480B","sha1":"69D048B7CAFD5735FB96BFD1A0F064A7170466DF"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/76"},{"name": "AppleFSCompressionTypeDataless", "path": "/System/Library/Extensions/AppleFSCompressionTypeDataless.kext/Contents/MacOS/AppleFSCompressionTypeDataless", "hashes": {"md5":"0DBDFDABF9F6893882DD0F13C7B7836D","sha1":"81686AA35B0323C893775EB5DBBD25EA72E4EDAE"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "HFS", "path": "/System/Library/Extensions/HFS.kext/Contents/MacOS/HFS", "hashes": {"md5":"0FBEBC85EE27CC91A86EB46239039959","sha1":"044AF0137CC06AD67A35840A3A0C03F359C22131"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOKit Serial Port Family", "path": "/System/Library/Extensions/IOSerialFamily.kext/Contents/MacOS/IOSerialFamily", "hashes": {"md5":"94D7B005CB11F6C152E6B42C7B4B5FAD","sha1":"AD8C340BE9B19C1943B787DB54F7D89A0A0D6917"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "vecLib", "path": "/System/Library/Extensions/vecLib.kext/Contents/MacOS/vecLib", "hashes": {"md5":"375BDCD94F603F159238D78F1BC411AB","sha1":"40B7E43271227662B1CFC7C79520A88362A717C8"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOAudioFamily", "path": "/System/Library/Extensions/IOAudioFamily.kext/Contents/MacOS/IOAudioFamily", "hashes": {"md5":"168917059F511A3B648E10371F733F2B","sha1":"A87F42A055A3C760DDDA93BF8DF218F70F31A351"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleVirtIO", "path": "/System/Library/Extensions/AppleVirtIO.kext/Contents/MacOS/AppleVirtIO", "hashes": {"md5":"07CDF0748B851313F5AAA9E579BED8B6","sha1":"47F0F3641A83297817AD30F2ECF9649297914213"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "apfs", "path": "/System/Library/Extensions/apfs.kext/Contents/MacOS/apfs", "hashes": {"md5":"F1E45728259917BA75A28FCA8162D48B","sha1":"A7A6CE7C5A376E1C04D1D3BD026D78CC584B74B7"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "I/O Kit Driver for USB Hubs", "path": "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBHub.kext/Contents/MacOS/AppleUSBHub", "hashes": {"md5":"1EC7CCD927003F8FB95C427487D89144","sha1":"01DD3577AD3184BC815835A1F26CC27F40FC6D6B"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "I/O Kit Driver for USB Composite Devices", "path": "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/AppleUSBHostCompositeDevice.kext/Contents/MacOS/AppleUSBHostCompositeDevice", "hashes": {"md5":"7A2F5ADD74670935049482D14880F507","sha1":"6E83AE9F501ED7780DC19D05A3374C083BA0FF94"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleUSBNetworking", "path": "/System/Library/Extensions/AppleUSBNetworking.kext/Contents/MacOS/AppleUSBNetworking", "hashes": {"md5":"9211AD1021741E41252FCE0B2B3C1B3E","sha1":"7416D2CA68D30C374983BFA870DBF4FFF4473F09"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleHIDMouse", "path": "/System/Library/Extensions/AppleHIDMouse.kext/Contents/MacOS/AppleHIDMouse", "hashes": {"md5":"5496A025C9DDE270BDC5D9722E39B5E9","sha1":"B2D236C6EC1464AE7FCB0A43EBB46B8DBCA04A5C"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "AppleUSBHIDMouse", "path": "/System/Library/Extensions/AppleHIDMouse.kext/Contents/PlugIns/AppleUSBHIDMouse.kext/Contents/MacOS/AppleUSBHIDMouse", "hashes": {"md5":"F364F5D5CD976BD781DBBA61075BA5B8","sha1":"8695818A68C749A8F6991454765D983406167EB9"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "I/O Kit Driver for USB HID Devices", "path": "/System/Library/Extensions/IOUSBHostFamily.kext/Contents/PlugIns/IOUSBHostHIDDevice.kext/Contents/MacOS/IOUSBHostHIDDevice", "hashes": {"md5":"20FE79092604CB39A75300AD5C4D23D8","sha1":"F93EBC2220C69952AF822C3428D508A8AE1CDC47"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleIRController", "path": "/System/Library/Extensions/AppleIRController.kext/Contents/MacOS/AppleIRController", "hashes": {"md5":"9FE707236D7228A67919161C1363DAF2","sha1":"3403337270F8943DC6D681E17CAED83FA5CB5B09"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "AppleUSBTCKeyboard", "path": "/System/Library/Extensions/AppleUSBTopCase.kext/Contents/PlugIns/AppleUSBTCKeyboard.kext/Contents/MacOS/AppleUSBTCKeyboard", "hashes": {"md5":"A0267322019E3E54877D43AC0C815F77","sha1":"E7D5678E6A626762C26E086E99830AB278FDB337"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleUSBTCButtons", "path": "/System/Library/Extensions/AppleUSBTopCase.kext/Contents/PlugIns/AppleUSBTCButtons.kext/Contents/MacOS/AppleUSBTCButtons", "hashes": {"md5":"A70CF33BCD8CEFB0FB105724054694E5","sha1":"BD792B22075D82E8AA3F65C90F21B1171ABE5262"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleUSBMultitouch", "path": "/System/Library/Extensions/AppleUSBMultitouch.kext/Contents/MacOS/AppleUSBMultitouch", "hashes": {"md5":"373A796637A680A000CE157ECE4CA489","sha1":"1E188B72DF13997A830FB87E9F41E590B9E778C3"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOBluetoothPacketLogger", "path": "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothPacketLogger.kext/Contents/MacOS/IOBluetoothPacketLogger", "hashes": {"md5":"246135A764F6865852B7F05968CD2594","sha1":"24ADB0FD8C09FDF766FB3A0D3538F8F4A831FCCC"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/72"},{"name": "IOBluetoothFamily", "path": "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/MacOS/IOBluetoothFamily", "hashes": {"md5":"28AF8BB07BF5E94CC8AAA9388721D02E","sha1":"682BCBB549EFC997BCA882C0C9215ED00FA39C42"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOBluetoothHostControllerTransport", "path": "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothHostControllerTransport.kext/Contents/MacOS/IOBluetoothHostControllerTransport", "hashes": {"md5":"7744563892CE9CB626A920988B0D67E8","sha1":"26482B3E11D67BC4B9AA5F496BCDCEB6AD23CD1E"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOBluetoothHostControllerUSBTransport", "path": "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothHostControllerUSBTransport.kext/Contents/MacOS/IOBluetoothHostControllerUSBTransport", "hashes": {"md5":"37A54BB4A29D7F7BBF1B7111F7348008","sha1":"96D772D0C92C6F808686ECDF60038825A8358032"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "BroadcomBluetoothHostControllerUSBTransport", "path": "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/BroadcomBluetoothHostControllerUSBTransport.kext/Contents/MacOS/BroadcomBluetoothHostControllerUSBTransport", "hashes": {"md5":"CD487E8A8587FA9D953FB8E4FA938493","sha1":"9175CC15915A694C0014ADF6DAB22EDF492C0F2F"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOgPTPPlugin", "path": "/System/Library/Extensions/IOTimeSyncFamily.kext/Contents/PlugIns/IOgPTPPlugin.kext/Contents/MacOS/IOgPTPPlugin", "hashes": {"md5":"2697A9DD044F8567391F2A7DA39FC48A","sha1":"259A41BE249BD06C225F7DE92C267CC01AD38D92"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "IOFireWireFamily", "path": "/System/Library/Extensions/IOFireWireFamily.kext/Contents/MacOS/IOFireWireFamily", "hashes": {"md5":"6BCB38887019323104BA9E8AB1EF6BD9","sha1":"3ECA6D577DA9B9A088C9C0C378ABE31419733623"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "AppleFWOHCI", "path": "/System/Library/Extensions/IOFireWireFamily.kext/Contents/PlugIns/AppleFWOHCI.kext/Contents/MacOS/AppleFWOHCI", "hashes": {"md5":"91D3E8895CEB3189101519361129FD76","sha1":"70EA3B69E71990125117B2459DC9BCABBF922779"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "SMCMotionSensor", "path": "/System/Library/Extensions/SMCMotionSensor.kext/Contents/MacOS/SMCMotionSensor", "hashes": {"md5":"46CB4ACB8583CA3CB72A0BF2024DD380","sha1":"9DF0A247ACADE0A1185C0E5539CBC0336B1D5244"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "I/O Kit Graphics Family", "path": "/System/Library/Extensions/IOGraphicsFamily.kext/IOGraphicsFamily", "hashes": {"md5":"FB8CE2FB6D2F78F26A0D62FCB4AAFDEC","sha1":"A7BCA18717CEDE1C60C32D0AF8FD7CF8610F9F33"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleSMBusController", "path": "/System/Library/Extensions/AppleSMBusController.kext/Contents/MacOS/AppleSMBusController", "hashes": {"md5":"D51DC763DF200D077F3DE3FCE86B6967","sha1":"95C2A431A1EB2B5F3F3A5341ECF82BF3116B6E0C"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "AppleMCCSControl", "path": "/System/Library/Extensions/AppleMCCSControl.kext/Contents/MacOS/AppleMCCSControl", "hashes": {"md5":"1066A5D88F1858DAC92E0EE8BDCF0095","sha1":"3E2C99D7CB948B96A5FAC7F059BDB0B734A5B5F9"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleGraphicsControl", "path": "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/MacOS/AppleGraphicsControl", "hashes": {"md5":"5838D52D6AEF4FA3D128B5AA9787A9CC","sha1":"442540C024AEC437F4DF5606A1852D3F9DD00479"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "com.apple.AppleGraphicsDeviceControl", "path": "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/AppleGraphicsDeviceControl.kext/AppleGraphicsDeviceControl", "hashes": {"md5":"6EAFCE28F778E64CC9A8F5DD21E26920","sha1":"AD7B2C6F166479D7F1775F236A8FE1E6E6484568"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "I/O Kit High Definition Audio Family", "path": "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/IOHDAFamily.kext/Contents/MacOS/IOHDAFamily", "hashes": {"md5":"064A9B6A7CFB176A30A607BBDF34D1CA","sha1":"86810E8DC605C8564F6B39D5B1A7F1CCD7EA5473"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "HDA Controller Driver", "path": "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleHDAController.kext/Contents/MacOS/AppleHDAController", "hashes": {"md5":"E144C58F0AA59EABCFE939EDEB6E757F","sha1":"F37156874297D2F6982BE5A9C8B25A4F5C9EE4C4"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleThunderboltIP", "path": "/System/Library/Extensions/AppleThunderboltIP.kext/Contents/MacOS/AppleThunderboltIP", "hashes": {"md5":"8D17E098447ED32891DD28CB56577273","sha1":"63B3B414230892585404D692125EB926B1C1EB47"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOPlatformPluginFamily", "path": "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/MacOS/IOPlatformPluginFamily", "hashes": {"md5":"CC72DA8F25C4802B94AE5895B6C33CB2","sha1":"29EE7898482F98DBC408E610D76DF59BE827EDB4"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "ACPI_SMC_PlatformPlugin", "path": "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/AppleSMCPDRC.kext/Contents/MacOS/AppleSMCPDRC", "hashes": {"md5":"CACF628159DB876CAA81B96FB359A5DC","sha1":"1A3FB7CE66257A8EE365CA646E1E704C28D84F40"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "IOAcceleratorFamily2", "path": "/System/Library/Extensions/IOAcceleratorFamily2.kext/Contents/MacOS/IOAcceleratorFamily2", "hashes": {"md5":"EC2F76EDCA597580AA9E6CF59A158419","sha1":"8020633F38D406A982DE14981F1EF1CEA94C61E1"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "com.apple.driver.AppleIntelFramebufferCapri", "path": "/System/Library/Extensions/AppleIntelFramebufferCapri.kext/Contents/MacOS/AppleIntelFramebufferCapri", "hashes": {"md5":"FFE377A7E008DD41ED5A98B08619F68F","sha1":"1BEAD8E150A5926AF03B306BDBDD83F99E091283"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "X86PlatformPlugin", "path": "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/X86PlatformPlugin.kext/Contents/MacOS/X86PlatformPlugin", "hashes": {"md5":"BE2E9FC7F0F9D4EF025236179160BAF3","sha1":"A7EB3793FFD46A6E594B90BFF5EB069E065917EC"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "I/O Kit NDRV Support", "path": "/System/Library/Extensions/IONDRVSupport.kext/IONDRVSupport", "hashes": {"md5":"108350FC790E9B74C5F8D4114A72D7C8","sha1":"B263DF2F1842CE61E7AFE5BDF67C221CEB93F10A"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Apple Embedded Graphics Kernel Extension", "path": "/System/Library/Extensions/AppleIntelHD4000Graphics.kext/Contents/MacOS/AppleIntelHD4000Graphics", "hashes": {"md5":"91E5DFBE79030BCB52AACE65BEF96A5D","sha1":"E673617E7949D814B52E63488E4E44212934EC4E"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "IOSlowAdaptiveClockingFamily", "path": "/System/Library/Extensions/IOSlowAdaptiveClockingFamily.kext/Contents/MacOS/IOSlowAdaptiveClockingFamily", "hashes": {"md5":"DDE550D613382C16A32C45BE20F1D11E","sha1":"5931A881FF5765CBCA5FADA4B4F5B694529F89E6"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleIntelSlowAdaptiveClocking", "path": "/System/Library/Extensions/AppleIntelSlowAdaptiveClocking.kext/Contents/MacOS/AppleIntelSlowAdaptiveClocking", "hashes": {"md5":"44B5F0247183B5489CF3EADB95AD67BC","sha1":"3136158B468F6A57D95C07C33EFA731AF042CDC4"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "com.apple.AppleGPUWrangler", "path": "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/AppleGPUWrangler.kext/Contents/MacOS/AppleGPUWrangler", "hashes": {"md5":"FC5799E3C0E6FE0C32D2120AD73C8007","sha1":"A11136FCB6CC935417C3F8A3224825136F76F325"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleSMCLMU", "path": "/System/Library/Extensions/AppleSMCLMU.kext/Contents/MacOS/AppleSMCLMU", "hashes": {"md5":"C6F6CD9B3A9AFCC7CDB5DB564E5F3253","sha1":"9D9A38BC09742B0DCF683BF7E83116799088B4CA"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleLPC", "path": "/System/Library/Extensions/AppleLPC.kext/Contents/MacOS/AppleLPC", "hashes": {"md5":"5E240B46DE5F29178503625D58E0484E","sha1":"FCAD7B662A4611634EC197678DCDD4C4BC3A7F65"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleSMBusPCI", "path": "/System/Library/Extensions/AppleSMBusPCI.kext/Contents/MacOS/AppleSMBusPCI", "hashes": {"md5":"D9CEF064D93241E301CF1AF7B1A07C03","sha1":"413C08AF2B8A623FE22F41192364F9C720FAF259"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "Dont Steal Mac OS X", "path": "/System/Library/Extensions/Dont Steal Mac OS X.kext/Contents/MacOS/Dont Steal Mac OS X", "hashes": {"md5":"B0B1B85FCF2BFCEDF39204A15C48FA81","sha1":"334902F2F49D9B35C6FCFD3464B8D3FA8D4A5E69"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "pmtelemetry", "path": "/System/Library/Extensions/pmtelemetry.kext/Contents/MacOS/pmtelemetry", "hashes": {"md5":"DEDB0F57F51E7819674C398BC089C0DD","sha1":"25AB38EDA63942697B0814822735B43CA895F015"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/76"},{"name": "IOBluetoothSerialManager", "path": "/System/Library/Extensions/IOBluetoothFamily.kext/Contents/PlugIns/IOBluetoothSerialManager.kext/Contents/MacOS/IOBluetoothSerialManager", "hashes": {"md5":"4D838AE94EBC047092F48A582EE9CB96","sha1":"A7E0BD4FC2DC5358B686183510242E95442D76B3"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "IOUserEthernet", "path": "/System/Library/Extensions/IOUserEthernet.kext/Contents/MacOS/IOUserEthernet", "hashes": {"md5":"DEB2949F077DDF9DEAEB5AB9FD97EF28","sha1":"D6492440E025B6E2A545BE1EDF1D64577A832207"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleHV", "path": "/System/Library/Extensions/AppleHV.kext/Contents/MacOS/AppleHV", "hashes": {"md5":"7B1419A6AB8DD32936F13BB95BE46B6A","sha1":"69EDE5BB60AAD4380030F8BA9B4DE9E69138C69D"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "eficheck", "path": "/System/Library/Extensions/eficheck.kext/Contents/MacOS/eficheck", "hashes": {"md5":"DAF066675420FA5EF6C8D620E496ED94","sha1":"C2607DDF1A7654F23F5A6C4BD2B8951003AEECE7"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/76"},{"name": "AppleUpstreamUserClient", "path": "/System/Library/Extensions/AppleUpstreamUserClient.kext/Contents/MacOS/AppleUpstreamUserClient", "hashes": {"md5":"EE4A124F28C9759CA90C20F555A2BA86","sha1":"BCF0680E7E6AC193DFD3EBF32252CB1D132308AC"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/74"},{"name": "IOAVBFamily", "path": "/System/Library/Extensions/IOAVBFamily.kext/Contents/MacOS/IOAVBFamily", "hashes": {"md5":"CDBCA897837FA07F2E4EC5BDD582B64E","sha1":"8067FD4E192CA17E0E822D7D97A8894052DB6AF2"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Apple Mikey Driver", "path": "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleMikeyDriver.kext/Contents/MacOS/AppleMikeyDriver", "hashes": {"md5":"D8AA595D25AA8910D3431791E7351E14","sha1":"C3C521B37D8E67A4CAE8BC3578184004ADAC02B2"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "AGDCPluginDisplayMetrics", "path": "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/AGDCPluginDisplayMetrics.kext/Contents/MacOS/AGDCPluginDisplayMetrics", "hashes": {"md5":"2CADD091D112FB7DED11CECD6C8D4A60","sha1":"5250F7E2CC634C588D3FC35E2F97D06296456A80"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/72"},{"name": "Mac OS X Kernel vDSPLib", "path": "/System/Library/Extensions/OSvKernDSPLib.kext/Contents/MacOS/OSvKernDSPLib", "hashes": {"md5":"2064FC307FD255BD1FDE1E946A9407F2","sha1":"C29A119910135ADE2EFD9B28711149A02EBFEE84"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Apple Dsp Function Library", "path": "/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/DspFuncLib.kext/Contents/MacOS/DspFuncLib", "hashes": {"md5":"74E1D826BADF2DDEB7402B912748D8D7","sha1":"E7E4AB65976D444E277E9783E2330365C33DBCBA"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "Apple HDA Driver", "path": "/System/Library/Extensions/AppleHDA.kext/Contents/MacOS/AppleHDA", "hashes": {"md5":"16EEBFF5F9F91D2A4ECC4BDB9C9E4AA7","sha1":"B0BED9B0FDF3F83C0F9D1CCD0C816D2889F762B4"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleGraphicsDevicePolicy", "path": "/System/Library/Extensions/AppleGraphicsControl.kext/Contents/PlugIns/AppleGraphicsDevicePolicy.kext/Contents/MacOS/AppleGraphicsDevicePolicy", "hashes": {"md5":"E5669C0303B71327CC90714BC95A5D28","sha1":"6D1D2B18C6363D9DB69B6BFAB1E77650865DCBF4"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleBacklightExpert", "path": "/System/Library/Extensions/AppleBacklightExpert.kext/AppleBacklightExpert", "hashes": {"md5":"34FF0F0C398AC90455D13419B39FB685","sha1":"3A53E04DA05D3277BD13513C4E680253160B92F1"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleBacklight", "path": "/System/Library/Extensions/AppleBacklight.kext/Contents/MacOS/AppleBacklight", "hashes": {"md5":"2A25996D793EF2221B24D597B51B43AA","sha1":"C14A5080D64F0B9CEF4C22059547AFCE3552AF00"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleMikeyHIDDriver", "path": "/System/Library/Extensions/AppleMikeyHIDDriver.kext/Contents/MacOS/AppleMikeyHIDDriver", "hashes": {"md5":"F038BBC600C73A07D3E76EA0892D5E13","sha1":"1DC2AD84B917607D3AC0B6A46422E0DAE8660391"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "IOFireWireIP", "path": "/System/Library/Extensions/IOFireWireIP.kext/Contents/MacOS/IOFireWireIP", "hashes": {"md5":"7B61451E95C0D04BB69BF51C9FE03F96","sha1":"93E78B949377FEDAE6A3482BA89A3DE529BFA4AE"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/0"},{"name": "triggers", "path": "/System/Library/Extensions/triggers.kext/Contents/MacOS/triggers", "hashes": {"md5":"879E8F43BEE1EC25B96C04A7EB87E9A0","sha1":"3CF5C489DAA2CE57054A8217B7CFA4DD74717F9D"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "autofs", "path": "/System/Library/Extensions/autofs.kext/Contents/MacOS/autofs", "hashes": {"md5":"6594D8E9839F2B2EB90EFB86388145B7","sha1":"6B0EA2AFA27D499B55661D70DDE80DC8A69E9112"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "VBoxDrv", "path": "/Library/StagedExtensions/Library/Application Support/VirtualBox/VBoxDrv.kext/Contents/MacOS/VBoxDrv", "hashes": {"md5":"4AC178FE434265AE2191CC236B6B6610","sha1":"F047025B80C8F7098F1AB099D9CE8A3BB59CD7A2"}, "signature(s)": {"signatureStatus":0,"signedByApple":false,"signingAuthorities":["Developer ID Application: Oracle America, Inc. (VB5E2TV963)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "X86PlatformShim", "path": "/System/Library/Extensions/IOPlatformPluginFamily.kext/Contents/PlugIns/X86PlatformShim.kext/Contents/MacOS/X86PlatformShim", "hashes": {"md5":"1601F213672BB7C4B8949A932643038E","sha1":"5BDA1D52684095AD71EA14430B58FCA42EB07930"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleGraphicsPowerManagement", "path": "/System/Library/Extensions/AppleGraphicsPowerManagement.kext/Contents/MacOS/AppleGraphicsPowerManagement", "hashes": {"md5":"23333E2D9800FC16092B9CE0B4ADE187","sha1":"4CA40A3598C58027A8FD4F7A0569987BDD22EF07"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AudioAUUC", "path": "/System/Library/Extensions/AudioAUUC.kext/AudioAUUC", "hashes": {"md5":"A4F72DD86378F465C8380B41B200C3C1","sha1":"5E54AA92D93054F322C228F435A2E8A43D4C7AAA"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "I/O Kit Driver for USB User Clients", "path": "/System/Library/Extensions/IOUSBFamily.kext/Contents/PlugIns/IOUSBUserClient.kext/Contents/MacOS/IOUSBUserClient", "hashes": {"md5":"6DAA75EB407582C72177D16DC76771EC","sha1":"7A086221DF1D6AC8E34FBFC984CF770835F8C9D2"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "VBoxUSB", "path": "/Library/StagedExtensions/Library/Application Support/VirtualBox/VBoxUSB.kext/Contents/MacOS/VBoxUSB", "hashes": {"md5":"9CD456381F0A262538BE7E4DC81F0DB0","sha1":"7C1C89760B87320186EC7350AFE1712B64BDA6E7"}, "signature(s)": {"signatureStatus":0,"signedByApple":false,"signingAuthorities":["Developer ID Application: Oracle America, Inc. (VB5E2TV963)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "VBoxNetFlt", "path": "/Library/StagedExtensions/Library/Application Support/VirtualBox/VBoxNetFlt.kext/Contents/MacOS/VBoxNetFlt", "hashes": {"md5":"F18A8ECAEFC9517FBF1C60A87587E61F","sha1":"1EC7252650F18CC2EB03E2D8854429A6E6D9F4EA"}, "signature(s)": {"signatureStatus":0,"signedByApple":false,"signingAuthorities":["Developer ID Application: Oracle America, Inc. (VB5E2TV963)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "VBoxNetAdp", "path": "/Library/StagedExtensions/Library/Application Support/VirtualBox/VBoxNetAdp.kext/Contents/MacOS/VBoxNetAdp", "hashes": {"md5":"F0301D9217D0266A2CA8E6506644EE67","sha1":"4247F4D4A9F54C248935D0B778D4F014CC6594BA"}, "signature(s)": {"signatureStatus":0,"signedByApple":false,"signingAuthorities":["Developer ID Application: Oracle America, Inc. (VB5E2TV963)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/75"},{"name": "AppleFileUtil", "path": "/System/Library/Extensions/AppleFileUtil.kext/Contents/MacOS/AppleFileUtil", "hashes": {"md5":"17E3046CB6AABDC94D2ABB5E5C66E304","sha1":"E72CEB1D9F9CB9E24BE72623F9EE652EB19CEE02"}, "signature(s)": {"signatureStatus":0,"signedByApple":true,"signingAuthorities":["Software Signing","Apple Code Signing Certification Authority","Apple Root CA"]}, "VT detection": "0/72"},{"name": "Hypervisor", "path": "/Library/StagedExtensions/Applications/BlueStacks.app/Contents/Resources/VBoxDrv.kext/Contents/MacOS/VBoxDrv", "hashes": {"md5":"01C4202883680C27913A274B669F55A4","sha1":"D29E9C512F42D0056A6E7106D8E8D8D503DCEB88"}, "signature(s)": {"signatureStatus":0,"signedByApple":false,"signingAuthorities":["Developer ID Application: BlueStack Systems, Inc. (QX5T8D6EDU)","Developer ID Certification Authority","Apple Root CA"]}, "VT detection": "0/74"}]}Wie immer, Danke ich dir! |
Zitat:
Aber bevor du das machst, bitte führe die nachfolgenden Schritte aus: Bitte die Anleitung durchlesen und dein Gerät entsprechend aussuchen.
Schau mal jetzt bitte nach ob die Datei noch vorhanden ist. In den Logs ist nichts auffälliges mehr zu finden. Wenn du alles erledigt hast, dann bitte noch ein letztes Log mit DetectX Danke für deine Mithilfe :) |
Zitat:
Also.. nach allem finde ich die Datei immer noch.. hier der Pfad, es handelt sich um diese nicht zugelassene Systemerweiterung.. ich würd sie dennoch gerne loswerden, sie will aber nicht gehen. Egal wie, ich gebe das admin pw an, habe immer noch nicht die Rechte es zu entfernen... net.protected.macos.TotalAV.ESAVExtension.systemextension hier der DetectX Log Code: Timestamp (15): Thu May 06 09:55:17 2021 |
Zitat:
Mit dem vollständigen Pfad meinte ich den absoluten Pfad zu der Erweiterung.:glaskugel2: Terminal öffnen folgenden Befehl ausführen - "Alles auswählen" auswählen, kopieren und in das Terrminal einfügen. Code: touch ~/Desktop/lib.txt; p="lib.txt"; cd ~/Desktop; ls -ald /Library/Extensions/* >$p && ls -ald /System/Library/Extensions/* >> $p | open -e lib.txt |
ups.. also hier der Pfad, Pardon Code: /Library/SystemExtensions/3A3B86FB-F4CD-4A53-9861-3163E1A1A166/net.protected.macos.TotalAV.ESAVExtension.systemextensionCode: drwxr-xr-x 3 root wheel 96 Apr 16 2019 /Library/Extensions/ACS6x.kext |
Ist das die einzige Erweiterung dort bei mir ist das Verzeichnis leer Gib mir doch bitte folgende Ausgabe nochmal aus dem Terminal Code: launchctl list | grep -v com.apple |
Ja die einzige Erweiterung Code: berlinalake@DER-MacBook-Pro ~ % launchctl list | grep -v com.apple |
Liste der Anhänge anzeigen (Anzahl: 1) https://www.trojaner-board.de/attachment.php?attachmentid=83998&stc=1&d=1620297373 hier ein screenshot... |
Also in der Start-Bibliothek ist es nicht mehr enthalten. Mache bitte ein vollständiges Backup! Zunächst einmal hätte ich gerne noch eine Ausgabe mit folgendem Befehl: Code: systemextensionsctl list |
hier bitte Code: Last login: Thu May 6 13:27:19 on console |
Wie ich mir schon gedacht habe, als du TotalAV installiert hattest, hat das System dich aufgefordert die Erweiterung zuzulassen, was du nicht getan hast. Ich sehe gerade zu hast immer noch nicht deine Shell auf Zsh umgestellt. Lese bitte diesen Beitrag um das zu ändern. Wenn du laut meiner Anleitung diese in den Systemeinstellungen bereits geändert hast, brauchst du nur noch den Befehl ausführen der im Hinweisfenster der Shell angezeigt wird: Code: chsh -s /bin/zshWichtig: Ich hoffe du hast ein backup gemacht. Drucke bitte die nachfolgenden Schritte aus um Fehler zu vermeiden. 1. Rechner neu Starten und beim Start die Tasten CMD+R halten um in den Wiederherstellungsmodus zu gelangen. 2. Im Wiederherstellungsmodus: Menü -> Dienstprogramme -> Terminal starten 3. Eingabe: csrutil status Ausgabe sollte sein: System Integrity Protection status: enabled. 4. Befehl: csrutil disable Rückmeldung sollte sein, das der Schutz deaktiviert wurde (also disabled). 5. Neustart 6. Log dich als Admin ein, und öffne dein Terminal 7. Gebe oder kopiere die nachfolgende Zeile in das Terminal ein und führe diese aus. Code: systemextensionsctl uninstall 47M7HL5AG8 net.protected.macos.TotalAV.ESAVExtension9. Wiederhole jetzt bitte die Schritte 1 + 2 und gebe folgendes in das Terminal (Wiederherstellungsumgebung): Code: csrutil enable10. Neustart Prüfe jetzt noch mal, ob es weg ist. |
Lieber Dante12, ich kam leider erst jetzt dazu, die letzten Schritte durchzuführen: Es hat geklappt! Die Datei ist endlich verschwunden! Ich bin dir für deine Hilfestellung unglaublich dankbar!!! Habe auch so einiges dazugelernt! Werde gerne etwas an euch hier spenden! NOCHMAL DANKE und alles Gute weiterhin! LG :singsing:elisabeth69 |
Vielen Dank für das Lob - Damit ist meine Aufgabe erfüllt :) Du kannst jetzt alle Dateien die wir angelegt haben, löschen. Du kannst jetzt KextViewer, KnockKnock mit AppCleaner entfernen. Lege einfach die Programme (einzeln) in das Fenster von AppCleaner und lösche diese. AppCleaner selbst kannst du danach einfach in den Papierkorb verschieben. Achte aber bitte vorher darauf das im Programm unter Menü -> Einstellungen (Preferences) -> die Funktion SmartDelete abgeschaltet ist. MalwareBytes 4 for Mac deinstallieren
CLEAN & TIPPS
|
Eigentlich war/ bin ich auf der Suche nach einem Grund, weshalb mir in unregelmäßigen Abständen “sprach-downloader versucht deine systemeinstellungen zu verändern" angezeigt wird. Dabei bin ich nach langer Zeit mal wieder hier gelandet und habe diesen Thread hier gesehen/gelesen. Ich muss das einfach mal sagen: Dante12, Du bist einmalig! Deine Mac-Kenntnisse, vor allem aber Deine Fähigkeit zu diesen nachvollziehbaren Anleitungen, keinen Schritt vergessen, nichts als selbstverständlich vorauszusetzen - unbezahlbar! Wo findet man Supporter wie Dich, falls man sie hier mal nicht antrifft??? Und an alle hier bei Trojaner-Board: Toll, dass es Euch gibt!!! Liebe Grüße Kassie |
Zitat:
Code: Systemeinstellungen -> Bedienungshilfern -> Gesprochene InhalteSchau mal dort bitte ob rechts neben den ausgewählten Stimmen Upgrade ausgewählt ist. Wenn das der Fall ist, dann versucht das System die ausgewählten Stimmen regelmäßig zu aktualisieren. Wenn du das nicht möchtest deaktiviere diese Funktion. |
Danke, Dante, für den Versuch! Dummerweise habe ich vergessen, wie ich hier im Profil bzw. der Signatur den von mir genutzen Mac samt Betriebssystem aktualisieren bzw. ergänzen kann. :confused: Der beschriebene Hinweis tritt unter macOS Catalina 10.15.7 (auf einem MBP 13", 2019) auf. Die Systemeinstellung "Bedienungshilfen" sehen da anders aus als von Dir beschrieben. Ich hab alles durchgesucht: Es ist NICHTS aktiviert. Bewusst nutze ich die Sprachsteuerung nicht. Ist ein unbedenklicher Grund für diesen immer wiederkehrenden Hinweis denkbar? LG kassie |
@mac-kass Dein Lob für Dante12 in Ehren, aber warum hijackst du diesen Thread, anstatt einen Eigenen zu erstellen? @Moderatoren Kann bitte jemand diesen Thread thematisch splitten!? Danke! |
|
| Alle Zeitangaben in WEZ +1. Es ist jetzt 16:22 Uhr. |
Copyright ©2000-2025, Trojaner-Board