Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/macbooks/ Spyware Found on Irina Bright’s MacBooks, Which May Be Related to Pegasus Spyware. File name: WindowServer_2018-02-21-090325_Irinas-MacBook-Pro.wakeups_resource.diag Downloaded from: McBook > Library_Logs_DiagnosticReports. Date/Time: 2018-02-21 08:58:29.994783 +0000 OS Version: Mac OS X 10.13.3 (Build 17D47) Architecture: x86_64 Report Version: 19 Command: WindowServer Path: /System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/Resources/WindowServer Version: ??? (???) Parent: launchd [1] PID: 178 Event: wakeups Wakeups: 45001 wakeups over the last 287 seconds (157 wakeups per second average), exceeding limit of 150 wakeups per second over 300 seconds Action taken: none Duration: 287.09s Steps: 148 Hardware model: MacBookPro9,2 Active cpus: 4 Fan speed: 1994 rpm Powerstats for: WindowServer [178] UUID: BD323A05-A87E-3D6E-846C-32A16D2E5CB3 Start time: 2018-02-21 08:58:30 +0000 End time: 2018-02-21 09:03:16 +0000 Parent: launchd Microstackshots: 100 samples (67%) Primary state: 39 samples Non-Frontmost App, User mode, Effective Thread QoS Unspecified, Requested Thread QoS Unspecified, Override Thread QoS Unspecified User Activity: 100 samples Idle, 0 samples Active Power Source: 0 samples on Battery, 100 samples on AC 46 ??? (WindowServer + 3550) [0x106679dde] 46 SLXServer + 832 (SkyLight) [0x7fff499702b9] 39 CGXRunOneServicesPass + 247 (SkyLight) [0x7fff4996f6fe] 39 run_timer_pass + 495 (SkyLight) [0x7fff4993fce4] 37 update_display_callback(void*, double) + 257 (SkyLight) [0x7fff498f8f86] 37 CGXUpdateDisplay + 5711 (SkyLight) [0x7fff498fa808] 33 prepare_CoreAnimation_update_state(CGXConnection*, CGXWindowSubArray, bool, bool) + 554 (SkyLight) [0x7fff498fd9c5] 8 CGXBeginSurfaceLayerUpdate + 7388 (SkyLight) [0x7fff49862e99] 7 invalidate_window_surface_region + 189 (SkyLight) [0x7fff4985d6d0] 2 reschedule_callback_on_session + 275 (SkyLight) [0x7fff4993f5ba] 1 SLSCurrentRealTime + 1 (SkyLight) [0x7fff498e3b34] 1 reschedule_callback_on_session + 94 (SkyLight) [0x7fff4993f505] 1 malloc + 24 (libsystem_malloc.dylib) [0x7fff4f99650b] 1 malloc_zone_malloc + 103 (libsystem_malloc.dylib) [0x7fff4f997201] 1 szone_malloc_should_clear + 422 (libsystem_malloc.dylib) [0x7fff4f997403] 1 tiny_malloc_from_free_list + 41 (libsystem_malloc.dylib) [0x7fff4f9981fe] 1 reschedule_callback_on_session + 387 (SkyLight) [0x7fff4993f62a] 1 free + 33 (libsystem_malloc.dylib) [0x7fff4f99867e] 1 reschedule_callback_on_session + 212 (SkyLight) [0x7fff4993f57b] 1 CGXInvalidateDisplayShape + 79 (SkyLight) [0x7fff4990752a] 1 invalidate_window_surface_region + 93 (SkyLight) [0x7fff4985d670] 1 region_create_with_shape + 37 (CoreGraphics) [0x7fff2825a04a] 1 CGTypeCreateInstance + 46 (CoreGraphics) [0x7fff28259083] 1 _CFRuntimeCreateInstance + 284 (CoreFoundation) [0x7fff27dbf1ac] 1 malloc_zone_malloc + 103 (libsystem_malloc.dylib) [0x7fff4f997201] 1 szone_malloc_should_clear + 194 (libsystem_malloc.dylib) [0x7fff4f99731f] 3 CGXBeginSurfaceLayerUpdate + 1270 (SkyLight) [0x7fff498616b3] 2 CA::Render::Context::context_by_id(unsigned int) + 23 (QuartzCore) [0x7fff32fa8e05] 1 os_unfair_lock_lock + 8 (libsystem_platform.dylib) [0x7fff4fa7361e] 3 CGXBeginSurfaceLayerUpdate + 292 (SkyLight) [0x7fff498612e1] 2 assert_check_region + 1 (CoreGraphics) [0x7fff282656f9] 1 CGRegionGetBoundingBox + 36 (CoreGraphics) [0x7fff282659c7] 1 assert_check_shape + 15 (CoreGraphics) [0x7fff282652ea] 3 CGXBeginSurfaceLayerUpdate + 2075 (SkyLight) [0x7fff498619d8] 3 CARenderUpdateAddContext2 + 48 (QuartzCore) [0x7fff3307d36c] 1 CA::Shape::equal(CA::Bounds const&) const + 1 (QuartzCore) [0x7fff32fe7229] 1 CA::Render::Update::add_context(CA::Render::Context*, CA::Render::Layer*, CA::Transform const*) + 1588 (QuartzCore) [0x7fff32fb0bde] 1 CA::Render::Updater::add_background_filters_(CA::Render::Updater::GlobalState&, CA::Render::Updater::LocalState&, CA::Render::Layer*, CA::Render::LayerNode*, CA::Render::Updater::LayerShapes*) + 1 (QuartzCore) [0x7fff3307bdb2] 1 CA::Render::Update::add_context(CA::Render::Context*, CA::Render::Layer*, CA::Transform const*) + 1439 (QuartzCore) [0x7fff32fb0b49] 1 CA::Render::Updater::prepare_layer0(CA::Render::Updater::GlobalState&, CA::Render::LayerNode*, CA::Render::Layer*, CA::Render::Updater::LocalState0&, unsigned long long) + 9716 (QuartzCore) [0x7fff33077d83] 1 CA::Render::Updater::prepare_sublayer0(CA::Render::Updater::GlobalState&, CA::Render::Updater::LocalState0&, CA::Render::Layer*) + 45 (QuartzCore) [0x7fff3307557f] 1 CA::Render::Updater::layer_node(CA::Render::Layer*, CA::Render::Updater::GlobalState const&, CA::Render::Updater::LocalState0 const&, bool&) + 251 (QuartzCore) [0x7fff33075383] 3 CGXBeginSurfaceLayerUpdate + 7791 (SkyLight) [0x7fff4986302c] 3 _CFRelease + 1088 (CoreFoundation) [0x7fff27f13fe0] 2 free_tiny + 375 (libsystem_malloc.dylib) [0x7fff4f9af157] 1 free_tiny + 496 (libsystem_malloc.dylib) [0x7fff4f9af1d0] 2 CGXBeginSurfaceLayerUpdate + 803 (SkyLight) [0x7fff498614e0] 2 CGXBeginSurfaceLayerUpdate + 88 (SkyLight) [0x7fff49861215] 2 CGXBeginSurfaceLayerUpdate + 971 (SkyLight) [0x7fff49861588] 2 CGColorSpaceRetain + 22 (CoreGraphics) [0x7fff2825abca] 2 CFRetain + 57 (CoreFoundation) [0x7fff27dc3109] 1 CGXGetDisplaysWithPoint + 186 (CoreDisplay) [0x7fff27d8787e] 1 CGXBeginSurfaceLayerUpdate + 927 (SkyLight) [0x7fff4986155c] 1 WSCALayerBackingSetDevice + 39 (SkyLight) [0x7fff498d5536] 1 CGXGLDisplayDeviceAccelerator + 74 (SkyLight) [0x7fff498d3c88] 1 CGXBeginSurfaceLayerUpdate + 6968 (SkyLight) [0x7fff49862cf5] 1 region_create_with_shape + 37 (CoreGraphics) [0x7fff2825a04a] 1 CGTypeCreateInstance + 46 (CoreGraphics) [0x7fff28259083] 1 _CFRuntimeCreateInstance + 284 (CoreFoundation) [0x7fff27dbf1ac] 1 malloc_zone_malloc + 103 (libsystem_malloc.dylib) [0x7fff4f997201] 1 szone_malloc_should_clear + 194 (libsystem_malloc.dylib) [0x7fff4f99731f] 1 CGXBeginSurfaceLayerUpdate + 195 (SkyLight) [0x7fff49861280] 1 CGXBeginSurfaceLayerUpdate + 986 (SkyLight) [0x7fff49861597] 1 _CFRelease + 423 (CoreFoundation) [0x7fff27f13d47] 1 CGXBeginSurfaceLayerUpdate + 3250 (SkyLight) [0x7fff49861e6f] 1 bool std::__1::__insertion_sort_incomplete&, int*>(int*, int*, std::__1::__less&) + 337 (libc++.1.dylib) [0x7fff4d8247a8] 1 CGXBeginSurfaceLayerUpdate + 1670 (SkyLight) [0x7fff49861843] 1 WSGetCompositorMetal + 294 (SkyLight) [0x7fff49818fb5] 4 prepare_CoreAnimation_update_state(CGXConnection*, CGXWindowSubArray, bool, bool) + 558 (SkyLight) [0x7fff498fd9c9] 2 update_display_callback(void*, double) + 180 (SkyLight) [0x7fff498f8f39] 6 CGXRunOneServicesPass + 460 (SkyLight) [0x7fff4996f7d3] 6 run_one_server_pass + 337 (SkyLight) [0x7fff4996f999] 6 mach_msg_trap + 10 (libsystem_kernel.dylib) [0x7fff4f9357c2] 6 1 CGXRunOneServicesPass + 142 (SkyLight) [0x7fff4996f695] 1 28 21 3 _pthread_wqthread + 980 (libsystem_pthread.dylib) [0x7fff4fa7a033] 3 _dispatch_workloop_worker_thread + 880 (libdispatch.dylib) [0x7fff4f7ced16] 3 _dispatch_root_queue_drain_deferred_wlh + 332 (libdispatch.dylib) [0x7fff4f7caf02] 3 _dispatch_queue_invoke + 373 (libdispatch.dylib) [0x7fff4f7bd0fd] 3 _dispatch_queue_serial_drain + 222 (libdispatch.dylib) [0x7fff4f7ca06f] 3 _dispatch_source_invoke + 620 (libdispatch.dylib) [0x7fff4f7b8018] 3 _dispatch_continuation_pop + 472 (libdispatch.dylib) [0x7fff4f7c8e76] 3 _dispatch_client_callout + 8 (libdispatch.dylib) [0x7fff4f7b5d50] 3 dispatch_mig_server + 648 (libdispatch.dylib) [0x7fff4f7c204d] 3 mach_msg_trap + 10 (libsystem_kernel.dylib) [0x7fff4f9357c2] 3 1 1 _pthread_start + 377 (libsystem_pthread.dylib) [0x7fff4fa7a56d] 1 _pthread_body + 340 (libsystem_pthread.dylib) [0x7fff4fa7a6c1] 1 _dispatch_worker_thread + 251 (libdispatch.dylib) [0x7fff4f7b8dea] 1 _dispatch_semaphore_wait_slow + 58 (libdispatch.dylib) [0x7fff4f7bd8e6] 1 semaphore_timedwait_trap + 10 (libsystem_kernel.dylib) [0x7fff4f935816] 1 Binary Images: 0x106679000 - 0x106679fff WindowServer (312.23.4) /System/Library/PrivateFrameworks/SkyLight.framework/Resources/WindowServer 0x7fff27cef000 - 0x7fff27dbbfff com.apple.CoreDisplay 1.0 (81.7) /System/Library/Frameworks/CoreDisplay.framework/Versions/A/CoreDisplay 0x7fff27dbc000 - 0x7fff28255fff com.apple.CoreFoundation 6.9 (1451) <739D6558-3DF3-3181-AA07-BBE3882D3B7F> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation 0x7fff28257000 - 0x7fff28882ff7 com.apple.CoreGraphics 2.0 (1129.5) /System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics 0x7fff32f7a000 - 0x7fff331c2fff com.apple.QuartzCore 1.11 (584.8.102) <4479AF33-E6EA-3037-A2C1-3C6F12B1260A> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore 0x7fff49725000 - 0x7fff499bffff com.apple.SkyLight 1.600.0 <455CE6F6-CD58-3E08-8300-CA8BDD3377FC> /System/Library/PrivateFrameworks/SkyLight.framework/Versions/A/SkyLight 0x7fff4d821000 - 0x7fff4d877fff libc++.1.dylib (400.9) /usr/lib/libc++.1.dylib 0x7fff4f7b4000 - 0x7fff4f7edff7 libdispatch.dylib (913.30.4) <7D0E3183-282B-3FEE-A734-2C0ADC092084> /usr/lib/system/libdispatch.dylib 0x7fff4f923000 - 0x7fff4f948ff7 libsystem_kernel.dylib (4570.41.2) <5155A4C3-825B-3178-AC51-0D2D2F2A6618> /usr/lib/system/libsystem_kernel.dylib 0x7fff4f995000 - 0x7fff4f9b4fff libsystem_malloc.dylib (140.40.1) <36B22C99-D772-3039-9A4C-AA31389965E1> /usr/lib/system/libsystem_malloc.dylib 0x7fff4fa6f000 - 0x7fff4fa76ff7 libsystem_platform.dylib (161.20.1) /usr/lib/system/libsystem_platform.dylib 0x7fff4fa77000 - 0x7fff4fa82fff libsystem_pthread.dylib (301.30.1) /usr/lib/system/libsystem_pthread.dylib Powerstats for: Google Chrome He UUID: 2E6F17DF-BCE7-3217-AD28-F044D11AC430 Start time: 2018-02-21 08:58:44 +0000 End time: 2018-02-21 09:03:07 +0000 Microstackshots: 28 samples (18%) Primary state: 18 samples Non-Frontmost App, Kernel mode, Effective Thread QoS Default, Requested Thread QoS User Interactive, Override Thread QoS Unspecified User Activity: 28 samples Idle, 0 samples Active Power Source: 0 samples on Battery, 28 samples on AC 11 main + 1788 (Google Chrome Helper) [0x10324249c] 11 ChromeMain + 175 (Google Chrome Framework) [0x10465816f] 11 ??? (Google Chrome Framework + 26706564) [0x105fcc284] 11 ??? (Google Chrome Framework + 52763115) [0x1078a59eb] 11 ??? (Google Chrome Framework + 26709199) [0x105fccccf] 11 ??? (Google Chrome Framework + 97486024) [0x10a34c4c8] 11 ??? (Google Chrome Framework + 31070164) [0x1063f57d4] 11 ??? (Google Chrome Framework + 30926638) [0x1063d272e] 11 ??? (Google Chrome Framework + 30931278) [0x1063d394e] 11 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 277 (Foundation) [0x7fff29f29c16] 11 CFRunLoopRunSpecific + 487 (CoreFoundation) [0x7fff27e3d787] 5 __CFRunLoopRun + 1783 (CoreFoundation) [0x7fff27e3e117] 5 __CFRunLoopServiceMachPort + 341 (CoreFoundation) [0x7fff27e3edc5] 5 mach_msg_trap + 10 (libsystem_kernel.dylib) [0x7fff4f9357c2] 4 __CFRunLoopRun + 2378 (CoreFoundation) [0x7fff27e3e36a] 2 __CFRunLoopDoTimers + 346 (CoreFoundation) [0x7fff27e46bca] 2 __CFRunLoopDoTimer + 147 (CoreFoundation) [0x7fff27e46d13] 2 CFRelease + 57 (CoreFoundation) [0x7fff27dc9679] 2 1 objc_msgSend + 33 (libobjc.A.dylib) [0x7fff4ebf4ea1] 1 1 __CFRunLoopDoTimers + 215 (CoreFoundation) [0x7fff27e46b47] 1 -[__NSArrayM insertObject:atIndex:] + 295 (CoreFoundation) [0x7fff27de3ea7] 1 malloc_size + 84 (libsystem_malloc.dylib) [0x7fff4f99b11f] 1 ??? (Google Chrome Framework + 31465429) [0x106455fd5] 1 2 __CFRunLoopRun + 1293 (CoreFoundation) [0x7fff27e3df2d] 2 __CFRunLoopDoSources0 + 208 (CoreFoundation) [0x7fff27e3eab0] 2 __CFRunLoopDoSource0 + 108 (CoreFoundation) [0x7fff27f1326c] 2 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 (CoreFoundation) [0x7fff27e5ba21] 2 ??? (Google Chrome Framework + 30927887) [0x1063d2c0f] 2 ??? (Google Chrome Framework + 30871098) [0x1063c4e3a] 1 ??? (Google Chrome Framework + 30929667) [0x1063d3303] 1 ??? (Google Chrome Framework + 30922276) [0x1063d1624] 1 ??? (Google Chrome Framework + 30920628) [0x1063d0fb4] 1 ??? (Google Chrome Framework + 30771564) [0x1063ac96c] 1 ??? (Google Chrome Framework + 25550517) [0x105eb1eb5] 1 ??? (Google Chrome Framework + 30771564) [0x1063ac96c] 1 ??? (Google Chrome Framework + 25535683) [0x105eae4c3] 1 ??? (Google Chrome Framework + 25540406) [0x105eaf736] 1 ??? (Google Chrome Framework + 25507116) [0x105ea752c] 1 1 ??? (Google Chrome Framework + 30929734) [0x1063d3346] 1 -[NSAutoreleasePool drain] + 8 (Foundation) [0x7fff29f1e46d] 1 2 _pthread_wqthread + 1387 (libsystem_pthread.dylib) [0x7fff4fa7a1ca] 2 _dispatch_worker_thread3 + 101 (libdispatch.dylib) [0x7fff4f7b76ed] 2 _dispatch_root_queue_drain + 515 (libdispatch.dylib) [0x7fff4f7b7941] 2 _dispatch_queue_override_invoke + 880 (libdispatch.dylib) [0x7fff4f7c2c61] 2 _dispatch_client_callout + 8 (libdispatch.dylib) [0x7fff4f7b5d50] 2 _xpc_connection_resume_init + 14 (libxpc.dylib) [0x7fff4fab4488] 2 _xpc_connection_init + 752 (libxpc.dylib) [0x7fff4fab4788] 2 _xpc_connection_check_in + 292 (libxpc.dylib) [0x7fff4fab32dd] 2 _dispatch_queue_resume_finalize_activation + 42 (libdispatch.dylib) [0x7fff4f7c6f4a] 2 _dispatch_mach_finalize_activation + 50 (libdispatch.dylib) [0x7fff4f7d1410] 2 _dispatch_mach_install + 43 (libdispatch.dylib) [0x7fff4f7d1442] 2 _dispatch_source_refs_register + 140 (libdispatch.dylib) [0x7fff4f7cde34] 2 _dispatch_kq_unote_update + 257 (libdispatch.dylib) [0x7fff4f7d2b04] 2 _dispatch_kq_drain + 119 (libdispatch.dylib) [0x7fff4f7d3736] 2 kevent_id + 10 (libsystem_kernel.dylib) [0x7fff4f93fef2] 2 2 _pthread_wqthread + 1016 (libsystem_pthread.dylib) [0x7fff4fa7a057] 2 _dispatch_kevent_worker_thread + 877 (libdispatch.dylib) [0x7fff4f7ce924] 2 _dispatch_timers_run + 502 (libdispatch.dylib) [0x7fff4f7c176e] 2 _dispatch_runloop_queue_poke + 251 (libdispatch.dylib) [0x7fff4f7c9d5a] 2 _dispatch_send_wakeup_runloop_thread + 65 (libdispatch.dylib) [0x7fff4f7bce12] 2 mach_msg_trap + 10 (libsystem_kernel.dylib) [0x7fff4f9357c2] 2 _pthread_start + 377 (libsystem_pthread.dylib) [0x7fff4fa7a56d] 2 _pthread_body + 340 (libsystem_pthread.dylib) [0x7fff4fa7a6c1] 2 ??? (Google Chrome Framework + 31252583) [0x106422067] 2 ??? (Google Chrome Framework + 31182146) [0x106410d42] 2 ??? (Google Chrome Framework + 31180584) [0x106410728] 2 ??? (Google Chrome Framework + 31151057) [0x1064093d1] 2 ??? (Google Chrome Framework + 31150837) [0x1064092f5] 2 mach_msg_trap + 10 (libsystem_kernel.dylib) [0x7fff4f9357c2] 2 Binary Images: 0x103241000 - 0x10324dff7 com.google.Chrome.helper 64.0.3282.167 (3282.167) <2E6F17DF-BCE7-3217-AD28-F044D11AC430> /Applications/Google Chrome.app/Contents/Versions/64.0.3282.167/Google Chrome Helper.app/Contents/MacOS/Google Chrome Helper 0x104654000 - 0x10b3e4f77 com.google.Chrome.framework 64.0.3282.167 (3282.167) /Applications/Google Chrome.app/Contents/Versions/64.0.3282.167/Google Chrome Framework.framework/Versions/A/Google Chrome Framework 0x7fff27dbc000 - 0x7fff28255fff com.apple.CoreFoundation 6.9 (1451) <739D6558-3DF3-3181-AA07-BBE3882D3B7F> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation 0x7fff29f09000 - 0x7fff2a2cefff com.apple.Foundation 6.9 (1451) /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation 0x7fff4ebee000 - 0x7fff4efdf3b7 libobjc.A.dylib (723) <37A7D77E-952C-3F5D-970B-3CDE349B2322> /usr/lib/libobjc.A.dylib 0x7fff4f7b4000 - 0x7fff4f7edff7 libdispatch.dylib (913.30.4) <7D0E3183-282B-3FEE-A734-2C0ADC092084> /usr/lib/system/libdispatch.dylib 0x7fff4f923000 - 0x7fff4f948ff7 libsystem_kernel.dylib (4570.41.2) <5155A4C3-825B-3178-AC51-0D2D2F2A6618> /usr/lib/system/libsystem_kernel.dylib 0x7fff4f995000 - 0x7fff4f9b4fff libsystem_malloc.dylib (140.40.1) <36B22C99-D772-3039-9A4C-AA31389965E1> /usr/lib/system/libsystem_malloc.dylib 0x7fff4fa77000 - 0x7fff4fa82fff libsystem_pthread.dylib (301.30.1) /usr/lib/system/libsystem_pthread.dylib 0x7fff4faac000 - 0x7fff4fad8ff7 libxpc.dylib (1205.30.29) /usr/lib/system/libxpc.dylib Powerstats for: CiscoVideoGuardM UUID: 26970BC3-D274-3FC8-A666-24BF4BD7531B Start time: 2018-02-21 08:58:49 +0000 End time: 2018-02-21 09:02:21 +0000 Microstackshots: 13 samples (8%) Primary state: 10 samples Non-Frontmost App, Kernel mode, Effective Thread QoS Default, Requested Thread QoS Default, Override Thread QoS Unspecified User Activity: 13 samples Idle, 0 samples Active Power Source: 0 samples on Battery, 13 samples on AC 13 _pthread_start + 357 (libsystem_pthread.dylib) [0xa782c3b2] 13 _pthread_body + 347 (libsystem_pthread.dylib) [0xa782c50d] 13 ??? (CiscoVideoGuardMonitor + 2525622) [0x3179b6] 13 ??? (CiscoVideoGuardMonitor + 263818) [0xef68a] 13 ??? (CiscoVideoGuardMonitor + 262612) [0xef1d4] 11 ??? (CiscoVideoGuardMonitor + 345957) [0x103765] 10 ??? (CiscoVideoGuardMonitor + 346807) [0x103ab7] 10 pthread_cond_timedwait$UNIX2003 + 52 (libsystem_pthread.dylib) [0xa7832535] 10 __psynch_cvwait + 10 (libsystem_kernel.dylib) [0xa76fdd26] 1 ??? (CiscoVideoGuardMonitor + 346809) [0x103ab9] 1 2 ??? (CiscoVideoGuardMonitor + 345007) [0x1033af] 2 ??? (CiscoVideoGuardMonitor + 116197) [0xcb5e5] 2 ??? (CiscoVideoGuardMonitor + 117105) [0xcb971] 2 gmtime_r + 22 (libsystem_c.dylib) [0xa7646910] 2 gmtsub + 29 (libsystem_c.dylib) [0xa76462cd] 2 notify_check_tz + 16 (libsystem_c.dylib) [0xa76450b0] 2 Binary Images: 0xaf000 - 0x3c2ff3 com.cisco.videoguardmonitor 1.0 (1.0) <26970BC3-D274-3FC8-A666-24BF4BD7531B> /Users/USER/Library/Cisco/*/VideoGuardMonitor.bundle/Contents/MacOS/CiscoVideoGuardMonitor 0xa75f3000 - 0xa767ffff libsystem_c.dylib (1244.30.3) <8BCBF89D-5CE7-3950-884A-86E37DBF2660> /usr/lib/system/libsystem_c.dylib 0xa76e1000 - 0xa7704ff7 libsystem_kernel.dylib (4570.41.2) <649BB7E7-6378-3D2C-BBC6-ED2577E551B9> /usr/lib/system/libsystem_kernel.dylib 0xa7829000 - 0xa7833ff3 libsystem_pthread.dylib (301.30.1) <7409C1E5-F3BA-3AB3-ADC1-9DCD356C6C13> /usr/lib/system/libsystem_pthread.dylib