Disk Drill New Fork (PID: 597, Parent: 582).launchctl (MD5: 17fad4b994d600d0a5b6bc02b55c2c80) Arguments: /bin/launchctl unload /Library/LaunchDaemons/.runner (MD5: 91530cdd774c8bc4932e421f4ffafcc8) Arguments: /Volumes/DiskDrill/Disk Drill.app/Contents/Resources/runner /bin/launchctl unload /Library/LaunchDaemons/.security_authtrampoline (MD5: 1f0524c40489885f3c9320bace20f852) Arguments: /usr/libexec/security_authtrampoline /Volumes/DiskDrill/Disk Drill.app/Contents/Resources/runner auth 7 /bin/launchctl unload /Library/LaunchDaemons/.

Disk Drill New Fork (PID: 595, Parent: 582).

security_authtrampoline (MD5: 1f0524c40489885f3c9320bace20f852) Arguments: /usr/libexec/security_authtrampoline /bin/mkdir auth 7 /Library/LaunchDaemons/.

Disk Drill New Fork (PID: 594, Parent: 582).

mkdir (MD5: 135a3b94b3d9efccb4c8cd23ac404571) Arguments: /bin/mkdir /Library/Application Support/CleverFiles/.

security_authtrampoline (MD5: 1f0524c40489885f3c9320bace20f852) Arguments: /usr/libexec/security_authtrampoline /bin/mkdir auth 7 /Library/Application Support/CleverFiles/.

Disk Drill New Fork (PID: 591, Parent: 582).

Disk Drill (MD5: af461c028323ebbb32b9256ef7c7105f) Arguments: /Volumes/DiskDrill/Disk Drill.app/Contents/MacOS/Disk Drill.

xpcproxy New Fork (PID: 582, Parent: 1).

Disk drill by cleverfiles