Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

rpmurray

macrumors 68020
Original poster
Feb 21, 2017
2,147
4,332
Back End of Beyond
Ever since I made the mistake of updating XProtect to the latest release I've been getting crash reports indicating that XProtectRemediatorDubRobber quit unexpectedly because "Plugin attempted to connect to process impersonating PluginService". These pop up about four or five times a day. Ran Malwarebytes just to see if it's something to worry about but it reports no problems. Google search has been singularly unhelpful.

Code:
-------------------------------------
Translated Report (Full Report Below)
-------------------------------------

Process:               XProtectRemediatorDubRobber [84477]
Path:                  /Library/Apple/*/XProtect.app/Contents/MacOS/XProtectRemediatorDubRobber
Identifier:            XProtectRemediatorDubRobber
Version:               ???
Code Type:             X86-64 (Native)
Parent Process:        XProtectPluginService [66546]
Responsible:           XProtectPluginService [66546]
User ID:               501

Date/Time:             2022-09-09 20:08:14.8367 -0500
OS Version:            macOS 12.3.1 (21E258)
Report Version:        12
Bridge OS Version:     6.4 (19P4243)
Anonymous UUID:        AD709049-909A-5601-4F66-672F7B07D2FB


Time Awake Since Boot: 3900000 seconds

System Integrity Protection: enabled

Crashed Thread:        0  Dispatch queue: com.apple.main-thread

Exception Type:        EXC_CRASH (SIGABRT)
Exception Codes:       0x0000000000000000, 0x0000000000000000
Exception Note:        EXC_CORPSE_NOTIFY

Application Specific Information:
Pipeline ID: 98A9D3EC-A521-469A-AB0D-D7296257A02B
Plugin attempted to connect to process impersonating PluginService
abort() called


Thread 0 Crashed::  Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib                0x7ff80532500e __pthread_kill + 10
1   libsystem_pthread.dylib               0x7ff80535b1ff pthread_kill + 263
2   libsystem_c.dylib                     0x7ff8052a6d24 abort + 123
3   XProtectRemediatorDubRobber              0x101820cd0 0x1017c4000 + 380112
4   XProtectRemediatorDubRobber              0x101820145 0x1017c4000 + 377157
5   XProtectRemediatorDubRobber              0x1017c7e19 0x1017c4000 + 15897
6   dyld                                     0x10f45e51e start + 462

Thread 1:
0   libsystem_pthread.dylib               0x7ff805356f48 start_wqthread + 0


Thread 0 crashed with X86 Thread State (64-bit):
  rax: 0x0000000000000000  rbx: 0x000000010f4d9600  rcx: 0x00007ff7be73b718  rdx: 0x0000000000000000
  rdi: 0x0000000000000103  rsi: 0x0000000000000006  rbp: 0x00007ff7be73b740  rsp: 0x00007ff7be73b718
   r8: 0x0000000000001523   r9: 0x000000000000152a  r10: 0x0000000000000000  r11: 0x0000000000000246
  r12: 0x0000000000000103  r13: 0x00007ff7be73b928  r14: 0x0000000000000006  r15: 0x0000000000000016
  rip: 0x00007ff80532500e  rfl: 0x0000000000000246  cr2: 0x00007ff84505c608
 
Logical CPU:     0
Error Code:      0x02000148
Trap Number:     133


Binary Images:
    0x7ff80531d000 -     0x7ff805354fff libsystem_kernel.dylib (*) <26a59789-b846-3ed4-96dc-8dbef3c0c8e7> /usr/lib/system/libsystem_kernel.dylib
    0x7ff805355000 -     0x7ff805360fff libsystem_pthread.dylib (*) <2f6c275d-7e14-3d31-a924-e1bb41d2415f> /usr/lib/system/libsystem_pthread.dylib
    0x7ff805225000 -     0x7ff8052adfff libsystem_c.dylib (*) <8e54eca2-9bd8-3482-9589-b9574434d1aa> /usr/lib/system/libsystem_c.dylib
       0x1017c4000 -        0x101877fff XProtectRemediatorDubRobber (*) <8da60af1-2b3e-30f5-95fb-94f8084a2617> /Library/Apple/*/XProtect.app/Contents/MacOS/XProtectRemediatorDubRobber
       0x10f459000 -        0x10f4c4fff dyld (*) <dd9e80de-fb3b-349b-96a4-46874ad34d11> /usr/lib/dyld

External Modification Summary:
  Calls made by other processes targeting this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
  Calls made by this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
  Calls made by all processes on this machine:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0

VM Region Summary:
ReadOnly portion of Libraries: Total=976.2M resident=0K(0%) swapped_out_or_unallocated=976.2M(100%)
Writable regions: Total=300.9M written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=300.9M(100%)

                                VIRTUAL   REGION
REGION TYPE                        SIZE    COUNT (non-coalesced)
===========                     =======  =======
Activity Tracing                   256K        1
Dispatch continuations           128.0M        1
Kernel Alloc Once                    8K        1
MALLOC                            44.1M       17
MALLOC guard page                   24K        5
MALLOC_MEDIUM (reserved)         120.0M        1         reserved VM address space (unallocated)
STACK GUARD                       56.0M        2
Stack                             8712K        2
VM_ALLOCATE                          8K        2
__DATA                            21.9M      398
__DATA_CONST                      19.7M      243
__DATA_DIRTY                      1130K      148
__FONT_DATA                          4K        1
__LINKEDIT                       651.5M        9
__OBJC_RO                         82.6M        1
__OBJC_RW                         3200K        2
__TEXT                           324.7M      414
__UNICODE                          592K        1
dyld private memory               1024K        1
mapped file                         48K        1
shared memory                       12K        2
===========                     =======  =======
TOTAL                              1.4G     1253
TOTAL, minus reserved VM space     1.3G     1253



-----------
Full Report
-----------

{"app_name":"XProtectRemediatorDubRobber","timestamp":"2022-09-09 20:08:14.00 -0500","app_version":"","slice_uuid":"8da60af1-2b3e-30f5-95fb-94f8084a2617","build_version":"","platform":1,"share_with_app_devs":0,"is_first_party":1,"bug_type":"309","os_version":"macOS 12.3.1 (21E258)","incident_id":"53525838-923E-4DE5-9D5E-542090E43699","name":"XProtectRemediatorDubRobber"}
{
  "uptime" : 3900000,
  "procLaunch" : "2022-09-09 20:08:14.8193 -0500",
  "procRole" : "Unspecified",
  "version" : 2,
  "userID" : 501,
  "deployVersion" : 210,
  "modelCode" : "iMac20,2",
  "procStartAbsTime" : 3904430727103735,
  "coalitionID" : 435486,
  "osVersion" : {
    "train" : "macOS 12.3.1",
    "build" : "21E258",
    "releaseType" : "User"
  },
  "captureTime" : "2022-09-09 20:08:14.8367 -0500",
  "incident" : "53525838-923E-4DE5-9D5E-542090E43699",
  "bug_type" : "309",
  "pid" : 84477,
  "procExitAbsTime" : 3904430744070095,
  "cpuType" : "X86-64",
  "procName" : "XProtectRemediatorDubRobber",
  "procPath" : "\/Library\/Apple\/*\/XProtect.app\/Contents\/MacOS\/XProtectRemediatorDubRobber",
  "parentProc" : "XProtectPluginService",
  "parentPid" : 66546,
  "coalitionName" : "com.apple.XprotectFramework.PluginService",
  "crashReporterKey" : "AD709049-909A-5601-4F66-672F7B07D2FB",
  "responsiblePid" : 66546,
  "responsibleProc" : "XProtectPluginService",
  "bridgeVersion" : {"build":"19P4243","train":"6.4"},
  "sip" : "enabled",
  "isCorpse" : 1,
  "exception" : {"codes":"0x0000000000000000, 0x0000000000000000","rawCodes":[0,0],"type":"EXC_CRASH","signal":"SIGABRT"},
  "asi" : {"XProtectRemediatorDubRobber":["Pipeline ID: 98A9D3EC-A521-469A-AB0D-D7296257A02B","Plugin attempted to connect to process impersonating PluginService"],"libsystem_c.dylib":["abort() called"]},
  "extMods" : {"caller":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"system":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"targeted":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"warnings":0},
  "faultingThread" : 0,
  "threads" : [{"triggered":true,"id":52219703,"threadState":{"r13":{"value":140702028904744},"rax":{"value":0},"rflags":{"value":582},"cpu":{"value":0},"r14":{"value":6},"rsi":{"value":6},"r8":{"value":5411},"cr2":{"value":140704286623240},"rdx":{"value":0},"r10":{"value":0},"r9":{"value":5418},"r15":{"value":22},"rbx":{"value":4551710208,"symbolLocation":0,"symbol":"_main_thread"},"trap":{"value":133},"err":{"value":33554760},"r11":{"value":582},"rip":{"value":140703215800334,"matchesCrashFrame":1},"rbp":{"value":140702028904256},"rsp":{"value":140702028904216},"r12":{"value":259},"rcx":{"value":140702028904216},"flavor":"x86_THREAD_STATE","rdi":{"value":259}},"queue":"com.apple.main-thread","frames":[{"imageOffset":32782,"symbol":"__pthread_kill","symbolLocation":10,"imageIndex":0},{"imageOffset":25087,"symbol":"pthread_kill","symbolLocation":263,"imageIndex":1},{"imageOffset":531748,"symbol":"abort","symbolLocation":123,"imageIndex":2},{"imageOffset":380112,"imageIndex":3},{"imageOffset":377157,"imageIndex":3},{"imageOffset":15897,"imageIndex":3},{"imageOffset":21790,"symbol":"start","symbolLocation":462,"imageIndex":4}]},{"id":52219704,"frames":[{"imageOffset":8008,"symbol":"start_wqthread","symbolLocation":0,"imageIndex":1}]}],
  "usedImages" : [
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703215767552,
    "size" : 229376,
    "uuid" : "26a59789-b846-3ed4-96dc-8dbef3c0c8e7",
    "path" : "\/usr\/lib\/system\/libsystem_kernel.dylib",
    "name" : "libsystem_kernel.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703215996928,
    "size" : 49152,
    "uuid" : "2f6c275d-7e14-3d31-a924-e1bb41d2415f",
    "path" : "\/usr\/lib\/system\/libsystem_pthread.dylib",
    "name" : "libsystem_pthread.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 140703214751744,
    "size" : 561152,
    "uuid" : "8e54eca2-9bd8-3482-9589-b9574434d1aa",
    "path" : "\/usr\/lib\/system\/libsystem_c.dylib",
    "name" : "libsystem_c.dylib"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 4319887360,
    "size" : 737280,
    "uuid" : "8da60af1-2b3e-30f5-95fb-94f8084a2617",
    "path" : "\/Library\/Apple\/*\/XProtect.app\/Contents\/MacOS\/XProtectRemediatorDubRobber",
    "name" : "XProtectRemediatorDubRobber"
  },
  {
    "source" : "P",
    "arch" : "x86_64",
    "base" : 4551184384,
    "size" : 442368,
    "uuid" : "dd9e80de-fb3b-349b-96a4-46874ad34d11",
    "path" : "\/usr\/lib\/dyld",
    "name" : "dyld"
  }
],
  "sharedCache" : {
  "base" : 140703212724224,
  "size" : 15224815616,
  "uuid" : "6cc5ecdc-5119-37f0-9a85-4f48a50f5f78"
},
  "vmSummary" : "ReadOnly portion of Libraries: Total=976.2M resident=0K(0%) swapped_out_or_unallocated=976.2M(100%)\nWritable regions: Total=300.9M written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=300.9M(100%)\n\n                                VIRTUAL   REGION \nREGION TYPE                        SIZE    COUNT (non-coalesced) \n===========                     =======  ======= \nActivity Tracing                   256K        1 \nDispatch continuations           128.0M        1 \nKernel Alloc Once                    8K        1 \nMALLOC                            44.1M       17 \nMALLOC guard page                   24K        5 \nMALLOC_MEDIUM (reserved)         120.0M        1         reserved VM address space (unallocated)\nSTACK GUARD                       56.0M        2 \nStack                             8712K        2 \nVM_ALLOCATE                          8K        2 \n__DATA                            21.9M      398 \n__DATA_CONST                      19.7M      243 \n__DATA_DIRTY                      1130K      148 \n__FONT_DATA                          4K        1 \n__LINKEDIT                       651.5M        9 \n__OBJC_RO                         82.6M        1 \n__OBJC_RW                         3200K        2 \n__TEXT                           324.7M      414 \n__UNICODE                          592K        1 \ndyld private memory               1024K        1 \nmapped file                         48K        1 \nshared memory                       12K        2 \n===========                     =======  ======= \nTOTAL                              1.4G     1253 \nTOTAL, minus reserved VM space     1.3G     1253 \n",
  "legacyInfo" : {
  "threadTriggered" : {
    "queue" : "com.apple.main-thread"
  }
},
  "trialInfo" : {
  "rollouts" : [
    {
      "rolloutId" : "61301e3a61217b3110231469",
      "factorPackIds" : {
        "SIRI_FIND_MY_CONFIGURATION_FILES" : "6216ae152a40e71046e16225"
      },
      "deploymentId" : 240000016
    },
    {
      "rolloutId" : "607844aa04477260f58a8077",
      "factorPackIds" : {
        "SIRI_MORPHUN_ASSETS" : "6103050cbfe6dc472e1c982a"
      },
      "deploymentId" : 240000066
    }
  ],
  "experiments" : [

  ]
}
}

Model: iMac20,2, BootROM 1731.100.130.0.0 (iBridge: 19.16.14243.0.0,0), 8 processors, 8-Core Intel Core i7, 3.8 GHz, 128 GB, SMC
Graphics: AMD Radeon Pro 5700 XT, AMD Radeon Pro 5700 XT, PCIe, 16 GB
Display: iMac, Retina 5K (5120 x 2880), Main, MirrorOff, Online
Memory Module: Slot 1 (Channel A / DIMM 1), 32 GB, DDR4, 2667 MHz, 85F7, J644GU44J9266NQ
Memory Module: Slot 2 (Channel A / DIMM 0), 32 GB, DDR4, 2667 MHz, 85F7, J644GU44J9266NQ
Memory Module: Slot 3 (Channel B / DIMM 1), 32 GB, DDR4, 2667 MHz, 85F7, J644GU44J9266NQ
Memory Module: Slot 4 (Channel B / DIMM 0), 32 GB, DDR4, 2667 MHz, 85F7, J644GU44J9266NQ
AirPort: spairport_wireless_card_type_wifi (0x14E4, 0x7BF), wl0: Jul 12 2021 18:02:56 version 9.30.464.0.32.5.76 FWID 01-c081cfed
Bluetooth: Version (null), 0 services, 0 devices, 0 incoming serial ports
Network Service: Ethernet, Ethernet, en0
USB Device: USB31Bus
USB Device: USB3.1 Hub
USB Device: USB Optical Mouse
USB Device: Back-UPS RS 1500G FW:865.L5 .D USB FW:L5
USB Device: Magic Keyboard with Numeric Keypad
USB Device: USB2.1 Hub
USB Device: T2Bus
USB Device: Headset
USB Device: Ambient Light Sensor
USB Device: FaceTime HD Camera (Built-in)
USB Device: Apple T2 Controller
Thunderbolt Bus: iMac, Apple Inc., 63.3
 
Howard Oakley mentions these crashes in a recent blog post, and suggests that running in safe mode for a few minutes before rebooting may help:

There may be a simple solution to those crashes, though: restarting your Mac. If they continue to occur after that, try the universal panacea of starting your Mac up in Safe mode; on Intel Macs, that’s a matter of holding the Shift key during startup, but Apple silicon Macs need to be shut down and started up in Recovery before you can opt for Safe mode. Once your Mac has been running in Safe mode for a few minutes, restart it in normal mode again.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.