I work for SMEs. We encounter a recurring problem with various customers who operate MacOS 15.5 (Sequoia), where Google Chrome copies or broken. After a successful installation, Chrome works normally for a certain period of time, but later become unlimited. After the inspection is missing. Application.
- Chrome is installed from the official .DMG and initially works as expected. At some point later (often after restart or idle period),
- Chrome doesn’t start. Application package remains in /applications, but key files are missing. Run
spctl --assess
Reports the application as invalid or damaged. - Attributes com.apple.quarantine often missing in a bundle.
- Reinstalling Chrome restores the function, but the problem can be repeated.
- One customer reported that the same thing happens with Microsoft Edge and I have seen community messages that indicate that Brave can also be affected. These are chrome -based browsers.
- Vivaldi, also on the basis of Chromia, seems to be influenced.
- Our tools for endpoint protection or MDM tools (eg Crowdstrike, Intune) are not recorded any alert or action.
- We suspect that MacOS security tools (eg MRT, GATEEKEEPER or XPROTECT) can quietly remove or quarantines of chrome files.
- Tested on Clean MacOS 15.5 (VM and Personal MacBook Pro): Chrome installs and runs well, no corruption is observed.
- Manually run MRT using:
sudo /Library/Apple/System/Library/CoreServices/MRT.app/Contents/MacOS/MRT -a
He leaves quietly without a hint of effect. - MRT protocols show normal start and shutdown behavior – no deletion signature failure. Solution: Install Chrome to ~/Applications (User Space) allows users to reinstall without administrator rights. This has been avoiding the problem, but it is not a long -term solution.
- Has anyone else observed this behavior on MacOS 15.5 with chrome or other chromia -based browsers?
- Could they be for the removal of files from the valid Installation of Chrome responsible MRT, Gatekeeper or Xprotect?
- Are there protocols or tools that can confirm whether the system process will delete these files?
- Any suggestions for monitoring or preventing this behavior?
Any insight or suggestions would be highly appreciated. They like to provide protocols or test results if they are useful.