Apple

PasscodeSettingsSubscriber

Apple

PasscodeSettingsSubscriber # full_path = "/System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/PasscodeSettingsSubscriber.xpc/PasscodeSettingsSubscriber" runs_as = "mobile"

passd

Apple

passd # full_path = "/System/Library/PrivateFrameworks/PassKitCore.framework/passd" runs_as = "mobile" passd manages Apple Pay and Wallet operations.

pasted

Apple

pasted # full_path = "/System/Library/PrivateFrameworks/Pasteboard.framework/Support/pasted" runs_as = "mobile"

peopled

Apple

peopled # full_path = "/System/Library/PrivateFrameworks/People.framework/peopled" runs_as = "mobile" Daemon related to People private framework.

PerfPowerTelemetryClientRegistrationService

Apple

PerfPowerTelemetryClientRegistrationService # full_path = "/System/Library/PrivateFrameworks/PowerLog.framework/XPCServices/PerfPowerTelemetryClientRegistrationService.xpc/PerfPowerTelemetryClientRegistrationService" Run as root and mobile. The binary is a part of PowerLog private framework.

PerfPowerTelemetryReaderService

Apple

PerfPowerTelemetryReaderService # full_path = "/System/Library/PrivateFrameworks/PerfPowerTelemetryReader.framework/XPCServices/PerfPowerTelemetryReaderService.xpc/PerfPowerTelemetryReaderService" runs_as = "root" The binary is a part of PowerLog private framework.

pfd

Apple

pfd # full_path = "/usr/libexec/pfd" runs_as = "root" Daemon which provides an interface to the kernel’s firewall and Internet Sharing subsystem on behalf of applications.

photoanalysisd

Apple

photoanalysisd # full_path = "/System/Library/PrivateFrameworks/PhotoAnalysis.framework/Support/photoanalysisd" runs_as = "mobile" photoanalysisd is the photo library analysis agent. It handles background processing of photo libraries for Memories, People and scene or object based search.