Apple

PasscodeSettingsSubscriber

PasscodeSettingsSubscriber #

 full_path = "/System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/PasscodeSettingsSubscriber.xpc/PasscodeSettingsSubscriber"
 runs_as = "mobile"

passd

passd #

 full_path = "/System/Library/PrivateFrameworks/PassKitCore.framework/passd"
 runs_as = "mobile"

passd manages Apple Pay and Wallet operations.

pasted

pasted #

 full_path = "/System/Library/PrivateFrameworks/Pasteboard.framework/Support/pasted"
 runs_as = "mobile"

peopled

peopled #

 full_path = "/System/Library/PrivateFrameworks/People.framework/peopled"
 runs_as = "mobile"

Daemon related to People private framework.

PerfPowerTelemetryClientRegistrationService

PerfPowerTelemetryClientRegistrationService #

 full_path = "/System/Library/PrivateFrameworks/PowerLog.framework/XPCServices/PerfPowerTelemetryClientRegistrationService.xpc/PerfPowerTelemetryClientRegistrationService"
  • Run as root and mobile.
  • The binary is a part of PowerLog private framework.

PerfPowerTelemetryReaderService

PerfPowerTelemetryReaderService #

 full_path = "/System/Library/PrivateFrameworks/PerfPowerTelemetryReader.framework/XPCServices/PerfPowerTelemetryReaderService.xpc/PerfPowerTelemetryReaderService"
 runs_as = "root"

The binary is a part of PowerLog private framework.

pfd

pfd #

 full_path = "/usr/libexec/pfd"
 runs_as = "root"

Daemon which provides an interface to the kernel’s firewall and Internet Sharing subsystem on behalf of applications.

photoanalysisd

photoanalysisd #

 full_path = "/System/Library/PrivateFrameworks/PhotoAnalysis.framework/Support/photoanalysisd"
 runs_as = "mobile"

photoanalysisd is the photo library analysis agent. It handles background processing of photo libraries for Memories, People and scene or object based search.