ContainerMetadataExtractor #

 full_path = "/System/Library/PrivateFrameworks/iCloudDriveService.framework/XPCServices/ContainerMetadataExtractor.xpc/ContainerMetadataExtractor"
 runs_as = "mobile"