search

tweaselORG / appstraction

An abstraction layer for common instrumentation functions (e.g. installing and starting apps, setting preferences, etc.) on Android and iOS.
MIT License
6 stars 1 forks source link

iOS: Support `getPidForAppId()` and `stopApp()` without `frida` capability #46

Open baltpeter opened 1 year ago

baltpeter commented 1 year ago

Currently, getPidForAppId() and stopApp() rely on Frida. It should be possible to alternatively do the same using the ssh capability.

baltpeter commented 1 year ago

ps alone isn't really helpful:

root# ps 
  PID TTY           TIME CMD
    1 ??         0:00.00 /sbin/launchd
    2 ??         0:00.00 <defunct>
   31 ??         0:00.00 /usr/libexec/UserEventAgent (System)
   32 ??         0:00.00 /usr/libexec/logd
   33 ??         0:00.00 /usr/libexec/runningboardd
   35 ??         0:00.00 /System/Library/PrivateFrameworks/People.framework/peopled
   36 ??         0:00.00 /usr/sbin/mediaserverd
   37 ??         0:00.00 /System/Library/PrivateFrameworks/AssistantServices.framework/assistantd
   38 ??         0:00.00 /usr/libexec/routined LAUNCHED_BY_LAUNCHD
   39 ??         0:00.00 /System/Library/PrivateFrameworks/MediaRemote.framework/Support/mediaremoted
   40 ??         0:00.00 /System/Library/PrivateFrameworks/AXAssetLoader.framework/Support/axassetsd
   41 ??         0:00.00 /usr/libexec/misd
   42 ??         0:00.00 /System/Library/Frameworks/HealthKit.framework/healthd
   43 ??         0:00.00 /usr/libexec/configd
   45 ??         0:00.00 /System/Library/PrivateFrameworks/TCC.framework/Support/tccd
   46 ??         0:00.00 /System/Library/CoreServices/powerd.bundle/powerd
   47 ??         0:00.00 /usr/libexec/atc
   48 ??         0:00.00 /usr/sbin/WirelessRadioManagerd
   49 ??         0:00.00 /jbin/jbloader
   50 ??         0:00.00 /System/Library/PrivateFrameworks/BiomeStreams.framework/Support/biomed
   51 ??         0:00.00 /usr/sbin/wifid
   52 ??         0:00.00 /usr/libexec/remoted
   53 ??         0:00.00 /usr/libexec/keybagd -t 15
   54 ??         0:00.00 /System/Library/PrivateFrameworks/FamilyNotification.framework/familynotificationd
   55 ??         0:00.00 /usr/libexec/amfid
   57 ??         0:00.00 /usr/libexec/seld
   58 ??         0:00.00 /System/Library/PrivateFrameworks/MobileTimer.framework/Executables/mobiletimerd
   59 ??         0:00.00 /System/Library/PrivateFrameworks/MobileSoftwareUpdate.framework/Support/softwareupdated
   60 ??         0:00.00 /usr/libexec/watchdogd
   61 ??         0:00.00 /usr/libexec/nfcd
   62 ??         0:00.00 /System/Library/PrivateFrameworks/IDS.framework/identityservicesd.app/identityservicesd
   63 ??         0:00.00 /usr/libexec/wcd
   64 ??         0:00.00 /usr/libexec/thermalmonitord
   65 ??         0:00.00 /System/Library/PrivateFrameworks/CoreDuetContext.framework/Resources/contextstored
   67 ??         0:00.00 /System/Library/PrivateFrameworks/AskPermission.framework/Support/askpermissiond
   68 ??         0:00.00 /usr/libexec/timed
   69 ??         0:00.00 /usr/libexec/sharingd
   70 ??         0:00.00 /System/Library/Frameworks/ManagedSettings.framework/ManagedSettingsAgent
   71 ??         0:00.00 /usr/libexec/locationd
   72 ??         0:00.00 /System/Library/PrivateFrameworks/IMCore.framework/imagent.app/imagent
   73 ??         0:00.00 /usr/libexec/containermanagerd --runmode=normal --default-user=mobile --user-container-mode=fixed --bundle-container-mo
   74 ??         0:00.00 /usr/libexec/cloudpaird
   75 ??         0:00.00 /System/Library/PrivateFrameworks/NanoPreferencesSync.framework/nanoprefsyncd -companion
   76 ??         0:00.00 /usr/libexec/driverkitd
   77 ??         0:00.00 /usr/libexec/dasd
   78 ??         0:00.00 /usr/libexec/bluetoothuserd
   79 ??         0:00.00 /System/Library/PrivateFrameworks/SleepDaemon.framework/sleepd
   81 ??         0:00.00 /usr/libexec/lockdownd
   82 ??         0:00.00 /usr/sbin/distnoted daemon
   84 ??         0:00.00 OTACrashCopier
   85 ??         0:00.00 /System/Library/PrivateFrameworks/AppleCredentialManager.framework/AppleCredentialManagerDaemon
   87 ??         0:00.00 /usr/libexec/peakpowermanagerd
   88 ??         0:00.00 /System/Library/PrivateFrameworks/MapsSupport.framework/navd
   89 ??         0:00.00 /usr/libexec/safetyalertsd
   90 ??         0:00.00 /usr/libexec/rapportd
   92 ??         0:00.00 /usr/libexec/usermanagerd -t 15
   93 ??         0:00.00 /usr/sbin/bluetoothd
   94 ??         0:00.00 /System/Library/PrivateFrameworks/AppleMediaServices.framework/amsaccountsd
   95 ??         0:00.00 /usr/sbin/fairplayd.H2
   96 ??         0:00.00 /System/Library/Frameworks/CoreTelephony.framework/Support/CommCenter
   97 ??         0:00.00 /usr/libexec/fseventsd
   98 ??         0:00.00 /usr/libexec/IOMFB_bics_daemon
   99 ??         0:00.00 /usr/sbin/notifyd
  100 ??         0:00.00 /usr/sbin/cfprefsd daemon
  101 ??         0:00.00 /usr/libexec/logd_helper
  102 ??         0:00.00 /usr/libexec/pfd
  103 ??         0:00.00 /System/Library/DriverExtensions/com.apple.AppleUserHIDDrivers.dext/com.apple.AppleUserHIDDrivers com.apple.driverkit.A
  104 ??         0:00.00 /System/Library/DriverExtensions/com.apple.DriverKit-AppleBCMWLAN.dext/com.apple.DriverKit-AppleBCMWLAN com.apple.bcmwl
  107 ??         0:00.00 /usr/libexec/PowerUIAgent
  108 ??         0:00.00 /usr/libexec/MobileGestaltHelper
  109 ??         0:00.00 /System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Support/awdd
  110 ??         0:00.00 /usr/libexec/nanoregistryd
  112 ??         0:00.00 /System/Library/PrivateFrameworks/CoreAnalytics.framework/Support/analyticsd
  113 ??         0:00.00 /System/Library/PrivateFrameworks/PowerLog.framework/XPCServices/PerfPowerTelemetryClientRegistrationService.xpc/PerfPo
  114 ??         0:00.00 /System/Library/PrivateFrameworks/PassKitCore.framework/passd
  115 ??         0:00.00 /usr/libexec/mobileassetd
  116 ??         0:00.00 /System/Library/PrivateFrameworks/DoNotDisturbServer.framework/Support/donotdisturbd
  117 ??         0:00.00 /System/Library/Frameworks/Accounts.framework/accountsd
  118 ??         0:00.00 /usr/libexec/biometrickitd
  119 ??         0:00.00 /usr/libexec/lsd
  120 ??         0:00.00 /usr/libexec/nehelper
  121 ??         0:00.00 /System/Library/PrivateFrameworks/TelephonyUtilities.framework/callservicesd
  122 ??         0:00.00 /System/Library/PrivateFrameworks/VoiceShortcuts.framework/Support/siriactionsd
  123 ??         0:00.00 /usr/libexec/seserviced
  125 ??         0:00.00 /usr/libexec/profiled
  126 ??         0:00.00 /System/Library/PrivateFrameworks/InstallCoordination.framework/Support/installcoordinationd
  127 ??         0:00.00 /System/Library/PrivateFrameworks/iCloudNotification.framework/ind
  128 ??         0:00.00 /usr/libexec/remotepairingdeviced
  129 ??         0:00.00 /usr/libexec/dmd
  130 ??         0:00.00 /System/Library/PrivateFrameworks/CoreSpeech.framework/corespeechd
  131 ??         0:00.00 /System/Library/PrivateFrameworks/CalendarDaemon.framework/Support/calaccessd
  132 ??         0:00.00 /usr/libexec/adprivacyd
  133 ??         0:00.00 /System/Library/PrivateFrameworks/ScreenTimeCore.framework/ScreenTimeAgent
  134 ??         0:00.00 /System/Library/PrivateFrameworks/MapsSupport.framework/mapspushd
  135 ??         0:00.00 /System/Library/PrivateFrameworks/SessionCore.framework/Support/sessionkitd
  136 ??         0:00.00 /System/Library/Frameworks/Security.framework/CloudKeychainProxy.bundle/CloudKeychainProxy
  137 ??         0:00.00 /System/Library/PrivateFrameworks/ChronoCore.framework/Support/chronod
  138 ??         0:00.00 /System/Library/PrivateFrameworks/AuthKit.framework/akd
  139 ??         0:00.00 /usr/libexec/nsurlsessiond
  140 ??         0:00.00 /usr/libexec/securityd
  141 ??         0:00.00 /usr/libexec/symptomsd
  142 ??         0:00.00 /usr/sbin/audioclocksyncd
  143 ??         0:00.00 /System/Library/PrivateFrameworks/SyncedDefaults.framework/Support/syncdefaultsd
  144 ??         0:00.00 /usr/sbin/BlueTool -R
  145 ??         0:00.00 /usr/libexec/fmflocatord
  146 ??         0:00.00 /usr/libexec/findmydeviced
  147 ??         0:00.00 /System/Library/PrivateFrameworks/ApplePushService.framework/apsd
  148 ??         0:00.00 /System/Library/Frameworks/Security.framework/XPCServices/TrustedPeersHelper.xpc/TrustedPeersHelper
  149 ??         0:00.00 /System/Library/PrivateFrameworks/TouchRemote.framework/Support/touchsetupd
  150 ??         0:00.00 /System/Library/PrivateFrameworks/CarKit.framework/Support/carkitd
  151 ??         0:00.00 /usr/libexec/networkserviceproxy
  152 ??         0:00.00 /System/Library/PrivateFrameworks/GeoServices.framework/geod
  153 ??         0:00.00 /usr/libexec/coreduetd
  154 ??         0:00.00 /System/Library/PrivateFrameworks/WiFiPolicy.framework/XPCServices/WiFiCloudAssetsXPCService.xpc/WiFiCloudAssetsXPCServ
  155 ??         0:00.00 /System/Library/Frameworks/AudioToolbox.framework/XPCServices/CAReportingService.xpc/CAReportingService
  158 ??         0:00.00 /System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/cloudd
  159 ??         0:00.00 /System/Library/Frameworks/CoreTelephony.framework/Support/CommCenterMobileHelper
  160 ??         0:00.00 /usr/sbin/applecamerad
  161 ??         0:00.00 /usr/libexec/mobileactivationd
  162 ??         0:00.00 /usr/libexec/trustd
  164 ??         0:00.00 /usr/sbin/mDNSResponder
  165 ??         0:00.00 /usr/libexec/duetexpertd
  166 ??         0:00.00 /System/Library/PrivateFrameworks/AppleMediaServicesUI.framework/amsengagementd
  167 ??         0:00.00 /System/Library/PrivateFrameworks/UsageTracking.framework/UsageTrackingAgent
  168 ??         0:00.00 /usr/libexec/mobilerepaird
  169 ??         0:00.00 /System/Library/PrivateFrameworks/IMDPersistence.framework/XPCServices/IMDPersistenceAgent.xpc/IMDPersistenceAgent
  170 ??         0:00.00 assetsd
  171 ??         0:00.00 /System/Library/PrivateFrameworks/CoreEmbeddedSpeechRecognition.framework/XPCServices/com.apple.siri.embeddedspeech.xpc
  172 ??         0:00.00 /System/Library/PrivateFrameworks/CoreFollowUp.framework/followupd
  173 ??         0:00.00 /usr/libexec/announced
  174 ??         0:00.00 /usr/libexec/triald
  175 ??         0:00.00 /usr/libexec/siriknowledged
  176 ??         0:00.00 /System/Library/PrivateFrameworks/SiriInference.framework/Support/siriinferenced
  178 ??         0:00.00 /System/Library/PrivateFrameworks/HomeKitDaemon.framework/Support/homed
  179 ??         0:00.00 /usr/libexec/mobile_installation_proxy
  180 ??         0:00.00 /usr/libexec/wifianalyticsd
  181 ??         0:00.00 /System/Library/Frameworks/CryptoTokenKit.framework/ctkd -tsw
  182 ??         0:00.00 /usr/libexec/OTATaskingAgent server-init
  184 ??         0:00.00 /System/Library/PrivateFrameworks/SocialLayer.framework/sociallayerd.app/sociallayerd
  185 ??         0:00.00 /System/Library/PrivateFrameworks/CloudDocsDaemon.framework/bird
  186 ??         0:00.00 /usr/libexec/pkd
  187 ??         0:00.00 /usr/libexec/misagent
  188 ??         0:00.00 /usr/libexec/searchpartyd
  189 ??         0:00.00 /System/Library/PrivateFrameworks/CoreSuggestions.framework/suggestd
  190 ??         0:00.00 /usr/libexec/afcd
  191 ??         0:00.00 /usr/libexec/wifip2pd
  192 ??         0:00.00 /System/Library/PrivateFrameworks/FamilyCircle.framework/familycircled
  193 ??         0:00.00 /System/Library/PrivateFrameworks/CacheDelete.framework/deleted
  194 ??         0:00.00 /usr/libexec/nearbyd
  195 ??         0:00.00 /System/Library/PrivateFrameworks/CoreEmbeddedSpeechRecognition.framework/XPCServices/com.apple.siri.embeddedspeech.xpc
  196 ??         0:00.00 /usr/libexec/pipelined
  197 ??         0:00.00 /System/Library/PrivateFrameworks/Search.framework/searchd
  198 ??         0:00.00 /usr/libexec/swcd
  199 ??         0:00.00 /System/Library/PrivateFrameworks/SOS.framework/sosd
  200 ??         0:00.00 /System/Library/Frameworks/Contacts.framework/Support/contactsd
  201 ??         0:00.00 /usr/libexec/countryd
  203 ??         0:00.00 /System/Library/PrivateFrameworks/IntlPreferences.framework/Support/localizationswitcherd
  204 ??         0:00.00 /System/Library/Frameworks/LocalAuthentication.framework/Support/coreauthd
  205 ??         0:00.00 /System/Library/PrivateFrameworks/WatchListKit.framework/Support/watchlistd
  207 ??         0:00.00 /usr/libexec/languageassetd
  208 ??         0:00.00 /System/Library/PrivateFrameworks/iTunesCloud.framework/Support/itunescloudd
  209 ??         0:00.00 /usr/libexec/coreidvd
  210 ??         0:00.00 /System/Library/PrivateFrameworks/AppStoreDaemon.framework/Support/appstored
  218 ??         0:00.00 /System/Library/PrivateFrameworks/MapsSuggestions.framework/destinationd
  219 ??         0:00.00 /System/Library/PrivateFrameworks/FontServices.framework/Support/fontservicesd
  220 ??         0:00.00 /System/Library/PrivateFrameworks/iTunesStore.framework/Support/itunesstored
  221 ??         0:00.00 /System/Library/CoreServices/iconservicesagent
  222 ??         0:00.00 /usr/sbin/filecoordinationd
  223 ??         0:00.00 /System/Library/Frameworks/FileProvider.framework/Support/fileproviderd
  224 ??         0:00.00 /System/Library/PrivateFrameworks/AppSSO.framework/Support/AppSSODaemon
  226 ??         0:00.00 /System/Library/Frameworks/GSS.framework/Helpers/GSSCred
  229 ??         0:00.00 /System/Library/PrivateFrameworks/PhotoAnalysis.framework/Support/photoanalysisd
  230 ??         0:00.00 /System/Library/PrivateFrameworks/VoiceServices.framework/Support/voiced
  231 ??         0:00.00 /System/Cryptexes/App/usr/libexec/webbookmarksd
  232 ??         0:00.00 /usr/libexec/ospredictiond
  233 ??         0:00.00 /System/Library/PrivateFrameworks/Pasteboard.framework/Support/pasted
  234 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  235 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  238 ??         0:00.00 /System/Library/PrivateFrameworks/ContextKit.framework/XPCServices/ContextService.xpc/ContextService
  242 ??         0:00.00 /usr/libexec/fmfd
  246 ??         0:00.00 /System/Library/PrivateFrameworks/CoreParsec.framework/parsecd
  249 ??         0:00.00 /System/Library/PrivateFrameworks/AssetCacheServices.framework/XPCServices/AssetCacheLocatorService.xpc/AssetCacheLocat
  250 ??         0:00.00 /System/Library/Frameworks/MapKit.framework/XPCServices/com.apple.MapKit.SnapshotService.xpc/com.apple.MapKit.SnapshotS
  251 ??         0:00.00 /System/Library/PrivateFrameworks/StreamingZip.framework/XPCServices/com.apple.StreamingUnzipService.xpc/com.apple.Stre
  252 ??         0:00.00 /System/Library/PrivateFrameworks/AppPredictionFoundation.framework/XPCServices/AppPredictionIntentsHelperService.xpc/A
  255 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  256 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  257 ??         0:00.00 /usr/libexec/adid
  258 ??         0:00.00 /System/Library/PrivateFrameworks/TelephonyUtilities.framework/XPCServices/com.apple.FaceTime.FTConversationService.xpc
  259 ??         0:00.00 /System/Library/PrivateFrameworks/CommunicationsFilter.framework/CMFSyncAgent
  260 ??         0:00.00 /System/Library/PrivateFrameworks/UserActivity.framework/Agents/useractivityd
  261 ??         0:00.00 /System/Library/Frameworks/CallKit.framework/XPCServices/com.apple.CallKit.CallDirectoryMaintenance.xpc/com.apple.CallK
  262 ??         0:00.00 /usr/libexec/captiveagent
  263 ??         0:00.00 /System/Library/PrivateFrameworks/WiFiPolicy.framework/XPCServices/ThreeBarsXPCService.xpc/ThreeBarsXPCService
  264 ??         0:00.00 /System/Library/PrivateFrameworks/VisualVoicemail.framework/vmd
  265 ??         0:00.00 /System/Library/PrivateFrameworks/StatusKit.framework/StatusKitAgent
  266 ??         0:00.00 /System/Library/PrivateFrameworks/ProtectedCloudStorage.framework/Helpers/ProtectedCloudKeySyncing
  267 ??         0:00.00 /System/Library/PrivateFrameworks/CoreCDP.framework/cdpd
  269 ??         0:00.00 /System/Library/PrivateFrameworks/WiFiPolicy.framework/XPCServices/WiFiCloudAssetsXPCService.xpc/WiFiCloudAssetsXPCServ
  270 ??         0:00.00 /System/Library/PrivateFrameworks/IDSBlastDoorSupport.framework/XPCServices/IDSBlastDoorService.xpc/IDSBlastDoorService
  271 ??         0:00.00 /usr/libexec/symptomsd-diag
  273 ??         0:00.00 /System/Library/PrivateFrameworks/CloudKitDaemon.framework/Support/ckdiscretionaryd
  274 ??         0:00.00 /usr/sbin/absd
  275 ??         0:00.00 /usr/libexec/asd
  276 ??         0:00.00 /usr/libexec/nesessionmanager
  277 ??         0:00.00 /System/Library/PrivateFrameworks/CoreAccessories.framework/Support/accessoryd
  279 ??         0:00.00 /System/Library/PrivateFrameworks/iCloudDriveService.framework/XPCServices/ContainerMetadataExtractor.xpc/ContainerMeta
  283 ??         0:00.00 /System/Library/CoreServices/ReportCrash agent
  284 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  285 ??         0:00.00 cloudphotod
  286 ??         0:00.00 /usr/libexec/cryptexd
  288 ??         0:00.00 /System/Library/PrivateFrameworks/CoreSymbolication.framework/coresymbolicationd
  295 ??         0:00.00 /System/Library/PrivateFrameworks/PrivacyAccounting.framework/Versions/A/Resources/privacyaccountingd
  296 ??         0:00.00 /usr/libexec/rtcreportingd
  298 ??         0:00.00 /System/Library/PrivateFrameworks/NanoTimeKit.framework/nanotimekitcompaniond
  299 ??         0:00.00 /System/Library/PrivateFrameworks/ActionPredictionHeuristics.framework/XPCServices/HeuristicInterpreter.xpc/HeuristicIn
  300 ??         0:00.00 /System/Library/PrivateFrameworks/FontServices.framework/XPCServices/UserFontManager.xpc/UserFontManager
  301 ??         0:00.00 /System/Library/PrivateFrameworks/CloudServices.framework/Helpers/com.apple.sbd
  302 ??         0:00.00 /System/Library/PrivateFrameworks/MobileSoftwareUpdate.framework/XPCServices/com.apple.MobileSoftwareUpdate.CleanupPrep
  304 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  305 ??         0:00.00 /System/Library/PrivateFrameworks/MusicLibrary.framework/Support/medialibraryd
  306 ??         0:00.00 /System/Library/PrivateFrameworks/BookLibraryCore.framework/Support/bookassetd
  308 ??         0:00.00 /usr/libexec/nanoregistrylaunchd
  309 ??         0:00.00 /System/Library/PrivateFrameworks/FitnessCoachingServices.framework/fitnesscoachingd
  311 ??         0:00.00 /usr/libexec/promotedcontentd
  322 ??         0:28.18 /usr/sbin/frida-server
  327 ??         0:00.00 /usr/libexec/backboardd
  329 ??         0:00.00 /System/Library/PrivateFrameworks/CoreAccessories.framework/XPCServices/ACCHWComponentAuthService.xpc/ACCHWComponentAut
  332 ??         0:00.00 /usr/libexec/videosubscriptionsd
  333 ??         0:00.00 /System/Library/PrivateFrameworks/TVRemoteCore.framework/Support/TVRemoteConnectionService
  334 ??         0:00.00 /System/Library/Frameworks/StoreKit.framework/Support/storekitd
  335 ??         0:00.00 /usr/libexec/online-auth-agent
  336 ??         0:00.00 /usr/libexec/linkd
  337 ??         0:00.00 /usr/libexec/MTLAssetUpgraderD
  338 ??         0:00.00 /System/Library/Frameworks/FamilyControls.framework/FamilyControlsAgent
  339 ??         0:00.00 /System/Library/PrivateFrameworks/ClipServices.framework/clipserviced
  346 ??         0:00.00 /usr/libexec/diagnosticextensionsd
  347 ??         0:00.00 /System/Library/PrivateFrameworks/EmailDaemon.framework/maild
  348 ??         0:00.00 /System/Library/PrivateFrameworks/FinanceKit.framework/financed
  349 ??         0:00.00 /Applications/PosterBoard.app/PosterBoard
  351 ??         0:00.00 /System/Library/Frameworks/ExtensionFoundation.framework/XPCServices/extensionkitservice.xpc/extensionkitservice
  352 ??         0:00.00 /System/Library/PrivateFrameworks/GradientPoster.framework/PlugIns/GradientPosterExtension.appex/GradientPosterExtensio
  353 ??         0:00.00 /System/Library/PrivateFrameworks/WallpaperKit.framework/PlugIns/CollectionsPoster.appex/CollectionsPoster
  354 ??         0:00.00 /private/var/containers/Bundle/Application/28F842D9-F40F-4BE4-844F-B9EDFCEF9192/Weather.app/PlugIns/WeatherPoster.appex
  355 ??         0:00.00 /System/Library/PrivateFrameworks/EmojiPoster.framework/PlugIns/EmojiPosterExtension.appex/EmojiPosterExtension
  356 ??         0:00.00 /System/Library/PrivateFrameworks/PridePoster.framework/PlugIns/PridePosterExtension.appex/PridePosterExtension
  357 ??         0:00.00 /System/Library/PrivateFrameworks/UnityPoster.framework/PlugIns/UnityPosterExtension.appex/UnityPosterExtension
  358 ??         0:00.00 /System/Library/PrivateFrameworks/PhotosUIPrivate.framework/PlugIns/PhotosPosterProvider.appex/PhotosPosterProvider
  361 ??         0:00.00 /usr/libexec/mmaintenanced
  362 ??         0:00.00 /System/Library/PrivateFrameworks/WeatherDaemon.framework/weatherd
  363 ??         0:00.00 /System/Library/PrivateFrameworks/CloudDocs.framework/PlugIns/com.apple.CloudDocs.MobileDocumentsFileProvider.appex/com
  364 ??         0:00.00 /var/containers/Bundle/Application/270C6DE3-9CFB-40F7-888E-F5D140A7AEBA/Deliveroo.app/Deliveroo
  368 ??         0:00.00 /System/Library/PrivateFrameworks/NewDeviceOutreach.framework/ndoagent
  373 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  374 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  375 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  376 ??         0:00.00 /System/Library/PrivateFrameworks/DictionaryServices.framework/XPCServices/com.apple.DictionaryServiceHelper.xpc/com.ap
  377 ??         0:00.00 /System/Library/PrivateFrameworks/SiriTTSService.framework/PlugIns/SiriTTSSynthesizerAU.appex/SiriTTSSynthesizerAU -App
  382 ??         0:00.00 /usr/libexec/biomesyncd
  383 ??         0:00.00 /usr/libexec/idcredd
  384 ??         0:00.00 /System/Cryptexes/App/usr/libexec/passwordbreachd
  386 ??         0:00.00 /System/Library/PrivateFrameworks/CacheDelete.framework/deleted_helper
  387 ??         0:00.00 /usr/libexec/replayd
  389 ??         0:00.00 /System/Library/CoreServices/CacheDeleteAppContainerCaches
  390 ??         0:00.00 /usr/libexec/sensorkitd
  391 ??         0:00.00 /System/Library/TextInput/kbd
  392 ??         0:00.00 /System/Library/Frameworks/QuickLookThumbnailing.framework/Support/com.apple.quicklook.ThumbnailsAgent
  393 ??         0:00.00 /System/Library/PrivateFrameworks/MobileBackup.framework/MobileBackupCacheDeleteService
  394 ??         0:00.00 /private/var/containers/Bundle/Application/54B48442-AB6F-4A9C-A55C-D2C8E5C7F55C/SequoiaTranslator.app/PlugIns/CacheDele
  395 ??         0:00.00 /System/Library/PrivateFrameworks/Translation.framework/translationd
  397 ??         0:00.00 /System/Library/PrivateFrameworks/HealthPluginHost.framework/healthappd
  398 ??         0:00.00 /System/Library/PrivateFrameworks/HealthAlgorithms.framework/XPCServices/DayStreamProcessorService.xpc/DayStreamProcess
  399 ??         0:00.00 /System/Library/PrivateFrameworks/HealthAlgorithms.framework/XPCServices/HistoricalAnalyzerService.xpc/HistoricalAnalyz
  400 ??         0:00.00 /System/Library/PrivateFrameworks/IntelligencePlatformCore.framework/intelligenceplatformd
  401 ??         0:00.00 /System/Library/PrivateFrameworks/SetupAssistant.framework/budd
  402 ??         0:00.00 /System/Library/PrivateFrameworks/DataAccess.framework/Support/dataaccessd
  403 ??         0:00.00 /usr/libexec/metrickitd
  405 ??         0:00.00 /System/Cryptexes/App/System/Library/CoreServices/SafariSupport.bundle/SafariBookmarksSyncAgent
  406 ??         0:00.00 /usr/libexec/ASPCarryLog
  408 ??         0:00.00 /usr/libexec/backgroundassets.user
  410 ??         0:00.00 /usr/libexec/dprivacyd
  411 ??         0:00.00 /usr/libexec/tipsd
  413 ??         0:00.00 /System/Library/PrivateFrameworks/FinHealth.framework/XPCServices/FinHealthXPCServices.xpc/FinHealthXPCServices
  415 ??         0:00.00 /System/Library/PrivateFrameworks/MapsSupport.framework/geocorrectiond
  417 ??         0:00.00 /System/Library/Frameworks/FileProvider.framework/PlugIns/LocalStorageFileProvider.appex/LocalStorageFileProvider -Appl
  418 ??         0:00.00 /System/Library/PrivateFrameworks/MetricsKit.framework/XPCServices/AMPIDService.xpc/AMPIDService
  419 ??         0:00.00 /usr/libexec/proactiveeventtrackerd
  420 ??         0:00.00 /System/Library/CoreServices/osanalyticshelper server-init
  421 ??         0:00.00 /System/Cryptexes/OS/System/Library/Frameworks/WebKit.framework/Daemons/adattributiond --machServiceName com.apple.webk
  422 ??         0:00.00 /System/Library/PrivateFrameworks/RemoteManagement.framework/RemoteManagementAgent
  423 ??         0:00.00 /System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/PasscodeSettingsSubscriber.xpc/PasscodeSetting
  424 ??         0:00.00 /System/Library/PrivateFrameworks/RemoteManagement.framework/remotemanagementd
  426 ??         0:00.00 /System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/ManagementTestSubscriber.xpc/ManagementTestSub
  427 ??         0:00.00 /System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/InteractiveLegacyProfilesSubscriber.xpc/Intera
  428 ??         0:00.00 /System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/AccountSubscriber.xpc/AccountSubscriber
  429 ??         0:00.00 /System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/PasscodeSettingsSubscriber.xpc/PasscodeSetting
  430 ??         0:00.00 /System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/ManagementTestSubscriber.xpc/ManagementTestSub
  431 ??         0:00.00 /System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/LegacyProfilesSubscriber.xpc/LegacyProfilesSub
  432 ??         0:00.00 /System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/InteractiveLegacyProfilesSubscriber.xpc/Intera
  433 ??         0:00.00 /System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/AccountSubscriber.xpc/AccountSubscriber
  434 ??         0:00.00 /System/Library/PrivateFrameworks/RemoteManagement.framework/XPCServices/LegacyProfilesSubscriber.xpc/LegacyProfilesSub
  435 ??         0:00.00 /usr/libexec/microstackshot
  436 ??         0:00.00 /System/Library/PrivateFrameworks/Categories.framework/XPCServices/CategoriesService.xpc/CategoriesService
  437 ??         0:00.00 /usr/libexec/batteryintelligenced
  438 ??         0:00.00 /System/Library/PrivateFrameworks/PerfPowerTelemetryReader.framework/XPCServices/PerfPowerTelemetryReaderService.xpc/Pe
  439 ??         0:00.00 /usr/libexec/appleaccountd
  440 ??         0:00.00 /usr/libexec/deferredmediad
  441 ??         0:00.00 /System/Library/PrivateFrameworks/PowerLog.framework/XPCServices/PerfPowerTelemetryClientRegistrationService.xpc/PerfPo
  442 ??         0:00.00 /System/Library/Frameworks/FileProvider.framework/PlugIns/FPSpotlightIndexer.appex/FPSpotlightIndexer -AppleLanguages (
  443 ??         0:00.00 com.apple.photos.ImageConversionService
  446 ??         0:00.00 /System/Library/Frameworks/CoreTelephony.framework/Support/CommCenterRootHelper
  447 ??         0:00.00 /System/Library/PrivateFrameworks/GenerationalStorage.framework/revisiond
  448 ??         0:00.00 /System/Library/CoreServices/CacheDeleteDaily
  449 ??         0:00.00 /usr/bin/sysdiagnose
  450 ??         0:00.00 /System/Library/PrivateFrameworks/Categories.framework/XPCServices/CategoriesService.xpc/CategoriesService
  451 ??         0:00.00 /usr/libexec/silhouette
  452 ??         0:00.00 /System/Library/PrivateFrameworks/DASDelegate.framework/XPCServices/DASDelegateService.xpc/DASDelegateService
  455 ??         0:00.00 /System/Library/PrivateFrameworks/SiriTTSService.framework/sirittsd
  456 ??         0:00.00 /System/Library/PrivateFrameworks/BusinessChatService.framework/businessservicesd
  457 ??         0:00.00 /usr/libexec/transparencyd
  459 ??         0:00.00 /System/Library/PrivateFrameworks/IntelligencePlatformCore.framework/knowledgeconstructiond
  460 ??         0:00.00 /usr/libexec/fairplaydeviceidentityd
  464 ??         0:00.00 /System/Library/Frameworks/ClassKit.framework/progressd
  465 ??         0:00.00 /System/Library/Frameworks/VideoSubscriberAccount.framework/XPCServices/com.apple.VideoSubscriberAccount.DeveloperServi
  466 ??         0:00.00 /usr/libexec/wifivelocityd
  470 ??         0:00.00 /usr/libexec/tzd
  472 ??         0:00.00 /System/Library/PrivateFrameworks/TrialServer.framework/XPCServices/TrialArchivingService.xpc/TrialArchivingService
  474 ??         0:00.00 /usr/libexec/gamecontrollerd
  475 ??         0:00.00 /System/Library/PrivateFrameworks/GameControllerFoundation.framework/XPCServices/GameControllerConfigService.xpc/GameCo
  477 ??         0:00.00 /System/Library/PrivateFrameworks/DifferentialPrivacy.framework/XPCServices/DPSubmissionService.xpc/DPSubmissionService
  482 ??         0:00.00 /System/Library/PrivateFrameworks/AvatarPersistence.framework/Support/avatarsd
  486 ??         0:00.00 /System/Library/PrivateFrameworks/ContactsDonation.framework/Versions/A/Support/contactsdonationagent
  495 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  497 ??         0:00.00 /usr/libexec/mlruntimed
  809 ??         0:00.00 /Applications/MobileSafari.app/MobileSafari
  810 ??         0:00.00 /var/containers/Bundle/Application/FA1472F5-0005-42B6-8F4C-A4D52D967B0D/MobileTimer.app/MobileTimer
  811 ??         0:00.02 /jbin/loader.app/palera1nLoader
  812 ??         0:00.00 /var/containers/Bundle/Application/21CE2FE5-B319-40D2-8520-7A574FBAF469/Files.app/Files
  813 ??         0:00.00 /Applications/AppStore.app/AppStore
  814 ??         0:00.00 /Applications/Preferences.app/Preferences
  815 ??         0:00.00 /usr/sbin/BTLEServer
  822 ??         0:00.00 /Applications/SubstituteSettings.app/SubstituteSettings
  823 ??         0:00.00 /var/containers/Bundle/Application/21B58282-3C59-41D2-A601-03612F8B0804/MobileMail.app/MobileMail
  824 ??         0:00.00 /Applications/Sileo.app/Sileo
  825 ??         0:00.00 /var/containers/Bundle/Application/98CB8623-E540-4E4E-AA21-BB1D37777B3C/Tips.app/Tips
  826 ??         0:00.00 /var/containers/Bundle/Application/A1CEF484-8198-45A9-BFED-FAC014EC067C/MobileNotes.app/MobileNotes
  832 ??         0:00.00 /Applications/Screen Time.app/PlugIns/ScreenTimeWidgetExtension.appex/ScreenTimeWidgetExtension -AppleLanguages ("en-DE
  833 ??         0:00.00 /private/var/containers/Bundle/Application/28F842D9-F40F-4BE4-844F-B9EDFCEF9192/Weather.app/PlugIns/WeatherWidget.appex
  834 ??         0:00.00 /Applications/MobileSlideShow.app/PlugIns/PhotosReliveWidget.appex/PhotosReliveWidget -AppleLanguages ("en-DE", "de-DE"
  837 ??         0:00.00 /usr/libexec/installd
  838 ??         0:00.00 /System/Library/PrivateFrameworks/MobileInstallation.framework/XPCServices/com.apple.MobileInstallationHelperService.xp
  840 ??         0:00.00 /System/Library/PrivateFrameworks/SoftwareUpdateServices.framework/Support/softwareupdateservicesd
  844 ??         0:00.00 /var/containers/Bundle/Application/5E0E4E35-7718-46D6-8A3C-24E8FEB54788/MobileCal.app/MobileCal
  845 ??         0:00.00 /private/var/containers/Bundle/Application/5E0E4E35-7718-46D6-8A3C-24E8FEB54788/MobileCal.app/PlugIns/CalendarWidgetExt
  858 ??         0:00.00 /usr/libexec/neagent
  861 ??         0:00.00 /System/Library/Frameworks/MediaAccessibility.framework/XPCServices/com.apple.accessibility.mediaaccessibilityd.xpc/com
  862 ??         0:00.00 /System/Library/Frameworks/WebKit.framework/XPCServices/com.apple.WebKit.Networking.xpc/com.apple.WebKit.Networking
  863 ??         0:00.00 /System/Cryptexes/App/usr/libexec/com.apple.Safari.History
  864 ??         0:00.00 /System/Library/Frameworks/WebKit.framework/XPCServices/com.apple.WebKit.GPU.xpc/com.apple.WebKit.GPU
  865 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  866 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  867 ??         0:00.00 /System/Library/PrivateFrameworks/SafariSafeBrowsing.framework/com.apple.Safari.SafeBrowsing.Service
  869 ??         0:00.00 /System/Library/PrivateFrameworks/Synapse.framework/Support/contentlinkingd
  871 ??         0:00.00 /System/Library/PrivateFrameworks/CoreSuggestions.framework/reversetemplated
  873 ??         0:00.00 /usr/libexec/tailspind
  877 ??         0:00.00 /Applications/ScreenshotServicesService.app/ScreenshotServicesService
  879 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  880 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  883 ??         0:00.00 /System/Library/PrivateFrameworks/DocumentManagerUICore.framework/PlugIns/com.apple.DocumentManager.Service.appex/com.a
  884 ??         0:00.00 /System/Library/Frameworks/QuickLookThumbnailing.framework/PlugIns/ThumbnailExtension.appex/ThumbnailExtension -AppleLa
  885 ??         0:00.00 /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/DesktopServicesHelper
  886 ??         0:00.00 /usr/libexec/handwritingd
  887 ??         0:00.00 /System/Library/PrivateFrameworks/DocumentManagerCore.framework/XPCServices/com.apple.DocumentManagerCore.Downloads.xpc
  889 ??         0:00.00 /System/Library/Frameworks/ExtensionFoundation.framework/XPCServices/extensionkitservice.xpc/extensionkitservice
  890 ??         0:00.00 /private/var/containers/Bundle/Application/A1CEF484-8198-45A9-BFED-FAC014EC067C/MobileNotes.app/PlugIns/com.apple.mobil
  891 ??         0:00.00 /System/Library/Frameworks/Metal.framework/XPCServices/MTLCompilerService.xpc/MTLCompilerService
  892 ??         0:00.00 /Applications/iMessageAppsViewService.app/iMessageAppsViewService
  894 ??         0:00.00 /Applications/MobileSMS.app/MobileSMS
  895 ??         0:00.00 /System/Library/PrivateFrameworks/FontServices.framework/XPCServices/UserFontServices.xpc/UserFontServices
  897 ??         0:00.00 /System/Library/Frameworks/QuickLook.framework/PlugIns/com.apple.quicklook.extension.previewUI.appex/com.apple.quickloo
  899 ??         0:00.00 /System/Library/PrivateFrameworks/SharingXPCServices.framework/XPCServices/SharingXPCHelper.xpc/SharingXPCHelper
  908 ??         0:00.00 /var/containers/Bundle/Application/44FD2D07-02ED-4A63-95B3-1F2CFC95D3AC/WireGuard.app/WireGuard
  911 ??         0:00.00 /System/Library/PrivateFrameworks/ActivityAwardsServices.framework/activityawardsd
  944 ??         0:00.00 /System/Library/Frameworks/ExtensionFoundation.framework/XPCServices/extensionkitservice.xpc/extensionkitservice
  945 ??         0:00.00 /System/Library/PrivateFrameworks/AppleMediaDiscovery.framework/PlugIns/AMDEngagementExtension.appex/AMDEngagementExten
27300 ??         0:00.00 /System/Library/Frameworks/WebKit.framework/XPCServices/com.apple.WebKit.WebContent.xpc/com.apple.WebKit.WebContent
27470 ??         0:00.00 /System/Library/PrivateFrameworks/DeviceCheckInternal.framework/devicecheckd
27477 ??         0:00.00 /System/Library/PrivateFrameworks/HealthRecordServices.framework/healthrecordsd
27485 ??         0:00.00 /System/Library/CoreServices/EscrowSecurityAlert.app/EscrowSecurityAlert
27488 ??         0:00.00 /usr/libexec/mediasetupd
27496 ??         0:00.00 /System/Library/PrivateFrameworks/DistributedEvaluation.framework/XPCServices/com.apple.siri-distributed-evaluation.xpc
27511 ??         0:00.00 /Applications/GameCenterWidgets.app/PlugIns/GCWidgets.appex/GCWidgets -AppleLanguages ("en-DE", "de-DE")
27696 ??         0:00.00 /usr/libexec/remindd
28089 ??         0:00.00 /System/Library/PrivateFrameworks/AggregateDictionary.framework/Support/aggregated
28134 ??         0:00.00 /System/Library/Filesystems/apfs.fs/apfs_iosd
28501 ??         0:00.00 /System/Library/PrivateFrameworks/SeymourServices.framework/fitcored
28530 ??         0:00.00 /System/Library/CoreServices/SpringBoard.app/SpringBoard
28533 ??         0:00.00 /System/Library/PrivateFrameworks/MediaAnalysis.framework/mediaanalysisd
28534 ??         0:00.00 /System/Library/PrivateFrameworks/CoreParsec.framework/parsec-fbf
28535 ??         0:00.00 /System/Library/PrivateFrameworks/WallpaperKit.framework/PlugIns/CollectionsPoster.appex/CollectionsPoster
28536 ??         0:00.00 /Applications/Camera.app/Camera
28537 ??         0:00.00 /Applications/Spotlight.app/Spotlight
28539 ??         0:00.00 /System/Library/Frameworks/AppTrackingTransparency.framework/XPCServices/EnforcementService.xpc/EnforcementService
28543 ??         0:00.00 /System/Library/PrivateFrameworks/TextToSpeechKonaSupport.framework/PlugIns/KonaSynthesizer.appex/KonaSynthesizer -Appl
28544 ??         0:00.00 /System/Library/PrivateFrameworks/MacinTalk.framework/PlugIns/MacinTalkAUSP.appex/MacinTalkAUSP -AppleLanguages ("en-DE
28546 ??         0:00.00 sshd: root@ttys000 
28548 ttys000    0:00.00 -zsh
28586 ttys000    0:00.00 ps -A
baltpeter commented 1 year ago

But while kill 28536 did get rid of the process, the Camera app is still running. And now:

root# ps -A | grep -i camera 
  160 ??         0:00.00 /usr/sbin/applecamerad
baltpeter commented 1 year ago

Meanwhile, frida-ps shows a completely different process ID:

❯ frida-ps -Ua
 PID  Name     Identifier             
4  -------  -----------------------
6980  Camera   com.apple.camera
baltpeter commented 1 year ago

OK, never mind. The SSH session I was using was to another device than the one I was connected via USB to. :D

kill <PID> works and the ps output matches that of frida-ps.

baltpeter commented 1 year ago

Here's what the path looks like for a non-system app:

root# ps -A | grep -i polycam
 9897 ??         0:03.95 /var/containers/Bundle/Application/DCF8001F-2827-448E-87B7-B9ABD4434E17/Polycam.app/Polycam
baltpeter commented 1 year ago

As for getting the path for an app ID, ideviceinstaller -l -o xml would be helpful (though it annoyingly outputs XML, but that's Apple's fault, of course):

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<array>
    <dict>
        <key>NSAdvertisingAttributionReportEndpoint</key>
        <string>https://appsflyer-skadnetwork.com/</string>
        <key>CFBundlePackageType</key>
        <string>APPL</string>
        <key>UILaunchStoryboardName</key>
        <string>LaunchScreen</string>
        <key>ROO_BT_PAYPAL_URL_SCHEME</key>
        <string>com.deliveroo.orderapp.payments</string>
        <key>NSLocationAlwaysUsageDescription</key>
        <string>Your current location will be used to show you nearby restaurants.</string>
        <key>DTPlatformVersion</key>
        <string>15.2</string>
        <key>branch_app_domain</key>
        <string>deliveroo.app.link</string>
        <key>DTSDKBuild</key>
        <string>19C51</string>
        <key>AppIdentifierPrefix</key>
        <string>U7768A9YL6.</string>
        <key>ROO_VERSION_NUMBER_PREFIX</key>
        <string></string>
        <key>IsHostBackupEligible</key>
        <true/>
        <key>LSRequiresIPhoneOS</key>
        <true/>
        <key>NSCameraUsageDescription</key>
        <string>Enable camera access to upload photos or scan cards</string>
        <key>LSSupportsOpeningDocumentsInPlace</key>
        <true/>
        <key>GOOGLE_ANALYTICS_DEFAULT_ALLOW_AD_PERSONALIZATION_SIGNALS</key>
        <false/>
        <key>LSHasLocalizedDisplayName</key>
        <true/>
        <key>CFBundleDisplayName</key>
        <string>Deliveroo</string>
        <key>SignerIdentity</key>
        <string>Apple iPhone OS Application Signing</string>
        <key>CFBundleDocumentTypes</key>
        <array/>
        <key>DTXcodeBuild</key>
        <string>13C100</string>
        <key>Path</key>
        <string>/private/var/containers/Bundle/Application/270C6DE3-9CFB-40F7-888E-F5D140A7AEBA/Deliveroo.app</string>
        <key>EnvironmentVariables</key>
        <dict>
            <key>CFFIXED_USER_HOME</key>
            <string>/private/var/mobile/Containers/Data/Application/6B93C293-8E67-4B96-91B8-85059EAF2586</string>
            <key>TMPDIR</key>
            <string>/private/var/mobile/Containers/Data/Application/6B93C293-8E67-4B96-91B8-85059EAF2586/tmp</string>
            <key>HOME</key>
            <string>/private/var/mobile/Containers/Data/Application/6B93C293-8E67-4B96-91B8-85059EAF2586</string>
        </dict>
        <key>CFBundleNumericVersion</key>
        <integer>0</integer>
        <key>SequenceNumber</key>
        <integer>1064</integer>
        <key>IsDemotedApp</key>
        <false/>
        <key>CFBundleIdentifier</key>
        <string>com.deliveroo.orderapp</string>
        <key>HasSettingsBundle</key>
        <true/>
        <key>UIDeviceFamily</key>
        <array>
            <integer>1</integer>
            <integer>2</integer>
        </array>
        <key>ROO_URL_SCHEME</key>
        <string>deliveroo</string>
        <key>LSApplicationQueriesSchemes</key>
        <array>
            <string>instagram</string>
            <string>org-appextension-feature-password-management</string>
            <string>googlegmail</string>
            <string>fb</string>
            <string>fbauth2</string>
            <string>twitter</string>
            <string>com.paypal.ppclient.touch.v1</string>
            <string>com.paypal.ppclient.touch.v2</string>
            <string>itms-beta</string>
            <string>ms-outlook</string>
            <string>ymail</string>
        </array>
        <key>FacebookDisplayName</key>
        <string>Deliveroo</string>
        <key>CFBundleInfoDictionaryVersion</key>
        <string>6.0</string>
        <key>CFBundleIcons</key>
        <dict>
            <key>CFBundleAlternateIcons</key>
            <dict>
                <key>PlusProduction</key>
                <dict>
                    <key>CFBundleIconFiles</key>
                    <array>
                        <string>PlusProduction60x60</string>
                    </array>
                    <key>CFBundleIconName</key>
                    <string>PlusProduction</string>
                </dict>
                <key>PrideProduction</key>
                <dict>
                    <key>CFBundleIconFiles</key>
                    <array>
                        <string>PrideProduction60x60</string>
                    </array>
                    <key>CFBundleIconName</key>
                    <string>PrideProduction</string>
                </dict>
            </dict>
            <key>CFBundlePrimaryIcon</key>
            <dict>
                <key>CFBundleIconFiles</key>
                <array>
                    <string>Production60x60</string>
                </array>
                <key>CFBundleIconName</key>
                <string>Production</string>
            </dict>
        </dict>
        <key>IsUpgradeable</key>
        <true/>
        <key>CFBundleSupportedPlatforms</key>
        <array>
            <string>iPhoneOS</string>
        </array>
        <key>NSUserTrackingUsageDescription</key>
        <string>We use this data to tailor the adverts we show on other sites</string>
        <key>UIRequiresFullScreen</key>
        <false/>
        <key>CFBundleSignature</key>
        <string>????</string>
        <key>ITSAppUsesNonExemptEncryption</key>
        <false/>
        <key>FacebookAutoLogAppEventsEnabled</key>
        <false/>
        <key>MinimumOSVersion</key>
        <string>13.0</string>
        <key>CFBundleName</key>
        <string>Deliveroo</string>
        <key>CFBundleShortVersionString</key>
        <string>3.128.0</string>
        <key>FacebookAutoInitEnabled</key>
        <false/>
        <key>UIBackgroundModes</key>
        <array>
            <string>remote-notification</string>
        </array>
        <key>UIRequiredDeviceCapabilities</key>
        <array>
            <string>arm64</string>
        </array>
        <key>CFBundleExecutable</key>
        <string>Deliveroo</string>
        <key>UIAppFonts</key>
        <array>
            <string>/Frameworks/ROOIKit.framework/stratosdeliveroo-semibold.otf</string>
            <string>/Frameworks/ROOIKit.framework/IBMPlexSans-Bold.otf</string>
            <string>/Frameworks/ROOIKit.framework/IBMPlexSans-Regular.otf</string>
        </array>
        <key>ApplicationType</key>
        <string>User</string>
        <key>UIViewControllerBasedStatusBarAppearance</key>
        <true/>
        <key>UIUserInterfaceStyle</key>
        <string>Light</string>
        <key>GOOGLE_ANALYTICS_REGISTRATION_WITH_AD_NETWORK_ENABLED</key>
        <false/>
        <key>FacebookAppID</key>
        <string>715101428613026</string>
        <key>ONE_TRUST_DOMAIN_ID</key>
        <string>5ea969b7-29ee-4b3e-bd8f-e97ee26b1f4e</string>
        <key>Container</key>
        <string>/private/var/mobile/Containers/Data/Application/6B93C293-8E67-4B96-91B8-85059EAF2586</string>
        <key>DTAppStoreToolsBuild</key>
        <string>13E112</string>
        <key>BuildMachineOSBuild</key>
        <string>20G417</string>
        <key>DTPlatformName</key>
        <string>iphoneos</string>
        <key>ApplicationDSID</key>
        <integer>17631546433</integer>
        <key>UIApplicationSceneManifest</key>
        <dict>
            <key>UIApplicationSupportsMultipleScenes</key>
            <false/>
            <key>UISceneConfigurations</key>
            <dict>
                <key>UIWindowSceneSessionRoleApplication</key>
                <array>
                    <dict>
                        <key>UISceneDelegateClassName</key>
                        <string>Deliveroo.SceneDelegate</string>
                        <key>UISceneConfigurationName</key>
                        <string>Default Configuration</string>
                    </dict>
                </array>
            </dict>
        </dict>
        <key>branch_key</key>
        <dict>
            <key>test</key>
            <string>key_test_fduik0Gl9pkJqPwDz703QhhowDp5cMgC</string>
            <key>live</key>
            <string>key_live_lhrlp2UlXnpICSvwxX55UcmlEvn9iVap</string>
        </dict>
        <key>CFBundleVersion</key>
        <string>41096</string>
        <key>DTCompiler</key>
        <string>com.apple.compilers.llvm.clang.1_0</string>
        <key>CFBundleURLTypes</key>
        <array>
            <dict>
                <key>CFBundleURLName</key>
                <string></string>
                <key>CFBundleURLSchemes</key>
                <array>
                    <string>deliveroo</string>
                    <string>fb715101428613026</string>
                </array>
            </dict>
            <dict>
                <key>CFBundleURLName</key>
                <string></string>
                <key>CFBundleURLSchemes</key>
                <array>
                    <string>com.deliveroo.orderapp.payments</string>
                </array>
            </dict>
            <dict>
                <key>CFBundleURLSchemes</key>
                <array>
                    <string>fb715101428613026</string>
                </array>
            </dict>
            <dict>
                <key>CFBundleTypeRole</key>
                <string>Editor</string>
                <key>CFBundleURLSchemes</key>
                <array>
                    <string>prefs</string>
                </array>
            </dict>
            <dict>
                <key>CFBundleTypeRole</key>
                <string>Editor</string>
                <key>CFBundleURLSchemes</key>
                <array>
                    <string>com.googleusercontent.apps.605256070345-7p7gch612fgv41nll16glk35s2kguu32</string>
                </array>
            </dict>
            <dict>
                <key>CFBundleTypeRole</key>
                <string>Editor</string>
                <key>CFBundleURLSchemes</key>
                <array>
                    <string>com.googleusercontent.apps.819538658905-ga2g9q9huoc538ghdl5lfs2449dqvv8j</string>
                </array>
            </dict>
        </array>
        <key>DTSDKName</key>
        <string>iphoneos15.2</string>
        <key>NSAppTransportSecurity</key>
        <dict>
            <key>NSExceptionDomains</key>
            <dict>
                <key>akamaihd.net</key>
                <dict>
                    <key>NSThirdPartyExceptionRequiresForwardSecrecy</key>
                    <false/>
                    <key>NSIncludesSubdomains</key>
                    <true/>
                </dict>
                <key>googleapis.com</key>
                <dict>
                    <key>NSThirdPartyExceptionRequiresForwardSecrecy</key>
                    <false/>
                    <key>NSIncludesSubdomains</key>
                    <true/>
                </dict>
                <key>fbcdn.net</key>
                <dict>
                    <key>NSThirdPartyExceptionRequiresForwardSecrecy</key>
                    <false/>
                    <key>NSIncludesSubdomains</key>
                    <true/>
                </dict>
                <key>facebook.com</key>
                <dict>
                    <key>NSThirdPartyExceptionRequiresForwardSecrecy</key>
                    <false/>
                    <key>NSIncludesSubdomains</key>
                    <true/>
                </dict>
                <key>api2.checkout.com</key>
                <dict>
                    <key>NSThirdPartyExceptionRequiresForwardSecrecy</key>
                    <false/>
                    <key>NSIncludesSubdomains</key>
                    <false/>
                </dict>
            </dict>
        </dict>
        <key>Entitlements</key>
        <dict>
            <key>aps-environment</key>
            <string>production</string>
            <key>com.apple.developer.associated-domains</key>
            <array>
                <string>webcredentials:deliveroo.co.uk</string>
                <string>webcredentials:deliveroo.ae</string>
                <string>webcredentials:deliveroo.be</string>
                <string>webcredentials:deliveroo.com.sg</string>
                <string>webcredentials:deliveroo.com.au</string>
                <string>webcredentials:deliveroo.es</string>
                <string>webcredentials:deliveroo.fr</string>
                <string>webcredentials:deliveroo.de</string>
                <string>webcredentials:deliveroo.hk</string>
                <string>webcredentials:deliveroo.ie</string>
                <string>webcredentials:deliveroo.it</string>
                <string>webcredentials:deliveroo.nl</string>
                <string>webcredentials:deliveroo.tw</string>
                <string>webcredentials:deliveroo.com.kw</string>
                <string>applinks:deliveroo.co.uk</string>
                <string>applinks:deliveroo.ae</string>
                <string>applinks:deliveroo.be</string>
                <string>applinks:deliveroo.com.sg</string>
                <string>applinks:deliveroo.com.au</string>
                <string>applinks:deliveroo.es</string>
                <string>applinks:deliveroo.fr</string>
                <string>applinks:deliveroo.de</string>
                <string>applinks:deliveroo.hk</string>
                <string>applinks:deliveroo.ie</string>
                <string>applinks:deliveroo.it</string>
                <string>applinks:deliveroo.nl</string>
                <string>applinks:deliveroo.tw</string>
                <string>applinks:deliveroo.com.kw</string>
                <string>applinks:deliveroo.app.link</string>
                <string>applinks:deliveroo.onelink.me</string>
                <string>applinks:campaign.deliveroo.com</string>
                <string>applinks:deliveroo.bttn.io</string>
                <string>applinks:deliveroo.prf.hn</string>
            </array>
            <key>com.apple.developer.applesignin</key>
            <array>
                <string>Default</string>
            </array>
            <key>com.apple.developer.team-identifier</key>
            <string>U7768A9YL6</string>
            <key>application-identifier</key>
            <string>U7768A9YL6.com.deliveroo.orderapp</string>
            <key>com.apple.developer.in-app-payments</key>
            <array>
                <string>merchant.com.deliveroo.orderapp</string>
                <string>merchant.com.deliveroo.orderapp2</string>
                <string>merchant.com.deliveroo.worldpay</string>
                <string>merchant.com.deliveroo.checkout.staging</string>
            </array>
            <key>keychain-access-groups</key>
            <array>
                <string>U7768A9YL6.com.deliveroo.orderapp.DeliverooWidget</string>
            </array>
        </dict>
        <key>DTPlatformBuild</key>
        <string>19C51</string>
        <key>DTXcode</key>
        <string>1321</string>
        <key>IsAppClip</key>
        <false/>
        <key>NSPhotoLibraryUsageDescription</key>
        <string>Enable access to upload photos</string>
        <key>UISupportedInterfaceOrientations</key>
        <array>
            <string>UIInterfaceOrientationPortrait</string>
        </array>
    </dict>
    <dict>
        <key>UIRequiredDeviceCapabilities</key>
        <array>
            <string>arm64</string>
        </array>
        <key>ITSAppUsesNonExemptEncryption</key>
        <false/>
        <key>CFBundleInfoDictionaryVersion</key>
        <string>6.0</string>
        <key>Entitlements</key>
        <dict>
            <key>com.apple.security.application-groups</key>
            <array>
                <string>group.com.wireguard.ios</string>
            </array>
            <key>com.apple.developer.networking.networkextension</key>
            <array>
                <string>packet-tunnel-provider</string>
            </array>
            <key>application-identifier</key>
            <string>L82V4Y2P3C.com.wireguard.ios</string>
            <key>com.apple.developer.team-identifier</key>
            <string>L82V4Y2P3C</string>
            <key>com.apple.developer.networking.wifi-info</key>
            <true/>
        </dict>
        <key>DTPlatformVersion</key>
        <string>16.2</string>
        <key>com.wireguard.ios.app_group_id</key>
        <string>group.com.wireguard.ios</string>
        <key>CFBundleName</key>
        <string>WireGuard</string>
        <key>DTSDKName</key>
        <string>iphoneos16.2</string>
        <key>DTAppStoreToolsBuild</key>
        <string>14C17</string>
        <key>ApplicationType</key>
        <string>User</string>
        <key>GroupContainers</key>
        <dict>
            <key>group.com.wireguard.ios</key>
            <string>/private/var/mobile/Containers/Shared/AppGroup/58815C5D-0A4C-4D8B-AFED-AB849370EB09</string>
        </dict>
        <key>CFBundleIcons</key>
        <dict>
            <key>CFBundlePrimaryIcon</key>
            <dict>
                <key>CFBundleIconFiles</key>
                <array>
                    <string>AppIcon60x60</string>
                </array>
                <key>CFBundleIconName</key>
                <string>AppIcon</string>
            </dict>
        </dict>
        <key>IsAppClip</key>
        <false/>
        <key>Container</key>
        <string>/private/var/mobile/Containers/Data/Application/B5B199DD-5E26-4873-9448-4D60EF9F3A90</string>
        <key>LSRequiresIPhoneOS</key>
        <true/>
        <key>CFBundleDisplayName</key>
        <string>WireGuard</string>
        <key>CFBundleDocumentTypes</key>
        <array>
            <dict>
                <key>CFBundleTypeName</key>
                <string>WireGuard wg-quick configuration file</string>
                <key>CFBundleTypeExtensions</key>
                <array>
                    <string>conf</string>
                </array>
                <key>CFBundleTypeRole</key>
                <string>Viewer</string>
                <key>LSItemContentTypes</key>
                <array>
                    <string>com.wireguard.config.quick</string>
                </array>
                <key>CFBundleTypeIconFiles</key>
                <array>
                    <string>wireguard_doc_logo_22x29.png</string>
                    <string>wireguard_doc_logo_44x58.png</string>
                    <string>wireguard_doc_logo_64x64.png</string>
                    <string>wireguard_doc_logo_320x320.png</string>
                </array>
                <key>LSHandlerRank</key>
                <string>Default</string>
            </dict>
            <dict>
                <key>CFBundleTypeName</key>
                <string>Zip file</string>
                <key>CFBundleTypeRole</key>
                <string>Viewer</string>
                <key>LSItemContentTypes</key>
                <array>
                    <string>com.pkware.zip-archive</string>
                </array>
                <key>LSHandlerRank</key>
                <string>Alternate</string>
            </dict>
            <dict>
                <key>CFBundleTypeName</key>
                <string>Text file</string>
                <key>CFBundleTypeRole</key>
                <string>Viewer</string>
                <key>LSItemContentTypes</key>
                <array>
                    <string>public.text</string>
                </array>
                <key>CFBundleTypeIconFiles</key>
                <array/>
                <key>LSHandlerRank</key>
                <string>Alternate</string>
            </dict>
        </array>
        <key>DTSDKBuild</key>
        <string>20C52</string>
        <key>NSCameraUsageDescription</key>
        <string>Localized</string>
        <key>CFBundleShortVersionString</key>
        <string>1.0.16</string>
        <key>CFBundleSupportedPlatforms</key>
        <array>
            <string>iPhoneOS</string>
        </array>
        <key>UISupportedInterfaceOrientations</key>
        <array>
            <string>UIInterfaceOrientationPortrait</string>
            <string>UIInterfaceOrientationLandscapeLeft</string>
            <string>UIInterfaceOrientationLandscapeRight</string>
        </array>
        <key>BuildMachineOSBuild</key>
        <string>22D49</string>
        <key>SignerIdentity</key>
        <string>Apple iPhone OS Application Signing</string>
        <key>EnvironmentVariables</key>
        <dict>
            <key>CFFIXED_USER_HOME</key>
            <string>/private/var/mobile/Containers/Data/Application/B5B199DD-5E26-4873-9448-4D60EF9F3A90</string>
            <key>TMPDIR</key>
            <string>/private/var/mobile/Containers/Data/Application/B5B199DD-5E26-4873-9448-4D60EF9F3A90/tmp</string>
            <key>HOME</key>
            <string>/private/var/mobile/Containers/Data/Application/B5B199DD-5E26-4873-9448-4D60EF9F3A90</string>
        </dict>
        <key>MinimumOSVersion</key>
        <string>15.0</string>
        <key>DTPlatformBuild</key>
        <string>20C52</string>
        <key>IsDemotedApp</key>
        <false/>
        <key>CFBundleVersion</key>
        <string>27</string>
        <key>CFBundlePackageType</key>
        <string>APPL</string>
        <key>CFBundleDevelopmentRegion</key>
        <string>en</string>
        <key>SequenceNumber</key>
        <integer>1072</integer>
        <key>ApplicationDSID</key>
        <integer>17631546433</integer>
        <key>IsUpgradeable</key>
        <true/>
        <key>DTXcodeBuild</key>
        <string>14C18</string>
        <key>UTExportedTypeDeclarations</key>
        <array>
            <dict>
                <key>UTTypeIdentifier</key>
                <string>com.wireguard.config.quick</string>
                <key>UTTypeIconFiles</key>
                <array>
                    <string>wireguard_doc_logo_22x29.png</string>
                    <string>wireguard_doc_logo_44x58.png</string>
                    <string>wireguard_doc_logo_64x64.png</string>
                    <string>wireguard_doc_logo_320x320.png</string>
                </array>
                <key>UTTypeDescription</key>
                <string>WireGuard wg-quick configuration file</string>
                <key>UTTypeConformsTo</key>
                <array>
                    <string>public.text</string>
                </array>
                <key>UTTypeTagSpecification</key>
                <dict>
                    <key>public.filename-extension</key>
                    <string>conf</string>
                </dict>
            </dict>
        </array>
        <key>UIDeviceFamily</key>
        <array>
            <integer>1</integer>
            <integer>2</integer>
        </array>
        <key>CFBundleNumericVersion</key>
        <integer>654344192</integer>
        <key>UILaunchStoryboardName</key>
        <string>LaunchScreen</string>
        <key>LSSupportsOpeningDocumentsInPlace</key>
        <false/>
        <key>CFBundleIdentifier</key>
        <string>com.wireguard.ios</string>
        <key>DTXcode</key>
        <string>1420</string>
        <key>ITSDRMScheme</key>
        <string>v2</string>
        <key>CFBundleExecutable</key>
        <string>WireGuard</string>
        <key>IsHostBackupEligible</key>
        <true/>
        <key>Path</key>
        <string>/private/var/containers/Bundle/Application/44FD2D07-02ED-4A63-95B3-1F2CFC95D3AC/WireGuard.app</string>
        <key>UISupportedDevices</key>
        <array>
            <string>iPhone10,2</string>
            <string>iPhone10,3</string>
            <string>iPhone10,5</string>
            <string>iPhone10,6</string>
            <string>iPhone11,2</string>
            <string>iPhone11,4</string>
            <string>iPhone11,6</string>
            <string>iPhone12,3</string>
            <string>iPhone12,5</string>
            <string>iPhone13,1</string>
            <string>iPhone13,2</string>
            <string>iPhone13,3</string>
            <string>iPhone13,4</string>
            <string>iPhone14,2</string>
            <string>iPhone14,3</string>
            <string>iPhone14,4</string>
            <string>iPhone14,5</string>
            <string>iPhone14,7</string>
            <string>iPhone14,8</string>
            <string>iPhone15,2</string>
            <string>iPhone15,3</string>
            <string>iPhone8,2</string>
            <string>iPhone9,2</string>
            <string>iPhone9,4</string>
        </array>
        <key>NSFaceIDUsageDescription</key>
        <string>Localized</string>
        <key>DTXcodeBuildDistribution</key>
        <string>14C18</string>
        <key>DTPlatformName</key>
        <string>iphoneos</string>
        <key>DTCompiler</key>
        <string>com.apple.compilers.llvm.clang.1_0</string>
    </dict>
</array>
</plist>
zner0L commented 1 year ago

Well, this is easier with pymobiledevice3. pymobiledevice3 processes ps outputs:

{
    "1": {
        "ProcessName": "launchd"
    },
    "1494": {
        "ProcessName": "substitute-launcher"
    },
    "1496": {
        "ProcessName": "UserEventAgent"
    },
    "1497": {
        "ProcessName": "logd"
    },
    "1498": {
        "ProcessName": "runningboardd"
    },
    "1499": {
        "ProcessName": "SpringBoard"
    },
    "1500": {
        "ProcessName": "peopled"
    },
    "1501": {
        "ProcessName": "mediaserverd"
    },
    "1502": {
        "ProcessName": "assistantd"
    },
    "1503": {
        "ProcessName": "routined"
    },
    "1504": {
        "ProcessName": "mediaremoted"
    },
    "1505": {
        "ProcessName": "axassetsd"
    },
    "1506": {
        "ProcessName": "misd"
    },
    "1507": {
        "ProcessName": "healthd"
    },
    "1508": {
        "ProcessName": "configd"
    },
    "1509": {
        "ProcessName": "accessoryupdaterd"
    },
    "1510": {
        "ProcessName": "tccd"
    },
    "1511": {
        "ProcessName": "powerd"
    },
    "1512": {
        "ProcessName": "atc"
    },
    "1513": {
        "ProcessName": "WirelessRadioManagerd"
    },
    "1514": {
        "ProcessName": "biomed"
    },
    "1515": {
        "ProcessName": "wifid"
    },
    "1516": {
        "ProcessName": "remoted"
    },
    "1517": {
        "ProcessName": "keybagd"
    },
    "1518": {
        "ProcessName": "familynotificationd"
    },
    "1521": {
        "ProcessName": "seld"
    },
    "1522": {
        "ProcessName": "mobiletimerd"
    },
    "1523": {
        "ProcessName": "softwareupdated"
    },
    "1524": {
        "ProcessName": "watchdogd"
    },
    "1525": {
        "ProcessName": "nfcd"
    },
    "1526": {
        "ProcessName": "identityservicesd"
    },
    "1528": {
        "ProcessName": "wcd"
    },
    "1529": {
        "ProcessName": "thermalmonitord"
    },
    "1530": {
        "ProcessName": "contextstored"
    },
    "1531": {
        "ProcessName": "backboardd"
    },
    "1532": {
        "ProcessName": "askpermissiond"
    },
    "1533": {
        "ProcessName": "timed"
    },
    "1534": {
        "ProcessName": "sharingd"
    },
    "1535": {
        "ProcessName": "ManagedSettingsAgent"
    },
    "1536": {
        "ProcessName": "locationd"
    },
    "1537": {
        "ProcessName": "imagent"
    },
    "1538": {
        "ProcessName": "containermanagerd"
    },
    "1539": {
        "ProcessName": "cloudpaird"
    },
    "1540": {
        "ProcessName": "nanoprefsyncd"
    },
    "1541": {
        "ProcessName": "driverkitd"
    },
    "1542": {
        "ProcessName": "dasd"
    },
    "1543": {
        "ProcessName": "bluetoothuserd"
    },
    "1544": {
        "ProcessName": "sleepd"
    },
    "1546": {
        "ProcessName": "passd"
    },
    "1547": {
        "ProcessName": "lockdownd"
    },
    "1548": {
        "ProcessName": "distnoted"
    },
    "1550": {
        "ProcessName": "OTACrashCopier"
    },
    "1551": {
        "ProcessName": "AppleCredentialManagerDaemon"
    },
    "1553": {
        "ProcessName": "peakpowermanagerd"
    },
    "1554": {
        "ProcessName": "navd"
    },
    "1555": {
        "ProcessName": "safetyalertsd"
    },
    "1556": {
        "ProcessName": "rapportd"
    },
    "1558": {
        "ProcessName": "usermanagerd"
    },
    "1559": {
        "ProcessName": "bluetoothd"
    },
    "1560": {
        "ProcessName": "amsaccountsd"
    },
    "1561": {
        "ProcessName": "fairplayd.H2"
    },
    "1562": {
        "ProcessName": "CommCenter"
    },
    "1563": {
        "ProcessName": "fseventsd"
    },
    "1565": {
        "ProcessName": "IOMFB_bics_daemon"
    },
    "1566": {
        "ProcessName": "notifyd"
    },
    "1567": {
        "ProcessName": "cfprefsd"
    },
    "1568": {
        "ProcessName": "ACCHWComponentAuthService"
    },
    "1569": {
        "ProcessName": "frida-server"
    },
    "1573": {
        "ProcessName": "com.apple.DriverKit-AppleBCMWLA"
    },
    "1574": {
        "ProcessName": "chronod"
    },
    "1575": {
        "ProcessName": "lsd"
    },
    "1576": {
        "ProcessName": "biometrickitd"
    },
    "1577": {
        "ProcessName": "awdd"
    },
    "1578": {
        "ProcessName": "mobileassetd"
    },
    "1579": {
        "ProcessName": "apfs_iosd"
    },
    "1580": {
        "ProcessName": "PowerUIAgent"
    },
    "1581": {
        "ProcessName": "audioclocksyncd"
    },
    "1583": {
        "ProcessName": "MobileGestaltHelper"
    },
    "1584": {
        "ProcessName": "securityd"
    },
    "1585": {
        "ProcessName": "nehelper"
    },
    "1586": {
        "ProcessName": "nanoregistryd"
    },
    "1587": {
        "ProcessName": "accountsd"
    },
    "1588": {
        "ProcessName": "symptomsd"
    },
    "1589": {
        "ProcessName": "CloudKeychainProxy"
    },
    "1591": {
        "ProcessName": "liveactivitiesd"
    },
    "1592": {
        "ProcessName": "misagent"
    },
    "1593": {
        "ProcessName": "akd"
    },
    "1594": {
        "ProcessName": "donotdisturbd"
    },
    "1595": {
        "ProcessName": "profiled"
    },
    "1596": {
        "ProcessName": "carkitd"
    },
    "1597": {
        "ProcessName": "geod"
    },
    "1598": {
        "ProcessName": "coreduetd"
    },
    "1599": {
        "ProcessName": "CAReportingService"
    },
    "1600": {
        "ProcessName": "apsd"
    },
    "1601": {
        "ProcessName": "WiFiCloudAssetsXPCService"
    },
    "1602": {
        "ProcessName": "cloudd"
    },
    "1603": {
        "ProcessName": "nsurlsessiond"
    },
    "1604": {
        "ProcessName": "CommCenterMobileHelper"
    },
    "1605": {
        "ProcessName": "networkserviceproxy"
    },
    "1606": {
        "ProcessName": "mobileactivationd"
    },
    "1607": {
        "ProcessName": "localizationswitcherd"
    },
    "1608": {
        "ProcessName": "trustd"
    },
    "1610": {
        "ProcessName": "pfd"
    },
    "1611": {
        "ProcessName": "applecamerad"
    },
    "1612": {
        "ProcessName": "nanotimekitcompaniond"
    },
    "1614": {
        "ProcessName": "analyticsd"
    },
    "1615": {
        "ProcessName": "syncdefaultsd"
    },
    "1616": {
        "ProcessName": "callservicesd"
    },
    "1617": {
        "ProcessName": "mobilerepaird"
    },
    "1618": {
        "ProcessName": "watchlistd"
    },
    "1621": {
        "ProcessName": "itunescloudd"
    },
    "1622": {
        "ProcessName": "fmflocatord"
    },
    "1623": {
        "ProcessName": "findmydeviced"
    },
    "1624": {
        "ProcessName": "coreidvd"
    },
    "1625": {
        "ProcessName": "TrustedPeersHelper"
    },
    "1626": {
        "ProcessName": "appstored"
    },
    "1627": {
        "ProcessName": "assetsd"
    },
    "1628": {
        "ProcessName": "BlueTool"
    },
    "1629": {
        "ProcessName": "familycircled"
    },
    "1630": {
        "ProcessName": "deleted"
    },
    "1631": {
        "ProcessName": "touchsetupd"
    },
    "1632": {
        "ProcessName": "wifip2pd"
    },
    "1633": {
        "ProcessName": "IMDPersistenceAgent"
    },
    "1634": {
        "ProcessName": "PosterBoard"
    },
    "1635": {
        "ProcessName": "wifianalyticsd"
    },
    "1636": {
        "ProcessName": "mDNSResponder"
    },
    "1637": {
        "ProcessName": "countryd"
    },
    "1638": {
        "ProcessName": "corespeechd"
    },
    "1639": {
        "ProcessName": "followupd"
    },
    "1641": {
        "ProcessName": "ScreenTimeAgent"
    },
    "1642": {
        "ProcessName": "ctkd"
    },
    "1643": {
        "ProcessName": "iconservicesagent"
    },
    "1644": {
        "ProcessName": "pkd"
    },
    "1645": {
        "ProcessName": "searchpartyd"
    },
    "1646": {
        "ProcessName": "nearbyd"
    },
    "1647": {
        "ProcessName": "dmd"
    },
    "1648": {
        "ProcessName": "sociallayerd"
    },
    "1649": {
        "ProcessName": "suggestd"
    },
    "1650": {
        "ProcessName": "duetexpertd"
    },
    "1651": {
        "ProcessName": "itunesstored"
    },
    "1652": {
        "ProcessName": "extensionkitservice"
    },
    "1653": {
        "ProcessName": "calaccessd"
    },
    "1654": {
        "ProcessName": "extensionkitservice"
    },
    "1655": {
        "ProcessName": "installcoordinationd"
    },
    "1656": {
        "ProcessName": "TipsWidget"
    },
    "1657": {
        "ProcessName": "LockScreenPeopleWidget_iOSExten"
    },
    "1658": {
        "ProcessName": "WeatherWidget"
    },
    "1659": {
        "ProcessName": "GradientPosterExtension"
    },
    "1660": {
        "ProcessName": "GeneralMapsWidget"
    },
    "1661": {
        "ProcessName": "com.apple.mobilenotes.WidgetExt"
    },
    "1662": {
        "ProcessName": "CollectionsPoster"
    },
    "1663": {
        "ProcessName": "destinationd"
    },
    "1664": {
        "ProcessName": "ExtragalacticPoster"
    },
    "1665": {
        "ProcessName": "WeatherPoster"
    },
    "1666": {
        "ProcessName": "EmojiPosterExtension"
    },
    "1667": {
        "ProcessName": "UnityPosterExtension"
    },
    "1668": {
        "ProcessName": "PhotosPosterProvider"
    },
    "1669": {
        "ProcessName": "amsengagementd"
    },
    "1670": {
        "ProcessName": "fontservicesd"
    },
    "1671": {
        "ProcessName": "swcd"
    },
    "1672": {
        "ProcessName": "CalendarWidgetExtension"
    },
    "1673": {
        "ProcessName": "com.apple.siri.embeddedspeech"
    },
    "1674": {
        "ProcessName": "homed"
    },
    "1675": {
        "ProcessName": "announced"
    },
    "1676": {
        "ProcessName": "triald"
    },
    "1677": {
        "ProcessName": "siriknowledged"
    },
    "1678": {
        "ProcessName": "siriinferenced"
    },
    "1679": {
        "ProcessName": "siriactionsd"
    },
    "1680": {
        "ProcessName": "voiced"
    },
    "1681": {
        "ProcessName": "webbookmarksd"
    },
    "1682": {
        "ProcessName": "ThreeBarsXPCService"
    },
    "1683": {
        "ProcessName": "useractivityd"
    },
    "1686": {
        "ProcessName": "AccessibilityUIServer"
    },
    "1687": {
        "ProcessName": "contactsd"
    },
    "1688": {
        "ProcessName": "captiveagent"
    },
    "1689": {
        "ProcessName": "CollectionsPoster"
    },
    "1690": {
        "ProcessName": "NewsToday2"
    },
    "1691": {
        "ProcessName": "PhotosReliveWidget"
    },
    "1692": {
        "ProcessName": "WiFiCloudAssetsXPCService"
    },
    "1693": {
        "ProcessName": "mapspushd"
    },
    "1694": {
        "ProcessName": "com.apple.siri.embeddedspeech"
    },
    "1695": {
        "ProcessName": "AppSSODaemon"
    },
    "1696": {
        "ProcessName": "parsecd"
    },
    "1697": {
        "ProcessName": "sosd"
    },
    "1698": {
        "ProcessName": "seserviced"
    },
    "1699": {
        "ProcessName": "MusicWidgets"
    },
    "1700": {
        "ProcessName": "GSSCred"
    },
    "1701": {
        "ProcessName": "medialibraryd"
    },
    "1702": {
        "ProcessName": "ckdiscretionaryd"
    },
    "1703": {
        "ProcessName": "FMDMagSafeExtension"
    },
    "1704": {
        "ProcessName": "coreauthd"
    },
    "1705": {
        "ProcessName": "fmfd"
    },
    "1706": {
        "ProcessName": "transparencyd"
    },
    "1707": {
        "ProcessName": "FindMyDeviceBluetoothExtension"
    },
    "1708": {
        "ProcessName": "adid"
    },
    "1709": {
        "ProcessName": "StatusKitAgent"
    },
    "1710": {
        "ProcessName": "intelligenceplatformd"
    },
    "1711": {
        "ProcessName": "gpsd"
    },
    "1712": {
        "ProcessName": "com.apple.FaceTime.FTConversati"
    },
    "1713": {
        "ProcessName": "vmd"
    },
    "1714": {
        "ProcessName": "com.apple.CallKit.CallDirectory"
    },
    "1715": {
        "ProcessName": "CMFSyncAgent"
    },
    "1716": {
        "ProcessName": "symptomsd-diag"
    },
    "1717": {
        "ProcessName": "cdpd"
    },
    "1718": {
        "ProcessName": "ProtectedCloudKeySyncing"
    },
    "1721": {
        "ProcessName": "photoanalysisd"
    },
    "1722": {
        "ProcessName": "StocksWidget"
    },
    "1723": {
        "ProcessName": "OTATaskingAgent"
    },
    "1724": {
        "ProcessName": "ScreenTimeWidgetExtension"
    },
    "1725": {
        "ProcessName": "filecoordinationd"
    },
    "1726": {
        "ProcessName": "AppPredictionIntentsHelperServi"
    },
    "1727": {
        "ProcessName": "ContextService"
    },
    "1728": {
        "ProcessName": "pasted"
    },
    "1729": {
        "ProcessName": "searchd"
    },
    "1730": {
        "ProcessName": "com.apple.MapKit.SnapshotServic"
    },
    "1731": {
        "ProcessName": "fileproviderd"
    },
    "1732": {
        "ProcessName": "accessoryd"
    },
    "1733": {
        "ProcessName": "nesessionmanager"
    },
    "1734": {
        "ProcessName": "bird"
    },
    "1737": {
        "ProcessName": "osanalyticshelper"
    },
    "1738": {
        "ProcessName": "AssetCacheLocatorService"
    },
    "1739": {
        "ProcessName": "ContainerMetadataExtractor"
    },
    "1740": {
        "ProcessName": "com.apple.CloudDocs.MobileDocum"
    },
    "1741": {
        "ProcessName": "cloudphotod"
    },
    "1742": {
        "ProcessName": "Preferences"
    },
    "1743": {
        "ProcessName": "Sileo"
    },
    "1744": {
        "ProcessName": "palera1nLoader"
    },
    "1745": {
        "ProcessName": "SubstituteSettings"
    },
    "1746": {
        "ProcessName": "UsageTrackingAgent"
    },
    "1747": {
        "ProcessName": "diagnosticextensionsd"
    },
    "1748": {
        "ProcessName": "MTLCompilerService"
    },
    "1749": {
        "ProcessName": "privacyaccountingd"
    },
    "1750": {
        "ProcessName": "PerfPowerTelemetryClientRegistr"
    },
    "1751": {
        "ProcessName": "rtcreportingd"
    },
    "1752": {
        "ProcessName": "HeuristicInterpreter"
    },
    "1753": {
        "ProcessName": "UserFontManager"
    },
    "1754": {
        "ProcessName": "bookassetd"
    },
    "1755": {
        "ProcessName": "mc_mobile_tunnel"
    },
    "1756": {
        "ProcessName": "UserFontServices"
    },
    "1757": {
        "ProcessName": "UARPUpdaterServiceUSBPD"
    },
    "1758": {
        "ProcessName": "UARPUpdaterServiceHID"
    },
    "1759": {
        "ProcessName": "UARPUpdaterServiceLegacyAudio"
    },
    "1760": {
        "ProcessName": "UARPUpdaterServiceAFU"
    },
    "1761": {
        "ProcessName": "TVRemoteConnectionService"
    },
    "1762": {
        "ProcessName": "tailspind"
    },
    "1764": {
        "ProcessName": "adprivacyd"
    },
    "1765": {
        "ProcessName": "pipelined"
    },
    "1766": {
        "ProcessName": "AegirPoster"
    },
    "1767": {
        "ProcessName": "PridePosterExtension"
    },
    "1768": {
        "ProcessName": "ospredictiond"
    },
    "1770": {
        "ProcessName": "nanoregistrylaunchd"
    },
    "1771": {
        "ProcessName": "fitnesscoachingd"
    },
    "1772": {
        "ProcessName": "ReportCrash"
    },
    "1773": {
        "ProcessName": "promotedcontentd"
    },
    "1774": {
        "ProcessName": "linkd"
    },
    "1775": {
        "ProcessName": "coresymbolicationd"
    },
    "1777": {
        "ProcessName": "com.apple.MobileSoftwareUpdate."
    },
    "1778": {
        "ProcessName": "SiriTTSSynthesizerAU"
    },
    "1779": {
        "ProcessName": "videosubscriptionsd"
    },
    "1781": {
        "ProcessName": "financed"
    },
    "1782": {
        "ProcessName": "KonaSynthesizer"
    },
    "1783": {
        "ProcessName": "MacinTalkAUSP"
    },
    "1785": {
        "ProcessName": "mmaintenanced"
    },
    "1786": {
        "ProcessName": "mlruntimed"
    },
    "1787": {
        "ProcessName": "asd"
    },
    "1788": {
        "ProcessName": "maild"
    },
    "1790": {
        "ProcessName": "ndoagent"
    },
    "1791": {
        "ProcessName": "ind"
    },
    "1792": {
        "ProcessName": "absd"
    },
    "1793": {
        "ProcessName": "fairplaydeviceidentityd"
    },
    "1794": {
        "ProcessName": "deleted_helper"
    },
    "1796": {
        "ProcessName": "replayd"
    },
    "1797": {
        "ProcessName": "CacheDeleteAppContainerCaches"
    },
    "1799": {
        "ProcessName": "sensorkitd"
    },
    "1800": {
        "ProcessName": "MobileBackupCacheDeleteService"
    },
    "1801": {
        "ProcessName": "com.apple.quicklook.ThumbnailsA"
    },
    "1802": {
        "ProcessName": "kbd"
    },
    "1803": {
        "ProcessName": "translationd"
    },
    "1806": {
        "ProcessName": "progressd"
    },
    "1807": {
        "ProcessName": "extensionkitservice"
    },
    "1808": {
        "ProcessName": "CalendarFocusConfigurationExten"
    },
    "1809": {
        "ProcessName": "MailShortcutsExtension"
    },
    "1810": {
        "ProcessName": "SafariLinkExtension"
    },
    "1811": {
        "ProcessName": "MessagesActionExtension"
    },
    "1812": {
        "ProcessName": "MobileCal"
    },
    "1813": {
        "ProcessName": "weatherd"
    },
    "1814": {
        "ProcessName": "aggregated"
    },
    "1819": {
        "ProcessName": "online-auth-agent"
    },
    "1820": {
        "ProcessName": "remotemanagementd"
    },
    "1821": {
        "ProcessName": "PasscodeSettingsSubscriber"
    },
    "1822": {
        "ProcessName": "ManagementTestSubscriber"
    },
    "1823": {
        "ProcessName": "InteractiveLegacyProfilesSubscr"
    },
    "1824": {
        "ProcessName": "AccountSubscriber"
    },
    "1825": {
        "ProcessName": "LegacyProfilesSubscriber"
    },
    "1826": {
        "ProcessName": "budd"
    },
    "1827": {
        "ProcessName": "softwareupdateservicesd"
    },
    "1830": {
        "ProcessName": "installd"
    },
    "1831": {
        "ProcessName": "com.apple.MobileInstallationHel"
    },
    "1832": {
        "ProcessName": "passwordbreachd"
    },
    "1833": {
        "ProcessName": "SafariBookmarksSyncAgent"
    },
    "1834": {
        "ProcessName": "healthappd"
    },
    "1835": {
        "ProcessName": "dataaccessd"
    },
    "1836": {
        "ProcessName": "DayStreamProcessorService"
    },
    "1837": {
        "ProcessName": "HistoricalAnalyzerService"
    },
    "1838": {
        "ProcessName": "metrickitd"
    },
    "1839": {
        "ProcessName": "com.apple.SiriTTSService.TrialP"
    },
    "1840": {
        "ProcessName": "ASPCarryLog"
    },
    "1844": {
        "ProcessName": "clipserviced"
    },
    "1846": {
        "ProcessName": "LocalStorageFileProvider"
    },
    "1849": {
        "ProcessName": "appleaccountd"
    },
    "1855": {
        "ProcessName": "activityawardsd"
    },
    "1856": {
        "ProcessName": "betaenrollmentd"
    },
    "1857": {
        "ProcessName": "AMPIDService"
    },
    "1858": {
        "ProcessName": "proactiveeventtrackerd"
    },
    "1861": {
        "ProcessName": "remotepairingdeviced"
    },
    "1865": {
        "ProcessName": "biomesyncd"
    },
    "1866": {
        "ProcessName": "com.apple.sbd"
    },
    "1867": {
        "ProcessName": "Spotlight"
    },
    "1869": {
        "ProcessName": "splashboardd"
    },
    "1870": {
        "ProcessName": "geocorrectiond"
    },
    "1871": {
        "ProcessName": "com.apple.VideoSubscriberAccoun"
    },
    "1872": {
        "ProcessName": "gamecontrollerd"
    },
    "1873": {
        "ProcessName": "MTLCompilerService"
    },
    "1874": {
        "ProcessName": "MTLCompilerService"
    },
    "1875": {
        "ProcessName": "com.apple.StreamingUnzipService"
    },
    "1877": {
        "ProcessName": "FinHealthXPCServices"
    },
    "1884": {
        "ProcessName": "extensionkitservice"
    },
    "1885": {
        "ProcessName": "PassKitEngagementExtension"
    },
    "1891": {
        "ProcessName": "fitcored"
    },
    "1897": {
        "ProcessName": "ptpd"
    },
    "1899": {
        "ProcessName": "mobile_installation_proxy"
    },
    "1900": {
        "ProcessName": "springboardservicesrelay"
    },
    "1902": {
        "ProcessName": "afcd"
    }
}