[{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WatchListKit.framework/Support/watchlistd","architecture":"arm64e","file_type":"EXECUTE","size":1599904,"records":3805},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WeatherDaemon.framework/weatherd","architecture":"arm64e","file_type":"EXECUTE","size":2581024,"records":3868},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WeatherFoundation.framework/Versions/A/XPCServices/WeatherService.xpc/Contents/MacOS/WeatherService","architecture":"arm64e","file_type":"EXECUTE","size":1023712,"records":3050},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WeatherFoundation.framework/Versions/A/XPCServices/WeatherService_iosmac.xpc/Contents/MacOS/WeatherService_iosmac","architecture":"arm64e","file_type":"EXECUTE","size":1025488,"records":3110},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WebPrivacy.framework/Versions/A/webprivacyd","architecture":"arm64e","file_type":"EXECUTE","size":989200,"records":751},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WiFiPolicy.framework/XPCServices/ThreeBarsXPCService.xpc/Contents/MacOS/ThreeBarsXPCService","architecture":"arm64e","file_type":"EXECUTE","size":218928,"records":344},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WiFiPolicy.framework/XPCServices/WiFiCloudAssetsXPCService.xpc/Contents/MacOS/WiFiCloudAssetsXPCService","architecture":"arm64e","file_type":"EXECUTE","size":389456,"records":911},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WiFiVelocity.framework/PlugIns/DiagnosticExtension.appex/Contents/MacOS/DiagnosticExtension","architecture":"arm64e","file_type":"EXECUTE","size":218896,"records":152},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WirelessCoexManager.framework/PlugIns/WRMDiagnosticExtension.appex/Contents/MacOS/WRMDiagnosticExtension","architecture":"arm64e","file_type":"EXECUTE","size":218144,"records":117},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Versions/A/Libraries/libAWDProtobufBluetooth.dylib","architecture":"arm64e","file_type":"DYLIB","size":3582352,"records":4052},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Versions/A/Libraries/libAWDProtobufFacetimeiMessage.dylib","architecture":"arm64e","file_type":"DYLIB","size":133216,"records":10},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WirelessDiagnostics.framework/Versions/A/Libraries/libAWDProtobufLocation.dylib","architecture":"arm64e","file_type":"DYLIB","size":4677392,"records":5773},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WorkflowKit.framework/PlugIns/ShortcutsIntents.appex/Contents/MacOS/ShortcutsIntents","architecture":"arm64e","file_type":"EXECUTE","size":388864,"records":906},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WorkflowKit.framework/XPCServices/BackgroundShortcutRunner.xpc/Contents/MacOS/BackgroundShortcutRunner","architecture":"arm64e","file_type":"EXECUTE","size":2708416,"records":3108},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WorkflowKit.framework/XPCServices/CatalystHelper.xpc/Contents/MacOS/CatalystHelper","architecture":"arm64e","file_type":"EXECUTE","size":217568,"records":191},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WorkflowKit.framework/XPCServices/ShortcutsFileAccessHelper.xpc/Contents/MacOS/ShortcutsFileAccessHelper","architecture":"arm64e","file_type":"EXECUTE","size":217280,"records":176},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WorkflowKit.framework/XPCServices/ShortcutsMacHelper.xpc/Contents/MacOS/ShortcutsMacHelper","architecture":"arm64e","file_type":"EXECUTE","size":373728,"records":833},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WorkflowKit.framework/XPCServices/ShortcutsViewService.xpc/Contents/MacOS/ShortcutsViewService","architecture":"arm64e","file_type":"EXECUTE","size":1127104,"records":2500},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WorkflowUIServices.framework/XPCServices/FocusConfigurationXPCServiceMac.xpc/Contents/MacOS/FocusConfigurationXPCServiceMac","architecture":"arm64e","file_type":"EXECUTE","size":660560,"records":1334},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/WritingToolsUI.framework/Versions/A/XPCServices/WritingToolsViewService.xpc/Contents/MacOS/WritingToolsViewService","architecture":"arm64e","file_type":"EXECUTE","size":8436176,"records":6822},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/XCTAutomationSupport.framework/Versions/A/XPCServices/LogArchiveCollector.xpc/Contents/MacOS/LogArchiveCollector","architecture":"arm64e","file_type":"EXECUTE","size":224256,"records":290},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XProtectBridgeService.xpc/Contents/MacOS/XProtectBridgeService","architecture":"arm64","file_type":"EXECUTE","size":136736,"records":266},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XProtectUpdateService.xpc/Contents/MacOS/XProtectUpdateService","architecture":"arm64e","file_type":"EXECUTE","size":807088,"records":1350},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/XprotectFramework.framework/Versions/A/XPCServices/XprotectService.xpc/Contents/MacOS/XprotectService","architecture":"arm64e","file_type":"EXECUTE","size":628944,"records":1994},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iCloudDriveCore.framework/PlugIns/CloudDocsDiagnostic.appex/Contents/MacOS/CloudDocsDiagnostic","architecture":"arm64e","file_type":"EXECUTE","size":273792,"records":407},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iCloudDriveCore.framework/PlugIns/CloudDocsStorageManagement.appex/Contents/MacOS/CloudDocsStorageManagement","architecture":"arm64e","file_type":"EXECUTE","size":323296,"records":694},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iCloudDriveCore.framework/Versions/A/Resources/iCloud Drive.app/Contents/MacOS/iCloud Drive","architecture":"arm64e","file_type":"EXECUTE","size":100944,"records":11},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iCloudDriveCore.framework/Versions/A/Support/bird","architecture":"arm64e","file_type":"EXECUTE","size":228960,"records":295},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iCloudDriveService.framework/XPCServices/ContainerMetadataExtractor.xpc/Contents/MacOS/ContainerMetadataExtractor","architecture":"arm64e","file_type":"EXECUTE","size":272832,"records":405},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iCloudDriveService.framework/XPCServices/TelemetryDiskChecker.xpc/Contents/MacOS/TelemetryDiskChecker","architecture":"arm64e","file_type":"EXECUTE","size":389424,"records":862},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iCloudNotification.framework/iCloudNotificationAgent","architecture":"arm64e","file_type":"EXECUTE","size":1128096,"records":3152},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iCloudQuota.framework/PlugIns/ICQFollowup.appex/Contents/MacOS/ICQFollowup","architecture":"arm64e","file_type":"EXECUTE","size":275616,"records":504},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iCloudQuotaNetworking.framework/Versions/A/XPCServices/iCloudQuotaNetworkingService.xpc/Contents/MacOS/iCloudQuotaNetworkingService","architecture":"arm64e","file_type":"EXECUTE","size":216640,"records":197},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iPodUpdater.framework/Versions/A/Resources/UpdaterBackEnd","architecture":"arm64e","file_type":"EXECUTE","size":269664,"records":480},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iTunesCloud.framework/Support/itunescloudd","architecture":"arm64e","file_type":"EXECUTE","size":3699280,"records":10499},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iTunesCloud.framework/Versions/A/XPCServices/SharedListeningConnectionService.xpc/Contents/MacOS/SharedListeningConnectionService","architecture":"arm64e","file_type":"EXECUTE","size":253536,"records":379},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/iWorkXPC.framework/Versions/A/XPCServices/iWorkFileFormat.xpc/Contents/MacOS/iWorkFileFormat","architecture":"arm64e","file_type":"EXECUTE","size":7620480,"records":12873},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/login.framework/Versions/A/XPCServices/LoginUserService.xpc/Contents/MacOS/LoginUserService","architecture":"arm64e","file_type":"EXECUTE","size":218816,"records":270},{"source":"filesystem","logical_path":"/System/Library/PrivateFrameworks/oncrpc.framework/bin/rpcgen","architecture":"arm64e","file_type":"EXECUTE","size":399184,"records":718},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Audio.qlgenerator/Contents/MacOS/Audio","architecture":"arm64e","file_type":"BUNDLE","size":219664,"records":182},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Clippings.qlgenerator/Contents/MacOS/Clippings","architecture":"arm64e","file_type":"BUNDLE","size":219104,"records":160},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Contact.qlgenerator/Contents/MacOS/Contact","architecture":"arm64e","file_type":"BUNDLE","size":220064,"records":282},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Font.qlgenerator/Contents/MacOS/Font","architecture":"arm64e","file_type":"BUNDLE","size":219920,"records":151},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Icon.qlgenerator/Contents/MacOS/Icon","architecture":"arm64e","file_type":"BUNDLE","size":217920,"records":102},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Illustrator.qlgenerator/Contents/MacOS/Illustrator","architecture":"arm64e","file_type":"BUNDLE","size":218432,"records":135},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Image.qlgenerator/Contents/MacOS/Image","architecture":"arm64e","file_type":"BUNDLE","size":167504,"records":60},{"source":"filesystem","logical_path":"/System/Library/QuickLook/LivePhoto.qlgenerator/Contents/MacOS/LivePhoto","architecture":"arm64e","file_type":"BUNDLE","size":217440,"records":91},{"source":"filesystem","logical_path":"/System/Library/QuickLook/LocPDF.qlgenerator/Contents/MacOS/LocPDF","architecture":"arm64e","file_type":"BUNDLE","size":219696,"records":164},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Movie.qlgenerator/Contents/MacOS/Movie","architecture":"arm64e","file_type":"BUNDLE","size":221280,"records":237},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Office.qlgenerator/Contents/MacOS/Office","architecture":"arm64e","file_type":"BUNDLE","size":224464,"records":324},{"source":"filesystem","logical_path":"/System/Library/QuickLook/PDF.qlgenerator/Contents/MacOS/PDF","architecture":"arm64e","file_type":"BUNDLE","size":219568,"records":154},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Package.qlgenerator/Contents/MacOS/Package","architecture":"arm64e","file_type":"BUNDLE","size":186000,"records":122},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Security.qlgenerator/Contents/MacOS/Security","architecture":"arm64e","file_type":"BUNDLE","size":273296,"records":440},{"source":"filesystem","logical_path":"/System/Library/QuickLook/StandardBundles.qlgenerator/Contents/MacOS/StandardBundles","architecture":"arm64e","file_type":"BUNDLE","size":218752,"records":162},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Text.qlgenerator/Contents/MacOS/Text","architecture":"arm64e","file_type":"BUNDLE","size":218944,"records":151},{"source":"filesystem","logical_path":"/System/Library/QuickLook/Web.qlgenerator/Contents/MacOS/Web","architecture":"arm64e","file_type":"BUNDLE","size":200704,"records":80},{"source":"filesystem","logical_path":"/System/Library/QuickLook/iCal.qlgenerator/Contents/MacOS/iCal","architecture":"arm64e","file_type":"BUNDLE","size":270816,"records":396},{"source":"filesystem","logical_path":"/System/Library/QuickLook/iWork.qlgenerator/Contents/MacOS/iWork","architecture":"arm64e","file_type":"BUNDLE","size":2194752,"records":7792},{"source":"filesystem","logical_path":"/System/Library/Recents/Plugins/GenericAddressHandler.addresshandler/Contents/MacOS/GenericAddressHandler","architecture":"arm64e","file_type":"BUNDLE","size":217328,"records":188},{"source":"filesystem","logical_path":"/System/Library/Recents/Plugins/MapsRecents.addresshandler/Contents/MacOS/MapsRecents","architecture":"arm64e","file_type":"BUNDLE","size":216704,"records":416},{"source":"filesystem","logical_path":"/System/Library/RemoteUI/Plugins/AppleAccountRUIHooks.bundle/Contents/MacOS/AppleAccountRUIHooks","architecture":"arm64e","file_type":"BUNDLE","size":893296,"records":976},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/ASPCarryLog.sb","architecture":"","file_type":"SBPL source","size":4960,"records":91},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/AudioAccessoryAssetManagementXPCService.sb","architecture":"","file_type":"SBPL source","size":1098,"records":22},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/BTLEServer.sb","architecture":"","file_type":"SBPL source","size":3398,"records":82},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/CoreThreadCommissionerServiced.sb","architecture":"","file_type":"SBPL source","size":2786,"records":50},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/CryptegraftService.sb","architecture":"","file_type":"SBPL source","size":806,"records":19},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/FindMySecureEnvironmentXPCService.sb","architecture":"","file_type":"SBPL source","size":4974,"records":78},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/NANDTaskScheduler.sb","architecture":"","file_type":"SBPL source","size":2232,"records":40},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/NFRestoreService.sb","architecture":"","file_type":"SBPL source","size":2094,"records":37},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/SUCoreHelperService.sb","architecture":"","file_type":"SBPL source","size":2992,"records":46},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/SensingPredictXPCService.sb","architecture":"","file_type":"SBPL source","size":1127,"records":21},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/SpatialAudioProfileXPCService.sb","architecture":"","file_type":"SBPL source","size":1151,"records":23},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/WeatherKitAuthService.sb","architecture":"","file_type":"SBPL source","size":3015,"records":54},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/accessorysensormgrd.sb","architecture":"","file_type":"SBPL source","size":449,"records":14},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/agentmanagerd.sb","architecture":"","file_type":"SBPL source","size":3200,"records":58},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/airlock.sb","architecture":"","file_type":"SBPL source","size":18766,"records":332},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/application.sb","architecture":"","file_type":"SBPL source","size":45509,"records":995},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/appsandbox-common.sb","architecture":"","file_type":"SBPL source","size":33017,"records":790},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/apsd.sb","architecture":"","file_type":"SBPL source","size":7992,"records":149},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/betaenrollmentagent.sb","architecture":"","file_type":"SBPL source","size":4495,"records":82},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/betaenrollmentd.sb","architecture":"","file_type":"SBPL source","size":4444,"records":80},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/blastdoor-ids.sb","architecture":"","file_type":"SBPL source","size":19545,"records":373},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/blastdoor.sb","architecture":"","file_type":"SBPL source","size":19438,"records":371},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/bluetoothuserd.sb","architecture":"","file_type":"SBPL source","size":9480,"records":207},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/bsd.sb","architecture":"","file_type":"SBPL source","size":858,"records":12},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/calaccessd.sb","architecture":"","file_type":"SBPL source","size":8219,"records":140},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/cloudpaird.sb","architecture":"","file_type":"SBPL source","size":11104,"records":220},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/cmioextension.sb","architecture":"","file_type":"SBPL source","size":11695,"records":264},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/colorsyncd.sb","architecture":"","file_type":"SBPL source","size":2038,"records":43},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/com.apple.ANECompilerService.sb","architecture":"","file_type":"SBPL source","size":1817,"records":29},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/com.apple.ANELargeModelCompilerService.sb","architecture":"","file_type":"SBPL source","size":1817,"records":29},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/com.apple.AirPlayXPCHelper.sb","architecture":"","file_type":"SBPL source","size":8068,"records":167},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/com.apple.AppSSOAgent.login.sb","architecture":"","file_type":"SBPL source","size":7030,"records":163},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/com.apple.AppSSOAgent.sb","architecture":"","file_type":"SBPL source","size":9319,"records":209},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/com.apple.AppSSODaemon.preboot.sb","architecture":"","file_type":"SBPL source","size":6341,"records":123},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/com.apple.AppSSODaemon.sb","architecture":"","file_type":"SBPL source","size":6705,"records":128},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/com.apple.AppStoreDaemon.StorePrivilegedODRService.sb","architecture":"","file_type":"SBPL source","size":1036,"records":23},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/com.apple.AppStoreDaemon.StorePrivilegedTaskService.sb","architecture":"","file_type":"SBPL source","size":2129,"records":52},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/com.apple.AppStoreDaemon.StoreUIService.sb","architecture":"","file_type":"SBPL source","size":17396,"records":375},{"source":"filesystem","logical_path":"/System/Library/Sandbox/Profiles/com.apple.Archetype.textcontextd.sb","architecture":"","file_type":"SBPL source","size":3641,"records":67}]