powerlogHelperd

executablemacOS147.5 KBx86_64, arm64

Wi-Fi peer-to-peer daemon — manages local wireless direct connections

Establishes and maintains Wi-Fi peer-to-peer connections between nearby Apple devices without requiring a standard access point. Communicates with the main WiFi daemon via IPC and queries process state from RunningBoard to coordinate networking operations. Submits diagnostic telemetry to Apple regarding connection quality and performance. Exposes six XPC services for system components and applications to initiate or monitor peer-to-peer sessions. Controls display elements through SkyLight to show connection status or pairing interfaces.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 147.5 KB
UUID: 288E0742-F39F-36EE-B224-6787C476F22E
Analyzed: 2026-04-09T09:59:59Z
CDHash: b0118323ac8f6dc4f56466deae57698fd2431c31bb182615a544f177d3648ee4

Capabilities

StoragePrivate storage area access

com.apple.private.security.storage.AppDataContainers [object Object]

StoragePrivate storage area access

com.apple.private.security.storage.Spotlight [object Object]

IpcQuery process state from RunningBoard

com.apple.runningboard.process-state [object Object]

IpcException: access additional Mach services

com.apple.security.exception.mach-lookup.global-name

com.apple.computesafeguards.managing com.apple.ind.cloudfeatures com.apple.ind.xpc com.apple.batteryintelligenced.batteryanalysis

IpcCommunicate with WiFi peer-to-peer daemon

com.apple.wifip2pd [object Object]

AnalyticsSubmit symptom diagnostic reports

com.apple.symptom_diagnostics.report [object Object]

SystemControl display via SkyLight (window server)

com.apple.private.SkyLight.displaycontrol [object Object]

Frameworks7

Foundation PowerlogCore PowerlogHelperdOperators PerfPowerMetricMonitor libobjc.A.dylib libSystem.B.dylib CoreFoundation

Entitlements125

application-identifier com.apple.PerfPowerServicesExtended

aps-connection-initiatetrue

backupd-connection-initiatetrue

com.apple.AssistiveTouchtrue

com.apple.CommCenter.fine-grained

com.apple.CoreTelephony.DataUsageInfo.allowtrue

com.apple.PerfPowerServices.data-donationtrue

com.apple.PerfPowerServices.launch-xpctrue

com.apple.PerfPowerServices.signpost-readingtrue

com.apple.PerformanceTrace.Tracingtrue

com.apple.QuartzCore.debugtrue

com.apple.QuartzCore.displayable-contexttrue

com.apple.QuartzCore.get-infotrue

com.apple.QuartzCore.global-capturetrue

com.apple.QuartzCore.secure-capturetrue

com.apple.QuartzCore.secure-modetrue

com.apple.SystemConfiguration.SCPreferences-write-access

preferences.plist

com.apple.accessibility.apitrue

com.apple.afk.usertrue

com.apple.aop.hid-device.user-client <dict>

com.apple.aop.user-client.full-accesstrue

com.apple.application-identifier com.apple.PerfPowerServicesExtended

com.apple.backboard.displaybrightnesstrue

com.apple.backboardd.lastUserEventTimetrue

com.apple.backboardd.proximityStatusEventtrue

com.apple.basebandd.xpc.allowtrue

com.apple.batteryintelligenced.batteryanalysis-readtrue

com.apple.bluetooth.systemtrue

com.apple.computesafeguards.managing.allowtrue

com.apple.coreduetd.allowtrue

com.apple.coreduetd.contexttrue

com.apple.developer.device-information.user-assigned-device-nametrue

com.apple.developer.icloud-container-environment Production

com.apple.developer.icloud-services

com.apple.diagnosticpipeline.admintrue

com.apple.diagnosticpipeline.requesttrue

com.apple.diagnosticpipeline.tasking.perfpowerservices.configtrue

com.apple.diagnosticpipeline.tasking.perfpowerservices.rapid.configtrue

com.apple.duet.activityscheduler.allowtrue

com.apple.frontboardservices.display-layout-monitortrue

com.apple.hid.manager.user-access-privilegedtrue

com.apple.hid.manager.user-access-protectedtrue

com.apple.icloud.searchpartyd.beaconmanagertrue

com.apple.itunesstored.privatetrue

com.apple.locationd.activitytrue

com.apple.locationd.statustrue

com.apple.lsapplicationproxy.deviceidentifierforvendortrue

com.apple.mkb.usersession.infotrue

com.apple.nano.nanoregistry.generalaccesstrue

com.apple.networkrelay.deviceMonitortrue

com.apple.networkrelay.devices.readtrue

com.apple.nfcacd.hwmanagertrue

com.apple.nfcd.hwmanagertrue

com.apple.nfcd.session.setrue

com.apple.osanalytics.otatasking-service-accesstrue

com.apple.powerd.extendedbatterytrue

com.apple.powerlog.PPSFeatureFlagReader.launch-xpctrue

com.apple.powerui.smartchargingtrue

com.apple.private.LTSStats-readtrue

com.apple.private.SkyLight.displaycontroltrue

com.apple.private.accessories.showallconnectionstrue

com.apple.private.accounts.allaccountstrue

com.apple.private.applegraphicsdevicecontroltrue

com.apple.private.applesmc.user-accesstrue

com.apple.private.bdc.taskingtrue

com.apple.private.cloudkit.buddyAccesstrue

com.apple.private.cloudkit.setEnvironmenttrue

com.apple.private.cloudkit.spitrue

com.apple.private.cloudkit.systemLaunchDaemonAccesstrue

com.apple.private.cloudkit.systemServicetrue

com.apple.private.clpc.reportingtrue

com.apple.private.exposure-notificationtrue

com.apple.private.externalaccessory.showallaccessoriestrue

com.apple.private.hid.client.admintrue

com.apple.private.hid.client.event-monitortrue

com.apple.private.hid.manager.clienttrue

com.apple.private.ind.clienttrue

com.apple.private.ioaccelmemoryinfotrue

com.apple.private.iokit.BDCDataCopytrue

com.apple.private.iokit.battery-gauging-mitigationtrue

com.apple.private.iokit.batterydatatrue

com.apple.private.iokit.batterydataprecisetrue

com.apple.private.iokit.charging-iconographytrue

com.apple.private.iokit.powerloggingtrue

com.apple.private.ioreporting.accesstrue

com.apple.private.kernel.global-proc-infotrue

com.apple.private.kernel.userspacereboot-info-read-onlytrue

com.apple.private.logging.diagnostictrue

com.apple.private.mcc.bwstats-accesstrue

com.apple.private.mcc.datacollection-accesstrue

com.apple.private.memorystatustrue

com.apple.private.network.statisticstrue

com.apple.private.power.notificationstrue

com.apple.private.powersource-readtrue

com.apple.private.ppm.superclienttrue

com.apple.private.roots-installed-read-onlytrue

com.apple.private.security.storage.AppDataContainerstrue

com.apple.private.security.storage.Spotlighttrue

com.apple.private.tcc.allow

kTCCServiceLiverpool kTCCServiceListenEvent kTCCServiceExposureNotification

com.apple.private.usage-trackingtrue

com.apple.private.usernotifications.bundle-identifiers

com.apple.powerlog.proactivenotifications

com.apple.private.xpc.allowed-get-service-nametrue

com.apple.private.xpc.launchd.service-statstrue

com.apple.rootless.storage.coreduet_knowledge_storetrue

com.apple.runningboard.process-statetrue

com.apple.security.exception.mach-lookup.global-name

com.apple.computesafeguards.managing com.apple.ind.cloudfeatures com.apple.ind.xpc com.apple.batteryintelligenced.batteryanalysis

com.apple.security.exception.shared-preference.read-only

com.apple.preferences.sounds com.apple.keyboard.preferences

com.apple.security.exception.sysctl.read-only

kern.memorystatus_vm_pressure_level

com.apple.security.iokit-user-client-class

AFKEndpointInterfaceUserClient ASPUserClient AppleAPFSUserClient AppleNVMeUpdateUC ApplePPMUserClient IOGPUMemoryInfoUserClient IOMobileFramebufferUserClient IOReportUserClient RootDomainUserClient AppleMCCUserClient AppleSMCClient AppleSPUHIDDeviceUserClient IOHIDLibUserClient AppleCLPCUserClient AppleSPUUserClient

com.apple.security.system-groups

systemgroup.com.apple.powerlog systemgroup.com.apple.osanalytics

com.apple.security.temporary-exception.sbpl

(allow system-fsctl (fsctl-command APFSIOC_MARK_PURGEABLE))(allow system-fsctl (fsctl-command APFSIOC_PURGEABLE_GET_FILE_INFO))(allow system-fsctl (fsctl-command APFSIOC_PURGEABLE_LABEL_PURGEABLE))

com.apple.symptom_analytics.network_bitmaptrue

com.apple.symptom_analytics.querytrue

com.apple.symptom_analytics.refreshtrue

com.apple.symptom_diagnostics.reporttrue

com.apple.system-task-ports.name.safetrue

com.apple.telephonyutilities.callservicesd

com.apple.trial.client

com.apple.trial.status.deployment-environment.allow

com.apple.wifi.eventstrue

com.apple.wifi.events.privatetrue

com.apple.wifi.manager-accesstrue

com.apple.wifip2pdtrue

orientation <dict>

send-command <dict/>

Interesting Strings

Bundle IDs(263)

com.apple.QuartzCore.secure-mode com.apple.application-identifier com.apple.powerd.extendedbattery com.apple.private.clpc.reporting com.apple.private.usage-tracking

File Paths(7)

/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation /System/Library/PrivateFrameworks/PerfPowerMetricMonitor.framework/Versions/A/PerfPowerMetricMonitor /System/Library/PrivateFrameworks/PowerlogCore.framework/Versions/A/PowerlogCore /System/Library/PrivateFrameworks/PowerlogHelperdOperators.framework/Versions/A/PowerlogHelperdOperators

telemetry(13)

!com.apple.symptom_analytics.query !systemgroup.com.apple.osanalytics0 #com.apple.symptom_analytics.refresh $com.apple.symptom_diagnostics.report *com.apple.symptom_analytics.network_bitmap

URLs & Endpoints(8)

$com.apple.computesafeguards.managing $http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 *com.apple.computesafeguards.managing.allow <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(7)

Hostnamepowerlog-2964.40.32

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

2

Hardware

0

IPC

3

Analytics

1

Security

0

System

1

Behavioral Profile

URL Endpoints

8

Telemetry Strings

13

File Paths

7

Bundle IDs

263

IOKit Constants

0

Library Functions

0

Structural HashesSHA-256

Codeea39004ee10a6ace69f821e40c6d405e102aa804e3d94d664c08ad08148eba38

Imports214191d122751033a5394fed11b3b47338b6ef4aace7dae01d4a189efc3a6b52

Frameworks475683027d15adb6cc6057dc7d3cf75fb620c8919f10e57395dd795f9e8e0cde

Classese3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Entitlementsac4f9b37d10200d9b8476f79ab196bd104a13759ec63b4cab8c5fe49c9aa0547

Symbols214191d122751033a5394fed11b3b47338b6ef4aace7dae01d4a189efc3a6b52

Static Libraries0 / 2 functions identified

Functions(2)

0x100000958sub_100000958

0x100000aa8sub_100000aa8

Imports14 symbols from 4 dylibs

CoreFoundation6 libobjc.A.dylib5 PowerlogCore2 Foundation1

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

perfpowermetricd

PerfPowerServicesExtended

PerfPowerServices

diagnosticextensionsd

AirPlayXPCHelper