systemstats

executablemacOS2.9 MBx86_64, arm64

System power and performance management daemon — monitors and adjusts hardware state

Manages macOS power states, CPU/GPU performance, and thermal conditions through IOKit hardware control. Monitors battery status, thermal sensors, and system load to dynamically adjust processor frequency, GPU performance, and display settings. Communicates with Bluetooth and WiFi subsystems to optimize power consumption during wireless operations. Collects telemetry on power usage and thermal events for system diagnostics. Exposes 11 XPC services for system components and preferences to query power state and request performance adjustments.AI

Fingerprint

Platform: macOS
Type: executable
Arch: x86_64, arm64
Min OS: 26.1.0
SDK: 26.1.0
File Size: 2.9 MB
UUID: 76993A8D-83D8-385B-847D-742DEB2D433B
Analyzed: 2026-04-09T10:16:44Z
CDHash: 7c5c8e76ce5a30a90468296e282af12f64c0df0536b003d00bbfeabfe2c9ce0f

Capabilities

HardwareDirect hardware/driver communication

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

HardwareIOKit power/performance reporting

/usr/lib/libIOReport.dylib

HardwareBluetooth LE device access

/System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetooth

HardwareWiFi interface control

/System/Library/Frameworks/CoreWLAN.framework/Versions/A/CoreWLAN

IpcProtocol buffer serialization

/System/Library/PrivateFrameworks/ProtocolBuffer.framework/Versions/A/ProtocolBuffer

Entitlements8

com.apple.bluetooth.systemtrue

com.apple.ibridge.controltrue

com.apple.private.applesmc.user-accesstrue

com.apple.private.ioaccelmemoryinfotrue

com.apple.private.logging.streamtrue

com.apple.private.xpc.launchd.event-monitortrue

com.apple.sysmond.clienttrue

com.apple.wifi.eventstrue

Interesting Strings

Bundle IDs(161)

com.apple.private.logging.stream #com.apple.private.ioaccelmemoryinfo &com.apple.private.applesmc.user-access +com.apple.private.xpc.launchd.event-monitor <key>com.apple.bluetooth.system</key>

File Paths(25)

(3) analytics archives saved at /Library/Logs/DiagnosticReports/SystemStats_FullTimeSeries_<timestamp>.system_stats /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio /System/Library/Frameworks/CoreBluetooth.framework/Versions/A/CoreBluetooth /System/Library/Frameworks/CoreDisplay.framework/Versions/A/CoreDisplay /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation

iokit_constants(1)

IO80211Controller

telemetry(64)

(3) analytics archives saved at /Library/Logs/DiagnosticReports/SystemStats_FullTimeSeries_<timestamp>.system_stats === SystemStats analytics sharing history ====== Time-series analytics status ===Aggregate analytics shared in the next report may include dates %@.Aggregate analytics was last shared on date %@.

URLs & Endpoints(4)

$http://crl.apple.com/codesigning.crl0 %http://www.apple.com/appleca/root.crl0 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">https://www.apple.com/appleca/0

Network Surface

Networking Frameworks

CoreFoundation Foundation

Endpoints(20)

Hostnameevent.name

Hostnametlvl.io

Hostnamequicklook.panel.opening-animation

Hostnamequicklook.seamless.legacy-opening

HostnameNSScrollView.Daily-CanvasScrollView.NSScrollGesture

HostnameNSScrollView.7-day-CanvasScrollView.NSScrollGesture

HostnameNSScrollView.MessageWebHTMLView.nil-identifier.ScrollGesture

HostnameNSScrollView.InfiniteSwipeControllerDocumentView.7-day.NSScrollGesture

HostnameNSScrollView.PDFDocumentView.nil-identifier.ScrollGesture

HostnameNSScrollView.UXCollectionDocumentView.nil-identifier.ScrollGesture

HostnameNSScrollView.WebHTMLView.nil-identifier.ScrollGesture

HostnameNSScrollView.SourceEditor.SourceEditorContentView.nil-identifier.ScrollGesture

Hostnamese.popcorn-time.PopcornTime

Urlhttp://www.apple.com/DTDs/PropertyList-1.0.dtd">

Hostnamewww.apple.com

Urlhttp://www.apple.com/appleca/root.crl0

Urlhttp://crl.apple.com/codesigning.crl0

Hostnamecrl.apple.com

Urlhttps://www.apple.com/appleca/0

DNA Capability Vector

Location

0

Keychain

0

Network

0

Storage

0

Hardware

4

IPC

1

Analytics

0

Security

0

System

0

Behavioral Profile

URL Endpoints

4

Telemetry Strings

64

File Paths

25

Bundle IDs

161

IOKit Constants

1

Library Functions

0

Structural HashesSHA-256

Codead24d8b510597a70e899e263f2548eeda6f26ca2eb00cebed9b6faaaa2def524

Imports3b072bb11f2934a24097b3137c860558e5b076d86752b30f9da6ade70a20ff85

Frameworks856901dfce532fb9ee8f88be93b485ecd5e74bba89911853ef2991acf6f4d1e4

Classes2571cfff8923fd111889dfa413dece30077f704ebcff029fd6493b2134b783a7

Entitlements6f02f1c69d40f14f685f3b78219f0857eba6923e36b4abb92090ec0cb867b571

Symbols64836c80b970c8a8da579d23165919817970328327abdf444f6d13d9b7e30bc5

Static Libraries0 / 4749 functions identified

Functions(4749)

0x100001648-[CoalitionUsageResolution description]

0x100001700-[CoalitionUsageResolution dictionaryRepresentation]

0x1000017f0sub_1000017f0

0x100001bb4-[CoalitionUsageResolution readFrom:]

0x100001bbc-[CoalitionUsageResolution writeTo:]

0x100001c48-[CoalitionUsageResolution copyTo:]

0x100001c80-[CoalitionUsageResolution copyWithZone:]

0x100001d08-[CoalitionUsageResolution isEqual:]

0x100001dc4-[CoalitionUsageResolution hash]

0x100001e20-[CoalitionUsageResolution mergeFrom:]

0x100001e58-[CoalitionUsageResolution absoluteTime]

0x100001e68-[CoalitionUsageResolution setAbsoluteTime:]

0x100001e78-[CoalitionUsageResolution cid]

0x100001e88-[CoalitionUsageResolution setCid:]

0x100001e98-[CoalitionUsageResolution guessedBundleIdentifier]

0x100001ea8-[CoalitionUsageResolution setGuessedBundleIdentifier:]

0x100001ebc-[CoalitionUsageResolution .cxx_destruct]

0x100001ed0-[VideoEventVT hasLogID]

0x100001ee8-[VideoEventVT setIsHardware:]

0x100001f0c-[VideoEventVT setHasIsHardware:]

Imports466 symbols from 23 dylibs

libSystem.B.dylib152 CoreFoundation79 IOKit46 libsystemstats.dylib39 libobjc.A.dylib35

Exports1

_mh_execute_header0x0

Similar Binaries1,470 comparable

securityd_system

bluetoothaudiod

peakpowermanagerd

WirelessRadioManagerd

audioclocksyncd