tailspind
executablemacOS291.8 KBx86_64, arm64
System diagnostics collector — gathers hardware and performance telemetry
Collects diagnostic data from hardware sensors, system performance metrics, and application state, then submits telemetry to Apple's unified analytics system. Communicates with multiple Mach services to access low-level system information and hardware telemetry. Manages persistent storage for diagnostic caches and submission queues. Exposes six XPC services to allow other system components to contribute or query diagnostic data. Logs diagnostic events and communicates with Apple's analytics endpoints to report system health and usage patterns.AI
Fingerprint
- Platform
- macOS
- Type
- executable
- Arch
- x86_64, arm64
- Min OS
- 26.1.0
- SDK
- 26.1.0
- File Size
- 291.8 KB
- UUID
- 9E2F7B70-DB3B-377A-97D9-6C378A9AFC33
- Analyzed
- 2026-04-09T10:08:05Z
- CDHash
- 4f06b4041d9f247e18922ad4fa2a256881c96e15f6607f42262ab5369287170d
Capabilities
HardwareDirect hardware/driver communication
/System/Library/Frameworks/IOKit.framework/Versions/A/IOKitIpcException: access additional Mach services
com.apple.security.exception.mach-lookup.global-nameAnalyticsApple unified analytics submission
/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalyticsFrameworks12
Entitlements16
Interesting Strings
Bundle IDs(55)
File Paths(10)
/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit/System/Library/PrivateFrameworks/CoreAnalytics.framework/Versions/A/CoreAnalytics
telemetry(7)
Network Surface
Networking Frameworks
DNA Capability Vector
Location
0
Keychain
0
Network
0
Storage
1
Hardware
1
IPC
1
Analytics
1
Security
0
System
0
Behavioral Profile
URL Endpoints
4
Telemetry Strings
7
File Paths
10
Bundle IDs
55
IOKit Constants
0
Library Functions
0
Structural HashesSHA-256
Static Libraries0 / 224 functions identified
Functions(224)
0x100000f60sub_100000f60
0x100000fb4sub_100000fb4
0x100000ff4-[TSPSaveMeasurements init]
0x10000108c-[TSPSaveMeasurements startRecordingTimeForDumpRequestPhase:pid:]
0x1000011a8-[TSPSaveMeasurements stopRecordingTimeForDumpRequestPhase:]
0x10000131c-[TSPSaveMeasurements startRecordingTimeForSaveStandardChunksPhase:pid:]
0x10000143c-[TSPSaveMeasurements stopRecordingTimeForSaveStandardChunksPhase:]
0x100001550-[TSPSaveMeasurements recordTimeForSaveStandardChunksWithoutPostProcessing:]
0x1000016d0-[TSPSaveMeasurements startRecordingTimeForLibktracePostProcessing]
0x100001788-[TSPSaveMeasurements stopRecordingTimeForLibktracePostProcessing]
0x100001840-[TSPSaveMeasurements startRecordingTimeForTailspinPostProcessing]
0x1000018f8-[TSPSaveMeasurements stopRecordingTimeForTailspinPostProcessing]
0x1000019b0-[TSPSaveMeasurements startRecordingTimeForAugmentPhase:pid:originalFd:dupFd:]
0x100001aec-[TSPSaveMeasurements stopRecordingTimeForAugmentPhase:finalSizeBytes:]
0x100001c14-[TSPSaveMeasurements startRecordingTimeForAugmentLoggingPhase:collectOSLog:scrubData:]
0x100001d34-[TSPSaveMeasurements stopRecordingTimeForAugmentLoggingPhase:]
0x100001e48-[TSPSaveMeasurements startRecordingTimeForAugmentSymbolicatePhase]
0x100001f00-[TSPSaveMeasurements stopRecordingTimeForAugmentSymbolicatePhase]
0x100001fb8-[TSPSaveMeasurements recordRequestProcessingLatencySecsWithStartMCT:endMCT:]
0x100002024-[TSPSaveMeasurements recordTailspinDurationWithStartMCT:endMCT:]
Imports192 symbols from 10 dylibs
Exports1
_mh_execute_header0x0