Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: PerfPowerServicesSignpostReader.cpu_resource-2023-07-03-141937.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"app_name":"PerfPowerServicesSignpostReader","timestamp":"2023-07-03 14:19:37.00 +0300","app_version":"1.0","slice_uuid":"E8BA936F-8FA5-363A-BE21-CBD2A711BFA8","build_version":"1","bundleID":"com.apple.PerfPowerServicesSignpostReader","duration_ms":"91863","share_with_app_devs":1,"is_first_party":0,"bug_type":"202","os_version":"iPhone OS 16.5.1 (20F75)","roots_installed":0,"incident_id":"B70A4119-105D-4498-91BB-86F715476755","name":"PerfPowerServicesSignpostReader"} Date/Time: 2023-07-03 14:18:04.537 +0300 End time: 2023-07-03 14:19:36.400 +0300 OS Version: iPhone OS 16.5.1 (Build 20F75) Architecture: arm64e Report Version: 40 Incident Identifier: B70A4119-105D-4498-91BB-86F715476755 Share With Devs: Yes Data Source: Microstackshots Shared Cache: 897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x1aa7c4000, slide 0x2a7c4000 Command: PerfPowerServicesSignpostReader Path: /System/Library/PrivateFrameworks/PowerlogCore.framework/XPCServices/PerfPowerServicesSignpostReader.xpc/PerfPowerServicesSignpostReader Identifier: com.apple.PerfPowerServicesSignpostReader Version: 1.0 (1) Resource Coalition ID: 514 Architecture: arm64e Parent: UNKNOWN [1] PID: 348 Event: cpu usage Action taken: none CPU: 90 seconds cpu time over 92 seconds (98% cpu average), exceeding limit of 50% cpu over 180 seconds CPU limit: 90s Limit duration: 180s CPU used: 90s CPU duration: 92s Duration: 91.86s Duration Sampled: 80.43s Steps: 33 Hardware model: iPad13,2 Active cpus: 6 HW page size: 16384 VM page size: 16384 Advisory levels: Battery -> 3, User -> 3, ThermalPressure -> 0, Combined -> 3 Free disk space: 12.11 GB/59.58 GB, low space threshold 150 MB Low Power Mode: Enabled Vnodes Available: 78.47% (15693/20000, 10000 allocated, 10000 soft limit) Preferred User Language: en-GB, ru-GB Country Code: GB Keyboards: en_GB QWERTYBritish, ru_RU Russian OS Cryptex File Extents: 5616 Heaviest stack for the target process: 28 ??? (libsystem_pthread.dylib + 2940) [0x210a6ab7c] 28 ??? (libsystem_pthread.dylib + 3548) [0x210a6addc] 28 ??? (libdispatch.dylib + 93404) [0x1b8c41cdc] 28 ??? (libdispatch.dylib + 49316) [0x1b8c370a4] 28 ??? (libdispatch.dylib + 46388) [0x1b8c36534] 28 ??? (libdispatch.dylib + 16044) [0x1b8c2eeac] 28 ??? (libdispatch.dylib + 8992) [0x1b8c2d320] 28 ??? (LoggingSupport + 185476) [0x1caf0a484] 28 ??? (LoggingSupport + 26556) [0x1caee37bc] 28 ??? (LoggingSupport + 27500) [0x1caee3b6c] 28 ??? (LoggingSupport + 17196) [0x1caee132c] 28 ??? (LoggingSupport + 22436) [0x1caee27a4] 28 ??? (LoggingSupport + 44408) [0x1caee7d78] 28 ??? (LoggingSupport + 8680) [0x1caedf1e8] 22 ??? (LoggingSupport + 28740) [0x1caee4044] 22 ??? (Foundation + 19312) [0x1abaa5b70] 22 ??? (Foundation + 14972) [0x1abaa4a7c] 21 ??? (Foundation + 19312) [0x1abaa5b70] 21 ??? (Foundation + 14824) [0x1abaa49e8] 21 ??? (Foundation + 19312) [0x1abaa5b70] 13 ??? (Foundation + 14972) [0x1abaa4a7c] 13 ??? (Foundation + 19312) [0x1abaa5b70] 13 ??? (Foundation + 14824) [0x1abaa49e8] 10 ??? (Foundation + 19312) [0x1abaa5b70] 10 ??? (Foundation + 14972) [0x1abaa4a7c] 8 ??? (Foundation + 15392) [0x1abaa4c20] 8 ??? (Foundation + 5215436) [0x1abf9a4cc] 4 ??? (Foundation + 16316) [0x1abaa4fbc] 1 ??? (libobjc.A.dylib + 10308) [0x1aa876844] Powerstats for: PerfPowerServicesSignpostReader (PerfPowerServicesSignpostReader) [348] UUID: E8BA936F-8FA5-363A-BE21-CBD2A711BFA8 Path: /System/Library/PrivateFrameworks/PowerlogCore.framework/XPCServices/PerfPowerServicesSignpostReader.xpc/PerfPowerServicesSignpostReader Identifier: com.apple.PerfPowerServicesSignpostReader Version: 1.0 (1) Resource Coalition ID: 514 Architecture: arm64e Parent: UNKNOWN [1] UID: 0 Sudden Term: Tracked (allows idle exit) Footprint: 4992 KB -> 10.12 MB (+5376 KB) Pageins: 125 pages Start time: 2023-07-03 14:18:38.308 +0300 End time: 2023-07-03 14:19:35.921 +0300 Num samples: 28 (85%) Primary state: 28 samples Non-Frontmost App, Non-Suppressed, User mode, Effective Thread QoS Background, Requested Thread QoS User Initiated, Override Thread QoS Unspecified User Activity: 28 samples Idle, 0 samples Active Power Source: 0 samples on Battery, 28 samples on AC 28 ??? (libsystem_pthread.dylib + 2940) [0x210a6ab7c] 28 ??? (libsystem_pthread.dylib + 3548) [0x210a6addc] 28 ??? (libdispatch.dylib + 93404) [0x1b8c41cdc] 28 ??? (libdispatch.dylib + 49316) [0x1b8c370a4] 28 ??? (libdispatch.dylib + 46388) [0x1b8c36534] 28 ??? (libdispatch.dylib + 16044) [0x1b8c2eeac] 28 ??? (libdispatch.dylib + 8992) [0x1b8c2d320] 28 ??? (LoggingSupport + 185476) [0x1caf0a484] 28 ??? (LoggingSupport + 26556) [0x1caee37bc] 28 ??? (LoggingSupport + 27500) [0x1caee3b6c] 28 ??? (LoggingSupport + 17196) [0x1caee132c] 28 ??? (LoggingSupport + 22436) [0x1caee27a4] 28 ??? (LoggingSupport + 44408) [0x1caee7d78] 28 ??? (LoggingSupport + 8680) [0x1caedf1e8] 22 ??? (LoggingSupport + 28740) [0x1caee4044] 22 ??? (Foundation + 19312) [0x1abaa5b70] 22 ??? (Foundation + 14972) [0x1abaa4a7c] 21 ??? (Foundation + 19312) [0x1abaa5b70] 21 ??? (Foundation + 14824) [0x1abaa49e8] 21 ??? (Foundation + 19312) [0x1abaa5b70] 13 ??? (Foundation + 14972) [0x1abaa4a7c] 13 ??? (Foundation + 19312) [0x1abaa5b70] 13 ??? (Foundation + 14824) [0x1abaa49e8] 10 ??? (Foundation + 19312) [0x1abaa5b70] 10 ??? (Foundation + 14972) [0x1abaa4a7c] 8 ??? (Foundation + 15392) [0x1abaa4c20] 8 ??? (Foundation + 5215436) [0x1abf9a4cc] 4 ??? (Foundation + 16316) [0x1abaa4fbc] 1 ??? (Foundation + 5724780) [0x1ac016a6c] 1 ??? (libobjc.A.dylib + 23312) [0x1aa879b10] 1 ??? (libsystem_malloc.dylib + 6988) [0x1bfbd6b4c] 1 ??? (Foundation + 5724628) [0x1ac0169d4] 1 ??? (Foundation + 5724064) [0x1ac0167a0] 1 ??? (CoreFoundation + 108788) [0x1b177d8f4] 1 ??? (libsystem_c.dylib + 30132) [0x1b8c795b4] 1 ??? (CoreFoundation + 37008) [0x1b176c090] 1 ??? (Foundation + 5724480) [0x1ac016940] 1 ??? (libobjc.A.dylib + 10268) [0x1aa87681c] 1 ??? (libobjc.A.dylib + 10308) [0x1aa876844] 3 ??? (Foundation + 15980) [0x1abaa4e6c] 2 ??? (Foundation + 5723464) [0x1ac016548] 2 ??? (CoreFoundation + 108788) [0x1b177d8f4] 2 ??? (libsystem_c.dylib + 30132) [0x1b8c795b4] 1 ??? (CoreFoundation + 37008) [0x1b176c090] 1 ??? (CoreFoundation + 27384) [0x1b1769af8] 1 ??? (libobjc.A.dylib + 10280) [0x1aa876828] 1 ??? (libobjc.A.dylib + 10424) [0x1aa8768b8] 1 ??? (Foundation + 17356) [0x1abaa53cc] 1 ??? (Foundation + 21712) [0x1abaa64d0] 1 ??? (Foundation + 19312) [0x1abaa5b70] 1 ??? (Foundation + 14824) [0x1abaa49e8] 1 ??? (Foundation + 15392) [0x1abaa4c20] 1 ??? (Foundation + 5215436) [0x1abf9a4cc] 1 ??? (Foundation + 15980) [0x1abaa4e6c] 1 ??? (Foundation + 5723376) [0x1ac0164f0] 1 ??? (libsystem_platform.dylib + 5616) [0x2109d45f0] 1 ??? (Foundation + 15472) [0x1abaa4c70] 1 ??? (Foundation + 19844) [0x1abaa5d84] 3 ??? (Foundation + 15392) [0x1abaa4c20] 3 ??? (Foundation + 5215436) [0x1abf9a4cc] 2 ??? (Foundation + 15980) [0x1abaa4e6c] 1 ??? (Foundation + 5723632) [0x1ac0165f0] 1 ??? (CoreFoundation + 108788) [0x1b177d8f4] 1 ??? (libsystem_c.dylib + 30132) [0x1b8c795b4] 1 ??? (CoreFoundation + 37624) [0x1b176c2f8] 1 ??? (Foundation + 5723464) [0x1ac016548] 1 ??? (CoreFoundation + 108788) [0x1b177d8f4] 1 ??? (libsystem_c.dylib + 30132) [0x1b8c795b4] 1 ??? (libobjc.A.dylib + 10280) [0x1aa876828] 1 ??? (Foundation + 16316) [0x1abaa4fbc] 1 ??? (Foundation + 5724628) [0x1ac0169d4] 1 ??? (libobjc.A.dylib + 10240) [0x1aa876800] 8 ??? (Foundation + 14824) [0x1abaa49e8] 8 ??? (Foundation + 19312) [0x1abaa5b70] 8 ??? (Foundation + 14972) [0x1abaa4a7c] 5 ??? (Foundation + 15392) [0x1abaa4c20] 5 ??? (Foundation + 5215436) [0x1abf9a4cc] 4 ??? (Foundation + 16316) [0x1abaa4fbc] 2 ??? (Foundation + 5724480) [0x1ac016940] 1 ??? (Foundation + 12688) [0x1abaa4190] 1 ??? (libobjc.A.dylib + 204804) [0x1aa8a6004] 1 ??? (Foundation + 12480) [0x1abaa40c0] 1 ??? (Foundation + 13072) [0x1abaa4310] 1 ??? (CoreFoundation + 63784) [0x1b1772928] 1 ??? (Foundation + 5724628) [0x1ac0169d4] 1 ??? (Foundation + 5724064) [0x1ac0167a0] 1 ??? (CoreFoundation + 108788) [0x1b177d8f4] 1 ??? (libsystem_c.dylib + 30132) [0x1b8c795b4] 1 ??? (CoreFoundation + 37008) [0x1b176c090] 1 ??? (libobjc.A.dylib + 10436) [0x1aa8768c4] 1 ??? (Foundation + 5724596) [0x1ac0169b4] 1 ??? (Foundation + 170924) [0x1abacabac] 1 ??? (Foundation + 171196) [0x1abacacbc] 1 ??? (CoreFoundation + 72816) [0x1b1774c70] 1 ??? (Foundation + 175824) [0x1abacbed0] 1 ??? (CoreFoundation + 601272) [0x1b17f5cb8] 1 ??? (Foundation + 15980) [0x1abaa4e6c] 1 ??? (Foundation + 5723464) [0x1ac016548] 1 ??? (CoreFoundation + 108788) [0x1b177d8f4] 1 ??? (libsystem_c.dylib + 30132) [0x1b8c795b4] 3 ??? (Foundation + 19312) [0x1abaa5b70] 3 ??? (Foundation + 14824) [0x1abaa49e8] 3 ??? (Foundation + 15392) [0x1abaa4c20] 3 ??? (Foundation + 5215436) [0x1abf9a4cc] 2 ??? (Foundation + 17356) [0x1abaa53cc] 1 ??? (Foundation + 21736) [0x1abaa64e8] 1 ??? (Foundation + 88528) [0x1abab69d0] 1 ??? (CoreFoundation + 551408) [0x1b17e99f0] 1 ??? (CoreFoundation + 536968) [0x1b17e6188] 1 ??? (CoreFoundation + 504680) [0x1b17de368] 1 ??? (libobjc.A.dylib + 10240) [0x1aa876800] 1 ??? (Foundation + 15980) [0x1abaa4e6c] 1 ??? (Foundation + 5723632) [0x1ac0165f0] 1 ??? (CoreFoundation + 108788) [0x1b177d8f4] 1 ??? (libsystem_c.dylib + 30132) [0x1b8c795b4] 1 ??? (CoreFoundation + 37008) [0x1b176c090] 1 ??? (Foundation + 15392) [0x1abaa4c20] 1 ??? (Foundation + 5215436) [0x1abf9a4cc] 1 ??? (Foundation + 16316) [0x1abaa4fbc] 1 ??? (Foundation + 5724480) [0x1ac016940] 1 ??? (Foundation + 12480) [0x1abaa40c0] 1 ??? (Foundation + 13072) [0x1abaa4310] 1 ??? (CoreFoundation + 59928) [0x1b1771a18] 1 ??? (CoreFoundation + 550808) [0x1b17e9798] 6 ??? (LoggingSupport + 28816) [0x1caee4090] 6 ??? (SignpostCollection + 9276) [0x21d90343c] 4 ??? (SignpostCollection + 7904) [0x21d902ee0] 2 ??? (SignpostCollection + 8900) [0x21d9032c4] 1 ??? (SignpostCollection + 10468) [0x21d9038e4] 1 ??? (CoreFoundation + 81196) [0x1b1776d2c] 1 ??? (LoggingSupport + 50040) [0x1caee9378] 1 ??? (SignpostCollection + 8944) [0x21d9032f0] 1 ??? (SignpostCollection + 11360) [0x21d903c60] 1 ??? (CoreFoundation + 93416) [0x1b1779ce8] 1 ??? (Foundation + 175372) [0x1abacbd0c] 1 ??? (Foundation + 175824) [0x1abacbed0] 1 ??? (CoreFoundation + 114944) [0x1b177f100] 1 ??? (CoreFoundation + 586324) [0x1b17f2254] 1 ??? (SignpostCollection + 8532) [0x21d903154] 1 ??? (Foundation + 88528) [0x1abab69d0] 1 ??? (CoreFoundation + 551408) [0x1b17e99f0] 1 ??? (CoreFoundation + 536968) [0x1b17e6188] 1 ??? (CoreFoundation + 504680) [0x1b17de368] 1 ??? (SignpostCollection + 7956) [0x21d902f14] 1 ??? (libobjc.A.dylib + 23516) [0x1aa879bdc] 1 ??? (libobjc.A.dylib + 8660) [0x1aa8761d4] 1 ??? (libsystem_malloc.dylib + 19584) [0x1bfbd9c80] 1 ??? (libsystem_malloc.dylib + 16792) [0x1bfbd9198] 1 ??? (libsystem_malloc.dylib + 20220) [0x1bfbd9efc] 1 ??? (SignpostCollection + 7924) [0x21d902ef4] 1 ??? (SignpostSupport + 7820) [0x1cd4f2e8c] 1 ??? (SignpostSupport + 63756) [0x1cd50090c] 1 ??? (SignpostSupport + 22924) [0x1cd4f698c] 1 ??? (SignpostSupport + 82828) [0x1cd50538c] 1 ??? (libdispatch.dylib + 78888) [0x1b8c3e428] 1 ??? (libdispatch.dylib + 16044) [0x1b8c2eeac] 1 ??? (SignpostSupport + 83012) [0x1cd505444] 1 ??? (SignpostSupport + 19752) [0x1cd4f5d28] 1 ??? (SignpostSupport + 9336) [0x1cd4f3478] 1 ??? (Foundation + 110296) [0x1ababbed8] 1 ??? (CoreFoundation + 527020) [0x1b17e3aac] 1 ??? (CoreFoundation + 541140) [0x1b17e71d4] 1 ??? (CoreFoundation + 323712) [0x1b17b2080] Binary Images: 0x102a1c000 - ??? com.apple.PerfPowerServicesSignpostReader 1.0 (1) /System/Library/PrivateFrameworks/PowerlogCore.framework/XPCServices/PerfPowerServicesSignpostReader.xpc/PerfPowerServicesSignpostReader 0x1aa874000 - 0x1aa8b7f9f libobjc.A.dylib <085A190C-6214-38EA-ACCB-428C3E8AFA65> /usr/lib/libobjc.A.dylib 0x1abaa1000 - 0x1ac37efff Foundation <6E76DC96-11AF-3B2E-B71E-215F9CC6E822> /System/Library/Frameworks/Foundation.framework/Foundation 0x1b1763000 - 0x1b1b4afff CoreFoundation <4230C122-42E8-383B-BEEC-EE7B61F8BB61> /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation 0x1b8c2b000 - 0x1b8c71fff libdispatch.dylib /usr/lib/system/libdispatch.dylib 0x1b8c72000 - 0x1b8cefff3 libsystem_c.dylib <3548F8EE-7A07-3B67-8D69-9C7D42096513> /usr/lib/system/libsystem_c.dylib 0x1bfbd5000 - 0x1bfbf8ff3 libsystem_malloc.dylib <8C0013B0-7B99-30BB-9950-C6D2229B69A5> /usr/lib/system/libsystem_malloc.dylib 0x1caedd000 - 0x1caf46fff LoggingSupport <53B9F8E4-DDC6-3825-828F-B7F0F78E2FC9> /System/Library/PrivateFrameworks/LoggingSupport.framework/LoggingSupport 0x1cd4f1000 - 0x1cd549fff SignpostSupport /System/Library/PrivateFrameworks/SignpostSupport.framework/SignpostSupport 0x2109d3000 - 0x2109d9ff7 libsystem_platform.dylib /usr/lib/system/libsystem_platform.dylib 0x210a6a000 - 0x210a75ff3 libsystem_pthread.dylib <56698309-210A-3137-97D4-14E4604B1117> /usr/lib/system/libsystem_pthread.dylib 0x21d901000 - 0x21d90cfff SignpostCollection <941996A1-8255-359C-9A5C-4898AC7C0C55> /System/Library/PrivateFrameworks/SignpostCollection.framework/SignpostCollection Powerstats for: aggregated UUID: B86E6699-4DCA-342C-9AE7-496F34DD4D9C Path: /System/Library/PrivateFrameworks/AggregateDictionary.framework/Support/aggregated Resource Coalition ID: 105 Architecture: arm64e Start time: 2023-07-03 14:19:10.807 +0300 End time: 2023-07-03 14:19:11.814 +0300 Num samples: 2 (6%) Primary state: 2 samples Non-Frontmost App, Non-Suppressed, Kernel mode, Effective Thread QoS Background, Requested Thread QoS Default, Override Thread QoS Unspecified User Activity: 2 samples Idle, 0 samples Active Power Source: 0 samples on Battery, 2 samples on AC 2 ??? (dyld + 89580) [0x1d0caadec] 2 ??? (aggregated + 15748) [0x10068fd84] 2 ??? (PowerlogCore + 205124) [0x1dde3e144] 2 ??? (PowerlogCore + 181348) [0x1dde38464] 2 ??? (PowerlogCore + 197328) [0x1dde3c2d0] 2 ??? (PowerlogCore + 155724) [0x1dde3204c] 2 ??? (PowerlogCore + 165992) [0x1dde34868] 2 ??? (PowerlogCore + 365388) [0x1dde6534c] 2 ??? (PowerlogCore + 510880) [0x1dde88ba0] 2 ??? (libdispatch.dylib + 78888) [0x1b8c3e428] 2 ??? (libdispatch.dylib + 16044) [0x1b8c2eeac] 2 ??? (PowerlogCore + 365872) [0x1dde65530] 2 ??? (PowerlogCore + 154068) [0x1dde319d4] 1 ??? (PowerlogLiteOperators + 912644) [0x1ee52ad04] 1 ??? (PowerlogLiteOperators + 2358480) [0x1ee68bcd0] 1 ??? (PowerlogLiteOperators + 2356472) [0x1ee68b4f8] 1 ??? (libIOReport.dylib + 21176) [0x21303d2b8] 1 ??? (libIOReport.dylib + 8160) [0x213039fe0] 1 ??? (libIOReport.dylib + 24360) [0x21303df28] 1 ??? (libIOReport.dylib + 23576) [0x21303dc18] 1 ??? (IOKit + 33692) [0x1b95f239c] 1 ??? (IOKit + 20260) [0x1b95eef24] 1 ??? (libsystem_kernel.dylib + 3204) [0x1efda0c84] 1 ??? (PowerlogLiteOperators + 714772) [0x1ee4fa814] 1 ??? (PowerlogCore + 209344) [0x1dde3f1c0] 1 ??? (PowerlogCore + 221928) [0x1dde422e8] 1 ??? (IOKit + 104948) [0x1b96039f4] 1 ??? (IOKit + 29460) [0x1b95f1314] 1 ??? (libsystem_kernel.dylib + 3204) [0x1efda0c84] Binary Images: 0x10068c000 - ??? aggregated /System/Library/PrivateFrameworks/AggregateDictionary.framework/Support/aggregated 0x1b8c2b000 - 0x1b8c71fff libdispatch.dylib /usr/lib/system/libdispatch.dylib 0x1b95ea000 - 0x1b96a6fff IOKit /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit 0x1d0c95000 - 0x1d0d1aa23 dyld <6987370A-C385-3135-A27F-6731706BCBD8> /usr/lib/dyld 0x1dde0c000 - 0x1ddf37fff PowerlogCore <26DE8CD9-B26B-33D5-8EE1-BA08FC51471A> /System/Library/PrivateFrameworks/PowerlogCore.framework/PowerlogCore 0x1ee44c000 - 0x1ee962fff PowerlogLiteOperators /System/Library/PrivateFrameworks/PowerlogLiteOperators.framework/PowerlogLiteOperators 0x1efda0000 - 0x1efdd7ff7 libsystem_kernel.dylib <75DA6452-934E-3F80-B181-D47074378E83> /usr/lib/system/libsystem_kernel.dylib 0x213038000 - 0x213040ffb libIOReport.dylib /usr/lib/libIOReport.dylib