Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: WireGuard Network Extension-2023-06-28-161104.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"app_name":"WireGuard Network Extension","timestamp":"2023-06-28 16:11:04.00 +0300","app_version":"4.0.1","slice_uuid":"4b737f27-e8db-310d-b1d7-25f8dbebaab8","adam_id":"1411869974","build_version":"3","platform":2,"bundleID":"com.opera.OperaTouch.vpnExtension","share_with_app_devs":0,"is_first_party":0,"bug_type":"309","os_version":"iPhone OS 16.5.1 (20F75)","roots_installed":0,"name":"WireGuard Network Extension","incident_id":"F4D61EDB-FE59-442A-ACE5-77387C0449C6"} { "uptime" : 10000, "procRole" : "Unspecified", "version" : 2, "userID" : 501, "deployVersion" : 210, "modelCode" : "iPad13,2", "coalitionID" : 785, "osVersion" : { "isEmbedded" : true, "train" : "iPhone OS 16.5.1", "releaseType" : "User", "build" : "20F75" }, "captureTime" : "2023-06-28 16:11:03.6956 +0300", "incident" : "F4D61EDB-FE59-442A-ACE5-77387C0449C6", "pid" : 864, "cpuType" : "ARM-64", "roots_installed" : 0, "bug_type" : "309", "procLaunch" : "2023-06-28 16:10:33.6312 +0300", "procStartAbsTime" : 240885547533, "procExitAbsTime" : 241607052590, "procName" : "WireGuard Network Extension", "procPath" : "\/private\/var\/containers\/Bundle\/Application\/5492F03C-DA63-40AC-84E1-8495FF8BE733\/Opera.app\/PlugIns\/WireGuard Network Extension.appex\/WireGuard Network Extension", "bundleInfo" : {"CFBundleShortVersionString":"4.0.1","CFBundleVersion":"3","CFBundleIdentifier":"com.opera.OperaTouch.vpnExtension"}, "storeInfo" : {"storeCohortMetadata":"10|date=1687842000000&sf=143444&cmp=OperaBrowserOperaCom&cpr=118728196&cid=1411869974&pgtp=Search&pgid=cbd52570-6ab1-44b6-8c74-439e63e98387&prpg=Genre_179183&ctxt=Search&issrch=1&imptyp=card&kind=iosSoftware&lngid=2","itemID":"1411869974","deviceIdentifierForVendor":"85327169-12D5-4B4A-A6E4-250FD155BC0B","softwareVersionExternalIdentifier":"858024631","thirdParty":true,"applicationVariant":"1:iPad13,2:15"}, "parentProc" : "launchd", "parentPid" : 1, "coalitionName" : "com.opera.OperaTouch.vpnExtension", "crashReporterKey" : "1c54b5f60308a75ebe170bf86077a8b8780e7ae9", "wasUnlockedSinceBoot" : 1, "isLocked" : 0, "throttleTimeout" : 10, "codeSigningID" : "com.opera.OperaTouch.vpnExtension", "codeSigningTeamID" : "A2P9LX4JPN", "codeSigningFlags" : 570450689, "codeSigningValidationCategory" : 4, "codeSigningTrustLevel" : 0, "basebandVersion" : "4.02.01", "exception" : {"codes":"0x0000000000000000, 0x0000000000000000","rawCodes":[0,0],"type":"EXC_CRASH","signal":"SIGABRT"}, "asi" : {"libsystem_c.dylib":["abort() called"]}, "lastExceptionBacktrace" : [{"imageOffset":40116,"symbol":"__exceptionPreprocess","symbolLocation":164,"imageIndex":2},{"imageOffset":99280,"symbol":"objc_exception_throw","symbolLocation":60,"imageIndex":11},{"imageOffset":1567416,"symbol":"+[NSObject(NSObject) _copyDescription]","symbolLocation":0,"imageIndex":2},{"imageOffset":131304,"symbol":"___forwarding___","symbolLocation":1592,"imageIndex":2},{"imageOffset":551168,"symbol":"_CF_forwarding_prep_0","symbolLocation":96,"imageIndex":2},{"imageOffset":8308,"symbol":"_os_log_encode","symbolLocation":1968,"imageIndex":13},{"imageOffset":5452,"symbol":"_swift_os_log","symbolLocation":148,"imageIndex":13},{"imageOffset":34448,"symbol":"specialized withVaList(_:_:)","symbolLocation":416,"imageIndex":13},{"imageOffset":4624,"symbol":"os_log(_:dso:log:type:_:)","symbolLocation":184,"imageIndex":13},{"imageOffset":47836,"imageIndex":0},{"imageOffset":158372,"imageIndex":0},{"imageOffset":156888,"imageIndex":0},{"imageOffset":8992,"symbol":"_dispatch_call_block_and_release","symbolLocation":32,"imageIndex":12},{"imageOffset":16044,"symbol":"_dispatch_client_callout","symbolLocation":20,"imageIndex":12},{"imageOffset":46388,"symbol":"_dispatch_lane_serial_drain","symbolLocation":668,"imageIndex":12},{"imageOffset":49316,"symbol":"_dispatch_lane_invoke","symbolLocation":384,"imageIndex":12},{"imageOffset":93404,"symbol":"_dispatch_workloop_worker_thread","symbolLocation":648,"imageIndex":12},{"imageOffset":3548,"symbol":"_pthread_wqthread","symbolLocation":288,"imageIndex":8},{"imageOffset":2940,"symbol":"start_wqthread","symbolLocation":8,"imageIndex":8}], "faultingThread" : 2, "threads" : [{"id":112005,"queue":"com.apple.main-thread","frames":[{"imageOffset":3204,"symbol":"mach_msg2_trap","symbolLocation":8,"imageIndex":1},{"imageOffset":80724,"symbol":"mach_msg2_internal","symbolLocation":80,"imageIndex":1},{"imageOffset":81452,"symbol":"mach_msg_overwrite","symbolLocation":540,"imageIndex":1},{"imageOffset":4552,"symbol":"mach_msg","symbolLocation":24,"imageIndex":1},{"imageOffset":495652,"symbol":"__CFRunLoopServiceMachPort","symbolLocation":160,"imageIndex":2},{"imageOffset":500304,"symbol":"__CFRunLoopRun","symbolLocation":1208,"imageIndex":2},{"imageOffset":521196,"symbol":"CFRunLoopRunSpecific","symbolLocation":612,"imageIndex":2},{"imageOffset":270292,"symbol":"-[NSRunLoop(NSRunLoop) runMode:beforeDate:]","symbolLocation":212,"imageIndex":3},{"imageOffset":269928,"symbol":"-[NSRunLoop(NSRunLoop) run]","symbolLocation":64,"imageIndex":3},{"imageOffset":108152,"symbol":"_xpc_objc_main","symbolLocation":496,"imageIndex":4},{"imageOffset":117028,"symbol":"xpc_main","symbolLocation":156,"imageIndex":4},{"imageOffset":563504,"symbol":"-[NSXPCListener resume]","symbolLocation":312,"imageIndex":3},{"imageOffset":106128,"imageIndex":5},{"imageOffset":26152,"imageIndex":5},{"imageOffset":22844,"imageIndex":5},{"imageOffset":140608,"symbol":"EXExtensionMain","symbolLocation":252,"imageIndex":6},{"imageOffset":843264,"symbol":"NSExtensionMain","symbolLocation":204,"imageIndex":3},{"imageOffset":89580,"symbol":"start","symbolLocation":2220,"imageIndex":7}]},{"id":112007,"frames":[{"imageOffset":5464,"symbol":"__psynch_cvwait","symbolLocation":8,"imageIndex":1},{"imageOffset":32888,"symbol":"_pthread_cond_wait","symbolLocation":1232,"imageIndex":8},{"imageOffset":581640,"imageIndex":0},{"imageOffset":576664,"imageIndex":0}]},{"triggered":true,"id":112008,"threadState":{"x":[{"value":0},{"value":0},{"value":0},{"value":0},{"value":8575989319},{"value":6099511376},{"value":110},{"value":768},{"value":3919411960220993960},{"value":3919411954475399592},{"value":512},{"value":11},{"value":11},{"value":0},{"value":0},{"value":0},{"value":328},{"value":6099513344},{"value":0},{"value":6},{"value":5891},{"value":6099513568},{"value":0},{"value":6099513568},{"value":4455418344},{"value":0},{"value":276},{"value":0},{"value":4435478272}],"flavor":"ARM_THREAD_STATE64","lr":{"value":8576766232},"cpsr":{"value":1073745920},"fp":{"value":6099511232},"sp":{"value":6099511200},"esr":{"value":1442840704,"description":" Address size fault"},"pc":{"value":8026486104,"matchesCrashFrame":1},"far":{"value":8380626648}},"queue":"WireGuardAdapterWorkQueue","frames":[{"imageOffset":30040,"symbol":"__pthread_kill","symbolLocation":8,"imageIndex":1},{"imageOffset":28952,"symbol":"pthread_kill","symbolLocation":268,"imageIndex":8},{"imageOffset":119160,"symbol":"abort","symbolLocation":180,"imageIndex":9},{"imageOffset":72696,"symbol":"abort_message","symbolLocation":132,"imageIndex":10},{"imageOffset":5188,"symbol":"demangling_terminate_handler()","symbolLocation":348,"imageIndex":10},{"imageOffset":122532,"symbol":"_objc_terminate()","symbolLocation":144,"imageIndex":11},{"imageOffset":69564,"symbol":"std::__terminate(void (*)())","symbolLocation":16,"imageIndex":10},{"imageOffset":69472,"symbol":"std::terminate()","symbolLocation":56,"imageIndex":10},{"imageOffset":16064,"symbol":"_dispatch_client_callout","symbolLocation":40,"imageIndex":12},{"imageOffset":46388,"symbol":"_dispatch_lane_serial_drain","symbolLocation":668,"imageIndex":12},{"imageOffset":49316,"symbol":"_dispatch_lane_invoke","symbolLocation":384,"imageIndex":12},{"imageOffset":93404,"symbol":"_dispatch_workloop_worker_thread","symbolLocation":648,"imageIndex":12},{"imageOffset":3548,"symbol":"_pthread_wqthread","symbolLocation":288,"imageIndex":8},{"imageOffset":2940,"symbol":"start_wqthread","symbolLocation":8,"imageIndex":8}]},{"id":112009,"frames":[{"imageOffset":2932,"symbol":"start_wqthread","symbolLocation":0,"imageIndex":8}]},{"id":112010,"frames":[{"imageOffset":5464,"symbol":"__psynch_cvwait","symbolLocation":8,"imageIndex":1},{"imageOffset":32932,"symbol":"_pthread_cond_wait","symbolLocation":1276,"imageIndex":8},{"imageOffset":581692,"imageIndex":0},{"imageOffset":576664,"imageIndex":0}]},{"id":112011,"frames":[{"imageOffset":5464,"symbol":"__psynch_cvwait","symbolLocation":8,"imageIndex":1},{"imageOffset":32888,"symbol":"_pthread_cond_wait","symbolLocation":1232,"imageIndex":8},{"imageOffset":581640,"imageIndex":0},{"imageOffset":576664,"imageIndex":0}]},{"id":112012,"frames":[{"imageOffset":6836,"symbol":"read","symbolLocation":8,"imageIndex":1},{"imageOffset":579884,"imageIndex":0}]},{"id":112013,"frames":[{"imageOffset":5464,"symbol":"__psynch_cvwait","symbolLocation":8,"imageIndex":1},{"imageOffset":32888,"symbol":"_pthread_cond_wait","symbolLocation":1232,"imageIndex":8},{"imageOffset":581640,"imageIndex":0},{"imageOffset":576664,"imageIndex":0}]},{"id":112014,"frames":[{"imageOffset":5464,"symbol":"__psynch_cvwait","symbolLocation":8,"imageIndex":1},{"imageOffset":32888,"symbol":"_pthread_cond_wait","symbolLocation":1232,"imageIndex":8},{"imageOffset":581640,"imageIndex":0},{"imageOffset":576664,"imageIndex":0}]},{"id":112015,"frames":[{"imageOffset":5464,"symbol":"__psynch_cvwait","symbolLocation":8,"imageIndex":1},{"imageOffset":32888,"symbol":"_pthread_cond_wait","symbolLocation":1232,"imageIndex":8},{"imageOffset":581640,"imageIndex":0},{"imageOffset":576664,"imageIndex":0}]},{"id":112491,"frames":[{"imageOffset":2932,"symbol":"start_wqthread","symbolLocation":0,"imageIndex":8}]}], "usedImages" : [ { "source" : "P", "arch" : "arm64", "base" : 4368498688, "size" : 1441792, "uuid" : "4b737f27-e8db-310d-b1d7-25f8dbebaab8", "path" : "\/private\/var\/containers\/Bundle\/Application\/5492F03C-DA63-40AC-84E1-8495FF8BE733\/Opera.app\/PlugIns\/WireGuard Network Extension.appex\/WireGuard Network Extension", "name" : "WireGuard Network Extension" }, { "source" : "P", "arch" : "arm64e", "base" : 8026456064, "size" : 229368, "uuid" : "75da6452-934e-3f80-b181-d47074378e83", "path" : "\/usr\/lib\/system\/libsystem_kernel.dylib", "name" : "libsystem_kernel.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 6979727360, "size" : 4096000, "uuid" : "4230c122-42e8-383b-beec-ee7b61f8bb61", "path" : "\/System\/Library\/Frameworks\/CoreFoundation.framework\/CoreFoundation", "name" : "CoreFoundation" }, { "source" : "P", "arch" : "arm64e", "base" : 6882463744, "size" : 9297920, "uuid" : "6e76dc96-11af-3b2e-b71e-215f9cc6e822", "path" : "\/System\/Library\/Frameworks\/Foundation.framework\/Foundation", "name" : "Foundation" }, { "source" : "P", "arch" : "arm64e", "base" : 8577011712, "size" : 270336, "uuid" : "e999664a-4868-3766-8787-f501fde376e3", "path" : "\/usr\/lib\/system\/libxpc.dylib", "name" : "libxpc.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 7625449472, "size" : 225280, "uuid" : "c413ade8-6a93-31ee-bec2-ad6d65af900e", "path" : "\/System\/Library\/PrivateFrameworks\/PlugInKit.framework\/PlugInKit", "name" : "PlugInKit" }, { "source" : "P", "arch" : "arm64e", "base" : 7204286464, "size" : 409600, "uuid" : "136103c5-8263-31b5-9186-bc5091308291", "path" : "\/System\/Library\/Frameworks\/ExtensionFoundation.framework\/ExtensionFoundation", "name" : "ExtensionFoundation" }, { "source" : "P", "arch" : "arm64e", "base" : 7505268736, "size" : 547364, "uuid" : "6987370a-c385-3135-a27f-6731706bcbd8", "path" : "\/usr\/lib\/dyld", "name" : "dyld" }, { "source" : "P", "arch" : "arm64e", "base" : 8576737280, "size" : 49140, "uuid" : "56698309-210a-3137-97d4-14e4604b1117", "path" : "\/usr\/lib\/system\/libsystem_pthread.dylib", "name" : "libsystem_pthread.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 7102472192, "size" : 516084, "uuid" : "3548f8ee-7a07-3b67-8d69-9c7d42096513", "path" : "\/usr\/lib\/system\/libsystem_c.dylib", "name" : "libsystem_c.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 8575901696, "size" : 98304, "uuid" : "b65049d9-dda4-3d03-9e13-0b4795138702", "path" : "\/usr\/lib\/libc++abi.dylib", "name" : "libc++abi.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 6863405056, "size" : 278432, "uuid" : "085a190c-6214-38ea-accb-428c3e8afa65", "path" : "\/usr\/lib\/libobjc.A.dylib", "name" : "libobjc.A.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 7102181376, "size" : 290816, "uuid" : "bb347f0e-f21c-3607-82e6-c8d750fdbf8c", "path" : "\/usr\/lib\/system\/libdispatch.dylib", "name" : "libdispatch.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 7219417088, "size" : 106496, "uuid" : "9cce8ef8-aa49-3634-8665-1b82623a9573", "path" : "\/usr\/lib\/swift\/libswiftos.dylib", "name" : "libswiftos.dylib" } ], "sharedCache" : { "base" : 6862684160, "size" : 2963603456, "uuid" : "897cc0d1-bd62-3ba4-920e-435e58cd1292" }, "vmSummary" : "ReadOnly portion of Libraries: Total=478.6M resident=0K(0%) swapped_out_or_unallocated=478.6M(100%)\nWritable regions: Total=74.3M written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=74.3M(100%)\n\n VIRTUAL REGION \nREGION TYPE SIZE COUNT (non-coalesced) \n=========== ======= ======= \nActivity Tracing 256K 1 \nDispatch continuations 6144K 1 \nKernel Alloc Once 32K 1 \nMALLOC 54.2M 20 \nMALLOC guard page 64K 4 \nSTACK GUARD 176K 11 \nStack 6448K 11 \nVM_ALLOCATE 9584K 18 \nVM_ALLOCATE (reserved) 16K 1 reserved VM address space (unallocated)\n__AUTH 382K 70 \n__AUTH_CONST 6360K 238 \n__DATA 2366K 233 \n__DATA_CONST 9059K 240 \n__DATA_DIRTY 1553K 220 \n__FONT_DATA 2352 1 \n__INFO_FILTER 8 1 \n__LINKEDIT 312.1M 2 \n__OBJC_RO 79.3M 1 \n__OBJC_RW 2432K 1 \n__TEXT 166.6M 250 \ndyld private memory 272K 1 \nmapped file 29.5M 6 \nshared memory 48K 3 \n=========== ======= ======= \nTOTAL 685.7M 1335 \nTOTAL, minus reserved VM space 685.7M 1335 \n", "legacyInfo" : { "threadTriggered" : { "queue" : "WireGuardAdapterWorkQueue" } }, "logWritingSignature" : "30b7b58bd9b62c3bd730f113aad0b80188074925", "trialInfo" : { "rollouts" : [ { "rolloutId" : "62c74108bcb0435c2153f963", "factorPackIds" : { "SIRI_TEXT_TO_SPEECH" : "64810e3fd0f2cd4ea9c0d6b9" }, "deploymentId" : 240000226 }, { "rolloutId" : "62c73fd17cce0d1b0bcb8a02", "factorPackIds" : { }, "deploymentId" : 240000119 } ], "experiments" : [ ] } }