Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: searchd.diskwrites_resource-2023-07-02-142240.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"duration_ms":"447060","share_with_app_devs":1,"roots_installed":0,"bug_type":"145","os_version":"iPhone OS 16.5.1 (20F75)","slice_uuid":"D9E6759F-024B-3606-B371-2B28C15CBB76","is_first_party":0,"incident_id":"FFEBC77B-CBF1-4E5D-A3F4-871BEC6C9316","timestamp":"2023-07-02 14:22:40.00 +0300","app_name":"searchd","name":"searchd"} Date/Time: 2023-07-02 14:15:12.736 +0300 End time: 2023-07-02 14:22:39.796 +0300 OS Version: iPhone OS 16.5.1 (Build 20F75) Architecture: arm64e Report Version: 40 Incident Identifier: FFEBC77B-CBF1-4E5D-A3F4-871BEC6C9316 Share With Devs: Yes Data Source: Microstackshots Shared Cache: 897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x1c13b8000, slide 0x413b8000 Command: searchd Path: /System/Library/PrivateFrameworks/Search.framework/searchd Resource Coalition ID: 215 Architecture: arm64e Parent: launchd [1] PID: 138 Event: disk writes Action taken: none Writes: 1073.75 MB of file backed memory dirtied over 447 seconds (2401.81 KB per second average), exceeding limit of 12.43 KB per second over 86400 seconds Writes limit: 1073.74 MB Limit duration: 86400s Writes caused: 1073.75 MB Writes duration: 447s Duration: 447.06s Duration Sampled: 395.75s Steps: 123 (10.49 MB/step) Hardware model: iPad13,2 Active cpus: 6 HW page size: 16384 VM page size: 16384 Advisory levels: Battery -> 2, User -> 3, ThermalPressure -> 0, Combined -> 2 Free disk space: 13.24 GB/59.58 GB, low space threshold 150 MB Low Power Mode: Enabled Vnodes Available: 82.31% (16463/20000, 10000 allocated, 10000 soft limit) Preferred User Language: en-GB, ru-GB Country Code: GB Keyboards: en_GB QWERTYBritish, ru_RU Russian HW Keyboard: Yes OS Cryptex File Extents: 5616 Heaviest stack for the target process: 103 ??? (libsystem_pthread.dylib + 2940) [0x22765eb7c] 52 ??? (libsystem_pthread.dylib + 3548) [0x22765eddc] 52 ??? (libdispatch.dylib + 93404) [0x1cf835cdc] 52 ??? (libdispatch.dylib + 53168) [0x1cf82bfb0] 52 ??? (libdispatch.dylib + 49368) [0x1cf82b0d8] 52 ??? (libdispatch.dylib + 46388) [0x1cf82a534] 52 ??? (libdispatch.dylib + 16044) [0x1cf822eac] 47 ??? (libdispatch.dylib + 77764) [0x1cf831fc4] 47 ??? (MobileSpotlightIndex + 111816) [0x1f615b4c8] 47 ??? (MobileSpotlightIndex + 517292) [0x1f61be4ac] 47 ??? (SpotlightDaemon + 14012) [0x2354e66bc] 47 ??? (SpotlightDaemon + 323028) [0x235531dd4] 47 ??? (MobileSpotlightIndex + 146892) [0x1f6163dcc] 34 ??? (MobileSpotlightIndex + 157052) [0x1f616657c] 34 ??? (MobileSpotlightIndex + 256212) [0x1f617e8d4] 34 ??? (libsystem_kernel.dylib + 9816) [0x206996658] Powerstats for: searchd [138] UUID: D9E6759F-024B-3606-B371-2B28C15CBB76 Path: /System/Library/PrivateFrameworks/Search.framework/searchd Resource Coalition ID: 215 Architecture: arm64e Parent: launchd [1] UID: 501 Sudden Term: Tracked (allows idle exit) Footprint: 6704 KB -> 29.70 MB (+23.16 MB) (max 34.89 MB ) Pageins: 1633 pages Start time: 2023-07-02 14:16:09.378 +0300 End time: 2023-07-02 14:22:39.108 +0300 Num samples: 103 (84%) Primary state: 92 samples Non-Frontmost App, Non-Suppressed, Kernel mode, Effective Thread QoS Background, Requested Thread QoS Background, Override Thread QoS Unspecified User Activity: 0 samples Idle, 103 samples Active Power Source: 103 samples on Battery, 0 samples on AC 103 ??? (libsystem_pthread.dylib + 2940) [0x22765eb7c] 52 ??? (libsystem_pthread.dylib + 3548) [0x22765eddc] 52 ??? (libdispatch.dylib + 93404) [0x1cf835cdc] 52 ??? (libdispatch.dylib + 53168) [0x1cf82bfb0] 52 ??? (libdispatch.dylib + 49368) [0x1cf82b0d8] 52 ??? (libdispatch.dylib + 46388) [0x1cf82a534] 52 ??? (libdispatch.dylib + 16044) [0x1cf822eac] 47 ??? (libdispatch.dylib + 77764) [0x1cf831fc4] 47 ??? (MobileSpotlightIndex + 111816) [0x1f615b4c8] 47 ??? (MobileSpotlightIndex + 517292) [0x1f61be4ac] 47 ??? (SpotlightDaemon + 14012) [0x2354e66bc] 47 ??? (SpotlightDaemon + 323028) [0x235531dd4] 47 ??? (MobileSpotlightIndex + 146892) [0x1f6163dcc] 34 ??? (MobileSpotlightIndex + 157052) [0x1f616657c] 34 ??? (MobileSpotlightIndex + 256212) [0x1f617e8d4] 34 ??? (libsystem_kernel.dylib + 9816) [0x206996658] 13 ??? (MobileSpotlightIndex + 157092) [0x1f61665a4] 13 ??? (MobileSpotlightIndex + 256212) [0x1f617e8d4] 13 ??? (libsystem_kernel.dylib + 9816) [0x206996658] 5 ??? (MobileSpotlightIndex + 111816) [0x1f615b4c8] 5 ??? (MobileSpotlightIndex + 517292) [0x1f61be4ac] 5 ??? (SpotlightDaemon + 14012) [0x2354e66bc] 5 ??? (SpotlightDaemon + 218768) [0x235518690] 5 ??? (MobileSpotlightIndex + 146892) [0x1f6163dcc] 4 ??? (MobileSpotlightIndex + 157052) [0x1f616657c] 4 ??? (MobileSpotlightIndex + 256212) [0x1f617e8d4] 4 ??? (libsystem_kernel.dylib + 9816) [0x206996658] 1 ??? (MobileSpotlightIndex + 156856) [0x1f61664b8] 1 ??? (MobileSpotlightIndex + 256212) [0x1f617e8d4] 1 ??? (libsystem_kernel.dylib + 9816) [0x206996658] 51 ??? (libsystem_pthread.dylib + 3488) [0x22765eda0] 51 ??? (libdispatch.dylib + 90456) [0x1cf835158] 42 ??? (libdispatch.dylib + 88388) [0x1cf834944] 37 ??? (libdispatch.dylib + 27032) [0x1cf825998] 37 ??? (libdispatch.dylib + 29192) [0x1cf826208] 37 ??? (libdispatch.dylib + 49368) [0x1cf82b0d8] 37 ??? (libdispatch.dylib + 46092) [0x1cf82a40c] 37 ??? (libdispatch.dylib + 49368) [0x1cf82b0d8] 37 ??? (libdispatch.dylib + 46388) [0x1cf82a534] 37 ??? (libdispatch.dylib + 16044) [0x1cf822eac] 37 ??? (libdispatch.dylib + 77764) [0x1cf831fc4] 37 ??? (MobileSpotlightIndex + 111816) [0x1f615b4c8] 32 ??? (MobileSpotlightIndex + 85608) [0x1f6154e68] 30 ??? (MobileSpotlightIndex + 129028) [0x1f615f804] 30 ??? (SpotlightDaemon + 91048) [0x2354f93a8] 30 ??? (MobileSpotlightIndex + 1577416) [0x1f62c11c8] 30 ??? (MobileSpotlightIndex + 516388) [0x1f61be124] 30 ??? (MobileSpotlightIndex + 1594152) [0x1f62c5328] 30 ??? (MobileSpotlightIndex + 59516) [0x1f614e87c] 19 ??? (MobileSpotlightIndex + 104992) [0x1f6159a20] 19 ??? (MobileSpotlightIndex + 967712) [0x1f622c420] 19 ??? (libsystem_kernel.dylib + 9816) [0x206996658] 10 ??? (MobileSpotlightIndex + 105140) [0x1f6159ab4] 10 ??? (MobileSpotlightIndex + 591036) [0x1f61d04bc] 10 ??? (MobileSpotlightIndex + 22560) [0x1f6145820] 10 ??? (MobileSpotlightIndex + 2954728) [0x1f64115e8] 10 ??? (MobileSpotlightIndex + 100360) [0x1f6158808] 10 ??? (MobileSpotlightIndex + 34900) [0x1f6148854] 10 ??? (MobileSpotlightIndex + 715000) [0x1f61ee8f8] 10 ??? (MobileSpotlightIndex + 25956) [0x1f6146564] 10 ??? (MobileSpotlightIndex + 85340) [0x1f6154d5c] 10 ??? (MobileSpotlightIndex + 380272) [0x1f619cd70] 10 ??? (MobileSpotlightIndex + 152880) [0x1f6165530] 10 ??? (libsystem_kernel.dylib + 11492) [0x206996ce4] 1 ??? (MobileSpotlightIndex + 105360) [0x1f6159b90] 1 ??? (MobileSpotlightIndex + 17732) [0x1f6144544] 1 ??? (MobileSpotlightIndex + 44124) [0x1f614ac5c] 1 ??? (MobileSpotlightIndex + 25956) [0x1f6146564] 1 ??? (MobileSpotlightIndex + 85340) [0x1f6154d5c] 1 ??? (MobileSpotlightIndex + 380272) [0x1f619cd70] 1 ??? (MobileSpotlightIndex + 152880) [0x1f6165530] 1 ??? (libsystem_kernel.dylib + 11492) [0x206996ce4] 2 ??? (MobileSpotlightIndex + 657700) [0x1f61e0924] 2 ??? (MobileSpotlightIndex + 516388) [0x1f61be124] 2 ??? (MobileSpotlightIndex + 1666216) [0x1f62d6ca8] 2 ??? (libdispatch.dylib + 99536) [0x1cf8374d0] 2 ??? (libdispatch.dylib + 99044) [0x1cf8372e4] 2 ??? (libdispatch.dylib + 102364) [0x1cf837fdc] 2 ??? (libdispatch.dylib + 16108) [0x1cf822eec] 2 ??? (MobileSpotlightIndex + 573484) [0x1f61cc02c] 2 ??? (MobileSpotlightIndex + 394844) [0x1f61a065c] 2 ??? (MobileSpotlightIndex + 17732) [0x1f6144544] 2 ??? (MobileSpotlightIndex + 44124) [0x1f614ac5c] 2 ??? (MobileSpotlightIndex + 25956) [0x1f6146564] 2 ??? (MobileSpotlightIndex + 85340) [0x1f6154d5c] 2 ??? (MobileSpotlightIndex + 380272) [0x1f619cd70] 2 ??? (MobileSpotlightIndex + 152880) [0x1f6165530] 2 ??? (libsystem_kernel.dylib + 11492) [0x206996ce4] 2 5 ??? (MobileSpotlightIndex + 113376) [0x1f615bae0] 5 ??? (MobileSpotlightIndex + 187416) [0x1f616dc18] 5 ??? (MobileSpotlightIndex + 678752) [0x1f61e5b60] 3 ??? (MobileSpotlightIndex + 164372) [0x1f6168214] 1 ??? (MobileSpotlightIndex + 1931048) [0x1f6317728] 1 ??? (MobileSpotlightIndex + 1934536) [0x1f63184c8] 1 ??? (libsystem_kernel.dylib + 11492) [0x206996ce4] 1 ??? (MobileSpotlightIndex + 1930964) [0x1f63176d4] 1 ??? (MobileSpotlightIndex + 1930684) [0x1f63175bc] 1 ??? (MobileSpotlightIndex + 751064) [0x1f61f75d8] 1 ??? (libsystem_kernel.dylib + 11492) [0x206996ce4] 1 ??? (MobileSpotlightIndex + 163828) [0x1f6167ff4] 1 ??? (MobileSpotlightIndex + 2106288) [0x1f63423b0] 1 ??? (MobileSpotlightIndex + 2102984) [0x1f63416c8] 1 ??? (libsystem_kernel.dylib + 11492) [0x206996ce4] 1 ??? (MobileSpotlightIndex + 163428) [0x1f6167e64] 1 ??? (MobileSpotlightIndex + 496740) [0x1f61b9464] 1 ??? (MobileSpotlightIndex + 688328) [0x1f61e80c8] 1 ??? (MobileSpotlightIndex + 568008) [0x1f61caac8] 1 ??? (MobileSpotlightIndex + 225740) [0x1f61771cc] 1 ??? (libsystem_kernel.dylib + 11492) [0x206996ce4] 5 ??? (libdispatch.dylib + 27184) [0x1cf825a30] 5 ??? (libdispatch.dylib + 29192) [0x1cf826208] 5 ??? (libdispatch.dylib + 49368) [0x1cf82b0d8] 5 ??? (libdispatch.dylib + 46092) [0x1cf82a40c] 5 ??? (libdispatch.dylib + 49368) [0x1cf82b0d8] 5 ??? (libdispatch.dylib + 46388) [0x1cf82a534] 5 ??? (libdispatch.dylib + 16044) [0x1cf822eac] 5 ??? (libdispatch.dylib + 77764) [0x1cf831fc4] 5 ??? (MobileSpotlightIndex + 111816) [0x1f615b4c8] 3 ??? (MobileSpotlightIndex + 113376) [0x1f615bae0] 2 ??? (MobileSpotlightIndex + 187416) [0x1f616dc18] 2 ??? (MobileSpotlightIndex + 678752) [0x1f61e5b60] 1 ??? (MobileSpotlightIndex + 164372) [0x1f6168214] 1 ??? (MobileSpotlightIndex + 1930660) [0x1f63175a4] 1 ??? (MobileSpotlightIndex + 338920) [0x1f6192be8] 1 ??? (libsystem_kernel.dylib + 11492) [0x206996ce4] 1 ??? (MobileSpotlightIndex + 163828) [0x1f6167ff4] 1 ??? (MobileSpotlightIndex + 2106288) [0x1f63423b0] 1 ??? (MobileSpotlightIndex + 2102984) [0x1f63416c8] 1 ??? (libsystem_kernel.dylib + 11492) [0x206996ce4] 1 ??? (MobileSpotlightIndex + 201824) [0x1f6171460] 1 ??? (MobileSpotlightIndex + 836928) [0x1f620c540] 1 ??? (libsystem_kernel.dylib + 16016) [0x206997e90] 1 2 ??? (MobileSpotlightIndex + 85608) [0x1f6154e68] 2 ??? (MobileSpotlightIndex + 129028) [0x1f615f804] 2 ??? (SpotlightDaemon + 91048) [0x2354f93a8] 2 ??? (MobileSpotlightIndex + 1577416) [0x1f62c11c8] 2 ??? (MobileSpotlightIndex + 516388) [0x1f61be124] 2 ??? (MobileSpotlightIndex + 1594152) [0x1f62c5328] 2 ??? (MobileSpotlightIndex + 59516) [0x1f614e87c] 2 ??? (MobileSpotlightIndex + 104992) [0x1f6159a20] 2 ??? (MobileSpotlightIndex + 967712) [0x1f622c420] 2 ??? (libsystem_kernel.dylib + 9816) [0x206996658] 9 ??? (libdispatch.dylib + 88676) [0x1cf834a64] 9 ??? (libdispatch.dylib + 16044) [0x1cf822eac] 9 ??? (libdispatch.dylib + 96692) [0x1cf8369b4] 9 ??? (libdispatch.dylib + 16108) [0x1cf822eec] 9 ??? (MobileSpotlightIndex + 573484) [0x1f61cc02c] 8 ??? (MobileSpotlightIndex + 394844) [0x1f61a065c] 8 ??? (MobileSpotlightIndex + 17732) [0x1f6144544] 8 ??? (MobileSpotlightIndex + 44124) [0x1f614ac5c] 8 ??? (MobileSpotlightIndex + 25956) [0x1f6146564] 8 ??? (MobileSpotlightIndex + 85340) [0x1f6154d5c] 8 ??? (MobileSpotlightIndex + 380272) [0x1f619cd70] 8 ??? (MobileSpotlightIndex + 152880) [0x1f6165530] 8 ??? (libsystem_kernel.dylib + 11492) [0x206996ce4] 8 1 ??? (MobileSpotlightIndex + 397216) [0x1f61a0fa0] 1 ??? (MobileSpotlightIndex + 392144) [0x1f619fbd0] 1 ??? (libsystem_kernel.dylib + 26792) [0x20699a8a8] Binary Images: 0x102044000 - ??? searchd /System/Library/PrivateFrameworks/Search.framework/searchd 0x1cf81f000 - 0x1cf865fff libdispatch.dylib /usr/lib/system/libdispatch.dylib 0x1f6140000 - 0x1f6472fff MobileSpotlightIndex <393D4659-313E-30ED-917D-574FD499F0C7> /System/Library/PrivateFrameworks/MobileSpotlightIndex.framework/MobileSpotlightIndex 0x206994000 - 0x2069cbff7 libsystem_kernel.dylib <75DA6452-934E-3F80-B181-D47074378E83> /usr/lib/system/libsystem_kernel.dylib 0x22765e000 - 0x227669ff3 libsystem_pthread.dylib <56698309-210A-3137-97D4-14E4604B1117> /usr/lib/system/libsystem_pthread.dylib 0x2354e3000 - 0x235566fff SpotlightDaemon /System/Library/PrivateFrameworks/SpotlightDaemon.framework/SpotlightDaemon