Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: WireGuard Network Extension.wakeups_resource-2023-06-28-231027.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"app_name":"WireGuard Network Extension","timestamp":"2023-06-28 23:10:27.00 +0300","app_version":"4.0.1","slice_uuid":"4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8","build_version":"3","bundleID":"com.opera.OperaTouch.vpnExtension","duration_ms":"242956","share_with_app_devs":0,"is_first_party":0,"bug_type":"142","os_version":"iPhone OS 16.5.1 (20F75)","roots_installed":0,"incident_id":"04152F62-89AC-461D-9CAC-A93EF93E2ED4","name":"WireGuard Network Extension"} Date/Time: 2023-06-28 23:06:23.444 +0300 End time: 2023-06-28 23:10:26.400 +0300 OS Version: iPhone OS 16.5.1 (Build 20F75) Architecture: arm64e Report Version: 40 Incident Identifier: 04152F62-89AC-461D-9CAC-A93EF93E2ED4 Data Source: Microstackshots Shared Cache: 897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x1cec38000, slide 0x4ec38000 Command: WireGuard Network Extension Path: /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension Identifier: com.opera.OperaTouch.vpnExtension Version: 4.0.1 (3) Resource Coalition ID: 766 Architecture: arm64 Parent: UNKNOWN [1] PID: 744 Event: wakeups Action taken: none Wakeups: 45001 wakeups over the last 243 seconds (185 wakeups per second average), exceeding limit of 150 wakeups per second over 300 seconds Wakeups limit: 45000 Limit duration: 300s Wakeups caused: 45001 Wakeups duration: 243s Duration: 242.96s Duration Sampled: 25.32s Steps: 6 Hardware model: iPad13,2 Active cpus: 6 HW page size: 16384 VM page size: 16384 Advisory levels: Battery -> 2, User -> 3, ThermalPressure -> 0, Combined -> 2 Free disk space: 12.57 GB/59.58 GB, low space threshold 150 MB Low Power Mode: Enabled Vnodes Available: 75.15% (15030/20000, 10000 allocated, 10000 soft limit) Preferred User Language: en-GB, ru-GB Country Code: GB Keyboards: en_GB QWERTYBritish, ru_RU Russian HW Keyboard: Yes OS Cryptex File Extents: 5616 Heaviest stack for the target process: 3 ??? (WireGuard Network Extension + 1865196760) [0x16fb1e4d8] 3 ??? (WireGuard Network Extension + 510764) [0x1008d0b2c] 3 ??? (WireGuard Network Extension + 576664) [0x1008e0c98] 3 ??? (libsystem_kernel.dylib + 9660) [0x2142165bc] Powerstats for: WireGuard Network Extension (WireGuard Network Extension) [744] UUID: 4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8 Path: /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension Identifier: com.opera.OperaTouch.vpnExtension Version: 4.0.1 (3) Resource Coalition ID: 766 Architecture: arm64 Parent: UNKNOWN [1] UID: 501 Footprint: 5984 KB Start time: 2023-06-28 23:10:00.095 +0300 End time: 2023-06-28 23:10:25.415 +0300 Num samples: 6 (100%) Primary state: 5 samples Non-Frontmost App, Non-Suppressed, Kernel mode, Effective Thread QoS Default, Requested Thread QoS Default, Override Thread QoS Unspecified User Activity: 0 samples Idle, 6 samples Active Power Source: 6 samples on Battery, 0 samples on AC 3 ??? (WireGuard Network Extension + 1865196760) [0x16fb1e4d8] 3 ??? (WireGuard Network Extension + 510764) [0x1008d0b2c] 3 ??? (WireGuard Network Extension + 576664) [0x1008e0c98] 3 ??? (libsystem_kernel.dylib + 9660) [0x2142165bc] 1 ??? (WireGuard Network Extension + 1865770200) [0x16fbaa4d8] 1 ??? (WireGuard Network Extension + 510764) [0x1008d0b2c] 1 ??? (WireGuard Network Extension + 576664) [0x1008e0c98] 1 ??? (libsystem_kernel.dylib + 9660) [0x2142165bc] 1 ??? (WireGuard Network Extension + 1861756328) [0x16f7d65a8] 1 ??? (WireGuard Network Extension + 510764) [0x1008d0b2c] 1 ??? (WireGuard Network Extension + 576664) [0x1008e0c98] 1 ??? (libsystem_kernel.dylib + 9660) [0x2142165bc] 1 ??? (WireGuard Network Extension + 567092) [0x1008de734] 1 ??? (WireGuard Network Extension + 424408) [0x1008bb9d8] 1 ??? (WireGuard Network Extension + 423064) [0x1008bb498] 1 ??? (WireGuard Network Extension + 418896) [0x1008ba450] 1 ??? (WireGuard Network Extension + 412580) [0x1008b8ba4] 1 ??? (WireGuard Network Extension + 217760) [0x1008892a0] 1 ??? (WireGuard Network Extension + 373080) [0x1008af158] 1 Binary Images: 0x100854000 - ??? com.opera.OperaTouch.vpnExtension 4.0.1 (3) <4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8> /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension 0x214214000 - 0x21424bff7 libsystem_kernel.dylib <75DA6452-934E-3F80-B181-D47074378E83> /usr/lib/system/libsystem_kernel.dylib