Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: WireGuard Network Extension.wakeups_resource-2023-06-28-232029.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"app_name":"WireGuard Network Extension","timestamp":"2023-06-28 23:20:29.00 +0300","app_version":"4.0.1","slice_uuid":"4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8","build_version":"3","bundleID":"com.opera.OperaTouch.vpnExtension","duration_ms":"99496","share_with_app_devs":0,"is_first_party":0,"bug_type":"142","os_version":"iPhone OS 16.5.1 (20F75)","roots_installed":0,"incident_id":"E7B63922-DA3A-4AC9-9457-573D2C816676","name":"WireGuard Network Extension"} Date/Time: 2023-06-28 23:18:49.132 +0300 End time: 2023-06-28 23:20:28.628 +0300 OS Version: iPhone OS 16.5.1 (Build 20F75) Architecture: arm64e Report Version: 40 Incident Identifier: E7B63922-DA3A-4AC9-9457-573D2C816676 Data Source: Microstackshots Shared Cache: 897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x1cec38000, slide 0x4ec38000 Command: WireGuard Network Extension Path: /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension Identifier: com.opera.OperaTouch.vpnExtension Version: 4.0.1 (3) Resource Coalition ID: 770 Architecture: arm64 Parent: UNKNOWN [1] PID: 759 Event: wakeups Action taken: none Wakeups: 45002 wakeups over the last 99 seconds (452 wakeups per second average), exceeding limit of 150 wakeups per second over 300 seconds Wakeups limit: 45000 Limit duration: 300s Wakeups caused: 45002 Wakeups duration: 99s Duration: 99.50s Duration Sampled: 12.17s Steps: 5 Hardware model: iPad13,2 Active cpus: 6 HW page size: 16384 VM page size: 16384 Advisory levels: Battery -> 2, User -> 3, ThermalPressure -> 0, Combined -> 2 Free disk space: 12.58 GB/59.58 GB, low space threshold 150 MB Low Power Mode: Enabled Vnodes Available: 75.83% (15165/20000, 10000 allocated, 10000 soft limit) Preferred User Language: en-GB, ru-GB Country Code: GB Keyboards: en_GB QWERTYBritish, ru_RU Russian HW Keyboard: Yes OS Cryptex File Extents: 5616 Heaviest stack for the target process: 2 ??? (WireGuard Network Extension + 567092) [0x10218e734] 2 ??? (WireGuard Network Extension + 424408) [0x10216b9d8] 2 ??? (WireGuard Network Extension + 423064) [0x10216b498] 2 ??? (WireGuard Network Extension + 418896) [0x10216a450] 1 ??? (WireGuard Network Extension + 412580) [0x102168ba4] Powerstats for: WireGuard Network Extension (WireGuard Network Extension) [759] UUID: 4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8 Path: /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension Identifier: com.opera.OperaTouch.vpnExtension Version: 4.0.1 (3) Resource Coalition ID: 770 Architecture: arm64 Parent: UNKNOWN [1] UID: 501 Footprint: 5728 KB Start time: 2023-06-28 23:20:04.193 +0300 End time: 2023-06-28 23:20:16.360 +0300 Num samples: 5 (100%) Primary state: 3 samples Non-Frontmost App, Non-Suppressed, User mode, Effective Thread QoS Default, Requested Thread QoS Default, Override Thread QoS Unspecified User Activity: 0 samples Idle, 5 samples Active Power Source: 5 samples on Battery, 0 samples on AC 2 ??? (WireGuard Network Extension + 567092) [0x10218e734] 2 ??? (WireGuard Network Extension + 424408) [0x10216b9d8] 2 ??? (WireGuard Network Extension + 423064) [0x10216b498] 2 ??? (WireGuard Network Extension + 418896) [0x10216a450] 1 ??? (WireGuard Network Extension + 412608) [0x102168bc0] 1 ??? (WireGuard Network Extension + 440032) [0x10216f6e0] 1 ??? (WireGuard Network Extension + 440132) [0x10216f744] 1 ??? (WireGuard Network Extension + 412580) [0x102168ba4] 1 ??? (libsystem_pthread.dylib + 2952) [0x234edeb88] 1 ??? (libsystem_pthread.dylib + 5816) [0x234edf6b8] 1 ??? (WireGuard Network Extension + 1191996) [0x10222703c] 1 ??? (WireGuard Network Extension + 1193560) [0x102227658] 1 ??? (WireGuard Network Extension + 566976) [0x10218e6c0] 1 ??? (WireGuard Network Extension + 406116) [0x102167264] 1 ??? (WireGuard Network Extension + 406280) [0x102167308] 1 ??? (WireGuard Network Extension + 442872) [0x1021701f8] 1 ??? (WireGuard Network Extension + 443212) [0x10217034c] 1 ??? (WireGuard Network Extension + 1814570200) [0x16e3864d8] 1 ??? (WireGuard Network Extension + 510764) [0x102180b2c] 1 ??? (WireGuard Network Extension + 576664) [0x102190c98] 1 ??? (libsystem_kernel.dylib + 9660) [0x2142165bc] 1 1 ??? (WireGuard Network Extension + 1811129560) [0x16e03e4d8] 1 ??? (WireGuard Network Extension + 510764) [0x102180b2c] 1 ??? (WireGuard Network Extension + 576664) [0x102190c98] 1 ??? (libsystem_kernel.dylib + 9660) [0x2142165bc] 1 Binary Images: 0x102104000 - ??? com.opera.OperaTouch.vpnExtension 4.0.1 (3) <4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8> /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension 0x214214000 - 0x21424bff7 libsystem_kernel.dylib <75DA6452-934E-3F80-B181-D47074378E83> /usr/lib/system/libsystem_kernel.dylib 0x234ede000 - 0x234ee9ff3 libsystem_pthread.dylib <56698309-210A-3137-97D4-14E4604B1117> /usr/lib/system/libsystem_pthread.dylib