Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: searchd.diskwrites_resource-2023-07-05-105338.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"duration_ms":"776784","share_with_app_devs":1,"roots_installed":0,"bug_type":"145","os_version":"iPhone OS 16.5.1 (20F75)","slice_uuid":"D9E6759F-024B-3606-B371-2B28C15CBB76","is_first_party":0,"incident_id":"5514157C-0A60-4CF6-A569-F825EBB1BD27","timestamp":"2023-07-05 10:53:38.00 +0300","app_name":"searchd","name":"searchd"} Date/Time: 2023-07-05 10:40:41.209 +0300 End time: 2023-07-05 10:53:37.993 +0300 OS Version: iPhone OS 16.5.1 (Build 20F75) Architecture: arm64e Report Version: 40 Incident Identifier: 5514157C-0A60-4CF6-A569-F825EBB1BD27 Share With Devs: Yes Data Source: Microstackshots Shared Cache: 897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x1a9cb4000, slide 0x29cb4000 Command: searchd Path: /System/Library/PrivateFrameworks/Search.framework/searchd Resource Coalition ID: 233 Architecture: arm64e Parent: UNKNOWN [1] PID: 148 Event: disk writes Action taken: none Writes: 1073.99 MB of file backed memory dirtied over 777 seconds (1382.61 KB per second average), exceeding limit of 12.43 KB per second over 86400 seconds Writes limit: 1073.74 MB Limit duration: 86400s Writes caused: 1073.99 MB Writes duration: 777s Duration: 776.78s Duration Sampled: 775.91s Steps: 128 (10.49 MB/step) Hardware model: iPad13,2 Active cpus: 6 HW page size: 16384 VM page size: 16384 Advisory levels: Battery -> 2, User -> 3, ThermalPressure -> 0, Combined -> 2 Free disk space: 12.57 GB/59.58 GB, low space threshold 150 MB Low Power Mode: Enabled Vnodes Available: 81.36% (16271/20000, 10000 allocated, 10000 soft limit) Preferred User Language: en-GB, ru-GB Country Code: GB Keyboards: en_GB QWERTYBritish, ru_RU Russian HW Keyboard: Yes OS Cryptex File Extents: 5616 Heaviest stack for the target process: 101 ??? (libsystem_pthread.dylib + 2940) [0x20ff5ab7c] 57 ??? (libsystem_pthread.dylib + 3488) [0x20ff5ada0] 57 ??? (libdispatch.dylib + 90456) [0x1b8131158] 57 ??? (libdispatch.dylib + 88388) [0x1b8130944] 57 ??? (libdispatch.dylib + 27032) [0x1b8121998] 57 ??? (libdispatch.dylib + 29192) [0x1b8122208] 57 ??? (libdispatch.dylib + 49368) [0x1b81270d8] 57 ??? (libdispatch.dylib + 46092) [0x1b812640c] 57 ??? (libdispatch.dylib + 49368) [0x1b81270d8] 57 ??? (libdispatch.dylib + 46388) [0x1b8126534] 57 ??? (libdispatch.dylib + 16044) [0x1b811eeac] 57 ??? (libdispatch.dylib + 77764) [0x1b812dfc4] 57 ??? (MobileSpotlightIndex + 111816) [0x1dea574c8] 32 ??? (MobileSpotlightIndex + 113376) [0x1dea57ae0] 16 ??? (MobileSpotlightIndex + 187416) [0x1dea69c18] 16 ??? (MobileSpotlightIndex + 678752) [0x1deae1b60] 8 ??? (MobileSpotlightIndex + 163828) [0x1dea63ff4] 4 ??? (MobileSpotlightIndex + 2106620) [0x1dec3e4fc] Powerstats for: searchd [148] UUID: D9E6759F-024B-3606-B371-2B28C15CBB76 Path: /System/Library/PrivateFrameworks/Search.framework/searchd Resource Coalition ID: 233 Architecture: arm64e Parent: UNKNOWN [1] UID: 501 Sudden Term: Tracked (allows idle exit) Footprint: 6752 KB -> 13.05 MB (+6608 KB) (max 18.05 MB ) Pageins: 9393 pages Start time: 2023-07-05 10:40:55.885 +0300 End time: 2023-07-05 10:53:37.714 +0300 Num samples: 101 (79%) Primary state: 96 samples Non-Frontmost App, Non-Suppressed, Kernel mode, Effective Thread QoS Background, Requested Thread QoS Background, Override Thread QoS Unspecified User Activity: 0 samples Idle, 101 samples Active Power Source: 101 samples on Battery, 0 samples on AC 101 ??? (libsystem_pthread.dylib + 2940) [0x20ff5ab7c] 57 ??? (libsystem_pthread.dylib + 3488) [0x20ff5ada0] 57 ??? (libdispatch.dylib + 90456) [0x1b8131158] 57 ??? (libdispatch.dylib + 88388) [0x1b8130944] 57 ??? (libdispatch.dylib + 27032) [0x1b8121998] 57 ??? (libdispatch.dylib + 29192) [0x1b8122208] 57 ??? (libdispatch.dylib + 49368) [0x1b81270d8] 57 ??? (libdispatch.dylib + 46092) [0x1b812640c] 57 ??? (libdispatch.dylib + 49368) [0x1b81270d8] 57 ??? (libdispatch.dylib + 46388) [0x1b8126534] 57 ??? (libdispatch.dylib + 16044) [0x1b811eeac] 57 ??? (libdispatch.dylib + 77764) [0x1b812dfc4] 57 ??? (MobileSpotlightIndex + 111816) [0x1dea574c8] 32 ??? (MobileSpotlightIndex + 113376) [0x1dea57ae0] 16 ??? (MobileSpotlightIndex + 187416) [0x1dea69c18] 16 ??? (MobileSpotlightIndex + 678752) [0x1deae1b60] 8 ??? (MobileSpotlightIndex + 163828) [0x1dea63ff4] 4 ??? (MobileSpotlightIndex + 2106620) [0x1dec3e4fc] 2 ??? (MobileSpotlightIndex + 2106420) [0x1dec3e434] 2 ??? (MobileSpotlightIndex + 338920) [0x1dea8ebe8] 2 ??? (libsystem_kernel.dylib + 11492) [0x1ef292ce4] 2 ??? (MobileSpotlightIndex + 2106288) [0x1dec3e3b0] 2 ??? (MobileSpotlightIndex + 2102984) [0x1dec3d6c8] 2 ??? (libsystem_kernel.dylib + 11492) [0x1ef292ce4] 5 ??? (MobileSpotlightIndex + 161108) [0x1dea63554] 3 ??? (MobileSpotlightIndex + 373988) [0x1dea974e4] 3 ??? (MobileSpotlightIndex + 270184) [0x1dea7df68] 3 ??? (MobileSpotlightIndex + 360616) [0x1dea940a8] 3 ??? (MobileSpotlightIndex + 712216) [0x1deae9e18] 2 ??? (MobileSpotlightIndex + 712216) [0x1deae9e18] 1 ??? (MobileSpotlightIndex + 712216) [0x1deae9e18] 1 ??? (MobileSpotlightIndex + 711732) [0x1deae9c34] 1 ??? (MobileSpotlightIndex + 240576) [0x1dea76bc0] 1 ??? (MobileSpotlightIndex + 602160) [0x1deacf030] 1 ??? (libsystem_platform.dylib + 4356) [0x20fec4104] 1 ??? (MobileSpotlightIndex + 711732) [0x1deae9c34] 1 ??? (MobileSpotlightIndex + 240576) [0x1dea76bc0] 1 ??? (MobileSpotlightIndex + 602160) [0x1deacf030] 1 ??? (libsystem_platform.dylib + 4356) [0x20fec4104] 1 ??? (MobileSpotlightIndex + 711732) [0x1deae9c34] 1 ??? (libsystem_platform.dylib + 4784) [0x20fec42b0] 2 ??? (MobileSpotlightIndex + 374144) [0x1dea97580] 1 ??? (libsystem_platform.dylib + 4784) [0x20fec42b0] 1 ??? (libsystem_platform.dylib + 4712) [0x20fec4268] 3 ??? (MobileSpotlightIndex + 164372) [0x1dea64214] 2 ??? (MobileSpotlightIndex + 1930964) [0x1dec136d4] 1 ??? (MobileSpotlightIndex + 1931048) [0x1dec13728] 1 ??? (MobileSpotlightIndex + 1934536) [0x1dec144c8] 1 ??? (libsystem_kernel.dylib + 11492) [0x1ef292ce4] 15 ??? (MobileSpotlightIndex + 201328) [0x1dea6d270] 8 ??? (MobileSpotlightIndex + 205196) [0x1dea6e18c] 8 ??? (MobileSpotlightIndex + 358816) [0x1dea939a0] 5 ??? (MobileSpotlightIndex + 423980) [0x1deaa382c] 5 ??? (MobileSpotlightIndex + 289488) [0x1dea82ad0] 5 ??? (libsystem_kernel.dylib + 11492) [0x1ef292ce4] 1 3 ??? (MobileSpotlightIndex + 425180) [0x1deaa3cdc] 3 ??? (MobileSpotlightIndex + 289488) [0x1dea82ad0] 3 ??? (libsystem_kernel.dylib + 11492) [0x1ef292ce4] 1 1 4 ??? (MobileSpotlightIndex + 204528) [0x1dea6def0] 4 ??? (MobileSpotlightIndex + 390836) [0x1dea9b6b4] 4 ??? (MobileSpotlightIndex + 512612) [0x1deab9264] 2 ??? (MobileSpotlightIndex + 163828) [0x1dea63ff4] 2 ??? (MobileSpotlightIndex + 2106620) [0x1dec3e4fc] 1 ??? (MobileSpotlightIndex + 164372) [0x1dea64214] 1 ??? (MobileSpotlightIndex + 1930964) [0x1dec136d4] 1 1 ??? (MobileSpotlightIndex + 161108) [0x1dea63554] 1 ??? (MobileSpotlightIndex + 373988) [0x1dea974e4] 1 ??? (MobileSpotlightIndex + 270184) [0x1dea7df68] 1 ??? (MobileSpotlightIndex + 360616) [0x1dea940a8] 1 ??? (MobileSpotlightIndex + 712216) [0x1deae9e18] 1 ??? (MobileSpotlightIndex + 712216) [0x1deae9e18] 1 ??? (MobileSpotlightIndex + 711732) [0x1deae9c34] 1 ??? (MobileSpotlightIndex + 240576) [0x1dea76bc0] 1 ??? (MobileSpotlightIndex + 602160) [0x1deacf030] 1 ??? (libsystem_platform.dylib + 4356) [0x20fec4104] 1 ??? (MobileSpotlightIndex + 205700) [0x1dea6e384] 1 ??? (MobileSpotlightIndex + 433616) [0x1deaa5dd0] 1 ??? (MobileSpotlightIndex + 152880) [0x1dea61530] 1 ??? (libsystem_kernel.dylib + 11492) [0x1ef292ce4] 1 1 ??? (MobileSpotlightIndex + 205232) [0x1dea6e1b0] 1 ??? (MobileSpotlightIndex + 493032) [0x1deab45e8] 1 ??? (MobileSpotlightIndex + 152880) [0x1dea61530] 1 ??? (libsystem_kernel.dylib + 11492) [0x1ef292ce4] 1 ??? (MobileSpotlightIndex + 204668) [0x1dea6df7c] 1 ??? (MobileSpotlightIndex + 436556) [0x1deaa694c] 1 ??? (MobileSpotlightIndex + 479280) [0x1deab1030] 1 ??? (MobileSpotlightIndex + 152880) [0x1dea61530] 1 ??? (libsystem_kernel.dylib + 11492) [0x1ef292ce4] 1 ??? (MobileSpotlightIndex + 201824) [0x1dea6d460] 1 ??? (MobileSpotlightIndex + 836952) [0x1deb08558] 1 ??? (libsystem_kernel.dylib + 19408) [0x1ef294bd0] 25 ??? (MobileSpotlightIndex + 85608) [0x1dea50e68] 25 ??? (MobileSpotlightIndex + 129028) [0x1dea5b804] 25 ??? (SpotlightDaemon + 91048) [0x21ddf53a8] 25 ??? (MobileSpotlightIndex + 1577416) [0x1debbd1c8] 25 ??? (MobileSpotlightIndex + 516388) [0x1deaba124] 25 ??? (MobileSpotlightIndex + 1594152) [0x1debc1328] 25 ??? (MobileSpotlightIndex + 59516) [0x1dea4a87c] 20 ??? (MobileSpotlightIndex + 104992) [0x1dea55a20] 20 ??? (MobileSpotlightIndex + 967712) [0x1deb28420] 20 ??? (libsystem_kernel.dylib + 9816) [0x1ef292658] 5 ??? (MobileSpotlightIndex + 105140) [0x1dea55ab4] 5 ??? (MobileSpotlightIndex + 591036) [0x1deacc4bc] 5 ??? (MobileSpotlightIndex + 22560) [0x1dea41820] 5 ??? (MobileSpotlightIndex + 2954728) [0x1ded0d5e8] 5 ??? (MobileSpotlightIndex + 100360) [0x1dea54808] 5 ??? (MobileSpotlightIndex + 34900) [0x1dea44854] 5 ??? (MobileSpotlightIndex + 715000) [0x1deaea8f8] 5 ??? (MobileSpotlightIndex + 25956) [0x1dea42564] 5 ??? (MobileSpotlightIndex + 85340) [0x1dea50d5c] 5 ??? (MobileSpotlightIndex + 380272) [0x1dea98d70] 5 ??? (MobileSpotlightIndex + 152880) [0x1dea61530] 5 ??? (libsystem_kernel.dylib + 11492) [0x1ef292ce4] 44 ??? (libsystem_pthread.dylib + 3548) [0x20ff5addc] 44 ??? (libdispatch.dylib + 93404) [0x1b8131cdc] 44 ??? (libdispatch.dylib + 53168) [0x1b8127fb0] 44 ??? (libdispatch.dylib + 49368) [0x1b81270d8] 44 ??? (libdispatch.dylib + 46388) [0x1b8126534] 44 ??? (libdispatch.dylib + 16044) [0x1b811eeac] 42 ??? (libdispatch.dylib + 77764) [0x1b812dfc4] 42 ??? (MobileSpotlightIndex + 111816) [0x1dea574c8] 42 ??? (MobileSpotlightIndex + 517292) [0x1deaba4ac] 42 ??? (SpotlightDaemon + 14012) [0x21dde26bc] 42 ??? (SpotlightDaemon + 323028) [0x21de2ddd4] 42 ??? (MobileSpotlightIndex + 146892) [0x1dea5fdcc] 27 ??? (MobileSpotlightIndex + 157052) [0x1dea6257c] 27 ??? (MobileSpotlightIndex + 256212) [0x1dea7a8d4] 27 ??? (libsystem_kernel.dylib + 9816) [0x1ef292658] 15 ??? (MobileSpotlightIndex + 157092) [0x1dea625a4] 15 ??? (MobileSpotlightIndex + 256212) [0x1dea7a8d4] 15 ??? (libsystem_kernel.dylib + 9816) [0x1ef292658] 2 ??? (MobileSpotlightIndex + 111816) [0x1dea574c8] 2 ??? (MobileSpotlightIndex + 517292) [0x1deaba4ac] 2 ??? (SpotlightDaemon + 14012) [0x21dde26bc] 1 ??? (SpotlightDaemon + 226948) [0x21de16684] 1 ??? (MobileSpotlightIndex + 224988) [0x1dea72edc] 1 ??? (MobileSpotlightIndex + 284216) [0x1dea81638] 1 ??? (MobileSpotlightIndex + 256212) [0x1dea7a8d4] 1 ??? (libsystem_kernel.dylib + 9816) [0x1ef292658] 1 ??? (SpotlightDaemon + 218768) [0x21de14690] 1 ??? (MobileSpotlightIndex + 146892) [0x1dea5fdcc] 1 ??? (MobileSpotlightIndex + 157052) [0x1dea6257c] 1 ??? (MobileSpotlightIndex + 256212) [0x1dea7a8d4] 1 ??? (libsystem_kernel.dylib + 9816) [0x1ef292658] Binary Images: 0x102e8c000 - ??? searchd /System/Library/PrivateFrameworks/Search.framework/searchd 0x1b811b000 - 0x1b8161fff libdispatch.dylib /usr/lib/system/libdispatch.dylib 0x1dea3c000 - 0x1ded6efff MobileSpotlightIndex <393D4659-313E-30ED-917D-574FD499F0C7> /System/Library/PrivateFrameworks/MobileSpotlightIndex.framework/MobileSpotlightIndex 0x1ef290000 - 0x1ef2c7ff7 libsystem_kernel.dylib <75DA6452-934E-3F80-B181-D47074378E83> /usr/lib/system/libsystem_kernel.dylib 0x20fec3000 - 0x20fec9ff7 libsystem_platform.dylib /usr/lib/system/libsystem_platform.dylib 0x20ff5a000 - 0x20ff65ff3 libsystem_pthread.dylib <56698309-210A-3137-97D4-14E4604B1117> /usr/lib/system/libsystem_pthread.dylib 0x21dddf000 - 0x21de62fff SpotlightDaemon /System/Library/PrivateFrameworks/SpotlightDaemon.framework/SpotlightDaemon