Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/

Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1.


File name: 	WireGuard Network Extension.wakeups_resource-2023-06-30-141340.ips
Downloaded from:  Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data.


{"app_name":"WireGuard Network Extension","timestamp":"2023-06-30 14:13:40.00 +0300","app_version":"4.0.1","slice_uuid":"4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8","build_version":"3","bundleID":"com.opera.OperaTouch.vpnExtension","duration_ms":"109807","share_with_app_devs":1,"is_first_party":0,"bug_type":"142","os_version":"iPhone OS 16.5.1 (20F75)","roots_installed":0,"incident_id":"A7292DB3-CAD0-48F2-AA19-878BF9851A63","name":"WireGuard Network Extension"}
Date/Time:        2023-06-30 14:11:49.622 +0300
End time:         2023-06-30 14:13:39.429 +0300
OS Version:       iPhone OS 16.5.1 (Build 20F75)
Architecture:     arm64e
Report Version:   40
Incident Identifier: A7292DB3-CAD0-48F2-AA19-878BF9851A63
Share With Devs:  Yes

Data Source:      Microstackshots
Shared Cache:     897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x1ce9a4000, slide 0x4e9a4000

Command:          WireGuard Network Extension
Path:             /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension
Identifier:       com.opera.OperaTouch.vpnExtension
Version:          4.0.1 (3)
Resource Coalition ID: 850
Architecture:     arm64
Parent:           UNKNOWN [1]
PID:              1007

Event:            wakeups
Action taken:     none
Wakeups:          45001 wakeups over the last 110 seconds (410 wakeups per second average), exceeding limit of 150 wakeups per second over 300 seconds
Wakeups limit:    45000
Limit duration:   300s
Wakeups caused:   45001
Wakeups duration: 110s
Duration:         109.81s
Duration Sampled: 9.03s
Steps:            2

Hardware model:   iPad13,2
Active cpus:      6
HW page size:     16384
VM page size:     16384

Advisory levels:  Battery -> 2, User -> 3, ThermalPressure -> 0, Combined -> 2
Free disk space:  12.15 GB/59.58 GB, low space threshold 150 MB
Low Power Mode:   Enabled
Vnodes Available: 76.81% (15362/20000, 10000 allocated, 10000 soft limit)

Preferred User Language: en-GB
Country Code:     GB
Keyboards:        en_GB QWERTYBritish, ru_RU Russian
HW Keyboard:      Yes
OS Cryptex File Extents: 5616

Heaviest stack for the target process:
  1  ??? (WireGuard Network Extension + 1869653208) [0x16fb0e4d8]
  1  ??? (WireGuard Network Extension + 510764) [0x100480b2c]
  1  ??? (WireGuard Network Extension + 576664) [0x100490c98]
  1  ??? (libsystem_kernel.dylib + 9660) [0x213f825bc]


Powerstats for:   WireGuard Network Extension (WireGuard Network Extension) [1007]
UUID:             4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8
Path:             /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension
Identifier:       com.opera.OperaTouch.vpnExtension
Version:          4.0.1 (3)
Resource Coalition ID: 850
Architecture:     arm64
Parent:           UNKNOWN [1]
UID:              501
Footprint:        5792 KB
Start time:       2023-06-30 14:13:26.603 +0300
End time:         2023-06-30 14:13:35.633 +0300
Num samples:      2 (100%)
Primary state:    2 samples Non-Frontmost App, Non-Suppressed, Kernel mode, Effective Thread QoS Default, Requested Thread QoS Default, Override Thread QoS Unspecified
User Activity:    0 samples Idle, 2 samples Active
Power Source:     2 samples on Battery, 0 samples on AC
  1  ??? (WireGuard Network Extension + 1869653208) [0x16fb0e4d8]
    1  ??? (WireGuard Network Extension + 510764) [0x100480b2c]
      1  ??? (WireGuard Network Extension + 576664) [0x100490c98]
        1  ??? (libsystem_kernel.dylib + 9660) [0x213f825bc]
  1  ??? (WireGuard Network Extension + 576588) [0x100490c4c]
    1  ??? (libsystem_kernel.dylib + 22072) [0x213f85638]

  Binary Images:
           0x100404000 -                ???  com.opera.OperaTouch.vpnExtension 4.0.1 (3) <4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8>  /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension
           0x213f80000 -        0x213fb7ff7  libsystem_kernel.dylib                      <75DA6452-934E-3F80-B181-D47074378E83>  /usr/lib/system/libsystem_kernel.dylib