Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: searchd.diskwrites_resource-2023-07-09-054356.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"duration_ms":"529820","share_with_app_devs":1,"roots_installed":0,"bug_type":"145","os_version":"iPhone OS 16.5.1 (20F75)","slice_uuid":"D9E6759F-024B-3606-B371-2B28C15CBB76","is_first_party":0,"incident_id":"6FF6E331-2CC1-475B-8644-C827C87F8575","timestamp":"2023-07-09 05:43:56.00 +0300","app_name":"searchd","name":"searchd"} Date/Time: 2023-07-09 05:35:05.483 +0300 End time: 2023-07-09 05:43:55.303 +0300 OS Version: iPhone OS 16.5.1 (Build 20F75) Architecture: arm64e Report Version: 40 Incident Identifier: 6FF6E331-2CC1-475B-8644-C827C87F8575 Share With Devs: Yes Data Source: Microstackshots Shared Cache: 897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x1af930000, slide 0x2f930000 Command: searchd Path: /System/Library/PrivateFrameworks/Search.framework/searchd Resource Coalition ID: 219 Architecture: arm64e Parent: UNKNOWN [1] PID: 140 Event: disk writes Action taken: none Writes: 1074.13 MB of file backed memory dirtied over 530 seconds (2027.34 KB per second average), exceeding limit of 12.43 KB per second over 86400 seconds Writes limit: 1073.74 MB Limit duration: 86400s Writes caused: 1074.13 MB Writes duration: 530s Duration: 529.82s Duration Sampled: 79.28s Steps: 23 (10.49 MB/step) Hardware model: iPad13,2 Active cpus: 6 HW page size: 16384 VM page size: 16384 Advisory levels: Battery -> 2, User -> 3, ThermalPressure -> 0, Combined -> 2 Free disk space: 15.36 GB/59.58 GB, low space threshold 150 MB Low Power Mode: Enabled Vnodes Available: 83.12% (16625/20000, 10000 allocated, 10000 soft limit) Preferred User Language: en-GB, ru-GB Country Code: GB Keyboards: en_GB QWERTYBritish, ru_RU Russian HW Keyboard: Yes OS Cryptex File Extents: 5616 Heaviest stack for the target process: 22 ??? (libsystem_pthread.dylib + 2940) [0x215bd6b7c] 14 ??? (libsystem_pthread.dylib + 3488) [0x215bd6da0] 14 ??? (libdispatch.dylib + 90456) [0x1bddad158] 14 ??? (libdispatch.dylib + 88388) [0x1bddac944] 12 ??? (libdispatch.dylib + 27032) [0x1bdd9d998] 12 ??? (libdispatch.dylib + 29192) [0x1bdd9e208] 12 ??? (libdispatch.dylib + 49368) [0x1bdda30d8] 12 ??? (libdispatch.dylib + 46092) [0x1bdda240c] 12 ??? (libdispatch.dylib + 49368) [0x1bdda30d8] 12 ??? (libdispatch.dylib + 46388) [0x1bdda2534] 12 ??? (libdispatch.dylib + 16044) [0x1bdd9aeac] 12 ??? (libdispatch.dylib + 77764) [0x1bdda9fc4] 12 ??? (MobileSpotlightIndex + 111816) [0x1e46d34c8] 7 ??? (MobileSpotlightIndex + 113376) [0x1e46d3ae0] 4 ??? (MobileSpotlightIndex + 201328) [0x1e46e9270] 2 ??? (MobileSpotlightIndex + 205196) [0x1e46ea18c] 2 ??? (MobileSpotlightIndex + 358816) [0x1e470f9a0] 1 ??? (MobileSpotlightIndex + 425180) [0x1e471fcdc] 1 ??? (MobileSpotlightIndex + 289488) [0x1e46fead0] 1 ??? (libsystem_kernel.dylib + 11492) [0x1f4f0ece4] Powerstats for: searchd [140] UUID: D9E6759F-024B-3606-B371-2B28C15CBB76 Path: /System/Library/PrivateFrameworks/Search.framework/searchd Resource Coalition ID: 219 Architecture: arm64e Parent: UNKNOWN [1] UID: 501 Sudden Term: Tracked (allows idle exit) Footprint: 10.52 MB -> 13.92 MB (+3488 KB) (max 15.83 MB ) Pageins: 2041 pages Start time: 2023-07-09 05:42:34.528 +0300 End time: 2023-07-09 05:43:53.805 +0300 Num samples: 22 (96%) Primary state: 20 samples Non-Frontmost App, Non-Suppressed, Kernel mode, Effective Thread QoS Background, Requested Thread QoS Background, Override Thread QoS Unspecified User Activity: 0 samples Idle, 22 samples Active Power Source: 22 samples on Battery, 0 samples on AC 22 ??? (libsystem_pthread.dylib + 2940) [0x215bd6b7c] 14 ??? (libsystem_pthread.dylib + 3488) [0x215bd6da0] 14 ??? (libdispatch.dylib + 90456) [0x1bddad158] 14 ??? (libdispatch.dylib + 88388) [0x1bddac944] 12 ??? (libdispatch.dylib + 27032) [0x1bdd9d998] 12 ??? (libdispatch.dylib + 29192) [0x1bdd9e208] 12 ??? (libdispatch.dylib + 49368) [0x1bdda30d8] 12 ??? (libdispatch.dylib + 46092) [0x1bdda240c] 12 ??? (libdispatch.dylib + 49368) [0x1bdda30d8] 12 ??? (libdispatch.dylib + 46388) [0x1bdda2534] 12 ??? (libdispatch.dylib + 16044) [0x1bdd9aeac] 12 ??? (libdispatch.dylib + 77764) [0x1bdda9fc4] 12 ??? (MobileSpotlightIndex + 111816) [0x1e46d34c8] 7 ??? (MobileSpotlightIndex + 113376) [0x1e46d3ae0] 4 ??? (MobileSpotlightIndex + 201328) [0x1e46e9270] 2 ??? (MobileSpotlightIndex + 205196) [0x1e46ea18c] 2 ??? (MobileSpotlightIndex + 358816) [0x1e470f9a0] 1 ??? (MobileSpotlightIndex + 425180) [0x1e471fcdc] 1 ??? (MobileSpotlightIndex + 289488) [0x1e46fead0] 1 ??? (libsystem_kernel.dylib + 11492) [0x1f4f0ece4] 1 1 ??? (MobileSpotlightIndex + 423980) [0x1e471f82c] 1 ??? (MobileSpotlightIndex + 289488) [0x1e46fead0] 1 ??? (libsystem_kernel.dylib + 11492) [0x1f4f0ece4] 1 ??? (MobileSpotlightIndex + 205232) [0x1e46ea1b0] 1 ??? (MobileSpotlightIndex + 493032) [0x1e47305e8] 1 ??? (MobileSpotlightIndex + 152880) [0x1e46dd530] 1 ??? (libsystem_kernel.dylib + 11492) [0x1f4f0ece4] 1 ??? (MobileSpotlightIndex + 204528) [0x1e46e9ef0] 1 ??? (MobileSpotlightIndex + 391464) [0x1e4717928] 1 ??? (MobileSpotlightIndex + 593476) [0x1e4748e44] 1 ??? (MobileSpotlightIndex + 331332) [0x1e4708e44] 1 ??? (libsystem_kernel.dylib + 11400) [0x1f4f0ec88] 1 3 ??? (MobileSpotlightIndex + 187416) [0x1e46e5c18] 3 ??? (MobileSpotlightIndex + 678752) [0x1e475db60] 2 ??? (MobileSpotlightIndex + 161108) [0x1e46df554] 1 ??? (MobileSpotlightIndex + 374144) [0x1e4713580] 1 ??? (libsystem_platform.dylib + 4712) [0x215b40268] 1 ??? (MobileSpotlightIndex + 373988) [0x1e47134e4] 1 ??? (MobileSpotlightIndex + 270184) [0x1e46f9f68] 1 ??? (MobileSpotlightIndex + 359804) [0x1e470fd7c] 1 ??? (MobileSpotlightIndex + 360616) [0x1e47100a8] 1 ??? (MobileSpotlightIndex + 712216) [0x1e4765e18] 1 ??? (MobileSpotlightIndex + 712216) [0x1e4765e18] 1 ??? (MobileSpotlightIndex + 712216) [0x1e4765e18] 1 ??? (MobileSpotlightIndex + 712216) [0x1e4765e18] 1 ??? (MobileSpotlightIndex + 712216) [0x1e4765e18] 1 ??? (MobileSpotlightIndex + 712216) [0x1e4765e18] 1 ??? (MobileSpotlightIndex + 712216) [0x1e4765e18] 1 ??? (MobileSpotlightIndex + 711732) [0x1e4765c34] 1 ??? (MobileSpotlightIndex + 242852) [0x1e46f34a4] 1 ??? (MobileSpotlightIndex + 602160) [0x1e474b030] 1 ??? (libsystem_platform.dylib + 4264) [0x215b400a8] 1 ??? (MobileSpotlightIndex + 163828) [0x1e46dfff4] 1 ??? (MobileSpotlightIndex + 2106620) [0x1e48ba4fc] 5 ??? (MobileSpotlightIndex + 85608) [0x1e46cce68] 5 ??? (MobileSpotlightIndex + 129028) [0x1e46d7804] 5 ??? (SpotlightDaemon + 91048) [0x223a713a8] 5 ??? (MobileSpotlightIndex + 1577416) [0x1e48391c8] 5 ??? (MobileSpotlightIndex + 516388) [0x1e4736124] 5 ??? (MobileSpotlightIndex + 1594152) [0x1e483d328] 5 ??? (MobileSpotlightIndex + 59516) [0x1e46c687c] 3 ??? (MobileSpotlightIndex + 105140) [0x1e46d1ab4] 3 ??? (MobileSpotlightIndex + 591036) [0x1e47484bc] 3 ??? (MobileSpotlightIndex + 22560) [0x1e46bd820] 3 ??? (MobileSpotlightIndex + 2954728) [0x1e49895e8] 3 ??? (MobileSpotlightIndex + 100360) [0x1e46d0808] 3 ??? (MobileSpotlightIndex + 34900) [0x1e46c0854] 3 ??? (MobileSpotlightIndex + 715000) [0x1e47668f8] 3 ??? (MobileSpotlightIndex + 25956) [0x1e46be564] 3 ??? (MobileSpotlightIndex + 85340) [0x1e46ccd5c] 3 ??? (MobileSpotlightIndex + 380272) [0x1e4714d70] 3 ??? (MobileSpotlightIndex + 152880) [0x1e46dd530] 3 ??? (libsystem_kernel.dylib + 11492) [0x1f4f0ece4] 1 ??? (MobileSpotlightIndex + 104992) [0x1e46d1a20] 1 ??? (MobileSpotlightIndex + 967712) [0x1e47a4420] 1 ??? (libsystem_kernel.dylib + 9816) [0x1f4f0e658] 1 ??? (MobileSpotlightIndex + 103820) [0x1e46d158c] 1 ??? (MobileSpotlightIndex + 636448) [0x1e4753620] 1 ??? (MobileSpotlightIndex + 169348) [0x1e46e1584] 1 ??? (MobileSpotlightIndex + 761684) [0x1e4771f54] 1 ??? (MobileSpotlightIndex + 368160) [0x1e4711e20] 1 ??? (MobileSpotlightIndex + 190588) [0x1e46e687c] 1 ??? (libsystem_kernel.dylib + 11400) [0x1f4f0ec88] 2 ??? (libdispatch.dylib + 27184) [0x1bdd9da30] 2 ??? (libdispatch.dylib + 29192) [0x1bdd9e208] 2 ??? (libdispatch.dylib + 49368) [0x1bdda30d8] 2 ??? (libdispatch.dylib + 46092) [0x1bdda240c] 2 ??? (libdispatch.dylib + 49368) [0x1bdda30d8] 2 ??? (libdispatch.dylib + 46388) [0x1bdda2534] 2 ??? (libdispatch.dylib + 16044) [0x1bdd9aeac] 2 ??? (libdispatch.dylib + 77764) [0x1bdda9fc4] 2 ??? (MobileSpotlightIndex + 111816) [0x1e46d34c8] 1 ??? (MobileSpotlightIndex + 113376) [0x1e46d3ae0] 1 ??? (MobileSpotlightIndex + 201328) [0x1e46e9270] 1 ??? (MobileSpotlightIndex + 205196) [0x1e46ea18c] 1 ??? (MobileSpotlightIndex + 358816) [0x1e470f9a0] 1 ??? (MobileSpotlightIndex + 423980) [0x1e471f82c] 1 ??? (MobileSpotlightIndex + 289488) [0x1e46fead0] 1 ??? (libsystem_kernel.dylib + 11492) [0x1f4f0ece4] 1 ??? (MobileSpotlightIndex + 85608) [0x1e46cce68] 1 ??? (MobileSpotlightIndex + 129028) [0x1e46d7804] 1 ??? (SpotlightDaemon + 91048) [0x223a713a8] 1 ??? (MobileSpotlightIndex + 1577416) [0x1e48391c8] 1 ??? (MobileSpotlightIndex + 516388) [0x1e4736124] 1 ??? (MobileSpotlightIndex + 1594152) [0x1e483d328] 1 ??? (MobileSpotlightIndex + 59516) [0x1e46c687c] 1 ??? (MobileSpotlightIndex + 104992) [0x1e46d1a20] 1 ??? (MobileSpotlightIndex + 967712) [0x1e47a4420] 1 ??? (libsystem_kernel.dylib + 9816) [0x1f4f0e658] 8 ??? (libsystem_pthread.dylib + 3548) [0x215bd6ddc] 8 ??? (libdispatch.dylib + 93404) [0x1bddadcdc] 8 ??? (libdispatch.dylib + 53168) [0x1bdda3fb0] 8 ??? (libdispatch.dylib + 49368) [0x1bdda30d8] 8 ??? (libdispatch.dylib + 46388) [0x1bdda2534] 8 ??? (libdispatch.dylib + 16044) [0x1bdd9aeac] 8 ??? (libdispatch.dylib + 77764) [0x1bdda9fc4] 8 ??? (MobileSpotlightIndex + 111816) [0x1e46d34c8] 8 ??? (MobileSpotlightIndex + 517292) [0x1e47364ac] 8 ??? (SpotlightDaemon + 14012) [0x223a5e6bc] 8 ??? (SpotlightDaemon + 323028) [0x223aa9dd4] 8 ??? (MobileSpotlightIndex + 146892) [0x1e46dbdcc] 5 ??? (MobileSpotlightIndex + 157052) [0x1e46de57c] 5 ??? (MobileSpotlightIndex + 256212) [0x1e46f68d4] 5 ??? (libsystem_kernel.dylib + 9816) [0x1f4f0e658] 3 ??? (MobileSpotlightIndex + 157092) [0x1e46de5a4] 3 ??? (MobileSpotlightIndex + 256212) [0x1e46f68d4] 3 ??? (libsystem_kernel.dylib + 9816) [0x1f4f0e658] Binary Images: 0x104cdc000 - ??? searchd /System/Library/PrivateFrameworks/Search.framework/searchd 0x1bdd97000 - 0x1bddddfff libdispatch.dylib /usr/lib/system/libdispatch.dylib 0x1e46b8000 - 0x1e49eafff MobileSpotlightIndex <393D4659-313E-30ED-917D-574FD499F0C7> /System/Library/PrivateFrameworks/MobileSpotlightIndex.framework/MobileSpotlightIndex 0x1f4f0c000 - 0x1f4f43ff7 libsystem_kernel.dylib <75DA6452-934E-3F80-B181-D47074378E83> /usr/lib/system/libsystem_kernel.dylib 0x215b3f000 - 0x215b45ff7 libsystem_platform.dylib /usr/lib/system/libsystem_platform.dylib 0x215bd6000 - 0x215be1ff3 libsystem_pthread.dylib <56698309-210A-3137-97D4-14E4604B1117> /usr/lib/system/libsystem_pthread.dylib 0x223a5b000 - 0x223adefff SpotlightDaemon /System/Library/PrivateFrameworks/SpotlightDaemon.framework/SpotlightDaemon