Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File Name: WireGuard Network Extension.wakeups_resource-2023-06-30-161146.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"app_name":"WireGuard Network Extension","timestamp":"2023-06-30 16:11:46.00 +0300","app_version":"4.0.1","slice_uuid":"4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8","build_version":"3","bundleID":"com.opera.OperaTouch.vpnExtension","duration_ms":"257735","share_with_app_devs":1,"is_first_party":0,"bug_type":"142","os_version":"iPhone OS 16.5.1 (20F75)","roots_installed":0,"incident_id":"A48EFF5D-9874-465C-84DA-FF7065CFDF91","name":"WireGuard Network Extension"} Date/Time: 2023-06-30 16:07:28.814 +0300 End time: 2023-06-30 16:11:46.549 +0300 OS Version: iPhone OS 16.5.1 (Build 20F75) Architecture: arm64e Report Version: 40 Incident Identifier: A48EFF5D-9874-465C-84DA-FF7065CFDF91 Share With Devs: Yes Data Source: Microstackshots Shared Cache: 897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x19ceec000, slide 0x1ceec000 Command: WireGuard Network Extension Path: /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension Identifier: com.opera.OperaTouch.vpnExtension Version: 4.0.1 (3) Resource Coalition ID: 534 Architecture: arm64 Parent: UNKNOWN [1] PID: 386 Event: wakeups Action taken: none Wakeups: 45002 wakeups over the last 258 seconds (175 wakeups per second average), exceeding limit of 150 wakeups per second over 300 seconds Wakeups limit: 45000 Limit duration: 300s Wakeups caused: 45002 Wakeups duration: 258s Duration: 257.73s Duration Sampled: 0.00s Steps: 1 Hardware model: iPad13,2 Active cpus: 6 HW page size: 16384 VM page size: 16384 Advisory levels: Battery -> 3, User -> 3, ThermalPressure -> 0, Combined -> 3 Free disk space: 12.29 GB/59.58 GB, low space threshold 150 MB Low Power Mode: Enabled Vnodes Available: 80.31% (16062/20000, 10000 allocated, 10000 soft limit) Preferred User Language: en-GB Country Code: GB Keyboards: ru_RU Russian, en_GB QWERTYBritish HW Keyboard: Yes OS Cryptex File Extents: 5616 Heaviest stack for the target process: 1 ??? (WireGuard Network Extension + 567092) [0x104b82734] 1 ??? (WireGuard Network Extension + 424408) [0x104b5f9d8] 1 ??? (WireGuard Network Extension + 423064) [0x104b5f498] 1 ??? (WireGuard Network Extension + 418012) [0x104b5e0dc] 1 ??? (WireGuard Network Extension + 372156) [0x104b52dbc] Powerstats for: WireGuard Network Extension (WireGuard Network Extension) [386] UUID: 4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8 Path: /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension Identifier: com.opera.OperaTouch.vpnExtension Version: 4.0.1 (3) Resource Coalition ID: 534 Architecture: arm64 Parent: UNKNOWN [1] UID: 501 Footprint: 5968 KB Start time: 2023-06-30 16:10:40.660 +0300 End time: 2023-06-30 16:10:40.660 +0300 Num samples: 1 (100%) Primary state: 1 samples Non-Frontmost App, Non-Suppressed, User mode, Effective Thread QoS Default, Requested Thread QoS Default, Override Thread QoS Unspecified User Activity: 0 samples Idle, 1 samples Active Power Source: 0 samples on Battery, 1 samples on AC 1 ??? (WireGuard Network Extension + 567092) [0x104b82734] 1 ??? (WireGuard Network Extension + 424408) [0x104b5f9d8] 1 ??? (WireGuard Network Extension + 423064) [0x104b5f498] 1 ??? (WireGuard Network Extension + 418012) [0x104b5e0dc] 1 ??? (WireGuard Network Extension + 372156) [0x104b52dbc] Binary Images: 0x104af8000 - ??? com.opera.OperaTouch.vpnExtension 4.0.1 (3) <4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8> /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension