Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/

Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1.


File Name: 	WireGuard Network Extension.wakeups_resource-2023-06-30-162526.ips
Downloaded from:  Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data.


{"app_name":"WireGuard Network Extension","timestamp":"2023-06-30 16:25:26.00 +0300","app_version":"4.0.1","slice_uuid":"4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8","build_version":"3","bundleID":"com.opera.OperaTouch.vpnExtension","duration_ms":"284023","share_with_app_devs":1,"is_first_party":0,"bug_type":"142","os_version":"iPhone OS 16.5.1 (20F75)","roots_installed":0,"incident_id":"4C53FAEA-DD52-4BB3-ACD5-311193B428AA","name":"WireGuard Network Extension"}
Date/Time:        2023-06-30 16:20:42.027 +0300
End time:         2023-06-30 16:25:26.050 +0300
OS Version:       iPhone OS 16.5.1 (Build 20F75)
Architecture:     arm64e
Report Version:   40
Incident Identifier: 4C53FAEA-DD52-4BB3-ACD5-311193B428AA
Share With Devs:  Yes

Data Source:      Microstackshots
Shared Cache:     897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x19ceec000, slide 0x1ceec000

Command:          WireGuard Network Extension
Path:             /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension
Identifier:       com.opera.OperaTouch.vpnExtension
Version:          4.0.1 (3)
Resource Coalition ID: 571
Architecture:     arm64
Parent:           UNKNOWN [1]
PID:              426

Event:            wakeups
Action taken:     none
Wakeups:          45002 wakeups over the last 284 seconds (158 wakeups per second average), exceeding limit of 150 wakeups per second over 300 seconds
Wakeups limit:    45000
Limit duration:   300s
Wakeups caused:   45002
Wakeups duration: 284s
Duration:         284.02s
Duration Sampled: 4.05s
Steps:            2

Hardware model:   iPad13,2
Active cpus:      6
HW page size:     16384
VM page size:     16384

Advisory levels:  Battery -> 3, User -> 3, ThermalPressure -> 0, Combined -> 3
Free disk space:  12.84 GB/59.58 GB, low space threshold 150 MB
Low Power Mode:   Enabled
Vnodes Available: 72.29% (14458/20000, 10000 allocated, 10000 soft limit)

Preferred User Language: en-GB
Country Code:     GB
Keyboards:        en_GB QWERTYBritish, ru_RU Russian
HW Keyboard:      Yes
OS Cryptex File Extents: 5616

Heaviest stack for the target process:
  1  ??? (WireGuard Network Extension + 1724458200) [0x16b88e4d8]
  1  ??? (WireGuard Network Extension + 510764) [0x104c78b2c]
  1  ??? (WireGuard Network Extension + 576664) [0x104c88c98]
  1  ??? (libsystem_kernel.dylib + 9660) [0x1e24ca5bc]


Powerstats for:   WireGuard Network Extension (WireGuard Network Extension) [426]
UUID:             4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8
Path:             /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension
Identifier:       com.opera.OperaTouch.vpnExtension
Version:          4.0.1 (3)
Resource Coalition ID: 571
Architecture:     arm64
Parent:           UNKNOWN [1]
UID:              501
Footprint:        5744 KB
Start time:       2023-06-30 16:23:21.059 +0300
End time:         2023-06-30 16:23:25.110 +0300
Num samples:      2 (100%)
Primary state:    2 samples Non-Frontmost App, Non-Suppressed, Kernel mode, Effective Thread QoS Default, Requested Thread QoS Default, Override Thread QoS Unspecified
User Activity:    0 samples Idle, 2 samples Active
Power Source:     0 samples on Battery, 2 samples on AC
  1  ??? (WireGuard Network Extension + 1724458200) [0x16b88e4d8]
    1  ??? (WireGuard Network Extension + 510764) [0x104c78b2c]
      1  ??? (WireGuard Network Extension + 576664) [0x104c88c98]
        1  ??? (libsystem_kernel.dylib + 9660) [0x1e24ca5bc]
  1  ??? (WireGuard Network Extension + 1721591000) [0x16b5d24d8]
    1  ??? (WireGuard Network Extension + 510764) [0x104c78b2c]
      1  ??? (WireGuard Network Extension + 576664) [0x104c88c98]
        1  ??? (libsystem_kernel.dylib + 9660) [0x1e24ca5bc]

  Binary Images:
           0x104bfc000 -                ???  com.opera.OperaTouch.vpnExtension 4.0.1 (3) <4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8>  /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension
           0x1e24c8000 -        0x1e24ffff7  libsystem_kernel.dylib                      <75DA6452-934E-3F80-B181-D47074378E83>  /usr/lib/system/libsystem_kernel.dylib