Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: com.apple.DocumentManager.Service-2023-07-01-085404.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"app_name":"com.apple.DocumentManager.Service","timestamp":"2023-07-01 08:54:04.00 +0300","app_version":"1.0","slice_uuid":"d30b2439-e223-3535-b68f-0ab11ffc39ef","build_version":"280.6.2","platform":2,"bundleID":"com.apple.DocumentManagerUICore.Service","share_with_app_devs":1,"is_first_party":1,"bug_type":"309","os_version":"iPhone OS 16.5.1 (20F75)","roots_installed":0,"name":"com.apple.DocumentManager.Service","incident_id":"9B0F926C-4269-49E5-9301-541A8B42576A"} { "uptime" : 2900, "procRole" : "Background", "version" : 2, "userID" : 501, "deployVersion" : 210, "modelCode" : "iPad13,2", "coalitionID" : 604, "osVersion" : { "isEmbedded" : true, "train" : "iPhone OS 16.5.1", "releaseType" : "User", "build" : "20F75" }, "captureTime" : "2023-07-01 08:54:02.9171 +0300", "incident" : "9B0F926C-4269-49E5-9301-541A8B42576A", "pid" : 439, "cpuType" : "ARM-64", "roots_installed" : 0, "bug_type" : "309", "procLaunch" : "2023-07-01 08:53:37.0436 +0300", "procStartAbsTime" : 68984005538, "procExitAbsTime" : 69604932645, "procName" : "com.apple.DocumentManager.Service", "procPath" : "\/System\/Library\/PrivateFrameworks\/DocumentManagerUICore.framework\/PlugIns\/com.apple.DocumentManager.Service.appex\/com.apple.DocumentManager.Service", "bundleInfo" : {"CFBundleShortVersionString":"1.0","CFBundleVersion":"280.6.2","CFBundleIdentifier":"com.apple.DocumentManagerUICore.Service"}, "parentProc" : "launchd", "parentPid" : 1, "coalitionName" : "com.apple.DocumentManagerUICore.Service", "crashReporterKey" : "1c54b5f60308a75ebe170bf86077a8b8780e7ae9", "wasUnlockedSinceBoot" : 1, "isLocked" : 0, "throttleTimeout" : 10, "codeSigningID" : "com.apple.DocumentManagerUICore.Service", "codeSigningTeamID" : "", "codeSigningFlags" : 570434305, "codeSigningValidationCategory" : 1, "codeSigningTrustLevel" : 0, "basebandVersion" : "4.02.01", "exception" : {"codes":"0x0000000000000001, 0x0000000101157f90","rawCodes":[1,4313153424],"type":"EXC_BREAKPOINT","signal":"SIGTRAP"}, "termination" : {"flags":0,"code":5,"namespace":"SIGNAL","indicator":"Trace\/BPT trap: 5","byProc":"exc handler","byPid":439}, "os_fault" : {"process":"com.apple.DocumentManager.Service"}, "faultingThread" : 0, "threads" : [{"triggered":true,"id":37085,"threadState":{"x":[{"value":0},{"value":10756378704},{"value":16},{"value":1},{"value":8451},{"value":36296768618496},{"value":2},{"value":0},{"value":8587461344,"symbolLocation":224,"symbol":"_main_thread"},{"value":56975482960},{"value":0},{"value":18446462598732840959},{"value":56975482944},{"value":10753049360},{"value":163767317742975697,"symbolLocation":163767309154910209,"symbol":"OBJC_CLASS_$_EXExtensionContextImplementation"},{"value":8588065488,"symbolLocation":0,"symbol":"OBJC_CLASS_$_EXExtensionContextImplementation"},{"value":12939398848},{"value":4314293952},{"value":0},{"value":56961835424},{"value":8611099928,"symbolLocation":0,"symbol":"value witness table for Builtin.UnknownObject"},{"value":10771019904},{"value":10798779008},{"value":6157771232},{"value":0},{"value":9581308624,"symbolLocation":0,"symbol":"type metadata for UTType"},{"value":10798777216},{"value":4611686029200577856},{"value":0}],"flavor":"ARM_THREAD_STATE64","lr":{"value":4313152064},"cpsr":{"value":1073745920},"fp":{"value":6157771568},"sp":{"value":6157771232},"esr":{"value":4060086273,"description":"(Breakpoint) brk 1"},"pc":{"value":4313153424,"matchesCrashFrame":1},"far":{"value":4968759296}},"queue":"com.apple.main-thread","frames":[{"imageOffset":4046736,"imageIndex":0},{"imageOffset":1058520,"imageIndex":0},{"imageOffset":8992,"symbol":"_dispatch_call_block_and_release","symbolLocation":32,"imageIndex":4},{"imageOffset":16044,"symbol":"_dispatch_client_callout","symbolLocation":20,"imageIndex":4},{"imageOffset":75428,"symbol":"_dispatch_main_queue_drain","symbolLocation":928,"imageIndex":4},{"imageOffset":74484,"symbol":"_dispatch_main_queue_callback_4CF","symbolLocation":44,"imageIndex":4},{"imageOffset":625704,"symbol":"__CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__","symbolLocation":16,"imageIndex":5},{"imageOffset":501088,"symbol":"__CFRunLoopRun","symbolLocation":1992,"imageIndex":5},{"imageOffset":521196,"symbol":"CFRunLoopRunSpecific","symbolLocation":612,"imageIndex":5},{"imageOffset":4956,"symbol":"GSEventRunModal","symbolLocation":164,"imageIndex":6},{"imageOffset":3790568,"symbol":"-[UIApplication _run]","symbolLocation":888,"imageIndex":7},{"imageOffset":3789644,"symbol":"UIApplicationMain","symbolLocation":340,"imageIndex":7},{"imageOffset":108096,"symbol":"_xpc_objc_main","symbolLocation":440,"imageIndex":8},{"imageOffset":117028,"symbol":"xpc_main","symbolLocation":156,"imageIndex":8},{"imageOffset":563504,"symbol":"-[NSXPCListener resume]","symbolLocation":312,"imageIndex":9},{"imageOffset":106128,"imageIndex":10},{"imageOffset":26152,"imageIndex":10},{"imageOffset":22844,"imageIndex":10},{"imageOffset":140608,"symbol":"EXExtensionMain","symbolLocation":252,"imageIndex":11},{"imageOffset":843264,"symbol":"NSExtensionMain","symbolLocation":204,"imageIndex":9},{"imageOffset":89580,"symbol":"start","symbolLocation":2220,"imageIndex":12}]},{"id":37097,"frames":[{"imageOffset":2932,"symbol":"start_wqthread","symbolLocation":0,"imageIndex":13}]},{"id":37098,"frames":[{"imageOffset":2932,"symbol":"start_wqthread","symbolLocation":0,"imageIndex":13}]},{"id":37099,"frames":[{"imageOffset":2932,"symbol":"start_wqthread","symbolLocation":0,"imageIndex":13}]},{"id":37100,"name":"com.apple.uikit.eventfetch-thread","frames":[{"imageOffset":3204,"symbol":"mach_msg2_trap","symbolLocation":8,"imageIndex":14},{"imageOffset":80724,"symbol":"mach_msg2_internal","symbolLocation":80,"imageIndex":14},{"imageOffset":81452,"symbol":"mach_msg_overwrite","symbolLocation":540,"imageIndex":14},{"imageOffset":4552,"symbol":"mach_msg","symbolLocation":24,"imageIndex":14},{"imageOffset":495652,"symbol":"__CFRunLoopServiceMachPort","symbolLocation":160,"imageIndex":5},{"imageOffset":500304,"symbol":"__CFRunLoopRun","symbolLocation":1208,"imageIndex":5},{"imageOffset":521196,"symbol":"CFRunLoopRunSpecific","symbolLocation":612,"imageIndex":5},{"imageOffset":270292,"symbol":"-[NSRunLoop(NSRunLoop) runMode:beforeDate:]","symbolLocation":212,"imageIndex":9},{"imageOffset":270012,"symbol":"-[NSRunLoop(NSRunLoop) runUntilDate:]","symbolLocation":64,"imageIndex":9},{"imageOffset":5047292,"symbol":"-[UIEventFetcher threadMain]","symbolLocation":416,"imageIndex":7},{"imageOffset":374084,"symbol":"__NSThread__start__","symbolLocation":716,"imageIndex":9},{"imageOffset":5816,"symbol":"_pthread_start","symbolLocation":148,"imageIndex":13},{"imageOffset":2952,"symbol":"thread_start","symbolLocation":8,"imageIndex":13}]},{"id":37112,"queue":"com.apple.uikit.backgroundTaskAssertionQueue","frames":[{"imageOffset":3204,"symbol":"mach_msg2_trap","symbolLocation":8,"imageIndex":14},{"imageOffset":80724,"symbol":"mach_msg2_internal","symbolLocation":80,"imageIndex":14},{"imageOffset":81452,"symbol":"mach_msg_overwrite","symbolLocation":540,"imageIndex":14},{"imageOffset":4552,"symbol":"mach_msg","symbolLocation":24,"imageIndex":14},{"imageOffset":127500,"symbol":"_dispatch_mach_send_and_wait_for_reply","symbolLocation":548,"imageIndex":4},{"imageOffset":128412,"symbol":"dispatch_mach_send_with_result_and_wait_for_reply","symbolLocation":60,"imageIndex":4},{"imageOffset":66072,"symbol":"xpc_connection_send_message_with_reply_sync","symbolLocation":240,"imageIndex":8},{"imageOffset":20676,"symbol":"-[RBSXPCMessage sendToConnection:error:]","symbolLocation":328,"imageIndex":15},{"imageOffset":19972,"symbol":"-[RBSXPCMessage invokeOnConnection:withReturnCollectionClass:entryClass:error:]","symbolLocation":92,"imageIndex":15},{"imageOffset":58536,"symbol":"-[RBSXPCMessage invokeOnConnection:withReturnClass:error:]","symbolLocation":32,"imageIndex":15},{"imageOffset":36532,"symbol":"-[RBSConnection acquireAssertion:error:]","symbolLocation":296,"imageIndex":15},{"imageOffset":35688,"symbol":"-[RBSAssertion acquireWithError:]","symbolLocation":176,"imageIndex":15},{"imageOffset":10484,"symbol":"-[BKSAssertion acquire]","symbolLocation":156,"imageIndex":16},{"imageOffset":10200,"symbol":"-[BKSProcessAssertion acquire]","symbolLocation":564,"imageIndex":16},{"imageOffset":14054388,"symbol":"___addBackgroundTaskInternal_block_invoke","symbolLocation":900,"imageIndex":7},{"imageOffset":16044,"symbol":"_dispatch_client_callout","symbolLocation":20,"imageIndex":4},{"imageOffset":78888,"symbol":"_dispatch_lane_barrier_sync_invoke_and_complete","symbolLocation":56,"imageIndex":4},{"imageOffset":14052644,"symbol":"_addBackgroundTaskInternal","symbolLocation":252,"imageIndex":7},{"imageOffset":2935092,"symbol":"_addBackgroundTask","symbolLocation":160,"imageIndex":7},{"imageOffset":4416432,"symbol":"-[UIApplication __beginBackgroundTaskWithExpirationHandler:]","symbolLocation":420,"imageIndex":7},{"imageOffset":5458616,"symbol":"-[_UIViewServiceViewControllerOperator _prepareForDisconnectionUnconditionallyThen:]","symbolLocation":88,"imageIndex":7},{"imageOffset":5014668,"symbol":"__28-[_UIAsyncInvocation invoke]_block_invoke","symbolLocation":112,"imageIndex":7},{"imageOffset":8992,"symbol":"_dispatch_call_block_and_release","symbolLocation":32,"imageIndex":4},{"imageOffset":16044,"symbol":"_dispatch_client_callout","symbolLocation":20,"imageIndex":4},{"imageOffset":88676,"symbol":"_dispatch_root_queue_drain","symbolLocation":684,"imageIndex":4},{"imageOffset":90456,"symbol":"_dispatch_worker_thread2","symbolLocation":164,"imageIndex":4},{"imageOffset":3488,"symbol":"_pthread_wqthread","symbolLocation":228,"imageIndex":13},{"imageOffset":2940,"symbol":"start_wqthread","symbolLocation":8,"imageIndex":13}]},{"id":37114,"queue":"com.apple.root.default-qos","frames":[{"imageOffset":3072,"symbol":"semaphore_wait_trap","symbolLocation":8,"imageIndex":14},{"imageOffset":17480,"symbol":"_dispatch_sema4_wait","symbolLocation":28,"imageIndex":4},{"imageOffset":19196,"symbol":"_dispatch_semaphore_wait_slow","symbolLocation":132,"imageIndex":4},{"imageOffset":5039552,"symbol":"__69+[_UIAsyncInvocationObserver whenInvocationsCompleteForObservers:do:]_block_invoke_2","symbolLocation":60,"imageIndex":7},{"imageOffset":8992,"symbol":"_dispatch_call_block_and_release","symbolLocation":32,"imageIndex":4},{"imageOffset":16044,"symbol":"_dispatch_client_callout","symbolLocation":20,"imageIndex":4},{"imageOffset":88676,"symbol":"_dispatch_root_queue_drain","symbolLocation":684,"imageIndex":4},{"imageOffset":90456,"symbol":"_dispatch_worker_thread2","symbolLocation":164,"imageIndex":4},{"imageOffset":3488,"symbol":"_pthread_wqthread","symbolLocation":228,"imageIndex":13},{"imageOffset":2940,"symbol":"start_wqthread","symbolLocation":8,"imageIndex":13}]}], "usedImages" : [ { "source" : "P", "arch" : "arm64e", "base" : 4309106688, "size" : 5177344, "uuid" : "d30b2439-e223-3535-b68f-0ab11ffc39ef", "path" : "\/System\/Library\/PrivateFrameworks\/DocumentManagerUICore.framework\/PlugIns\/com.apple.DocumentManager.Service.appex\/com.apple.DocumentManager.Service", "name" : "com.apple.DocumentManager.Service" }, { "source" : "P", "arch" : "arm64e", "base" : 4316610560, "size" : 49152, "uuid" : "695a8449-aae8-38b6-851c-ced0b1176f03", "path" : "\/private\/preboot\/Cryptexes\/OS\/usr\/lib\/libobjc-trampolines.dylib", "name" : "libobjc-trampolines.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 4330864640, "size" : 32768, "uuid" : "0fef244f-9af9-3253-9ca5-d6d6906e29bf", "path" : "\/System\/Library\/Frameworks\/FileProvider.framework\/OverrideBundles\/FileProviderOverride.bundle\/FileProviderOverride", "name" : "FileProviderOverride" }, { "source" : "P", "arch" : "arm64e", "base" : 4331192320, "size" : 32768, "uuid" : "5cf284da-93d0-3f55-b1a3-ac1778f40911", "path" : "\/System\/Library\/Frameworks\/FileProvider.framework\/OverrideBundles\/CloudDocsFileProvider.bundle\/CloudDocsFileProvider", "name" : "CloudDocsFileProvider" }, { "source" : "P", "arch" : "arm64e", "base" : 7258648576, "size" : 290816, "uuid" : "bb347f0e-f21c-3607-82e6-c8d750fdbf8c", "path" : "\/usr\/lib\/system\/libdispatch.dylib", "name" : "libdispatch.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 7136194560, "size" : 4096000, "uuid" : "4230c122-42e8-383b-beec-ee7b61f8bb61", "path" : "\/System\/Library\/Frameworks\/CoreFoundation.framework\/CoreFoundation", "name" : "CoreFoundation" }, { "source" : "P", "arch" : "arm64e", "base" : 8121933824, "size" : 36864, "uuid" : "e830ad84-d612-3b6b-8de7-ea61a786d132", "path" : "\/System\/Library\/PrivateFrameworks\/GraphicsServices.framework\/GraphicsServices", "name" : "GraphicsServices" }, { "source" : "P", "arch" : "arm64e", "base" : 7170203648, "size" : 25317376, "uuid" : "b3834960-244b-34e4-9ea0-ca4bb44ef0f3", "path" : "\/System\/Library\/PrivateFrameworks\/UIKitCore.framework\/UIKitCore", "name" : "UIKitCore" }, { "source" : "P", "arch" : "arm64e", "base" : 8733478912, "size" : 270336, "uuid" : "e999664a-4868-3766-8787-f501fde376e3", "path" : "\/usr\/lib\/system\/libxpc.dylib", "name" : "libxpc.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 7038930944, "size" : 9297920, "uuid" : "6e76dc96-11af-3b2e-b71e-215f9cc6e822", "path" : "\/System\/Library\/Frameworks\/Foundation.framework\/Foundation", "name" : "Foundation" }, { "source" : "P", "arch" : "arm64e", "base" : 7781916672, "size" : 225280, "uuid" : "c413ade8-6a93-31ee-bec2-ad6d65af900e", "path" : "\/System\/Library\/PrivateFrameworks\/PlugInKit.framework\/PlugInKit", "name" : "PlugInKit" }, { "source" : "P", "arch" : "arm64e", "base" : 7360753664, "size" : 409600, "uuid" : "136103c5-8263-31b5-9186-bc5091308291", "path" : "\/System\/Library\/Frameworks\/ExtensionFoundation.framework\/ExtensionFoundation", "name" : "ExtensionFoundation" }, { "source" : "P", "arch" : "arm64e", "base" : 7661735936, "size" : 547364, "uuid" : "6987370a-c385-3135-a27f-6731706bcbd8", "path" : "\/usr\/lib\/dyld", "name" : "dyld" }, { "source" : "P", "arch" : "arm64e", "base" : 8733204480, "size" : 49140, "uuid" : "56698309-210a-3137-97d4-14e4604b1117", "path" : "\/usr\/lib\/system\/libsystem_pthread.dylib", "name" : "libsystem_pthread.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 8182923264, "size" : 229368, "uuid" : "75da6452-934e-3f80-b181-d47074378e83", "path" : "\/usr\/lib\/system\/libsystem_kernel.dylib", "name" : "libsystem_kernel.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 7361163264, "size" : 356352, "uuid" : "6d1a9c50-e934-3eb5-9019-3b1c64225670", "path" : "\/System\/Library\/PrivateFrameworks\/RunningBoardServices.framework\/RunningBoardServices", "name" : "RunningBoardServices" }, { "source" : "P", "arch" : "arm64e", "base" : 7799762944, "size" : 57344, "uuid" : "40c6806a-157f-3c71-b5d4-1374c705c578", "path" : "\/System\/Library\/PrivateFrameworks\/AssertionServices.framework\/AssertionServices", "name" : "AssertionServices" } ], "sharedCache" : { "base" : 7019151360, "size" : 2963603456, "uuid" : "897cc0d1-bd62-3ba4-920e-435e58cd1292" }, "vmSummary" : "ReadOnly portion of Libraries: Total=1.2G resident=0K(0%) swapped_out_or_unallocated=1.2G(100%)\nWritable regions: Total=637.9M written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=637.9M(100%)\n\n VIRTUAL REGION \nREGION TYPE SIZE COUNT (non-coalesced) \n=========== ======= ======= \nActivity Tracing 256K 1 \nCG raster data 1216K 9 \nColorSync 112K 7 \nCoreAnimation 5312K 249 \nCoreUI image data 208K 1 \nFoundation 16K 1 \nKernel Alloc Once 32K 1 \nMALLOC 623.8M 99 \nMALLOC guard page 128K 8 \nSQLite page cache 256K 2 \nSTACK GUARD 112K 7 \nStack 4272K 7 \nVM_ALLOCATE 4432K 45 \n__AUTH 3796K 417 \n__AUTH_CONST 38.2M 925 \n__CTF 824 1 \n__DATA 16.8M 921 \n__DATA_CONST 50.3M 933 \n__DATA_DIRTY 9567K 846 \n__FONT_DATA 2352 1 \n__INFO_FILTER 8 1 \n__LINKEDIT 312.3M 5 \n__OBJC_RO 79.3M 1 \n__OBJC_RW 2432K 1 \n__TEXT 913.8M 944 \ndyld private memory 272K 1 \nmapped file 224.5M 31 \nshared memory 48K 3 \n=========== ======= ======= \nTOTAL 2.2G 5468 \n", "legacyInfo" : { "threadTriggered" : { "queue" : "com.apple.main-thread" } }, "logWritingSignature" : "033883b95e7c455ccef6d6806a142cb2d80b876d", "trialInfo" : { "rollouts" : [ { "rolloutId" : "62c74108bcb0435c2153f963", "factorPackIds" : { "SIRI_TEXT_TO_SPEECH" : "64810e3fd0f2cd4ea9c0d6b9" }, "deploymentId" : 240000226 }, { "rolloutId" : "62c73fd17cce0d1b0bcb8a02", "factorPackIds" : { }, "deploymentId" : 240000119 } ], "experiments" : [ ] } }