Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: Kodex-2023-07-02-084316.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"app_name":"Kodex","timestamp":"2023-07-02 08:43:16.00 +0300","app_version":"1.4.1","slice_uuid":"2e68498e-e3b4-3654-9ec2-f659e8d2a8ed","adam_id":"1038574481","build_version":"111","platform":2,"bundleID":"space.Kodex.App","share_with_app_devs":1,"is_first_party":0,"bug_type":"309","os_version":"iPhone OS 16.5.1 (20F75)","roots_installed":0,"name":"Kodex","incident_id":"6CBC4726-7976-4B2B-90D4-807625C167D7"} { "uptime" : 3000, "procRole" : "Background", "version" : 2, "userID" : 501, "deployVersion" : 210, "modelCode" : "iPad13,2", "coalitionID" : 462, "osVersion" : { "isEmbedded" : true, "train" : "iPhone OS 16.5.1", "releaseType" : "User", "build" : "20F75" }, "captureTime" : "2023-07-02 08:43:15.4643 +0300", "incident" : "6CBC4726-7976-4B2B-90D4-807625C167D7", "pid" : 443, "cpuType" : "ARM-64", "roots_installed" : 0, "bug_type" : "309", "procLaunch" : "2023-07-02 08:42:47.1887 +0300", "procStartAbsTime" : 73273803271, "procExitAbsTime" : 73952229369, "procName" : "Kodex", "procPath" : "\/private\/var\/containers\/Bundle\/Application\/245738C7-EBD8-4FBA-A20C-51DBD7542A61\/Kodex.app\/Kodex", "bundleInfo" : {"CFBundleShortVersionString":"1.4.1","CFBundleVersion":"111","CFBundleIdentifier":"space.Kodex.App","DTAppStoreToolsBuild":"14B44"}, "storeInfo" : {"storeCohortMetadata":"10|date=1687415400000&sf=143444&cmp=OperaBrowserOperaCom&cpr=118728196&cid=1411869974&pgtp=Search&pgid=28a703ee-ee3d-4440-8688-402408f4a6bd&prpg=Genre_179183&ctxt=Search&issrch=1&imptyp=card&kind=iosSoftware&lngid=2","itemID":"1038574481","deviceIdentifierForVendor":"C2A60A29-E3A5-4702-BBED-530ADF811DC4","softwareVersionExternalIdentifier":"835958067","thirdParty":true,"applicationVariant":"1:iPad13,2:16"}, "parentProc" : "launchd", "parentPid" : 1, "coalitionName" : "space.Kodex.App", "crashReporterKey" : "1c54b5f60308a75ebe170bf86077a8b8780e7ae9", "wasUnlockedSinceBoot" : 1, "isLocked" : 0, "codeSigningID" : "space.Kodex.App", "codeSigningTeamID" : "R85D3K8ATT", "codeSigningFlags" : 570450689, "codeSigningValidationCategory" : 4, "codeSigningTrustLevel" : 0, "basebandVersion" : "4.02.01", "exception" : {"codes":"0x0000000000000000, 0x0000000000000000","rawCodes":[0,0],"type":"EXC_CRASH","signal":"SIGKILL"}, "termination" : {"code":2343432205,"flags":6,"namespace":"FRONTBOARD","reasons":[":443] failed to terminate gracefully after 5.0s","ProcessVisibility: Background","ProcessState: Running","WatchdogEvent: process-exit","WatchdogVisibility: Background","WatchdogCPUStatistics: (","\"Elapsed total CPU time (seconds): 8.940 (user 7.340, system 1.600), 29% CPU\",","\"Elapsed application CPU time (seconds): 5.227, 17% CPU\"",") reportType:CrashLog maxTerminationResistance:Interactive>"]}, "faultingThread" : 0, "threads" : [{"triggered":true,"id":43347,"threadState":{"x":[{"value":10779480288},{"value":6995262027,"objc-selector":"refCon"},{"value":22},{"value":0},{"value":0},{"value":0},{"value":0},{"value":0},{"value":5199966160},{"value":1},{"value":0},{"value":0},{"value":1503330},{"value":4307571952},{"value":15024008365434528203},{"value":8526553544,"symbolLocation":0,"symbol":"OBJC_CLASS_$__CTMutableGlyphStorage"},{"value":8526553544,"symbolLocation":0,"symbol":"OBJC_CLASS_$__CTMutableGlyphStorage"},{"value":7100371596,"symbolLocation":0,"symbol":"-[_CTMutableGlyphStorage refCon]"},{"value":0},{"value":11716},{"value":0},{"value":4869},{"value":1},{"value":10779480288},{"value":5199435448},{"value":22},{"value":4869},{"value":24694},{"value":10779480288}],"flavor":"ARM_THREAD_STATE64","lr":{"value":7246382636},"cpsr":{"value":2147487744},"fp":{"value":6162911040},"sp":{"value":6162910208},"esr":{"value":2449473607,"description":"(Data Abort) byte write Translation fault"},"pc":{"value":7246382796,"matchesCrashFrame":1},"far":{"value":12268896480}},"queue":"com.apple.main-thread","frames":[{"imageOffset":161484,"symbol":"-[NSATSGlyphStorage _resolvePositionalStakeGlyphsForLineFragment:lineFragmentRect:minPosition:maxPosition:maxLineFragmentWidth:breakHint:]","symbolLocation":900,"imageIndex":10},{"imageOffset":161324,"symbol":"-[NSATSGlyphStorage _resolvePositionalStakeGlyphsForLineFragment:lineFragmentRect:minPosition:maxPosition:maxLineFragmentWidth:breakHint:]","symbolLocation":740,"imageIndex":10},{"imageOffset":49388,"symbol":"-[NSATSLineFragment layoutForStartingGlyphAtIndex:characterIndex:minPosition:maxPosition:lineFragmentRect:]","symbolLocation":2176,"imageIndex":10},{"imageOffset":166572,"symbol":"-[NSATSTypesetter _layoutLineFragmentStartingWithGlyphAtIndex:characterIndex:atPoint:renderingContext:]","symbolLocation":1688,"imageIndex":10},{"imageOffset":164344,"symbol":"-[NSATSTypesetter layoutParagraphAtPoint:]","symbolLocation":152,"imageIndex":10},{"imageOffset":104772,"symbol":"-[NSTypesetter _layoutGlyphsInLayoutManager:startingAtGlyphIndex:maxNumberOfLineFragments:maxCharacterIndex:nextGlyphIndex:nextCharacterIndex:]","symbolLocation":1848,"imageIndex":10},{"imageOffset":102880,"symbol":"-[NSTypesetter layoutCharactersInRange:forLayoutManager:maximumNumberOfLineFragments:]","symbolLocation":208,"imageIndex":10},{"imageOffset":78404,"symbol":"-[NSATSTypesetter layoutCharactersInRange:forLayoutManager:maximumNumberOfLineFragments:]","symbolLocation":480,"imageIndex":10},{"imageOffset":73556,"symbol":"-[NSLayoutManager(NSPrivate) _fillLayoutHoleForCharacterRange:desiredNumberOfLines:isSoft:]","symbolLocation":1096,"imageIndex":10},{"imageOffset":72440,"symbol":"-[NSLayoutManager(NSPrivate) _fillLayoutHoleAtIndex:desiredNumberOfLines:]","symbolLocation":184,"imageIndex":10},{"imageOffset":157428,"symbol":"-[NSLayoutManager(NSPrivate) _markSelfAsDirtyForBackgroundLayout:]","symbolLocation":344,"imageIndex":10},{"imageOffset":151492,"symbol":"-[NSLayoutManager(NSPrivate) _invalidateLayoutForExtendedCharacterRange:isSoft:invalidateUsage:]","symbolLocation":2056,"imageIndex":10},{"imageOffset":274800,"symbol":"-[NSLayoutManager textStorage:edited:range:changeInLength:invalidatedRange:]","symbolLocation":172,"imageIndex":10},{"imageOffset":25228,"imageIndex":0},{"imageOffset":274548,"symbol":"-[NSTextStorage _notifyEdited:range:changeInLength:invalidatedRange:]","symbolLocation":128,"imageIndex":10},{"imageOffset":25972,"imageIndex":2},{"imageOffset":82960,"symbol":"-[NSTextStorage endEditing]","symbolLocation":88,"imageIndex":10},{"imageOffset":209980,"symbol":"-[NSTextStorage coordinateEditing:]","symbolLocation":60,"imageIndex":10},{"imageOffset":1114844,"symbol":"-[UITextView setAttributedText:]","symbolLocation":1248,"imageIndex":11},{"imageOffset":46372,"imageIndex":3},{"imageOffset":1113548,"symbol":"-[UITextView setText:]","symbolLocation":108,"imageIndex":11},{"imageOffset":46636,"imageIndex":3},{"imageOffset":562328,"imageIndex":0},{"imageOffset":770448,"imageIndex":0},{"imageOffset":770480,"imageIndex":0},{"imageOffset":199764,"symbol":"+[UIView(Animation) performWithoutAnimation:]","symbolLocation":76,"imageIndex":11},{"imageOffset":561768,"imageIndex":0},{"imageOffset":573576,"imageIndex":0},{"imageOffset":267136,"imageIndex":0},{"imageOffset":530600,"imageIndex":0},{"imageOffset":4350404,"symbol":"-[UIAlertController _invokeHandlersForAction:]","symbolLocation":88,"imageIndex":11},{"imageOffset":5988924,"symbol":"__103-[UIAlertController _dismissAnimated:triggeringAction:triggeredByPopoverDimmingView:dismissCompletion:]_block_invoke_2","symbolLocation":36,"imageIndex":11},{"imageOffset":2591240,"symbol":"-[UIPresentationController transitionDidFinish:]","symbolLocation":1124,"imageIndex":11},{"imageOffset":7753996,"symbol":"__56-[UIPresentationController runTransitionForCurrentState]_block_invoke.110","symbolLocation":336,"imageIndex":11},{"imageOffset":2827424,"symbol":"-[_UIViewControllerTransitionContext completeTransition:]","symbolLocation":116,"imageIndex":11},{"imageOffset":17172528,"symbol":"__UIVIEW_IS_EXECUTING_ANIMATION_COMPLETION_BLOCK__","symbolLocation":36,"imageIndex":11},{"imageOffset":846040,"symbol":"-[UIViewAnimationBlockDelegate _didEndBlockAnimation:finished:context:]","symbolLocation":636,"imageIndex":11},{"imageOffset":841780,"symbol":"-[UIViewAnimationState sendDelegateAnimationDidStop:finished:]","symbolLocation":436,"imageIndex":11},{"imageOffset":839504,"symbol":"-[UIViewAnimationState animationDidStop:finished:]","symbolLocation":196,"imageIndex":11},{"imageOffset":839780,"symbol":"-[UIViewAnimationState animationDidStop:finished:]","symbolLocation":472,"imageIndex":11},{"imageOffset":79396,"symbol":"CA::Layer::run_animation_callbacks(void*)","symbolLocation":232,"imageIndex":12},{"imageOffset":16044,"symbol":"_dispatch_client_callout","symbolLocation":20,"imageIndex":13},{"imageOffset":75428,"symbol":"_dispatch_main_queue_drain","symbolLocation":928,"imageIndex":13},{"imageOffset":74484,"symbol":"_dispatch_main_queue_callback_4CF","symbolLocation":44,"imageIndex":13},{"imageOffset":625704,"symbol":"__CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__","symbolLocation":16,"imageIndex":14},{"imageOffset":501088,"symbol":"__CFRunLoopRun","symbolLocation":1992,"imageIndex":14},{"imageOffset":521196,"symbol":"CFRunLoopRunSpecific","symbolLocation":612,"imageIndex":14},{"imageOffset":4956,"symbol":"GSEventRunModal","symbolLocation":164,"imageIndex":15},{"imageOffset":3790568,"symbol":"-[UIApplication _run]","symbolLocation":888,"imageIndex":11},{"imageOffset":3789644,"symbol":"UIApplicationMain","symbolLocation":340,"imageIndex":11},{"imageOffset":49336,"imageIndex":0},{"imageOffset":89580,"symbol":"start","symbolLocation":2220,"imageIndex":16}]},{"id":43358,"frames":[{"imageOffset":2932,"symbol":"start_wqthread","symbolLocation":0,"imageIndex":17}]},{"id":43363,"name":"com.apple.uikit.eventfetch-thread","frames":[{"imageOffset":3204,"symbol":"mach_msg2_trap","symbolLocation":8,"imageIndex":18},{"imageOffset":80724,"symbol":"mach_msg2_internal","symbolLocation":80,"imageIndex":18},{"imageOffset":81452,"symbol":"mach_msg_overwrite","symbolLocation":540,"imageIndex":18},{"imageOffset":4552,"symbol":"mach_msg","symbolLocation":24,"imageIndex":18},{"imageOffset":495652,"symbol":"__CFRunLoopServiceMachPort","symbolLocation":160,"imageIndex":14},{"imageOffset":500304,"symbol":"__CFRunLoopRun","symbolLocation":1208,"imageIndex":14},{"imageOffset":521196,"symbol":"CFRunLoopRunSpecific","symbolLocation":612,"imageIndex":14},{"imageOffset":270292,"symbol":"-[NSRunLoop(NSRunLoop) runMode:beforeDate:]","symbolLocation":212,"imageIndex":19},{"imageOffset":270012,"symbol":"-[NSRunLoop(NSRunLoop) runUntilDate:]","symbolLocation":64,"imageIndex":19},{"imageOffset":5047292,"symbol":"-[UIEventFetcher threadMain]","symbolLocation":416,"imageIndex":11},{"imageOffset":374084,"symbol":"__NSThread__start__","symbolLocation":716,"imageIndex":19},{"imageOffset":5816,"symbol":"_pthread_start","symbolLocation":148,"imageIndex":17},{"imageOffset":2952,"symbol":"thread_start","symbolLocation":8,"imageIndex":17}]},{"id":43465,"frames":[{"imageOffset":2932,"symbol":"start_wqthread","symbolLocation":0,"imageIndex":17}]}], "usedImages" : [ { "source" : "P", "arch" : "arm64", "base" : 4303962112, "size" : 1081344, "uuid" : "2e68498e-e3b4-3654-9ec2-f659e8d2a8ed", "path" : "\/private\/var\/containers\/Bundle\/Application\/245738C7-EBD8-4FBA-A20C-51DBD7542A61\/Kodex.app\/Kodex", "name" : "Kodex" }, { "source" : "P", "arch" : "arm64", "base" : 4305829888, "size" : 32768, "uuid" : "1f62251f-f9f4-3e52-91e2-25338d1f19ff", "path" : "\/private\/var\/containers\/Bundle\/Application\/245738C7-EBD8-4FBA-A20C-51DBD7542A61\/Kodex.app\/Frameworks\/BPPointerTools.framework\/BPPointerTools", "name" : "BPPointerTools" }, { "source" : "P", "arch" : "arm64", "base" : 4305911808, "size" : 131072, "uuid" : "322630d8-9b07-3113-840e-42614bab4a4f", "path" : "\/private\/var\/containers\/Bundle\/Application\/245738C7-EBD8-4FBA-A20C-51DBD7542A61\/Kodex.app\/Frameworks\/Highlightr.framework\/Highlightr", "name" : "Highlightr" }, { "source" : "P", "arch" : "arm64", "base" : 4306124800, "size" : 65536, "uuid" : "3e26ce84-9f51-3aef-ab31-84e99ff54dcc", "path" : "\/private\/var\/containers\/Bundle\/Application\/245738C7-EBD8-4FBA-A20C-51DBD7542A61\/Kodex.app\/Frameworks\/ICTextView.framework\/ICTextView", "name" : "ICTextView" }, { "source" : "P", "arch" : "arm64", "base" : 4306239488, "size" : 147456, "uuid" : "95596102-b2c6-3398-bc4a-b0f0bcd1045e", "path" : "\/private\/var\/containers\/Bundle\/Application\/245738C7-EBD8-4FBA-A20C-51DBD7542A61\/Kodex.app\/Frameworks\/KeyCommandKit.framework\/KeyCommandKit", "name" : "KeyCommandKit" }, { "source" : "P", "arch" : "arm64", "base" : 4306485248, "size" : 163840, "uuid" : "5ac41cd6-b496-3906-87a0-233bdbb73e08", "path" : "\/private\/var\/containers\/Bundle\/Application\/245738C7-EBD8-4FBA-A20C-51DBD7542A61\/Kodex.app\/Frameworks\/TabView.framework\/TabView", "name" : "TabView" }, { "source" : "P", "arch" : "arm64", "base" : 4306747392, "size" : 49152, "uuid" : "e2f161fa-7892-3673-9bc5-d24f832d7020", "path" : "\/private\/var\/containers\/Bundle\/Application\/245738C7-EBD8-4FBA-A20C-51DBD7542A61\/Kodex.app\/Frameworks\/VTAcknowledgementsViewController.framework\/VTAcknowledgementsViewController", "name" : "VTAcknowledgementsViewController" }, { "source" : "P", "arch" : "arm64e", "base" : 4309090304, "size" : 49152, "uuid" : "695a8449-aae8-38b6-851c-ced0b1176f03", "path" : "\/private\/preboot\/Cryptexes\/OS\/usr\/lib\/libobjc-trampolines.dylib", "name" : "libobjc-trampolines.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 4426973184, "size" : 32768, "uuid" : "0fef244f-9af9-3253-9ca5-d6d6906e29bf", "path" : "\/System\/Library\/Frameworks\/FileProvider.framework\/OverrideBundles\/FileProviderOverride.bundle\/FileProviderOverride", "name" : "FileProviderOverride" }, { "source" : "P", "arch" : "arm64e", "base" : 4427071488, "size" : 32768, "uuid" : "5cf284da-93d0-3f55-b1a3-ac1778f40911", "path" : "\/System\/Library\/Frameworks\/FileProvider.framework\/OverrideBundles\/CloudDocsFileProvider.bundle\/CloudDocsFileProvider", "name" : "CloudDocsFileProvider" }, { "source" : "P", "arch" : "arm64e", "base" : 7246221312, "size" : 1282048, "uuid" : "4b8fe6a3-5927-310f-9159-05f78cf096c6", "path" : "\/System\/Library\/PrivateFrameworks\/UIFoundation.framework\/UIFoundation", "name" : "UIFoundation" }, { "source" : "P", "arch" : "arm64e", "base" : 7108435968, "size" : 25317376, "uuid" : "b3834960-244b-34e4-9ea0-ca4bb44ef0f3", "path" : "\/System\/Library\/PrivateFrameworks\/UIKitCore.framework\/UIKitCore", "name" : "UIKitCore" }, { "source" : "P", "arch" : "arm64e", "base" : 7096594432, "size" : 3645440, "uuid" : "dd5e562e-69cc-3f21-bfb8-770b08f82fd9", "path" : "\/System\/Library\/Frameworks\/QuartzCore.framework\/QuartzCore", "name" : "QuartzCore" }, { "source" : "P", "arch" : "arm64e", "base" : 7196880896, "size" : 290816, "uuid" : "bb347f0e-f21c-3607-82e6-c8d750fdbf8c", "path" : "\/usr\/lib\/system\/libdispatch.dylib", "name" : "libdispatch.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 7074426880, "size" : 4096000, "uuid" : "4230c122-42e8-383b-beec-ee7b61f8bb61", "path" : "\/System\/Library\/Frameworks\/CoreFoundation.framework\/CoreFoundation", "name" : "CoreFoundation" }, { "source" : "P", "arch" : "arm64e", "base" : 8060166144, "size" : 36864, "uuid" : "e830ad84-d612-3b6b-8de7-ea61a786d132", "path" : "\/System\/Library\/PrivateFrameworks\/GraphicsServices.framework\/GraphicsServices", "name" : "GraphicsServices" }, { "source" : "P", "arch" : "arm64e", "base" : 7599968256, "size" : 547364, "uuid" : "6987370a-c385-3135-a27f-6731706bcbd8", "path" : "\/usr\/lib\/dyld", "name" : "dyld" }, { "source" : "P", "arch" : "arm64e", "base" : 8671436800, "size" : 49140, "uuid" : "56698309-210a-3137-97d4-14e4604b1117", "path" : "\/usr\/lib\/system\/libsystem_pthread.dylib", "name" : "libsystem_pthread.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 8121155584, "size" : 229368, "uuid" : "75da6452-934e-3f80-b181-d47074378e83", "path" : "\/usr\/lib\/system\/libsystem_kernel.dylib", "name" : "libsystem_kernel.dylib" }, { "source" : "P", "arch" : "arm64e", "base" : 6977163264, "size" : 9297920, "uuid" : "6e76dc96-11af-3b2e-b71e-215f9cc6e822", "path" : "\/System\/Library\/Frameworks\/Foundation.framework\/Foundation", "name" : "Foundation" } ], "sharedCache" : { "base" : 6957383680, "size" : 2963603456, "uuid" : "897cc0d1-bd62-3ba4-920e-435e58cd1292" }, "vmSummary" : "ReadOnly portion of Libraries: Total=1.0G resident=0K(0%) swapped_out_or_unallocated=1.0G(100%)\nWritable regions: Total=2.9G written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=2.9G(100%)\n\n VIRTUAL REGION \nREGION TYPE SIZE COUNT (non-coalesced) \n=========== ======= ======= \nActivity Tracing 256K 1 \nCG raster data 1056K 33 \nColorSync 64K 4 \nCoreAnimation 8128K 41 \nFoundation 16K 1 \nKernel Alloc Once 32K 1 \nMALLOC 2.7G 774 \nMALLOC guard page 128K 8 \nSTACK GUARD 64K 4 \nStack 2640K 4 \nVM_ALLOCATE 176K 3 \nWebKit Malloc 192.1M 6 \n__AUTH 2390K 249 \n__AUTH_CONST 29.2M 670 \n__CTF 824 1 \n__DATA 11.1M 673 \n__DATA_CONST 34.9M 677 \n__DATA_DIRTY 7735K 634 \n__FONT_DATA 2352 1 \n__INFO_FILTER 8 1 \n__LINKEDIT 312.5M 11 \n__OBJC_RO 79.3M 1 \n__OBJC_RW 2432K 1 \n__TEXT 709.2M 696 \ndyld private memory 272K 2 \nmapped file 560.8M 168 \nshared memory 48K 3 \n=========== ======= ======= \nTOTAL 4.6G 4668 \n", "legacyInfo" : { "threadTriggered" : { "queue" : "com.apple.main-thread" } }, "logWritingSignature" : "d86f04e39b41cfa4c584781c19529a9c13cd71ef", "trialInfo" : { "rollouts" : [ { "rolloutId" : "62c74108bcb0435c2153f963", "factorPackIds" : { "SIRI_TEXT_TO_SPEECH" : "64810e3fd0f2cd4ea9c0d6b9" }, "deploymentId" : 240000226 }, { "rolloutId" : "62c73fd17cce0d1b0bcb8a02", "factorPackIds" : { }, "deploymentId" : 240000119 } ], "experiments" : [ ] } }