Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: searchd.diskwrites_resource-2023-07-01-081156.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"duration_ms":"774663","share_with_app_devs":1,"roots_installed":0,"bug_type":"145","os_version":"iPhone OS 16.5.1 (20F75)","slice_uuid":"D9E6759F-024B-3606-B371-2B28C15CBB76","is_first_party":0,"incident_id":"EB36A701-DEEA-4A59-BA99-6357F0AE73FC","timestamp":"2023-07-01 08:11:56.00 +0300","app_name":"searchd","name":"searchd"} Date/Time: 2023-07-01 07:59:01.521 +0300 End time: 2023-07-01 08:11:56.184 +0300 OS Version: iPhone OS 16.5.1 (Build 20F75) Architecture: arm64e Report Version: 40 Incident Identifier: EB36A701-DEEA-4A59-BA99-6357F0AE73FC Share With Devs: Yes Data Source: Microstackshots Shared Cache: 897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x1a25fc000, slide 0x225fc000 Command: searchd Path: /System/Library/PrivateFrameworks/Search.framework/searchd Resource Coalition ID: 231 Architecture: arm64e Parent: launchd [1] PID: 147 Event: disk writes Action taken: none Writes: 1073.79 MB of file backed memory dirtied over 775 seconds (1386.13 KB per second average), exceeding limit of 12.43 KB per second over 86400 seconds Writes limit: 1073.74 MB Limit duration: 86400s Writes caused: 1073.79 MB Writes duration: 775s Duration: 774.66s Duration Sampled: 773.01s Steps: 122 (10.49 MB/step) Hardware model: iPad13,2 Active cpus: 6 HW page size: 16384 VM page size: 16384 Advisory levels: Battery -> 3, User -> 3, ThermalPressure -> 0, Combined -> 3 Free disk space: 13.24 GB/59.58 GB, low space threshold 150 MB Low Power Mode: Enabled Vnodes Available: 82.16% (16432/20000, 10000 allocated, 10000 soft limit) Preferred User Language: en-GB Country Code: GB Keyboards: en_GB QWERTYBritish, ru_RU Russian HW Keyboard: Yes OS Cryptex File Extents: 5616 Heaviest stack for the target process: 101 ??? (libsystem_pthread.dylib + 2940) [0x2088a2b7c] 74 ??? (libsystem_pthread.dylib + 3488) [0x2088a2da0] 74 ??? (libdispatch.dylib + 90456) [0x1b0a79158] 74 ??? (libdispatch.dylib + 88388) [0x1b0a78944] 73 ??? (libdispatch.dylib + 27032) [0x1b0a69998] 73 ??? (libdispatch.dylib + 29192) [0x1b0a6a208] 73 ??? (libdispatch.dylib + 49368) [0x1b0a6f0d8] 73 ??? (libdispatch.dylib + 46092) [0x1b0a6e40c] 73 ??? (libdispatch.dylib + 49368) [0x1b0a6f0d8] 73 ??? (libdispatch.dylib + 46388) [0x1b0a6e534] 73 ??? (libdispatch.dylib + 16044) [0x1b0a66eac] 73 ??? (libdispatch.dylib + 77764) [0x1b0a75fc4] 73 ??? (MobileSpotlightIndex + 111816) [0x1d739f4c8] 44 ??? (MobileSpotlightIndex + 85608) [0x1d7398e68] 44 ??? (MobileSpotlightIndex + 129028) [0x1d73a3804] 44 ??? (SpotlightDaemon + 91048) [0x21673d3a8] 44 ??? (MobileSpotlightIndex + 1577416) [0x1d75051c8] 44 ??? (MobileSpotlightIndex + 516388) [0x1d7402124] 44 ??? (MobileSpotlightIndex + 1594152) [0x1d7509328] 44 ??? (MobileSpotlightIndex + 59516) [0x1d739287c] 28 ??? (MobileSpotlightIndex + 105140) [0x1d739dab4] 28 ??? (MobileSpotlightIndex + 591036) [0x1d74144bc] 28 ??? (MobileSpotlightIndex + 22560) [0x1d7389820] 28 ??? (MobileSpotlightIndex + 2954728) [0x1d76555e8] 28 ??? (MobileSpotlightIndex + 100360) [0x1d739c808] 28 ??? (MobileSpotlightIndex + 34900) [0x1d738c854] 28 ??? (MobileSpotlightIndex + 715000) [0x1d74328f8] 27 ??? (MobileSpotlightIndex + 25956) [0x1d738a564] 27 ??? (MobileSpotlightIndex + 85340) [0x1d7398d5c] 27 ??? (MobileSpotlightIndex + 380272) [0x1d73e0d70] 27 ??? (MobileSpotlightIndex + 152880) [0x1d73a9530] 27 ??? (libsystem_kernel.dylib + 11492) [0x1e7bdace4] Powerstats for: searchd [147] UUID: D9E6759F-024B-3606-B371-2B28C15CBB76 Path: /System/Library/PrivateFrameworks/Search.framework/searchd Resource Coalition ID: 231 Architecture: arm64e Parent: launchd [1] UID: 501 Sudden Term: Tracked (allows idle exit) Footprint: 9168 KB -> 9552 KB (+384 KB) (max 27.55 MB ) Pageins: 9703 pages Start time: 2023-07-01 07:59:29.227 +0300 End time: 2023-07-01 08:11:55.803 +0300 Num samples: 101 (83%) Primary state: 101 samples Non-Frontmost App, Non-Suppressed, Kernel mode, Effective Thread QoS Background, Requested Thread QoS Background, Override Thread QoS Unspecified User Activity: 0 samples Idle, 101 samples Active Power Source: 3 samples on Battery, 98 samples on AC 101 ??? (libsystem_pthread.dylib + 2940) [0x2088a2b7c] 74 ??? (libsystem_pthread.dylib + 3488) [0x2088a2da0] 74 ??? (libdispatch.dylib + 90456) [0x1b0a79158] 74 ??? (libdispatch.dylib + 88388) [0x1b0a78944] 73 ??? (libdispatch.dylib + 27032) [0x1b0a69998] 73 ??? (libdispatch.dylib + 29192) [0x1b0a6a208] 73 ??? (libdispatch.dylib + 49368) [0x1b0a6f0d8] 73 ??? (libdispatch.dylib + 46092) [0x1b0a6e40c] 73 ??? (libdispatch.dylib + 49368) [0x1b0a6f0d8] 73 ??? (libdispatch.dylib + 46388) [0x1b0a6e534] 73 ??? (libdispatch.dylib + 16044) [0x1b0a66eac] 73 ??? (libdispatch.dylib + 77764) [0x1b0a75fc4] 73 ??? (MobileSpotlightIndex + 111816) [0x1d739f4c8] 44 ??? (MobileSpotlightIndex + 85608) [0x1d7398e68] 44 ??? (MobileSpotlightIndex + 129028) [0x1d73a3804] 44 ??? (SpotlightDaemon + 91048) [0x21673d3a8] 44 ??? (MobileSpotlightIndex + 1577416) [0x1d75051c8] 44 ??? (MobileSpotlightIndex + 516388) [0x1d7402124] 44 ??? (MobileSpotlightIndex + 1594152) [0x1d7509328] 44 ??? (MobileSpotlightIndex + 59516) [0x1d739287c] 28 ??? (MobileSpotlightIndex + 105140) [0x1d739dab4] 28 ??? (MobileSpotlightIndex + 591036) [0x1d74144bc] 28 ??? (MobileSpotlightIndex + 22560) [0x1d7389820] 28 ??? (MobileSpotlightIndex + 2954728) [0x1d76555e8] 28 ??? (MobileSpotlightIndex + 100360) [0x1d739c808] 28 ??? (MobileSpotlightIndex + 34900) [0x1d738c854] 28 ??? (MobileSpotlightIndex + 715000) [0x1d74328f8] 27 ??? (MobileSpotlightIndex + 25956) [0x1d738a564] 27 ??? (MobileSpotlightIndex + 85340) [0x1d7398d5c] 27 ??? (MobileSpotlightIndex + 380272) [0x1d73e0d70] 27 ??? (MobileSpotlightIndex + 152880) [0x1d73a9530] 27 ??? (libsystem_kernel.dylib + 11492) [0x1e7bdace4] 1 ??? (MobileSpotlightIndex + 24852) [0x1d738a114] 1 ??? (MobileSpotlightIndex + 85340) [0x1d7398d5c] 1 ??? (MobileSpotlightIndex + 380272) [0x1d73e0d70] 1 ??? (MobileSpotlightIndex + 152880) [0x1d73a9530] 1 ??? (libsystem_kernel.dylib + 11492) [0x1e7bdace4] 12 ??? (MobileSpotlightIndex + 104992) [0x1d739da20] 12 ??? (MobileSpotlightIndex + 967712) [0x1d7470420] 12 ??? (libsystem_kernel.dylib + 9816) [0x1e7bda658] 3 ??? (MobileSpotlightIndex + 105360) [0x1d739db90] 3 ??? (MobileSpotlightIndex + 17732) [0x1d7388544] 3 ??? (MobileSpotlightIndex + 44124) [0x1d738ec5c] 3 ??? (MobileSpotlightIndex + 25956) [0x1d738a564] 3 ??? (MobileSpotlightIndex + 85340) [0x1d7398d5c] 3 ??? (MobileSpotlightIndex + 380272) [0x1d73e0d70] 3 ??? (MobileSpotlightIndex + 152880) [0x1d73a9530] 3 ??? (libsystem_kernel.dylib + 11492) [0x1e7bdace4] 1 ??? (MobileSpotlightIndex + 103820) [0x1d739d58c] 1 ??? (MobileSpotlightIndex + 636448) [0x1d741f620] 1 ??? (MobileSpotlightIndex + 169572) [0x1d73ad664] 1 ??? (MobileSpotlightIndex + 152880) [0x1d73a9530] 1 ??? (libsystem_kernel.dylib + 11492) [0x1e7bdace4] 20 ??? (MobileSpotlightIndex + 113376) [0x1d739fae0] 11 ??? (MobileSpotlightIndex + 187416) [0x1d73b1c18] 11 ??? (MobileSpotlightIndex + 678752) [0x1d7429b60] 7 ??? (MobileSpotlightIndex + 161108) [0x1d73ab554] 5 ??? (MobileSpotlightIndex + 373988) [0x1d73df4e4] 5 ??? (MobileSpotlightIndex + 270184) [0x1d73c5f68] 4 ??? (MobileSpotlightIndex + 360616) [0x1d73dc0a8] 4 ??? (MobileSpotlightIndex + 712216) [0x1d7431e18] 3 ??? (MobileSpotlightIndex + 712216) [0x1d7431e18] 3 ??? (MobileSpotlightIndex + 711732) [0x1d7431c34] 2 ??? (libsystem_platform.dylib + 4696) [0x20880c258] 1 ??? (libsystem_platform.dylib + 4712) [0x20880c268] 1 ??? (MobileSpotlightIndex + 711732) [0x1d7431c34] 1 ??? (libsystem_platform.dylib + 4696) [0x20880c258] 1 ??? (MobileSpotlightIndex + 359804) [0x1d73dbd7c] 1 ??? (MobileSpotlightIndex + 360616) [0x1d73dc0a8] 1 ??? (MobileSpotlightIndex + 711732) [0x1d7431c34] 1 ??? (libsystem_platform.dylib + 4712) [0x20880c268] 2 ??? (MobileSpotlightIndex + 374144) [0x1d73df580] 1 ??? (libsystem_platform.dylib + 4784) [0x20880c2b0] 1 ??? (MobileSpotlightIndex + 242592) [0x1d73bf3a0] 3 ??? (MobileSpotlightIndex + 163828) [0x1d73abff4] 3 ??? (MobileSpotlightIndex + 2106620) [0x1d75864fc] 1 ??? (MobileSpotlightIndex + 164372) [0x1d73ac214] 1 ??? (MobileSpotlightIndex + 1930964) [0x1d755b6d4] 9 ??? (MobileSpotlightIndex + 201328) [0x1d73b5270] 5 ??? (MobileSpotlightIndex + 205196) [0x1d73b618c] 5 ??? (MobileSpotlightIndex + 358816) [0x1d73db9a0] 4 ??? (MobileSpotlightIndex + 423980) [0x1d73eb82c] 4 ??? (MobileSpotlightIndex + 289488) [0x1d73caad0] 4 ??? (libsystem_kernel.dylib + 11492) [0x1e7bdace4] 1 ??? (MobileSpotlightIndex + 425388) [0x1d73ebdac] 1 ??? (libsystem_kernel.dylib + 11492) [0x1e7bdace4] 3 ??? (MobileSpotlightIndex + 204528) [0x1d73b5ef0] 1 ??? (MobileSpotlightIndex + 391652) [0x1d73e39e4] 1 ??? (MobileSpotlightIndex + 371856) [0x1d73dec90] 1 ??? (MobileSpotlightIndex + 748904) [0x1d743ad68] 1 ??? (MobileSpotlightIndex + 432600) [0x1d73ed9d8] 1 ??? (libsystem_kernel.dylib + 11400) [0x1e7bdac88] 1 ??? (MobileSpotlightIndex + 391464) [0x1d73e3928] 1 ??? (MobileSpotlightIndex + 593476) [0x1d7414e44] 1 ??? (MobileSpotlightIndex + 331332) [0x1d73d4e44] 1 ??? (libsystem_kernel.dylib + 11400) [0x1e7bdac88] 1 ??? (MobileSpotlightIndex + 390836) [0x1d73e36b4] 1 ??? (MobileSpotlightIndex + 512612) [0x1d7401264] 1 ??? (MobileSpotlightIndex + 161108) [0x1d73ab554] 1 ??? (MobileSpotlightIndex + 373988) [0x1d73df4e4] 1 ??? (MobileSpotlightIndex + 270184) [0x1d73c5f68] 1 ??? (MobileSpotlightIndex + 359804) [0x1d73dbd7c] 1 ??? (MobileSpotlightIndex + 360324) [0x1d73dbf84] 1 ??? (MobileSpotlightIndex + 240576) [0x1d73bebc0] 1 ??? (MobileSpotlightIndex + 602160) [0x1d7417030] 1 ??? (MobileSpotlightIndex + 756132) [0x1d743c9a4] 1 ??? (MobileSpotlightIndex + 574188) [0x1d74102ec] 1 ??? (MobileSpotlightIndex + 2135192) [0x1d758d498] 1 ??? (MobileSpotlightIndex + 826024) [0x1d744daa8] 1 ??? (MobileSpotlightIndex + 205232) [0x1d73b61b0] 1 ??? (MobileSpotlightIndex + 493032) [0x1d73fc5e8] 1 ??? (MobileSpotlightIndex + 152880) [0x1d73a9530] 1 ??? (libsystem_kernel.dylib + 11492) [0x1e7bdace4] 9 ??? (MobileSpotlightIndex + 694876) [0x1d742da5c] 4 ??? (MobileSpotlightIndex + 767176) [0x1d743f4c8] 4 ??? (MobileSpotlightIndex + 1990792) [0x1d756a088] 2 ??? (MobileSpotlightIndex + 2084560) [0x1d7580ed0] 1 ??? (MobileSpotlightIndex + 2809036) [0x1d7631ccc] 1 ??? (MobileSpotlightIndex + 2803244) [0x1d763062c] 1 ??? (MobileSpotlightIndex + 2813692) [0x1d7632efc] 1 ??? (libsystem_kernel.dylib + 11492) [0x1e7bdace4] 1 ??? (MobileSpotlightIndex + 2084396) [0x1d7580e2c] 1 ??? (MobileSpotlightIndex + 2806032) [0x1d7631110] 1 ??? (libsystem_kernel.dylib + 11492) [0x1e7bdace4] 1 ??? (MobileSpotlightIndex + 2083812) [0x1d7580be4] 1 ??? (MobileSpotlightIndex + 832740) [0x1d744f4e4] 1 ??? (MobileSpotlightIndex + 757880) [0x1d743d078] 1 ??? (MobileSpotlightIndex + 621276) [0x1d741badc] 1 ??? (MobileSpotlightIndex + 579644) [0x1d741183c] 1 ??? (MobileSpotlightIndex + 2095068) [0x1d75837dc] 3 ??? (MobileSpotlightIndex + 809964) [0x1d7449bec] 3 ??? (MobileSpotlightIndex + 1570964) [0x1d7503894] 3 ??? (MobileSpotlightIndex + 825296) [0x1d744d7d0] 2 ??? (MobileSpotlightIndex + 590180) [0x1d7414164] 2 ??? (MobileSpotlightIndex + 123256) [0x1d73a2178] 2 ??? (MobileSpotlightIndex + 17732) [0x1d7388544] 2 ??? (MobileSpotlightIndex + 44124) [0x1d738ec5c] 2 ??? (MobileSpotlightIndex + 25956) [0x1d738a564] 2 ??? (MobileSpotlightIndex + 85340) [0x1d7398d5c] 2 ??? (MobileSpotlightIndex + 380272) [0x1d73e0d70] 2 ??? (MobileSpotlightIndex + 152880) [0x1d73a9530] 2 ??? (libsystem_kernel.dylib + 11492) [0x1e7bdace4] 1 ??? (MobileSpotlightIndex + 588308) [0x1d7413a14] 1 ??? (MobileSpotlightIndex + 837340) [0x1d74506dc] 1 ??? (MobileSpotlightIndex + 718688) [0x1d7433760] 1 ??? (MobileSpotlightIndex + 314152) [0x1d73d0b28] 1 ??? (MobileSpotlightIndex + 577648) [0x1d7411070] 1 ??? (MobileSpotlightIndex + 2487296) [0x1d75e3400] 1 ??? (MobileSpotlightIndex + 374144) [0x1d73df580] 1 ??? (MobileSpotlightIndex + 243024) [0x1d73bf550] 1 ??? (MobileSpotlightIndex + 2010624) [0x1d756ee00] 2 ??? (MobileSpotlightIndex + 767824) [0x1d743f750] 2 ??? (MobileSpotlightIndex + 942852) [0x1d746a304] 2 ??? (MobileSpotlightIndex + 825296) [0x1d744d7d0] 2 ??? (MobileSpotlightIndex + 588308) [0x1d7413a14] 2 ??? (MobileSpotlightIndex + 837340) [0x1d74506dc] 2 ??? (MobileSpotlightIndex + 718688) [0x1d7433760] 1 ??? (MobileSpotlightIndex + 311704) [0x1d73d0198] 1 ??? (MobileSpotlightIndex + 489136) [0x1d73fb6b0] 1 ??? (MobileSpotlightIndex + 296288) [0x1d73cc560] 1 ??? (MobileSpotlightIndex + 577648) [0x1d7411070] 1 ??? (MobileSpotlightIndex + 2483584) [0x1d75e2580] 1 ??? (libsystem_kernel.dylib + 11492) [0x1e7bdace4] 1 ??? (libdispatch.dylib + 27184) [0x1b0a69a30] 1 ??? (libdispatch.dylib + 29192) [0x1b0a6a208] 1 ??? (libdispatch.dylib + 49368) [0x1b0a6f0d8] 1 ??? (libdispatch.dylib + 46092) [0x1b0a6e40c] 1 ??? (libdispatch.dylib + 49368) [0x1b0a6f0d8] 1 ??? (libdispatch.dylib + 46388) [0x1b0a6e534] 1 ??? (libdispatch.dylib + 16044) [0x1b0a66eac] 1 ??? (libdispatch.dylib + 77764) [0x1b0a75fc4] 1 ??? (MobileSpotlightIndex + 111816) [0x1d739f4c8] 1 ??? (MobileSpotlightIndex + 113376) [0x1d739fae0] 1 ??? (MobileSpotlightIndex + 201328) [0x1d73b5270] 1 ??? (MobileSpotlightIndex + 204528) [0x1d73b5ef0] 1 ??? (MobileSpotlightIndex + 390836) [0x1d73e36b4] 1 ??? (MobileSpotlightIndex + 512612) [0x1d7401264] 1 ??? (MobileSpotlightIndex + 161108) [0x1d73ab554] 1 ??? (MobileSpotlightIndex + 374144) [0x1d73df580] 1 ??? (libsystem_platform.dylib + 4712) [0x20880c268] 27 ??? (libsystem_pthread.dylib + 3548) [0x2088a2ddc] 27 ??? (libdispatch.dylib + 93404) [0x1b0a79cdc] 27 ??? (libdispatch.dylib + 53168) [0x1b0a6ffb0] 27 ??? (libdispatch.dylib + 49368) [0x1b0a6f0d8] 27 ??? (libdispatch.dylib + 46388) [0x1b0a6e534] 27 ??? (libdispatch.dylib + 16044) [0x1b0a66eac] 25 ??? (libdispatch.dylib + 77764) [0x1b0a75fc4] 25 ??? (MobileSpotlightIndex + 111816) [0x1d739f4c8] 25 ??? (MobileSpotlightIndex + 517292) [0x1d74024ac] 25 ??? (SpotlightDaemon + 14012) [0x21672a6bc] 25 ??? (SpotlightDaemon + 323028) [0x216775dd4] 25 ??? (MobileSpotlightIndex + 146892) [0x1d73a7dcc] 16 ??? (MobileSpotlightIndex + 157052) [0x1d73aa57c] 16 ??? (MobileSpotlightIndex + 256212) [0x1d73c28d4] 16 ??? (libsystem_kernel.dylib + 9816) [0x1e7bda658] 9 ??? (MobileSpotlightIndex + 157092) [0x1d73aa5a4] 9 ??? (MobileSpotlightIndex + 256212) [0x1d73c28d4] 9 ??? (libsystem_kernel.dylib + 9816) [0x1e7bda658] 2 ??? (MobileSpotlightIndex + 111816) [0x1d739f4c8] 2 ??? (MobileSpotlightIndex + 517292) [0x1d74024ac] 2 ??? (SpotlightDaemon + 14012) [0x21672a6bc] 2 ??? (SpotlightDaemon + 218768) [0x21675c690] 2 ??? (MobileSpotlightIndex + 146892) [0x1d73a7dcc] 2 ??? (MobileSpotlightIndex + 157052) [0x1d73aa57c] 2 ??? (MobileSpotlightIndex + 256212) [0x1d73c28d4] 2 ??? (libsystem_kernel.dylib + 9816) [0x1e7bda658] Binary Images: 0x1007b4000 - ??? searchd /System/Library/PrivateFrameworks/Search.framework/searchd 0x1b0a63000 - 0x1b0aa9fff libdispatch.dylib /usr/lib/system/libdispatch.dylib 0x1d7384000 - 0x1d76b6fff MobileSpotlightIndex <393D4659-313E-30ED-917D-574FD499F0C7> /System/Library/PrivateFrameworks/MobileSpotlightIndex.framework/MobileSpotlightIndex 0x1e7bd8000 - 0x1e7c0fff7 libsystem_kernel.dylib <75DA6452-934E-3F80-B181-D47074378E83> /usr/lib/system/libsystem_kernel.dylib 0x20880b000 - 0x208811ff7 libsystem_platform.dylib /usr/lib/system/libsystem_platform.dylib 0x2088a2000 - 0x2088adff3 libsystem_pthread.dylib <56698309-210A-3137-97D4-14E4604B1117> /usr/lib/system/libsystem_pthread.dylib 0x216727000 - 0x2167aafff SpotlightDaemon /System/Library/PrivateFrameworks/SpotlightDaemon.framework/SpotlightDaemon