Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: searchd.diskwrites_resource-2023-07-01-165311.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"duration_ms":"516250","share_with_app_devs":1,"roots_installed":0,"bug_type":"145","os_version":"iPhone OS 16.5.1 (20F75)","slice_uuid":"D9E6759F-024B-3606-B371-2B28C15CBB76","is_first_party":0,"incident_id":"BAF23961-45AD-446D-BDCC-745BC36EB36B","timestamp":"2023-07-01 16:53:11.00 +0300","app_name":"searchd","name":"searchd"} Date/Time: 2023-07-01 16:44:34.986 +0300 End time: 2023-07-01 16:53:11.235 +0300 OS Version: iPhone OS 16.5.1 (Build 20F75) Architecture: arm64e Report Version: 40 Incident Identifier: BAF23961-45AD-446D-BDCC-745BC36EB36B Share With Devs: Yes Data Source: Microstackshots Shared Cache: 897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x1bae04000, slide 0x3ae04000 Command: searchd Path: /System/Library/PrivateFrameworks/Search.framework/searchd Resource Coalition ID: 215 Architecture: arm64e Parent: launchd [1] PID: 138 Event: disk writes Action taken: none Writes: 1073.98 MB of file backed memory dirtied over 516 seconds (2080.35 KB per second average), exceeding limit of 12.43 KB per second over 86400 seconds Writes limit: 1073.74 MB Limit duration: 86400s Writes caused: 1073.98 MB Writes duration: 516s Duration: 516.25s Duration Sampled: 470.54s Steps: 118 (10.49 MB/step) Hardware model: iPad13,2 Active cpus: 6 HW page size: 16384 VM page size: 16384 Advisory levels: Battery -> 2, User -> 3, ThermalPressure -> 0, Combined -> 2 Free disk space: 13.59 GB/59.58 GB, low space threshold 150 MB Low Power Mode: Enabled Vnodes Available: 81.28% (16256/20000, 10000 allocated, 10000 soft limit) Preferred User Language: en-GB, ru-GB Country Code: GB Keyboards: en_GB QWERTYBritish, ru_RU Russian HW Keyboard: Yes OS Cryptex File Extents: 5616 Heaviest stack for the target process: 100 ??? (libsystem_pthread.dylib + 2940) [0x2210aab7c] 59 ??? (libsystem_pthread.dylib + 3488) [0x2210aada0] 59 ??? (libdispatch.dylib + 90456) [0x1c9281158] 59 ??? (libdispatch.dylib + 88388) [0x1c9280944] 57 ??? (libdispatch.dylib + 27032) [0x1c9271998] 57 ??? (libdispatch.dylib + 29192) [0x1c9272208] 57 ??? (libdispatch.dylib + 49368) [0x1c92770d8] 57 ??? (libdispatch.dylib + 46092) [0x1c927640c] 57 ??? (libdispatch.dylib + 49368) [0x1c92770d8] 57 ??? (libdispatch.dylib + 46388) [0x1c9276534] 57 ??? (libdispatch.dylib + 16044) [0x1c926eeac] 57 ??? (libdispatch.dylib + 77764) [0x1c927dfc4] 57 ??? (MobileSpotlightIndex + 111816) [0x1efba74c8] 36 ??? (MobileSpotlightIndex + 85608) [0x1efba0e68] 36 ??? (MobileSpotlightIndex + 129028) [0x1efbab804] 36 ??? (SpotlightDaemon + 91048) [0x22ef453a8] 36 ??? (MobileSpotlightIndex + 1577416) [0x1efd0d1c8] 36 ??? (MobileSpotlightIndex + 516388) [0x1efc0a124] 36 ??? (MobileSpotlightIndex + 1594152) [0x1efd11328] 36 ??? (MobileSpotlightIndex + 59516) [0x1efb9a87c] 18 ??? (MobileSpotlightIndex + 105140) [0x1efba5ab4] 18 ??? (MobileSpotlightIndex + 591036) [0x1efc1c4bc] 18 ??? (MobileSpotlightIndex + 22560) [0x1efb91820] 18 ??? (MobileSpotlightIndex + 2954728) [0x1efe5d5e8] 18 ??? (MobileSpotlightIndex + 100360) [0x1efba4808] 18 ??? (MobileSpotlightIndex + 34900) [0x1efb94854] 18 ??? (MobileSpotlightIndex + 715000) [0x1efc3a8f8] 17 ??? (MobileSpotlightIndex + 25956) [0x1efb92564] 17 ??? (MobileSpotlightIndex + 85340) [0x1efba0d5c] 17 ??? (MobileSpotlightIndex + 380272) [0x1efbe8d70] 17 ??? (MobileSpotlightIndex + 152880) [0x1efbb1530] 17 ??? (libsystem_kernel.dylib + 11492) [0x2003e2ce4] Powerstats for: searchd [138] UUID: D9E6759F-024B-3606-B371-2B28C15CBB76 Path: /System/Library/PrivateFrameworks/Search.framework/searchd Resource Coalition ID: 215 Architecture: arm64e Parent: launchd [1] UID: 501 Sudden Term: Tracked (allows idle exit) Footprint: 8624 KB -> 12.17 MB (+3840 KB) (max 28.66 MB ) Pageins: 9925 pages Start time: 2023-07-01 16:45:26.743 +0300 End time: 2023-07-01 16:53:10.489 +0300 Num samples: 100 (85%) Primary state: 97 samples Non-Frontmost App, Non-Suppressed, Kernel mode, Effective Thread QoS Background, Requested Thread QoS Background, Override Thread QoS Unspecified User Activity: 0 samples Idle, 100 samples Active Power Source: 100 samples on Battery, 0 samples on AC 100 ??? (libsystem_pthread.dylib + 2940) [0x2210aab7c] 59 ??? (libsystem_pthread.dylib + 3488) [0x2210aada0] 59 ??? (libdispatch.dylib + 90456) [0x1c9281158] 59 ??? (libdispatch.dylib + 88388) [0x1c9280944] 57 ??? (libdispatch.dylib + 27032) [0x1c9271998] 57 ??? (libdispatch.dylib + 29192) [0x1c9272208] 57 ??? (libdispatch.dylib + 49368) [0x1c92770d8] 57 ??? (libdispatch.dylib + 46092) [0x1c927640c] 57 ??? (libdispatch.dylib + 49368) [0x1c92770d8] 57 ??? (libdispatch.dylib + 46388) [0x1c9276534] 57 ??? (libdispatch.dylib + 16044) [0x1c926eeac] 57 ??? (libdispatch.dylib + 77764) [0x1c927dfc4] 57 ??? (MobileSpotlightIndex + 111816) [0x1efba74c8] 36 ??? (MobileSpotlightIndex + 85608) [0x1efba0e68] 36 ??? (MobileSpotlightIndex + 129028) [0x1efbab804] 36 ??? (SpotlightDaemon + 91048) [0x22ef453a8] 36 ??? (MobileSpotlightIndex + 1577416) [0x1efd0d1c8] 36 ??? (MobileSpotlightIndex + 516388) [0x1efc0a124] 36 ??? (MobileSpotlightIndex + 1594152) [0x1efd11328] 36 ??? (MobileSpotlightIndex + 59516) [0x1efb9a87c] 18 ??? (MobileSpotlightIndex + 105140) [0x1efba5ab4] 18 ??? (MobileSpotlightIndex + 591036) [0x1efc1c4bc] 18 ??? (MobileSpotlightIndex + 22560) [0x1efb91820] 18 ??? (MobileSpotlightIndex + 2954728) [0x1efe5d5e8] 18 ??? (MobileSpotlightIndex + 100360) [0x1efba4808] 18 ??? (MobileSpotlightIndex + 34900) [0x1efb94854] 18 ??? (MobileSpotlightIndex + 715000) [0x1efc3a8f8] 17 ??? (MobileSpotlightIndex + 25956) [0x1efb92564] 17 ??? (MobileSpotlightIndex + 85340) [0x1efba0d5c] 17 ??? (MobileSpotlightIndex + 380272) [0x1efbe8d70] 17 ??? (MobileSpotlightIndex + 152880) [0x1efbb1530] 17 ??? (libsystem_kernel.dylib + 11492) [0x2003e2ce4] 1 ??? (MobileSpotlightIndex + 24852) [0x1efb92114] 1 ??? (MobileSpotlightIndex + 85340) [0x1efba0d5c] 1 ??? (MobileSpotlightIndex + 380272) [0x1efbe8d70] 1 ??? (MobileSpotlightIndex + 152880) [0x1efbb1530] 1 ??? (libsystem_kernel.dylib + 11492) [0x2003e2ce4] 17 ??? (MobileSpotlightIndex + 104992) [0x1efba5a20] 16 ??? (MobileSpotlightIndex + 967712) [0x1efc78420] 16 ??? (libsystem_kernel.dylib + 9816) [0x2003e2658] 1 ??? (MobileSpotlightIndex + 967676) [0x1efc783fc] 1 ??? (MobileSpotlightIndex + 2576348) [0x1efe00fdc] 1 ??? (libsystem_kernel.dylib + 10708) [0x2003e29d4] 1 ??? (MobileSpotlightIndex + 105360) [0x1efba5b90] 1 ??? (MobileSpotlightIndex + 17732) [0x1efb90544] 1 ??? (MobileSpotlightIndex + 44124) [0x1efb96c5c] 1 ??? (MobileSpotlightIndex + 25956) [0x1efb92564] 1 ??? (MobileSpotlightIndex + 85340) [0x1efba0d5c] 1 ??? (MobileSpotlightIndex + 380272) [0x1efbe8d70] 1 ??? (MobileSpotlightIndex + 152880) [0x1efbb1530] 1 ??? (libsystem_kernel.dylib + 11492) [0x2003e2ce4] 21 ??? (MobileSpotlightIndex + 113376) [0x1efba7ae0] 13 ??? (MobileSpotlightIndex + 187416) [0x1efbb9c18] 13 ??? (MobileSpotlightIndex + 678752) [0x1efc31b60] 6 ??? (MobileSpotlightIndex + 161108) [0x1efbb3554] 5 ??? (MobileSpotlightIndex + 374144) [0x1efbe7580] 2 ??? (libsystem_platform.dylib + 4784) [0x2210142b0] 2 ??? (libsystem_platform.dylib + 4712) [0x221014268] 1 ??? (libsystem_platform.dylib + 4696) [0x221014258] 1 ??? (MobileSpotlightIndex + 373988) [0x1efbe74e4] 1 ??? (MobileSpotlightIndex + 270184) [0x1efbcdf68] 1 ??? (MobileSpotlightIndex + 359804) [0x1efbe3d7c] 1 ??? (MobileSpotlightIndex + 360616) [0x1efbe40a8] 1 ??? (MobileSpotlightIndex + 711732) [0x1efc39c34] 1 ??? (libsystem_platform.dylib + 4712) [0x221014268] 4 ??? (MobileSpotlightIndex + 164372) [0x1efbb4214] 3 ??? (MobileSpotlightIndex + 1930964) [0x1efd636d4] 1 ??? (MobileSpotlightIndex + 1931084) [0x1efd6374c] 1 ??? (MobileSpotlightIndex + 338920) [0x1efbdebe8] 1 ??? (libsystem_kernel.dylib + 11492) [0x2003e2ce4] 3 ??? (MobileSpotlightIndex + 163828) [0x1efbb3ff4] 3 ??? (MobileSpotlightIndex + 2106620) [0x1efd8e4fc] 6 ??? (MobileSpotlightIndex + 201328) [0x1efbbd270] 2 ??? (MobileSpotlightIndex + 205196) [0x1efbbe18c] 2 ??? (MobileSpotlightIndex + 358816) [0x1efbe39a0] 2 ??? (MobileSpotlightIndex + 423980) [0x1efbf382c] 2 ??? (MobileSpotlightIndex + 289488) [0x1efbd2ad0] 2 ??? (libsystem_kernel.dylib + 11492) [0x2003e2ce4] 2 2 ??? (MobileSpotlightIndex + 204528) [0x1efbbdef0] 2 ??? (MobileSpotlightIndex + 390836) [0x1efbeb6b4] 2 ??? (MobileSpotlightIndex + 512612) [0x1efc09264] 2 ??? (MobileSpotlightIndex + 163828) [0x1efbb3ff4] 2 ??? (MobileSpotlightIndex + 2106620) [0x1efd8e4fc] 1 ??? (MobileSpotlightIndex + 205232) [0x1efbbe1b0] 1 ??? (MobileSpotlightIndex + 493032) [0x1efc045e8] 1 ??? (MobileSpotlightIndex + 152880) [0x1efbb1530] 1 ??? (libsystem_kernel.dylib + 11492) [0x2003e2ce4] 1 1 ??? (MobileSpotlightIndex + 204612) [0x1efbbdf44] 1 ??? (MobileSpotlightIndex + 508900) [0x1efc083e4] 1 ??? (MobileSpotlightIndex + 364336) [0x1efbe4f30] 1 ??? (MobileSpotlightIndex + 368160) [0x1efbe5e20] 1 ??? (MobileSpotlightIndex + 190184) [0x1efbba6e8] 1 ??? (MobileSpotlightIndex + 3061268) [0x1efe77614] 1 ??? (libsystem_kernel.dylib + 10708) [0x2003e29d4] 1 ??? (MobileSpotlightIndex + 639272) [0x1efc28128] 1 ??? (MobileSpotlightIndex + 724356) [0x1efc3cd84] 1 ??? (MobileSpotlightIndex + 205196) [0x1efbbe18c] 1 ??? (MobileSpotlightIndex + 358816) [0x1efbe39a0] 1 ??? (MobileSpotlightIndex + 423816) [0x1efbf3788] 1 ??? (MobileSpotlightIndex + 152880) [0x1efbb1530] 1 ??? (libsystem_kernel.dylib + 11492) [0x2003e2ce4] 1 ??? (MobileSpotlightIndex + 201824) [0x1efbbd460] 1 ??? (MobileSpotlightIndex + 836928) [0x1efc58540] 1 ??? (libsystem_kernel.dylib + 16016) [0x2003e3e90] 2 ??? (libdispatch.dylib + 27184) [0x1c9271a30] 2 ??? (libdispatch.dylib + 29192) [0x1c9272208] 2 ??? (libdispatch.dylib + 49368) [0x1c92770d8] 2 ??? (libdispatch.dylib + 46092) [0x1c927640c] 2 ??? (libdispatch.dylib + 49368) [0x1c92770d8] 2 ??? (libdispatch.dylib + 46388) [0x1c9276534] 2 ??? (libdispatch.dylib + 16044) [0x1c926eeac] 2 ??? (libdispatch.dylib + 77764) [0x1c927dfc4] 2 ??? (MobileSpotlightIndex + 111816) [0x1efba74c8] 2 ??? (MobileSpotlightIndex + 113376) [0x1efba7ae0] 2 ??? (MobileSpotlightIndex + 201328) [0x1efbbd270] 1 ??? (MobileSpotlightIndex + 205196) [0x1efbbe18c] 1 ??? (MobileSpotlightIndex + 358816) [0x1efbe39a0] 1 ??? (MobileSpotlightIndex + 425180) [0x1efbf3cdc] 1 ??? (MobileSpotlightIndex + 289488) [0x1efbd2ad0] 1 ??? (libsystem_kernel.dylib + 11492) [0x2003e2ce4] 1 ??? (MobileSpotlightIndex + 204528) [0x1efbbdef0] 1 ??? (MobileSpotlightIndex + 390836) [0x1efbeb6b4] 1 ??? (MobileSpotlightIndex + 512612) [0x1efc09264] 1 ??? (MobileSpotlightIndex + 163828) [0x1efbb3ff4] 1 ??? (MobileSpotlightIndex + 2106620) [0x1efd8e4fc] 41 ??? (libsystem_pthread.dylib + 3548) [0x2210aaddc] 41 ??? (libdispatch.dylib + 93404) [0x1c9281cdc] 41 ??? (libdispatch.dylib + 53168) [0x1c9277fb0] 41 ??? (libdispatch.dylib + 49368) [0x1c92770d8] 41 ??? (libdispatch.dylib + 46388) [0x1c9276534] 41 ??? (libdispatch.dylib + 16044) [0x1c926eeac] 39 ??? (libdispatch.dylib + 77764) [0x1c927dfc4] 39 ??? (MobileSpotlightIndex + 111816) [0x1efba74c8] 39 ??? (MobileSpotlightIndex + 517292) [0x1efc0a4ac] 39 ??? (SpotlightDaemon + 14012) [0x22ef326bc] 39 ??? (SpotlightDaemon + 323028) [0x22ef7ddd4] 39 ??? (MobileSpotlightIndex + 146892) [0x1efbafdcc] 31 ??? (MobileSpotlightIndex + 157052) [0x1efbb257c] 31 ??? (MobileSpotlightIndex + 256212) [0x1efbca8d4] 31 ??? (libsystem_kernel.dylib + 9816) [0x2003e2658] 8 ??? (MobileSpotlightIndex + 157092) [0x1efbb25a4] 8 ??? (MobileSpotlightIndex + 256212) [0x1efbca8d4] 8 ??? (libsystem_kernel.dylib + 9816) [0x2003e2658] 2 ??? (MobileSpotlightIndex + 111816) [0x1efba74c8] 2 ??? (MobileSpotlightIndex + 517292) [0x1efc0a4ac] 2 ??? (SpotlightDaemon + 14012) [0x22ef326bc] 2 ??? (SpotlightDaemon + 218768) [0x22ef64690] 2 ??? (MobileSpotlightIndex + 146892) [0x1efbafdcc] 2 ??? (MobileSpotlightIndex + 157052) [0x1efbb257c] 2 ??? (MobileSpotlightIndex + 256212) [0x1efbca8d4] 2 ??? (libsystem_kernel.dylib + 9816) [0x2003e2658] Binary Images: 0x104e7c000 - ??? searchd /System/Library/PrivateFrameworks/Search.framework/searchd 0x1c926b000 - 0x1c92b1fff libdispatch.dylib /usr/lib/system/libdispatch.dylib 0x1efb8c000 - 0x1efebefff MobileSpotlightIndex <393D4659-313E-30ED-917D-574FD499F0C7> /System/Library/PrivateFrameworks/MobileSpotlightIndex.framework/MobileSpotlightIndex 0x2003e0000 - 0x200417ff7 libsystem_kernel.dylib <75DA6452-934E-3F80-B181-D47074378E83> /usr/lib/system/libsystem_kernel.dylib 0x221013000 - 0x221019ff7 libsystem_platform.dylib /usr/lib/system/libsystem_platform.dylib 0x2210aa000 - 0x2210b5ff3 libsystem_pthread.dylib <56698309-210A-3137-97D4-14E4604B1117> /usr/lib/system/libsystem_pthread.dylib 0x22ef2f000 - 0x22efb2fff SpotlightDaemon /System/Library/PrivateFrameworks/SpotlightDaemon.framework/SpotlightDaemon