Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: WireGuard Network Extension.wakeups_resource-2023-07-01-111310.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"app_name":"WireGuard Network Extension","timestamp":"2023-07-01 11:13:10.00 +0300","app_version":"4.0.1","slice_uuid":"4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8","build_version":"3","bundleID":"com.opera.OperaTouch.vpnExtension","duration_ms":"156444","share_with_app_devs":1,"is_first_party":0,"bug_type":"142","os_version":"iPhone OS 16.5.1 (20F75)","roots_installed":0,"incident_id":"D82D383B-C2FA-41EC-9EB2-575D4D7AD228","name":"WireGuard Network Extension"} Date/Time: 2023-07-01 11:10:34.023 +0300 End time: 2023-07-01 11:13:10.467 +0300 OS Version: iPhone OS 16.5.1 (Build 20F75) Architecture: arm64e Report Version: 40 Incident Identifier: D82D383B-C2FA-41EC-9EB2-575D4D7AD228 Share With Devs: Yes Data Source: Microstackshots Shared Cache: 897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x1a25fc000, slide 0x225fc000 Command: WireGuard Network Extension Path: /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension Identifier: com.opera.OperaTouch.vpnExtension Version: 4.0.1 (3) Resource Coalition ID: 698 Architecture: arm64 Parent: UNKNOWN [1] PID: 628 Event: wakeups Action taken: none Wakeups: 45001 wakeups over the last 156 seconds (288 wakeups per second average), exceeding limit of 150 wakeups per second over 300 seconds Wakeups limit: 45000 Limit duration: 300s Wakeups caused: 45001 Wakeups duration: 156s Duration: 156.44s Duration Sampled: 0.00s Steps: 1 Hardware model: iPad13,2 Active cpus: 6 HW page size: 16384 VM page size: 16384 Advisory levels: Battery -> 2, User -> 3, ThermalPressure -> 0, Combined -> 2 Free disk space: 12.63 GB/59.58 GB, low space threshold 150 MB Low Power Mode: Enabled Vnodes Available: 75.09% (15018/20000, 10000 allocated, 10000 soft limit) Preferred User Language: en-GB Country Code: GB Keyboards: en_GB QWERTYBritish, ru_RU Russian HW Keyboard: Yes OS Cryptex File Extents: 5616 Heaviest stack for the target process: 1 ??? (WireGuard Network Extension + 577060) [0x102440e24] 1 ??? (WireGuard Network Extension + 1140872) [0x1024ca888] 1 ??? (WireGuard Network Extension + 1151292) [0x1024cd13c] 1 ??? (WireGuard Network Extension + 1162384) [0x1024cfc90] Powerstats for: WireGuard Network Extension (WireGuard Network Extension) [628] UUID: 4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8 Path: /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension Identifier: com.opera.OperaTouch.vpnExtension Version: 4.0.1 (3) Resource Coalition ID: 698 Architecture: arm64 Parent: UNKNOWN [1] UID: 501 Footprint: 5712 KB Start time: 2023-07-01 11:13:05.609 +0300 End time: 2023-07-01 11:13:05.609 +0300 Num samples: 1 (100%) Primary state: 1 samples Non-Frontmost App, Non-Suppressed, User mode, Effective Thread QoS Default, Requested Thread QoS Default, Override Thread QoS Unspecified User Activity: 0 samples Idle, 1 samples Active Power Source: 1 samples on Battery, 0 samples on AC 1 ??? (WireGuard Network Extension + 577060) [0x102440e24] 1 ??? (WireGuard Network Extension + 1140872) [0x1024ca888] 1 ??? (WireGuard Network Extension + 1151292) [0x1024cd13c] 1 ??? (WireGuard Network Extension + 1162384) [0x1024cfc90] Binary Images: 0x1023b4000 - ??? com.opera.OperaTouch.vpnExtension 4.0.1 (3) <4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8> /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension