Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: WireGuard Network Extension.wakeups_resource-2023-07-01-112533.ips Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. {"app_name":"WireGuard Network Extension","timestamp":"2023-07-01 11:25:33.00 +0300","app_version":"4.0.1","slice_uuid":"4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8","build_version":"3","bundleID":"com.opera.OperaTouch.vpnExtension","duration_ms":"176553","share_with_app_devs":1,"is_first_party":0,"bug_type":"142","os_version":"iPhone OS 16.5.1 (20F75)","roots_installed":0,"incident_id":"B6D575C3-9DBF-4323-A06E-62F594DC3FBA","name":"WireGuard Network Extension"} Date/Time: 2023-07-01 11:22:35.849 +0300 End time: 2023-07-01 11:25:32.402 +0300 OS Version: iPhone OS 16.5.1 (Build 20F75) Architecture: arm64e Report Version: 40 Incident Identifier: B6D575C3-9DBF-4323-A06E-62F594DC3FBA Share With Devs: Yes Data Source: Microstackshots Shared Cache: 897CC0D1-BD62-3BA4-920E-435E58CD1292 slid base address 0x1a25fc000, slide 0x225fc000 Command: WireGuard Network Extension Path: /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension Identifier: com.opera.OperaTouch.vpnExtension Version: 4.0.1 (3) Resource Coalition ID: 717 Architecture: arm64 Parent: UNKNOWN [1] PID: 677 Event: wakeups Action taken: none Wakeups: 45001 wakeups over the last 177 seconds (255 wakeups per second average), exceeding limit of 150 wakeups per second over 300 seconds Wakeups limit: 45000 Limit duration: 300s Wakeups caused: 45001 Wakeups duration: 177s Duration: 176.55s Duration Sampled: 136.89s Steps: 6 Hardware model: iPad13,2 Active cpus: 6 HW page size: 16384 VM page size: 16384 Advisory levels: Battery -> 2, User -> 3, ThermalPressure -> 0, Combined -> 2 Free disk space: 12.59 GB/59.58 GB, low space threshold 150 MB Low Power Mode: Enabled Vnodes Available: 75.17% (15034/20000, 10000 allocated, 10000 soft limit) Preferred User Language: en-GB Country Code: GB Keyboards: en_GB QWERTYBritish, ru_RU Russian HW Keyboard: Yes OS Cryptex File Extents: 5616 Heaviest stack for the target process: 3 ??? (libsystem_pthread.dylib + 2952) [0x2088a2b88] 3 ??? (libsystem_pthread.dylib + 5816) [0x2088a36b8] 3 ??? (WireGuard Network Extension + 1191996) [0x102b6303c] 3 ??? (WireGuard Network Extension + 1193560) [0x102b63658] 3 ??? (WireGuard Network Extension + 566976) [0x102aca6c0] 3 ??? (WireGuard Network Extension + 406116) [0x102aa3264] 3 ??? (WireGuard Network Extension + 406280) [0x102aa3308] 1 ??? (WireGuard Network Extension + 508960) [0x102abc420] Powerstats for: WireGuard Network Extension (WireGuard Network Extension) [677] UUID: 4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8 Path: /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension Identifier: com.opera.OperaTouch.vpnExtension Version: 4.0.1 (3) Resource Coalition ID: 717 Architecture: arm64 Parent: UNKNOWN [1] UID: 501 Footprint: 6576 KB -> 7040 KB (+464 KB) Start time: 2023-07-01 11:23:14.225 +0300 End time: 2023-07-01 11:25:31.112 +0300 Num samples: 6 (100%) Primary state: 5 samples Non-Frontmost App, Non-Suppressed, User mode, Effective Thread QoS Default, Requested Thread QoS Default, Override Thread QoS Unspecified User Activity: 0 samples Idle, 6 samples Active Power Source: 6 samples on Battery, 0 samples on AC 3 ??? (libsystem_pthread.dylib + 2952) [0x2088a2b88] 3 ??? (libsystem_pthread.dylib + 5816) [0x2088a36b8] 3 ??? (WireGuard Network Extension + 1191996) [0x102b6303c] 3 ??? (WireGuard Network Extension + 1193560) [0x102b63658] 3 ??? (WireGuard Network Extension + 566976) [0x102aca6c0] 3 ??? (WireGuard Network Extension + 406116) [0x102aa3264] 3 ??? (WireGuard Network Extension + 406280) [0x102aa3308] 1 ??? (WireGuard Network Extension + 508960) [0x102abc420] 1 ??? (WireGuard Network Extension + 442136) [0x102aabf18] 1 ??? (WireGuard Network Extension + 509204) [0x102abc514] 1 ??? (WireGuard Network Extension + 510704) [0x102abcaf0] 1 ??? (WireGuard Network Extension + 442056) [0x102aabec8] 1 ??? (WireGuard Network Extension + 217168) [0x102a75050] 1 ??? (WireGuard Network Extension + 1794630872) [0x16d9be4d8] 1 ??? (WireGuard Network Extension + 510764) [0x102abcb2c] 1 ??? (WireGuard Network Extension + 576664) [0x102accc98] 1 ??? (libsystem_kernel.dylib + 9660) [0x1e7bda5bc] 1 1 ??? (WireGuard Network Extension + 577060) [0x102acce24] 1 ??? (WireGuard Network Extension + 1114348) [0x102b500ec] 1 ??? (WireGuard Network Extension + 1147392) [0x102b58200] 1 ??? (WireGuard Network Extension + 1061632) [0x102b43300] 1 ??? (WireGuard Network Extension + 1063988) [0x102b43c34] 1 ??? (WireGuard Network Extension + 1058736) [0x102b427b0] 1 ??? (WireGuard Network Extension + 567092) [0x102aca734] 1 ??? (WireGuard Network Extension + 424408) [0x102aa79d8] 1 ??? (WireGuard Network Extension + 423432) [0x102aa7608] 1 ??? (WireGuard Network Extension + 415752) [0x102aa5808] Binary Images: 0x102a40000 - ??? com.opera.OperaTouch.vpnExtension 4.0.1 (3) <4B737F27-E8DB-310D-B1D7-25F8DBEBAAB8> /private/var/containers/Bundle/Application/5492F03C-DA63-40AC-84E1-8495FF8BE733/Opera.app/PlugIns/WireGuard Network Extension.appex/WireGuard Network Extension 0x1e7bd8000 - 0x1e7c0fff7 libsystem_kernel.dylib <75DA6452-934E-3F80-B181-D47074378E83> /usr/lib/system/libsystem_kernel.dylib 0x2088a2000 - 0x2088adff3 libsystem_pthread.dylib <56698309-210A-3137-97D4-14E4604B1117> /usr/lib/system/libsystem_pthread.dylib