Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/macbooks/ Spyware Found on Irina Bright’s MacBooks, Which May Be Related to Pegasus Spyware. File name: Keychain_Access_2018-03-02-163802_Irinas-MacBook-Pro.memory_resource.diag Downloaded from: McBook > Library_Logs_DiagnosticReports. Date/Time: 2018-03-02 16:18:00.222744 +0000 OS Version: Mac OS X 10.13.3 (Build 17D102) Architecture: x86_64 Report Version: 19 Command: Keychain Access Path: /Applications/Utilities/Keychain Access.app/Contents/MacOS/Keychain Access Version: 10.0 (55237.1.1) Build Version: 620 Project Name: KeychainAccess Source Version: 55237001001000000 Bundle Id: com.apple.keychainaccess PID: 504 Coalition ID: 580 Wall Time Alive: 29759 Footprint: 0MB Limit: 400 Process Flags: Active Event: memory high watermark Action taken: none -- this exception is advisory Duration: 1200.00s Steps: 0 Hardware model: MacBookPro9,2 Active cpus: 4 Signature: LayerKit,MALLOC_NANO,MALLOC_SMALL,CG backing stores MallocStack Sig: Section: footprint --summary ========================================================================================== Keychain Access [504] (corpse): 64-bit Footprint: 404 MB (4096 bytes per page) ========================================================================================== Dirty (Swapped) Clean Reclaimable (Wired) Regions Category --- --- --- --- --- --- --- 161 MB 36 KB 0 B 43 MB 0 B 2434 LayerKit 74 MB 2304 KB 0 B 1124 KB 0 B 128 MALLOC_NANO 59 MB 3108 KB 0 B 0 B 0 B 24 MALLOC_SMALL 46 MB 32 KB 0 B 0 B 0 B 65 CG backing stores 33 MB 372 KB 0 B 1004 KB 0 B 45 MALLOC_TINY 15 MB 440 KB 0 B 44 MB 0 B 138 MALLOC_LARGE 4864 KB 228 KB 0 B 0 B 0 B 38 Accelerate image backing stores 2636 KB 452 KB 0 B 0 B 0 B 38 CoreUI image data 1944 KB 340 KB 35 MB 0 B 0 B 446 untagged ("VM_ALLOCATE") 1356 KB 4096 B 0 B 0 B 0 B 26 IOKit (IOMemoryDescriptor) 1244 KB 296 KB 0 B 0 B 0 B 7 MALLOC_LARGE_REUSED 524 KB 12 KB 0 B 0 B 0 B 85 CG image 260 KB 4096 B 0 B 0 B 0 B 63 CoreImage 232 KB 8192 B 0 B 0 B 0 B 6 stack 224 KB 68 KB 0 B 0 B 0 B 6 CoreUI image file 216 KB 212 KB 0 B 20 KB 0 B 3 Foundation 172 KB 16 KB 0 B 0 B 0 B 44 malloc metadata 144 KB 0 B 0 B 0 B 0 B 3 os_alloc_once 36 KB 0 B 0 B 276 KB 0 B 20 ImageIO 28 KB 0 B 0 B 0 B 0 B 1 Activity Tracing 12 KB 0 B 0 B 0 B 0 B 1 app-specific tag 12 12 KB 0 B 0 B 0 B 0 B 1 app-specific tag 3 4096 B 0 B 0 B 0 B 0 B 1 CoreGraphics 1960 KB 516 KB 5584 KB 384 KB 0 B 1540 Other --- --- --- --- --- --- --- 404 MB 8448 KB 41 MB 90 MB 0 B 5163 TOTAL Auxiliary data: Kernel memory: KPRVT: 8192 B KSHRD: 0 B phys_footprint: 0 B