Troubled by copy & paste and some of these logs

Question

Level 1

14 points

Troubled by copy & paste and some of these logs

copy and pasted from screenshots…… but they are far from copied. Somehow they get corrupted when pasting…… anyway some of these logs are normal, some aren’t. Please help? My devices act so strange and lockdown mode wont turn off, and things are deleted a lot (not by me)

all 5Gw 92%

ANECompilerService.cpu_resource-2023-05-02-095203.is

assetsd.diskwrites_resource-2023-05-03-140812.ips

backboardd.wakeups_resource-2023-04-26-201957.ips

backupd.cp_resource-2023-04-28-172908.ips

backupd.diskwrites_resource-2023-05-05-075635.is

Chrome.wakeups_resource-2023-04-29-104728.0002.cloud.diskwrites_resource-2023-05-02-231133.is

com.apple.MobileSoftwareUpdate.UpdateBrainService.diskwrites_reso...com.apple.searchd-2023-04-21.isonPasswords

com.apple.searchd-2023-04-23.json

com.apple.WebKit.WebContent.CaptivePortal.cpu_resource-2023-04-

com.apple.WebKit.WebContent.CaptivePortal.wakeups_resource-2023-.

com.apple.WebKit.WebContent.cpu_resource-2023-04-26-220359.ips

.**_resource-2023-04-28-172821.ips

duetexpertd.cp_resource-2023-04-28-172821.ips

duetexpertd.cpu_resource-2023-04-30-002057ips

Effectron-2023-04-29-092548ips

Effectron.wakeups_resource-2023-04-29-081354.ips

Glitch Art Studio.diskwrites_resource-2023-04-29-221721ips

Instagram.wakeups_resource-2023-04-29-230311.is

InstagramNotificationExtension-2023-05-03-133543ips

intelligenceplatformd.cpu_resource-2023-04-29-231829.ips

JetsamEvent-2023-04-27-111244.ips

LowBatteryLog-2023-05-02-035926.is

.diskwrites_resource-2023-04-26-205342.ips

MEISAI.wakeups_resource-2023-04-29-080723.ips

Metascan.wakeups_resource-2023-04-29-081052.is

MobileSafari.wakeups_resource-2023-04-26-214128.ips

MobileSlideShow.diskwrites_resource-2023-04-29-071255.is

MobileSlideShow.wakeups_resource-2023-04-28-164553.is

MobileSMS.wakeups_resource-2023-04-26-201013.ips

PicsArt-2023-05-02-112832ips

PicsArt.diskwrites_resource-2023-05-02-112736.is

PicsArt.wakeups_resource-2023-04-29-224851.is

ResetCounter-2023-04-26-200455.is

RCReporting_messageLog2023-05-02-22-29-31.txt

SiriSearchFeedback-2023-04-27-104804.is

speechmodeltrainingd.**_resource-2023-04-26-224202.ips

spotlightknowledged.cp_resource-2023-04-26-225037.ips

3.ips

SpringBoard.wakeups_resource-2023-04-26-221529.ips

TransparencyTopic-2023-04-29-104721.000ips

ONUUIIINIIUVVICUUCU.uIOnyVIIICO ICOUuIUC-LULU-Uv UI LILLU.INS

SpringBoard.wakeups_resource-2023-04-26-221529.ips

TransparencyTopic-2023-04-29-104722.0002ips

04729ips

WebExtension-2023-05-03-230821.ps

WidgetExtension-2023-04-28-085245.ps

.ps

iPad Pro, iPadOS 16

Posted on May 5, 2023 10:20 PM

Reply

Answer 1

briar132 Author

Level 1

14 points

May 5, 2023 10:23 PM in response to briar132

Binary Images:

0x102afc000 - ??? com.apple.ANECompilerService (1) <FF136CB7-0286-3917-837F-6B605FE0D14C> /System/Library/PrivateFrameworks/AppleNeuralEngine.framework/XPCServices/ANECompilerService.xpc/ANECompilerService

0x1ac060000 - 0x1ac93dfff Foundation <35567930-FBC2-374B-B44B-1DDFE3ADA4A1> /System/Library/Frameworks/Foundation.framework/Foundation

0x1b1d19000 - 0x1b2100fff CoreFoundation <6A07CBE8-4F65-3DBC-B59D-C1A188A7B95D> /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation

0x1b91da000 - 0x1b9220fff libdispatch.dylib <B74732B5-D7FE-34A4-9346-41945701F020> /usr/lib/system/libdispatch.dylib

0x1b9221000 - 0x1b929eff3 libsystem_c.dylib <72233FDE-DDFE-3E78-B991-2DECE8CD78C5> /usr/lib/system/libsystem_c.dylib

0x1bf451000 - 0x1c006efff Espresso <8519F9AB-E198-3707-A86A-92E3E0C1AF45> /System/Library/PrivateFrameworks/Espresso.framework/Espresso

0x1c015a000 - 0x1c017dff3 libsystem_malloc.dylib <39496555-802C-3AB4-A506-6B8C2E3611B9> /usr/lib/system/libsystem_malloc.dylib

0x1c031a000 - 0x1c03a6ff7 libc++.1.dylib <DB5662CE-22E0-32E0-9F15-2FD7C1CBFE43> /usr/lib/libc++.1.dylib

0x1f0144000 - 0x1f017bff7 libsystem_kernel.dylib <5998C9AE-C77E-3681-BD6C-0883C89297CF> /usr/lib/system/libsystem_kernel.dylib

0x210b28000 - 0x210b35ffb libcommonCrypto.dylib <D8491CF5-94F4-3F44-9064-968B64AF50E4> /usr/lib/system/libcommonCrypto.dylib

0x210b36000 - 0x210b4dfff libc++abi.dylib <9A72E1B5-A4B0-35E0-97CC-C18B533AEB17> /usr/lib/libc++abi.dylib

0x210b6b000 - 0x210b71fef libsystem_platform.dylib <2E6C66FC-2EB9-34F9-995B-AE0B16E030C4> /usr/lib/system/libsystem_platform.dylib

0x210c02000 - 0x210c0dff3 libsystem_pthread.dylib <B1EE57E1-4484-3714-BA1A-104330CA10C6> /usr/lib/system/libsystem_pthread.dylib

0x210c45000 - 0x210c86fff libxpc.dylib <7AFE0AEC-5B9F-3E5D-9803-12CA228AD324> /usr/lib/system/libxpc.dylib

0x21379e000 - 0x213da5ff7 ANECompiler <62CBB0D1-1343-3A7F-8E48-CDED7E514471> /System/Library/PrivateFrameworks/ANECompiler.framework/ANECompiler

0x237803000 - 0x237bb2fe7 libORTools.dylib <887B2E7F-D756-35AC-B563-C5AE36924FAD> /System/Library/PrivateFrameworks/ANECompiler.framework/libORTools.dylib

Reply

Answer 2

Jun 26, 2023 05:54 AM in response to gravityfed

gravityfed wrote:

It’s going to have to come from Apple and Google. Google listened but because I couldn’t provide them the exploit and reverse engineered with full instructions it’s a dead end.

Apple will no doubt ignore it too. No security researcher not with Apple has any hope because the exploit is within a well guarded process hardly anyone knows anything about - but from reading hundreds of thousands lines of logs I have figured out what it is. But I’m a nobody and Apple ignore anyone not from some big name research company.

Apple welcomes submission of security and vulnerability reports from all - including independent security researchers. If you are as capable and skilled as you believe, in identifying an active or theoretical security vulnerability, you will have no difficulty (and will be welcomed) in submitting your research through the appropriate channels:

Report a security or privacy vulnerability - Apple Support

Reply

Answer 3

Jul 6, 2023 03:29 AM in response to LotusPilot

Apple welcomes submission of security and vulnerability reports from all - including independent security researchers. If you are as capable and skilled as you believe, in identifying an active or theoretical security vulnerability, you will have no difficulty (and will be welcomed) in submitting your research through the appropriate channels:

Report a security or privacy vulnerability - Apple Support

LotusPilot wrote:

gravityfed wrote:

It’s going to have to come from Apple and Google. Google listened but because I couldn’t provide them the exploit and reverse engineered with full instructions it’s a dead end.

Apple will no doubt ignore it too. No security researcher not with Apple has any hope because the exploit is within a well guarded process hardly anyone knows anything about - but from reading hundreds of thousands lines of logs I have figured out what it is. But I’m a nobody and Apple ignore anyone not from some big name research company.

Apple welcomes submission of security and vulnerability reports from all - including independent security researchers. If you are as capable and skilled as you believe, in identifying an active or theoretical security vulnerability, you will have no difficulty (and will be welcomed) in submitting your research through the appropriate channels:

Report a security or privacy vulnerability - Apple Support

I am not skilled as evidenced by the inability to provide a reverse engineered example. However, I have pinpointed the source, but due to the not-public proprietary nature this particular technology I am at a dead end and only have the evidence of it in action - but not how it came to be.

If your report doesn't include enough information to allow us to reproduce the issue, we may not be able to accept your report [Source]

Reply

Answer 4

briar132 Author

Level 1

14 points

May 5, 2023 10:22 PM in response to briar132

{"app_name":"ANECompilerService","timestamp":"2023-05-02 09:52:03.00 -0700","slice_uuid":"FF136CB7-0286-3917-837F-6B605FE0D14C","build_version":"1","bundleID":"com.apple.ANECompilerService","duration_ms":"147222","share_with_app_devs":0,"is_first_party":0,"bug_type":"202","os_version":"iPhone OS 16.4.1 (20E772520a)","roots_installed":0,"name":"ANECompilerService","incident_id":"EA1EA0BF-A288-43E7-B239-1255F18E26EE"}

Date/Time: 2023-05-02 09:49:35.426 -0700

End time: 2023-05-02 09:52:02.647 -0700

OS Version: iPhone OS 16.4.1 (Build 20E772520a)

Architecture: arm64e

Report Version: 40

Incident Identifier: EA1EA0BF-A288-43E7-B239-1255F18E26EE

Data Source: Microstackshots

Shared Cache: B0B43F84-F9CD-30C1-9084-749D869FB56B slid base address 0x1aad84000, slide 0x2ad84000

Shared Cache: 981CB149-073F-3A09-AB17-D2F87472A4A3 slid base address 0x19c8dc000, slide 0x1c8dc000

Command: ANECompilerService

Path: /System/Library/PrivateFrameworks/AppleNeuralEngine.framework/XPCServices/ANECompilerService.xpc/ANECompilerService

Identifier: com.apple.ANECompilerService

Version: ??? (1)

Resource Coalition ID: 480

Architecture: arm64e

Parent: launchd [1]

PID: 372

Event: cpu usage

Action taken: none

CPU: 90 seconds cpu time over 147 seconds (61% cpu average), exceeding limit of 50% cpu over 180 seconds

CPU limit: 90s

Limit duration: 180s

CPU used: 90s

CPU duration: 147s

Duration: 147.22s

Duration Sampled: 146.34s

Steps: 158

Hardware model: iPad13,11

Active cpus: 8

HW page size: 16384

VM page size: 16384

Advisory levels: Battery -> 3, User -> 3, ThermalPressure -> 0, Combined -> 3

Free disk space: 605.38 GB/931.77 GB, low space threshold 150 MB

Vnodes Available: 81.72% (68645/84000, 42000 allocated, 42000 soft limit)

Preferred User Language: en-US

Country Code: US

Keyboards: en_US QWERTY, com.mangolabs.fontmaker.keyboard

OS Cryptex File Extents: 26

Heaviest stack for the target process:

103 ??? (libsystem_pthread.dylib + 2940) [0x210c02b7c]

103 ??? (libsystem_pthread.dylib + 3548) [0x210c02ddc]

103 ??? (libdispatch.dylib + 93404) [0x1b91f0cdc]

103 ??? (libdispatch.dylib + 49368) [0x1b91e60d8]

103 ??? (libdispatch.dylib + 46092) [0x1b91e540c]

103 ??? (libdispatch.dylib + 136248) [0x1b91fb438]

103 ??? (libdispatch.dylib + 46092) [0x1b91e540c]

103 ??? (libdispatch.dylib + 132844) [0x1b91fa6ec]

103 ??? (libdispatch.dylib + 16236) [0x1b91ddf6c]

103 ??? (libxpc.dylib + 73504) [0x210c56f20]

103 ??? (libxpc.dylib + 72432) [0x210c56af0]

103 ??? (Foundation + 6171484) [0x1ac642b5c]

103 ??? (Foundation + 6172912) [0x1ac6430f0]

103 ??? (Foundation + 6166400) [0x1ac641780]

103 ??? (Foundation + 711472) [0x1ac10db30]

103 ??? (CoreFoundation + 134548) [0x1b1d39d94]

103 ??? (CoreFoundation + 470260) [0x1b1d8bcf4]

103 ??? (ANECompilerService + 105656) [0x102b15cb8]

103 ??? (libdispatch.dylib + 78888) [0x1b91ed428]

103 ??? (libdispatch.dylib + 16044) [0x1b91ddeac]

103 ??? (ANECompilerService + 107012) [0x102b16204]

102 ??? (ANECompilerService + 103772) [0x102b1555c]

102 ??? (ANECompilerService + 98448) [0x102b14090]

99 ??? (ANECompiler + 1598096) [0x213924290]

97 ??? (ANECompiler + 1602204) [0x21392529c]

35 ??? (ANECompiler + 3658740) [0x213b1b3f4]

31 ??? (ANECompiler + 4886300) [0x213c46f1c]

30 ??? (ANECompiler + 4890432) [0x213c47f40]

30 ??? (ANECompiler + 5212160) [0x213c96800]

29 ??? (libORTools.dylib + 50168) [0x23780f3f8]

29 ??? (libORTools.dylib + 82296) [0x237817178]

29 ??? (libORTools.dylib + 1372356) [0x2379520c4]

20 ??? (libORTools.dylib + 1330316) [0x237947c8c]

20 ??? (libORTools.dylib + 1237628) [0x23793127c]

8 ??? (libORTools.dylib + 1238660) [0x237931684]

6 ??? (libORTools.dylib + 1202120) [0x2379287c8]

6 ??? (libORTools.dylib + 2329668) [0x237a3bc44]

5 ??? (libORTools.dylib + 2331040) [0x237a3c1a0]

5 ??? (libORTools.dylib + 2471904) [0x237a5e7e0]

5 ??? (libORTools.dylib + 2472728) [0x237a5eb18]

3 ??? (libORTools.dylib + 1850028) [0x2379c6aac]

2 ??? (libORTools.dylib + 2661632) [0x237a8cd00]

1 ??? (libORTools.dylib + 2663788) [0x237a8d56c]

Reply

Answer 5

briar132 Author

Level 1

14 points

May 5, 2023 10:25 PM in response to briar132

Binary Images:

0x1008d0000 - ??? mediaanalysisd-service <0695AF2A-3A7D-316A-A641-54F0AE96FADA> /System/Library/PrivateFrameworks/MediaAnalysis.framework/mediaanalysisd-service

0x1aae34000 - 0x1aae77f9f libobjc.A.dylib <95BD232E-3710-30FD-ADB1-7956D55DE41A> /usr/lib/libobjc.A.dylib

0x1ac060000 - 0x1ac93dfff Foundation <35567930-FBC2-374B-B44B-1DDFE3ADA4A1> /System/Library/Frameworks/Foundation.framework/Foundation

0x1b1d19000 - 0x1b2100fff CoreFoundation <6A07CBE8-4F65-3DBC-B59D-C1A188A7B95D> /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation

0x1b6f20000 - 0x1b7380fdf ImageIO <B2352C12-06BF-3FE7-AD00-6ED641CEEC71> /System/Library/Frameworks/ImageIO.framework/ImageIO

0x1b7381000 - 0x1b76a2ff7 vImage <54BD6512-53A0-3B70-84E5-601697FF3B97> /System/Library/Frameworks/Accelerate.framework/Frameworks/vImage.framework/vImage

0x1b91da000 - 0x1b9220fff libdispatch.dylib <B74732B5-D7FE-34A4-9346-41945701F020> /usr/lib/system/libdispatch.dylib

0x1b93e6000 - 0x1b974bfff CoreData <97E32747-7518-3DD1-B80A-D6B8395CEEAB> /System/Library/Frameworks/CoreData.framework/CoreData

0x1b9b94000 - 0x1b9c50fff IOKit <D42A841D-2A05-3B97-A53F-0533B45FC1F5> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

0x1ba7dd000 - 0x1baa8afff libicucore.A.dylib <9BF6D661-B5F6-3755-9B6A-97050BDAA81A> /usr/lib/libicucore.A.dylib

0x1bf451000 - 0x1c006efff Espresso <8519F9AB-E198-3707-A86A-92E3E0C1AF45> /System/Library/PrivateFrameworks/Espresso.framework/Espresso

0x1c015a000 - 0x1c017dff3 libsystem_malloc.dylib <39496555-802C-3AB4-A506-6B8C2E3611B9> /usr/lib/system/libsystem_malloc.dylib

0x1c0525000 - 0x1c087dfff CoreImage <F9909C83-58C0-32B2-9AE1-7FD8F8B7F7C6> /System/Library/Frameworks/CoreImage.framework/CoreImage

0x1c087e000 - 0x1c0c7cfff VideoToolbox <B938D8DF-6E2D-3E43-A891-CB92E101DDB6> /System/Library/Frameworks/VideoToolbox.framework/VideoToolbox

0x1c6b6b000 - 0x1c6e34fff Photos <C73FD05B-48D3-301F-8188-373BE41648B9> /System/Library/Frameworks/Photos.framework/Photos

0x1c6e35000 - 0x1c75dafff PhotoLibraryServices <873AAB16-5D5B-301B-A9D5-52A051FE024A> /System/Library/PrivateFrameworks/PhotoLibraryServices.framework/PhotoLibraryServices

0x1c75db000 - 0x1c76cefff PhotoLibraryServicesCore <24939BFE-0A7C-3806-8FAD-64EFCFE017E7> /System/Library/PrivateFrameworks/PhotoLibraryServicesCore.framework/PhotoLibraryServicesCore

0x1c8ecc000 - 0x1c8ee6fff libsystem_trace.dylib <0C521867-8C9C-32E5-95D7-65AF68798AB2> /usr/lib/system/libsystem_trace.dylib

Reply

Answer 6

May 5, 2023 10:45 PM in response to briar132

This is a user to user support forum.

The logs are useless unless you have the software interpreter and knowledge of programming .

Since you clearly have neither, stop looking at them.

If you want help with an issue, either contact Apple Support or try creating a new thread here explaining what issues you are having.

Do not post more useless log files

Reply

Answer 7

Jun 26, 2023 04:55 AM in response to christianfromschindellegi

It’s going to have to come from Apple and Google. Google listened but because I couldn’t provide them the exploit and reverse engineered with full instructions it’s a dead end.

Apple will no doubt ignore it too. No security researcher not with Apple has any hope because the exploit is within a well guarded process hardly anyone knows anything about - but from reading hundreds of thousands lines of logs I have figured out what it is. But I’m a nobody and Apple ignore anyone not from some big name research company.

Reply

Answer 8

Jun 16, 2023 08:10 PM in response to briar132

Check one of your app crash logs, if you have a beta identifier number listed you have unfortunately been hit with a StealthBeta exploit. Someone is pushing modified beta apps through a type of obfuscated TestFlight method.

It has been in the wild since at least 2021 and to date no security patches have been unable to fix it. Reinstalls etc will not work.

It is capable of recording audio and video, screen capturing etc, your phone calls etc can also be monitored and files and logs removed from your device.

PS: Don't mind the false alarm bots around here, they're just false alarms. You get a lot of them, especially when you're on the right track.

Reply

Answer 9

briar132 Author

Level 1

14 points

May 5, 2023 10:31 PM in response to briar132

https://share.icloud.com/photos/088Qg6yY9dDKWiVj3BP7V789w

Reply

Answer 10

Jun 25, 2023 12:48 AM in response to gravityfed

So, same problem here.

Any suggestion what to do about it?

Reply

Troubled by copy & paste and some of these logs

Similar questions