Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: awdd-2023-07-01-180354-2892.consolidated.metriclog.anon Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. timestamp: 1688215499495 isAnonymous: true deviceConfigId: 7386 investigationId: 0 model: "iPad13,2" softwareBuild: "20F75" firmwareVersion: "iBoot-8422.122.1" basebandVersion: "4.02.01" buildtype: "User" tz_offset: 10800 metric_file_type: 1 metriclogs { triggerTime: 1688215439413 triggerId: 520197 profileId: 568 commCenterOperatorRoaming { timestamp: 1688215439420 home_mcc: "204" home_mnc: "04" carrier_bundle_id: "com.apple.Bootstrap_Truphone_US" registration_status: 5 subs_id: 0 } } metriclogs { triggerTime: 1688218996537 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688218992046 version: 834 } } metriclogs { triggerTime: 1688218996542 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688218992106 version: 834 } } metriclogs { triggerTime: 1688218997850 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688218997850 version: 1315 } } metriclogs { triggerTime: 1688219013706 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688219013705 version: 1315 } } metriclogs { triggerTime: 1688219013802 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688219013800 version: 1315 } } metriclogs { triggerTime: 1688219050656 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688219046040 version: 834 } } metriclogs { triggerTime: 1688219050660 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688219046070 version: 834 } } metriclogs { triggerTime: 1688219050667 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688219048645 version: 1315 } } metriclogs { triggerTime: 1688221269887 triggerId: 520197 profileId: 568 profileId: 570 commCenterOperatorRoaming { timestamp: 1688221269923 home_mcc: "204" home_mnc: "04" carrier_bundle_id: "com.apple.Bootstrap_Truphone_US" registration_status: 5 subs_id: 0 } kCellularLteScellInfo { timestamp: 1688219654294 phy_cell_id: 379 dl_freq: 1555 ul_freq: 19555 dl_bw: 100 ul_bw: 100 freq_band_ind: 3 num_mnc_digits: 2 sel_plmn_mcc: 250 sel_plmn_mnc: 1 prio_of_camped_lte_band: 0 hst_cell_info: 320 num_subs: 1 plmn_list { plmn: [3 bytes] 52 f0 10 uli: false } subs_id: 1 } kCellularRatRetention { timestamp: 1688219064009 version: 16 subs_id: 1 sim_hplmn: [3 bytes] 02 f4 40 ps_pref: 1 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_REGISTERED_SMS_ONLY ps_reg_state: KREG_STATUS_NORMAL_SERVICE last_power_mode: POWER_CHANGE_MODE_ON sys_mode: 9 roam_status: 1 reg_mode: 0 lte_mode: 0 uli: false } kCellularRatRetention { timestamp: 1688219654365 version: 16 subs_id: 1 sim_hplmn: [3 bytes] 02 f4 40 ps_pref: 1 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 0 cs_reg_state: KREG_STATUS_REGISTRATION_SERVICE_DISABLED ps_reg_state: KREG_STATUS_REGISTRATION_SERVICE_DISABLED last_power_mode: POWER_CHANGE_MODE_AIRPLANE sys_mode: 9 roam_status: 1 reg_mode: 0 lte_mode: 0 uli: false elapsed_ms: 590355 } } metriclogs { triggerTime: 1688169600000 triggerId: 6684672 profileId: 530 proactiveAppPredictionAppLaunchSequence { timestamp: 1688169600000 bundleid: "com.apple.mobilenotes" bundleid: "com.opera.OperaTouch" bundleid: "com.apple.mobilesafari" bundleid: "com.apple.Preferences" bundleid: "com.apple.mobilesafari" } } metriclogs { triggerTime: 1688169600000 triggerId: 524449 profileId: 209 commCenterSimTrayEvent { timestamp: 1688169600000 inserted: true has_sim: false } } metriclogs { triggerTime: 1688169600000 triggerId: 524449 profileId: 209 commCenterSimTrayEvent { timestamp: 1688169600000 inserted: true has_sim: false } }