Parent page of this data file: https://divinity-in-action.com/articles/pegasusspyware/ipad1/otherdatafiles/ Other Data Files Which May Be Related to Pegasus Spyware Found on Irina Bright's Apple Devices. iPad 1. File name: awdd-2023-06-30-161934-2852.consolidated.metriclog.anon Downloaded from: Apple Device > Settings > Privacy & Security > Analytics & Improvements > Analytics Data. timestamp: 1688107849515 isAnonymous: true deviceConfigId: 7386 investigationId: 0 model: "iPad13,2" softwareBuild: "20F75" firmwareVersion: "iBoot-8422.122.1" basebandVersion: "4.02.01" buildtype: "User" tz_offset: 10800 metric_file_type: 1 metriclogs { triggerTime: 1688111202347 triggerId: 520197 profileId: 568 profileId: 570 commCenterOperatorRoaming { timestamp: 1688111202353 home_mcc: "250" home_mnc: "01" info_3GPP { network_mcc: "250" network_mnc: "01" rat: 2 operator_bundle_id: "com.apple.MTS_ru" is_roaming: false } carrier_bundle_id: "com.apple.MTS_ru" registration_status: 4 subs_id: 0 } kCellularLteScellInfo { timestamp: 1688108364400 phy_cell_id: 378 dl_freq: 1727 ul_freq: 19727 dl_bw: 150 ul_bw: 150 freq_band_ind: 3 num_mnc_digits: 2 sel_plmn_mcc: 250 sel_plmn_mnc: 1 prio_of_camped_lte_band: 0 hst_cell_info: 320 num_subs: 1 plmn_list { plmn: [3 bytes] 52 f0 10 uli: false } subs_id: 0 } kCellularRatRetention { timestamp: 1688107834779 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_AT_NOT_REGISTERED ps_reg_state: KREG_STATUS_AT_NOT_REGISTERED last_power_mode: POWER_CHANGE_MODE_ON sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 2 } kCellularRatRetention { timestamp: 1688107836540 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_NORMAL_SERVICE ps_reg_state: KREG_STATUS_REGISTRATION_IN_PROGRESS last_power_mode: POWER_CHANGE_MODE_ON sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 2 elapsed_ms: 1760 } kCellularRatRetention { timestamp: 1688107837457 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_NORMAL_SERVICE ps_reg_state: KREG_STATUS_NORMAL_SERVICE last_power_mode: POWER_CHANGE_MODE_ON sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 2 elapsed_ms: 917 } kCellularRatRetention { timestamp: 1688108363368 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_NORMAL_SERVICE ps_reg_state: KREG_STATUS_NORMAL_SERVICE last_power_mode: POWER_CHANGE_DEACTIVATE_AS sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 1 elapsed_ms: 525910 } kCellularRatRetention { timestamp: 1688108363583 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_LIMITED_SERVICE ps_reg_state: KREG_STATUS_NORMAL_SERVICE last_power_mode: POWER_CHANGE_DEACTIVATE_AS sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 1 elapsed_ms: 214 } kCellularRatRetention { timestamp: 1688108363770 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_LIMITED_SERVICE ps_reg_state: KREG_STATUS_SERVICE_DETACHED last_power_mode: POWER_CHANGE_DEACTIVATE_AS sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 1 elapsed_ms: 187 } kCellularRatRetention { timestamp: 1688108364414 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_LIMITED_SERVICE ps_reg_state: KREG_STATUS_SERVICE_DETACHED last_power_mode: POWER_CHANGE_REACTIVATE_AS sys_mode: 9 roam_status: 0 reg_mode: 1 lte_mode: 1 uli: false elapsed_ms: 644 } kCellularRatRetention { timestamp: 1688108364978 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_REGISTERED_SMS_ONLY ps_reg_state: KREG_STATUS_NORMAL_SERVICE last_power_mode: POWER_CHANGE_REACTIVATE_AS sys_mode: 9 roam_status: 0 reg_mode: 1 lte_mode: 1 uli: false elapsed_ms: 564 } kCellularRatRetention { timestamp: 1688108369264 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_SERVICE_DETACHED ps_reg_state: KREG_STATUS_SERVICE_DETACHED last_power_mode: POWER_CHANGE_DEACTIVATE_AS sys_mode: 9 roam_status: 0 reg_mode: 1 lte_mode: 2 uli: false elapsed_ms: 4285 } kCellularRatRetention { timestamp: 1688108369673 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_SERVICE_DETACHED ps_reg_state: KREG_STATUS_SERVICE_DETACHED last_power_mode: POWER_CHANGE_REACTIVATE_AS sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 2 elapsed_ms: 408 } kCellularRatRetention { timestamp: 1688108370739 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_NORMAL_SERVICE ps_reg_state: KREG_STATUS_REGISTRATION_IN_PROGRESS last_power_mode: POWER_CHANGE_REACTIVATE_AS sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 2 elapsed_ms: 1066 } kCellularRatRetention { timestamp: 1688108372683 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_NORMAL_SERVICE ps_reg_state: KREG_STATUS_NORMAL_SERVICE last_power_mode: POWER_CHANGE_REACTIVATE_AS sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 2 elapsed_ms: 1943 } kCellularRatRetention { timestamp: 1688109400940 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 0 cs_reg_state: KREG_STATUS_NORMAL_SERVICE ps_reg_state: KREG_STATUS_NORMAL_SERVICE last_power_mode: POWER_CHANGE_MODE_AIRPLANE sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 2 elapsed_ms: 1028257 } kCellularRatRetention { timestamp: 1688109401569 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 0 cs_reg_state: KREG_STATUS_REGISTRATION_SERVICE_DISABLED ps_reg_state: KREG_STATUS_REGISTRATION_SERVICE_DISABLED last_power_mode: POWER_CHANGE_MODE_AIRPLANE sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 2 elapsed_ms: 628 } kCellularRatRetention { timestamp: 1688109988583 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_AT_NOT_REGISTERED ps_reg_state: KREG_STATUS_AT_NOT_REGISTERED last_power_mode: POWER_CHANGE_MODE_ON sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 2 elapsed_ms: 587014 } kCellularRatRetention { timestamp: 1688109989803 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_NORMAL_SERVICE ps_reg_state: KREG_STATUS_REGISTRATION_IN_PROGRESS last_power_mode: POWER_CHANGE_MODE_ON sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 2 elapsed_ms: 1219 } kCellularRatRetention { timestamp: 1688109989986 version: 16 subs_id: 0 sim_hplmn: [3 bytes] 52 f0 10 ps_pref: 0 plmn: [3 bytes] 52 f0 10 num_subs: 1 num_cps: 1 cs_reg_state: KREG_STATUS_NORMAL_SERVICE ps_reg_state: KREG_STATUS_NORMAL_SERVICE last_power_mode: POWER_CHANGE_MODE_ON sys_mode: 5 roam_status: 0 reg_mode: 1 lte_mode: 2 elapsed_ms: 182 } kCellularWcdmaCellInfo { timestamp: 1688111125293 subs_id: 0 num_subs: 1 mcc: 250 mnc: 1 wcdma_band: SYS_BAND_WCDMA_I_IMT_2000 dl_uarfcn: 10762 psc: 350 num_mnc_digits: 2 hspa: SYS_HS_IND_HSDPA_HSUPA_SUPP_CELL } } metriclogs { triggerTime: 1688119416133 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688119416133 version: 1315 } } metriclogs { triggerTime: 1688119416258 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688119416255 version: 1315 } } metriclogs { triggerTime: 1688119731935 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688119731933 version: 1315 } } metriclogs { triggerTime: 1688129699044 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688129694839 version: 834 } } metriclogs { triggerTime: 1688129699049 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688129694900 version: 834 } } metriclogs { triggerTime: 1688129700194 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688129700171 version: 1315 } } metriclogs { triggerTime: 1688130198346 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688130193730 version: 834 } } metriclogs { triggerTime: 1688130198348 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688130193795 version: 834 } } metriclogs { triggerTime: 1688130198958 triggerId: 7143424 profileId: 392 multitouchBootEvents { timestamp: 1688130198958 version: 1315 } } metriclogs { triggerTime: 1688083200000 triggerId: 524508 profileId: 156 commCenterBundleUpdateCheckSchedule { timestamp: 1688083200000 next_bundle_update_check_in_days: 30 } } metriclogs { triggerTime: 1688083200000 triggerId: 524449 profileId: 209 commCenterSimTrayEvent { timestamp: 1688083200000 inserted: true has_sim: true } } metriclogs { triggerTime: 1688083200000 triggerId: 524449 profileId: 209 commCenterSimTrayEvent { timestamp: 1688083200000 inserted: false } } metriclogs { triggerTime: 1688083200000 triggerId: 524503 profileId: 161 commCenterCarrierBundle { timestamp: 1688083200000 bundle { bundle_type: 1 matching_bundle_name: "20404_GID1-5472754E6574303031" resolved_bundle_name: "Bootstrap_Truphone_US.bundle" carrier_plist_name: "carrier.plist" bundle_version: "54.0" is_embedded: true imsi_prefix: "2040477" subs_id: 0 } } } metriclogs { triggerTime: 1688083200000 triggerId: 524449 profileId: 209 commCenterSimTrayEvent { timestamp: 1688083200000 inserted: false } } metriclogs { triggerTime: 1688083200000 triggerId: 524449 profileId: 209 commCenterSimTrayEvent { timestamp: 1688083200000 inserted: true has_sim: true } } metriclogs { triggerTime: 1688083200000 triggerId: 524503 profileId: 161 commCenterCarrierBundle { timestamp: 1688083200000 bundle { bundle_type: 1 matching_bundle_name: "25001" resolved_bundle_name: "MTS_ru.bundle" carrier_plist_name: "device+carrier+25001+J308+54.0.plist" bundle_version: "54.0" is_embedded: true imsi_prefix: "2500166" subs_id: 0 } } } metriclogs { triggerTime: 1688083200000 triggerId: 524449 profileId: 209 commCenterSimTrayEvent { timestamp: 1688083200000 inserted: true has_sim: true } } metriclogs { triggerTime: 1688083200000 triggerId: 524449 profileId: 209 commCenterSimTrayEvent { timestamp: 1688083200000 inserted: false } } metriclogs { triggerTime: 1688083200000 triggerId: 524449 profileId: 209 commCenterSimTrayEvent { timestamp: 1688083200000 inserted: false } } metriclogs { triggerTime: 1688083200000 triggerId: 524503 profileId: 161 commCenterCarrierBundle { timestamp: 1688083200000 bundle { bundle_type: 1 matching_bundle_name: "20404_GID1-5472754E6574303031" resolved_bundle_name: "Bootstrap_Truphone_US.bundle" carrier_plist_name: "carrier.plist" bundle_version: "54.0" is_embedded: true imsi_prefix: "2040477" subs_id: 0 } } } metriclogs { triggerTime: 1688083200000 triggerId: 524449 profileId: 209 commCenterSimTrayEvent { timestamp: 1688083200000 inserted: false } } metriclogs { triggerTime: 1688083200000 triggerId: 524449 profileId: 209 commCenterSimTrayEvent { timestamp: 1688083200000 inserted: true has_sim: true } } metriclogs { triggerTime: 1688083200000 triggerId: 524503 profileId: 161 commCenterCarrierBundle { timestamp: 1688083200000 bundle { bundle_type: 1 matching_bundle_name: "25001" resolved_bundle_name: "MTS_ru.bundle" carrier_plist_name: "device+carrier+25001+J308+54.0.plist" bundle_version: "54.0" is_embedded: true imsi_prefix: "2500166" subs_id: 0 } } } metriclogs { triggerTime: 1688083200000 triggerId: 524449 profileId: 209 commCenterSimTrayEvent { timestamp: 1688083200000 inserted: true has_sim: true } } metriclogs { triggerTime: 1688083200000 triggerId: 655408 profileId: 374 locationMobileAssetStatistics { timestamp: 1688083200000 bundleid: "com.apple.locationd" assetEvent: AEAssetVersionReporting assetType: ATCoreLocationConfig component: ACHarvest currentAssetContentVersion: 1 currentAssetCompatibilityVersion: 1 downloadResult: -2 downloadDuration: -1 daysSinceLastCatalogDownloadAttempt: 6 daysSinceLastCatalogDownloadSuccess: 6 daysSinceLastAssetDownloadAttempt: 43 daysSinceLastAssetDownloadSuccess: 43 aggressiveDownloadCriteriaUsed: false genericAssetUsed: true sim1CarrierStatus { bundleId: "" mcc: -1 mnc: -1 sid: -1 nid: -1 plistFound: false } sim1OperatorStatus { bundleId: "" mcc: -1 mnc: -1 sid: -1 nid: -1 plistFound: false } sim2CarrierStatus { bundleId: "" mcc: -1 mnc: -1 sid: -1 nid: -1 plistFound: false } sim2OperatorStatus { bundleId: "" mcc: -1 mnc: -1 sid: -1 nid: -1 plistFound: false } } } metriclogs { triggerTime: 1688083200000 triggerId: 655408 profileId: 374 locationMobileAssetStatistics { timestamp: 1688083200000 bundleid: "com.apple.locationd" assetEvent: AEAssetVersionReporting assetType: ATCoreLocationConfig component: ACUnknownComponent currentAssetContentVersion: 1 currentAssetCompatibilityVersion: 1 downloadResult: -2 downloadDuration: -1 daysSinceLastCatalogDownloadAttempt: 6 daysSinceLastCatalogDownloadSuccess: 6 daysSinceLastAssetDownloadAttempt: 43 daysSinceLastAssetDownloadSuccess: 43 aggressiveDownloadCriteriaUsed: false genericAssetUsed: false sim1CarrierStatus { bundleId: "" mcc: -1 mnc: -1 sid: -1 nid: -1 plistFound: false } sim1OperatorStatus { bundleId: "" mcc: -1 mnc: -1 sid: -1 nid: -1 plistFound: false } sim2CarrierStatus { bundleId: "" mcc: -1 mnc: -1 sid: -1 nid: -1 plistFound: false } sim2OperatorStatus { bundleId: "" mcc: -1 mnc: -1 sid: -1 nid: -1 plistFound: false } } }