EFTA01217423.pdf

• Menu o Overview o Device Details • NYC024371.dmg (Evidence ID: NYC024371.dmg - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Case Data: Calls (201-300 of 936) Duration Service Direction Type Date Contacts Status (HH:MM:SS) 2015-03-13 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-03-13 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-03-13 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone 15:16:13 Missed (UTC) ypted Blob> ) 2015-03-13 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone 15:16:13 Missed (UTC) ypted Blob> ) 2015-03-14 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-03-14 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-03-17 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone 23:32:43 Missed (UTC) ypted Blob> ) 2015-03-17 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-03-19 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 16:56:40 Cancelled (UTC) ypted Blob> ) 2015-03-19 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 16:57:29 Cancelled (UTC) ypted Blob> ) 2015-03-19 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 16:57:29 (UTC) ypted Blob> ) Cancelled 26 5 :03 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video 16:58:03 :58 ( Cancelled ypted Blob> ) [2] 2015-03-19 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 16:58:03 Cancelled [3] (UTC) ypted Blob> ) 2015-03-19 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 16:58:03 Cancelled (UTC) ypted Blob> ) 2015-03-20 <Encrypted Blob> ( <Encr 00:03:03 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-03-20 <Encrypted Blob> ( <Encr 00:03:03 [2] iPhone Incoming Phone (UTC) ypted Blob> ) EFTA01217423  2015-03-20 <Encrypted Blob> ( <Encr 00:03:03 iPhone Incoming Phone 15:18:37 (UTC) ypted Blob> ) 2015-03-20 <Encrypted Blob> ( <Encr 00:03:03 iPhone Incoming Phone 15:26:40 (UTC) ypted Blob> ) 2015-03-20 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed 16:10:22 (UTC) ypted Blob> ) 2015-03-20 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed 16:10:22 (UTC) ypted Blob> ) 2015-03-20 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 16:49:47 Missed (UTC) ypted Blob> ) 2015-03-20 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 16:49:47 Missed (UTC) ypted Blob> ) 2015-03-29 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 16:45:10 Missed (UTC) ypted Blob> ) 2015-03-29 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 16:45:10 Missed (UTC) ypted Blob> ) 2015-03-29 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 00:00:07 16:48:12 (UTC) ypted Blob> ) 2015-03-29 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 00:00:07 16:48:12 (UTC) ypted Blob> ) 29: 3 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 1940: 19:40:39 39 ( Missed ypted Blob> ) 29: 3 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 1940: 19:40:39 39 ( Missed ypted Blob> ) 29: 3 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 1940: 19:40:39 39 ( Missed ypted Blob> ) 2015-03-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 19:43:25 00:00:12 (UTC) ypted Blob> ) [2] <Encrypted Blob> ( <Encr 00:00:12 FaceTime Outgoing Video 2015-03-31um) 19:43:25 ( [3] ypted Blob> ) 2015-03-31 <Encrypted Blob> ( <Encr 00:00:12 [1] FaceTime Outgoing Video 19:43:25 (UTC) ypted Blob> ) 2015-03-31 <Encrypted Blob> ( <Encr 00:05:55 [2] FaceTime Incoming Video 19:43:47 (UTC) ypted Blob> ) 2015-03-31 <Encrypted Blob> ( <Encr 00:05:55 FaceTime Incoming Video 19:43:47 (UTC) ypted Blob> ) 2015-03-31 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 19:46:40 Missed (UTC) ypted Blob> ) 2015-03-31 <Encrypted Blob> ( <Encr 00:00:12 FaceTime Outgoing Video 19:46:40 (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr FaceTime Outgoing Video 2015-M411 00:00:06 18:28:28 (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 2015-W-ell 00:00:06 18:28:28 (UTC) ypted Blob> ) [2] 2015-04-02 <Encrypted Blob> ( <Encr 00:00:03 FaceTime Outgoing Video 10:38:33 (urc) [3] ypted Blob> ) 2015-04-02 <Encrypted Blob> ( <Encr 00:00:03 [1] FaceTime Outgoing Video 10:38:33 (urc) ypted Blob> ) EFTA01217424  2015-04-02 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 10:38:33 ont) 00:00:03 ypted Blob> ) 2015-04-02 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 10:39:10 Missed (UTC) ypted Blob> ) 2015-04-02 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 10:39:10 Missed (UTC) ypted Blob> ) 2015-04-02 <Encrypted Blob> ( <Encr 00:00:03 FaceTime Outgoing Video 10:40:00 arm ypted Blob> ) 2015-04-02 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video Cancelled 10:48:28 (UTC) ypted Blob> ) 2015-04-02 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video Cancelled 10:48:28 (UTC) ypted Blob> ) 2015-04-09 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 19:02:07 (um ypted Blob> ) 2015-04-09 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 19:02:07 (UTC) ypted Blob> ) 2015-04-15 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 20:53:20 00:00:34 (UTC) ypted Blob> ) 20 5 :52 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 20:55 20:55:52 ( 00:00:34 ypted Blob> ) 20 5 :52 <Encrypted Blob> ( <Encr 00:00:34 FaceTime Outgoing Video 20:55 20:55:52 ( ypted Blob> ) 2015-04-15 <Encrypted Blob> ( <Encr 00:00:34 FaceTime Outgoing Video 20:55:52 (UTC) ypted Blob> ) 2015-04-15 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 21:03:30 00:06:52 (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 2015-04-15um 21:03:30 ( ypted Blob> ) 00:06:52 2015-04-15 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed 2015-04-15 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 21:45:58 Missed (UTC) ypted Blob> ) 2015-04-15 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 22:13:39 (UTC) ypted Blob> ) 00:00:47 22 22:13:39 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 22:13:39 ( 00:00:47 ypted Blob> ) 2015-04-16 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:09:08 11:30:53 (UTC) ypted Blob> ) 2015-04-16 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:09:08 11:30:53 (UTC) ypted Blob> ) 2015-04-16 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 20:34:38 (UTC) ypted Blob> ) Cancelled 20 20:34:38 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video 20:34:38 ( Cancelled ypted Blob> ) 20 20:35:28 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 20:35:28 ( ypted Blob> ) Cancelled 2015-04-16 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video 20:35:28 Cancelled (UTC) ypted Blob> ) EFTA01217425  2015-04-17 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 20:47:10 (UTC) ypted Blob> ) 2015-04-17 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 20:47:10 (UTC) ypted Blob> ) 2015-04-17 [2] FaceTime Incoming Video Unknown 00:00:00 21:21:16 (UTC) 2015-04-17 [1] FaceTime Incoming Video Unknown 00:00:00 21:21:16 (UTC) 2 4-17 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video Cancelled 21:27:48 (UTC) ypted Blob> ) 2 4-17 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video Cancelled 21:27:48 (UTC) ypted Blob> ) 2015-04-17 <Encrypted Blob> ( <Encr 00:07:05 [2] FaceTime Incoming Video 21:27:58 (UTC) ypted Blob> ) 2 -17 <Encrypted Blob> ( <Encr 00:07:05 [1] FaceTime Incoming Video 21:27:58 (UTC) ypted Blob> ) 2015-04-22 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed 11:59:12 (UTC) ypted Blob> ) 2015-04-22 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed 11:59:12 (UTC) ypted Blob> ) 2015-04-22 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 13:36:48 Missed (UTC) ypted Blob> ) 2015-04-22 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 13:36:48 Missed (UTC) ypted Blob> ) 2015-04-22 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 13:37:32 (UTC) ypted Blob> ) 2015-04-22 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 13:37:32 (UTC) ypted Blob> ) 2015-04-22 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 15:21:51 (UTC) ypted Blob> ) 2015-04-22 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 15:21:51 (UTC) ypted Blob> ) 2015-04-22 <Encrypted Blob> ( <Encr [2] iPhone Incoming Phone 00:00:26 (UTC) ypted Blob> ) 2015-04-22 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 00:00:26 (UTC) ypted Blob> ) 2015-M-23 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video Missed 11:47:29 (UTC) ypted Blob> ) 2015-M-23 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video Missed 11:47:29 (UTC) ypted Blob> ) 2015-04-24 [2] FaceTime Outgoing Video 13:05:19 Unknown 00:00:00 Cancelled (UTC) 2015-04-24 [1] FaceTime Outgoing Video 13:05:19 Unknown 00:00:00 Cancelled (UTC) 2015-04-24 <Encrypted Blob> ( <Encr 00:00:28 [2] FaceTime Outgoing Video 13:22:27 (UTC) ypted Blob> ) 2015-04-24 <Encrypted Blob> ( <Encr 00:00:28 [1] FaceTime Outgoing Video 13:22:27 (UTC) ypted Blob> ) EFTA01217426  2015-04-24 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 13:23:39 00:00:20 (UTC) ypted Blob> ) 2015-04-24 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 13:23:39 (UTC) ypted Blob> ) 00:00:20 2015-04-24 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video 13:24:33 Cancelled (UTC) ypted Blob> ) 2015-04-24 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 13:24:33 (UTC) ypted Blob> ) Cancelled 205-04-27 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 13:58:26 (UTC) ypted Blob> ) 205-04-27 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 13:58:26 (UTC) ypted Blob> ) 2015-05-01 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (um ypted Blob> ) 2015-05-01 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 17:23:17 (UTC) ypted Blob> ) 2015-05-01 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 20:53:45 Missed (UTC) ypted Blob> ) 2015-05-01 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-05-02 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Audio Missed 12:08:22 (UTC) ypted Blob> ) 2015-05-02 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Audio Missed 12:08:22 (UTC) ypted Blob> ) Notes [1] Source Device /Macintosh HD [1] Source File /Users/Jeffrey/Library/Application SupportlCallHistoryDB/CallHistory.storedata [2] Source Device NYC024371.dmg/Macintosh HD [2] Source File /Users/Jeffrey/Library/Application Support/CallHistotyDB/CallHistory.storedata [3] Recovered Record Case Data: Calls (101-200 of 936) Case Data: Calls (301-400 of 936) EFTA01217427