EFTA01217418.pdf

• Menu o Overview o Device Details • NYC024371.dmg (Evidence ID: NYC024371.dmg - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Case Data: Calls (101-200 of 936) Duration Service Direction Type Date Contacts Status (HH:MM:SS) 2015-01-25 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 13:04:04 (UTC) ypted Blob> ) 2015-01-25 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video (f/t) ypted Blob> ) [2] 2015-01-25 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 15:03:20 (um Cancelled [3] ypted Blob> ) 2015-01-25 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 15:06:50 (um Cancelled ypted Blob> ) 2015-01-25 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video 15:06:50 (um Cancelled ypted Blob> ) [1] FaceTime Outgoing Video 2015-01-25 15:06:50 <Encrypted Blob> ( <Encr 00:00:00 Cancelled [3] (UTC) ypted Blob> ) 2015-01-25 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video Cancelled 18:18:12 (UTC) ypted Blob> ) 2015-01-25 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video Cancelled 18:18:12 (UTC) ypted Blob> ) [2] 2015-01-26 FaceTime Incoming Video Unknown 00:06:12 [3] 02:26:40 (UTC) 2015-01-26 [1] FaceTime Incoming Video 02:33:45 Unknown 00:06:12 (UTC) [1] 2015-01-26 FaceTime Incoming Video 02:33:45 Unknown 00:06:12 [3] (UTC) 2015-01-26 [2] FaceTime Incoming Video 02:33:45 Unknown 00:06:12 (UTC) 2015-01-26 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Cancelled Video 22:51:26 (UTC) ypted Blob> ) 2015-01-26 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Cancelled Video 22:51:26 (UTC) ypted Blob> ) 2015-01-28 22:04:39 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video Cancelled (UTC) ypted Blob> ) 2015-01-28 22:O4:39 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video Cancelled (UTC) ypted Blob> ) EFTA01217418  2015-01-28 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 22:13:50 (UTC) ypted Blob> ) Cancelled 2015-01-28 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video 22:13:50 Cancelled (UTC) ypted Blob> ) 22:22:00 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video 22 22:22:00 ( Cancelled ypted Blob> ) 2015-01-28 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 22:22:00 (UTC) ypted Blob> ) Cancelled 2 -28 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Cancelled Video 22:22:24 (UTC) ypted Blob> ) 2015-01-28 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video Cancelled 22:22:24 (UTC) ypted Blob> ) 2015-01-28 <Encrypted Blob> ( <Encr 00:17:08 FaceTime Incoming Video 22:24:39 (UTC) ypted Blob> ) 2015-01-28 <Encrypted Blob> ( <Encr 00:17:08 [2] FaceTime Incoming Video 22:24:39 (UTC) ypted Blob> ) [2] 2015-02-04 <Encrypted Blob> ( <Encr iPhone Incoming Phone 00:00:14 [3] (UTC) ypted Blob> ) [1] 2015-02-04 <Encrypted Blob> ( <Encr iPhone Incoming Phone 00:00:14 [3] (UTC) ypted Blob> ) [1] 2015-02-04 iPhone Incoming Phone Unknown 00:00:08 [3] (UTC) [2] 2015-02-04 iPhone Incoming Phone Unknown 00:00:08 [3] (UTC) [2] 2015-02-22 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Audio 00:33:20 Missed [3] (UTC) ypted Blob> ) 2015-02-22 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Audio 00:38:25 Missed (UTC) ypted Blob> ) 2015-02-22 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Audio 00:38:25 Missed (UTC) ypted Blob> ) 2015-02-22 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Audio 00:38:25 Missed (UTC) ypted Blob> ) 09:2015-02-22 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Audio 53:43 Cancelled (UTC) ypted Blob> ) 09:2015-02-22 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Audio 53:43 Cancelled (UTC) ypted Blob> ) 2015-02-22 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Audio 09:53:43 (urc) Cancelled ypted Blob> ) 2015-02-22 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Audio 10:00:00 Cancelled (UTC) ypted Blob> ) 2015-02-22 <Encrypted Blob> ( <Encr 00:00:11 iPhone Incoming Phone (UTC) ypted Blob> ) 2015-02-22 <Encrypted Blob> ( <Encr iPhone Incoming Phone 00:00:11 (UTC) ypted Blob> ) 2015-02-23 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video Cancelled 12:08:16 (UTC) ypted Blob> ) 2015-02-23 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video Cancelled 12:08:16 (UTC) ypted Blob> ) EFTA01217419  2015-02-23 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 12:18:47 Cancelled (UTC) ypted Blob> ) 2015-02-23 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video 12:18:47 Cancelled (UTC) ypted Blob> ) 2015-02-23 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Audio 18:13:57 Missed (UTC) ypted Blob> ) 2015-02-23 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Audio 18:13:57 Missed (UTC) ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 22:33:03 Missed (UTC) ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 22:33:03 Missed (UTC) ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 22:33:03 Missed [3] (UTC) ypted Blob> ) [2] 2015-02-24 <Encrypted Blob> ( <Encr 00:00:00 [3] FaceTime Incoming Video 22:33:20 arc) ypted Blob> ) [2] 2015-02-24 <Encrypted Blob> ( <Encr 00:00:00 [3] FaceTime Incoming Video 22:33:20 arc) ypted Blob> ) [2] 2015-02-24 <Encrypted Blob> ( <Encr 00:00:00 [3] FaceTime Incoming Video 22:33:20 (um Missed ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr 00:00:17 [1] FaceTime Outgoing Video 22:34:15 (UTC) ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr 00:00:17 [2] FaceTime Outgoing Video 22:34:15 arm ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 22:35:18 00:00:13 (UTC) ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr 00:00:13 [2] FaceTime Outgoing Video 22:35:18 (UTC) ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 22:30:24 (UTC) ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 22:30:24 arm ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video arm [3] 22:39:24 ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 22:40:06 [3] (UTC) ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 22:40:06 (UTC) ypted Blob> ) 2015-02-24 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 22:40:06 (UTC) ypted Blob> ) 2015-02-25 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 16:44:40 (UTC) ypted Blob> ) 2015-02-25 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 16:44:40 (UTC) ypted Blob> ) 2015-02-25 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 17:44:50 (UTC) ypted Blob> ) 2015-02-25 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 17:44:50 (UTC) ypted Blob> ) EFTA01217420  2015-02-25 <Encrypted Blob> ( <Encr [2] iPhone Incoming Phone 19:46:39 00:00:00 (UTC) ypted Blob> ) 2015-02-25 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone (UTC) ypted Blob> ) 00:00:00 2015-02-26 [1] FaceTime Incoming Video 16:26:07 (UTC) Unknown 00:00:24 2015-02-26 [2] FaceTime Incoming Video 16:26:07 Unknown 00:00:24 (UTC) 2015-02-26 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 16:27:27 (UTC) ypted Blob> ) 00:00:19 2015-02-26 <Encrypted Blob> ( <Encr 00:00:19 [2] FaceTime Incoming Video 16:27:27 (UTC) ypted Blob> ) 2015-02-26 <Encrypted Blob> ( <Encr 00:00:09 [1] FaceTime Outgoing Video 16:28:08 (UTC) ypted Blob> ) 2015-02-26 <Encrypted Blob> ( <Encr 00:00:09 [2] FaceTime Outgoing Video 16:28:08 (UTC) ypted Blob> ) 2015-02-26 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-02-26 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-02-27 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-02-27 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-02-27 [1] iPhone Incoming Phone Unknown ( Unknown ) 00:00:00 (UTC) 2015-02-27 [2] iPhone Incoming Phone Unknown ( Unknown ) 00:00:00 (UTC) 2015-02-27 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-02-27 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-02-28 <Encrypted Blob> ( <Encr 00:00:30 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-02-28 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 00:00:30 (UTC) ypted Blob> ) 2015-02-28 [2] iPhone Incoming Phone Unknown 00:00:00 (UTC) 2015-02-28 [1] iPhone Incoming Phone Unknown 00:00:00 (UTC) 2015-02-28 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-02-28 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-03-01 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-03-01 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 11:18:40 (UTC) ypted Blob> ) EFTA01217421  2015-03-01 [1] iPhone Incoming Phone 11:42:00 aiTC) Unknown ( Unknown ) 00:00:00 Missed 2015-03-01 [2] iPhone Incoming Phone Unknown ( Unknown ) 00:00:00 Missed 11:42:00 aiTC) 2015-03-09 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-03-09 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 18:04:40 arm ypted Blob> ) 2015-03-09 [1] iPhone Incoming Phone 19:00:47 arm Unknown 00:00:00 Missed 2015-03-09 [2] iPhone Incoming Phone 1 9:00:47 (um Unknown 00:00:00 Missed 2015-03-09 <Encrypted Blob> ( <Encr 00:00:12 [2] iPhone Incoming Phone 19:32:44 (UTC) ypted Blob> ) 2015-03-09 <Encrypted Blob> ( <Encr 00:00:12 [1] iPhone Incoming Phone 19:32:44 arm ypted Blob> ) 2015-03-09 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:02:10 21:36:10 (UTC) ypted Blob> ) 2015-03-09 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:02:10 21:36:10 (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 2015-03-13um 14:34:29 ( Missed ypted Blob> ) 2015-03-13 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 14:34:29 (UTC) ypted Blob> ) Missed Notes [1] Source Device NYCO24371.dmg/Macintosh HD [1] Source File /Users/Jeffrey/Library/Application Support/CallHistotyDB/CallHistory.storedata [2] Source Device /Macintosh HD [2] Source File /Users/Jeffrey/Library/Application Support/CallHistotyDB/CallHistory.storedata [3] Recovered Record Case Data: Calls (1-100 of 936) Case Data: Calls (201-300 of 936) EFTA01217422