EFTA01217443.pdf

• Menu o Overview o Device Details • NYC024371.dmg (Evidence ID: NYC024371.dmg - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Case Data: Calls (601-700 of 936) Duration Service Direction Twe Date Contacts Status (HH:MM:SS) <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 2016-07-16 Cancelled 11:00:31 (UTC) ypted Blob> ) 2016-07-16 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video Cancelled 11:00:31 (UTC) ypted Blob> ) 2016-07-16 [2] FaceTime Outgoing Video Unknown 00:00:00 Cancelled 2101:1061:0573-1(u6TC) [1] FaceTime Outgoing Video Unknown 00:00:00 Cancelled 2101:1061:0573-1(u6TC) <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:26:12 2101:1068:0273-1(u6TC) ypted Blob> ) <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:26:12 11:08:23 (UTC) ypted Blob> ) 2016-07-16 [1] iPhone Incoming Phone Unknown 00:00:00 14:54:38 (UTC) 2016-07-16 [2] iPhone Incoming Phone Unknown 00:00:00 14:54:38 (UTC) 2016-07-16 <Encrypted Blob> ( <Encr 00:00:06 [1] FaceTime Outgoing Video 2105:1266-0:578-1(6uTC) ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:06 [2] FaceTime Outgoing Video 15:26:58 (UTC) ypted Blob> ) 2016-07-16 <Encrypted Blob> ( <Encr 00:18:59 FaceTime incoming Video 15:30:02 (UTC) ypted Blob> ) 2016-07-16 <Encrypted Blob> ( <Encr 00:18:59 FaceTime incoming Video 15:30:02 (UTC) ypted Blob> ) 2016-07-16 <Encrypted Blob> ( <Encr 00:18:59 FaceTime incoming Video 15:30:02 (UTC) ypted Blob> ) 2016-07-16 <Encrypted Blob> ( <Encr 00:18:59 FaceTime incoming Video 15:33:20 (UTC) ypted Blob> ) 2016-07-16 <Encrypted Blob> ( <Encr 00:00:00 FaceTime incoming Video Missed 17:15:05 (UTC) ypted Blob> ) 2016-07-16 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime incoming Video Missed 17:15:05 (UTC) ypted Blob> ) EFTA01217443  2016-07-16 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 17:27:10 (UTC) ypted Blob> ) 2016-07-16 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 17:27:10 (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 2016-07-16um 18:00:25 ( ypted Blob> ) 2016-07-16 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2016-07-16 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 18:06:52 arm ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 2016-07-16um 18:06:52 ( ypted Blob> ) 2016-07-16 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 18:10:57 (UTC) ypted Blob> ) 2016-07-16 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 18:10:57 (UTC) ypted Blob> ) 2016-07-17 [2] FaceTime Outgoing Video Unknown 00:00:00 Cancelled 11:07:15 (UTC) 2016-07-17 FaceTime Outgoing Video Unknown 00:00:00 Cancelled 11:07:15 (UTC) 2016-07-17 FaceTime Outgoing Video Unknown 00:05:58 11:08:04 (UTC) 2016-07-17 FaceTime Outgoing Video Unknown 00:05:58 11:08:04 (UTC) 2016-07-17 <Encrypted Blob> ( <Encr 00:02:04 FaceTime Incoming Video 11:36:24 (UTC) ypted Blob> ) 2016-07-17 <Encrypted Blob> ( <Encr 00:02:04 FaceTime Incoming Video 11:36:24 (UTC) ypted Blob> ) 2016-07-17 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone 2016-07-17 14:02:27 (UTC) ypted Blob> ) 2016-07-17 iPhone Incoming Phone Unknown 00:00:00 (UTC) 2016-07-17 iPhone Incoming Phone Unknown 00:00:00 (UTC) 2016-07-17 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone (UTC) ypted Blob> ) 2016-07-17 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone (UTC) ypted Blob> ) 2016-07-17 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2016-07-17 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2016-07-17 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone (UTC) ypted Blob> ) 2016-07-17 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone (UTC) ypted Blob> ) EFTA01217444  2016-07-17 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 18:07:23 (UTC) ypted Blob> ) 00:00:00 Cancelled 2016-07-17 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 18:07:23 00:00:00 Cancelled (UTC) ypted Blob> ) 2016-07-17 [2] FaceTime Outgoing Video 18:07:47 Unknown 00:00:00 Cancelled (UTC) 2016-07-17 [1] FaceTime Outgoing Video 18:07:47 (UTC) Unknown 00:00:00 Cancelled 2016-07-17 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 18:07:58 00:00:00 Cancelled (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 2016-07-17um 18:07:58 ( ypted Blob> ) 00:00:00 Cancelled 2016-07-17 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed 18:08:18 (UTC) ypted Blob> ) 2016-07-17 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed 18:08:18 (UTC) ypted Blob> ) 2016-07-17 <Encrypted Blob> ( <Encr 00:15:40 [1] FaceTime Incoming Video 18:11:51 (UTC) ypted Blob> ) 2016-07-17 <Encrypted Blob> ( <Encr 00:15:40 [2] FaceTime Incoming Video 18:11:51 (UTC) ypted Blob> ) 2016-07-17 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 23:58:11 Missed (UTC) ypted Blob> ) 2016-07-17 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 23:58:11 Missed (UTC) ypted Blob> ) 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 2016-07-18um 01:58:22 ( Missed ypted Blob> ) 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 10:04:32 Gym) Missed ypted Blob> ) 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 10:04:32 (UTC) ypted Blob> ) Missed 2016-07-18 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 12:16:03 (UTC) ypted Blob> ) 00:07:18 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 2016-07-18um 12:16:03 ( 00:07:18 ypted Blob> ) 2016-07-18 [2] iPhone Incoming Phone 12:38:18 Unknown 00:00:00 Missed (UTC) 2016-07-18 [1] iPhone Incoming Phone 12:38:18 (UTC) Unknown 00:00:00 Missed 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 13:04:01 Missed (UTC) ypted Blob> ) 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 13:04:01 (UTC) ypted Blob> ) Missed <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 2016-07-18um 13:37:19 ( Missed ypted Blob> ) 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone arm ypted Blob> ) Missed EFTA01217445  2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed 13:44:04 (UTC) ypted Blob> ) 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 14:08:00 (UTC) ypted Blob> ) Missed 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed 14:08:00 (UTC) ypted Blob> ) 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2016-07-18 [2] iPhone Incoming Phone Unknown 00:00:00 Missed (UTC) 2016-07-18 [1] iPhone Incoming Phone (UTC) Unknown 00:00:00 Missed 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2016-07-18 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2016-07-19 [1] iPhone Incoming Phone (UTC) Unknown 00:00:00 Missed 2016-07-19 [2] iPhone Incoming Phone Unknown 00:00:00 Missed 02:14:21 (UTC) 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed (UTC) ypted Blob> ) EFTA01217446  2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 15:44:33 (UTC) ypted Blob> ) 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2016-07-19 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 17:59:49 (UTC) ypted Blob> ) 2 -20 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:03:12 21:52:23 (UTC) ypted Blob> ) 2 -20 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:03:12 21:52:23 (UTC) ypted Blob> ) 07-21 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 2016-47: : 04 Missed 09 (UTC) ypted Blob> ) 07-21 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 2016-47: : 04 Missed 09 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video Missed 11:14:45 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video Missed 11:14:45 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 11:15:35 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 11:15:35 (UTC) ypted Blob> ) Notes [1] Source Device NYC024371.dmg/Macintosh HD [1] Source File /Users/Jeffrey/Library/Application Support/CallHistotyDB/CallHistory.storedata [2] Source Device /Macintosh HD [2] Source File /Users/Jeffrey/Library/Application SupportlCallHistoryDB/CallHistory.storedata [3] Recovered Record Case Data: Calls (501-600 of 936) Case Data: Calls (701-800 of 936) EFTA01217447