EFTA01217448.pdf

• Menu o Overview o Device Details • NYC024371.dmg (Evidence ID: NYC024371.dmg - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Case Data: Calls (701-800 of 936) Duration Service Direction Type Date Contacts Status (HH:MM:SS) 2016-07-21 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 12:45:09 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 12:45:09 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:00:00 Cancelled 12:59:43 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:00 Cancelled 12:59:43 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 16:40:18 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 16:40:18 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:00:00 Cancelled 20:15:34 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:00 Cancelled 20:15:34 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:36 20:18:25 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:00:36 20:18:25 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing 00:00:00 Cancelled Vide. 20:22:07 (UTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:00:00 Cancelled 20:22:07 (UTC) ypted Blob> ) . 2016-07-21 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:03:29 21:51:51 (..uTC) ypted Blob> ) 2016-07-21 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:03:29 21:51:51 (uTC) ypted Blob> ) . 2016-07-21 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:07:48 21:57:19 (..uTC) ypted Blob> ) . 2016-07-21 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:07:48 21:57:19 (..uTC) ypted Blob> ) EFTA01217448  2016-07-24 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:03:52 11:00:51 (UTC) ypted Blob> ) 2016-07-24 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:03:52 11:00:51 (UTC) ypted Blob> ) 2016-07-24 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 11:19:47 00:00:34 (UTC) ypted Blob> ) 2016-07-24 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 11:19:47 00:00:34 (UTC) ypted Blob> ) 2016-07-24 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:10:54 11:21:26 (UTC) ypted Blob> ) 2016-07-24 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:10:54 11:21:26 (UTC) ypted Blob> ) 2016-07-25 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 11:57:09 00:05:24 (UTC) ypted Blob> ) 2016-07-25 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 11:57:09 00:05:24 (UTC) ypted Blob> ) 2016-07-26 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 04:03:59 (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 20164)7-26 00:00:00 Missed 04:03:59 (UTC) ypted Blob> ) 2016-07-29 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 17:27:03 (UTC) ypted Blob> ) 2016-07-29 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 17:27:03 (UTC) ypted Blob> ) 2016-07-29 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 18:56:09 (UTC) ypted Blob> ) 2016-07-29 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 18:56:09 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:00 Cancelled 01:37:54 (uTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:00:00 Cancelled 01:37:54 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:00 Cancelled 01:46:44 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:00:00 Cancelled 01:46:44 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 01:46:51 (uTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 01:46:51 (uTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:03:20 01:47:05 (uTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:03:20 01:47:05 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:30 01:52:54 (uTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:00:30 01:52:54 (uTC) ypted Blob> ) EFTA01217449  2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:08:45 01:55:48 (uTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:08:45 01:55:48 ajTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 02:04:46 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 02:04:46 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:00:13 02:05:03 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:13 02:05:03 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing 00:01:31 Vide. 02:05:26 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing 00:01:31 Vide. 02:05:26 (UTC) ypted Blob> ) 2016-07-31 [2] FaceTime Incoming Video Unknown 00:00:00 02:07:32 (UTC) 2016-07-31 [1] FaceTime Incoming Video Unknown 00:00:00 02:07:32 (uTC) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:16:05 02:09:35 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:16:05 02:09:35 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:00:12 02:25:50 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:12 02:25:50 (UTC) ypted Blob> ) 2016-07-31 [1] FaceTime Outgoing Unknown 00:00:00 Cancelled Vide. 02:26:13 (UTC) Video2016-07-31 [2] FaceTime Outgoing Unknown 00:00:00 Cancelled 02:26:13 (UTC) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:00 Cancelled 13:33:47 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:00:00 Cancelled 13:33:47 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:54 13:34:08 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:54 13:34:08 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:34:48 16:55:51 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:34:48 16:55:51 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 19:01:31 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 19:01:31 (UTC) ypted Blob> ) EFTA01217450  2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:00 Cancelled 19:20:22 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:00:00 Cancelled 19:20:22 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:03:22 19:20:51 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:03:22 19:20:51 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 20:45:27 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 20:45:27 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:57 20:47:30 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 00:00:57 20:47:30 (UTC) ypted Blob> ) 2016-07-31 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:32 20:49:00 (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr [2] FaceTime Outgoing Video 20164)7-31 00:00:32 20:49:00 (UTC) ypted Blob> ) 2016-08-01 [2] FaceTime Incoming Video Unknown 00:00:00 Missed 17:51:28 (UTC) 2016-08-01 [1] FaceTime Incoming Video Unknown 00:00:00 Missed 17:51:28 (UTC) 2016-08-01 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Audio 00:00:00 18:15:41 (uTC) ypted Blob> ) . 2016-08-01 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Audio 00:00:00 18:15:41 (uTC) ypted Blob> ) 2016-08-02 [1] FaceTime Incoming Video Unknown 00:00:00 Missed 10:35:48 (UTC) 2016-08-02 Missed [2] FaceTime Incoming Video Unknown 00:00:00 10:35:48 (UTC) 2016-08-02 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 23:00:35 (UTC) ypted Blob> ) 2016-08-02 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 23:00:35 (UTC) ypted Blob> ) 2016-08-03 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 23:24:55 (UTC) ypted Blob> ) 2016-08-03 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 23:24:55 (UTC) ypted Blob> ) 2016-08-03 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 23:39:51 (UTC) ypted Blob> ) 2016-08-03 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 23:39:51 (UTC) ypted Blob> ) 2016-08-04 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 20:56:50 (UTC) ypted Blob> ) 2016-08-04 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 20:56:50 (UTC) ypted Blob> ) EFTA01217451  2016-08-06 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 11:09:56 00:09:34 (UTC) ypted Blob> ) 2016-08-06 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:09:34 11:09:56 (UTC) ypted Blob> ) 2016-08-11 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 02:30:50 (UTC) ypted Blob> ) 2016-08-11 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 02:30:50 (UTC) ypted Blob> ) 2016-08-12 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 14:54:42 (UTC) ypted Blob> ) 2016-08-12 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 14:54:42 (UTC) ypted Blob> ) 2016-08-12 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 19:14:03 (UTC) ypted Blob> ) 2016-08-12 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 19:14:03 (UTC) ypted Blob> ) 2016-08-12 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 19:59:18 (UTC) ypted Blob> ) 2016-08-12 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 19:59:18 (UTC) ypted Blob> ) 2016-08-14 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:00:00 Missed 12:13:58 (UTC) ypted Blob> ) 2016-08-14 <Encrypted Blob> ( <Encr [2] FaceTime Incoming Video 00:00:00 Missed 12:13:58 (UTC) ypted Blob> ) Notes [1] Source Device /Macintosh HD [1] Source File /Users/Jeffrey/Library/Application Support/CallHistotyDB/CallHistory.storedata [2] Source Device NYCO24371.dmg/Macintosh HD [2] Source File /UserslJeffreylLibrary/Application Support/CallHistoryDB/CallHistory.storedata Case Data: Calls (601-700 of 936) Case Data: Calls (801-900 of 936) EFTA01217452