EFTA01208377.pdf

• Menu o Overview o Device Details • NYC024365.aff4 (Evidence ID: NYC024365.aff4 - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Case Data: Calls (201-300 of 677) Duration Service Direction Type Date Contacts Status (HH:MM:SS) 2019-06-03 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 10:23:14 (urc) ypted Blob> ) Cancelled 2019-06-03 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 10:32:37 (f/t) ypted Blob> ) Cancelled 2019-06-03 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 17:27:44 (UTC) ypted Blob> ) Cancelled 2019-06-03 <Encrypted Blob> ( <Encr 00:07:09 [1] FaceTime Outgoing Video 18:09:42 (UTC) ypted Blob> ) 2019-06-04 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 16:37:36 (UTC) ypted Blob> ) 00:09:22 2019-06-04 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 17:33:04 (UTC) ypted Blob> ) Cancelled 2019-06-04 <Encrypted Blob> ( <Encr 00:01:32 [1] FaceTime Outgoing Video 17:33:39 (UTC) ypted Blob> ) 2019-06-06 [1] FaceTime Incoming Video 09:29:06 (UTC) Unknown 00:00:00 Missed 2019-06-06 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 09:47:02 (UTC) ypted Blob> ) Cancelled 2019-06-06 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 09:47:08 (f/t) ypted Blob> ) Cancelled 2019-06-06 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 09:47:33 (UTC) ypted Blob> ) 2019-06-06 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 21:49:28 (UTC) ypted Blob> ) Missed 2 -06 <Encrypted Blob> ( <Encr 00:00:51 [1] FaceTime Outgoing Video 21:50:41 (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Audio 19:44:56 (UTC) ypted Blob> ) Missed 2019-06-10 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Audio 19:47:58 (UTC) ypted Blob> ) 00:00:10 2019-06-10 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Audio 19:48:15 (UTC) ypted Blob> ) 00:00:49 EFTA01208377  2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video Cancelled 12:41:02 (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 18:35:20 Cancelled (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 18:35:41 GHQ Cancelled ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 23:12:13 Cancelled (UTC) ypted Blob> ) 2019-06-12 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 09:52:21 (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 2019-06-15um 10:42:58 ( Cancelled ypted Blob> ) 19-06-15 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 2010:44:16 Missed (UTC) ypted Blob> ) 2019-06-15 <Encrypted Blob> ( <Encr 00:01:45 FaceTime Outgoing Video 10:52:12 arm ypted Blob> ) 2019-06-15 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video Missed 11:29:50 (UTC) ypted Blob> ) 2019-06-15 <Encrypted Blob> ( <Encr FaceTime Incoming Video 00:00:08 12:05:11 (UTC) ypted Blob> ) 2019-06-16 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 09:43:20 00:01:12 (UTC) ypted Blob> ) 2009:44:0906-16 19- <Encrypted Blob> ( <Encr FaceTime Outgoing Video 00:01:12 (UTC) ypted Blob> ) 2019-06-16 <Encrypted Blob> ( <Encr 00:00:09 FaceTime Outgoing Video 10:04:37 arm ypted Blob> ) 2019-06-16 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 11:07:11 00:22:27 (UTC) ypted Blob> ) 2019-06-16 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 13:55:42 Cancelled (UTC) ypted Blob> ) 2019-06-16 <Encrypted Blob> ( <Encr 00:00:11 FaceTime Incoming Video 13:58:34 (UTC) ypted Blob> ) 2019-06-16 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 14:26:54 00:03:10 (UTC) ypted Blob> ) 2019-06-16 <Encrypted Blob> ( <Encr 00:29:58 FaceTime Outgoing Video 18:52:18 (UTC) ypted Blob> ) 2019-06-16 <Encrypted Blob> ( <Encr 00:00:13 FaceTime Incoming Video 19:25:10 (UTC) ypted Blob> ) 2019-06-16 <Encrypted Blob> ( <Encr 00:17:21 FaceTime Outgoing Video 19:25:38 (UTC) ypted Blob> ) 2019-06-16 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video Cancelled 21:11:01 (UTC) ypted Blob> ) 2019-06-16 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 21:12:34 (UTC) ypted Blob> ) 2019-06-17 FaceTime Outgoing Video Unknown 00:06:32 11:33:20 (UTC) 2019-06-17 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video Missed 11:39:10 (UTC) ypted Blob> ) EFTA01208378  2019-06-17 FaceTime Outgoing Video Unknown 00:06:32 11:39:14 (UTC) 2019-06-17 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 00:00:00 Cancelled 11:45:57 (UTC) ypted Blob> ) 2019-06-17 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video Cancelled 11:46:07 (UTC) ypted Blob> ) 2019-06-17 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video Missed 11:46:18 (UTC) ypted Blob> ) 2019-06-17 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video Cancelled 11:46:22 (UTC) ypted Blob> ) 2019-06-17 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video Missed 11:46:36 (UTC) ypted Blob> ) 2019-06-17 <Encrypted Blob> ( <Encr 00:10:29 FaceTime Outgoing Video 11:46:40 (UTC) ypted Blob> ) 2019-06-17 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 14:35:56 Cancelled (UTC) ypted Blob> ) Video 2019-06-17 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Cancelled 20:24:08 (UTC) ypted Blob> ) 20 20:32:39 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 20:32:39 ( Cancelled ypted Blob> ) 2019-06-17 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 20:33:34 Cancelled (UTC) ypted Blob> ) 2019-06-17 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video 20:34:31 (UTC) ypted Blob> ) 2019-06-17 <Encrypted Blob> ( <Encr 00:42:33 FaceTime Outgoing Video 20:34:48 (UTC) ypted Blob> ) 2019-06-18 <Encrypted Blob> ( <Encr iPhone Outgoing Phone 00:00:02 (UTC) ypted Blob> ) 2019-06-18 iPhone Outgoing Phone Unknown ( Unknown ) 00:00:02 (UTC) 2019-06-18 iPhone Outgoing Phone Unknown 00:01:36 (UTC) 2019-06-18 iPhone Incoming Phone Unknown 00:00:31 (UTC) 2019-06-18 <Encrypted Blob> ( <Encr 00:04:45 iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-06-18 <Encrypted Blob> ( <Encr 00:00:03 iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-06-18 <Encrypted Blob> ( <Encr 00:00:03 iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-06-18 iPhone Outgoing Phone Unknown 00:04:45 (UTC) 2019-06-18 <Encrypted Blob> ( <Encr iPhone Outgoing Phone 00:00:01 (UTC) ypted Blob> ) 2019-06-18 iPhone Incoming Phone Unknown 00:07:22 (UTC) 2019-06-18 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) EFTA01208379  2019-06-18 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2019-06-18 <Encrypted Blob> ( <Encr 00:00:39 iPhone Incoming Phone 18:06:40 (UTC) ypted Blob> ) 2019-06-18 <Encrypted Blob> ( <Encr 00:00:13 FaceTime Incoming Video 18:52:16 (UTC) ypted Blob> ) 2019-06-18 iPhone Incoming Phone arm Unknown 00:01:22 2019-06-18 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2019-06-18 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2 -18 <Encrypted Blob> ( <Encr 00:01:45 FaceTime Outgoing Video 21:05:07 (UTC) ypted Blob> ) 2 -18 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video Cancelled 21:09:24 (UTC) ypted Blob> ) 2 -18 <Encrypted Blob> ( <Encr 00:01:45 FaceTime Outgoing Video 21:10:00 (UTC) ypted Blob> ) 2019-06-18 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Cancelled Video 21:10:14 (UTC) ypted Blob> ) 2 -18 <Encrypted Blob> ( <Encr 00:00:00 [I] FaceTime Incoming Video Missed 21:11:06 (UTC) ypted Blob> ) 2 -18 <Encrypted Blob> ( <Encr [I] FaceTime Outgoing Video 00:08:29 21:21:49 (UTC) ypted Blob> ) [1] 2019-06-18 <Encrypted Blob> ( <Encr iPhone Incoming Phone 00:03:41 [2] (UTC) ypted Blob> ) [1] 2019-06-18 <Encrypted Blob> ( <Encr iPhone Incoming Phone 00:00:05 [2] (UTC) ypted Blob> ) [1] 2019-06-18 <Encrypted Blob> ( <Encr 00:05:57 iPhone Outgoing Phone [2] (UTC) ypted Blob> ) [1] 2019-06-18 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed [2] (UTC) ypted Blob> ) [1] 2019-06-18 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed [2] (UTC) ypted Blob> ) [1] 2019-06-19 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed [2] (UTC) ypted Blob> ) [1] 2019-06-19 iPhone Outgoing Phone Unknown 00:00:12 [2] (UTC) [1] 2019-06-19 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed [2] (UTC) ypted Blob> ) [1] 2019-06-19 <Encrypted Blob> ( <Encr 00:11:47 iPhone Incoming Phone [2] (UTC) ypted Blob> ) [1] 2019-06-19 <Encrypted Blob> ( <Encr 00:11:47 iPhone Incoming Phone [2] (UTC) ypted Blob> ) [1] 2019-06-19 <Encrypted Blob> ( <Encr 00:01:07 iPhone Outgoing Phone [2] (UTC) ypted Blob> ) [1] 2019-06-19 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed [2] (UTC) ypted Blob> ) EFTA01208380 [1] iPhone 2019-06-19 <Encrypted Blob> ( <Encr 00:00:00 Incoming Phone Missed [2] (UTC) ypted Blob> ) [1] 2019-06-19 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incomin8 Phone Missed [2] 19:23:20 (UTC) ypted Blob> ) [1] 2019-06-19 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed [2] 20:13:20 (UTC) ypted Blob> ) [1] 2019-06-19 iPhone Outgoing Phone Unknown 00:00:14 [2] 20:46:40 (UTC) [1] 2019-06-19 <Encrypted Blob> ( <Encr 00:00:04 iPhone Outgoing Phone [2] 22:10:00 (UTC) ypted Blob> ) 2019-06-19 [1] FaceTime Outgoing Video Unknown 00:10:14 22:15:53 (UTC) [1] 2019-06-20 <Encrypted Blob> ( <Encr 00:01:07 iPhone Incoming Phone [2] 09:00:00 (UTC) ypted Blob> ) [1] 2019-06-20 <Encrypted Blob> ( <Encr 00:01:07 iPhone Incoming Phone [2] 09:00:00 (UTC) ypted Blob> ) [1] 2019-06-20 <Encrypted Blob> ( <Encr 00:03:55 iPhone Incoming Phone [2] 10:06:40 (UTC) ypted Blob> ) [1] 2019-06-20 <Encrypted Blob> ( <Encr iPhone Outgoing Phone 00:01:28 [2] 12:03:20 (UTC) ypted Blob> ) 2019-06-20 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 12:21:47 (UTC) ypted Blob> ) 2019-06-20 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 00:02:48 13:42:54 (UTC) ypted Blob> ) Notes [1] Source Device NYC024365.aff4/Macintosh HD [1] Source File /Users/Jeffrey/Library/Application Support/CallHistotyDB/CallHistory.storedata [2] Recovered Record Case Data: Calls (101-200 of 677) Case Data: Calls (301-400 of 677) EFTA01208381