EFTA01217428.pdf

• Menu o Overview o Device Details • NYC024371.dmg (Evidence ID: NYC024371.dmg - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Case Data: Calls (301-400 of 936) Duration Service Direction Type Date Contacts Status (HH:MM:SS) 2015-05-11 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 23:16:45 (UTC) ypted Blob> ) Missed 2015-05-11 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Incoming Video 23:16:45 Missed (UTC) ypted Blob> ) 2015-05-11 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed 2015-05-11 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 23:17:20 Missed (UTC) ypted Blob> ) 2015-05-12 <Encrypted Blob> ( <Encr 00:00:00 [I iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-12 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 17:20:23 (f/t) ypted Blob> ) 2015-05-12 [1] iPhone Incoming Phone 17:25:37 Unknown 00:00:00 (UTC) 2015-05-12 [2] iPhone Incoming Phone 17:25:37 Unknown 00:00:00 (UTC) 2015-05-12 <Encrypted Blob> ( <Encr 00:00:00 [I iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-12 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 17:29:05 (f/t) ypted Blob> ) 2015-05-12 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 19:06:27 (UTC) ypted Blob> ) 2015-05-12 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 19:06:27 (UTC) ypted Blob> ) 2015-05-12 <Encrypted Blob> ( <Encr 00:00:00 [I iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-12 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 22:20:00 (f/t) ypted Blob> ) 22 22:23: 5- <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 22:23:58 58 ( Missed ypted Blob> ) 2015-05-12 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed EFTA01217428  2015-05-14 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-14 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-14 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-14 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-17 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-17 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-17 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 14:39:42 (UTC) ypted Blob> ) 2015-05-17 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-17 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 19:00:46 (UTC) ypted Blob> ) 2015-05-17 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-28 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-28 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-29 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-05-29 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-05-29 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-29 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-05-29 <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video 17:58:21 Cancelled (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 2015-05-29urc) 17:58:21 ( Cancelled ypted Blob> ) 2015-05-29 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-05-29 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed 2015-05-29 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-05-29 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed 201 57-2(u9 [2] iPhone Incoming Phone 21:.. Unknown 00:00:00 Missed 151-0:5 (UTC) 201 57-2(u9 [1] iPhone Incoming Phone 21:.. 151-0:5 (UTC) Unknown 00:00:00 Missed EFTA01217429  2015-05-31 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-05-31 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2015-06-02 iPhone Incoming Phone Unknown 00:00:00 (UTC) 2015-06-02 iPhone Incoming Phone Unknown 00:00:00 (UTC) 2015-06-10 iPhone Incoming Phone Unknown 00:00:00 Missed (UTC) 2015-06-10 iPhone Incoming Phone Unknown 00:00:00 Missed (UTC) 2015-06-11 iPhone Incoming Phone 23:29:04 Unknown ( Unknown ) 00:00:00 (UTC) 2015-06-11 iPhone Incoming Phone 23:29:04 Unknown ( Unknown ) 00:00:00 (UTC) 2015-06-13 iPhone Incoming Phone Unknown 00:00:00 (UTC) 2015-06-13 iPhone Incoming Phone Unknown 00:00:00 (UTC) 2015-06-13 <Encrypted Blob> ( <Encr 00:00:28 iPhone Incoming Phone (UTC) ypted Blob> ) 2015-06-13 <Encrypted Blob> ( <Encr 00:00:28 iPhone Incoming Phone (UTC) ypted Blob> ) 2015-06-13 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone (UTC) ypted Blob> ) 2015-06-13 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone (UTC) ypted Blob> ) 2015-06-22 iPhone Incoming Phone Unknown ( Unknown ) 00:00:00 (UTC) 2015-06-22 iPhone Incoming Phone Unknown ( Unknown ) 00:00:00 (UTC) 2015-06-22 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 13:03:20 00:08:22 (UTC) ypted Blob> ) 2015-06-22 <Encrypted Blob> ( <Encr FaceTime Incoming Video 00:00:00 Missed 13:11:04 (UTC) ypted Blob> ) 2015-06-22 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Incoming Video Missed 13:11:04 (UTC) ypted Blob> ) 2015-06-22 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 00:08:22 13:11:36 (UTC) ypted Blob> ) 2015-06-22 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 00:08:22 13:11:36 (UTC) ypted Blob> ) 2015-06-22 <Encrypted Blob> ( <Encr FaceTime Outgoing Video 00:08:22 13:11:36 (UTC) ypted Blob> ) 2015-06-22 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 13:20:43 Cancelled (UTC) ypted Blob> ) 2015-06-22 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 13:20:43 Cancelled (UTC) ypted Blob> ) EFTA01217430  2015-06-22 <Encrypted Blob> ( <Encr 00:05:38 [1] FaceTime Incoming Video 13:20:55 (UTC) ypted Blob> ) 2015-06-22 <Encrypted Blob> ( <Encr 00:05:38 [2] FaceTime Incoming Video 13:20:55 (UTC) ypted Blob> ) 2015-06-28 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 15:26:54 Missed (UTC) ypted Blob> ) 2015-06-28 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Missed 2015-07-13 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 17:19:30 (UTC) ypted Blob> ) Cancelled <Encrypted Blob> ( <Encr 00:00:00 [2] FaceTime Outgoing Video 2015-07-13um 17:19:30 ( Cancelled ypted Blob> ) 2015-07-21 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 00:22:47 (UTC) ypted Blob> ) Missed 2015-07-21 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone Missed 00:22:47 (UTC) ypted Blob> ) 2015-08-02 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 00:00:19 (UTC) ypted Blob> ) 2015-08-02 <Encrypted Blob> ( <Encr 00:00:19 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-08-02 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-08-02 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-08-06 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-08-06 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-08-06 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-08-06 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone (UTC) ypted Blob> ) 2015-08-07 <Encrypted Blob> ( <Encr [2] iPhone Incoming Phone 00:00:24 (UTC) ypted Blob> ) 2015-08-07 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 00:00:24 (UTC) ypted Blob> ) 2015-08-07 [2] iPhone Incoming Phone Unknown 00:00:00 Missed (UTC) 2015-08-07 [1] iPhone Incoming Phone Unknown 00:00:00 Missed (UTC) 2015-08-11 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 17:33:15 (UTC) ypted Blob> ) 2015-08-11 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 17:33:15 (UTC) ypted Blob> ) 2015-08-11 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 19:15:09 (UTC) ypted Blob> ) 2015-08-11 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 19:15:09 (UTC) ypted Blob> ) EFTA01217431  2015-08-12 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 21:53:15 Missed (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 2015-08-12um 21:53:15 ( Missed ypted Blob> ) 22 22:27:41 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 22:27:41 ( ypted Blob> ) 2015-08-18 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 22:27:41 (UTC) ypted Blob> ) 2015-08-18 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 23:10:32 Missed (UTC) ypted Blob> ) 2015-08-18 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 23:10:32 Missed (UTC) ypted Blob> ) 2015-08-20 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 15:34:37 (UTC) ypted Blob> ) 2015-08-20 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 15:34:37 (irc) ypted Blob> ) 2015-08-20 <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 18:02:29 Missed (UTC) ypted Blob> ) 2015-08-20 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (um Missed ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 [2] iPhone Incoming Phone 2015-09-13um 20:57:08 ( ypted Blob> ) 2015-09-13 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 20:57:08 (UTC) ypted Blob> ) Notes [1] Source Device NYCO24371.dmg/Macintosh HD [1] Source File /Users/Jeffrey/Library/Application Support/CallHistotyDB/CallHistory.storedata [2] Source Device /Macintosh HD [2] Source File /Users/Jeffrey/Library/Application Support/CallHistotyDB/CallHistory.storedata [3] Recovered Record Case Data: Calls (201-300 of 936) Case Data: Calls (401-500 of 936) EFTA01217432