EFTA01217433.pdf

• Menu o Overview o Device Details • NYC024371.dmg (Evidence ID: NYC024371.dmg - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Case Data: Calls (401-500 of 936) Duration Service Direction Type Date Contacts Status (HH:MM:SS) , 2015-09-14 <Encrypted Blob> ( <Encry [1] iPhone Incoming n r Hone 11:56:50 (UTC) 00:00:00 pted Blob> ) , 2015-09-14 <Encrypted Blob> ( <Encry [2] iPhone Incoming n r Hone 11:56:50 (UTC) 00:00:00 pted Blob> ) 2015-09-15 <Encrypted Blob> ( <Encry [1] iPhone Incoming Phone 00:00:29 (UTC) pted Blob> ) 2015-09-15 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 00:00:29 (UTC) pted Blob> ) 2015-09-15 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 09:54:08 (UTC) 00:01:31 pted Blob> ) 2015-09-15 <Encrypted Blob> ( <Encry [1] iPhone Incoming Phone 09:54:08 (UTC) 00:01:31 pted Blob> ) 2015-09-15 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 00:00:05 (UTC) pted Blob> ) 2015-09-15 <Encrypted Blob> ( <Encry [1] iPhone Incoming Phone 00:00:05 (UTC) pted Blob> ) 2015-09-15 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 12:09:40 (UTC) 00:00:00 pted Blob> ) 2015-09-15 <Encrypted Blob> ( <Encry [1] iPhone Incoming Phone 12:09:40 (UTC) 00:00:00 pted Blob> ) 2015-09-15 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) 2015-09-15 <Encrypted Blob> ( <Encry [1] iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) , 2015-09-16 <Encrypted Blob> ( <Encry [2] iPhone Incoming n r Hone 08:30:15 (UTC) 00:00:10 pted Blob> ) , 2015-09-16 <Encrypted Blob> ( <Encry [1] iPhone Incoming n r Hone 08:30:15 (UTC) 00:00:10 pted Blob> ) 2015-09-16 [1] iPhone Incoming Phone Unknown 00:00:00 (UTC) 2015-09-16 [2] iPhone Incoming Phone Unknown 00:00:00 (UTC) EFTA01217433  2015-09-16 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 00:00:00 11:46:03 (UTC) pted Blob> ) 2015-09-16 <Encrypted Blob> ( <Encry [1] iPhone Incoming Phone 00:00:00 11:46:03 (UTC) pted Blob> ) 2015-09-21 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 00:00:00 Missed 19:10:18 (UTC) pted Blob> ) 2015-09-21 <Encrypted Blob> ( <Encry [1] iPhone Incoming Phone 00:00:00 Missed 19:10:18 (UTC) pted Blob> ) 2 -23 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 00:00:00 Missed 21:49:10 (UTC) pted Blob> ) 2015-09-23 <Encrypted Blob> ( <Encry [1] iPhone Incoming Phone 21:49:10 (UTC) pted Blob> ) 00:00:00 Missed 2015-09-27 [2] iPhone Incoming Phone Unknown ( Unknown ) 00:00:00 Missed 15:01:10 (UTC) 2015-09-27 [1] iPhone Incoming Phone Unknown ( Unknown ) 00:00:00 Missed 15:01:10 (UTC) 2015-10-19 <Encrypted Blob> ( <Encry [2] FaceTime Outgoing Video 00:03:08 11:39:21 (UTC) pted Blob> ) 2015-10-19 <Encrypted Blob> ( <Encry [1] FaceTime Outgoing Video 00:03:08 11:39:21 (UTC) pted Blob> ) 2015-10-23 <Encrypted Blob> ( <Encry [1] FaceTime Outgoing Video 00:16:51 16:19:20 (UTC) pted Blob> ) 2015-10-23 <Encrypted Blob> ( <Encry [2] FaceTime Outgoing Video 00:16:51 16:19:20 (UTC) pted Blob> ) 2015-10-23 <Encrypted Blob> ( <Encry [2] FaceTime Incoming Video 00:00:37 18:02:45 (UTC) pted Blob> ) 2015-10-23 <Encrypted Blob> ( <Encry [1] FaceTime Incoming Video 00:00:37 18:02:45 (UTC) pted Blob> ) 2015-11-04 <Encrypted Blob> ( <Encry [1] FaceTime Outgoing Video 00:02:17 14:14:30 (UTC) pted Blob> ) 2015-11-04 <Encrypted Blob> ( <Encry [2] FaceTime Outgoing Video 00:02:17 14:14:30 (UTC) pted Blob> ) 2016-01-13 <Encrypted Blob> ( <Encry [2] FaceTime Outgoing 00:02:28 Video 22:46:46 (UTC) pted Blob> ) 2016-01-13 <Encrypted Blob> ( <Encry [1] FaceTime Outgoing Video 00:02:28 22:46:46 ont) pted Blob> ) 2016-04-25 <Encrypted Blob> ( <Encry [2] FaceTime Outgoing Video 15:33:57 ont) 00:01:05 pted Blob> ) 2016-04-25 <Encrypted Blob> ( <Encry [I] FaceTime Outgoing Video 15:33:57 ant) pted Blob> ) 00:01:05 2016-04-25 <Encrypted Blob> ( <Encry [I] FaceTime Outgoing Video 15:35:13 (UTC) pted Blob> ) 00:00:13 2016-04-25 <Encrypted Blob> ( <Encry [2] FaceTime Outgoing Video 15:35:13 00:00:13 (UTC) pted Blob> ) 2016-05-03 <Encrypted Blob> ( <Encry [I] FaceTime Incoming Video 21:20:20 (UTC) pted Blob> ) 00:00:00 Missed 2016-05-03 <Encrypted Blob> ( <Encry [2] FaceTime Incoming Video 00:00:00 Missed 21:20:20 (UTC) pted Blob> ) EFTA01217434  2016-05-04 <Encrypted Blob> ( <Encry iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-05-04 <Encrypted Blob> ( <Encry iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-05-04 <Encrypted Blob> ( <Encry iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) 2016-05-04 <Encrypted Blob> ( <Encry iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) 2016-05-04 <Encrypted Blob> ( <Encry iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-05-04 <Encrypted Blob> ( <Encry iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-05-04 iPhone Incoming Phone Unknown 00:00:00 (UTC) 2016-05-04 iPhone Incoming Phone Unknown 00:00:00 (UTC) 2016-05-04 iPhone Incoming Phone Unknown 00:00:00 Missed (UTC) 2016-05-04 iPhone Incoming Phone Unknown 00:00:00 Missed (UTC) 2016-05-14 <Encrypted Blob> ( <Encry FaceTime Incoming Video 15:52:47 00:00:00 Missed (UTC) pted Blob> ) 2016-05-14 <Encrypted Blob> ( <Encry FaceTime Incoming Video 15:52:47 00:00:00 Missed (UTC) pted Blob> ) 2016-05-14 <Encrypted Blob> ( <Encry FaceTime Incoming Video 15:52:47 00:00:00 Missed (UTC) pted Blob> ) 2016-05-14 <Encrypted Blob> ( <Encry FaceTime Incoming Video 15:53:20 00:00:00 Missed (UTC) pted Blob> ) 2016-05-21 <Encrypted Blob> ( <Encry FaceTime Incoming Video 15:20:34 00:00:00 (UTC) pted Blob> ) 2016-05-21 <Encrypted Blob> ( <Encry FaceTime Incoming Video 15:20:34 00:00:00 (UTC) pted Blob> ) 2016-05-24 <Encrypted Blob> ( <Encry iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-05-24 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-05-24 <Encrypted Blob> ( <Encry [1] iPhone Incoming Phone 00:00:00 Missed 21:00:29 (UTC) pted Blob> ) 2016-05-24 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 00:00:00 Missed 21:00:29 (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <Encry [I] FaceTime Incoming Video 09:59:27 00:00:36 (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <Encry [2] FaceTime Incoming Video 09:59:27 00:00:36 (UTC) pted Blob> ) 2 -25 <Encrypted Blob> ( <Encry [1] iPhone Incoming Phone 00:00:00 Missed 11:44:14 (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 00:00:00 Missed 11:44:14 (UTC) pted Blob> ) EFTA01217435  2016-05-25 <Encrypted Blob> ( <EncrY [1] iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [2] iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [1] iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [2] iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [2] iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [1] iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [2] iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [1] iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [2] iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [1] iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [2] iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [1] iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [1] iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) 2016-05-25 <Encrypted Blob> ( <EncrY [2] iPhone Incoming Phone 00:00:00 17:46:20 (UTC) pted Blob> ) 2016-05-29 <Encrypted Blob> ( <EncrY [2] FaceTime Incoming Video 20:03:11 00:00:00 (UTC) pted Blob> ) 2016-05-29 <Encrypted Blob> ( <EncrY [I] FaceTime Incoming Video 20:03:11 00:00:00 (UTC) pted Blob> ) 2016-06-01 <Encrypted Blob> ( <EncrY [I] iPhone Incoming Phone 00:00:00 Missed 22:02:13 (UTC) pted Blob> ) 2016-06-01 <Encrypted Blob> ( <EncrY [2] iPhone Incoming Phone 00:00:00 Missed 22:02:13 (UTC) pted Blob> ) 2016-06-01 <Encrypted Blob> ( <EncrY [I] iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-06-01 <Encrypted Blob> ( <EncrY [2] iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-06-02 <Encrypted Blob> ( <EncrY [1] iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-06-02 <Encrypted Blob> ( <EncrY [2] iPhone Incoming Phone 00:00:00 Missed (UTC) pted Blob> ) 2016-06-02 <Encrypted Blob> ( <EncrY [1] iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) 2016-06-02 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 00:00:00 (UTC) pted Blob> ) EFTA01217436  2016-06-02 <Encrypted Blob> ( <Encry [2] iPhone Incoming Phone 11:22:49 (UTC) 00:01:33 pted Blob> ) 2016-06-02 <Encrypted Blob> ( <Encry [1] iPhone Incoming Phone 11:22:49 (UTC) pted Blob> ) 00:01:33 2016-06-02 [2] iPhone Incoming Phone 11:27:27 (UTC) Unknown 00:07:57 2016-06-02 [1] iPhone Incoming Phone 11:27:27 (UTC) Unknown 00:07:57 2016-06-02 [2] FaceTime Incoming Audio Unknown 00:00:00 Missed 18:07:42 (UTC) 2016-06-02 [1] FaceTime Incoming Audio Unknown 00:00:00 Missed 18:07:42 (UTC) 2016-06-08 <Encrypted Blob> ( <Encry [1] FaceTime Incoming Video 21:09:53 00:00:00 Missed (UTC) pted Blob> ) 2016-06-08 <Encrypted Blob> ( <Encry [2] FaceTime Incoming Video 21:09:53 00:00:00 Missed (UTC) pted Blob> ) [2] 2016-06-08 <Encrypted Blob> ( <Encry FaceTime Incoming Video 21:10:00 00:00:00 Missed [3] (UTC) pted Blob> ) [1] 2016-06-08 <Encrypted Blob> ( <Encry FaceTime Incoming Video 00:00:00 Missed [3] 21:10:12 (UTC) pted Blob> ) 2016-06-08 <Encrypted Blob> ( <Encry [2] FaceTime Incoming Video 00:00:00 Missed 21:10:12 (UTC) pted Blob> ) 2016-06-08 <Encrypted Blob> ( <Encry [1] FaceTime Incoming Video 00:00:00 Missed 21:10:12 (UTC) pted Blob> ) Notes [1] Source Device NYCO24371.dmg/Macintosh HD [1] Source File /Users/Jeffrey/Library/Application Support/CallHistoryDB/CallHistory.storedata [2] Source Device /Macintosh HD [2] Source File /Users/Jeffrey/Library/Application Support/CallHistoryDB/CallHistory.storedata [3] Recovered Record Case Data: Calls (301-400 of 936) Case Data: Calls (501-600 of 936) EFTA01217437