• Menu o Overview o Device Details • NYC024364.dmg (Evidence ID: NYC024364.dmg - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Notes • Top Contacts • User Accounts Case Data: Calls (1-100 of 1137) [3] [3] Service Direction Type Date Unknown Incoming Unknown Incoming Unknown Incoming Unknown Incoming Unknown Incoming Unknown Incoming Unknown Incoming Unknown Incoming Unknown Incoming Skype Outgoing Audio Skype Incoming Audio Skype Incoming Audio [2] Skype Outgoing Audio [2] Skype Outgoing Audio [1] [1] FaceTime Incoming Video FaceTime Outgoing Video Unknown 00:00:00 (UTC) Unknown 2001-01-01 00:00:01 (UTC) Unknown 2001-01-01 00:00:01 (UTC) 2001-01-01 Unknown 00:00:01 (UTC) Unknown 2001-01-01 00:00:01 (UTC) Unknown 2001-01-01 00:00:01 (UTC) Unknown 2001-01-01 00:00:01 (UTC) Unknown 2001-01-01 00:00:01 (UTC) Unknown 2001-01-01 00:00:01 (UTC) 2011-09-04 13:36:59 (UTC) 2011-12-08 19:55:04 (UTC) 2011-12-08 20:08:48 (UTC) 2013-06-17 11:08:12 (UTC) 2014-01-24 10:39:11 (UTC) 2014-03-20 14:48:39 (UTC) 2014-03-20 15:14:45 (UTC) 2001-01-01 Contacts Duration (HH:MM:SS) Unknown ( Unknown ) 00:00:00 Unknown ( Unknown ) 62:54:42 Unknown ( Unknown ) 00:00:00 Unknown ( Unknown ) 01:23:13 Unknown ( Unknown ) 00:00:00 Unknown ( Unknown ) 80:45:43 Unknown ( Unknown ) 00:00:00 Unknown ( Unknown ) 82:25:09 Unknown ( Unknown ) 76:56:50 katyagu777 ( katyagu777 00:00:00 rttv-asb-1 ( rttv-asb-1 ) 00:01:49 rttv-asb-1 ( rttv-asb-1 ) 00:12:41 kari.shulia ( kari.shulia ) 00:09:19 Mariana ( marianazxr ) 00:33:48 Unknown 00:05:22 <Encrypted Blob> ( <En 00:04:10 crypted Blob> ) Status Cancelled EFTA01065252 FaceTime Incoming Audio FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video 2014-03-22 19:20:23 (UTC) 2014-03-28 01:36:28 (UTC) 2014-04-06 13:15:10 (UTC) 2014-04-06 13:27:11 (UTC) 2014-04-16 00:02:59 (UTC) 2014-04-16 00:09:53 (UTC) 2014-04-19 18:29:14 (UTC) 2014-05-04 20:04:09 (UTC) 2014-05-04 21:39:04 (UTC) 2014-05-04 21:40:33 (UTC) 2014-05-21 10:59:50 (UTC) 2014-05-21 17:43:27 (UTC) 2014-05-21 20:50:31 (UTC) 2014-05-21 21:28:34 (UTC) 2014-05-21 22:05:14 (UTC) 2014-05-23 19:14:34 (UTC) 2014-05-23 19:24:27 (UTC) 2014-06-04 03:11:57 (UTC) 2014-06-04 03:12:33 (UTC) 2014-06-04 03:13:17 (UTC) 2014-06-04 03:14:01 (UTC) 2014-06-04 03:24:40 (UTC) 2014-06-04 03:24:40 (UTC) 2014-06-04 03:24:40 (UTC) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) Unknown 00:00:00 00:00:00 00:03:34 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:01:26 00:04:42 00:00:00 00:00:00 00:02:05 00:01:10 00:00:22 00:00:27 00:00:17 00:00:00 00:00:00 00:00:00 Missed Missed Cancelled Missed EFTA01065253 [ 1] Ill Ill [1] [1] [1] Ill FaceTime Incoming Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video [1] iPhone iPhone iPhone Ill [1] [1] [1] Incoming Phone Incoming Phone Incoming Phone FaceTime Outgoing Video FaceTime Outgoing Video [1] iPhone [1] iPhone iPhone iPhone iPhone iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone 2014-06-15 11:44:06 (UTC) 2014-10-09 16:52:16 (UTC) 2014-10-09 16:52:54 (UTC) 2014-10-09 16:56:30 (UTC) 2014-10-09 16:57:20 (UTC) 2014-10-09 17:01:18 (UTC) 2014-10-17 10:24:12 (UTC) 2014-10-17 10:46:08 (UTC) 2014-10-17 17:02:26 (UTC) 2014-10-17 17:02:49 (UTC) 2014-10-17 17:46:22 (UTC) 2014-10-17 18:55:49 (UTC) 2014-10-18 12:08:35 (UTC) 2014-10-18 17:54:03 (UTC) 2014-10-19 12:23:06 (UTC) 2014-10-19 12:23:06 (UTC) 2014-10-19 18:05:09 (UTC) 2014-10-20 14:32:50 (UTC) 2014-10-21 19:18:12 (UTC) 2014-10-21 22:06:50 (UTC) 2014-10-22 09:43:49 (UTC) 2014-10-24 12:03:06 (UTC) 2014-10-24 15:18:46 (UTC) 2014-10-24 15:45:19 (UTC) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) Unknown ( Unknown ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) Unknown <Encrypted Blob> ( <En crypted Blob> ) 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:13 00:00:02 00:20:11 00:04:00 00:00:00 00:00:00 00:00:00 00:00:09 00:00:09 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 Cancelled Cancelled Missed Missed Missed Missed Missed EFTA01065254 [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Outgoing Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone [1] iPhone Incoming Phone FaceTime Incoming Video 2014-10-24 15:54:00 (UTC) 2014-10-24 16:39:52 (UTC) 2014-10-24 21:25:46 (UTC) 2014-10-24 22:16:27 (UTC) 2014-11-01 21:06:47 (UTC) 2014-11-02 19:00:21 (UTC) 2014-11-03 17:59:12 (UTC) 2014-11-04 00:29:02 (UTC) 2014-11-04 20:47:09 (UTC) 2014-11-04 20:48:09 (UTC) 2014-11-04 22:20:28 (UTC) 2014-11-04 23:28:32 (UTC) 2014-11-05 12:31:31 (UTC) 2014-11-05 15:59:35 (UTC) 2014-11-05 17:35:55 (UTC) 2014-11-05 17:50:01 (UTC) 2014-11-05 21:22:04 (UTC) 2014-11-06 12:09:02 (UTC) 2014-11-06 12:38:15 (UTC) 2014-11-06 15:44:55 (UTC) 2014-11-06 18:26:59 (UTC) 2014-11-06 18:27:38 (UTC) 2014-11-06 18:40:44 (UTC) 2014-11-06 20:21:05 (UTC) <Encrypted Blob> ( <En crypted Blob> ) Unknown <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) Unknown 00:00:00 00:00:00 00:01:13 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:01:19 00:00:36 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 Missed Missed Missed Missed Missed Missed Missed Missed EFTA01065255 [I] [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [I] FaceTime Incoming Video Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone FaceTime Incoming Video 2014-11-07 00:09:59 (UTC) 2014-11-07 12:37:03 (UTC) 2014-11-07 12:55:35 (UTC) 2014-11-07 16:17:17 (UTC) 2014-11-07 16:32:43 (UTC) 2014-11-07 18:50:11 (UTC) 2014-11-07 23:18:49 (UTC) 2014-11-07 23:32:57 (UTC) 2014-11-08 00:51:54 (UTC) 2014-11-08 01:01:31 (UTC) 2014-11-08 02:17:13 (UTC) 2014-11-08 05:35:10 (UTC) <Encrypted Blob> ( <En crypted Blob> ) Unknown <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) Unknown <Encrypted Blob> ( <En crypted Blob> ) <Encrypted Blob> ( <En crypted Blob> ) Unknown 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 Notes [1] Source Device NYCO24364.dmg/Macintosh HD [1] Source File /Users/Story/Libraty/Application Support/CallHistoryDB/CallHistory.storedata [2] Source Device NYCO24364.dmg/Macintosh HD [2] Source File /Users/Story/Library/Application Support/Skype/jeevacation/main.db [3] Source Device NYCO24364.dmg/Macintosh HD [3] Source File /Users/Story/Library/Application Support/Skype/lawlcrauss/main.db [4] Recovered Record Case Data: Calls (Index) Case Data: Calls (101-200 of 1137) Missed Missed Missed Missed Missed EFTA01065256