iPhone Seizure Report

7/29/2019 iPhone Seizure Report

1/5

Case 1:12-mj-00304-JGS Doc #4 Filed 10/09/12 Page 1 of 5 Page ID iffllED- GROctober 9, 2012 3:46PM.AO 93 (Rev. 12109) Search and Seizure WarrantUNITED STATES DISTRICT COURT

In the Maner of the Search of(8riefl.v describe the property to be searchedor identify the person by name an d address)

an Apple 1-Phone model A1332with IC #

for theWestern District of Michigan

Case No. 1:12-mj-304

SEARCH AND SEIZURE WARRANTTo: Any authorized law enforcement officer

TRACEY CORDES, CLERKU.S. DISTRICT COURTWESTERN DISTRICT OF MICHIGBY: dmh /_________

An application by a federal law enforcement officer or an attorney for the government requests the searchof the following person or property located in the Western District of Michigan(identify thl! person or describe the property to be searched and gi w its location):

One black-colored Apple 1-Phone telephone bearing model# A1332 and IC # . recovered from bedroom localed at The person or property to be searched, described above, is believed to conceal (id('ntif:v til(' pason ur d t s a i b ~ t the

property to be sei=ed):information regarding call activity, "phone book" directory information. stored voice-mails and text messages. and electronic files,and video images

I find that the affidavit(s). or any recorded testimony, establish probable cause to search and seize the person orproperty.

YOU ARE COMMANDED to execut e this warrant on or before --- - ... S e p ~ l9. ~ 1 . 2 . -- --.....(not to I!.T,'el!d I-I days)gf in the daytime 6:00 .a.m. to I0 p.m. 0 at any time in the day or night as I find reasonable cause has beenestablished.

Unless delayed notice is authorized below. you must give a copy of the warrant and a receipt for the propertytaken to the person from whom, or from whose premises, the property was taken, or leave the copy and receipt at theplace where the property was taken .

The officer executing this warrant, or an officer present during the execution of the warrant, must prepare aninventory as required by law and promptly return this warrant and inventory to United States Magistrate Judge

Joseph G. Scoville(name)0 I find that immediate notification may have an adverse result listed in I8 U.S.C. 2705 (except for delay

of trial). and authorize the officer executing this warrant to delay notice to the person who, or whose property, will besearched or seized (clreck thl! appropria te bo.TJ Ofor days (notro exceed 30)

Date and time issued: J-t:Jt z_I : 3 ~

City and state: Grand Rapids, Michigan

,...,...,. ..ying, the later specific date of _ ____ __ _ _ .

Printed name an d tit/!!


2/5

Case 1:12-mj-00304-JGS Doc #4 Filed 10/09/12 Page 2 of 5 Page ID#9AO 93 {Rev 12/09) Scarth and Seizure Warranl {Page 21

ReturnCase No.: Date and t i m / w a r r ~ n t executed: Copy ~ f J / a n t and inventory left with:

1:12-mj-304 9'/JJ /,l.


3/5

SummaryConnection TypeExtraction start date/timeExtraction end data/UmeUFED Physical Analyzer versionCase numberCase nameNotesExaminer nameDepartmentLocaUon

Device InformationII Name

2 Activation Stale3 Application Entries4 Application Siza (bytos)5 BoardG Book Entries7 ,Book Size (bytes)8 Capacity9 Cloud BaCkup Enabled10 CPID11 Data Entries12 Data Size (bytes)13 ECID14 Free Memory (bytes)15 iBoot (firmware) version16 ICCID17 Last Backup Computer Name18 Last Backup Computer Type19 Last Sync20 la st Used ICCID21 Locale Language22 Memory Size (bytes)23 Owner Name24 Passcode25 Phone Number26 Proofing Entries27 Proofing Size (bytes)28 Ringtone Entries29 Ringtone Size (bytes)30 Serial number31 Sync Host Name32 Synced with33 Synced with34 USB(Ethernet) MAC

-l / y 5 , !Cable No. 1109/13/20 12 12:00:01 PM9/13120 12 4:28:21PM3.0.1.7GP13CR12GP0008Aguilera el. al.

I

1Phone I FPFII20122271400011701 f Physical ExaminationSpecial Agent Cory HoweHomeland Security InvestigationsGrand Rapids, Ml

ValueI User_System_Data1WildcardActivated,o,on90ap0014GBFa lse893014366336

t4231298048iBoot-1219.62.16

Adriana Mac8ook ProMac6125/2012 6:45:37 AM(UTC-4)

on_US14758297600monica

0000

Ad riana Mac8ook ProComputer: Adriana MacBook Pro\User: CachetesComputer: Useras Power Mac GS(3)\User: User

- __ _ _ [ l-II

-


4/5

-. ..353637

v o i c e M e m o ! - a ~ 1:12-mj-00304-JGS. Doc #4 Filed 10/09/12 Page 4 of 5 Page .. ..;Vo_ceMemo Size. (by1es)WI-FiMAC

Image Hash Details ' 1 NameImage

Pluginst Name

23

IPhonePhyslcallnputiD. DMGOpenerMBRGenel1c

PathSize (Bytue)

' ' I . ' ' .!o , . ' ' ' ' " t ' ' ; ol' o l .' ' J ' t , '< I 4

58789

101112

ApplePaltltlonMapGUIDPII/UtlonTablaTARArdtlveOpenerHFSIPhoneCaUlogIF'tlone databases

QulcldlmeMelada1a: : lo : ' I ,:,, 11 > t 'o ' il ;< ' ' .1 t"'

!Phone deYtce Info

. ! :1

0:CC :08:EO :B2:4F :83

iPhone4GSM_5 .1. IJ>hysicai_Physlcel_13-09-12_12-00-01.1mg15955189780

. : . . . .. .: (..

, , ' 11! , . . : . . . .

CeUebrlloCeUebrileCeUebrlto

CeUebriteCellebriteCeUebriteCeUebrlteCellebrileCellebrite

CeUebriteCellobritoCellebrite

: _ v - .-.. " ., . ..__ ....,____2.02.02.02.0

2.02.02.02 .02.0

2.0

2.02.0... . , , . . , . ' , ! " ' ., I 1! 1 !

.11 . . u1 : . , r ,i : , .. .. .t . .. .. , .13

ContentsType CaDLog

" Incomingw Missed

"' iMessage: Ueontacts' Installed Appllcelions2 IP Connectlons~ L o c a t i o n s

"' CeUtowerse HarvestedWlfl Locationse Media Locations

. e Win networks

1042348332218371365922728

. 1403

Cellebrite

(-IOcletml )(1 Deleted)

(3 Deleted)(t Deleted)(1 Deleted)

(28 Deletec11

(28 Deleted)

1042348332218371365922728

403

2.0

----- -- i.. - -- - . - ~ - _ ](4 Deleted)(1 Oeloted)

(3 Deleted)(1 Deleted)(1 Deleled)

(28 Deleted)

(28 Deleted)


5/5

_1Notes C a s ~ l 1 2 - m - 0 0 3 0 4 - J G S Doc #4 Fi led 10/09/12 5 of 5 . Page

.i Passwords> SMS MessagesDrafts

o lnboxe Sent

_ User Accounts' User DictionaryiD.Web Bookmarks

ORootU Web History: " WirelessNebovorle:ll!led) 6340 (19 Deleted)198

0

r- - - : - - - : - + - -VIde : Souro& . -. .. :; , jocan .1ves--- -- -- - 1 - -4I------r. '--- ----- -- I.. --- -+i- -- - ------ - -!-- -- - :

... --- - - --- ,-- .i.. ... - .. ----- .."t--_.' ' ' ..___. .... ''I..-----t- ..

!-- ----.---- -4>i I-----1-...I... - -- -J-- .....IIt -._____l ____!' ---- - - t - -- -I------- -L .........I________ L.

iPhone Seizure Report

Documents