08- 069208
ORANGE COUNTY SHERIFF'S OFFICE
COMPUTER FORENSIC CELL PHONE REPORT Pagel CASE AGENT: Yuri Melich Detective Orange County Sheriffs Office Criminal Investigations Division Child Abuse/Missing Persons Squad 2500 W. Colonial Drive Orlando, FL. 32804 COMPUTER FORENSIC EXAMINER: Sandra G. Cawn Detective Orange County Sheriffs Office Criminal Investigations Division Computer Crimes Squad 2500 W. Colonial Drive rlando, FL. 32804 SEARCH and SEIZURE August 4, 2008: Detective Mark Hussey, Orange County Sheriffs Office Homicide Unit presented this writer with the below described cellular telephone and asked that all the text messages be extracted. The phone belongs to Cynthia Anthony, who gave consent for the extraction. PROCESSING and ACQUISITION NOTES The Case Agent provided this examiner the following for processing:
CELLULAR TELEPHONE: ITEM
Make: Motorola Model Number: V3 Razr Possible Serial Number: 23755 93021 6 IMEI: 358921008652799 MSN: SIM: 890141042008900 40872 EXAMINATION SYNOPSIS This examiner received the listed cellular telephone which was powered on. An extraction of data via the use of Cellebrite software and cabling was conducted. The contact list, call logs, text messages all dated either 8/02/08 and 8/03/08 and image files were recovered and reported on the attached report form.
^
fSZ^-^^V
f/r/jv?'
Detective Sandra G. Cawn Augusts 2008-
W4
Examination Report Page 1 of 10
Examination Report Properties
Selected Manufacture: Selected Model: Detected Manufacture: Detected Model: Revision: IMEI: MSISDN: IMSI: Extraction start date/time: Extraction end date/time: Phone Date/Time: Connection Type: UFED Version: 1. 2. 3. 4. 5. 6. 7. 8. 9. Contacts SMS - Text Messages Incoming Calls Outgoing Calls Missed Calls Images Ringtones Audio Video
Motorola GSM Motorola V3 RAZR "Motorola CE, Copyright 2004" M GSM900","GSM1800,,,"GSM1900M,"GSM850n,,,MODEL=V3" "R374 G 0E.41.C3R B" 358921008652799 14078084731 310410089004087 04/08/08 09:28:47 04/08/08 09:30:34 "08/08/04,10:20:44+00'* USB Cable Software: 1.0.9.0 UFED , Full Image: 1.0.1.9 , Tiny Image: 1.0.1.9
Examination Report Index
Contacts
Total Entries: 28 PBB MD5 Hash: 05C03A0E29088C3F02B4D8815EAF8456 #1______________________________Debbie Akin (Phone memory) General: ^^■■1 #2______________________________Jody Parker (Phone memory) Home: |^^_^_g^_#3________________________________Roder B (Phone memory)___________________ file://C:\Documents and Settings\Administrator\Desktop\Cindy Anthony cell phone\Backup... 8/4/2008 . .examination Report Page 2 of 10 Work: 17634798162 #4 Dave Nitti (Phone memory) Work: #5 Nilsa (Phone memory) Work:
#6
J Duckett (Phone memory) Work: #7
Ryan (Phone memory) Work: #8 George @ Work (Phone memory) Work:
#9
Detectiue Melich (Phone memory) Work:
#10
Work: Carla Duckett (Phone memory)
#11
Christina Chester (Phone memory) Mobile:
#12
Jason Fort (Phone memory) Work: Jose Baez (Phone memory) #13 Mobile:
^^H|^^^B
^■^^H
Work:
-----------------------------------^--------------------------------------------
#14
John Allen (Phone memory)
Mobile:
#15
^^|^^^
^H^^^^B
A Lee (Phone memory)
\u%
file://C:\Documents and Settings\Administrator\Desktop\Cindy Anthony cell phone\Backup... 8/4/2008 • Examination Report Page 3 of 10 #16 A Home (Phone memory) General: #17 A George (Phone memory) General: #18 Casey (Phone memory) General: #19 Jim NBC (Phone memory)
Work: #20 Kenneth (Phone memory) Work: #21 Annie (Phone memory) Work: #22 Fox Holly Bristow (Phone memory) Work: #23 Don Silver Lead Allen (Phone memory) Home: #24 Christina Baez (Phone memory) Work: #25 Sonnie Cell (Phone memory) Work: #26 Ken Gagne (Phone memory) Mobile: #27 Jessica Never Lose Hope (Phone memory) Work: #28 Stetie People Mag (Phone memory); ■•:■; Work: file://C:\Doeuments and Settings\Administrator\Desktop\Cindy Anthony cell phoneNBackup... 8/4/2008 • Examination Report ->■■ Page 4 of 10
SMS - Text Messages
SMS MD5 Hash: F5D1D3B3BAF1F617A2F94879EEE5BF3A # Number Name Date & Time Status bolder Storag Type Text e 1 N/A N/A Sent Sent Outgoin Cgllme g 2^^^^H *ALee N/A Sent Sent Outgoin 4 o7 4667847 g
3 -
* Fox Holly 02/08/08 Bristow 12:22:33 (GMT-16)
Read Inbox -
-
4
|M^M
2
N/A
02/08/08 12:42:36 (GMT-16) 02/08/08 17:21:18 (GMT-16)
Read Inbox
Incomin Hey Cindy! g George asked me to text this number to both of u. Mr. Mann 202.204.2600 publicist for Americas Most Wanted. Let me know if you need anything. Incomin Joyce stopped g by Publix looking for you Incomin Hi cindy! It's g emily from news 13. Just wondering if we'd b able to talk to u today. Incomin I know its late g but I needed 2 text u and tell u I cried when I read the "People" article.,I saw George on the news & he said u both felt the same. Our team is due 4 a break. I'm praying every day that God hears my cries. Words can't express the pain I feel 4 u all. See u tom. Believing 4 a miracle! Love, Holly Do u guys need me at the house prior to tonight's vigil at 830? I was
5
I^HI
9
N/A
Read Inbox
6
N/A
02/08/08 23:31:25
Read Inbox
W18
file://C:\Documents and Settings\Administrator\Desktop\Cindy Anthony cell phone\Baekup... 8/4/2008 Examination Report Page 5 of 10 A Lee 03/08/08 13:17:25 (GMT-16) Read Inbox planning on being a little early. BtwIncomingwe should not speak of any _______letters from casey * A Lee 03/08/08 13:45:39 (GMT-16) Read Inbox Incomini Jose has individual messages to us from Casey that he wants to give g to us tonight after the vigil. Would u guys be up for going to his office? N/A Sent Sent Outgoing When does jose want to meet? 03/08/08 15:26:17 (GMT-16) Read Inbox Incoming After the vigil sometime tonight. 03/08/08 18:48:29 (GMT-16) Read Inbox Incoming May not get to be there tonight but i continue to pray and love you N/A Sent Sent Outgoing Loveu 03/08/08 18:57:31 (GMT-16) Read Inbox Is there anything Incoming!! can do for u this week * Phonebook name lookup used to retrieve names
Incoming Calls
CLOGMD5 Hash: 9999193F33E7C603AAF0541D734E67A6 Name Numbgr^ m n Type Date & Time Duration
I
2 3 4 5 6 7 8
^H^^^^B^^^^^^^H^ ^^^^^^^H ^^^^^^^H ^^^^^^^H ^^^^^^^H ^^^^^^^^H ^^^^^^^B
^^^^^^^H
* Kenneth
N/A N/A N/A N/A
N/A .
N/A N/A N/A N/A N/A N/A N/A N/A
N/A
N/A N/A N/A N/A N/A N/A N/A N/A N/A
N/A N/A N/A N/A N/A
9 ^^^^^^^| 10 Incoming
;
N/A
tnfl*i
file://C:\Documents and Settings\Administrator\Desktop\Cindy Anthony cell phone\Backup... 8/4/2008 . Examination Report Page 6 of 10
Outgoing Calls
CLOG MD5 Hash: 9999193F33E7C603AAF0541D734E67A6 § Type Number Name 1 Outgoing jrifl^^HH^ N/A 2 Outgoing Date & Time Duration N/A N/A N/A N/A
I^^^^^^^ H
N/A
3 4 5 6 7
Outgoing Outgoing Outgoing Outgoing Outgoing
^^^^^^^H ^^^^^^^H
^^^^^^^|
N/A * Jose Baez
N/A N/A
u
N/A N/A N/A N/A N/A
* Steue People Mag.. N/A * Kenneth N/A N/A N/A
^^^^^^^H
^^^^^^ ^v
^^^^^^^1 ^^^^^^^H
8 9 10
Outgoing Outgoing Outgoing
* A George * A Lee N/A
N/A N/A N/A
N/A N/A N/A
^^^^^^ B
Missed Calls
CLOGMD5 Hash: 9999193F33E7C603AAF0541D734E67A6 # Type Number Name Missed fl^flj^lhfe * Kenneth 1 2 N/A 3 4 5 6 7 8 9 Date & Time Duration N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A N/A
^^^^^^^^B| ^^^^^^^^H ^^^^^^^^H ^^^^^^^^H| ^^^^^^^MH
Missed ^^^^^^^Hw
N/A N/A N/A N/A N/A N/A N/A
^^^^^^^■W
Missed '^^^^^^Hlil'
* Phonebook name lookup used to retrieve names
Images
#
Information Filename: Images\08-18-07 1527.jpa
MetaData Resolution:
Image
ISP£
file://C:\Documents and Settings\Administrator\Desktop\Cindy Anthony cell phoneVBackup... 8/4/2008 Examination Report Page 7 of 10 File Path: picture File Size: 24826 bytes File DateATime: 18/08/07 15:27:20 (GMT) MD5: 087150C83E292F85EEBD96B0AD42196B 72x72 (unit: inch) Pixel Resolution: 640x480 Filename: Images\12-08-06_2025.jpg File Path: picture File Size: 19842 bytes File Date/Time: 08/12/06 20:23:27 (GMT) MD5: B5C6CCE1FAAEFA052DB488B7CC215816
Resolution: 72x72 (unit: inch) Pixel Resolution: 640x480 Filename: Images\05 -09-0813 50.jp g File Path: picture File Size: 31106 bytes File Date/Time: 09/05/08 13:50:47 (GMT) MD5: 5F85F5AF2544E90919E81C37CB27BF64 Resolution: 72x72 (unit: inch) Pixel Resolution: 640x480 Filename: Imaees\08-18-071523,ipg File Path: picture File Size: 20266 bytes File Date/Time: 18/08/07 15:23:50 (GMT) MD5: 4C1910AF4B54F554C39E729EF18EAEB9 Resolution: 72x72 (unit: inch) Pixel Resolution: 640x480 Filename: ImaeesV 12-08-06 2021.jpg File Path: picture File Size: 22186 bytes File Date/Time: 08/12/06 20:20:15 (GMT) MD5: 3CD177DD6650091991101C916EC93E53 Resolution: 72x72 (unit: inch) Pixel Resolution: 640x480 file://C:\Documents and Settings\Administrator\Desktop\Cindy Anthony cell phone\Backup.
\$0\
8/4/2008
examination Report Page 8 of 10 Filename: Imaees\07-20-07 1903.jpg
File Path: picture File Size: 22242 bytes File Date/Time: 20/07/07 19:03:44 (GMT) MD5: 846A3BEF86F9FD8D80E8D5E093ABC9B4 Resolution: 72x72 (unit: inch) Pixel Resolution: 640x480 Filename: Images\ 12-08-06_2024.jpg File Path: picture File Size: 25114 bytes File Date/Time: 08/12/06 20:23:08 (GMT) MD5: C908BE9D8092F00560091B77B3E884A3 Resolution: 72x72 (unit: inch) Pixel Resolution: 640x480 Filename: Images\12-08-06_2017.jpg File Path: picture File Size: 43158 bytes File Date/Time: 08/12/06 20:17:55 (GMT) MD5: 0C1OFE8542FE87B7C60820714601772F Resolution: 72x72 (unit: inch) Pixel Resolution: 640x480 Filename: Images\08-18-07 1522.jpg File Path: picture File Size: 21278 bytes File Date/Time: 18/08/07 15:22:32 (GMT) MD5: 1693F3D81AFFBEB11270793328084F2D Resolution: 72x72 (unit: inch) Pixel Resolution:
640x480
10 Filename: Images\12-08-06_2020.jpg
File Path: picture File Size: 26562 bytes File Date/Time: 08/12/06 20:18:57 (GMT) MD5: D4F68D844513 AE8CF88E2529EDB1AB6B Resolution: 72x72 (unit: inch) Pixel Resolution: 640x480
\S02file://C:\Documents and Settings\Administrator\Desktop\Cindy Anthony cell phoneVBackup... 8/4/2008 Examination Report Page 9 of 10 11 Filename: Images\07-23-06_l 827.jpg File Path: picture File Size: 22862 bytes File Date/Time: 23/07/06 18:27:36 (GMT) MD5: 35D05051E05FF28CC1BFC997EG291C65 Resolution: 72x72 (unit-inch) Pixel Resolution: 640x480 12 Filename: lmages\ 12-08-062023 .jpg File Path: picture File Size: 18002 bytes File Date/Time: 08/12/06 20:21:56 (GMT) MD5: 98A5CA6DAC6B0967EF2506441BD2FF09 Resolution: 72x72 (unit: inch) Pixel Resolution: 640x480 13 Filename: Images\ 12-08-06 2019.jpg File Path: picture File Size: 27106 bytes File Date/Time: 08/12/06 20:18:36 (GMT) MD5: 52A0DD2591BA27DFBC107D7BC223F6C1 Resolution: 72x72 (unit: inch)
Pixel Resolution: 640x480 14 Filename: Images\ 12-08-06 2022.jpg File Path: picture File Size: 25498 bytes File Date/Time: 08/12/06 20:21:19 (GMT) MD5: C5CC21B34590A948750C406539BAECC2 Resolution: 72x72 (unit: inch) Pixel Resolution: 640x480 15 Filename: Images\12-08-06_2018.jpg File Path: picture File Size: 17826 bytes File Date/Time: 08/12/06 20:18:12 (GMT) MD5: 9CE491856DC4DEAB934F332593B9B170 Resolution: 72x72 (unit: inch) Pixel Resolution: 640x480
\$b%
file://C:\Documents and Settings\Administrator\Desktop\Cindy Anthony cell phoneVBackup... 8/4/2008