• Menu o Overview o Device Details • NYC024328.aff4 (Evidence ID: NYC024328.aff4 - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Case Data: Calls (1201-1300 of 1416) [1] [1] Service Direction Type Date iPhone Incoming Phone 2019-06-02 (UTC) iPhone Outgoing Phone 2019-06-02 (UTC) Duration Contacts (HH:MM:SS) <Encrypted Blob> ( <Encr 00:00:07 ypted Blob> ) <Encrypted Blob> ( <Encr 00:01:11 ypted Blob> ) Status [1] iPhone Incoming Phone 01:37:52 2019-06-03 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Missed [1] FaceTime Outgoing Video 2019-06-03 10:21:08 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Cancelled [I] FaceTime Outgoing Video 2019-06-03 10:23:14 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Cancelled [I] FaceTime Outgoing Video 2019-06-03 10:32:37 (UTC) Unknown 00:00:00 Cancelled [I] iPhone Incoming Phone 2019-06-03 12:14:17 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Missed [I] iPhone Outgoing Phone 2019-06-03 12:21:27 (UTC) <Encrypted Blob> ( <Encr 00:01:00 ypted Blob> ) [1] iPhone Outgoing Phone 2019-06-03 12:22:38 (UTC) Unknown 00:03:57 [1] iPhone Outgoing Phone 2019-06-03 12:56:52 (UTC) <Encrypted Blob> ( <Encr 00:00:03 ypted Blob> ) [1] iPhone Outgoing Phone 2019-06-03 12:58:01 (UTC) <Encrypted Blob> ( <Encr 00:01:46 ypted Blob> ) [I] iPhone Outgoing Phone 2019-06-03 13:00:10 (UTC) <Encrypted Blob> ( <Encr 00:04:49 ypted Blob> ) [1] iPhone Outgoing Phone 2019-06-03 13:06:21 (UTC) <Encrypted Blob> ( <Encr 00:00:41 ypted Blob> ) [1] iPhone Incoming Phone 2019-06-03 13:07:01 (UTC) <Encrypted Blob> ( <Encr 00:08:31 ypted Blob> ) [1] iPhone Incoming Phone 2019-06-03 13:09:29 (UTC) <Encrypted Blob> ( <Encr 00:00:09 ypted Blob> ) [I] iPhone Outgoing Phone 2019-06-03 (UTC) <Encrypted Blob> ( <Encr 00:00:41 ypted Blob> ) EFTA00506525

[1] [1] iPhone Incoming Phone 2019-06-03 13:18:42 (UTC) [1] iPhone Incoming Phone 2019-06-03 13:41:06 (UTC) [1] iPhone Incoming Phone 2019-06-03 14:54:23 (UTC) [1] iPhone Incoming Phone 2019-06-03 17:06:01 (UTC) FaceTime Outgoing Video 2019-06-03 17:27:45 (UTC) FaceTime Outgoing Video 2019-06-03 17:33:20 (UTC) FaceTime Outgoing Video 2019-06-03 18:06:40 (UTC) FaceTime Outgoing Video 2019-06-03 18:09:42 (UTC) iPhone Incoming Phone 2019-06-03 18:29:28 (UTC) [1] iPhone Outgoing Phone 2019-06-03 20:46:57 (UTC) [1] iPhone Outgoing Phone 2019-06-03 20:47:17 (UTC) [1] iPhone Outgoing Phone 2019-06-03 20:48:21 (UTC) [1] iPhone Outgoing Phone 2019-0"3 20:49:04 (UTC) [1] iPhone Outgoing Phone 2019-06-03 20:49:50 (UTC) [1] iPhone Outgoing Phone 2019-06-03 20:51:43 (UTC) [1] iPhone Outgoing Phone 2019-06-03 20:53:58 (UTC) [1] iPhone Outgoing Phone 2019-06-03 20:55:13 (UTC) [1] iPhone Outgoing Phone 2019-06-03 21:15:02 (UTC) [1] iPhone Incoming Phone 2019-06-03 21:44:30 (UTC) [1] iPhone Outgoing Phone 2019-06-03 21:58:16 (UTC) [1] iPhone Outgoing Phone 2019-0"3 22:11:52 (UTC) [1] iPhone Outgoing Phone 2019-06-03 22:24:57 (UTC) [1] iPhone Incoming Phone 2019-06-03 22:33:28 (UTC) [1] iPhone Incoming Phone 2019-06-04 12:15:39 (UTC) <Encrypted Blob> ( <Encr 00:02:05 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:40 ypted Blob> ) Unknown ( Unknown ) 00:01:03 <Encrypted Blob> ( <Encr 00:06:18 ypted Blob> ) Unknown 00:08:38 <Encrypted Blob> ( <Encr 00:08:38 ypted Blob> ) <Encrypted Blob> ( <Encr 00:07:09 ypted Blob> ) <Encrypted Blob> ( <Encr 00:07:09 ypted Blob> ) <Encrypted Blob> ( <Encr 00:01:16 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Unknown 00:00:00 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:01:02 ypted Blob> ) <Encrypted Blob> ( <Encr 00:15:12 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:02 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:12:55 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:02 ypted Blob> ) <Encrypted Blob> ( <Encr 00:07:45 ypted Blob> ) Unknown 00:02:18 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Cancelled Cancelled Cancelled Cancelled Cancelled Cancelled Missed Missed EFTA00506526

[1] iPhone [1] iPhone [1] iPhone [1] iPhone Outgoing Phone 2019-06-04 14:01:11 (UTC) Incoming Phone 2019-06-04 15:51:24 (UTC) Incoming Phone 2019-06-04 15:52:29 (UTC) Outgoing Phone 2019-06-04 16:07:14 (UTC) [1] iPhone Outgoing Phone 2019-06-04 16:19:16 (UTC) [1] iPhone Outgoing Phone 2019-06-04 16:20:06 (UTC) [1] iPhone Outgoing Phone 2019-06-04 16:32:50 (UTC) FaceTime Outgoing Video 2019-06-04 16:37:36 (UTC) iPhone Outgoing Phone 2019-06-04 16:48:53 (UTC) FaceTime Outgoing Video 2019-06-04 17:33:04 (UTC) FaceTime Outgoing Video 2019-06-04 17:33:39 (UTC) [1] iPhone Incoming Phone 2019-06-04 19:27:34 (UTC) [1] iPhone Incoming Phone 2019-06-04 19:35:04 (UTC) [1] iPhone Incoming Phone 2019-06-04 19:35:42 (UTC) [1] iPhone Incoming Phone 2019-06-04 22:54:05 (UTC) [1] iPhone Incoming Phone 2019-06-04 23:46:13 (UTC) [1] iPhone Outgoing Phone 2019-06-05 12:51:27 (UTC) [1] iPhone Outgoing Phone 2019-06-05 12:51:40 (UTC) [1] iPhone Incoming Phone 2019-06-05 12:59:09 (UTC) [1] iPhone Outgoing Phone 2019-06-05 14:02:55 (UTC) [1] iPhone Outgoing Phone 2019-06-05 14:03:38 (UTC) [1] iPhone Outgoing Phone 2019-06-05 14:04:15 (UTC) [1] iPhone Outgoing Phone 2019-06-05 [1] iPhone [I] [I] [1] [I] 14:04:43 (UTC) Outgoing Phone 2019-06-05 14:05:12 (UTC) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:07 Unknown ( Unknown ) 00:00:00 Unknown ( Unknown ) 00:00:00 <Encrypted Blob> ( <Encr 00:00:02 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:33 ypted Blob> ) <Encrypted Blob> ( <Encr 00:10:12 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:33 ypted Blob> ) <Encrypted Blob> ( <Encr 00:09:22 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:12 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:01:32 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:36 ypted Blob> ) <Encrypted Blob> ( <Encr 00:02:09 ypted Blob> ) Unknown 00:00:00 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:01:56 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Unknown Unknown 00:00:38 00:00:44 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:13 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:19 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:18 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:24 ypted Blob> ) Missed Missed Cancelled Missed Missed Cancelled Cancelled EFTA00506527

[1] [1] iPhone iPhone [1] iPhone iPhone iPhone iPhone iPhone iPhone iPhone [1] iPhone iPhone [1] [1] [1] [1] [1] [1] [1] [1] [1] [1] [1] [1] [1] [1] [1] [1] [1] [1] [1] [1] Outgoing Phone 2019-06-05 (UTC) Outgoing Phone 2019-06-05 (UTC) Incoming Phone 2019-06-05 (UTC) Incoming Phone 2019-06-05 (UTC) Incoming Phone 2019-06-05 (UTC) Outgoing Phone 2019-06-05 (UTC) Outgoing Phone 2019-06-05 (UTC) Outgoing Phone 2019-06-05 (UTC) Outgoing Phone 2019-06-05 (UTC) Incoming Phone 2019-06-05 20:01:03 (UTC) Outgoing Phone 2019-06-05 (UTC) iPhone Outgoing Phone 2019-06-05 (UTC) iPhone Incoming Phone 2019-06-05 22:04:41 (UTC) Unknown iPhone Outgoing Phone 2019-06-05 (UTC) Outgoing Phone 2019-06-06 (UTC) FaceTime Incoming Video 2019-06-06 09:29:06 (UTC) Unknown FaceTime Outgoing Video 09:47:02 2019-06-06 (UTC) FaceTime Outgoing Video 09:47:08 ( 2019-06-06 um -06 FaceTime Incoming Video 09:47 2019-06 :33 ont) iPhone Incoming Phone 2019-06-06 arm iPhone Incoming Phone 2019-06-06 arm iPhone Incoming Phone 2019-06-06 (UTC) iPhone Incoming Phone 2019-06-06 (UTC) iPhone Incoming Phone 2019-06-06 GHQ iPhone <Encrypted Blob> ( <Encr 00:00:19 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:30 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Unknown ( Unknown ) 00:00:21 <Encrypted Blob> ( <Encr 00:00:19 ypted Blob> ) <Encrypted Blob> ( <Encr 00:01:07 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:35 ypted Blob> ) <Encrypted Blob> ( <Encr 00:04:32 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr :10:49 ypted Blob> ) 00:00:00 <Encrypted Blob> ( <Encr 00:02:16 ypted Blob> ) <Encrypted Blob> ( <Encr 00:01:27 ypted Blob> ) 00:00:00 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Missed Missed Missed Cancelled Missed Missed Cancelled Cancelled Missed Missed Missed Missed Missed EFTA00506528

[1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone [1] iPhone Incoming Phone 2019-06-06 (UTC) Incoming Phone 2019-06-06 (UTC) Incoming Phone 2019-06-06 (UTC) Incoming Phone 2019-06-06 (UTC) Incoming Phone 2019-06-06 (UTC) Incoming Phone 2019-06-06 (UTC) Incoming Phone 2019-06-06 (UTC) Incoming Phone 2019-06-06 (UTC) Outgoing Phone 2019-06-06 19:14:25 (UTC) Incoming Phone 2019-06-06 (UTC) Phone Outgoing Ph 19:50:26 (UTC) Outgoing Phone 2019-06-06 19:51:58 (UTC) <Encrypted Blob> ypted Blob> ) <Encrypted Blob> ypted Blob> ) <Encrypted Blob> ypted Blob> ) <Encrypted Blob> ypted Blob> ) Unknown ( <Encr 00:00:00 ( <Encr 00:00:00 ( <Encr 00:00:26 ( <Encr 00:00:00 00:00:00 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:03:10 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:02 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Notes [1] Source Device NYC024328.aff4/Macintosh HD [1] Source File /Users/jee/Libraty/Application Support/CallHistoryDB/CallHistory.storedata [2] Recovered Record Case Data: Calls (1101-1200 of 1416) Case Data: Calls (1301-1400 of 1416) Missed Missed Missed Missed Missed Missed Missed Cancelled Cancelled EFTA00506529