(1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) e Menu ° Overview © Device Details =» NYC024328.aff4 (Evidence ID: NYC024328.aff4 - 001) © Case Data = Calendar Items Calls Contacts Messages Top Contacts User Accounts Case Data: Calls (901-1000 of 1416) Service Direction Type Date 2019-04-04 09:47:25 (UTC) 2019-04-04 09:57:10 (UTC) 2019-04-07 10:08:36 (UTC) 2019-04-07 10:23:40 (UTC) 2019-04-07 10:25:22 (UTC) FaceTime Outgoing Video ioe sole (UTC) 2019-04-09 10:37:37 (UTC) 2019-04-09 10:39:10 (UTC) 2019-04-09 10:40:04 (UTC) 2019-04-09 16:04:35 (UTC) 2019-04-09 16:47:30 (UTC) 2019-04-09 16:47:59 (UTC) 2019-04-09 16:48:31 (UTC) 2019-04-09 16:49:10 (UTC) 2019-04-09 22:05:04 (UTC) 2019-04-10 11:32:12 (UTC) FaceTime Outgoing Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Outgoing Audio FaceTime Outgoing Audio FaceTime Outgoing Video FaceTime Incoming Audio FaceTime Incoming Video Contacts (HILMM. SS) <Encrypted Blob> ( <Ener ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:26:20 00:12:03 Unknown 00:01:14 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:01:04 00:10:03 00:00:10 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 Unknown 00:00:00 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:08:45 00:00:00 00:00:00 Status Cancelled Cancelled Missed Cancelled Cancelled Cancelled Missed Missed EFTA00506510

--=PAGE_BREAK=--

(1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) (1) (1) (1) (1) [2] (1) [2] (1) (1) (1) [2] FaceTime Incoming Video ek 04-10 9:22 (UTC) FaceTime Incoming Video hetes1 WTC) FaceTime Incoming Video nwen ‘ores FaceTime Outgoing Video ried 1 * _ FaceTime Outgoing Video 13:46 CTC) FaceTime Outgoing Video lene fore) FaceTime Incoming Video isnt? (UTC) FaceTime Incoming Video Teo (ure) FaceTime Incoming Video any a (ure) FaceTime Incoming Video 15:05:83 (UTC) FaceTime Incoming Video re Tao (UTC) FaceTime Outgoing Video ito, 1 “A (arc) FaceTime Outgoing Video 17:27:54 (UTC) FaceTime Incoming Video 3301 (ure) FaceTime Incoming Video 16:20:02 (UTC) FaceTime Incoming Video 14946 (NTC) FaceTime Outgoing Video op-oaea (UTC) FaceTime Outgoing Video 30. 13:56 (UTC) FaceTime Incoming Video ue eT UTC) iPhone Incoming Phone peaenn (Te) iPhone Incoming Phone 15.53.00 (UTC) FaceTime Incoming Video re 3 (UTC) FaceTime Incoming Video ino, 1 a3 (UT) 2019-04-24 FaceTime Outgoing Video 18:23:20 (UTC) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Ener ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:01:08 00:02:33 00:02:10 00:04:40 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:01:19 00:08:10 00:00:49 00:00:18 00:00:00 00:00:00 00:09:42 00:03:57 00:03:11 Unknown 00:00:00 Unknown 00:00:00 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:01:36 00:01:30 Missed Cancelled Missed Missed Missed Missed Missed Missed Missed EFTA00506511

--=PAGE_BREAK=--

(1) (1) (1) [2] (1) [2] (1) [2] (1) (1) [2] (1) (1) (1) (1) (1] (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) FaceTime Outgoing Video 2019-04-24 18:23:37 (UTC) FaceTime Outgoing Video 18:25:27 (UTC) iPhone Outgoing Phone 31 3646 (UTC) iPhone Incoming Phone 3125.95 (UTC) FaceTime Outgoing Video man20(UT0 FaceTime Outgoing Video 23: eon ure) iPhone Incoming Phone 1159.99 (UTC) FaceTime Incoming Video 162544 (TC) FaceTime Outgoing Video 1625-58 (UTC) FaceTime Outgoing Video 16.96.95 (UTC) FaceTime Outgoing Video 162646 (UTC) FaceTime Incoming Video isaoe (ure) FaceTime Incoming Audio >5,09:69 (UTC) FaceTime Outgoing Video ae 1 ao (UTC) FaceTime Incoming Audio 16:23:24 (UTC) FaceTime Incoming Audio 72201 (TC) FaceTime Incoming Audio ia1-23 (UTC FaceTime Incoming Audio 147.49 (UTC) FaceTime Incoming Video essB (rnc) FaceTime Outgoing Video 15.56.11 (UTC) FaceTime Incoming Audio Ty's715 (UTC) FaceTime Incoming Video iezaae nC) FaceTime Incoming Video Tio conc) FaceTime Outgoing Video ree (UTC) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:01:30 00:00:29 00:04:34 00:00:00 00:15:14 00:15:14 00:00:00 Unknown 00:00:00 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Ener ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:00:00 00:04:38 00:00:00 00:01:07 00:00:00 00:00:00 00:00:42 00:01:56 00:00:00 00:00:00 00:00:00 00:00:00 00:08:30 00:00:00 00:04:00 Missed Missed Missed Cancelled Cancelled Missed Cancelled Missed Missed Missed Cancelled Missed EFTA00506512

--=PAGE_BREAK=--

(1) (1) (1) (1) [2] (1) [2] (1] [2] (1) (1) [2] (1) (1) (1) (1] [2] (1) (1) (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] 2019-05-13 FaceTime Outgoing Video 20:14:17 (UTC) FaceTime Incoming Video iicie-sa (ure) FaceTime Incoming Video opsieat (UTC) iPhone Outgoing Phone 08:43:20 (UTC) iPhone Outgoing Phone 08.43.00 (UTC) FaceTime Incoming Audio SD oobo (orc) FaceTime Incoming Audio 9.9995 (UTC) iPhone Incoming Phone 174640 (TC) FaceTime Incoming Video atest (UTC FaceTime Incoming Video 15-0025 (UTC) FaceTime Incoming Video east (UITC) iPhone Incoming Phone +'<5.90 (UTC) FaceTime Incoming Video 15:54:12 (TC) FaceTime Outgoing Audio Te ooe (ure) iPhone Outgoing Phone 17:30:00 (UTC) iPhone Incoming Phone Teco (ures iPhone Incoming Phone 19:26:40 (UTC) iPhone Incoming Phone 35359 (UTC) iPhone Incoming Phone oci0-00 (LINC) iPhone Incoming Phone 1495.99 (UTC) iPhone Outgoing Phone 31.55.90 (UTC) iPhone Incoming Phone 13-0640 (UTC) iPhone Incoming Phone 3.96.49 (UTC) iPhone Outgoing Phone 2019-05-19 13:40:00 (UTC) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:21:24 00:00:00 00:00:00 Unknown( Unknown) — 00:00:14 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:14 00:00:39 00:00:39 00:00:00 00:00:00 00:00:00 00:00:00 00:00:43 Unknown 00:00:00 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Ener ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:00:23 00:01:55 00:00:06 00:01:04 00:00:00 00:15:49 00:00:03 Unknown 00:00:14 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:38:14 00:00:15 Missed Missed Cancelled Missed EFTA00506513

--=PAGE_BREAK=--

(1) (1) [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1 [2] [1] Source Device NYC024328.aff4/Macintosh HD [1] Source File /Users/jee/Library/Application Support/CallHistoryDB/CallHistory.storedata [2] FaceTime Incoming Video ieee fore) iPhone Incoming Phone 33 se (UTC) iPhone Outgoing Phone 15:03:20 (UTC) iPhone Outgoing Phone issa520 (OTC) iPhone Incoming Phone 1790-00 GTC) iPhone Outgoing Phone ia:s64o (UTC) iPhone Outgoing Phone +8 56.49 (UTC) iPhone Outgoing Phone OL: S20 (UTC) iPhone Outgoing Phone 19 13:20 (UTC) iPhone Outgoing Phone 3155.90 (UTC) iPhone Incoming Phone 20:20:00 (UTC) iPhone Outgoing Phone 3155.90 (UTC) Notes Recovered Record <Encrypted Blob> ( <Encr “Encrypted B 00:00:00 ite) (<Ener 99.09:00 “Encrypted Blob (<Ener 99.99.07 Unknown 00:00:22 ite) (<Ener 99.02.07 ed) (<Ener 99-00-00 Unknown 00:02:07 Case Data: Calls (801-900 of 1416) Case Data: Calls (1001-1100 of 1416) Missed Missed Missed EFTA00506514