(1) [2] (1) [2] (1) [2] (1 [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) 2] (1) [2] (1) [2] (1) [2] e Menu © Overview © Device Details Service iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone =» NYC024328.aff4 (Evidence ID: NYC024328.aff4 - 001) © Case Data = Calendar Items Calls Contacts Messages Top Contacts User Accounts Case Data: Calls (1001-1100 of 1416) Direction Type Date 2019-05-19 20:20:00 (UTC) 2019-05-19 20:20:00 (UTC) 2019-05-19 20:20:00 (UTC) 2019-05-19 20:20:00 (UTC) 2019-05-19 20:36:40 (UTC) 2019-05-19 20:36:40 (UTC) 2019-05-19 20:36:40 (UTC) 2019-05-19 20:53:20 (UTC) 2019-05-19 20:53:20 (UTC) 2019-05-19 20:53:20 (UTC) 2019-05-19 21:10:00 (UTC) 2019-05-19 21:10:00 (UTC) 2019-05-19 21:10:00 (UTC) 2019-05-19 21:10:00 (UTC) 2019-05-19 22:33:20 (UTC) 2019-05-19 22:33:20 (UTC) Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Incoming Phone Incoming Phone Outgoing Phone Incoming Phone Outgoing Phone Outgoing Phone Outgoing Phone Duration (HH:MM:SS) Contacts <Encrypted Blob> (<Encr ,. 4, ypted Blob> ) 00:02:40 Unknown 00:02:40 <Encrypted Blob> ( <Encr ,,_,.. ypted Blob> ) 00:02:02 <Encrypted Blob> (<Encr ,). 5, ypted Blob> ) 00:02:02 <Encrypted Blob> ( <Encr ,,._,,. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,,,,. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,...,, ypted Blob> ) 00:00:00 <Encrypted Blob> ( <Encr ,,._,,. ypted Blob> ) 00:00:00 Unknown 00:14:43 <Encrypted Blob> ( <Encr ,,._,,, ypted Blob> ) 00:00:00 <Encrypted Blob> ( <Encr ,,_,,. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,..,,, ypted Blob> ) 00:01:45 <Encrypted Blob> ( <Encr ,,._,,. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,,,,. ypted Blob> ) 00:01:45 Unknown 00:00:03 <Encrypted Blob> ( <Encr ,,._,,. ypted Blob> ) 00:00:03 Status Missed Missed Missed Missed Missed Missed Missed EFTA00506515

--=PAGE_BREAK=--

(1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1] [2] (1 [2] (1] [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone 2019-05-19 22:50:00 (UTC) 2019-05-19 23:06:40 (UTC) 2019-05-19 23:56:40 (UTC) 2019-05-19 23:56:40 (UTC) 2019-05-19 23:56:40 (UTC) Outgoing Phone Dioaze qure} 2019-05-20 03:16:40 (UTC) 2019-05-20 03:16:40 (UTC) 2019-05-20 11:20:00 (UTC) 2019-05-20 11:36:40 (UTC) 2019-05-20 11:36:40 (UTC) 2019-05-20 14:23:20 (UTC) 2019-05-20 14:23:20 (UTC) 2019-05-20 14:40:00 (UTC) 2019-05-20 14:56:40 (UTC) 2019-05-20 14:56:40 (UTC) 2019-05-20 14:56:40 (UTC) 2019-05-20 14:56:40 (UTC) 2019-05-20 15:13:20 (UTC) 2019-05-20 15:30:00 (UTC) 2019-05-20 15:30:00 (UTC) 2019-05-20 15:30:00 (UTC) 2019-05-20 15:46:40 (UTC) 2019-05-20 16:03:20 (UTC) Incoming Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> ( <Encr ,,_,,., ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,,. 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,,.... ypted Blob> ) 00:25:40 <Encrypted Blob> ( <Encr ,,_,,, ypted Blob> ) 00:00:30 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,,., 4, ypted Blob> ) 00:13:39 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:06:38 <Encrypted Blob> (<Encr ,,_,-. ypted Blob> ) 00:06:38 Unknown 00:09:18 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,,._,,, ypted Blob> ) 00:03:33 Unknown 00:00:32 Unknown 00:00:15 <Encrypted Blob> (<Encr ,,._,,, ypted Blob> ) 00:01:02 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:06 Unknown 00:07:45 Unknown 00:01:28 Unknown 00:02:03 <Encrypted Blob> ( <Encr ,,._,,, ypted Blob> ) 00:00:34 <Encrypted Blob> ( <Encr ,,_,,., ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 Missed Missed Missed Missed Missed Missed Missed Cancelled Missed EFTA00506516

--=PAGE_BREAK=--

(1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1] [2] (1 [2] (1] [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone 2019-05-20 16:03:20 (UTC) 2019-05-20 20:13:20 (UTC) 2019-05-20 20:13:20 (UTC) 2019-05-20 20:30:00 (UTC) 2019-05-21 00:06:40 (UTC) Outgoing Phone ma.oaze (ure) 2019-05-21 02:36:40 (UTC) 2019-05-21 12:36:40 (UTC) 2019-05-21 12:53:20 (UTC) 2019-05-21 14:16:40 (UTC) 2019-05-21 17:36:40 (UTC) 2019-05-21 18:10:00 (UTC) 2019-05-21 19:50:00 (UTC) 2019-05-21 19:50:00 (UTC) 2019-05-21 19:50:00 (UTC) 2019-05-21 20:06:40 (UTC) 2019-05-21 21:13:20 (UTC) 2019-05-21 21:30:00 (UTC) 2019-05-22 05:00:00 (UTC) 2019-05-22 05:16:40 (UTC) 2019-05-22 05:16:40 (UTC) 2019-05-22 05:16:40 (UTC) 2019-05-22 13:03:20 (UTC) 2019-05-22 14:10:00 (UTC) Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone Incoming Phone <Encrypted Blob> (<Encr ,,, -. ypted Blob> ) 00:15:50 Unknown 00:00:46 <Encrypted Blob> ( <Encr ,,_,,., ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,,. 1. ypted Blob> ) 00:00:01 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> ( <Encr ,,._.~, ypted Blob> ) 00:25:01 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:36 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:02:16 Unknown 00:01:36 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:28 <Encrypted Blob> (<Encr ,,_,,, ypted Blob> ) 00:01:12 Unknown 00:03:41 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:13 Unknown 00:00:18 <Encrypted Blob> (<Encr ,,._,,, ypted Blob> ) 00:01:40 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:14 <Encrypted Blob> (<Encr ,,._,4, ypted Blob> ) 00:02:13 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 Unknown 00:00:02 <Encrypted Blob> (<Encr ,,. 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 Unknown 00:00:40 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Unknown 00:00:17 Cancelled Missed Missed Cancelled Cancelled Missed EFTA00506517

--=PAGE_BREAK=--

(1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1) (1) (1] (1) (1] [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] 2019-05-22 iPhone Incoming Phone } 4.43.59 (UTC) iPhone Incoming Phone 15-50-00 (UTC) iPhone Outgoing Phone paren iPhone Outgoing Phone 15.35.99 (UTC) iPhone Incoming Phone 1740-00 TC) iPhone Outgoing Phone Fy en iPhone Outgoing Phone 21:56:40 (TC) iPhone Incoming Phone 1-000 (LTC) iPhone Incoming Phone 01:50:00 (UTC) FaceTime Incoming Video 09:52:40 (UTC) FaceTime Incoming Video <o-00-58 (EITC) FaceTime Incoming Video iousa (ure) FaceTime Incoming Video 19\13:14 (UTC) iPhone Incoming Phone +3'35.90 (UTC) iPhone Incoming Phone 15:30:00 (TC ) iPhone Incoming Phone 14:20:00 (UTC) iPhone Incoming Phone 119.99 (UTC) iPhone Incoming Phone 1319.99 (UTC) iPhone Incoming Phone +! 16:40 (UTC) iPhone Incoming Phone 19135:96 (UTC) iPhone Incoming Phone 16.33.00 (UTC) iPhone Outgoing Phone 7:06:40 (UTC) iPhone Incoming Phone 15'<6 40 (UTC) iPhone Incoming Phone 3) 10:00 (UTC) <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:17 <Encrypted Blob> ( <Encr ,,_,,, ypted Blob> ) 00:00:31 <Encrypted Blob> (<Encr ,,. 1. ypted Blob> ) 00:00:07 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:08 <Encrypted Blob> ( <Encr ,,._,,., ypted Blob> ) 00:00:13 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> ( <Encr ,,._,,, ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 14. ypted Blob> ) 00:07:27 <Encrypted Blob> ( <Encr ,,_,4, ypted Blob> ) 00:03:47 Unknown 00:03:17 <Encrypted Blob> (<Encr ,, ... ypted Blob> ) 01:00:27 Unknown 00:03:29 Unknown 00:02:15 Unknown 00:24:11 <Encrypted Blob> ( <Encr ,,_,4, ypted Blob> ) 00:07:23 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:02:24 Unknown 00:00:11 <Encrypted Blob> (<Encr ,,. 1. ypted Blob> ) 00:00:38 Unknown 00:07:44 Unknown 00:11:57 <Encrypted Blob> ( <Encr 00:01:06 ypted Blob> ) Unknown 00:00:45 Cancelled Missed Missed EFTA00506518

--=PAGE_BREAK=--

(1) [2] (1) [2] (1) (1] (1) [2] (1] [2] (1) (1) (1) (1) [2] (1) [2] (1) [2] [1] Source Device NYC024328.aff4/Macintosh HD [1] Source File /Users/jee/Library/Application Support/CallHistoryDB/CallHistory.storedata [2] iPhone Incoming Phone 20:43:20 (UTC) iPhone Incoming Phone 15.20/00 (UTC) FaceTime Outgoing Video 1400 (TC) FaceTime Incoming Video ee oar) iPhone Incoming Phone 1790-00 TC) iPhone Incoming Phone 02:26:40 (UTC) FaceTime Incoming Video 10:16:00 (UTC) FaceTime Incoming Video ion Osi {ure} FaceTime Incoming Video ib. oni (UTC) iPhone Incoming Phone 13.33.00 (UTC) iPhone Outgoing Phone Faery aeean iPhone Outgoing Phone is-00-80 (UTC) Notes Recovered Record <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Ener ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:13 00:04:53 00:03:11 00:00:00 00:00:00 00:00:06 Case Data: Calls (901-1000 of 1416) Case Data: Calls (1101-1200 of 1416) Missed Missed Cancelled Missed Missed Missed Cancelled EFTA00506519