(1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) (1) (1) [2] (1) [2] e Menu © Overview © Device Details =» NYC024328.aff4 (Evidence ID: NYC024328.aff4 - 001) © Case Data = Calendar Items Calls Contacts Messages Top Contacts User Accounts Case Data: Calls (1101-1200 of 1416) Service Direction Type Date iPhone Outgoing Phone 12-00-80 (UTC) iPhone Outgoing Phone 18-16-40 (UTC) iPhone Outgoing Phone Tee pon iPhone Outgoing Phone ie: (ea (TC) iPhone Outgoing Phone is y 540 (OTC) iPhone Incoming Phone 10:23:20 (UTC) iPhone Incoming Phone +9 '49.90 (UTC) iPhone Incoming Phone 3) 46.40 <UTC) iPhone Incoming Phone 20:46:40 (UTC) iPhone Outgoing Phone oi teae (une ) iPhone Incoming Phone 31 93.50 <TC) iPhone Incoming Phone 00:06:40 (UTC) FaceTime Outgoing Video 11:33:32 (UTC) FaceTime Outgoing Video ies (Ure) iPhone Outgoing Phone 14-90-90 (UTC) iPhone Outgoing Phone 1400-00 TC) Duration (HH:MM:SS) Contacts <Enerymed Blob> (<Ener 99.99.00 “Encrypted Blob (<Ener 99.99.00 ee) (<Ener 99.00:00 “Encrypted Blob> (<Ener 99.09:00 Unknown 01:11:57 Unknown 00:00:00 <Enerymed Blob> (<Ener 99.19.48 “Encrypted Blob> (<Ener 99.99.00 ie) (<Ener 99.09:00 “Encrypted Blob (<Ener 99.15:34 Unknown 00:00:02 Unknown 00:00:04 Status Cancelled Cancelled Cancelled Cancelled Missed Missed Missed Missed Cancelled EFTA00506520

--=PAGE_BREAK=--

(1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1] [2] (1 [2] (1] [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone 2019-05-26 14:33:20 (UTC) 2019-05-26 14:33:20 (UTC) 2019-05-26 14:33:20 (UTC) 2019-05-26 17:36:40 (UTC) 2019-05-26 20:56:40 (UTC) 2019-05-27 16:06:40 (UTC) 2019-05-27 20:16:40 (UTC) 2019-05-27 20:16:40 (UTC) 2019-05-27 20:33:20 (UTC) 2019-05-28 14:20:00 (UTC) 2019-05-28 16:16:40 (UTC) 2019-05-28 16:50:00 (UTC) 2019-05-28 18:30:00 (UTC) 2019-05-29 13:23:20 (UTC) 2019-05-29 16:43:20 (UTC) 2019-05-29 18:06:40 (UTC) 2019-05-29 19:13:20 (UTC) 2019-05-29 19:13:20 (UTC) 2019-05-29 19:13:20 (UTC) 2019-05-29 19:46:40 (UTC) 2019-05-29 19:46:40 (UTC) 2019-05-29 19:46:40 (UTC) 2019-05-29 20:20:00 (UTC) 2019-05-29 22:16:40 (UTC) Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone Incoming Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> ( <Encr ,,_,,., ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,,. 1,. ypted Blob> ) 00:09:08 <Encrypted Blob> (<Encr ,,.,,. ypted Blob> ) 00:11:49 <Encrypted Blob> ( <Encr ,,._,,., ypted Blob> ) 00:00:00 Unknown 00:00:22 Unknown 00:00:02 Unknown 00:03:03 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> ( <Encr ,,_,,, ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 Unknown 00:01:50 Unknown 00:24:05 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,,._,,. ypted Blob> ) 00:04:19 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:02 Unknown 00:04:08 Unknown 00:00:02 <Encrypted Blob> ( <Encr ,,._,,, ypted Blob> ) 00:00:02 Unknown 00:02:31 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 Cancelled Cancelled Cancelled Cancelled Missed Missed Missed Missed Missed Missed Missed EFTA00506521

--=PAGE_BREAK=--

(1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1] [2] (1 [2] (1] [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone 2019-05-29 22:16:40 (UTC) 2019-05-30 14:23:20 (UTC) 2019-05-30 14:23:20 (UTC) 2019-05-30 14:23:20 (UTC) 2019-05-30 14:40:00 (UTC) 2019-05-30 15:46:40 (UTC) 2019-05-30 19:40:00 (UTC) 2019-05-30 19:40:00 (UTC) 2019-05-30 20:46:40 (UTC) 2019-05-30 21:03:20 (UTC) 2019-05-30 21:03:20 (UTC) 2019-05-30 21:53:20 (UTC) 2019-05-30 22:10:00 (UTC) 2019-05-31 12:53:20 (UTC) 2019-05-31 13:10:00 (UTC) 2019-05-31 13:43:20 (UTC) 2019-05-31 15:06:40 (UTC) 2019-05-31 15:06:40 (UTC) 2019-05-31 18:10:00 (UTC) 2019-05-31 20:23:20 (UTC) 2019-06-01 16:06:40 (UTC) 2019-06-01 16:06:40 (UTC) 2019-06-01 16:06:40 (UTC) 2019-06-01 16:06:40 (UTC) Incoming Phone Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone Incoming Phone Outgoing Phone Incoming Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 Unknown 00:07:55 <Encrypted Blob> ( <Encr ,,_,,., ypted Blob> ) 00:00:01 Unknown 00:02:07 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:02 Unknown 00:00:08 Unknown( Unknown) — 00:32:49 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> ( <Encr ,,._,,, ypted Blob> ) 00:02:49 Unknown ( Unknown ) 00:01:07 <Encrypted Blob> ( <Encr ,,_,,, ypted Blob> ) 00:00:02 Unknown 00:00:58 Unknown 00:01:12 <Encrypted Blob> (<Encr ,,._,,, ypted Blob> ) 00:00:01 Unknown 00:01:20 Unknown 00:03:57 <Encrypted Blob> ( <Encr ,,._,,, ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:27 <Encrypted Blob> (<Encr ,,. 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,,... ypted Blob> ) 0:01:37 <Encrypted Blob> ( <Encr ,,._,,, ypted Blob> ) 00:00:00 Unknown( Unknown) — 00:00:00 Unknown (Unknown) —_00:00:00 Missed Missed Missed Missed Missed Missed Missed Missed EFTA00506522

--=PAGE_BREAK=--

(1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1] [2] (1 [2] (1] [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1] [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] (1) [2] iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone 2019-06-01 16:06:40 (UTC) 2019-06-01 16:56:40 (UTC) 2019-06-01 21:40:00 (UTC) 2019-06-01 21:56:40 (UTC) 2019-06-01 21:56:40 (UTC) 2019-06-01 21:56:40 (UTC) 2019-06-01 22:13:20 (UTC) 2019-06-01 22:13:20 (UTC) 2019-06-01 22:13:20 (UTC) 2019-06-01 22:46:40 (UTC) 2019-06-01 22:46:40 (UTC) 2019-06-02 01:50:00 (UTC) 2019-06-02 11:00:00 (UTC) 2019-06-02 11:33:20 (UTC) 2019-06-02 12:06:40 (UTC) 2019-06-02 15:43:20 (UTC) 2019-06-02 16:00:00 (UTC) 2019-06-02 16:16:40 (UTC) 2019-06-02 16:16:40 (UTC) 2019-06-02 16:33:20 (UTC) 2019-06-02 16:33:20 (UTC) 2019-06-02 18:13:20 (UTC) 2019-06-02 18:13:20 (UTC) 2019-06-02 18:13:20 (UTC) Incoming Phone Incoming Phone Outgoing Phone Incoming Phone Outgoing Phone Incoming Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Outgoing Phone Incoming Phone Outgoing Phone Outgoing Phone <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 Unknown 00:14:08 <Encrypted Blob> (<Encr ,,_,,, ypted Blob> ) 00:11:35 <Encrypted Blob> (<Encr ,,. 1. ypted Blob> ) 00:00:05 Unknown 00:00:18 <Encrypted Blob> ( <Encr ,,._,,., ypted Blob> ) 00:00:06 Unknown 00:00:03 Unknown 00:01:19 <Encrypted Blob> (<Encr ,,_,,, ypted Blob> ) 00:03:09 Unknown ( Unknown ) 00:00:37 Unknown ( Unknown ) 00:00:03 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,,._,,, ypted Blob> ) 00:02:05 <Encrypted Blob> ( <Encr ,,._,,., ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:18 <Encrypted Blob> (<Encr ,,._,,, ypted Blob> ) 00:00:10 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:37 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:01:50 <Encrypted Blob> (<Encr ,,. 1. ypted Blob> ) 00:00:21 Unknown 00:01:49 <Encrypted Blob> ( <Encr ,,._,,, ypted Blob> ) 00:00:04 <Encrypted Blob> ( <Encr ,,_,,., ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 00:00:00 Missed Missed Missed Missed Cancelled Cancelled EFTA00506523

--=PAGE_BREAK=--

(1) [2] (1) [2] (1) [2] (1] (1) (1) (1) (1) (1) (1) (1) (1] [1] Source File [2] iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone 2019-06-02 18:13:20 (UTC) 2019-06-02 18:13:20 (UTC) 2019-06-02 18:13:20 (UTC) 2019-06-02 18:14:02 (UTC) 2019-06-02 18:32:15 (UTC) 2019-06-02 19:46:27 (UTC) 2019-06-02 19:46:33 (UTC) 2019-06-02 20:12:48 (UTC) 2019-06-02 22:05:32 (UTC) 2019-06-02 22:09:34 (UTC) 2019-06-02 22:33:48 (UTC) 2019-06-02 22:36:47 (UTC) Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone Outgoing Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Outgoing Phone Notes [1] Source Device NYC024328.aff4/Macintosh HD /Users/jee/Library/Application Support/CallHistoryDB/CallHistory.storedata Recovered Record Unknown 00:00:08 <Encrypted Blob> (<Encr ,.,,. ypted Blob> ) 00:04:42 <Encrypted Blob> ( <Encr ,,._,,, ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,,_,,., ypted Blob> ) 00:00:32 Unknown 00:00:30 <Encrypted Blob> ( <Encr ,,._,,, ypted Blob> ) 00:00:03 Unknown 00:00:01 <Encrypted Blob> (<Encr ,, .. ypted Blob> ) 00:00:53 <Encrypted Blob> ( <Encr ,,._,,, ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 1. ypted Blob> ) 90:00:00 <Encrypted Blob> ( <Encr ,,_,,., ypted Blob> ) 00:00:00 <Encrypted Blob> (<Encr ,, 4. ypted Blob> ) 00:03:47 Case Data: Calls (1001-1100 of 1416) Case Data: Calls (1201-1300 of 1416) Cancelled Missed Missed Cancelled EFTA00506524