(1) (1) (1) (1) (1) (1) (1) (1 (1) (1) (1) (1) (1) (1) (1) (1) e Menu ° Overview © Device Details =» NYC024328.aff4 (Evidence ID: NYC024328.aff4 - 001) © Case Data = Calendar Items Calls Contacts Messages Top Contacts User Accounts Case Data: Calls (1301-1400 of 1416) Service Direction Type Date iPhone Incoming Phone 20:38:28 (UTC) iPhone Incoming Phone 20.3845 (LTC) iPhone Outgoing Phone ery nen iPhone Outgoing Phone 31/14:39 (TC) iPhone Incoming Phone ae I 31 (UTC) FaceTime Incoming Video 21ib28 (TC) FaceTime Outgoing Video 31:50:41 (UTC) iPhone Outgoing Phone J '<4+4% (UTC) iPhone Incoming Phone 7 45.91 (UTC) iPhone Incoming Phone 1) 49:34 (UTC) iPhone Incoming Phone 12-5035 (UTC) iPhone Incoming Phone 14.96.05 (UTC) iPhone Incoming Phone 15.3621 (UTC) iPhone Incoming Phone en 050 (UTC) iPhone Incoming Phone ieaaa1 fre} iPhone Outgoing Phone + 7:12 (UTC) Duration (HH:MM:SS) Contacts <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:00:00 00:02:30 00:00:02 00:00:00 00:00:00 00:00:51 00:02:00 00:00:10 00:01:44 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:57 Status Missed Missed Missed Missed Missed Missed Missed Missed Missed EFTA00506530

--=PAGE_BREAK=--

(1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone 2019-06-07 18:31:09 (UTC) 2019-06-07 18:32:55 (UTC) 2019-06-07 18:33:01 (UTC) 2019-06-07 18:33:23 (UTC) 2019-06-07 18:34:12 (UTC) 2019-06-07 18:34:56 (UTC) 2019-06-07 18:37:58 (UTC) 2019-06-07 18:40:45 (UTC) 2019-06-07 23:24:13 (UTC) 2019-06-07 23:24:18 (UTC) 2019-06-07 23:24:51 (UTC) 2019-06-07 23:31:44 (UTC) 2019-06-07 23:32:12 (UTC) 2019-06-07 23:42:17 (UTC) 2019-06-08 02:33:39 (UTC) 2019-06-08 14:26:52 (UTC) 2019-06-08 14:27:05 (UTC) 2019-06-08 14:39:37 (UTC) 2019-06-08 15:53:34 (UTC) 2019-06-08 16:52:08 (UTC) 2019-06-08 17:25:34 (UTC) 2019-06-08 18:30:30 (UTC) 2019-06-08 19:43:59 (UTC) 2019-06-08 19:49:14 (UTC) Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Outgoing Phone Incoming Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Incoming Phone Outgoing Phone Incoming Phone Incoming Phone Incoming Phone Incoming Phone Outgoing Phone Incoming Phone Outgoing Phone Incoming Phone Incoming Phone <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:40 Unknown 00:00:00 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:00:03 00:00:01 00:02:25 00:00:04 00:02:00 Unknown 00:00:00 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:00:00 00:00:05 Unknown 00:05:38 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Ener ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:01:20 00:00:00 00:00:00 00:00:00 00:00:00 00:00:55 00:00:00 00:00:13 00:00:00 00:00:00 Cancelled Cancelled Missed Missed Missed Missed Missed Missed Missed Missed Missed Missed Missed EFTA00506531

--=PAGE_BREAK=--

(1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) iPhone Incoming Phone 2019-06-08 19:59:58 (UTC) iPhone Incoming Phone 0.02.38 (UTC) iPhone Incoming Phone oy'r3:41 (UTC) iPhone Outgoing Phone pans Tne) iPhone Outgoing Phone 10:53:55 (UTC) iPhone Outgoing Phone ine oni (UTC) iPhone Incoming Phone .94.1 (UTC) iPhone — Outgoing Phone 1s 13:43 (UTC) iPhone Incoming Phone 74914 (UTC) iPhone Incoming Phone 9.49539 (UTC) iPhone Outgoing Phone 13:52:09 (UTC) iPhone Outgoing Phone 13:53:26 (UTC) iPhone Outgoing Phone 13:53:50 (UTC) iPhone Incoming Phone itoo tn (ure) iPhone Incoming Phone 13000 (UTC) iPhone Outgoing Phone +5! 12.23 (UTC) iPhone Incoming Phone 513541 (UTC) iPhone Outgoing Phone Isom cnt) iPhone Outgoing Phone Feeney deen iPhone Outgoing Phone + '37119 (UTC) iPhone Incoming Phone 916.98 (UTC) FaceTime Incoming Audio ioe Oe func) FaceTime Incoming Audio lope conc) 2019-06-10 FaceTime Outgoing Audio 19:48:15 (UTC) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Ener ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:02:01 00:00:00 00:04:42 00:00:04 00:00:00 00:00:04 00:00:00 00:05:02 00:00:13 00:00:00 00:00:43 00:00:00 00:00:14 00:02:39 00:00:00 00:00:02 00:00:32 00:00:01 00:00:02 00:00:09 Unknown ( Unknown ) 00:00:00 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:00:10 00:00:49 Missed Cancelled Missed Missed Cancelled Missed Missed Missed EFTA00506532

--=PAGE_BREAK=--

(1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) 2019-06-10 iPhone Outgoing Phone 59.16.18 (UTC) iPhone Outgoing Phone 30.20.26 (UTC) iPhone Outgoing Phone 202648 (UTC) iPhone Incoming Phone 35 37:19 (WTC) iPhone Incoming Phone 39 91°95 (U7) iPhone Incoming Phone 3153.49 (TC) iPhone Incoming Phone 39 34116 (UTC) iPhone Incoming Phone 2420 TC) iPhone Outgoing Phone 335.91 wy) iPhone Incoming Phone 33 0496 (UTC) iPhone Outgoing Phone 23:47:13 (UTC) iPhone Outgoing Phone ons 20 (UTC) iPhone Incoming Phone 0055 1 31 (UTC) FaceTime Outgoing Video oe 1 “ (ure) iPhone Incoming Phone 78"1<:09 (UTC) iPhone Outgoing Phone 15-3348 (UTC) iPhone Incoming Phone 15:46:00 (UTC) iPhone Outgoing Phone +6115.96 (UTC) iPhone Outgoing Phone +811 9.14 (UTC) iPhone Incoming Phone 3994115 (UTC) iPhone Outgoing Phone e263 (UTC) iPhone Incoming Phone 162646 (UTC) iPhone Outgoing Phone 18:33:01 (UTC) 2019-06-11 FaceTime Outgoing Video 18:35:20 (UTC) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:02 00:00:01 Unknown 00:00:03 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:12 00:00:06 00:34:06 00:23:32 00:00:00 00:01:46 00:01:57 00:01:26 00:00:02 00:00:46 00:00:00 00:00:00 00:00:18 00:07:18 00:00:00 00:00:00 00:00:00 00:00:14 00:01:48 00:00:00 00:00:00 Missed Cancelled Missed Cancelled Cancelled Missed Cancelled Cancelled EFTA00506533

--=PAGE_BREAK=--

(1) (1) (1) (1] (1) (1) (1) (1) [2] (1) (1) (1) (1] [1] Source Device NYC024328.aff4/Macintosh HD [1] Source File /Users/jee/Library/Application Support/CallHistoryDB/CallHistory.storedata [2] FaceTime Outgoing Video ieee fore) iPhone Outgoing Phone 93.16.90 (UTC) iPhone Outgoing Phone 33" 10:39 (UTC) FaceTime Outgoing Video awe ue _— iPhone Incoming Phone 5497 (UTC) iPhone Outgoing Phone 02:34:24 (UTC) FaceTime Incoming Video een (UTC) FaceTime Incoming Video een (ure) iPhone Outgoing Phone 14:49:14 (UTC) iPhone Outgoing Phone 1424.1 (UTC) iPhone Outgoing Phone 15:03:27 (UTC) iPhone Outgoing Phone 15:04:05 (UTC) Notes Recovered Record <Encrypted Blob> ( <Encr “Encrypted B 00:00:00 ite) (<Ener 99.00:00 “Encrypted Blob (<Ener 99.09:00 Unknown (Unknown) — 00:00:00 “Encrypted Blob (<Ener 99.99:43 ie) (<Ener 9 1-11:51 ite) (<Ener 99.00:12 edo) (<Ener 99.00:21 Unknown 00:00:23 Case Data: Calls (1201-1300 of 1416) Case Data: Calls (1401-1416 of 1416) Cancelled Cancelled Cancelled Cancelled Missed EFTA00506534