(1) (1) (1) (1] (1) (1) (1) (1) (1) (1) (1) (1) (1) (1 (1) (1) e Menu o Overview © Device Details =» NYC024328.aff4 (Evidence ID: NYC024328.aff4 - 001) © Case Data = Calendar Items Calls Contacts Messages Top Contacts User Accounts Case Data: Calls (801-900 of 1416) Service Direction Type Date FaceTime Outgoing Video en (nC) 2018-11-15 23:31:30 (UTC) 2018-11-15 23:31:45 (UTC) 2018-11-18 23:08:13 (UTC) 2018-11-19 00:19:47 (UTC) 2018-11-21 20:40:07 (UTC) 2018-11-21 21:15:20 (UTC) 2018-11-22 19:38:33 (UTC) 2018-11-29 20:23:10 (UTC) 2018-11-30 15:04:20 (UTC) 2018-12-10 02:58:34 (UTC) 2018-12-14 21:59:48 (UTC) 2018-12-14 22:00:55 (UTC) 2018-12-15 19:11:53 (UTC) 2018-12-18 11:21:37 (UTC) 2018-12-19 22:46:14 (UTC) FaceTime Outgoing Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Audio FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Outgoing Video Duration Contacts (HH:MM:SS) <Encrypted Blob> ( <Ener ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Ener ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:34:49 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 Unknown 00:03:00 Unknown 00:05:02 Status Cancelled Missed Cancelled Missed Missed Missed Missed Missed EFTA00506574

--=PAGE_BREAK=--

(1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) 2018-12-20 10:37:58 (UTC) 2018-12-20 10:38:28 (UTC) 2018-12-20 11:05:56 (UTC) 2018-12-20 12:29:02 (UTC) 2018-12-20 12:29:19 (UTC) 2018-12-20 18:53:15 (UTC) 2018-12-20 21:41:26 (UTC) 2018-12-20 22:00:26 (UTC) 2018-12-21 13:05:47 (UTC) 2018-12-21 15:11:08 (UTC) 2018-12-21 15:34:16 (UTC) 2018-12-21 17:30:21 (UTC) 2018-12-21 21:05:45 (UTC) 2018-12-21 21:23:24 (UTC) 2018-12-21 21:30:08 (UTC) 2018-12-22 15:35:57 (UTC) 2018-12-28 21:12:59 (UTC) 2018-12-28 21:13:42 (UTC) 2018-12-28 21:38:24 (UTC) 2018-12-28 22:27:41 (UTC) 2018-12-31 18:43:05 (UTC) 2018-12-31 19:25:39 (UTC) 2018-12-31 20:03:16 (UTC) 2019-01-05 15:33:11 (UTC) FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:00:00 00:00:00 00:00:00 00:11:55 00:00:00 00:14:02 00:07:09 00:21:32 00:00:00 00:00:00 Unknown 00:00:00 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Ener ypted Blob> ) 00:00:00 00:00:00 00:00:00 00:02:43 00:00:30 Unknown 00:24:17 Unknown 00:00:00 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:05:35 00:42:00 00:37:28 00:05:01 00:15:29 Missed Missed Missed Cancelled Cancelled Cancelled Cancelled Cancelled Missed Missed Cancelled EFTA00506575

--=PAGE_BREAK=--

(1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) 2019-01-19 15:44:30 (UTC) 2019-01-19 15:45:26 (UTC) 2019-01-19 15:47:46 (UTC) 2019-01-20 15:00:26 (UTC) 2019-01-20 17:14:55 (UTC) 2019-01-27 17:17:38 (UTC) 2019-01-28 19:31:40 (UTC) 2019-01-28 19:37:00 (UTC) 2019-01-28 19:39:50 (UTC) 2019-01-28 20:02:59 (UTC) 2019-01-29 16:27:48 (UTC) FaceTime Incoming Audio 1ea7s4 (UTC) 2019-01-31 17:46:46 (UTC) 2019-02-06 15:54:11 (UTC) 2019-02-10 18:42:17 (UTC) 2019-02-10 19:27:20 (UTC) 2019-02-11 23:01:52 (UTC) 2019-02-11 23:34:34 (UTC) 2019-02-13 00:24:28 (UTC) 2019-02-13 00:28:34 (UTC) 2019-02-13 00:30:16 (UTC) 2019-02-15 15:39:38 (UTC) 2019-02-17 14:03:47 (UTC) 2019-02-17 16:56:17 (UTC) FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Outgoing Audio FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Audio FaceTime Incoming Video FaceTime Incoming Video <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:00:00 00:00:00 00:00:00 Unknown 00:00:50 <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Ener ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:01:35 00:02:36 00:00:41 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 Missed Missed Missed Missed Cancelled Missed Missed Missed EFTA00506576

--=PAGE_BREAK=--

(1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) (1) (1) (1) (1] (1) (1) (1) (1) 2019-02-17 22:36:39 (UTC) 2019-02-17 22:39:02 (UTC) 2019-02-18 21:40:11 (UTC) 2019-02-20 02:09:22 (UTC) 2019-02-28 19:36:45 (UTC) 2019-03-09 17:10:15 (UTC) 2019-03-23 15:02:38 (UTC) 2019-03-23 15:23:25 (UTC) 2019-03-23 15:36:40 (UTC) 2019-03-25 10:47:43 (UTC) 2019-03-25 10:58:39 (UTC) 2019-03-25 11:24:05 (UTC) 2019-03-28 17:36:27 (UTC) 2019-03-30 12:55:46 (UTC) 2019-03-30 13:35:51 (UTC) 2019-03-30 20:46:59 (UTC) 2019-03-31 09:19:21 (UTC) 2019-03-31 09:19:38 (UTC) 2019-03-31 09:21:42 (UTC) 2019-03-31 20:19:14 (UTC) 2019-03-31 20:19:20 (UTC) 2019-03-31 20:19:41 (UTC) 2019-03-31 20:20:13 (UTC) 2019-03-31 20:21:43 (UTC) FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Audio FaceTime Outgoing Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Incoming Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Audio FaceTime Incoming Video <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Ener ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:02:44 00:00:00 00:00:08 00:10:29 00:10:54 00:25:25 00:12:05 00:00:00 00:00:00 00:01:52 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 00:00:00 Missed Missed Missed Missed Cancelled Cancelled Cancelled Cancelled Cancelled Cancelled Cancelled Cancelled Missed EFTA00506577

--=PAGE_BREAK=--

(1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) (1) [2] [1] Source File [2] 2019-03-31 20:22:53 (UTC) 2019-03-31 20:23:01 (UTC) 2019-03-31 20:23:08 (UTC) 2019-04-01 14:14:00 (UTC) 2019-04-01 15:28:00 (UTC) FaceTime Incoming Video i011 (UTC) 2019-04-01 16:37:36 (UTC) 2019-04-01 16:43:38 (UTC) 2019-04-01 16:45:23 (UTC) 2019-04-01 18:51:52 (UTC) 2019-04-03 11:51:27 (UTC) 2019-04-03 21:50:00 (UTC) FaceTime Outgoing Audio FaceTime Outgoing Audio FaceTime Incoming Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Outgoing Video FaceTime Incoming Video FaceTime Incoming Audio iPhone Incoming Phone Notes [1] Source Device NYC024328.aff4/Macintosh HD /Users/jee/Library/Application Support/CallHistoryDB/CallHistory.storedata Recovered Record <Encrypted Blob> ( <Ener “Encrypted B 00:00:00 Unknown 00:00:00 “Encrypted Blob (<Ener 99.99:00 ie) (<Ener 99.07:50 “Encrypted Blob (<Ener 99.91.03 ite) (<Ener 99.09:00 edo) (<Ener 99.00:00 Unknown (Unknown) — 00:00:36 Case Data: Calls (701-800 of 1416) Case Data: Calls (901-1000 of 1416) Cancelled Cancelled Missed Missed EFTA00506578