EFTA01219044.pdf

• Menu o Overview o Device Details • NYCO24383.aff4 (Evidence ID: NYC024383.aff4 - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Case Data: Calls (601-700 of 765) Duration Service Direction Type Date Contacts Status (HH:MM:SS) <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 2019-07-08 00:00:26 10:52:00 (UTC) ypted Blob> ) Phone _ 2019-07-08 <Encrypted Blob> ( <Encr 00:14:44 [1] iPhone Outgoing 11:01:05 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Outgoing Phone Cancelled 11:27:19 oiTC) ypted Blob> ) Phone 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Missed 11:31:23 (UTC) ypted Blob> ) Phone 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Missed 11:33:10 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Video 00:02:10 11:40:10 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr [1] iPhone Outgoing Phone 00:00:20 11:45:12 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr iPhone Outgoing Phone 00:00:03 11:54:52 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:16 [1] iPhone Incoming Phone 11:55:11 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed 11:55:21 (UTC) ypted Blob> ) Phone 2019-07-08 <Encrypted Blob> ( <Encr 00:01:07 [1] iPhone Outgoing 11:56:16 (UTC) ypted Blob> ) Phone 2019-07-08 <Encrypted Blob> ( <Encr iPhone Outgoing 00:00:18 12:00:57 (UTC) ypted Blob> ) Phone 2019-07-08 [1] iPhone Outgoing Unknown 00:00:02 12:48:57 (UTC) Phone 2019-07-08 <Encrypted Blob> ( <Encr [1] iPhone Incoming 00:04:01 12:51:07 (UTC) ypted Blob> ) Phone 2019-07-08 <Encrypted Blob> ( <Encr [1] iPhone Outgoing 00:00:31 13:28:59 (UTC) ypted Blob> ) Phone 2019-07-08 <Encrypted Blob> ( <Encr [1] iPhone Outgoing 00:00:00 Cancelled 13:30:09 (UTC) ypted Blob> ) EFTA01219044  2019-07-08 <Encrypted Blob> ( <Encr 00:01:09 [I] iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr [I] iPhone Outgoing Phone (UTC) ypted Blob> ) 00:00:15 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:20 [1] iPhone Incoming Phone 14:22:52 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [I] iPhone Incoming Phone arm ypted Blob> ) Missed 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Outgoing Phone (UTC) ypted Blob> ) Cancelled 2019-07-08 <Encrypted Blob> ( <Encr 00:00:18 [1] iPhone Outgoing Phone 14:41:06 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:10 [1] iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:44 [1] iPhone Incoming Phone arm ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr [1] i Phone Outgoing Phone (UTC) ypted Blob> ) 00:05:48 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Outgoing Phone Cancelled (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:44 [1] iPhone Incoming Phone 15:11:20 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr [1] iPhone Outgoing Phone 00:00:41 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Outgoing Phone 15:13:21 ont) Cancelled ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:24 [I] i Phone Outgoing Phone 15:13:40 ont) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr [I] i Phone Outgoing Phone 15:19:19 ont) 00:02:43 ypted Blob> ) [I] 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone 15:20:00 Missed [2] (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr [I] iPhone Outgoing Phone 15:23:11 00:00:20 ((UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 15:28:19 ont) Missed ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 15:28:30 ont) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr [1] iPhone Outgoing Phone 15:29:46 00:00:01 (UTC) ypted Blob> ) 25:33:16 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 15:33:16 15 ( ypted Blob> ) Cancelled 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [I] iPhone Incoming Phone (um ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr [I] iPhone Incoming Phone (UTC) ypted Blob> ) 00:01:11 EFTA01219045  2019-07-08 [1] FaceTime Incoming Video 17:44:18 (UTC) Unknown 00:00:00 Missed 2019-07-08 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 17:57:50 (UTC) ypted Blob> ) 00:00:00 Cancelled 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 17:58:10 (UTC) ypted Blob> ) Missed 2019-07-08 <Encrypted Blob> ( <Encr 00:01:47 [1] iPhone Outgoing Phone 18:07:49 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:28 [1] iPhone Outgoing Phone 18:10:39 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:40 [1] iPhone Incoming Phone 18:13:46 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed 18:14:20 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:26 [1] iPhone Outgoing Phone 18:14:44 (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:58 [1] iPhone Outgoing Phone 2019474/8 18:37:02 (UTC) ypted Blob> ) <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone "1947438 00:02:14 18:39:58 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:10 [1] iPhone Outgoing Phone 18:55:12 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr [1] iPhone Outgoing Phone 00:01:48 19:24:01 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:04:11 [1] iPhone Incoming Phone 19:28:45 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:01:39 [1] iPhone Outgoing Phone 19:34:57 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:02 [1] iPhone Outgoing Phone 19:40:08 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:01:05 [1] iPhone Outgoing Phone 19:43:12 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr [1] iPhone Outgoing Phone 00:01:12 19:54:28 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 20:00:25 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:01 [1] iPhone Outgoing Phone 21:08:19 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Outgoing Phone Cancelled 21:08:51 (UTC) ypted Blob> ) 2019-07-08 [1] iPhone Outgoing Phone Unknown 00:00:03 21:09:44 (UTC) 2019-07-08 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 00:00:00 Missed 21:12:45 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:05:56 [1] iPhone Incoming Phone 21:13:37 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video Cancelled 21:43:03 (UTC) ypted Blob> ) EFTA01219046  2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Outgoing Phone (UTC) ypted Blob> ) Cancelled 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Cancelled Video 22:43:06 (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:01 [1] iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:03:55 [ 1] iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-07-08 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 23:37:26 (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:13:16 [1] FaceTime Outgoing Video 00:11:25 (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Audio Cancelled 11:06:33 aiTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr [ 1] iPhone Outgoing Phone 00:01:10 11:18:01 (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:04:18 El ] iPhone Incoming Phone 11:19:53 arrC) ypted Blob> ) 2019-07-09 [1] FaceTime Incoming Video Unknown 00:07:03 11:36:55 (UTC) 2019-07-09 <Encrypted Blob> ( <Encr ] iPhone Outgoing Phone 00:00:09 (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:02 [1] iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:01:00 [1] iPhone Incoming Phone 11:57:50 aiTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr [1] iPhone Outgoing Phone 12:08:31 00:00:23 (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:14 [1] iPhone Incoming Phone 12:51:30 (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:14 [1] i Phone Outgoing Phone 12:57:27 arm) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:37 [1] iPhone Incoming Phone 13:15:19 arc) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:31 [1] i Phone Outgoing Phone 13:16:39 arm) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:58 [1] iPhone Incoming Phone 13:17:58 ont) ypted Blob> ) 2019-07-09 [1] iPhone Incoming Phone Unknown 00:00:15 13:18:56 (UTC) 2019-07-09 <Encrypted Blob> ( <Encr [1] i Phone Outgoing Phone 13:28:47 arc) 00:00:18 ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 00:00:20 (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 00:01:10 (UTC) ypted Blob> ) 2019-07-09 [1] iPhone Outgoing Phone 15:25:08 Unknown 00:00:14 (UTC) EFTA01219047  2019-07-09 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 15:43:09 (UTC) ypted Blob> ) [1] FaceTime Incoming Video 2019-07-09 15:46:40 <Encrypted Blob> ( <Encr 00:00:00 [2] (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2019-07-09 [ 1] iPhone Incoming Phone 16:38:01 (urc) Unknown 00:00:00 Missed 2019-07-09 <Encrypted Blob> ( <Encr 00:00:00 [ 1] iPhone Outgoing Phone Cancelled (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr [ 1] iPhone Incoming Phone 16:53:16 00:00:22 (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:47 [1] iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:41 [1] iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Outgoing Video 17:15:28 Cancelled (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:01:00 [ 1] iPhone Incoming Phone 17:19:34 (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:43 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2019-07-09 <Encrypted Blob> ( <Encr 00:00:14 [1] iPhone Incoming Phone (UTC) ypted Blob> ) Notes [1] Source Device NYC024383.aff4/Macintosh HD [1] Source File /Users/myla-lsj/Library/Application Support/CallHistoryDB/CallHistory.storedata [2] Recovered Record Case Data: Calls (501-600 of 765) Case Data: Calls (701-765 of 765) EFTA01219048