EFTA00506530.pdf

• Menu o Overview o Device Details • NYC024328.aff4 (Evidence ID: NYC024328.aff4 - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Case Data: Calls (1301-1400 of 1416) Duration Service Direction Type Date Contacts Status (HH:MM:SS) 2019-06-06 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed 20:38:28 (urC) ypted Blob> ) 2019-06-06 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone (f/t) Missed ypted Blob> ) 2019-06-06 <Encrypted Blob> ( <Encr [1] iPhone Outgoing Phone 21:04:44 00:02:30 (UTC) ypted Blob> ) 2019-06-06 <Encrypted Blob> ( <Encr [1] iPhone Outgoing Phone 00:00:02 (UTC) ypted Blob> ) 2019-06-06 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 21:31:3 1 Missed (UTC) ypted Blob> ) 2019-06-06 <Encrypted Blob> ( <Encr 00:00:00 [1] FaceTime Incoming Video 21:49:28 Missed (UTC) ypted Blob> ) 2 -06 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:51 21:50:41 (UTC) ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr 00:02:00 [1] iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr 00:00:10 [1] iPhone Incoming Phone 11:45:21 (uTC) ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr 00:01:44 [1] iPhone Incoming Phone 11:49:34 (UTC) ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 13:50:35 Missed (UTC) ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 14:26:05 Missed (UTC) ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 15:35:21 (urc) Missed ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 16:10:50 Missed (UTC) ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 16:22:31 (urc) Missed ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr 00:00:57 [1] iPhone Outgoing Phone 18:17:12 (UTC) ypted Blob> ) EFTA00506530  2019-06-07 <Encrypted Blob> ( <Encr 00:00:40 [1] iPhone Outgoing Phone (UTC) ypted Blob> ) Phone 2019-06-07 [1] iPhone Outgoing Unknown 00:00:00 Cancelled 18:32:55 (UTC) Phone 2019-06-07 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Outgoing Cancelled 18:33:01 (UTC) ypted Blob> ) Phone 2019-06-07 <Encrypted Blob> ( <Encr 00:00:03 [1] iPhone Outgoing 18:33:23 (UTC) ypted Blob> ) Phone 2019-06-07 <Encrypted Blob> ( <Encr 00:00:01 [1] iPhone Outgoing 18:34:12 (UTC) ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 00:02:25 18:34:56 (UTC) ypted Blob> ) Phone 2019-06-07 <Encrypted Blob> ( <Encr 00:00:04 [1] iPhone Outgoing 18:37:58 (UTC) ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr 00:02:00 [1] iPhone Incoming Phone 18:40:45 (UTC) ypted Blob> ) 2019-06-07 [1] iPhone Incoming Phone Unknown 00:00:00 Missed 23:24:13 (UTC) 2019-06-07 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 00:00:00 Missed 23:24:18 (UTC) ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed 23:24:51 (UTC) ypted Blob> ) 2019-06-07 <Encrypted Blob> ( <Encr 00:00:05 [1] iPhone Incoming Phone 23:31:44 (UTC) ypted Blob> ) Phone 2019-06-07 [1] iPhone Outgoing Unknown 00:05:38 23:32:12 (UTC) 2019-06-07 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed 23:42:17 (UTC) ypted Blob> ) Phone 2019-06-08 <Encrypted Blob> ( <Encr [1] iPhone Outgoing 00:01:20 02:33:39 (UTC) ypted Blob> ) 2019-06-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2019-06-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2019-06-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2019-06-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) Phone 2019-06-08 <Encrypted Blob> ( <Encr 00:00:55 [1] iPhone Outgoing 16:52:08 (UTC) ypted Blob> ) 2019-06-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) Phone 2019-06-08 <Encrypted Blob> ( <Encr 00:00:13 [1] iPhone Outgoing 18:30:30 (UTC) ypted Blob> ) 2019-06-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2019-06-08 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) EFTA00506531  2019-06-08 <Encrypted Blob> ( <Encr iPhone Incoming Phone 00:02:01 (UTC) ypted Blob> ) 2019-06-08 <Encrypted Blob> ( <Encr 00:00:00 iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2019-06-09 <Encrypted Blob> ( <Encr 00:04:42 iPhone Incoming Phone (UTC) ypted Blob> ) 2019-06-09 <Encrypted Blob> ( <Encr 00:00:04 iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-06-09 <Encrypted Blob> ( <Encr 00:00:00 iPhone Outgoing Phone Cancelled (UTC) ypted Blob> ) 2019-06-09 <Encrypted Blob> ( <Encr 00:00:04 iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-06-09 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 14:04:21 onc) Missed ypted Blob> ) 2019-06-09 <Encrypted Blob> ( <Encr [1] iPhone Outgoing Phone 15:13:43 ont) 00:05:02 ypted Blob> ) 2019-06-09 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 17:38:14 (urc) 00:00:13 ypted Blob> ) 2019-06-09 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone 17:42:39 Missed (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:43 [I] iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:00 [I] iPhone Outgoing Phone Cancelled (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:14 [I] iPhone Outgoing Phone 13:53:50 (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:02:39 [I] iPhone Incoming Phone (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:00 [I] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:02 [I] iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr [I] iPhone Incoming Phone 15:13:41 00:00:32 (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr [I] iPhone Outgoing Phone 00:00:01 (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:02 [1] iPhone Outgoing Phone 15:37:00 (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:09 [1] iPhone Outgoing Phone 15:37:19 (UTC) ypted Blob> ) 2019-06-10 [1] iPhone Incoming Phone 17:16:28 Unknown ( Unknown ) 00:00:00 Missed (UTC) 2019-06-10 <Encrypted Blob> ( <Encr [1] FaceTime Incoming Audio 19:44:56 00:00:00 Missed (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:10 [I] FaceTime Incoming Audio 19:47:58 (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:49 [I] FaceTime Outgoing Audio 19:48:15 (UTC) ypted Blob> ) EFTA00506532  2019-06-10 <Encrypted Blob> ( <Encr [1] iPhone Outgoing Phone (UTC) ypted Blob> ) 00:00:02 2019-06-10 <Encrypted Blob> ( <Encr [1] iPhone Outgoing Phone 00:00:01 (UTC) ypted Blob> ) 2019-06-10 [1] iPhone Outgoing Phone Unknown 00:00:03 (UTC) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:12 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:06 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 00:34:06 (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:23:32 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:01:46 [1] iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr 00:01:57 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2019-06-10 <Encrypted Blob> ( <Encr [1] iPhone Outgoing Phone 00:01:26 (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:02 [1] iPhone Outgoing Phone 00:51:20 (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:46 [1] iPhone Incoming Phone (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr [1] FaceTime Outgoing Video 00:00:00 Cancelled 12:41:02 (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:18 [1] iPhone Outgoing Phone 15:33:48 (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 00:07:18 (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Outgoing Phone Cancelled 16:10:06 (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Outgoing Phone 16:19:14 Cancelled (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 [1] iPhone Incoming Phone Missed (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:14 [1] iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr [1] iPhone Incoming Phone 00:01:48 16:26:46 (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 [ 1] iPhone Outgoing Phone Cancelled (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 [ 1] FaceTime Outgoing Video 18:35:20 Cancelled (UTC) ypted Blob> ) EFTA00506533  2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video Cancelled 18:35:41 (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 iPhone Outgoing Phone 23:10:00 Cancelled (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 iPhone Outgoing Phone 23:10:39 Cancelled (UTC) ypted Blob> ) 2019-06-11 <Encrypted Blob> ( <Encr 00:00:00 FaceTime Outgoing Video 23:12:13 Cancelled (UTC) ypted Blob> ) 2019-06-12 iPhone Incoming Phone Unknown ( Unknown ) 00:00:00 Missed (UTC) 2019-06-12 <Encrypted Blob> ( <Encr iPhone Outgoing Phone 00:00:43 (UTC) ypted Blob> ) 2019-06-12 <Encrypted Blob> ( <Encr 01:11:51 FaceTime Incoming Video 09:52:20 (UTC) ypted Blob> ) 2019-06-12 <Encrypted Blob> ( <Encr 01:11:51 FaceTime Incoming Video 09:53:20 (UTC) ypted Blob> ) 2019-06-12 <Encrypted Blob> ( <Encr iPhone Outgoing Phone 00:00:09 (UTC) ypted Blob> ) 2019-06-12 <Encrypted Blob> ( <Encr iPhone Outgoing Phone 00:00:12 (UTC) ypted Blob> ) 2019-06-12 <Encrypted Blob> ( <Encr 00:00:21 iPhone Outgoing Phone (UTC) ypted Blob> ) 2019-06-12 iPhone Outgoing Phone Unknown 00:00:23 (UTC) Notes [1] Source Device NYC024328.aff4/Macintosh HD [1] Source File /Users/jee/Library/Application Support/CallHistoryDB/CallHistory.storedata [2] Recovered Record Case Data: Calls (1201-1300 of 1416) Case Data: Calls (1401-1416 of 1416) EFTA00506534