• Menu o Overview o Device Details • NYC024328.aff4 (Evidence ID: NYC024328.aff4 - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Case Data: Calls (1101-1200 of 1416) Service Direction Type Date Duration Contacts (HH:MM:SS) Status [1] [2] iPhone Outgoing Phone 2019-05-25 18:00:00 (UTC) <Encrypted Blob> ( <Encr 00:00:03 ypted Blob> ) [1] [2] iPhone Outgoing Phone 2019-05-25 18:16:40 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Cancelled [1] [2] iPhone Outgoing Phone 2019-05-25 18:16:40 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Cancelled [1] [2] iPhone Outgoing Phone 2019-05-25 18:16:40 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Cancelled [1] [2] iPhone Outgoing Phone 2019-05-25 18:16:40 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Cancelled [1] [2] iPhone Incoming Phone 2019-05-25 19:23:20 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Missed [1] [2] iPhone Incoming Phone 2019-05-25 19:40:00 (UTC) Unknown 01:11:57 [1] [2] iPhone Incoming Phone 2019-05-25 20:46:40 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Missed [11 [2] iPhone Incoming Phone 2019-05-25 20:46:40 (UTC) Unknown 00:00:00 Missed [1] [2] iPhone Outgoing Phone 2019-05-25 21:03:20 (UTC) <Encrypted Blob> ( <Encr 00:10:48 ypted Blob> ) [1] [2] iPhone Incoming Phone 2019-05-25 21:03:20 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Missed [1] [2] iPhone Incoming Phone 2019-05-26 (UTC) <Encrypted Blob> ( <Encr 00:00:40 ypted Blob> ) [1] FaceTime Outgoing Video 2019-05-26 11:33:32 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Cancelled [1] FaceTime Outgoing Video 2019-05-26 11:34:03 (UTC) <Encrypted Blob> ( <Encr 00:15:34 ypted Blob> ) [1] [2] iPhone Outgoing Phone 2019-05-26 (UTC) Unknown 00:00:02 [1] [2] iPhone Outgoing Phone 2019-05-26 (UTC) Unknown 00:00:04 EFTA00506520 iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone Outgoing Phone 2019-05-26 14:33:20 (UTC) Outgoing Phone 2019-05-26 14:33:20 (UTC) Outgoing Phone 2019-05-26 14:33:20 (UTC) Incoming Phone 2019-05-26 (UTC) Incoming Phone 2019-05-26 (UTC) Outgoing Phone 2019-05-27 16:06:40 (UTC) Outgoing Phone 2019-05-27 20:16:40 (UTC) Outgoing Phone 2019-05-27 20:16:40 (UTC) Incoming Phone 2019-05-27 20:33:20 (UTC) Incoming Phone 2019-05-28 14:20:00 (UTC) Incoming Phone 2019-05-28 (UTC) Incoming Phone 2019-05-28 16:50:00 (UTC) Incoming Phone 2019-05-28 18:30:00 (UTC) Outgoing Phone 2019-05-29 13:23:20 (UTC) Incoming Phone 2019-05-29 16:43:20 (UTC) Incoming Phone 2019-05-29 18:06:40 (UTC) Incoming Phone 2019-05-29 19:13:20 (UTC) Incoming Phone 2019-05-29 19:13:20 (UTC) Outgoing Phone 2019-05-29 19:13:20 (UTC) Outgoing Phone 2019-05-29 19:46:40 (UTC) Outgoing Phone 2019-05-29 19:46:40 (UTC) Outgoing Phone 2019-05-29 19:46:40 (UTC) Outgoing Phone 2019-05-29 20:20:00 (UTC) Incoming Phone 2019-05-29 22:16:40 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:09:08 ypted Blob> ) <Encrypted Blob> ( <Encr 00:11:49 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Unknown Unknown Unknown 00:00:22 00:00:02 00:03:03 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Unknown Unknown 00:01:50 00:24:05 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:04:19 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:02 ypted Blob> ) Unknown Unknown 00:04:08 00:00:02 <Encrypted Blob> ( <Encr 00:00:02 ypted Blob> ) Unknown 00:02:31 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Cancelled Cancelled Cancelled Cancelled Missed Missed Missed Missed Missed Missed Missed EFTA00506521 iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone Incoming Phone 2019-05-29 22:16:40 (UTC) Outgoing Phone 2019-05-30 14:23:20 (UTC) Outgoing Phone 2019-05-30 14:23:20 (UTC) Outgoing Phone 2019-05-30 14:23:20 (UTC) Outgoing Phone 2019-05-30 14:40:00 (UTC) Incoming Phone 2019-05-30 15:46:40 (UTC) Incoming Phone 2019-05-30 19:40:00 (UTC) Incoming Phone 2019-05-30 19:40:00 (UTC) Incoming Phone 2019-05-30 20:46:40 (UTC) Incoming Phone 2019-05-30 21:03:20 (UTC) Outgoing phone 2019-05-30 21:03:20 (UTC) Outgoing Phone 2019-05-30 21:53:20 (UTC) Outgoing Phone 2019-05-30 22:10:00 (UTC) Outgoing Phone 2019-05-31 (UTC) Outgoing Phone 2019-05-31 13:10:00 (UTC) Outgoing Phone 2019-05-31 (UTC) Incoming Phone 2019-05-31 (UTC) Incoming Phone 2019-05-31 (UTC) Outgoing Phone 2019-05-31 18:10:00 (UTC) Incoming Phone 2019-05-31 (UTC) Outgoing Phone 2019-06-01 (UTC) Incoming Phone 2019-06-01 (UTC) Incoming Phone 2019-06-01 (UTC) Incoming Phone 2019-06-01 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Unknown 00:07:55 <Encrypted Blob> ( <Encr 00:00:01 ypted Blob> ) Unknown 00:02:07 <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:02 Unknown 00:00:08 Unknown ( Unknown ) 00:32:49 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:02:49 ypted Blob> ) Unknown ( Unknown ) 00:01:07 <Encrypted Blob> ( <Encr 00:00:02 ypted Blob> ) Unknown 00:00:58 Unknown 00:01:12 <Encrypted Blob> ( <Encr ypted Blob> ) 00:00:01 Unknown 00:01:20 Unknown 00:03:57 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:27 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:01:37 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Unknown ( Unknown ) Unknown ( Unknown ) 00:00:00 00:00:00 Missed Missed Missed Missed Missed Missed Missed Missed EFTA00506522 iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone iPhone Incoming Phone 2019-06-01 (UTC) Incoming Phone 2019-06-01 (UTC) Outgoing Phone 2019-06-01 21:40:00 (UTC) Incoming Phone 2019-06-01 (UTC) Outgoing Phone 2019-06-01 21:56:40 (UTC) Incoming Phone 2019-06-01 (UTC) Outgoing Phone 2019-06-01 22:13:20 (UTC) Outgoing Phone 2019-06-01 22:13:20 (UTC) Outgoing Phone 2019-06-01 22:13:20 (UTC) Incoming Phone 2019-06-01 22:46:40 (UTC) Incoming Phone 2019-06-01 22:46:40 (UTC) Incoming Phone 2019-06-02 01:50:00 (UTC) Incoming Phone 2019-06-02 11:00:00 (UTC) Incoming Phone 2019-06-02 (UTC) Incoming Phone 2019-06-02 (UTC) Outgoing Phone 2019-06-02 15:43:20 (UTC) Incoming Phone 2019-06-02 16:00:00 (UTC) Incoming Phone 2019-06-02 (UTC) Incoming Phone 2019-06-02 (UTC) Outgoing Phone 2019-06-02 16:33:20 (UTC) Outgoing Phone 2019-06-02 16:33:20 (UTC) Incoming Phone 2019-06-02 (UTC) Outgoing Phone 2019-06-02 18:13:20 (UTC) Outgoing Phone 2019-06-02 18:13:20 (UTC) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Unknown 00:14:08 <Encrypted Blob> ( <Encr 00:11:35 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:05 ypted Blob> ) Unknown <Encrypted Blob> ( <Encr ypted Blob> ) Unknown Unknown 00:00:18 00:00:06 00:00:03 00:01:19 <Encrypted Blob> ( <Encr 00:03:09 ypted Blob> ) Unknown ( Unknown ) 00:00:37 Unknown ( Unknown ) 00:00:03 <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:02:05 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:18 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:10 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:37 ypted Blob> ) <Encrypted Blob> ( <Encr 00:01:50 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:21 ypted Blob> ) Unknown 00:01:49 <Encrypted Blob> ( <Encr 00:00:04 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) Missed Missed Missed Missed Cancelled Cancelled EFTA00506523 [1] [2] iPhone Outgoing Phone 2019-06-02 (UTC) [1] [2] iPhone Outgoing Phone 2019-06-02 (UTC) [1] [2] iPhone Outgoing Phone 2019-06-02 (UTC) [1] iPhone Outgoing Phone 2019-06-02 (UTC) [1] iPhone Incoming Phone 2019-06-02 (UTC) [1] iPhone Outgoing Phone 2019-06-02 (UTC) [1] iPhone Outgoing Phone 2019-06-02 (UTC) [1] iPhone Incoming Phone 2019-06-02 (UTC) [1] iPhone Incoming Phone 2019-06-02 (UTC) [1] iPhone Incoming Phone 2019-06-02 (UTC) [1] iPhone Outgoing Phone 2019-06-02 (UTC) [1] iPhone Outgoing Phone 2019-06-02 (UTC) Unknown 00:00:08 <Encrypted Blob> ( <Encr 00:04:42 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:32 ypted Blob> ) Unknown 00:00:30 <Encrypted Blob> ( <Encr 00:00:03 ypted Blob> ) Unknown 00:00:01 <Encrypted Blob> ( <Encr 00:00:53 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:00:00 ypted Blob> ) <Encrypted Blob> ( <Encr 00:03:47 ypted Blob> ) Notes [1] Source Device NYCO24328.aff4/Macintosh HD [1] Source File /Users/jee/Libraty/Application Support/CallHistoryDB/CallHistory.storedata [2] Recovered Record Case Data: Calls (1001-1100 of 1416) Case Data: Calls (1201-1300 of 1416) Cancelled Missed Missed Cancelled EFTA00506524