• Menu
o Overview
o Device Details
• NYCO24383.aff4
(Evidence ID: NYC024383.aff4 - 001)
o Case Data
• Calendar Items
• Calls
• Contacts
• Messages
• Top Contacts
• User Accounts
Case Data: Calls (401-500 of 765)
Duration
Service Direction Type Date Contacts Status
(HH:MM:SS)
[1] iPhone 2019-07-03
Outgoing Phone Unknown 00:00:10
[2] (UTC)
[1] iPhone 2019-07-03
Outgoing Phone Unknown 00:00:47
[2] (UTC)
[1] iPhone 2019-07-03 <Encrypted Blob> ( <Encr
Incoming Phone 00:02:06
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-03 <Encrypted Blob> ( <Encr 00:00:33
Outgoing Phone
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-03 <Encrypted Blob> ( <Encr 00:00:00
Incoming Phone Missed
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-03 <Encrypted Blob> ( <Encr 00:00:12
Outgoing Phone
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-03 <Encrypted Blob> ( <Encr 00:00:23
Outgoing Phone
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-03 <Encrypted Blob> ( <Encr 00:00:00
Incoming Phone Missed
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-03 <Encrypted Blob> ( <Encr 00:00:00
Incoming Phone Missed
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-03 <Encrypted Blob> ( <Encr 00:00:16
Incoming Phone
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-03 <Encrypted Blob> ( <Encr 00:00:10
Outgoing Phone
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-03
Outgoing Phone Unknown 00:00:45
[2] (UTC)
[1] iPhone 2019-07-03
Outgoing Phone Unknown 00:02:04
[2] (UTC)
[1] iPhone 2019-07-03 <Encrypted Blob> ( <Encr 0thoth00
Incoming Phone Missed
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-03
Outgoing Phone Unknown 00:00:36
[2] (UTC)
[1] iPhone 2019-07-03
Outgoing Phone Unknown 00:00:03
[2] (UTC)
EFTA01219032
2019-07-03
iPhone Outgoing Phone Unknown 00:01:46
(UTC)
2019-07-03 <Encrypted Blob> ( <Encr
iPhone Outgoing Phone 00:03.08
20:03:20 (UTC) ypted Blob> )
2019-07-03
iPhone Outgoing Phone Unknown 00:01:32
(UTC)
2019-07-03 <Encrypted Blob> ( <Encr 00:00:00
iPhone Outgoing Phone Cancelled
(UTC) ypted Blob> )
2019-07-03 <Encrypted Blob> ( <Encr 00:00:00
iPhone Incoming Phone Missed
(UTC) ypted Blob> )
2019-07-03
iPhone Outgoing Phone (um Unknown 00:00:14
2019-07-03 <Encrypted Blob> ( <Encr 00:00:00
iPhone Incoming Phone (um Missed
ypted Blob> )
2019-07-03 <Encrypted Blob> ( <Encr 00:01:05
iPhone Outgoing Phone
(UTC) ypted Blob> )
2019-07-03 <Encrypted Blob> ( <Encr 00:00:00
iPhone Incoming Phone Missed
21:26:40 (urC) ypted Blob> )
2019-07-03
iPhone Outgoing Phone Unknown 00:12:42
(UTC)
2019-07-03
iPhone Outgoing Phone (um Unknown 00:34:46
2019-07-03 <Encrypted Blob> ( <Encr 00:00:00
FaceTime Incoming Video 22:34:43
(UTC) ypted Blob> )
2019-07-03 <Encrypted Blob> ( <Encr 00:00:00
iPhone Incoming Phone
(UTC) ypted Blob> )
2019-07-03
iPhone Outgoing Phone Unknown 00:00:03
(UTC)
2019-07-03
iPhone Outgoing Phone Unknown 00:00:04
(UTC)
2019-07-03
iPhone Outgoing Phone Unknown 00:00:04
(UTC)
<Encrypted Blob> ( <Encr 00:00:00
iPhone Incoming Phone 2019-07-04
00:13:20 (UTC) ypted Blob> )
2019-07-04 <Encrypted Blob> ( <Encr 00:00:00
FaceTime Incoming Video 00:36:12
(UTC) ypted Blob> )
2019-07-04 <Encrypted Blob> ( <Encr 00:00:00
FaceTime Incoming Video 00:36:26 (um
ypted Blob> )
2019-07-04
FaceTime Outgoing Video 00:55:01 Unknown 00:13:50
(UTC)
2019-07-04
FaceTime Outgoing Video 01:42:32 Unknown 00:00:00 Cancelled
(UTC)
2019-07-04 <Encrypted Blob> ( <Encr
FaceTime Outgoing Video 01:43:06 00:00:00 Cancelled
(UTC) ypted Blob> )
2 -04 <Encrypted Blob> ( <Encr 00:00:00
FaceTime Outgoing Video Cancelled
01:44:41 (UTC) ypted Blob> )
2 -04 <Encrypted Blob> ( <Encr 00:00:00
FaceTime Outgoing Video Cancelled
01:48:07 (UTC) ypted Blob> )
EFTA01219033
2019-07-04 <Encrypted Blob> ( <Encr 00:00:00
iPhone Incoming Phone 12:10:00 ypted Blob> )
(UTC)
2019-07-04 <Encrypted Blob> ( <Encr 00:00:04
iPhone Outgoing Phone 14:40:00
(UTC) ypted Blob> )
2019-07-04 <Encrypted Blob> ( <Encr
iPhone Outgoing Phone 14:40:00 00:05:48
(UTC) ypted Blob> )
2019-07-04 <Encrypted Blob> ( <Encr 00:00:00
iPhone Incoming Phone 14:40:00 ypted Blob> ) Missed
(UTC)
2019-07-04 <Encrypted Blob> ( <Encr 00:00:04
iPhone Outgoing Phone 14:40:00
(UTC) ypted Blob> )
2019-07-04 <Encrypted Blob> ( <Encr
iPhone Outgoing Phone 14:40:00 00:08:25
(UTC) ypted Blob> )
2019-07-04 <Encrypted Blob> ( <Encr 00:00:00
iPhone Outgoing Phone 14:56:40 ypted Blob> ) Cancelled
(UTC)
2019-07-04
iPhone Incoming Phone 14:56:40 Unknown 00:01:17
(UTC)
2019-07-04
iPhone Incoming Phone 17:43:20 Unknown 00:00:11
(UTC)
2019-07-04
iPhone Incoming Phone 17:43:20 Unknown 00:00:13
(UTC)
2019-07-04
iPhone Outgoing Phone 19:56:40 Unknown 00:02:02
(UTC)
2019-07-04 <Encrypted Blob> ( <Encr 00:01:31
iPhone Outgoing Phone 19:56:40 ypted Blob> )
(UTC)
<Encrypted Blob> ( <Encr 00:17:12
iPhone Outgoing Phone 2019-07-04
19:56:40 (UTC) ypted Blob> )
<Encrypted Blob> ( <_____
<Encr 00:39:30
iPhone Incoming Phone 2019-07-04
20:13:20 (UTC) ypted Blob> )
2019-07-04 <Encrypted Blob> ( <Encr 00:00:00
FaceTime Outgoing Video 21:01:07 Cancelled
(UTC) ypted Blob> )
2019-07-04
iPhone Outgoing Phone 21:03:20 Unknown 00:01:14
(UTC)
2019-07-04 <Encrypted Blob> ( <Encr
iPhone Outgoing Phone 00:11:41
(UTC) ypted Blob> )
2019-07-04 <Encrypted Blob> ( <Encr 00:09:45
iPhone Outgoing Phone
(UTC) ypted Blob> )
2019-07-04
iPhone Outgoing Phone 21:03:20 Unknown 00:02:11
(UTC)
2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
FaceTime Incoming Video 03:06:34
(UTC) ypted Blob> )
2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
iPhone Incoming Phone 10:23:20 ypted Blob> ) Missed
(UTC)
2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
iPhone Incoming Phone 10:23:20 ypted Blob> )
(UTC)
2019-07-05 <Encrypted Blob> ( <Encr 00:16:36
iPhone Outgoing Phone 10:40:00 ypted Blob> )
(UTC)
2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
FaceTime Outgoing Audio Cancelled
11:27:19 (UTC) ypted Blob> )
EFTA01219034
<Encrypted Blob> ( <Encr 00:00:00
FaceTime Incoming Video 2019-07-05
11:31:39 (UTC) ypted Blob> )
2019-07-05
iPhone Incoming Phone Unknown 00:00:26
12:03:20 (UTC)
2019-07-05
iPhone Outgoing Phone Unknown 00:00:14
12:03:20 (UTC)
2019-07-05 <Encrypted Blob> ( <Encr 00:01:39
iPhone Incoming Phone
12:20:00 (UTC) ypted Blob> )
2019-07-05 <Encrypted Blob> ( <Encr 00:00:34
iPhone Incoming Phone
12:36:40 (UTC) ypted Blob> )
2019-07-05
iPhone Incoming Phone Unknown 00:00:14
12:36:40 (UTC)
2019-07-05
iPhone Outgoing Phone Unknown 00:00:46
12:53:20 (UTC)
2019-07-05
iPhone Incoming Phone Unknown 00:00:23
12:53:20 (UTC)
2019-07-05
iPhone Incoming Phone Unknown 00:01:45
12:53:20 (UTC)
2019-07-05
iPhone Outgoing Phone Unknown 00:01:43
12:53:20 (UTC)
2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
iPhone Outgoing Phone Cancelled
13:10:00 (UTC) ypted Blob> )
2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
iPhone Outgoing Phone Cancelled
13:10:00 (UTC) ypted Blob> )
2019-07-05
iPhone Incoming Phone Unknown 00:00:34
13:10:00 (UTC)
2019-07-05 <Encrypted Blob> ( <Encr
iPhone Outgoing Phone 00:00:00 Cancelled
13:10:00 (UTC) ypted Blob> )
2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
iPhone Outgoing Phone Cancelled
13:10:00 (UTC) ypted Blob> )
2019-07-05 <Encrypted Blob> ( <Encr 00:00:18
iPhone Incoming Phone
13:10:00 (UTC) ypted Blob> )
2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
iPhone Incoming Phone Missed
13:10:00 (UTC) ypted Blob> )
2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
iPhone Outgoing Phone Cancelled
13:10:00 (UTC) ypted Blob> )
2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
i Phone Outgoing Phone Cancelled
13:26:40 (UTC) ypted Blob> )
2019-07-05 <Encrypted Blob> ( <Encr 00:00:44
iPhone Outgoing Phone
13:43:20 (UTC) ypted Blob> )
2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
iPhone Outgoing Phone Cancelled
14:00:00 (UTC) ypted Blob> )
2019-07-05 <Encrypted Blob> ( <Encr 00:00:13
iPhone Incoming Phone
14:00:00 (UTC) ypted Blob> )
2019-07-05 <Encrypted Blob> ( <Encr 00:00:22
iPhone Incoming Phone
14:16:40 (UTC) ypted Blob> )
2019-07-05
iPhone Outgoing Phone Unknown 00:02:39
14:16:40 (UTC)
EFTA01219035
[1] iPhone 2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
Outgoing Phone Cancelled
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-05 <Encrypted Blob> ( <Encr
Incoming Phone 00:00:00 Missed
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
Incoming Phone Missed
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
Incoming Phone Missed
[2] (UTC) ypted Blob>
[1] iPhone 2019-07-05
Outgoing Phone Unknown 00:04:29
[2] (UTC)
[1] iPhone 2019-07-05 <Encrypted Blob> ( <Encr
Outgoing Phone 00:00:45
[2] (UTC) ypted Blob> )
[I] iPhone 2019-07-05
Outgoing Phone Unknown 00:00:09
[2] (UTC)
[I iPhone 2019-07-05
Outgoing Phone Unknown 00:03:06
[2] (UTC)
[I] iPhone 2019-07-05 <Encrypted Blob> ( <Encr 00:00:30
Incoming Phone
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-05 <Encrypted Blob> ( <Encr 00:01:15
Incoming Phone
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-05 <Encrypted Blob> ( <Encr 00:00:36
Outgoing Phone
[2] (UTC) ypted Blob> )
[1] iPhone 2019-07-05 <Encrypted Blob> ( <Encr 00:00:00
Incoming Phone Missed
[2] (UTC) ypted Blob>
Notes
[1] Source Device NYC024383.aff4/Macintosh HD
[1] Source File /Users/myla-lsj/Library/Application Support/CallHistoryDB/CallHistory.storedata
[2] Recovered Record
Case Data: Calls (301-400 of 765) Case Data: Calls (501-600 of 765)
EFTA01219036