EFTA00518768.pdf

• Menu o Overview o Device Details ■ NYC024329.aff4 (Evidence ID: NYC024329.aff4 - 001) o Case Data ■ Calendar Items ■ Calls ■ Contacts ■ Messages ■ Notes ■ Top Contacts ■ User Accounts User Accounts User Account Source Device NYC024353.aff4/Macintosh HD Path /Library/Preferences/com.apple.loginwindow.plist User Name jee Account Type Mac Last User HashlD com.apple.loginwindow.plist:0:6910676:lastusemame User Account Source Device NYC024353.aff4/Macintosh HD Path /Library/Preferences/com.apple.loginwindow.plist User Name jee Account Type Mac Last User HashlD com.apple.loginwindow.plist:0:6927060:lastusemame User Account Source Device NYC024329.aff4/Macintosh HD Path /Library/Preferences/com.apple.loginwindow.plist User Name karyna Account Type Mac Last User HashlD com.apple.loginwindow.plist:0:102550:lastusemame User Account Source Device NYC024353.aff4/Macintosh HD Path /Library/Preferences/com.apple.loginwindow.plist User Name jee Account Type Mac Last User HashlD com.apple.loginwindow.plist:0:2726810:lastusemame User Account Source Device NYC024353.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/jee.plist EFTA00518768  User ID 503 User Name jee Full Name jee Path /Users/jee PW Hint celina name Password ******** Account Type Mac User HashlD jee.plist:0:3414438 User Account Source Device NYCO24353.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/root.plist User ID 0 User Name root Full Name System Administrator Path /var/root Password Account Type Mac User HashlD root.plist:0:3414461 User Account Source Device NYCO24353.aff4/Macintosh HD Path /Library/Preferences/com.apple.preferences.accounts.plist User ID 502 User Name setup Full Name setup Deleted Date 2018-01-05 20:50:54 (UTC) Account Type Mac User HashlD com.apple.preferences.accounts.plist:0:2726770:setup User Account Source Device NYCO24329.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/karyna.plist User ID 504 User Name karyna Full Name Karyna Path /Users/karyna PW Hint laptop Password Account Type Mac User HashlD karyna.plist:0:992168 User Account Source Device NYCO24353.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/jee.plist EFTA00518769  User ID 503 User Name jee Full Name jee Path /Users/jee PW Hint celina name Password ******** Account Type Mac User HashlD jee.plist:0:8301312 User Account Source Device NYCO24353.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/root.plist User ID 0 User Name root Full Name System Administrator Path /var/root Password Account Type Mac User HashlD root.plist:0:8301335 User Account Source Device NYCO24353.aff4/Macintosh HD Path /Library/Preferences/com.apple.preferences.accounts.plist User ID 502 User Name setup Full Name setup Deleted Date 2018-01-05 20:50:54 (UTC) Account Type Mac User HashlD com.apple.preferences.accounts.plist:0:6927020:setup User Account Source Device NYCO24329.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/root.plist User ID 0 User Name root Full Name System Administrator Path /var/root Password Account Type Mac User HashlD root.plist:0:992236 User Account Source Device NYCO24353.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/root.plist User ID 0 EFTA00518770  User Name root Full Name System Administrator Path /var/root Password Account Type Mac User HashlD root.plist:0:8284961 User Account Source Device NYCO24353.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/jee.plist User ID 503 User Name jee Full Name jee Path /Users/jee PW Hint celina name Password ******** Account Type Mac User HashlD jee.plist:0:8284938 User Account Source Device NYCO24353.aff4/Macintosh HD Path /Library/Preferences/com.apple.preferences.accounts.plist User ID 502 User Name setup Full Name setup Deleted Date 2018-01-05 20:50:54 (UTC) Account Type Mac User HashlD com.apple.preferences.accounts.plist:0:6910636:setup User Account Source Device NYCO24329.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/Guest.plist User ID 201 User Name Guest Full Name Guest User Path /Users/Guest Password Account Type Mac User HashlD Guest.plist:0:992201 User Account Source Device NYCO24329.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/admin.plist User ID 502 User Name admin EFTA00518771  Full Name Administartor Path /Users/admin Password Account Type Mac User HashlD admin.plist:0:992240 User Account Source Device NYCO24353.aff4/Macintosh HD Path /Users/jee/Library/Application Support/Skype/jeevacation/main.db User Name [email protected] Account Type Skype HashlD normalized accounts:0:9 User Account Source Device NYCO24329.aff4/Macintosh HD Path /Users/sarahk (Deleted)/Library/Application Support/Skype/sarah1c525/main.db User Name Full Name Account Type Skype HashlD normalized accounts:0:1 User Account Source Device NYCO24353.aff4/Macintosh HD Path /Users/jee/Library/Application Support/Skype/jeevacation/main.db User Name [email protected] Account Type Skype HashlD normalized accounts:0:3 User Account Source Device NYCO24353.aff4/Macintosh HD Path /Users/jee/Library/Application Support/Skype/jeevacation/main.db User Name [email protected] Account Type Skype HashlD normalized accounts:0:6 EFTA00518772