EFTA01064880.pdf
📄 Extracted Text (214 words)
• Menu
o Overview
o Device Details
■ NYC024364.dmg
(Evidence ID: NYC024364.dmg - 001)
o Case Data
■ Calendar Items
■ Calls
■ Contacts
■ Messages
■ Notes
■ Top Contacts
■ User Accounts
Device:
NYC024364.dmg
— (Evidence ID:
NYC024364.dmg
-001)
Path Nolumes/MSAN2/NYC024364/disk26 2020-07-08 14-53-29/NYC024364.dmg
Type ImageFile
Sector Size 512
Initial BlackLight Case Version BlackLight 2020 Release 1
Volume Name Macintosh HD
Partition Type ImageFile
File System HFS+
OS Version Mac OS X (10.11.6)
OS Install Date
Identifier 1
Volume Create Date 2015-09-17 05:14:12 (UNKN)
Volume Modify Date 2016-08-24 06:47:35 (UTC)
Volume Backup Date
Volume Checked Date 2015-09-17 12:14:12 (UTC)
Root File Create Date 2015-09-17 12:14:12 (UTC)
Root File Modify Date 2016-08-23 11:49:38 (UTC)
Root File Accessed Date 2016-08-22 20:50:32 (UTC)
File Count 1321255
Folder Count 275718
Sector Size 512
Sector Count 1951858688
Total Size 930.7 GB (999351648256 Bytes)
Space Used 916.9 GB (984559308800 Bytes)
Space Available 13.8 GB (14792339456 Bytes)
Block Sector Count 8
EFTA01064880
Last File ID 11471814
Write Count 196519155
Model MacBookPro11,5
Host Name Administrators-MacBook-Pro
Serial Number C02QMOGUGWDP
macOS Setup Timestamp 2015-11-30 23:48:08 (UTC)
Time Zone America/New York
Language en US
MAC (AirPort_Brcm4360/en0) AC:BC:32:BE:3A:AF
Dynamic IP 192.168.8.202
MAC (AppleThunderboltIPPort/en1) 6A:00:01:3F:83:50
MAC (AppleThunderboltIPPort/en2) 6A:00:01:3F:83:51
MAC (BCM5701Enet/en4) 40:6C:8F:3E:12:CD
MAC (IOUserEthernetController/en3) 6C:40:08:AD:3C:41
MAC (AppleUSBEthernetHostAQM/en4) D2:03:4B:A0:F7:44
MAC (AppleUSBECMData/en7) 00:A0:C6:00:00:00
Dynamic IP 192.168.1.4
Application Artifacts
EFTA01064881
ℹ️ Document Details
SHA-256
c571f2c99da1239ba9f8b71cd322b16990695b2ecbd26fc1312d6dc4b4d1015f
Bates Number
EFTA01064880
Dataset
DataSet-9
Document Type
document
Pages
2
Comments 0