EFTA00509797.pdf

• Menu o Overview o Device Details ■ NYC024328.aff4 (Evidence ID: NYC024328.aff4 - 001) o Case Data ■ Calendar Items ■ Calls ■ Contacts ■ Messages ■ Top Contacts ■ User Accounts User Accounts User Account Source Device NYC024328.aff4/Macintosh HD Path /Library/Preferences/com.apple.loginwindow.plist User Name jee Account Type Mac Last User HashlD com.apple.loginwindow.plist:0:51392:lastusemame User Account Source Device NYC024328.aff4/Macintosh HD Path /private/var/db/dslocaUnodes/Default/users/jee.plist User ID 503 User Name jee Full Name jee Path /Users/jee PW Hint celina name Password ******** Account Type Mac User HashlD jee.plist:0:759280 User Account Source Device NYC024328.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/root.plist User ID 0 User Name root Full Name System Administrator Path /var/root Password Account Type Mac User HashlD root.plist:0:759303 User Account EFTA00509797 Source Device NYCO24328.aff4/Macintosh HD Path /Library/Preferences/com.apple.preferences.accounts.plist User ID 502 User Name setup Full Name setup Deleted Date 2018-01-05 20:50:54 (UTC) Account Type Mac User HashlD com.apple.preferences.accounts.plist:0:51351:setup User Account Source Device NYCO24328.aff4/Macintosh HD Path /Users/jee/Library/Application Support/Skype/jeevacation/main.db User Name [email protected] Account Type Skype HashlD normalized accounts:0:1 EFTA00509798