e Menu © Overview © Device Details =» NYC024329.aff4 (Evidence ID: NYC024329.aff4 - 001) © Case Data = Calendar Items Calls Contacts Messages Notes Top Contacts User Accounts User Accounts User Account Source Device NYC024353.aff4/Macintosh HD Path /Library/Preferences/com.apple.loginwindow.plist User Name jee Account Type Mac Last User HashID — com.apple.loginwindow.plist:0:6910676:lastusername User Account Source Device NYC024353.aff4/Macintosh HD Path /Library/Preferences/com.apple.loginwindow.plist User Name jee Account Type Mac Last User HashID —com.apple.loginwindow.plist:0:6927060:lastusername User Account Source Device NYC024329.aff4/Macintosh HD Path /Library/Preferences/com.apple.loginwindow. plist User Name karyna Account Type Mac Last User HashID — com.apple.loginwindow.plist:0:102550:lastusername User Account Source Device NYC024353.aff4/Macintosh HD Path /Library/Preferences/com.apple.loginwindow.plist User Name jee Account Type Mac Last User HashID — com.apple.loginwindow.plist:0:27268 1 0:lastusername User Account Source Device NYC024353.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/jee.plist EFTA00518768

--=PAGE_BREAK=--

UserID = 503 User Name jee Full Name jee Path /Users/jee PW Hint celina name Password HEEKEEEE Account Type Mac User HashID _jee.plist:0:3414438 User Account Source Device NYC024353.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/root.plist UserID 0 User Name root Full Name System Administrator Path /var/root Password * Account Type Mac User HashID __ root.plist:0:3414461 User Account Source Device NYC024353.aff4/Macintosh HD Path /Library/Preferences/com.apple.preferences.accounts.plist UserID 502 User Name setup Full Name setup Deleted Date 2018-01-05 20:50:54 (UTC) Account Type Mac User HashID — com.apple.preferences.accounts.plist:0:2726770:setup User Account Source Device NYC024329.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/karyna.plist UserID 504 User Name karyna Full Name Karyna Path /Users/karyna PW Hint laptop Password eee ee eo Account Type Mac User HashID _ karyna.plist:0:992168 User Account Source Device NYC024353.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/jee.plist EFTA00518769

--=PAGE_BREAK=--

UserID = 503 User Name jee Full Name jee Path /Users/jee PW Hint celina name Password HEEKEEEE Account Type Mac User HashID _ jee.plist:0:8301312 User Account Source Device NYC024353.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/root.plist UserID 0 User Name root Full Name System Administrator Path /var/root Password * Account Type Mac User HashID __root.plist:0:8301335 User Account Source Device NYC024353.aff4/Macintosh HD Path /Library/Preferences/com.apple.preferences.accounts.plist UserID 502 User Name setup Full Name setup Deleted Date 2018-01-05 20:50:54 (UTC) Account Type Mac User HashID — com.apple.preferences.accounts.plist:0:6927020:setup User Account Source Device NYC024329.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/root.plist UserID 0 User Name root Full Name System Administrator Path /var/root Password * Account Type Mac User HashID __root.plist:0:992236 User Account Source Device NYC024353.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/root.plist UserID 0 EFTA00518770

--=PAGE_BREAK=--

User Name root Full Name System Administrator Path /var/root Password * Account Type Mac User HashID __root.plist:0:8284961 User Account Source Device NYC024353.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/jee.plist UserID = 503 User Name jee Full Name jee Path /Users/jee PW Hint — celina name Password HEEKEEEE Account Type Mac User HashID _jee.plist:0:8284938 User Account Source Device NYC024353.aff4/Macintosh HD Path /Library/Preferences/com.apple.preferences.accounts.plist UserID 502 User Name setup Full Name setup Deleted Date 2018-01-05 20:50:54 (UTC) Account Type Mac User HashID — com.apple.preferences.accounts.plist:0:69 10636:setup User Account Source Device NY C024329.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/Guest.plist UserID 201 User Name Guest Full Name Guest User Path /Users/Guest Password EEK E Account Type Mac User HashID — Guest. plist:0:992201 User Account Source Device NYC024329.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/users/admin. plist UserID 502 User Name admin EFTA00518771

--=PAGE_BREAK=--

Full Name Administartor Path /Users/admin Password oe Account Type Mac User HashID —_admin.plist:0:992240 User Account Source Device NYC024353.aff4/Macintosh HD Path /Users/jee/Library/Application Support/Skype/jeevacation/main.db User Name _jeevacation@gmail.com Account Type Skype HashID __ normalized_accounts:0:9 User Account Source Device NY C024329.aff4/Macintosh HD Path /Users/sarahk (Deleted)/Library/Application Support/Skype/sarahk525/main.db UserName [a FulName Account Type Skype HashID __normalized_accounts:0:1 User Account Source Device NY C024353.aff4/Macintosh HD Path /Users/jee/Library/Application Support/Skype/jeevacation/main.db User Name jeevacation@gmail.com Account Type Skype HashID _ normalized_accounts:0:3 User Account Source Device NYC024353.aff4/Macintosh HD Path /Users/jee/Library/Application Support/Skype/jeevacation/main.db User Name jeevacation@gmail.com Account Type Skype HashID _normalized_accounts:0:6 EFTA00518772