Iforensics Report Table of Contents

Home , Apple Mail, Springboard

iFORENSICS Report

Table of Contents

Device Info Address book Calendar WiFi Cloud Notes SMS (text) Cookies WhatsApp File information

iREPAIR - Backup Forensics Report (https://thelead82.com) - 1 of 75 Device Info

Name Value

buildVersion 17F80

deviceName die’s iPhone

imei 418683992422831

lastBackupDate 2020-06-13 10:48:58

phoneNumber +1936270477777

productType iphone93

productVersion 13.5.1

serialNumber 371F3ZG2G11

targetIdentifier a2625414a7707fd9de53e8a2439ba2ccf573b391

Address book

ID Timestamp Phone Entries Info # SMS # MMS # WhatsApp

1 Created: 2020-07-19 14:03:15 +3487204088385 Name: Leora Daugherty 9 0 10 Modified: 2020-09-07 21:39:13 Birthday: 1975-06-23 Email: [email protected] Organization: Hammes-Kutch Social:

2 Created: 2020-08-01 09:51:52 +4050888042045 Name: Agustin Rempel 9 0 20 Modified: 2020-08-25 15:17:39 Birthday: 1977-03-25 Email: [email protected] Organization: Leannon, Bode and Hackett Social:

3 Created: 2020-07-15 04:11:22 +1922443059758 Name: Nasir Marks 34 0 20 Modified: 2020-07-25 20:32:56 Birthday: 1985-10-08 Email: [email protected] Organization: Kovacek-Halvorson Social:

4 Created: 2020-07-14 21:50:55 +5167597484340 Name: Jackie Crooks 24 0 20 Modified: 2020-07-14 14:29:28 Birthday: 1958-05-08 Email: [email protected] Organization: Heidenreich, Mertz and Funk Social:

5 Created: 2020-08-02 16:43:51 +2501163694086 Name: Willard Marks 14 0 10 Modified: 2020-08-02 15:55:18 Birthday: 1921-10-14 Email: [email protected] Organization: Adams and Sons Social:

6 Created: 2020-07-19 08:14:58 +6496949414517 Name: Brown Weissnat 9 0 10 Modified: 2020-08-23 09:30:58 Birthday: 1984-10-07 Email: [email protected] Organization: Block Inc Social:

7 Created: 2020-07-19 16:05:17 +6184278437520 Name: Jennie Prohaska 0 0 0 Modified: 2020-07-23 10:34:44 Birthday: 1989-05-06 Email: [email protected] Organization: Dare Inc Social:

8 Created: 2020-07-17 11:32:16 +3602034613677 Name: Alyson Hudson 14 0 20 Modified: 2020-07-18 04:37:41 Birthday: 1966-10-30 Email: [email protected] Organization: Langworth, Lemke and Ryan Social:

9 Created: 2020-08-08 10:09:32 +8869342389449 Name: Luther Goodwin 24 0 10 Modified: 2020-08-12 07:23:12 Birthday: 2015-07-04 Email: [email protected] Organization: Huels-Brakus Social:

10 Created: 2020-07-16 02:05:11 +1581047549261 Name: Aleen Crooks 9 0 10 Modified: 2020-08-10 22:43:19 Birthday: 1951-10-08 Email: [email protected] Organization: Nolan-Leannon Social:

Calendar

I Timestamp Calendar Entry Event Details

1 Start date: 2020-02-01 06:00:00 (TZ: Summary: Hospital Description:

iREPAIR - Backup Forensics Report (https://thelead82.com) - 2 of 75 I Timestamp Calendar Entry Event Details

Europe/Warsaw) Location ID: 0 End date: 2020-02-05 06:00:00 (TZ: Client Location ID: 0 Europe/Warsaw) 2 Start date: 2020-07-13 14:00:00 (TZ: Summary: Plane Description: Plane Europe/Warsaw) Location ID: 1 (Warszawa - Okcie / {wirki i Wigury 1, 00-906 Warszawa, Polska / GEO CORDS: X: End date: 2020-07-13 22:00:00 (TZ: 20.971698760986328 / Y: 52.17198407777819) Europe/Warsaw) Client Location ID: 0

3 Start date: 2020-07-21 18:00:00 (TZ: Summary: Jake's Birthday Description: Europe/Warsaw) Location ID: 0 End date: 2020-07-21 23:00:00 (TZ: Client Location ID: 0 Europe/Warsaw)

4 Start date: 2020-03-11 20:00:00 (TZ: Summary: Dinner with Sam Description: Europe/Warsaw) Location ID: 0 End date: 2020-03-11 22:00:00 (TZ: Client Location ID: 0 Europe/Warsaw)

5 Start date: 2020-09-10 12:00:00 (TZ: Summary: Hotel Description: Hotel Europe/Warsaw) Location ID: 1 (Hampton by Hilton Warsaw Mokotow / Postpu 7, 02-676 Warszawa, Polska / GEO CORDS: X: End date: 2020-09-11 12:00:00 (TZ: 20.990695 / Y: 52.177885) Europe/Warsaw) Client Location ID: 0

6 Start date: 2020-07-14 19:29:37 (TZ: Summary: Dad's birthday Description: Dad's Europe/Warsaw) Location ID: 0 birthday End date: 2020-07-14 19:29:37 (TZ: Client Location ID: 0 Europe/Warsaw)

7 Start date: 2020-07-16 02:30:25 (TZ: Summary: Meeting with Joe Description: Meeting with Europe/Warsaw) Location ID: 0 Joe End date: 2020-07-16 02:30:25 (TZ: Client Location ID: 0 Europe/Warsaw)

8 Start date: 2020-07-15 10:27:55 (TZ: Summary: Car repair Description: Car repair Europe/Warsaw) Location ID: 0 End date: 2020-07-15 10:27:55 (TZ: Client Location ID: 0 Europe/Warsaw)

9 Start date: 2020-07-15 06:37:22 (TZ: Summary: Movie times Description: Movie times Europe/Warsaw) Location ID: 0 End date: 2020-07-15 06:37:22 (TZ: Client Location ID: 0 Europe/Warsaw)

1 Start date: 2020-07-16 02:03:12 (TZ: Summary: Dinner with Sam Description: Dinner with 0 Europe/Warsaw) Location ID: 0 Sam End date: 2020-07-16 02:03:12 (TZ: Client Location ID: 0 Europe/Warsaw)

1 Start date: 2020-07-14 17:43:29 (TZ: Summary: Celebration Description: Celebration 1 Europe/Warsaw) Location ID: 0 End date: 2020-07-14 17:43:29 (TZ: Client Location ID: 0 Europe/Warsaw)

1 Start date: 2020-07-15 10:42:55 (TZ: Summary: Meeting with landlord Description: Meeting with 2 Europe/Warsaw) Location ID: 0 landlord End date: 2020-07-15 10:42:55 (TZ: Client Location ID: 0 Europe/Warsaw)

1 Start date: 2020-07-15 15:33:15 (TZ: Summary: Shopping time Description: Shopping 3 Europe/Warsaw) Location ID: 0 time End date: 2020-07-15 15:33:15 (TZ: Client Location ID: 0 Europe/Warsaw)

1 Start date: 2020-07-15 08:17:00 (TZ: Summary: webex with Steve Description: webex with 4 Europe/Warsaw) Location ID: 0 Steve End date: 2020-07-15 08:17:00 (TZ: Client Location ID: 0 Europe/Warsaw)

1 Start date: 2020-07-14 21:02:21 (TZ: Summary: Plane Description: Plane 5 Europe/Warsaw) Location ID: 0 End date: 2020-07-14 21:02:21 (TZ: Client Location ID: 0 Europe/Warsaw)

WiFi

ID SSID BSSID Last Auto Joined Last Joined Signal Strength

1 Hotspot5 b0:4:10:43:41:92 2020-06-09 09:08:49.548260 2020-04-01 15:19:25.852343 0.9565408825874329

2 Public Net d0:3:11:23:11:42 2020-03-09 05:05:43.548260 2020-03-09 05:05:43.548260 0.556540882587433

3 Library b3:2:21:13:33:22 2020-01-03 10:15:13.332110 2020-01-03 10:15:13.332110 0.8565408825874329

4 orange.mobile 0 0 0 0

Cloud Notes

ID Title Body Folder

iREPAIR - Backup Forensics Report (https://thelead82.com) - 3 of 75 ID Title Body Folder

1 Note 1 Remember to visit John and take the drafts with you Notes

2 Note 2 Groceries for Sunday: 1) carrots 2) bread 3) pasta 4) cheese 5)butter Notes

3 Note draft Fix the damn sink Notes

SMS

ID Date Direction Party Status Subject Message Body Attachment

1 2020-07-14 Outgoing +1936270477777 READ n/a So I signed up with a company 0 12:26:01 that sends me clothing by mail once a month. I try it on and keep what i want, am billed for it, and send back what I don't.

2 2020-07-14 Incoming +3487204088385 READ n/a Oh I've heard about that. I keep 0 12:43:01 seeing ads for them on facebook, but I wasn't sure if the clothes would be all that special.

3 2020-07-14 Outgoing +1936270477777 READ n/a I usually keep about 3 out of 5 0 12:57:01 of the items they send me. Do you want to see what i got last month?

4 2020-07-14 Incoming +3487204088385 READ n/a Yes I would, that way I can see 0 13:05:01 if it is something I would do or not.

5 2020-07-14 Outgoing +1936270477777 READ n/a Alright, look at this striped shirt. 0 13:27:01 I normally would never choose horizontal stripes but the cut of the blouse is very flattering.

6 2020-07-14 Incoming +3487204088385 READ n/a Oh I like it. It looks like a 0 13:52:01 summer top that I would pair with high waisted pants.

7 2020-07-14 Outgoing +1936270477777 READ n/a This top reminds me of old 0 13:54:01 Hollywood for some reason. It is very high quality as well.

8 2020-07-14 Incoming +3487204088385 READ n/a Nice! I am begining to like this 0 14:18:01 company now.

9 2020-07-14 Outgoing +1936270477777 READ n/a Now, let me show you the next 0 14:37:01 item, which is a longer tunic with large cutouts in the back.

10 2020-07-14 Incoming +3487204088385 READ n/a It looks kind of boring. 0 15:07:01

11 2020-07-14 Outgoing +1936270477777 READ n/a The tunic is very plain in front 0 15:09:01 but look as I turn around and you will see why I love it so much.

12 2020-07-14 Incoming +3487204088385 READ n/a Oh I see, the large cutouts in 0 15:43:01 the back. It is very sexy and pretty much shows your bare back.

13 2020-07-14 Outgoing +1936270477777 READ n/a This is something I would wear 0 16:03:01 to go out in.I haven't decided what to pair it with though.

14 2020-07-14 Incoming +3487204088385 READ n/a If it were me, I would just wear 0 16:30:01 either black or white denim shorts.

15 2020-07-14 Outgoing +1936270477777 READ n/a Now I am going to show you 0 16:45:01 the cutest pants in the world. These are almost like leggings but they have real pockets.

16 2020-07-14 Incoming +3487204088385 READ n/a I can see why you love them. 0 17:07:01

17 2020-07-14 Outgoing +1936270477777 READ n/a I honestly don't see maroon 0 17:16:01 pants every day. I like the color but the fit is a little off.

18 2020-07-14 Incoming +3487204088385 READ n/a Yeah, they are a little short and 0 17:30:01 loose around the bottom.

19 2020-07-14 Outgoing +1936270477777 READ n/a Well, those are the three items 0 17:56:01 I kept from last months fashion box. What do you think?

20 2020-07-14 Incoming +3487204088385 READ n/a They are nice but I don't think 0

iREPAIR - Backup Forensics Report (https://thelead82.com) - 4 of 75 ID Date Direction Party Status Subject Message Body Attachment

18:28:01 the service is for me. I enjoy shopping and picking clothes out to match my own personal style. 21 2020-07-14 Incoming +1922443059758 READ n/a Damn, man. 0 12:35:01

22 2020-07-14 Outgoing +1936270477777 READ n/a What's up? 0 12:50:01

23 2020-07-14 Incoming +1922443059758 READ n/a Uhhhh, my car broke down. 0 13:10:01

24 2020-07-14 Outgoing +1936270477777 READ n/a How so? 0 13:22:01

25 2020-07-14 Incoming +1922443059758 READ n/a My engine got torn apart, and 0 13:34:01 now I can't drive the rest of the way to Georgia to see the Falcons take on the Saints!

26 2020-07-14 Outgoing +1936270477777 READ n/a Hey, I'm also headed in the 0 13:57:01 same direction, wanna call a tow truck to tow your vehicle, and then we head to Atlanta?

27 2020-07-14 Incoming +1922443059758 READ n/a Uhhhh, sure, yeah! 0 14:15:01

28 2020-07-14 Outgoing +1936270477777 READ n/a Okay, I'll call the tow truck now, 0 14:34:01 then!

29 2020-07-14 Incoming +1922443059758 READ n/a Well, I guess you're a lifesaver 0 14:46:01 today, then!

30 2020-07-14 Outgoing +1936270477777 READ n/a Hey, I'm here to call about a 0 15:11:01 broken down car in the middle of Interstate 237, towards Georgia. Yeah, can ya pick it up? Thanks. Okay. Bye. Alright, we good to go to Georgia?

31 2020-07-14 Incoming +1922443059758 READ n/a Yeah, l guess. 0 15:28:01

32 2020-07-14 Outgoing +1936270477777 READ n/a Don't worry, brotha. We're 0 15:44:01 gonna see those Falcons destroy the Saints. You can hang out at my crib while your car's getting repaired.

33 2020-07-14 Incoming +1922443059758 READ n/a I guess I owe you one, eh? 0 15:56:01

34 2020-07-14 Outgoing +1936270477777 READ n/a Nahhh, it's fine. 0 15:59:01

35 2020-07-14 Incoming +1922443059758 READ n/a Dude, if it weren't for you, I 0 16:03:01 would have just given up on going to the Falcons game.

36 2020-07-14 Outgoing +1936270477777 READ n/a Dude, I think it's better to watch 0 16:26:01 it on tv, honestly.

37 2020-07-14 Incoming +1922443059758 READ n/a Well, I like the experience of 0 16:57:01 being out there in the stadium. You know, it's sort of like a bonding thing.

38 2020-07-14 Outgoing +1936270477777 READ n/a Hmmm... I can deal with that. 0 17:04:01

39 2020-07-14 Incoming +1922443059758 READ n/a Really? 0 17:13:01

40 2020-07-14 Outgoing +1936270477777 READ n/a Yeah, I also do it. Just not as 0 17:46:01 often as you do, though.

41 2020-07-14 Incoming +1922443059758 READ n/a Isn't the new Transformers 0 12:37:01 movie coming out soon?

42 2020-07-14 Outgoing +1936270477777 READ n/a This Friday I think. 0 13:07:01

43 2020-07-14 Incoming +1922443059758 READ n/a What's even going on with 0 13:41:01 these things anymore?

44 2020-07-14 Outgoing +1936270477777 READ n/a I can't keep track myself. This 0 14:08:01 is the fifth movie or something by now I think.

45 2020-07-14 Incoming +1922443059758 READ n/a You can only film the 0 14:29:01 destruction of the world so much.

iREPAIR - Backup Forensics Report (https://thelead82.com) - 5 of 75 ID Date Direction Party Status Subject Message Body Attachment

46 2020-07-14 Outgoing +1936270477777 READ n/a To me, the movies are just too 0 14:43:01 loud and dumb.

47 2020-07-14 Incoming +1922443059758 READ n/a Yeah. It was cute at first, but 0 14:59:01 got old quick.

48 2020-07-14 Outgoing +1936270477777 READ n/a But they'll keep making them 0 15:09:01 until people stop going.

49 2020-07-14 Incoming +1922443059758 READ n/a Fat chance of that. Too many 0 15:42:01 fanboys.

50 2020-07-14 Outgoing +1936270477777 READ n/a I'll probably watch them all 0 15:47:01 someday when I'm bored.

51 2020-07-14 Outgoing +1936270477777 READ n/a Were you a big Limp Bizkit 0 12:40:01 fan?

52 2020-07-14 Incoming +2501163694086 READ n/a Yeah, I really liked them. 0 13:09:01

53 2020-07-14 Outgoing +1936270477777 READ n/a What happened to them? 0 13:42:01

54 2020-07-14 Incoming +2501163694086 READ n/a Fred Durst became a psycho 0 13:57:01 and the band broke up.

55 2020-07-14 Outgoing +1936270477777 READ n/a I thought they were back 0 14:32:01 together?

56 2020-07-14 Incoming +2501163694086 READ n/a They comeback then break up 0 14:40:01 every once in a while.

57 2020-07-14 Outgoing +1936270477777 READ n/a They were huge in the late 90s 0 14:58:01 early 2000s.

58 2020-07-14 Incoming +2501163694086 READ n/a During that period they were 0 15:17:01 arguably one of the biggest bands on the planet.

59 2020-07-14 Outgoing +1936270477777 READ n/a They had a different sound. 0 15:43:01

60 2020-07-14 Incoming +2501163694086 READ n/a It was just a rap metal hybrid. 0 15:53:01

61 2020-07-14 Outgoing +1936270477777 READ n/a Do you remember when they 0 16:13:01 started a riot at Woodstock?

62 2020-07-14 Incoming +2501163694086 READ n/a I remember the fires and 0 16:40:01 watching it on Mtv.

63 2020-07-14 Outgoing +1936270477777 READ n/a That was a crazy scene. 0 17:06:01

64 2020-07-14 Incoming +2501163694086 READ n/a You can't have that many 0 17:37:01 people listening to Limp Bizkit and now expect something bad to happen.

65 2020-07-14 Outgoing +1936270477777 READ n/a Did you like Korn or Limp Bizkit 0 17:44:01 more?

66 2020-07-14 Incoming +2501163694086 READ n/a Korn seemed like the better 0 17:56:01 band.

67 2020-07-14 Outgoing +1936270477777 READ n/a Limp Bizkit seemed more like 0 18:27:01 the popular main stream band.

68 2020-07-14 Incoming +2501163694086 READ n/a Korn fans were also a little 0 18:45:01 strange.

69 2020-07-14 Outgoing +1936270477777 READ n/a All the kids I knew who liked 0 18:45:01 Korn were loners.

70 2020-07-14 Incoming +2501163694086 READ n/a I know those kids loved their 0 18:54:01 Korn shirts.

71 2020-07-14 Outgoing +1936270477777 READ n/a What do you think Gonk is 0 12:37:01 going to do this year.

72 2020-07-14 Incoming +3602034613677 READ n/a I hope he stays healthy. 0 13:04:01

73 2020-07-14 Outgoing +1936270477777 READ n/a Watch out if he does he is a 0 13:27:01 heck of a offensive weapon.

74 2020-07-14 Incoming +3602034613677 READ n/a He adds an extra dimension to 0 13:54:01 a already great offense.

75 2020-07-14 Outgoing +1936270477777 READ n/a When he is the second tight 0 14:17:01 end watch out.

iREPAIR - Backup Forensics Report (https://thelead82.com) - 6 of 75 ID Date Direction Party Status Subject Message Body Attachment

76 2020-07-14 Incoming +3602034613677 READ n/a Yeah the Patriots have so 0 14:24:01 much to choose from they are hard to defend.

77 2020-07-14 Outgoing +1936270477777 READ n/a Did you know he's the highest 0 14:44:01 paid tight end in the league.

78 2020-07-14 Incoming +3602034613677 READ n/a Yeah, Brady takes pay cuts to 0 14:51:01 keep guys like him around to make the team stronger.

79 2020-07-14 Outgoing +1936270477777 READ n/a Smart move with him in there it 0 14:52:01 keeps Tom healthy and he doesn't get hit as much

80 2020-07-14 Incoming +3602034613677 READ n/a That's another secret to his 0 15:01:01 longevity.

81 2020-07-14 Outgoing +1936270477777 READ n/a I think Gronk has a couple 0 15:20:01 more seasons in him if he stays healthy.

82 2020-07-14 Incoming +3602034613677 READ n/a That's the tough part when you 0 15:32:01 are a huge target and your job is to run over people if you have to.

83 2020-07-14 Outgoing +1936270477777 READ n/a I love to see him do it and then 0 15:49:01 slam the ball though.

84 2020-07-14 Incoming +3602034613677 READ n/a Have you heard the 0 16:17:01 controversy about his logo though.

85 2020-07-14 Outgoing +1936270477777 READ n/a No what's that about. 0 16:33:01

86 2020-07-14 Incoming +3602034613677 READ n/a Some basketball player is 0 16:40:01 complaining that he stole his logo

87 2020-07-14 Outgoing +1936270477777 READ n/a You mean the silhouette of him 0 16:49:01 slamming the ball down on apparel and stuff

88 2020-07-14 Incoming +3602034613677 READ n/a It was pretty similar though. 0 17:12:01

89 2020-07-14 Outgoing +1936270477777 READ n/a And he's also said Goodel 0 17:42:01 wouldn't be welcome in Foxborough too.

90 2020-07-14 Incoming +3602034613677 READ n/a Can't blame him for that. I hate 0 18:16:01 Goodell too. Who doesn't

91 2020-07-14 Outgoing +1936270477777 READ n/a RGIII 0 12:09:01

92 2020-07-14 Incoming +8869342389449 READ n/a BOBBY LEE! Haha. 0 12:21:01

93 2020-07-14 Outgoing +1936270477777 READ n/a Yes, one in the same. Lets 0 12:53:01 bring him to the table.

94 2020-07-14 Incoming +8869342389449 READ n/a Sounds good. I'll Start. Born in 0 13:12:01 1990

95 2020-07-14 Outgoing +1936270477777 READ n/a Yes, but do you know WHERE 0 13:30:01 he was born?

96 2020-07-14 Incoming +8869342389449 READ n/a Sure do, Okinawa, Japan. 0 13:31:01

97 2020-07-14 Outgoing +1936270477777 READ n/a That's right. Technically he can 0 13:52:01 claim he's Japaneese.

98 2020-07-14 Incoming +8869342389449 READ n/a Haha, true. 0 14:24:01

99 2020-07-14 Outgoing +1936270477777 READ n/a Somehow he made it to Texas 0 14:41:01 where he played High School Football.

100 2020-07-14 Incoming +8869342389449 READ n/a That's right. He had a career 0 15:08:01 right out of the gate.

101 2020-07-14 Outgoing +1936270477777 READ n/a Yes, he passed for 2,001 yards 0 15:31:01 and 25 touchdowns with 2 interceptions in High School.

102 2020-07-14 Incoming +8869342389449 READ n/a Outstanding. 0 15:41:01

103 2020-07-14 Outgoing +1936270477777 READ n/a When he wasn't playing 0

iREPAIR - Backup Forensics Report (https://thelead82.com) - 7 of 75 ID Date Direction Party Status Subject Message Body Attachment

15:41:01 Football he ran track. 104 2020-07-14 Incoming +8869342389449 READ n/a Track? Really? 0 15:57:01

105 2020-07-14 Outgoing +1936270477777 READ n/a Yup. He broke records in that 0 16:18:01 arena as well. He broke state records for the 110-meter and 300-meter hurdles.

106 2020-07-14 Incoming +8869342389449 READ n/a No way! 0 16:31:01

107 2020-07-14 Outgoing +1936270477777 READ n/a It's True. Then he played at 0 16:50:01 Baylor and then.... the NFL!

108 2020-07-14 Incoming +8869342389449 READ n/a Yup, Redskins and then the 0 16:57:01 Browns.

109 2020-07-14 Outgoing +1936270477777 READ n/a He makes the Browns altho i 0 17:23:01 miss him at Washington.

110 2020-07-14 Incoming +8869342389449 READ n/a Yes, i thought he was doing 0 17:54:01 well with the Redskins.

111 2020-07-14 Outgoing +1936270477777 READ n/a Have you heard of CALL ME 0 12:24:01 MAYBE by Carly?

112 2020-07-14 Incoming +1922443059758 READ n/a They guy and great abs. 0 12:25:01

113 2020-07-14 Outgoing +1936270477777 READ n/a And he has tattoos. 0 12:43:01

114 2020-07-14 Incoming +1922443059758 READ n/a Then he looks at her. 0 12:47:01

115 2020-07-14 Outgoing +1936270477777 READ n/a She is so embarrassed. 0 13:09:01

116 2020-07-14 Incoming +1922443059758 READ n/a Then she hides. 0 13:37:01

117 2020-07-14 Outgoing +1936270477777 READ n/a He thinks it is funny. 0 14:09:01

118 2020-07-14 Incoming +1922443059758 READ n/a She has her garage band. 0 14:17:01

119 2020-07-14 Outgoing +1936270477777 READ n/a All the other boys try to chase 0 14:52:01 me.

120 2020-07-14 Incoming +1922443059758 READ n/a But here's my number. 0 15:10:01

121 2020-07-14 Outgoing +1936270477777 READ n/a Do you like the band Krokus? 0 12:34:01

122 2020-07-14 Incoming +8869342389449 READ n/a Who? 0 12:34:01

123 2020-07-14 Outgoing +1936270477777 READ n/a Krokus. A metal band from the 0 13:04:01 80's.

124 2020-07-14 Incoming +8869342389449 READ n/a Do I even know who they are? 0 13:24:01

125 2020-07-14 Outgoing +1936270477777 READ n/a You should, they did have a lot 0 13:52:01 of good songs.

126 2020-07-14 Incoming +8869342389449 READ n/a Really. Like what? 0 14:15:01

127 2020-07-14 Outgoing +1936270477777 READ n/a Screaming In The Night. 0 14:32:01

128 2020-07-14 Incoming +8869342389449 READ n/a That was them, I didn't know 0 14:32:01 who sang it.

129 2020-07-14 Outgoing +1936270477777 READ n/a That was them. 0 14:48:01

130 2020-07-14 Incoming +8869342389449 READ n/a Anything else I would know? 0 15:23:01

131 2020-07-14 Outgoing +1936270477777 READ n/a Probably not, unless you 0 15:47:01 listened to their album.

132 2020-07-14 Incoming +8869342389449 READ n/a Did you have the album? 0 16:10:01

133 2020-07-14 Outgoing +1936270477777 READ n/a Yes, well actually the cassette. 0 16:19:01

iREPAIR - Backup Forensics Report (https://thelead82.com) - 8 of 75 ID Date Direction Party Status Subject Message Body Attachment

134 2020-07-14 Incoming +8869342389449 READ n/a They didn't have any other 0 16:25:01 popular songs?

135 2020-07-14 Outgoing +1936270477777 READ n/a They did some covers of other 0 16:25:01 bands.

136 2020-07-14 Incoming +8869342389449 READ n/a So I guess they split up. 0 16:29:01

137 2020-07-14 Outgoing +1936270477777 READ n/a Well every so many years they 0 16:31:01 get together for reunion tours.

138 2020-07-14 Incoming +8869342389449 READ n/a Did you ever see them? 0 16:55:01

139 2020-07-14 Outgoing +1936270477777 READ n/a No. 0 17:09:01

140 2020-07-14 Incoming +8869342389449 READ n/a I'll have to watch the video. 0 17:41:01

141 2020-07-14 Outgoing +1936270477777 READ n/a We just saw the new Cars 0 12:13:01 movie the other night, Cars 3. It was really good.

142 2020-07-14 Incoming +3602034613677 READ n/a I love the Cars movies. Cars 2 0 12:28:01 wasn't as good as the first, but I was pretty excited about this third one.

143 2020-07-14 Outgoing +1936270477777 READ n/a Yeah, Cars 2 seemed more like 0 12:32:01 it was about Mater than anything, but it was still fun.

144 2020-07-14 Incoming +3602034613677 READ n/a Mater is a great character, but 0 12:51:01 my kids' favorite is Lightning McQueen.

145 2020-07-14 Outgoing +1936270477777 READ n/a I think they'd really enjoy the 0 13:18:01 new movie then. I'm sure you will too.

146 2020-07-14 Incoming +3602034613677 READ n/a Well, Nathan Fillion is one of 0 13:19:01 my favorite actors, so I'm looking forward to hearing him put one of the characters to life in only the way he could.

147 2020-07-14 Outgoing +1936270477777 READ n/a I know he's been in a lot of 0 13:51:01 shows, but wasn't there some big movie he was supposed to make an appearance in recently?

148 2020-07-14 Incoming +3602034613677 READ n/a He filmed a scene for 0 14:12:01 Guardians of the Galaxy Vol. 2, but it was cut.

149 2020-07-14 Outgoing +1936270477777 READ n/a I remember you telling me 0 14:41:01 about that. Man, speaking of great movies...

150 2020-07-14 Incoming +3602034613677 READ n/a Definitely! Only movie I've seen 0 15:12:01 more than once in the theater.

151 2020-07-14 Incoming +1581047549261 READ n/a So who did you feel had the 0 12:25:01 best fashion sense at the 2017 Met Gala ?

152 2020-07-14 Outgoing +1936270477777 READ n/a Well I really liked Kendall 0 12:30:01 Jenner's La Perla gown.

153 2020-07-14 Incoming +1581047549261 READ n/a What did you explicitly like 0 12:31:01 about Kendall's La Perla gown ?

154 2020-07-14 Outgoing +1936270477777 READ n/a The had painted 85,000 0 12:37:01 crystals that covered her dress.

155 2020-07-14 Incoming +1581047549261 READ n/a What did you think about Kylie 0 13:00:01 Jenner's dress ?

156 2020-07-14 Outgoing +1936270477777 READ n/a Well I liked her Atelier Versace 0 13:12:01 dress, I thought it showed off her body.

157 2020-07-14 Incoming +1581047549261 READ n/a Who did you think was the best 0 13:44:01 dressed couple ?

158 2020-07-14 Outgoing +1936270477777 READ n/a I really liked Jennifer Lopez 0 13:52:01 and J Rod's clothing.

159 2020-07-14 Incoming +1581047549261 READ n/a What designed was Jennifer 0 14:01:01 Lopez wearing ?

iREPAIR - Backup Forensics Report (https://thelead82.com) - 9 of 75 ID Date Direction Party Status Subject Message Body Attachment

160 2020-07-14 Outgoing +1936270477777 READ n/a She was wearing a light blue 0 14:35:01 Valentino dress that seemed to flow.

161 2020-07-14 Incoming +1581047549261 READ n/a What did you think about 0 15:04:01 Selena Gomez dress ?

162 2020-07-14 Outgoing +1936270477777 READ n/a I liked her lingerie inspired 0 15:15:01 coach dress it was very form fitting.

163 2020-07-14 Incoming +1581047549261 READ n/a What did you think of Blake 0 15:21:01 LIvely's dress ?

164 2020-07-14 Outgoing +1936270477777 READ n/a I loved her golden Versace 0 15:27:01 dress but even more I loved the blue feather like material that flowed down like a train from her dress.

165 2020-07-14 Incoming +1581047549261 READ n/a Did you think Chrissy Teigen 0 16:01:01 was sort of ripping off Blake Lively's dress with the feathers at the bottom ?

166 2020-07-14 Outgoing +1936270477777 READ n/a Well in a way yes but the 0 16:28:01 dressed looked totally different.

167 2020-07-14 Incoming +1581047549261 READ n/a Who's dress did you like the 0 16:46:01 most ?

168 2020-07-14 Outgoing +1936270477777 READ n/a Well I really liked the simplicity 0 17:17:01 of Kim Kardashian's white Westwood Gown dress.

169 2020-07-14 Incoming +1581047549261 READ n/a Who did you think made the 0 17:21:01 boldest fashion statement ?

170 2020-07-14 Outgoing +1936270477777 READ n/a I really thought the simplicity 0 17:46:01 yet different style that Kate Hudson had with her Stella McCartney one sleeve white dress was inspiring.

171 2020-07-14 Outgoing +1936270477777 READ n/a Hey man 0 12:28:01

172 2020-07-14 Incoming +5167597484340 READ n/a Hey whats good 0 12:49:01

173 2020-07-14 Outgoing +1936270477777 READ n/a Nothing much 0 12:55:01

174 2020-07-14 Incoming +5167597484340 READ n/a Same same 0 13:18:01

175 2020-07-14 Outgoing +1936270477777 READ n/a Listening to the new 0 13:48:01 AngelMaker album

176 2020-07-14 Incoming +5167597484340 READ n/a oooh 0 14:03:01

177 2020-07-14 Outgoing +1936270477777 READ n/a Yeah 0 14:11:01

178 2020-07-14 Incoming +5167597484340 READ n/a Is it good 0 14:42:01

179 2020-07-14 Outgoing +1936270477777 READ n/a I dig it 0 15:16:01

180 2020-07-14 Incoming +5167597484340 READ n/a I liked their debut back when 0 15:34:01 they first came out

181 2020-07-14 Outgoing +1936270477777 READ n/a I love that one 0 15:34:01

182 2020-07-14 Incoming +5167597484340 READ n/a Its awesome 0 15:44:01

183 2020-07-14 Outgoing +1936270477777 READ n/a It is one of my favorites 0 15:59:01

184 2020-07-14 Incoming +5167597484340 READ n/a Same 0 15:59:01

185 2020-07-14 Outgoing +1936270477777 READ n/a Can i come by and jam it too 0 16:27:01

186 2020-07-14 Incoming +5167597484340 READ n/a Sure you can if you want 0 16:54:01

187 2020-07-14 Outgoing +1936270477777 READ n/a Awesome 0 17:13:01

iREPAIR - Backup Forensics Report (https://thelead82.com) - 10 of 75 ID Date Direction Party Status Subject Message Body Attachment

188 2020-07-14 Incoming +5167597484340 READ n/a Yeah 0 17:38:01

189 2020-07-14 Outgoing +1936270477777 READ n/a See you soon 0 17:40:01

190 2020-07-14 Incoming +5167597484340 READ n/a See you then 0 17:56:01

191 2020-07-14 Incoming +1922443059758 READ n/a What do you think about Aaron 0 12:28:01 Rodgers?

192 2020-07-14 Outgoing +1936270477777 READ n/a I love Aaron Rodgers. He's one 0 12:45:01 of the best quarterbacks in the league.

193 2020-07-14 Incoming +1922443059758 READ n/a Do you think he's better than 0 13:00:01 Drew Brees?

194 2020-07-14 Outgoing +1936270477777 READ n/a Yes, a lot better. Aaron 0 13:16:01 Rodgers can do just about anything. I wish we had him.

195 2020-07-14 Incoming +1922443059758 READ n/a He's only been to one Super 0 13:45:01 Bowl.

196 2020-07-14 Outgoing +1936270477777 READ n/a He doesn't get there or NOT 0 13:58:01 get there on his own. They've had so many injuries these past couple of years.

197 2020-07-14 Incoming +1922443059758 READ n/a Everyone has injuries. 0 14:32:01

198 2020-07-14 Outgoing +1936270477777 READ n/a Last year they had so many 0 14:45:01 people out, they were using their 3rd and 4th string players in some positions.

199 2020-07-14 Incoming +1922443059758 READ n/a I didn't know that. 0 14:46:01

200 2020-07-14 Outgoing +1936270477777 READ n/a Well, he's infinitely better than 0 15:14:01 Brett Favre ever was.

201 2020-07-14 Incoming +1922443059758 READ n/a I wasn't a Favre fan. I'm not a 0 15:32:01 Green Bay fan either.

202 2020-07-14 Outgoing +1936270477777 READ n/a There are teams I like and 0 16:06:01 others I don't for various reasons. I like Green Bay.

203 2020-07-14 Incoming +1922443059758 READ n/a I like the Saints. 0 16:18:01

204 2020-07-14 Outgoing +1936270477777 READ n/a I used to like the Saints until 0 16:29:01 that whole deal with the bounties. Turned me off knowing Brees and the coaches went along with it.

205 2020-07-14 Incoming +1922443059758 READ n/a They said they didn't know. 0 16:42:01

206 2020-07-14 Outgoing +1936270477777 READ n/a They knew. Even the players 0 17:02:01 who admitted it said Brees and everyone else knew. Heck, the coach instituted the bounty and on film.

207 2020-07-14 Incoming +1922443059758 READ n/a I forgot about that. 0 17:26:01

208 2020-07-14 Outgoing +1936270477777 READ n/a Yeah, it was sickening. They 0 17:26:01 had a bounty on Peyton Manning but didn't get him hurt. They got to everyone else.

209 2020-07-14 Incoming +1922443059758 READ n/a That sounds illegal. 0 17:39:01

210 2020-07-14 Outgoing +1936270477777 READ n/a I think it should be punishable 0 17:53:01 by law. At least Coach Williams got fired and suspended and Head Coach Payton got a one-year suspension.

211 2020-07-14 Incoming +5167597484340 READ n/a Do you remember back when 0 12:38:01 Nsync was really popular?

212 2020-07-14 Outgoing +1936270477777 READ n/a Yes I do, I was a huge fan. 0 12:39:01

213 2020-07-14 Incoming +5167597484340 READ n/a Which one was your favorite? 0 12:45:01

iREPAIR - Backup Forensics Report (https://thelead82.com) - 11 of 75 ID Date Direction Party Status Subject Message Body Attachment

214 2020-07-14 Outgoing +1936270477777 READ n/a Justin Timberlake was my fave, 0 13:01:01 but I also really liked Lance Bass.

215 2020-07-14 Incoming +5167597484340 READ n/a I did too he was pretty cute. 0 13:02:01

216 2020-07-14 Outgoing +1936270477777 READ n/a Remember when Lance Bass 0 13:29:01 appeared on 7th Heaven?

217 2020-07-14 Incoming +5167597484340 READ n/a Actually yes I do! I loved that 0 14:04:01 show.

218 2020-07-14 Outgoing +1936270477777 READ n/a I did too. Hey did you know 0 14:08:01 Justin Timberlake was on the Trolls?

219 2020-07-14 Incoming +5167597484340 READ n/a Yes my kids watch that movie 0 14:12:01 at least once a day.

220 2020-07-14 Outgoing +1936270477777 READ n/a It's a super cute movie, he did 0 14:30:01 a great job.

221 2020-07-14 Outgoing +1936270477777 READ n/a Did you hear Disney bought 0 12:07:01 Star Wars?

222 2020-07-14 Incoming +2501163694086 READ n/a No way! 0 12:14:01

223 2020-07-14 Outgoing +1936270477777 READ n/a Yup, they are making the next 3 0 12:28:01 movies!

224 2020-07-14 Incoming +2501163694086 READ n/a Seven, eight, and nine? 0 12:52:01

225 2020-07-14 Outgoing +1936270477777 READ n/a Yes, Seven came out last year? 0 12:59:01

226 2020-07-14 Incoming +2501163694086 READ n/a Awesome, how was it? 0 13:19:01

227 2020-07-14 Outgoing +1936270477777 READ n/a Excellent, it was a great movie! 0 13:45:01

228 2020-07-14 Incoming +2501163694086 READ n/a Now I'm so excited, no spoilers 0 13:46:01 :)

229 2020-07-14 Outgoing +1936270477777 READ n/a I don't give anything away! 0 14:17:01

230 2020-07-14 Incoming +2501163694086 READ n/a Thanks! 0 14:43:01

231 2020-07-14 Incoming +4050888042045 READ n/a What do you think about the 0 12:34:01 Steelers chances this year?

232 2020-07-14 Outgoing +1936270477777 READ n/a I think they have a good shot at 0 12:43:01 winning 10 or more games and making the playoffs.

233 2020-07-14 Incoming +4050888042045 READ n/a Why is that? 0 12:51:01

234 2020-07-14 Outgoing +1936270477777 READ n/a Well one thing is that Martavis 0 13:24:01 Bryant will be back.

235 2020-07-14 Incoming +4050888042045 READ n/a Yes and also placing the 0 13:59:01 franchise tag on Le'Veon Bell helps.

236 2020-07-14 Outgoing +1936270477777 READ n/a Correct, if he had gone to 0 14:18:01 another team that would be bad!

237 2020-07-14 Incoming +4050888042045 READ n/a Do you think Ben 0 14:44:01 Roethlisberger can stay healthy?

238 2020-07-14 Outgoing +1936270477777 READ n/a Well at his age that is hard to 0 15:10:01 say, but when he gets hurt he is often able to come back quickly, even playing injured.

239 2020-07-14 Incoming +4050888042045 READ n/a And signing Antonio Brown to 0 15:32:01 an extension is good since he's probably the best wide receiver in the league.

240 2020-07-14 Outgoing +1936270477777 READ n/a Right he's the highest paid 0 15:45:01 receiver for a reason.

241 2020-07-14 Incoming +4050888042045 READ n/a What do you know about TJ 0 15:56:01 Watt?

iREPAIR - Backup Forensics Report (https://thelead82.com) - 12 of 75 ID Date Direction Party Status Subject Message Body Attachment

242 2020-07-14 Outgoing +1936270477777 READ n/a It's tough to predict which 0 16:23:01 college players will do well in the NFL especially towards the bottom of the 1st round but he has a pedigree through his brother.

243 2020-07-14 Incoming +4050888042045 READ n/a Do you plan on watching the 0 16:57:01 Steelers game again this year at the local Steelers bar?

244 2020-07-14 Outgoing +1936270477777 READ n/a Of course! 0 17:32:01

245 2020-07-14 Incoming +4050888042045 READ n/a It looks like the first game won't 0 17:46:01 be on TV here in Philadelphia since the Eagles play at the same time on the same network.

246 2020-07-14 Outgoing +1936270477777 READ n/a Ok we will go to the bar then. 0 18:09:01

247 2020-07-14 Incoming +4050888042045 READ n/a What do you think the score 0 18:25:01 will be?

248 2020-07-14 Outgoing +1936270477777 READ n/a Well even with Myles Garrett 0 18:32:01 the Browns are still pretty bad so even on the road I think the Steelers win by something like 28-17.

249 2020-07-14 Incoming +4050888042045 READ n/a Yeah that is what I thought too, 0 18:55:01 a relatively easy Steelers win. Talk to you later!

250 2020-07-14 Outgoing +1936270477777 READ n/a Good talking to you. 0 19:30:01

251 2020-07-14 Outgoing +1936270477777 READ n/a What kind of music do you like 0 12:40:01 to listen to?

252 2020-07-14 Incoming +1922443059758 READ n/a I like so many different types. I 0 12:43:01 guess it depends on my mood at the time.

253 2020-07-14 Outgoing +1936270477777 READ n/a I am the same way. When I 0 13:02:01 want to get in a good mood I listen to pop.

254 2020-07-14 Incoming +1922443059758 READ n/a Oh yeah, who is your favorite 0 13:35:01 pop artist?

255 2020-07-14 Outgoing +1936270477777 READ n/a The king of pop of course, 0 13:42:01 Michael Jackson.

256 2020-07-14 Incoming +1922443059758 READ n/a He does have a lot of songs 0 13:51:01 that make you want to get up and dance.

257 2020-07-14 Outgoing +1936270477777 READ n/a I know in 1982 he came out 0 13:59:01 with some of the greatest songs ever.

258 2020-07-14 Incoming +1922443059758 READ n/a Like Beat It and Thriller. The 0 14:18:01 videos were amazing.

259 2020-07-14 Outgoing +1936270477777 READ n/a His dancing was amazing I 0 14:31:01 could watch them all day.

260 2020-07-14 Incoming +1922443059758 READ n/a The moon walk was the best 0 15:03:01 move ever. I practice it for months but never really mastered it.

261 2020-07-14 Outgoing +1936270477777 READ n/a Did you see that they're doing 0 12:24:01 a live-action remake of The Lion King?

262 2020-07-14 Incoming +6496949414517 READ n/a Wow! I wonder how they're 0 12:54:01 going to manage that?

263 2020-07-14 Outgoing +1936270477777 READ n/a Well, they did The Jungle Book 0 13:08:01 with CGI, so I guess they'll use the same techniques.

264 2020-07-14 Incoming +6496949414517 READ n/a My kids really love that movie, 0 13:27:01 although the part where Simba's dad dies is pretty sad.

265 2020-07-14 Outgoing +1936270477777 READ n/a I know! Never mind my kids, 0 13:54:01 that had me crying in the theater.

266 2020-07-14 Incoming +6496949414517 READ n/a Still, I think that's part of the 0

iREPAIR - Backup Forensics Report (https://thelead82.com) - 13 of 75 ID Date Direction Party Status Subject Message Body Attachment

267 2020-07-1414:19:01 Outgoing +1936270477777 READ n/a Yeah,movie's I thinkenduring it helps appeal. kids deal 0 14:20:01 with the idea that death is part of the circle of life.

268 2020-07-14 Incoming +6496949414517 READ n/a It's also a hilarious movie, 0 14:51:01 though. I hope the remake keeps the humor!

269 2020-07-14 Outgoing +1936270477777 READ n/a And the romance between 0 14:52:01 Simba and Nala. It's so sweet!

270 2020-07-14 Incoming +6496949414517 READ n/a I'm looking forward to seeing 0 14:59:01 this one when it comes out.

271 2020-07-14 Incoming +5167597484340 READ n/a Saw an interesting 0 12:40:01 announcement last week. Did you see Doug Williams is going to the Redskins front office?

272 2020-07-14 Outgoing +1936270477777 READ n/a I did. Think he can save them 0 12:44:01 from their crazy owner?

273 2020-07-14 Incoming +5167597484340 READ n/a Daniel Snyder has more money 0 12:46:01 than sense.

274 2020-07-14 Outgoing +1936270477777 READ n/a You're right. What's happening 0 12:49:01 with Cousins?

275 2020-07-14 Incoming +5167597484340 READ n/a Kirk Cousins is a class act. 0 13:08:01

276 2020-07-14 Outgoing +1936270477777 READ n/a I agree. did they ever get his 0 13:27:01 contract straightened out?

277 2020-07-14 Incoming +5167597484340 READ n/a Not sure. July 15 is the 0 13:30:01 deadline.

278 2020-07-14 Outgoing +1936270477777 READ n/a There's just too much drama 0 13:37:01 on this team.

279 2020-07-14 Incoming +5167597484340 READ n/a I agree, but I think there's 0 13:55:01 drama on every team.

280 2020-07-14 Outgoing +1936270477777 READ n/a In know, right? 0 14:13:01

281 2020-07-14 Incoming +5167597484340 READ n/a San Francisco didn't renew 0 14:20:01 Colin Kaepernick.

282 2020-07-14 Outgoing +1936270477777 READ n/a That's probably for the best. 0 14:46:01 The guy was a huge distraction.

283 2020-07-14 Incoming +5167597484340 READ n/a So disrespectful when he 0 14:58:01 would take a knee during our National Anthem.

284 2020-07-14 Outgoing +1936270477777 READ n/a You know who I miss? Tim 0 14:59:01 Tebow

285 2020-07-14 Incoming +5167597484340 READ n/a I liked him. I never understood 0 15:22:01 why Denver let him go.

286 2020-07-14 Outgoing +1936270477777 READ n/a Denver had Peyton ready to 0 15:22:01 go. That guy is a machine.

287 2020-07-14 Incoming +5167597484340 READ n/a Is Peyton coming back this 0 15:42:01 year? I never heard.

288 2020-07-14 Outgoing +1936270477777 READ n/a How did you miss that? He 0 15:53:01 retired from the NFL.

289 2020-07-14 Incoming +5167597484340 READ n/a Probably a good move for him. 0 15:59:01

290 2020-07-14 Outgoing +1936270477777 READ n/a Agreed, go out on his own 0 16:25:01 terms as a winner.

291 2020-07-14 Outgoing +1936270477777 READ n/a So have you seen "Finding 0 12:32:01 Nemo"?

292 2020-07-14 Incoming +6496949414517 READ n/a No I haven't. Is it any good? 0 12:49:01

293 2020-07-14 Outgoing +1936270477777 READ n/a Are you kidding me?! It was 0 13:22:01 AMAZING! One of the cutest movies I have ever seen.

294 2020-07-14 Incoming +6496949414517 READ n/a Oh yeah? 0 13:33:01

295 2020-07-14 Outgoing +1936270477777 READ n/a Seriously. I know it isn't you 0 13:59:01 thing per say, but the turtles in

iREPAIR - Backup Forensics Report (https://thelead82.com) - 14 of 75 ID Date Direction Party Status Subject Message Body Attachment

that movie you would love! There is a scene where they meet the turtles, hey are surfers and he calls him "Mr.Turtle" and the turtle responds "My dad was Mr.Turtle, you can call me 296 2020-07-14 Incoming +6496949414517 READ n/a SoCrunch" they haveit was surfing hilarious! turtles? 0 14:12:01

297 2020-07-14 Outgoing +1936270477777 READ n/a Yes and the little one is great! 0 14:26:01 Oh and Dori, the fish with no memory.

298 2020-07-14 Incoming +6496949414517 READ n/a Don't all fishes have no 0 15:00:01 memory?

299 2020-07-14 Outgoing +1936270477777 READ n/a I guess? But seriously you 0 15:08:01 have to see it, I really can't do it justice.

300 2020-07-14 Incoming +6496949414517 READ n/a I'll check it out some time. 0 15:20:01

301 2020-07-14 Outgoing +1936270477777 READ n/a What did you think of the new 0 12:40:01 Beauty and the Beast movie with Emma Watson?

302 2020-07-14 Incoming +8869342389449 READ n/a To be honest, I didn't really 0 13:09:01 care for it.

303 2020-07-14 Outgoing +1936270477777 READ n/a Really? Why not? 0 13:26:01

304 2020-07-14 Incoming +8869342389449 READ n/a Well, Belle is supposed to be 0 13:51:01 the most beautiful girl in the entire village.

305 2020-07-14 Outgoing +1936270477777 READ n/a Okay.. And?? 0 14:14:01

306 2020-07-14 Incoming +8869342389449 READ n/a Well, I don't find Emma Watson 0 14:42:01 to be all that beautiful.

307 2020-07-14 Outgoing +1936270477777 READ n/a Why not? I think she's very 0 15:11:01 pretty.

308 2020-07-14 Incoming +8869342389449 READ n/a Oh, I don't think she's ugly. But 0 15:30:01 there were tons of people throughout the movie that are more attractive than her.

309 2020-07-14 Outgoing +1936270477777 READ n/a Well, she's a popular actress 0 15:53:01 so that's probably why she was cast for the part. She's also a good actress on top of being well liked.

310 2020-07-14 Incoming +8869342389449 READ n/a Yeah, I suppose that's true. I 0 15:58:01 was just disappointed, is all.

ID Domain Path Cookie Value Expires

1 .google.pl / 1P_JAR 2020-05-08-12 2020-06-07 14:38:52

2 .google.pl / NID 204=bnkW-fWief_Q_TEhEFQdMX_FcpOx-Byr93a7abdt_nuNZV_Ewje7EEjI 2020-11-07 XDsoZQj5USSQAgvvOqxxQFDsEcUmQqsAg_2s3fdtpeRKKUonlbo5wnl-gc 13:38:51 K6Hkbty5NXijhr8lU4mFq56C5nzY-QFizQvXXFjCkzrrKoNXFhpa6eCPA

3 .google.pl / CONSENT WP0.2868ab 2038-01-01 01:00:00

4 .google.pl /complete/sear CGIC CgZzYWZhcmkaCWlwaG9uZV9ibSI_dGV4dC9odG1sLGFwcGxpY2F0aW9 2020-11-04 ch uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44 13:38:50

5 .google.pl /search CGIC CgZzYWZhcmkaCWlwaG9uZV9ibSI_dGV4dC9odG1sLGFwcGxpY2F0aW9 2020-11-04 uL3hodG1sK3htbCxhcHBsaWNhdGlvbi94bWw7cT0wLjksKi8qO3E9MC44 13:38:50

6 .google.pl /verify SNID APx-0P2nhHJ35CkfY0JhLpDmvvj0R2U-lCHQdq4yyghi_hccpHHfPZsxS_Dh 2020-11-07 ENpyABRDc0bdoXCgIpu4cKCE 13:38:51

7 .ebay.com / enforce_policy gdpr_v2 2021-04-19 18:37:18

8 .ebay.com / cookie_check yes 2030-04-19 18:35:06

9 .ebay.com / login_email erick%40hotmail.com 2022-04-20

iREPAIR - Backup Forensics Report (https://thelead82.com) - 15 of 75 ID Domain Path Cookie Value Expires

10 .ebay.com / rmuc 2g01nbN6PtcvOckxIc4qlI2QmZtV4ZSaAPknU4hhtO 2030-04-1906:14:41 18:37:09

11 .ebay.com / X-PP-ADS AToBNn6cXsZjeteA24MynTu2clSkMkY 2021-04-19 18:37:10

12 edition.cnn.com / _cb_ls 1 2020-05-15 14:39:11

13 edition.cnn.com / _t_tests eyJUU01ZdDNyUDh1Z2N6Ijp7ImNob3NlblZhcmlhbnQiOiJDIiwic3BlY2lma 2020-05-08 WNMb2NhdGlvbiI6WyJDMXdiMTEiXX0sImxpZnRfZXhwIjoibSJ9 15:39:12

14 edition.cnn.com / ug 5eb552f00e3d240a3f83a400160fa984 2020-05-15 14:39:13

15 edition.cnn.com / ugs 1 2020-05-09 16:39:13

16 edition.cnn.com / _cb iEugpBQOtZ6CYPiwj 2020-05-15 14:39:13

17 edition.cnn.com / _chartbeat2 .1588941553858.1588941553858.1.BSgnxb-qhqdBMRLkhDtSSCfDuhO3A. 2020-05-15 1 14:39:13

18 edition.cnn.com / _cb_svref https%3A%2F%2Fedition.cnn.com%2F 2020-05-08 15:09:13

19 .bea4.cnn.com / _uid "g076_6824452009685613862" 2021-05-08 14:39:14

20 .cnn.com / OptanonControl ccc=PL&otvers=5.13.0®=gdpr&pctm=Fri May 08 2020 14:39:07 GMT+0200 2020-05-15 (CEST)&vers=2.0.3 14:39:09

21 .cnn.com / OptanonConsent isIABGlobal=false&datestamp=Fri+May+08+2020+14%3A39%3A12+GMT 2020-05-15 %2B0200+(CEST)&version=5.13.0&landingPath=NotLandingPage&groups 14:39:12 =req%3A1%2Csmv%3A1%2Csm%3A1%2CBG139%3A1%2Cad%3A1%2 Cadv%3A1%2CBG137%3A1%2Cpf%3A1%2Cpfv%3A1%2CBG138%3A1 %2Cpzv%3A1%2Cpz%3A1%2CBG140%3A1%2Cbb%3A1%2Cbbv%3A1% 2CBG141%3A1%2Csa%3A1%2Csav%3A1%2CBG136%3A1&hosts=&con sentId=b083e7d6-9c73-47c8-8688-ee9973107a17&interactionCount=1&ge olocation=PL%3B22&AwaitingReconsent=false

22 .cnn.com / OptanonAlertBoxClosed 2020-05-08T12:39:07.399Z 2020-05-15 14:39:07

23 .cnn.com / eupubconsent BOzFT0yOzFT0yAcABBENDI-AAAAvZ7______9______9uz_Ov_v_f__33 2020-05-15 e8__9v_l_7_-___u_-33d4u_1vf99yfm1-7etr3tp_87ues2_Xur__71__3z3_9px 14:39:07 P78k89r7337Ew_v-_v-b7BCPN9Y3v-8Kg

24 .cnn.com / optimizelyEndUserId oeu1588941550043r0.8162986252841011 2020-05-15 14:39:10

25 .cnn.com / AMCV_7FF852E2556756057 1075005958%7CMCIDTS%7C18391%7CMCMID%7C8832778530433947 2022-05-08 F000101%40AdobeOrg 7032262792279855800395%7CMCAAMLH-1589546351%7C6%7CMCAA 14:39:12 MB-1589546351%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQ JzPXImdj0y%7CMCOPTOUT-1588948751s%7CNONE%7CMCAID%7C2F 5AA9770515AEF9-6000067F23C3B874%7CMCSYNCSOP%7C411-18398 %7CvVersion%7C4.4.1

26 .cnn.com / adobeujs-optin %7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22 2020-05-15 %3Atrue%2C%22campaign%22%3Afalse%2C%22ecid%22%3Atrue%2C% 14:39:10 22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22 %3Afalse%7D

27 .cnn.com / s_vi [CS]v1|2F5AA9770515AEF9-6000067F23C3B874[CE] 2022-05-08 14:39:12

28 .cnn.com / s_ecid MCMID%7C88327785304339477032262792279855800395 2022-05-08 14:39:12

29 .cnn.com / _uetsid _uetc6ac75d7-a925-b4d7-abce-05c948fae30b 2020-05-08 15:09:11

30 .cnn.com / ajs_user_id null 2020-05-15 14:39:11

31 .cnn.com / ajs_group_id null 2020-05-15 14:39:11

32 .cnn.com / btIdentify b65a4e0f-9bb1-45dc-e7a4-f6595c0ec464 2020-05-15 14:39:11

33 .cnn.com / _bti %7B%22app_id%22%3A%22cnn%22%2C%22attributes%22%3A%5B%7B 2020-05-15 %22name%22%3A%22created_at%22%2C%22value%22%3A%222020-0 14:39:12 5-08T12%3A39%3A12%2B00%3A00%22%7D%2C%7B%22name%22%3 A%22last_updated%22%2C%22value%22%3A%222020-05-08T12%3A39 %3A12%2B00%3A00%22%7D%5D%2C%22bsin%22%3A%22g3cOgUbT YSEB3SeOk0cZRR7L9SeIfcLtjZkzjndOuhhNu0N0nvyBgwcDCsJXtN%2F9 0BhBEwXbAN5wyyoLXrMM%2BQ%3D%3D%22%2C%22created_at%22% 3A%222020-05-08T12%3A39%3A12%2B00%3A00%22%2C%22last_upda ted%22%3A%222020-05-08T12%3A39%3A12%2B00%3A00%22%7D

34 .cnn.com / _bts c1c4d5dd-dfc3-40cc-b7d0-c813222b3308 2020-05-08 15:39:11

iREPAIR - Backup Forensics Report (https://thelead82.com) - 16 of 75 ID Domain Path Cookie Value Expires

35 .cnn.com / ajs_anonymous_id %22ccfe87ca-7d5b-4690-ad7f-62c94ed820f8%22 2020-05-15 14:39:13

36 .cnn.com / OB-USER-TOKEN 7619d923-5c2c-4adb-bc87-65e280863497 2020-05-15 14:39:12

37 .cnn.com / cnprevpage_pn cnn%3Ain%3Aedition%3A%2F 2020-05-08 15:09:12

38 .cnn.com / __gads ID=49e6076ab966e3a6-22b36f6256b60059:T=1588941553:RT=158894155 2020-05-15 3:S=ALNI_MZ9AzwiJyCtdBXXdxStFqmivs5TfQ 14:39:13

39 www.reddit.com / loid 00000000006f29nc3i.2.1588941533152.Z0FBQUFBQmV0VkxkSXVzX3VL 2022-05-08 Z1lONjNiQkFCMEJ6ZG5vN0xsT0F2RUNDcXgxNGJSUF91YzBDSWNubm 14:38:53 N6a1NTNGNVMWVTcmtlRkExVUxwV09tckExVG4yVFhoQVpNYzZtaUk2cj hFVlhzUUZOYVBRbHhaOVNtS3RvMS1TN3B0aFpfeG5PU0RGY3lENWw

40 www.reddit.com / EUCookieNotice 1 2020-05-15 14:38:54

41 .reddit.com / session_tracker Tsyb85gps30uDlW4cB.0.1588941534313.Z0FBQUFBQmV0VkxmNGpBZn 2020-05-08 piSWFIcVFITHAya0tzZTRCcjNnQmZ2Y0dieW5SSlc1TmlpTmVDSDFQcVd 16:38:54 iSThjdkRSQ2Y0Tzk4TGV5VDVxXzN3NFkySVlwVXhZNTJkTm9QVWthdlh YcVFMYjIzTVhPTG10d19uV2JvZ1pMd3duX1FXMndOY3NUQi0zVk0

42 .reddit.com / token eyJhY2Nlc3NUb2tlbiI6Ii1HQW1wTlFTTmRjM3pnNGpjQWlQRFkyMUpwSW 2022-05-08 MiLCJ0b2tlblR5cGUiOiJiZWFyZXIiLCJleHBpcmVzIjoxNTg4OTQ1MTMzMT 14:38:53 YzLCJzY29wZSI6IioiLCJ1bnNhZmVMb2dnZWRPdXQiOnRydWV9.2

43 .reddit.com / csv 1 2022-05-08 14:38:53

44 .reddit.com / edgebucket SLoOqyxlPQXLHmo4Ag 2022-05-08 14:38:52

45 .c.ebay.com / sc_f pQhWXiDsdxYxeYq6CZ7SVuJrDmKXKoaesusLOt6hDgd_EC8dsUo9edrM 2025-04-18 L8DDMGCAGmeb3pHSeHtl-9DV9rGMrLIf0HJndqGpCk9zp0 18:35:09

46 .stats.ebay.com / c 056f4a6b2b47c8b71366 2040-04-14 18:37:15

47 www.ebay.com / cookie_prefs T%3D1%2CP%3D1%2CF%3D1%2Ctype%3Dexplicit_banner 2022-04-19 18:36:47

ID Contact ID Contact IsGrou Number of File Conversation file Name p messages size

1 +3487204088385@statu Leora 0 10 3813 \\?\C:\backup\out_ifor\_forensics_report\js\WhatsApp_chats\[email protected] s tml

2 +4050888042045@statu Agustin 0 20 6342 \\?\C:\backup\out_ifor\_forensics_report\js\WhatsApp_chats\[email protected] s tml

3 +1922443059758@statu Nasir 0 20 6309 \\?\C:\backup\out_ifor\_forensics_report\js\WhatsApp_chats\[email protected] s tml

4 +5167597484340@statu Jackie 0 20 7044 \\?\C:\backup\out_ifor\_forensics_report\js\WhatsApp_chats\[email protected] s tml

5 +2501163694086@statu Willard 0 10 4059 \\?\C:\backup\out_ifor\_forensics_report\js\WhatsApp_chats\[email protected] s tml

6 +6496949414517@statu Brown 0 10 3846 \\?\C:\backup\out_ifor\_forensics_report\js\WhatsApp_chats\[email protected] s tml

7 +6184278437520@statu Jennie 0 10 3836 \\?\C:\backup\out_ifor\_forensics_report\js\WhatsApp_chats\[email protected] s tml

8 +3602034613677@statu Alyson 0 20 6638 \\?\C:\backup\out_ifor\_forensics_report\js\WhatsApp_chats\[email protected] s tml

9 +8869342389449@statu Luther 0 10 3955 \\?\C:\backup\out_ifor\_forensics_report\js\WhatsApp_chats\[email protected] s tml

10 +1581047549261@statu Aleen 0 10 3698 \\?\C:\backup\out_ifor\_forensics_report\js\WhatsApp_chats\[email protected] s tml

File information

I File Info Extra File Info D

0 Name: IMG_0009.THM Created: 2020-05-02 Path: Media/PhotoData/Metadata/DCIM/100APPLE/IMG_0009.THM 09:43:28 SHA256: 4e4bad713b7de5c8ab7a89de9ad92c4c4263cf14e4fe740d67e19c8eef43d2d7 Modified: 2020-05-02

iREPAIR - Backup Forensics Report (https://thelead82.com) - 17 of 75 I File Info Extra File Info D

09:43:28 Accessed: 2020-05-02 09:43:28 1 Name: IMG_0009.JPG Created:Size: 5438 2020-05-02 bytes Path: Media/PhotoData/Metadata/DCIM/100APPLE/IMG_0009.JPG 09:43:28 SHA256: 060e1a67230587a3975aa008ad2cdcb03f84ba4345a881dd12e21c868681256b Modified: 2020-05-02 09:43:28 Accessed: 2020-05-02 09:43:28 Size: 40388 bytes

2 Name: IMG_0008.THM Created: 2020-04-17 Path: Media/PhotoData/Metadata/DCIM/100APPLE/IMG_0008.THM 09:39:14 SHA256: a892618f3c55b10b40d10859b0325bff850f2a341abc65526688e7d62bc69eca Modified: 2020-04-17 09:39:14 Accessed: 2020-04-17 09:39:14 Size: 2693 bytes

3 Name: IMG_0001.THM Created: 2020-04-01 Path: Media/PhotoData/Metadata/DCIM/100APPLE/IMG_0001.THM 17:20:51 SHA256: fff389019cb4efade14d79f4705686c8d816b3467e3af52ca1c7a3cbbfeede67 Modified: 2020-04-01 17:20:51 Accessed: 2020-04-01 17:20:51 Size: 3741 bytes

4 Name: F18A652D-9D5E-4AAC-B2EE-9785F99FECFE.foldermetadata Created: 2020-05-02 Path: Media/PhotoData/AlbumsMetadata/F18A652D-9D5E-4AAC-B2EE-9785F99FECFE.foldermetadata 09:39:06 SHA256: 9b78c09ad46d57f55b93e043a280ca375c75dd9f55de695256d8057a961b6cd9 Modified: 2020-05-02 09:39:06 Accessed: 2020-05-02 09:39:06 Size: 854 bytes

5 Name: 0847B7DF-2319-4E72-A388-A1FDB0487DA1.albummetadata Created: 2020-05-02 Path: Media/PhotoData/AlbumsMetadata/0847B7DF-2319-4E72-A388-A1FDB0487DA1.albummetadata 09:39:11 SHA256: abf728c10c7b166d05bd3da854f2cbf21c3437297361164986044910a8961fce Modified: 2020-05-02 09:39:11 Accessed: 2020-05-02 09:39:11 Size: 463 bytes

6 Name: 5003.JPG Created: 2020-04-17 Path: Media/PhotoData/Thumbnails/V2/DCIM/100APPLE/IMG_0004.HEIC/5003.JPG 09:37:23 SHA256: 992588d06a173b4c619f06a2de0841c67c5273fe0f6ad98df111dc91b33ab593 Modified: 2020-04-17 09:37:23 Accessed: 2020-04-17 09:37:23 Size: 33164 bytes

7 Name: 5003.JPG Created: 2020-05-02 Path: Media/PhotoData/Thumbnails/V2/DCIM/100APPLE/IMG_0010.JPG/5003.JPG 09:39:11 SHA256: ad96e122f45beb91b2de14c835b72d62f0fade755360b476c4dbe3281d61ef87 Modified: 2020-05-02 09:39:11 Accessed: 2020-05-02 09:39:11 Size: 27158 bytes

8 Name: 5003.JPG Created: 2020-04-17 Path: Media/PhotoData/Thumbnails/V2/DCIM/100APPLE/IMG_0005.HEIC/5003.JPG 09:37:25 SHA256: e3e910860456ca427f89d9f1a3d408ec87088ebd1f10f784aebeb45b152986b3 Modified: 2020-04-17 09:37:25 Accessed: 2020-04-17 09:37:25 Size: 40514 bytes

9 Name: 5003.JPG Created: 2020-04-17 Path: Media/PhotoData/Thumbnails/V2/DCIM/100APPLE/IMG_0002.HEIC/5003.JPG 09:36:45 SHA256: 5906024f15c8ebc1afec0157cad70438c2dacf3b27937321d03e2bb005e121ce Modified: 2020-04-17 09:36:45 Accessed: 2020-04-17 09:36:45 Size: 38057 bytes

1 Name: 5003.JPG Created: 2020-04-17 0 Path: Media/PhotoData/Thumbnails/V2/DCIM/100APPLE/IMG_0008.MOV/5003.JPG 09:39:14 SHA256: 4eb7354f8e9efc0d65a2f9d10f8d3e1c3d892cef882cb59f4439007e347b2e52 Modified: 2020-04-17 09:39:14 Accessed: 2020-04-17 09:39:14 Size: 45827 bytes

1 Name: 5003.JPG Created: 2020-04-17 1 Path: Media/PhotoData/Thumbnails/V2/DCIM/100APPLE/IMG_0003.HEIC/5003.JPG 09:37:23 SHA256: e1db15f011786a4ebd7411815459b6423c7073d57b2ad54e1bf0cf85c777215b Modified: 2020-04-17 09:37:23 Accessed: 2020-04-17 09:37:23 Size: 38966 bytes

1 Name: 5003.JPG Created: 2020-05-02 2 Path: Media/PhotoData/Thumbnails/V2/DCIM/100APPLE/IMG_0009.MP4/5003.JPG 09:43:28 SHA256: bf74b5f0992fba9521dd2f9a3f4cbf23889aa39c57b8ed0677441a791165eff8 Modified: 2020-05-02 09:43:28 Accessed: 2020-05-02 09:43:28 Size: 30014 bytes

iREPAIR - Backup Forensics Report (https://thelead82.com) - 18 of 75 I File Info Extra File Info D

1 Name: 5003.JPG Created: 2020-04-01 3 Path: Media/PhotoData/Thumbnails/V2/DCIM/100APPLE/IMG_0001.MOV/5003.JPG 17:20:51 SHA256: b6f3f0b2052a7484fb83f86dac432dc3d1a0796e8f7349fc1f6e4cbb834becf1 Modified: 2020-04-01 17:20:51 Accessed: 2020-04-01 17:20:51 Size: 45968 bytes

1 Name: 5003.JPG Created: 2020-04-17 4 Path: Media/PhotoData/Thumbnails/V2/DCIM/100APPLE/IMG_0006.HEIC/5003.JPG 09:37:25 SHA256: 152c08147325c92638110f3d9bdfc2dbc300750354e5e301722845ab75c5e108 Modified: 2020-04-17 09:37:25 Accessed: 2020-04-17 09:37:25 Size: 39147 bytes

1 Name: 5003.JPG Created: 2020-04-17 5 Path: Media/PhotoData/Thumbnails/V2/DCIM/100APPLE/IMG_0007.HEIC/5003.JPG 09:37:25 SHA256: 915aa4eaf147718802b140d65093456a08ce4aefcdf438db541ca1831c6803cd Modified: 2020-04-17 09:37:25 Accessed: 2020-04-17 09:37:25 Size: 40202 bytes

1 Name: thumbnailConfiguration Created: 2020-04-01 6 Path: Media/PhotoData/Thumbnails/thumbnailConfiguration 17:12:26 SHA256: 4d6a8b61ffd33fe5d0a1117068093add1309b6ffa7f2dbaa7210d1a4b9e6e6b2 Modified: 2020-04-01 17:12:26 Accessed: 2020-04-01 17:12:26 Size: 326 bytes

1 Name: 4031.ithmb Created: 2020-05-02 7 Path: Media/PhotoData/Thumbnails/4031.ithmb 09:43:28 SHA256: ab955da19de9f407f4dc40ec42def49ec6b4b79b0ff7fc18bce0bb006a65ba51 Modified: 2020-05-02 09:43:28 Accessed: 2020-05-02 09:43:28 Size: 1873820 bytes

1 Name: 3310.ithmb Created: 2020-05-02 8 Path: Media/PhotoData/Thumbnails/3310.ithmb 09:43:28 SHA256: 14d34cea4cd3354366ecdfe623119b8ecae8057dbe0cf17c89fe896a024a79a3 Modified: 2020-05-02 09:43:28 Accessed: 2020-05-02 09:43:28 Size: 781820 bytes

1 Name: 3304.ithmb Created: 2020-05-02 9 Path: Media/PhotoData/Thumbnails/3304.ithmb 09:43:28 SHA256: bba1c299f3c0c35ede4f2b55cb818d16c372e9ca500d12ed70dc8fec753e251d Modified: 2020-05-02 09:43:28 Accessed: 2020-05-02 09:43:28 Size: 105820 bytes

2 Name: PreviewWellImage.tiff Created: 2020-05-09 0 Path: Media/PhotoData/MISC/PreviewWellImage.tiff 14:09:21 SHA256: 9bcad1b46c6d0640df9c9c2dd9f26055b43d62d0bd06aaed86a97a1d165bdab2 Modified: 2020-05-09 14:09:21 Accessed: 2020-05-09 14:09:21 Size: 17070 bytes

2 Name: DCIM_APPLE.plist Created: 2020-05-02 1 Path: Media/PhotoData/MISC/DCIM_APPLE.plist 09:39:11 SHA256: 026cf11c4d081f98ea7c05971f49ae1d070cf12ee611201f36ab6e5891127582 Modified: 2020-05-02 09:39:11 Accessed: 2020-05-02 09:39:11 Size: 302 bytes

2 Name: suspendnebulad Created: 2020-04-01 2 Path: Media/PhotoData/suspendnebulad 17:20:48 SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Modified: 2020-04-01 17:20:48 Accessed: 2020-04-01 17:20:48 Size: 0 bytes

2 Name: protection Created: 2020-04-01 3 Path: Media/PhotoData/protection 17:12:27 SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Modified: 2020-04-01 17:12:27 Accessed: 2020-04-01 17:12:27 Size: 0 bytes

2 Name: cpl_enabled_marker Created: 2020-05-09 4 Path: Media/PhotoData/cpl_enabled_marker 14:09:19 SHA256: 43b614b4da7328f797f9676f9250e76c7c58c26996673e2f03943d8ce191b374 Modified: 2020-05-09 14:09:19 Accessed: 2020-05-09 14:09:19 Size: 23 bytes

2 Name: cpl_download_finished_marker Created: 2020-05-09 5 Path: Media/PhotoData/cpl_download_finished_marker 14:09:44 SHA256: d5f6419ebb445260e757d99cc3e7072c10615c81e3f3415447b998f62a25d1bb Modified: 2020-05-09 14:09:44

iREPAIR - Backup Forensics Report (https://thelead82.com) - 19 of 75 I File Info Extra File Info D

Accessed: 2020-05-09 14:09:44 Size: 23 bytes 2 Name: IMG_0010.JPG Created: 2020-05-02 6 Path: Media/DCIM/100APPLE/IMG_0010.JPG 09:39:11 SHA256: a444b4969347c8c64739e226c9c1273ff3abcc0b7b6e4815bbb158ac6f51d30b Modified: 2020-05-02 09:39:11 Accessed: 2020-06-27 16:21:16 Size: 31409 bytes

2 Name: IMG_0009.MP4 Created: 2020-05-02 7 Path: Media/DCIM/100APPLE/IMG_0009.MP4 09:19:26 SHA256: 39123d4fa523f5ab3ec6c3382ca05a5fffaf09ec181267d9dfb2114df06910f7 Modified: 2020-05-02 09:19:26 Accessed: 2020-06-27 16:21:16 Size: 970095 bytes

2 Name: IMG_0008.MOV Created: 2020-04-17 8 Path: Media/DCIM/100APPLE/IMG_0008.MOV 09:39:10 SHA256: 3fab3cfd8f986a701ec1753b1c91e02646b005dc00e01d2e8adc44e31ebc5593 Modified: 2020-04-17 09:39:10 Accessed: 2020-06-27 16:21:16 Size: 3340361 bytes

2 Name: IMG_0007.MOV Created: 2020-04-17 9 Path: Media/DCIM/100APPLE/IMG_0007.MOV 09:37:28 SHA256: 06110a38f66dd3f72e49446bf55398f2dbe70220d41b757ba44528c056bf84e5 Modified: 2020-04-17 09:37:28 Accessed: 2020-06-27 16:21:16 Size: 2923859 bytes

3 Name: IMG_0007.HEIC Created: 2020-04-17 0 Path: Media/DCIM/100APPLE/IMG_0007.HEIC 09:37:25 SHA256: 105083f3157dc310a1f0087b45a138bf3b92c8b68479312e7d424679e0ce1c89 Modified: 2020-04-17 09:37:25 Accessed: 2020-06-27 16:21:16 Size: 1338369 bytes

3 Name: IMG_0006.MOV Created: 2020-04-17 1 Path: Media/DCIM/100APPLE/IMG_0006.MOV 09:37:28 SHA256: 32fefb5a0ff3fba30771a1a87236749b722928e1627973ee585d7f115fa1d97c Modified: 2020-04-17 09:37:28 Accessed: 2020-06-27 16:21:16 Size: 3224010 bytes

3 Name: IMG_0006.HEIC Created: 2020-04-17 2 Path: Media/DCIM/100APPLE/IMG_0006.HEIC 09:37:25 SHA256: 3eda8a6439e02ca16ad4dd584ffa1bd31ad1a3f99907e47b524a15bd875d5566 Modified: 2020-04-17 09:37:25 Accessed: 2020-06-27 16:21:16 Size: 1241353 bytes

3 Name: IMG_0005.MOV Created: 2020-04-17 3 Path: Media/DCIM/100APPLE/IMG_0005.MOV 09:37:27 SHA256: 093245e79b0865b617b8d2194f76aca4ef807dcb5350e342b8e7b2c546ca5c69 Modified: 2020-04-17 09:37:27 Accessed: 2020-06-27 16:21:16 Size: 2927954 bytes

3 Name: IMG_0005.HEIC Created: 2020-04-17 4 Path: Media/DCIM/100APPLE/IMG_0005.HEIC 09:37:25 SHA256: e8861971bb880abdd9e483dcc5965d1e1065ff7e8f43fc107d7f5503b6a6231e Modified: 2020-04-17 09:37:25 Accessed: 2020-06-27 16:21:16 Size: 1381499 bytes

3 Name: IMG_0004.MOV Created: 2020-04-17 5 Path: Media/DCIM/100APPLE/IMG_0004.MOV 09:37:27 SHA256: 34d7e2ba0dcc772d5cf6036b5089a1632acafbc84abc2e7eb2425c860efebae8 Modified: 2020-04-17 09:37:27 Accessed: 2020-06-27 16:21:16 Size: 1883313 bytes

3 Name: IMG_0004.HEIC Created: 2020-04-17 6 Path: Media/DCIM/100APPLE/IMG_0004.HEIC 09:37:23 SHA256: f892ee5067e2659a7ee57962b626915e3c3eba96f61dbc3a6d4279c4e004a0cb Modified: 2020-04-17 09:37:23 Accessed: 2020-06-27 16:21:16 Size: 974719 bytes

3 Name: IMG_0003.MOV Created: 2020-04-17 7 Path: Media/DCIM/100APPLE/IMG_0003.MOV 09:37:26 SHA256: cabc240c3fd1d8060b1c374b4b3eaa965ac38088b40ee84791e733a956fd77d6 Modified: 2020-04-17 09:37:26 Accessed: 2020-06-27 16:21:16 Size: 1854260 bytes

3 Name: IMG_0003.HEIC Created: 2020-04-17

iREPAIR - Backup Forensics Report (https://thelead82.com) - 20 of 75 I File Info Extra File Info D

8 Path: Media/DCIM/100APPLE/IMG_0003.HEIC 09:37:23 SHA256: 03e0c65b12bfa878c9247010c14a3e665354616e0b42da6695b58499745f2446 Modified: 2020-04-17 09:37:23 Accessed: 2020-06-27 16:21:16 Size: 1161330 bytes 3 Name: IMG_0002.MOV Created: 2020-04-17 9 Path: Media/DCIM/100APPLE/IMG_0002.MOV 09:36:47 SHA256: 6a5b4a852127c280699a2a13fbc3e748afe45d9197ce08625f4d8afc9dd2d300 Modified: 2020-04-17 09:36:47 Accessed: 2020-06-27 16:21:16 Size: 1897649 bytes

4 Name: IMG_0002.HEIC Created: 2020-04-17 0 Path: Media/DCIM/100APPLE/IMG_0002.HEIC 09:36:45 SHA256: 1860c4c5dee2923c32e5b3a6cf485e6981eaf79b6f1efaa272156ac2d7551682 Modified: 2020-04-17 09:36:45 Accessed: 2020-06-27 16:21:16 Size: 1178937 bytes

4 Name: IMG_0001.MOV Created: 2020-04-01 1 Path: Media/DCIM/100APPLE/IMG_0001.MOV 17:20:48 SHA256: f35c49432618ded54e719e25ccbbd7ead1064bd8f3d9c25f50e995e2834e5e80 Modified: 2020-04-01 17:20:48 Accessed: 2020-06-27 16:21:16 Size: 2281440 bytes

4 Name: BCPrivateDatabaseSecure.bcck Created: 2020-05-08 2 Path: Documents/BCCloudKit-BookDataStoreServiceSecure/BCPrivateDatabaseSecure.bcck 14:03:06 SHA256: 59b92a56851c6a12201118fdbcfa955e58cccb67e5da75751836eda6957df482 Modified: 2020-05-08 14:03:06 Accessed: 2020-06-27 16:19:40 Size: 670 bytes

4 Name: BKJaliscoServerSource-v09182016.sqlite Created: 2020-05-08 3 Path: Documents/BKJaliscoServerSource/BKJaliscoServerSource-v09182016.sqlite 14:02:58 SHA256: 1e08158dad50d820b2d0238da8470f972b554080acc038b87b3e1fb1f84940b2 Modified: 2020-05-08 14:02:58 Accessed: 2020-06-27 16:19:40 Size: 53248 bytes

4 Name: BCPrivateDatabase.bcck Created: 2020-05-08 4 Path: Documents/BCCloudKit-BookDataStoreService/BCPrivateDatabase.bcck 14:03:03 SHA256: a097a58592e68de41609d809a60f241606c1b5358c069b0e84e05dc978d5e112 Modified: 2020-05-08 14:03:03 Accessed: 2020-06-27 16:19:40 Size: 733 bytes

4 Name: BCCloudSecureUserData Created: 2020-05-08 5 Path: Documents/BCCloudAsset-BookDataStoreService/BCCloudSecureUserData 14:03:20 SHA256: 6ca23cd2c399abd26a8a4cce752f25d04b0878cdf362572d1860353cb52c00ae Modified: 2020-05-08 14:03:20 Accessed: 2020-06-27 16:19:40 Size: 90112 bytes

4 Name: BCCloudCollections Created: 2020-05-08 6 Path: Documents/BCCloudAsset-BookDataStoreService/BCCloudCollections 14:03:16 SHA256: c00ef7fba56459c54a600233d36b75bd2aae1a80c1cf3f7f04275d32c7d95b0f Modified: 2020-05-08 14:03:16 Accessed: 2020-06-27 16:19:40 Size: 126976 bytes

4 Name: BCAssetData Created: 2020-05-08 7 Path: Documents/BCCloudAsset-BookDataStoreService/BCAssetData 14:03:04 SHA256: 7fe64cd96e9d79f2011bf64fcaa7d611581e5af53e63eeaf307e5d41aa570072 Modified: 2020-05-08 14:03:04 Accessed: 2020-06-27 16:19:40 Size: 151552 bytes

4 Name: group.com.apple.iBooks.plist Created: 2020-05-08 8 Path: Library/Preferences/group.com.apple.iBooks.plist 14:03:03 SHA256: c631b98010141c05044aa6455edfd701e04df4ab098bf1c19d899370ccfb6d31 Modified: 2020-05-08 14:03:03 Accessed: 2020-06-27 16:19:40 Size: 117 bytes

4 Name: BDSICloudIdentityToken.plist Created: 2020-05-08 9 Path: BDSICloudIdentityToken.plist 14:02:56 SHA256: f539bee8d0863223ae7d69b93975c7a4d83db15ae4f8d53cc2ba94befb5f019c Modified: 2020-05-08 14:02:56 Accessed: 2020-06-27 16:19:40 Size: 286 bytes

5 Name: group.com.apple.weather.plist Created: 2020-04-15 0 Path: Library/Preferences/group.com.apple.weather.plist 22:30:43 SHA256: 3b60c3113a5a71c7e6a3415a4ccd9b147d2414ab4f52b7ace1f00ae09b2af4f0 Modified: 2020-04-15 22:30:43 Accessed: 2020-06-27 16:19:40

iREPAIR - Backup Forensics Report (https://thelead82.com) - 21 of 75 I File Info Extra File Info D

5 Name: com.apple.stocks.private-production-dbstore.json Created:Size: 153 2020-04-19 bytes 1 Path: Library/Documents/PrivateData/com.apple.stocks.private-production-dbstore.json 20:46:08 SHA256: d13a38fe32e55a4d5cf07498f92c04957083a4386bd4045c58466bb745408364 Modified: 2020-04-19 20:46:08 Accessed: 2020-06-27 16:19:40 Size: 1376 bytes

5 Name: group.com.apple.stocks.plist Created: 2020-04-01 2 Path: Library/Preferences/group.com.apple.stocks.plist 17:12:38 SHA256: 5864c166b68e8f5697518840025a148488d2880b98eaef9d2146c81902844113 Modified: 2020-04-01 17:12:38 Accessed: 2020-06-27 16:19:40 Size: 117 bytes

5 Name: user_model_database.sqlite Created: 2020-05-29 3 Path: Library/Keyboard/user_model_database.sqlite 17:48:46 SHA256: d52e4578312c2be85f186412b096cf012b678619d81676ad74fe3b95c789bd43 Modified: 2020-05-29 17:48:46 Accessed: 2020-04-01 17:14:48 Size: 36864 bytes

5 Name: textReplacements.cache Created: 2020-05-09 4 Path: Library/Keyboard/textReplacements.cache 14:10:08 SHA256: af56a523f8464d69e6d8f5b24a06eb2b92cbe5bfdec68b1767337c548af2a747 Modified: 2020-05-09 14:10:08 Accessed: 2020-05-09 14:10:08 Size: 558 bytes

5 Name: shapestore.db Created: 2020-04-19 5 Path: Library/Keyboard/shapestore.db 18:51:07 SHA256: 877c125c29e8d70618f8d70f68d878e3432448adbc46d448fd5706ff5862234b Modified: 2020-04-19 18:51:07 Accessed: 2020-04-19 18:51:07 Size: 28672 bytes

5 Name: SystemAppInstallState.plist Created: 2020-06-27 6 Path: Library/MobileInstallation/BackedUpState/SystemAppInstallState.plist 16:20:23 SHA256: 6b154551b940f0f266e112451cd6ede49f60249d4b3c566adeddc85306bb75ef Modified: 2020-06-27 16:20:23 Accessed: 2020-06-27 16:20:23 Size: 1506 bytes

5 Name: BackupSystemAppInstallState.plist Created: 2020-06-27 7 Path: Library/MobileInstallation/BackedUpState/BackupSystemAppInstallState.plist 16:20:23 SHA256: 6b154551b940f0f266e112451cd6ede49f60249d4b3c566adeddc85306bb75ef Modified: 2020-06-27 16:20:23 Accessed: 2020-07-13 15:52:04 Size: 1506 bytes

5 Name: disabled.plist Created: 2020-04-01 8 Path: com.apple.xpc.launchd/disabled.plist 17:10:40 SHA256: 910ae486a0e7eb809583b72b93dd31b7b00add68097423522e0cda64cf6c5159 Modified: 2020-04-01 17:10:40 Accessed: 2020-04-01 17:10:40 Size: 459 bytes

5 Name: disabled.migrated Created: 2020-04-01 9 Path: com.apple.xpc.launchd/disabled.migrated 17:10:31 SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Modified: 2020-04-01 17:10:31 Accessed: 2020-04-01 17:10:31 Size: 0 bytes

6 Name: PlugInKit-Annotations Created: 2020-04-10 0 Path: PlugInKit-Annotations 17:57:26 SHA256: 14c1a5068b9c1fc4fa31ae24c6fc0575e1f8b8900d67d0f1ff93b9701795c3e2 Modified: 2020-04-10 17:57:26 Accessed: 2020-04-10 17:57:26 Size: 3813 bytes

6 Name: 243LU875E5.groups.com.apple.podcasts.plist Created: 2020-04-01 1 Path: Library/Preferences/243LU875E5.groups.com.apple.podcasts.plist 17:12:47 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-04-01 17:12:47 Accessed: 2020-06-27 16:19:40 Size: 42 bytes

6 Name: com.apple.UpNextWidget.extension.plist Created: 2020-04-15 2 Path: Library/Preferences/com.apple.UpNextWidget.extension.plist 22:29:22 SHA256: 93aedbe1721e6eccd2631f586e2ea5660533dadf694ea66c96e1259663543602 Modified: 2020-04-15 22:29:22 Accessed: 2020-06-27 16:19:40 Size: 562 bytes

6 Name: com.apple.AuthKitUI.AKFollowUpServerUIExtension.plist Created: 2020-04-19 3 Path: Library/Preferences/com.apple.AuthKitUI.AKFollowUpServerUIExtension.plist 18:47:23 SHA256: 754899e6ee1e24cefcf99442c9db41bcc8e20d210935d9fd76592c0fe2fc7e96 Modified: 2020-04-19

iREPAIR - Backup Forensics Report (https://thelead82.com) - 22 of 75 I File Info Extra File Info D

18:47:23 Accessed: 2020-06-27 16:19:40 6 Name: group.com.apple.mail.plist Created:Size: 413 2020-05-11 bytes 4 Path: Library/Preferences/group.com.apple.mail.plist 14:40:47 SHA256: a377d658506e383349f5b6a67ef534f1e9fc1301841c83dd8ee3ed0cce16d72a Modified: 2020-05-11 14:40:47 Accessed: 2020-06-27 16:19:40 Size: 145 bytes

6 Name: com.apple.itunescloud.plist Created: 2020-05-08 5 Path: Library/Preferences/com.apple.itunescloud.plist 14:03:03 SHA256: df9b20008fd4805ea9e6a699334d2c5b8fcf656ce9e8c987c0a12dabe7b74d54 Modified: 2020-05-08 14:03:03 Accessed: 2020-06-27 16:19:40 Size: 139 bytes

6 Name: com.apple.iBooks.plist Created: 2020-05-08 6 Path: Library/Preferences/com.apple.iBooks.plist 14:03:03 SHA256: b4ad8115438ab5f345ca943f8f9939f8b6778618dd33ee59b37a893b64890655 Modified: 2020-05-08 14:03:03 Accessed: 2020-06-27 16:19:40 Size: 1612 bytes

6 Name: BCRecentlyOpenedBooksDB.sqlite Created: 2020-05-08 7 Path: Documents/BCRecentlyOpenedBooksDB/BCRecentlyOpenedBooksDB.sqlite 14:02:55 SHA256: 8eb6f8365abe2b556c48a780e65b98432113e373f9ea3deec5425d28a07accd9 Modified: 2020-05-08 14:02:55 Accessed: 2020-06-27 16:19:40 Size: 28672 bytes

6 Name: AEAnnotation_v10312011_1727_local.sqlite Created: 2020-05-08 8 Path: Documents/storeFiles/AEAnnotation_v10312011_1727_local.sqlite 14:02:55 SHA256: 220affddf4527ef0812538a2465cec2fc83cfe9c9d10f3a8a98946d3d5340f31 Modified: 2020-05-08 14:02:55 Accessed: 2020-06-27 16:19:40 Size: 40960 bytes

6 Name: BKSeries-1-012820141020.sqlite Created: 2020-05-08 9 Path: Documents/BKSeriesDatabase/BKSeries-1-012820141020.sqlite 14:02:55 SHA256: ff7f17896d006982318e97a00539b8fef2db5ee17deb302a3c96d9af38378388 Modified: 2020-05-08 14:02:55 Accessed: 2020-06-27 16:19:40 Size: 61440 bytes

7 Name: BCPrivateDatabase.bcck Created: 2020-05-08 0 Path: Documents/BCCloudKit-iBooks/BCPrivateDatabase.bcck 14:03:03 SHA256: 4343bbf03b8f20996a6ef48bd42c8589dc5b6a2332dfadb9e95c1419f098c7d3 Modified: 2020-05-08 14:03:03 Accessed: 2020-06-27 16:19:40 Size: 766 bytes

7 Name: BKLibrary-1-091020131601.sqlite Created: 2020-05-08 1 Path: Documents/BKLibrary/BKLibrary-1-091020131601.sqlite 14:03:16 SHA256: dd8ecb922cd274b3afdd7976c4a796e3f788ebb89f7e04e3e397177431f9446a Modified: 2020-05-08 14:03:16 Accessed: 2020-06-27 16:19:40 Size: 114688 bytes

7 Name: BCPrivateDatabaseSecure.bcck Created: 2020-05-08 2 Path: Documents/BCCloudKit-iBooksSecure/BCPrivateDatabaseSecure.bcck 14:02:57 SHA256: 829e4aecc371d36e2c84bce6d462c5ce590ce2d75c64369b283350fff8a4f294 Modified: 2020-05-08 14:02:57 Accessed: 2020-06-27 16:19:40 Size: 547 bytes

7 Name: CRDTModelSync-ReadingHistoryModel Created: 2020-05-08 3 Path: Documents/BCCloudAsset-iBooks/CRDTModelSync-ReadingHistoryModel 14:03:04 SHA256: a337b131cde10eef0e9cce7ea7cd4b36d322cb55e2c1eccae3b9ec1b12c1301c Modified: 2020-05-08 14:03:04 Accessed: 2020-06-27 16:19:40 Size: 81920 bytes

7 Name: BCReadingStatisticsSync Created: 2020-05-08 4 Path: Documents/BCCloudAsset-iBooks/BCReadingStatisticsSync 14:03:04 SHA256: a2018ed37ac6bc243fa180a30cfa0d60a1a9f51cba37c0f46f45bdcdea3b5203 Modified: 2020-05-08 14:03:04 Accessed: 2020-06-27 16:19:40 Size: 86016 bytes

7 Name: BCCloudGlobalMetadata Created: 2020-05-08 5 Path: Documents/BCCloudAsset-iBooks/BCCloudGlobalMetadata 14:03:04 SHA256: 12d36a6f84674c3b7640b9def081f452bee6872b4c387e8b44c61615e008b61a Modified: 2020-05-08 14:03:04 Accessed: 2020-06-27 16:19:40 Size: 77824 bytes

7 Name: BCAssetData Created: 2020-05-08

iREPAIR - Backup Forensics Report (https://thelead82.com) - 23 of 75 I File Info Extra File Info D

6 Path: Documents/BCCloudAsset-iBooks/BCAssetData 14:03:04 SHA256: 9c55bae6cdebd879f62a3489a571f1a334e14e97283855b8688c2fd2f2d31fca Modified: 2020-05-08 14:03:04 Accessed: 2020-06-27 16:19:40 Size: 151552 bytes 7 Name: BKLibraryAssetStatusController Created: 2020-05-08 7 Path: Documents/BKLibraryAssetStatusController 14:02:55 SHA256: 5af8305fa02fbb4fb00b4ad3c1495c054f914d508086eea396abd24c9f2f3ee0 Modified: 2020-05-08 14:02:55 Accessed: 2020-06-27 16:19:40 Size: 464 bytes

7 Name: BDSICloudIdentityToken.plist Created: 2020-05-08 8 Path: Documents/BDSICloudIdentityToken.plist 14:02:55 SHA256: f539bee8d0863223ae7d69b93975c7a4d83db15ae4f8d53cc2ba94befb5f019c Modified: 2020-05-08 14:02:55 Accessed: 2020-06-27 16:19:40 Size: 286 bytes

7 Name: com.apple.stocks.widget.plist Created: 2020-04-19 9 Path: Library/Preferences/com.apple.stocks.widget.plist 20:46:16 SHA256: b9bafea20a8d0ec9aaa46e15bfd85c1387b54d91b79a8656755b0c3858cfd127 Modified: 2020-04-19 20:46:16 Accessed: 2020-06-27 16:19:40 Size: 19903 bytes

8 Name: com.apple.stocks.account.plist Created: 2020-04-17 0 Path: Library/Preferences/com.apple.stocks.account.plist 09:37:57 SHA256: 25f203e14da04b9bc8ac22028642bb08878d08cea308150fe46f78656d9fcf39 Modified: 2020-04-17 09:37:57 Accessed: 2020-06-27 16:19:40 Size: 61 bytes

8 Name: Cookies.binarycookies Created: 2020-04-19 1 Path: Library/Cookies/Cookies.binarycookies 20:46:09 SHA256: f5abfc76fbeb157d217e72fe02b3798086674b3cda1a85efc674f06d26615000 Modified: 2020-04-19 20:46:09 Accessed: 2020-06-27 16:19:40 Size: 287 bytes

8 Name: consumer_version Created: 2020-05-02 2 Path: consumer_version 09:05:05 SHA256: d67367e35f98863f9ff998d06a0214b625c8f290fcdb3c1d0654b11f2aab45a0 Modified: 2020-05-02 09:05:05 Accessed: 2020-06-27 16:19:40 Size: 7 bytes

8 Name: com.apple.ios.StoreKitUIService.plist Created: 2020-04-19 3 Path: Library/Preferences/com.apple.ios.StoreKitUIService.plist 18:47:33 SHA256: 40b0c7aed315a90e9fe3f8b2c63bfcf89605fd460d9974f92c5ea67963692416 Modified: 2020-04-19 18:47:33 Accessed: 2020-06-27 16:19:40 Size: 499 bytes

8 Name: dafsaData.bin Created: 2020-04-10 4 Path: Library/dafsaData.bin 17:33:19 SHA256: d51fc1fb5f034e0727828c336a65b6b40f496f812fbb4a5931fb80aed01e4a16 Modified: 2020-04-10 17:33:19 Accessed: 2020-04-10 17:33:20 Size: 49776 bytes

8 Name: com.apple.radios.plist Created: 2020-06-27 5 Path: SystemConfiguration/com.apple.radios.plist 16:19:13 SHA256: f31b346460846c41c0f258aa3333c94de670fee4b8cd0fafd88656bc6139fe55 Modified: 2020-06-27 16:19:13 Accessed: 2020-06-27 16:19:13 Size: 60 bytes

8 Name: com.apple.eapol.sim.generation.plist Created: 2020-04-29 6 Path: SystemConfiguration/com.apple.eapol.sim.generation.plist 12:38:36 SHA256: 38430d8e378745536c3b510321e1412ebff1b01e0eefc9363b6923a745f0552e Modified: 2020-04-29 12:38:36 Accessed: 2020-04-29 12:38:36 Size: 66 bytes

8 Name: com.apple.remoted.plist Created: 2020-04-01 7 Path: Library/Preferences/com.apple.remoted.plist 17:10:39 SHA256: 4ba06833eef83b3bc731aa3bc799a0aa11d626f1d433c457aaa562e3f91c62c1 Modified: 2020-04-01 17:10:39 Accessed: 2020-04-01 17:10:40 Size: 97 bytes

8 Name: com.apple.peakpowermanagerd.plist Created: 2020-07-13 8 Path: Library/Preferences/com.apple.peakpowermanagerd.plist 12:29:02 SHA256: 385fce8c60ebb1d12f791a347fa977bcaa9eae8e8ca0457fe57edc47002a06b8 Modified: 2020-07-13 12:29:02 Accessed: 2020-07-13 12:29:02

iREPAIR - Backup Forensics Report (https://thelead82.com) - 24 of 75 I File Info Extra File Info D

8 Name: com.apple.itunescloud.plist Created:Size: 86 bytes2020-04-17 9 Path: Library/Preferences/com.apple.itunescloud.plist 09:36:31 SHA256: df9b20008fd4805ea9e6a699334d2c5b8fcf656ce9e8c987c0a12dabe7b74d54 Modified: 2020-04-17 09:36:31 Accessed: 2020-04-17 09:36:31 Size: 139 bytes

9 Name: com.apple.atc.plist Created: 2020-04-17 0 Path: Library/Preferences/com.apple.atc.plist 09:36:29 SHA256: df3ee0e826bbb547b222b19e31ff0383ca535f7b7e7066e21a9cf4d80c8d18c4 Modified: 2020-04-17 09:36:29 Accessed: 2020-04-17 09:36:29 Size: 78 bytes

9 Name: com.apple.DumpPanic.plist Created: 2020-04-01 1 Path: Library/Preferences/com.apple.DumpPanic.plist 17:10:40 SHA256: 3fcb9a8398bac7fa10f01860d538708a427ad5cdd26f845fc13df9a04c9cba11 Modified: 2020-04-01 17:10:40 Accessed: 2020-04-01 17:10:40 Size: 67 bytes

9 Name: UserEventAgent.plist Created: 2020-05-22 2 Path: Library/Preferences/UserEventAgent.plist 17:11:20 SHA256: b051234d917abdbea287f4b583778d549baff2d9dc76559c0d46c8780e7581ea Modified: 2020-05-22 17:11:20 Accessed: 2020-05-22 17:11:20 Size: 889 bytes

9 Name: com.apple.Music.StoreFlowExtension.plist Created: 2020-04-19 3 Path: Library/Preferences/com.apple.Music.StoreFlowExtension.plist 18:34:08 SHA256: c94e7be3ab7783b811292e8e7cac5fa3278aae647e6923e467e7fb7d8e6bc5f7 Modified: 2020-04-19 18:34:08 Accessed: 2020-06-27 16:19:40 Size: 507 bytes

9 Name: com.apple.mobilenotes.SpotlightIndexExtension.plist Created: 2020-04-01 4 Path: Library/Preferences/com.apple.mobilenotes.SpotlightIndexExtension.plist 17:12:38 SHA256: 337732357e9cbdab95f26bad5a4f5fde2e636a6ffa0b6367db82dc8a545827cb Modified: 2020-04-01 17:12:38 Accessed: 2020-06-27 16:19:40 Size: 188 bytes

9 Name: PerSitePreferences.db Created: 2020-04-19 5 Path: Library/Safari/PerSitePreferences.db 18:35:06 SHA256: 5b730fc8be0201755271643863f0580c4418123ea4a8e8ef97346094fe2005b7 Modified: 2020-04-19 18:35:06 Accessed: 2020-06-27 16:19:40 Size: 24576 bytes

9 Name: AutoFillCorrections.db Created: 2020-04-19 6 Path: Library/Safari/AutoFillCorrections.db 18:41:49 SHA256: 14f2ffb8d08da06a8e06bf002aef305d7f5ad26c76afadce4c1a4f87a52d74de Modified: 2020-04-19 18:41:49 Accessed: 2020-06-27 16:19:40 Size: 4096 bytes

9 Name: IndexedDB.sqlite3 Created: 2020-05-08 7 Path: Library/WebKit/WebsiteData/IndexedDB/v1/https_www.reddit.com_0/C7725207948F261D3EA1F64229AB58E712C06B03238A5D7DE95E2D88A496597 14:38:54 3/IndexedDB.sqlite3 Modified: 2020-05-08 SHA256: 14f2ffb8d08da06a8e06bf002aef305d7f5ad26c76afadce4c1a4f87a52d74de 14:38:54 Accessed: 2020-06-27 16:19:40 Size: 4096 bytes

9 Name: IndexedDB.sqlite3 Created: 2020-05-08 8 Path: Library/WebKit/WebsiteData/IndexedDB/v1/https_edition.cnn.com_0/06B421670E25F748D903398A9241067358063840F669F4A136061BA70583FFD8/I 14:39:06 ndexedDB.sqlite3 Modified: 2020-05-08 SHA256: 14f2ffb8d08da06a8e06bf002aef305d7f5ad26c76afadce4c1a4f87a52d74de 14:39:06 Accessed: 2020-06-27 16:19:40 Size: 4096 bytes

9 Name: full_browsing_session_resourceLog.plist Created: 2020-05-08 9 Path: Library/WebKit/WebsiteData/ResourceLoadStatistics/full_browsing_session_resourceLog.plist 14:38:45 SHA256: 44b3a99af25b1aed5682cecd1b4f199f6c1d93f9c7f131275ab62276576ba9a1 Modified: 2020-05-08 14:38:45 Accessed: 2020-06-27 16:19:40 Size: 2928 bytes

1 Name: HSTS.plist Created: 2020-04-19 0 Path: Library/WebKit/WebsiteData/HSTS.plist 18:37:38 0 SHA256: db39e1769c58c01d7f2b211bed9f20fbbe0c1db1bf90e35490f981c10bfc7ea3 Modified: 2020-04-19 18:37:38 Accessed: 2020-06-27 16:19:40 Size: 351 bytes

1 Name: com.apple.imessage.bag.plist Created: 2020-05-08 0 Path: Library/Preferences/com.apple.imessage.bag.plist 14:39:40 1 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-05-08

iREPAIR - Backup Forensics Report (https://thelead82.com) - 25 of 75 I File Info Extra File Info D

14:39:40 Accessed: 2020-06-27 16:19:40 1 Name: com.apple.SafariViewService.plist Created:Size: 42 bytes2020-04-19 0 Path: Library/Preferences/com.apple.SafariViewService.plist 18:35:06 2 SHA256: ea1e6f2ed1788173fed9fc3644346b5a26e3e706bcea6f6dda52219781fbc197 Modified: 2020-04-19 18:35:06 Accessed: 2020-06-27 16:19:40 Size: 95 bytes

1 Name: Cookies.binarycookies Created: 2020-05-08 0 Path: Library/Cookies/Cookies.binarycookies 14:39:40 3 SHA256: 9b67c02e4c9719e0dd3bfecd91018d5fbeb33cd216912f0f31140fcdee206660 Modified: 2020-05-08 14:39:40 Accessed: 2020-06-27 16:19:40 Size: 8981 bytes

1 Name: com.apple.MobileBluetooth.ledevices.paired.db Created: 2020-04-01 0 Path: Library/Database/com.apple.MobileBluetooth.ledevices.paired.db 17:10:33 4 SHA256: e7eafb63de757f494750d94df7dfcfd56dc4783f985edf8cfaeb6d7d14e8b2fe Modified: 2020-04-01 17:10:33 Accessed: 2020-04-01 17:10:34 Size: 16384 bytes

1 Name: mobile_installation_helper.log.0 Created: 2020-04-01 0 Path: Library/Logs/mobile_installation_helper.log.0 17:10:37 5 SHA256: 5bd79a8fdaa1f851fbd47fe342fb920505c903045086cb6e903e87e52e1a79ab Modified: 2020-04-01 17:10:37 Accessed: 2020-04-01 17:10:37 Size: 252 bytes

1 Name: purchase_intents.sqlitedb Created: 2020-04-01 0 Path: Library/com.apple.itunesstored/purchase_intents.sqlitedb 17:12:27 6 SHA256: d437dc534003f028ced05645084842139b83acd7f387a060f35c2527f6e475d4 Modified: 2020-04-01 17:12:27 Accessed: 2020-04-01 17:12:27 Size: 16384 bytes

1 Name: itunesstored_private.sqlitedb Created: 2020-05-09 0 Path: Library/com.apple.itunesstored/itunesstored_private.sqlitedb 14:04:32 7 SHA256: 34e21d7e992a50dd2a06e8b4d40534179fab9462303e9462d928d6cb6285c60e Modified: 2020-05-09 14:04:32 Accessed: 2020-04-01 17:12:29 Size: 61440 bytes

1 Name: itunesstored2.sqlitedb Created: 2020-04-01 0 Path: Library/com.apple.itunesstored/itunesstored2.sqlitedb 17:12:26 8 SHA256: 7308e653406a56550f784e7af77a0f3f06516fcb21211df22241e9f7ed8e9ebe Modified: 2020-04-01 17:12:26 Accessed: 2020-04-01 17:12:26 Size: 65536 bytes

1 Name: voicemail.db Created: 2020-04-01 0 Path: Library/Voicemail/voicemail.db 17:10:45 9 SHA256: f6ccacac96925479d58f265d7887728b3bcb14757895545cd94670a3bba61070 Modified: 2020-04-01 17:10:45 Accessed: 2020-04-01 17:10:45 Size: 28672 bytes

1 Name: Categories.plist Created: 2020-05-09 1 Path: Library/UserNotifications/698FF267-FE38-40A6-B31F-3586371CAE2E/Categories.plist 17:43:44 0 SHA256: 4f6c0fea425693194a89123970a39661135c4625d8b854cbf96bcb9a2eedc72d Modified: 2020-05-09 17:43:44 Accessed: 2020-05-11 14:40:31 Size: 2390 bytes

1 Name: PushRegistration.plist Created: 2020-05-22 1 Path: Library/UserNotifications/E27593D2-04AB-4A99-9BDC-467356E2EDC9/PushRegistration.plist 17:50:16 1 SHA256: e0dbe7f93645f6ded9c9e3ba8b68cb9cd4a861e31dc752ae90082bbab52c3ae5 Modified: 2020-05-22 17:50:16 Accessed: 2020-06-27 16:21:00 Size: 456 bytes

1 Name: Categories.plist Created: 2020-05-09 1 Path: Library/UserNotifications/3F0A7E30-7783-482A-B9B5-DE226AD142D4/Categories.plist 10:08:28 2 SHA256: c7037bbef61f8dc70a4f91c42c2b6088ba174238bf0b87745a374977f1219bee Modified: 2020-05-09 10:08:28 Accessed: 2020-05-11 14:40:31 Size: 4721 bytes

1 Name: Categories.plist Created: 2020-05-11 1 Path: Library/UserNotifications/E2732A17-02FD-4172-951A-7E4A2EB07F91/Categories.plist 14:57:10 3 SHA256: 97c46ed90d989cf5b007ebfffda6eea84a7faf52fc9e99c48d821db994bf9de9 Modified: 2020-05-11 14:57:10 Accessed: 2020-06-27 16:21:00 Size: 1762 bytes

iREPAIR - Backup Forensics Report (https://thelead82.com) - 26 of 75 I File Info Extra File Info D

1 Name: Categories.plist Created: 2020-06-27 1 Path: Library/UserNotifications/2CF83409-4241-46C9-93B6-2C514CC971C7/Categories.plist 16:30:44 4 SHA256: 65fe547d7adc4aa7e97df83137c1bdfa48f3acf727dca3f92681467c73375fc3 Modified: 2020-06-27 16:30:44 Accessed: 2020-06-27 16:30:44 Size: 5685 bytes

1 Name: Topics.plist Created: 2020-04-19 1 Path: Library/UserNotifications/418BAB55-6853-42BF-9FE6-C0DB77E57CAC/Topics.plist 18:49:44 5 SHA256: 9f86f6fa3e94d13f43e4ee2620f2954c0164c1a8facfcb8746f4f7d921a51283 Modified: 2020-04-19 18:49:44 Accessed: 2020-05-05 11:38:26 Size: 631 bytes

1 Name: Categories.plist Created: 2020-04-01 1 Path: Library/UserNotifications/418BAB55-6853-42BF-9FE6-C0DB77E57CAC/Categories.plist 17:12:39 6 SHA256: 8feaea3156e49e48183e854505eb21d841fab59f65f9038747c0c50368353f3a Modified: 2020-04-01 17:12:39 Accessed: 2020-05-05 11:38:26 Size: 1745 bytes

1 Name: Categories.plist Created: 2020-05-09 1 Path: Library/UserNotifications/F8001D05-5D22-46E2-974D-45FA2EAF2CBF/Categories.plist 10:08:04 7 SHA256: 81a6cf27db4d497a56c9be36250d06a25b08f72ec110b07934a0a52ad0900e8c Modified: 2020-05-09 10:08:04 Accessed: 2020-05-11 14:40:31 Size: 25689 bytes

1 Name: Categories.plist Created: 2020-06-27 1 Path: Library/UserNotifications/4408CA44-8E98-4086-B591-F339CD0DA787/Categories.plist 16:33:57 8 SHA256: c7037bbef61f8dc70a4f91c42c2b6088ba174238bf0b87745a374977f1219bee Modified: 2020-06-27 16:33:57 Accessed: 2020-06-27 16:33:57 Size: 4721 bytes

1 Name: Categories.plist Created: 2020-05-06 1 Path: Library/UserNotifications/2DF92515-8BBE-4E8E-B34C-BCD25C09F2B0/Categories.plist 09:47:14 9 SHA256: 24a5445762081b8a3c8a1da1a5d1fbcde815fb08328b5ab0e7946f5b40d7e762 Modified: 2020-05-06 09:47:14 Accessed: 2020-05-06 10:47:51 Size: 13703 bytes

1 Name: Categories.plist Created: 2020-06-27 2 Path: Library/UserNotifications/8695E66E-90EA-47C2-B084-3340BA769404/Categories.plist 16:34:20 0 SHA256: 8080d42402e52ece727fc3458f64af8508bb30f5f9591cb5ff928995c95cc9d4 Modified: 2020-06-27 16:34:20 Accessed: 2020-06-27 16:34:20 Size: 1751 bytes

1 Name: Categories.plist Created: 2020-04-01 2 Path: Library/UserNotifications/7EF3BC1C-5AF8-42CB-97AF-84542A0C41B5/Categories.plist 17:12:39 1 SHA256: cc882d890139b18880fc727aced3f5ea2b3c5e90c34b335833848e90dd58a5b7 Modified: 2020-04-01 17:12:39 Accessed: 2020-05-05 11:38:26 Size: 1750 bytes

1 Name: Categories.plist Created: 2020-05-11 2 Path: Library/UserNotifications/566D8CED-ECDD-42DC-8230-F0C1FCE546D6/Categories.plist 14:57:12 2 SHA256: 81a6cf27db4d497a56c9be36250d06a25b08f72ec110b07934a0a52ad0900e8c Modified: 2020-05-11 14:57:12 Accessed: 2020-06-27 16:21:00 Size: 25689 bytes

1 Name: PushRegistration.plist Created: 2020-05-12 2 Path: Library/UserNotifications/B9883CC3-EE27-4705-842E-59810264FEB6/PushRegistration.plist 18:35:12 3 SHA256: bad36726b03c346e988c6b4b658627c76b8f5718b54fae2f94f57a74b86e7052 Modified: 2020-05-12 18:35:12 Accessed: 2020-06-27 16:21:00 Size: 456 bytes

1 Name: Categories.plist Created: 2020-05-12 2 Path: Library/UserNotifications/B9883CC3-EE27-4705-842E-59810264FEB6/Categories.plist 18:35:12 4 SHA256: 9d63ab0e69c2358de58cab700fad2ace99ebf38ff03df45b52d29670edcc4bc0 Modified: 2020-05-12 18:35:12 Accessed: 2020-06-27 16:21:00 Size: 22198 bytes

1 Name: PushRegistration.plist Created: 2020-05-08 2 Path: Library/UserNotifications/B0BF5D41-7EB6-4727-BB46-CE61227B92C9/PushRegistration.plist 14:33:26 5 SHA256: 725576ce901fd107d0e84f718c66083ab0f020ca2f15e849535153653ba0c3f1 Modified: 2020-05-08 14:33:26 Accessed: 2020-05-11 14:40:31 Size: 456 bytes

1 Name: Categories.plist Created: 2020-05-11 2 Path: Library/UserNotifications/C539661A-9F02-4152-8346-573DFE0A602F/Categories.plist 14:57:21 6 SHA256: 45541d169856a780e1a06793cd7c75bd54727b4a24862cb189ec11a148e4efdc Modified: 2020-05-11 14:57:21

iREPAIR - Backup Forensics Report (https://thelead82.com) - 27 of 75 I File Info Extra File Info D

Accessed: 2020-06-27 16:21:00 Size: 1753 bytes 1 Name: Categories.plist Created: 2020-06-27 2 Path: Library/UserNotifications/A8DBF39A-620F-49AA-AA57-C1A5AAFF15E4/Categories.plist 16:30:44 7 SHA256: a3c6400eef38645d2b654a16910a723c01e155e2762810939bd261f6a8e7cc6a Modified: 2020-06-27 16:30:44 Accessed: 2020-06-27 16:30:44 Size: 7592 bytes

1 Name: Categories.plist Created: 2020-06-27 2 Path: Library/UserNotifications/B821E792-9E1D-48BE-B333-BB476A84EEA4/Categories.plist 16:21:14 8 SHA256: 4f76fc55671e0bdb272cc4ee579803f1271cc34655b709b6673807ecaf587451 Modified: 2020-06-27 16:21:14 Accessed: 2020-06-27 16:21:14 Size: 5791 bytes

1 Name: Categories.plist Created: 2020-05-09 2 Path: Library/UserNotifications/A04F27FC-A285-491F-9E1F-149083399362/Categories.plist 14:04:26 9 SHA256: ee02477c761209de5ed490b0394d658d5e191a89e5069254914773951644bea3 Modified: 2020-05-09 14:04:26 Accessed: 2020-05-11 14:40:31 Size: 8452 bytes

1 Name: Topics.plist Created: 2020-05-11 3 Path: Library/UserNotifications/A9F0C1D3-E04C-4B80-8E22-00B3D59E4C5F/Topics.plist 17:55:52 0 SHA256: 9f86f6fa3e94d13f43e4ee2620f2954c0164c1a8facfcb8746f4f7d921a51283 Modified: 2020-05-11 17:55:52 Accessed: 2020-06-27 16:21:00 Size: 631 bytes

1 Name: Categories.plist Created: 2020-05-11 3 Path: Library/UserNotifications/A9F0C1D3-E04C-4B80-8E22-00B3D59E4C5F/Categories.plist 17:55:51 1 SHA256: 8feaea3156e49e48183e854505eb21d841fab59f65f9038747c0c50368353f3a Modified: 2020-05-11 17:55:51 Accessed: 2020-06-27 16:21:00 Size: 1745 bytes

1 Name: Categories.plist Created: 2020-06-27 3 Path: Library/UserNotifications/A876F66A-4F97-4263-882F-EBCE1C5C3238/Categories.plist 15:16:14 2 SHA256: 24a5445762081b8a3c8a1da1a5d1fbcde815fb08328b5ab0e7946f5b40d7e762 Modified: 2020-06-27 15:16:14 Accessed: 2020-06-27 16:21:00 Size: 13703 bytes

1 Name: Categories.plist Created: 2020-05-09 3 Path: Library/UserNotifications/71ABE76A-B1ED-4170-B549-FE2564D52182/Categories.plist 10:08:30 3 SHA256: df8976bfdbca8c00d26fedcbd65ae0d55c717d9ecec1c756e1dffad0ce968752 Modified: 2020-05-09 10:08:30 Accessed: 2020-05-11 14:40:31 Size: 7869 bytes

1 Name: Categories.plist Created: 2020-06-28 3 Path: Library/UserNotifications/B1F6C5C3-7AAF-469E-84ED-8E22020BCAF4/Categories.plist 07:45:17 4 SHA256: 4f6c0fea425693194a89123970a39661135c4625d8b854cbf96bcb9a2eedc72d Modified: 2020-06-28 07:45:17 Accessed: 2020-06-28 07:45:17 Size: 2390 bytes

1 Name: Categories.plist Created: 2020-05-11 3 Path: Library/UserNotifications/E9D4ECBF-56D3-4522-9765-5E93562C1800/Categories.plist 14:57:23 5 SHA256: 8080d42402e52ece727fc3458f64af8508bb30f5f9591cb5ff928995c95cc9d4 Modified: 2020-05-11 14:57:23 Accessed: 2020-06-27 16:21:00 Size: 1751 bytes

1 Name: Categories.plist Created: 2020-05-09 3 Path: Library/UserNotifications/333088F0-43E7-461B-9E83-C42F0943CFAD/Categories.plist 10:08:30 6 SHA256: 85979fd223ea708722764e6929f7d244e0a90cd1ebd19e0350a92057df989d57 Modified: 2020-05-09 10:08:30 Accessed: 2020-05-11 14:40:31 Size: 2662 bytes

1 Name: Categories.plist Created: 2020-05-09 3 Path: Library/UserNotifications/85060E20-A421-4FCC-9565-F6F0369B1DF7/Categories.plist 10:08:04 7 SHA256: 43e866814ad100965d32f4ab8c1ebf7d516102aa534d6199931e876f0c2580c3 Modified: 2020-05-09 10:08:04 Accessed: 2020-05-11 14:40:31 Size: 236 bytes

1 Name: Categories.plist Created: 2020-05-09 3 Path: Library/UserNotifications/4586A111-907E-4FC0-9B7A-5AA8C0B9B886/Categories.plist 10:08:27 8 SHA256: 80e2527ee1c3138284e3b93f4052f0214d04bf2ece5ed7cf9d057187dfd067ed Modified: 2020-05-09 10:08:27 Accessed: 2020-05-11 14:40:31 Size: 10749 bytes

1 Name: Categories.plist Created: 2020-05-09

iREPAIR - Backup Forensics Report (https://thelead82.com) - 28 of 75 I File Info Extra File Info D

3 Path: Library/UserNotifications/AF51C838-7476-4F6D-BD89-C4570882F09A/Categories.plist 10:08:28 9 SHA256: 45541d169856a780e1a06793cd7c75bd54727b4a24862cb189ec11a148e4efdc Modified: 2020-05-09 10:08:28 Accessed: 2020-05-11 14:40:31 Size: 1753 bytes 1 Name: Categories.plist Created: 2020-04-01 4 Path: Library/UserNotifications/DBAC61C0-6CF9-4023-A751-FA7371677B6E/Categories.plist 17:20:44 0 SHA256: 8080d42402e52ece727fc3458f64af8508bb30f5f9591cb5ff928995c95cc9d4 Modified: 2020-04-01 17:20:44 Accessed: 2020-05-05 11:38:26 Size: 1751 bytes

1 Name: Categories.plist Created: 2020-06-27 4 Path: Library/UserNotifications/AA2526B1-CB8B-4D2B-A8BA-FA509D7F33B8/Categories.plist 16:30:44 1 SHA256: 43e866814ad100965d32f4ab8c1ebf7d516102aa534d6199931e876f0c2580c3 Modified: 2020-06-27 16:30:44 Accessed: 2020-06-27 16:30:44 Size: 236 bytes

1 Name: Categories.plist Created: 2020-05-09 4 Path: Library/UserNotifications/1E3163C1-BAAB-4024-B8DD-6BFCCF277A2B/Categories.plist 10:08:07 2 SHA256: 65fe547d7adc4aa7e97df83137c1bdfa48f3acf727dca3f92681467c73375fc3 Modified: 2020-05-09 10:08:07 Accessed: 2020-05-11 14:40:31 Size: 5685 bytes

1 Name: Categories.plist Created: 2020-06-27 4 Path: Library/UserNotifications/7A453C54-FF0E-4A63-8F72-319F324CE670/Categories.plist 16:33:56 3 SHA256: 45541d169856a780e1a06793cd7c75bd54727b4a24862cb189ec11a148e4efdc Modified: 2020-06-27 16:33:56 Accessed: 2020-06-27 16:33:56 Size: 1753 bytes

1 Name: Categories.plist Created: 2020-04-03 4 Path: Library/UserNotifications/704B01C1-922C-4A15-8E97-7922C7C89C76/Categories.plist 13:28:32 4 SHA256: 80e2527ee1c3138284e3b93f4052f0214d04bf2ece5ed7cf9d057187dfd067ed Modified: 2020-04-03 13:28:32 Accessed: 2020-05-05 11:38:26 Size: 10749 bytes

1 Name: Categories.plist Created: 2020-06-27 4 Path: Library/UserNotifications/5FF0BEDB-378E-48EB-96EB-F50BC756FF35/Categories.plist 16:34:00 5 SHA256: 766808754a2d087b100f8d4173bd6a63b655bf1221cb16b1e4ae864f5f111d47 Modified: 2020-06-27 16:34:00 Accessed: 2020-06-27 16:34:00 Size: 2472 bytes

1 Name: Categories.plist Created: 2020-05-09 4 Path: Library/UserNotifications/DB1035A7-F74C-4B99-8423-CEDC406A9AF4/Categories.plist 10:08:30 6 SHA256: 8080d42402e52ece727fc3458f64af8508bb30f5f9591cb5ff928995c95cc9d4 Modified: 2020-05-09 10:08:30 Accessed: 2020-05-11 14:40:31 Size: 1751 bytes

1 Name: Categories.plist Created: 2020-05-11 4 Path: Library/UserNotifications/ACB421A2-352C-4B4F-89A9-604F35939836/Categories.plist 14:57:10 7 SHA256: 65fe547d7adc4aa7e97df83137c1bdfa48f3acf727dca3f92681467c73375fc3 Modified: 2020-05-11 14:57:10 Accessed: 2020-06-27 16:21:00 Size: 5685 bytes

1 Name: Categories.plist Created: 2020-05-11 4 Path: Library/UserNotifications/55469D90-6186-490B-849E-AFC8D6ADCB4F/Categories.plist 14:57:10 8 SHA256: 43e866814ad100965d32f4ab8c1ebf7d516102aa534d6199931e876f0c2580c3 Modified: 2020-05-11 14:57:10 Accessed: 2020-06-27 16:21:00 Size: 236 bytes

1 Name: Categories.plist Created: 2020-06-27 4 Path: Library/UserNotifications/2EC60046-3DC7-45A4-9AB9-1338674F1882/Categories.plist 16:33:57 9 SHA256: 80e2527ee1c3138284e3b93f4052f0214d04bf2ece5ed7cf9d057187dfd067ed Modified: 2020-06-27 16:33:57 Accessed: 2020-06-27 16:33:57 Size: 10749 bytes

1 Name: Categories.plist Created: 2020-05-11 5 Path: Library/UserNotifications/7F790D66-544E-41BA-B689-190EF6B952F8/Categories.plist 14:40:47 0 SHA256: b80bdbcc9a5a1e4117d95f328bf4dacd97d2433cd600f71cfd04ee286d43c60a Modified: 2020-05-11 14:40:47 Accessed: 2020-06-27 16:21:00 Size: 5791 bytes

1 Name: Categories.plist Created: 2020-05-09 5 Path: Library/UserNotifications/E5FD4136-A393-4255-92ED-7CF0914E5E6F/Categories.plist 10:08:05 1 SHA256: 97c46ed90d989cf5b007ebfffda6eea84a7faf52fc9e99c48d821db994bf9de9 Modified: 2020-05-09 10:08:05 Accessed: 2020-05-11 14:40:31

iREPAIR - Backup Forensics Report (https://thelead82.com) - 29 of 75 I File Info Extra File Info D

1 Name: Categories.plist Created:Size: 1762 2020-04-01 bytes 5 Path: Library/UserNotifications/27DDA237-C6BB-4BD1-8DA2-3942696BE65E/Categories.plist 17:12:39 2 SHA256: d57d09b10f5669cb9bea7bc1f8125f7cb89e562c5d2aec3adf9de0e385de4c7f Modified: 2020-04-01 17:12:39 Accessed: 2020-05-05 11:38:26 Size: 1746 bytes

1 Name: Categories.plist Created: 2020-06-27 5 Path: Library/UserNotifications/D1600195-BD4D-4E88-9D77-F08A4B52925A/Categories.plist 16:33:57 3 SHA256: 2fed2f613c52d0629bbcd2eb4fe4d150e170cac9fe1f2f48d1391ca6537bbc43 Modified: 2020-06-27 16:33:57 Accessed: 2020-06-27 16:33:57 Size: 9337 bytes

1 Name: Categories.plist Created: 2020-05-09 5 Path: Library/UserNotifications/AA158DE1-E632-4381-A59C-0ED509239CEB/Categories.plist 10:08:32 4 SHA256: 766808754a2d087b100f8d4173bd6a63b655bf1221cb16b1e4ae864f5f111d47 Modified: 2020-05-09 10:08:32 Accessed: 2020-05-11 14:40:31 Size: 2472 bytes

1 Name: Categories.plist Created: 2020-04-01 5 Path: Library/UserNotifications/D04DC7AC-DA15-4584-9FEB-2015999F3011/Categories.plist 17:12:38 5 SHA256: 97c46ed90d989cf5b007ebfffda6eea84a7faf52fc9e99c48d821db994bf9de9 Modified: 2020-04-01 17:12:38 Accessed: 2020-05-05 11:38:26 Size: 1762 bytes

1 Name: PushRegistration.plist Created: 2020-07-13 5 Path: Library/UserNotifications/D92B71DF-E626-470C-BFF1-60AD069CD706/PushRegistration.plist 15:38:52 6 SHA256: b52670c1ea25046357f0f5a5434213c3fd0875bb30e633f98a69b1133bebb979 Modified: 2020-07-13 15:38:52 Accessed: 2020-07-13 15:38:52 Size: 456 bytes

1 Name: Schedule.plist Created: 2020-05-02 5 Path: Library/UserNotifications/8741DCAA-5CFD-4B37-AE8D-0EB99BB574C1/Schedule.plist 09:05:45 7 SHA256: 71be22abc8e0993ec3b8d7368538e4ba19b1608b32c10b62531805c71a4c4392 Modified: 2020-05-02 09:05:45 Accessed: 2020-05-05 11:38:26 Size: 377 bytes

1 Name: PushRegistration.plist Created: 2020-05-02 5 Path: Library/UserNotifications/8741DCAA-5CFD-4B37-AE8D-0EB99BB574C1/PushRegistration.plist 09:52:14 8 SHA256: 8560ac541c74a3b36e0dd4853fcdc17e5851cb2f470718e104f253be1ea1578b Modified: 2020-05-02 09:52:14 Accessed: 2020-05-05 11:38:26 Size: 456 bytes

1 Name: PendingNotifications.plist Created: 2020-05-02 5 Path: Library/UserNotifications/8741DCAA-5CFD-4B37-AE8D-0EB99BB574C1/PendingNotifications.plist 09:05:59 9 SHA256: 43e866814ad100965d32f4ab8c1ebf7d516102aa534d6199931e876f0c2580c3 Modified: 2020-05-02 09:05:59 Accessed: 2020-05-05 11:38:26 Size: 236 bytes

1 Name: Categories.plist Created: 2020-05-02 6 Path: Library/UserNotifications/8741DCAA-5CFD-4B37-AE8D-0EB99BB574C1/Categories.plist 09:05:12 0 SHA256: 9d63ab0e69c2358de58cab700fad2ace99ebf38ff03df45b52d29670edcc4bc0 Modified: 2020-05-02 09:05:12 Accessed: 2020-05-05 11:38:26 Size: 22198 bytes

1 Name: Categories.plist Created: 2020-06-27 6 Path: Library/UserNotifications/B0E25F55-4328-4A11-97DC-613FEE9BB0DE/Categories.plist 16:34:00 1 SHA256: 85979fd223ea708722764e6929f7d244e0a90cd1ebd19e0350a92057df989d57 Modified: 2020-06-27 16:34:00 Accessed: 2020-06-27 16:34:00 Size: 2662 bytes

1 Name: Categories.plist Created: 2020-04-03 6 Path: Library/UserNotifications/32AA451A-1EE5-4686-B4D3-5911B8631EEF/Categories.plist 13:28:33 2 SHA256: 766808754a2d087b100f8d4173bd6a63b655bf1221cb16b1e4ae864f5f111d47 Modified: 2020-04-03 13:28:33 Accessed: 2020-05-05 11:38:26 Size: 2472 bytes

1 Name: Categories.plist Created: 2020-04-17 6 Path: Library/UserNotifications/3E674AF2-F1FA-4B17-81F7-E0779F416425/Categories.plist 09:38:32 3 SHA256: 56b7d8b8e50825939699b81c22e4453ae603ef19aa0c48bb74ae312d27ce47bf Modified: 2020-04-17 09:38:32 Accessed: 2020-05-05 11:38:26 Size: 9070 bytes

1 Name: Categories.plist Created: 2020-05-11 6 Path: Library/UserNotifications/128BCFAD-A361-4227-9501-4401411A3F8E/Categories.plist 14:57:10 4 SHA256: a3c6400eef38645d2b654a16910a723c01e155e2762810939bd261f6a8e7cc6a Modified: 2020-05-11

iREPAIR - Backup Forensics Report (https://thelead82.com) - 30 of 75 I File Info Extra File Info D

14:57:10 Accessed: 2020-06-27 16:21:00 1 Name: Categories.plist Created:Size: 7592 2020-04-19 bytes 6 Path: Library/UserNotifications/1FAFB523-7CFE-4E8D-80F9-9BC1D70C19C8/Categories.plist 18:45:59 5 SHA256: ee02477c761209de5ed490b0394d658d5e191a89e5069254914773951644bea3 Modified: 2020-04-19 18:45:59 Accessed: 2020-05-05 11:38:26 Size: 8452 bytes

1 Name: Categories.plist Created: 2020-05-07 6 Path: Library/UserNotifications/2CC1B76F-194E-4AAE-A1D4-1BAA927303F8/Categories.plist 12:51:05 6 SHA256: 4624b017797852f339ddb4499b102c1125970ed11992dde2949d23245bbae45d Modified: 2020-05-07 12:51:05 Accessed: 2020-05-11 14:40:31 Size: 5791 bytes

1 Name: Categories.plist Created: 2020-05-11 6 Path: Library/UserNotifications/947D5CA2-5447-4CF7-B81D-7967B75F625F/Categories.plist 14:57:21 7 SHA256: 80e2527ee1c3138284e3b93f4052f0214d04bf2ece5ed7cf9d057187dfd067ed Modified: 2020-05-11 14:57:21 Accessed: 2020-06-27 16:21:00 Size: 10749 bytes

1 Name: Categories.plist Created: 2020-04-01 6 Path: Library/UserNotifications/A29CB02F-6E19-4383-A029-F2299A6EBE74/Categories.plist 17:14:19 8 SHA256: c7037bbef61f8dc70a4f91c42c2b6088ba174238bf0b87745a374977f1219bee Modified: 2020-04-01 17:14:19 Accessed: 2020-05-05 11:38:26 Size: 4721 bytes

1 Name: Schedule.plist Created: 2020-05-11 6 Path: Library/UserNotifications/727785D7-D986-4612-9375-57D0F4FB42B5/Schedule.plist 09:12:42 9 SHA256: 486bbbb5ed02f2c7903d5687ffb27e27a5ac88a2081575a0de15fb07da7d9de9 Modified: 2020-05-11 09:12:42 Accessed: 2020-05-11 14:40:31 Size: 377 bytes

1 Name: PendingNotifications.plist Created: 2020-05-11 7 Path: Library/UserNotifications/727785D7-D986-4612-9375-57D0F4FB42B5/PendingNotifications.plist 09:12:42 0 SHA256: 43e866814ad100965d32f4ab8c1ebf7d516102aa534d6199931e876f0c2580c3 Modified: 2020-05-11 09:12:42 Accessed: 2020-05-11 14:40:31 Size: 236 bytes

1 Name: Categories.plist Created: 2020-05-11 7 Path: Library/UserNotifications/A0AB680F-CEB5-4CD7-A20B-0816185AA269/Categories.plist 14:57:10 1 SHA256: d57d09b10f5669cb9bea7bc1f8125f7cb89e562c5d2aec3adf9de0e385de4c7f Modified: 2020-05-11 14:57:10 Accessed: 2020-06-27 16:21:00 Size: 1746 bytes

1 Name: Categories.plist Created: 2020-05-11 7 Path: Library/UserNotifications/D43D1C50-C144-47D5-A68B-DD545EBAB0F4/Categories.plist 17:55:52 2 SHA256: 85979fd223ea708722764e6929f7d244e0a90cd1ebd19e0350a92057df989d57 Modified: 2020-05-11 17:55:52 Accessed: 2020-06-27 16:21:00 Size: 2662 bytes

1 Name: Categories.plist Created: 2020-04-01 7 Path: Library/UserNotifications/D2578A20-DF09-4916-ACF3-68A0A850F2F9/Categories.plist 17:12:39 3 SHA256: d2d87f8a030927f200bd40a0240e816e13b5ffdb290d3a99a7b1503b0b504a58 Modified: 2020-04-01 17:12:39 Accessed: 2020-05-05 11:38:26 Size: 1749 bytes

1 Name: Categories.plist Created: 2020-04-01 7 Path: Library/UserNotifications/422F8ED0-5B38-4FA8-A84F-ACAB24738EDE/Categories.plist 17:12:39 4 SHA256: 0e209059faecb895f9b969e777c7b55548ea11cf0d23fdd59ccf3bcb18e22a9d Modified: 2020-04-01 17:12:39 Accessed: 2020-05-05 11:38:26 Size: 7741 bytes

1 Name: Categories.plist Created: 2020-05-09 7 Path: Library/UserNotifications/25536FEB-25E3-4EC4-9201-349EF31C99AE/Categories.plist 10:08:07 5 SHA256: d2d87f8a030927f200bd40a0240e816e13b5ffdb290d3a99a7b1503b0b504a58 Modified: 2020-05-09 10:08:07 Accessed: 2020-05-11 14:40:31 Size: 1749 bytes

1 Name: Categories.plist Created: 2020-04-01 7 Path: Library/UserNotifications/6C494F2D-1EF2-4515-82A1-4A65DEA9D708/Categories.plist 17:14:12 6 SHA256: a3c6400eef38645d2b654a16910a723c01e155e2762810939bd261f6a8e7cc6a Modified: 2020-04-01 17:14:12 Accessed: 2020-05-05 11:38:26 Size: 7592 bytes

1 Name: Categories.plist Created: 2020-05-09

iREPAIR - Backup Forensics Report (https://thelead82.com) - 31 of 75 I File Info Extra File Info D

7 Path: Library/UserNotifications/90BF003A-B5F2-4572-8E8D-FC78A3556357/Categories.plist 14:09:17 7 SHA256: 56b7d8b8e50825939699b81c22e4453ae603ef19aa0c48bb74ae312d27ce47bf Modified: 2020-05-09 14:09:17 Accessed: 2020-05-11 14:40:31 Size: 9070 bytes 1 Name: Topics.plist Created: 2020-05-09 7 Path: Library/UserNotifications/05DA0016-05F6-4FFB-942D-1FDB722AF641/Topics.plist 10:08:08 8 SHA256: 9f86f6fa3e94d13f43e4ee2620f2954c0164c1a8facfcb8746f4f7d921a51283 Modified: 2020-05-09 10:08:08 Accessed: 2020-05-11 14:40:31 Size: 631 bytes

1 Name: Categories.plist Created: 2020-05-09 7 Path: Library/UserNotifications/05DA0016-05F6-4FFB-942D-1FDB722AF641/Categories.plist 10:08:07 9 SHA256: 8feaea3156e49e48183e854505eb21d841fab59f65f9038747c0c50368353f3a Modified: 2020-05-09 10:08:07 Accessed: 2020-05-11 14:40:31 Size: 1745 bytes

1 Name: Categories.plist Created: 2020-05-12 8 Path: Library/UserNotifications/69BCD6C5-1764-41D0-978F-8A8E15C6383B/Categories.plist 18:48:15 0 SHA256: 4f6c0fea425693194a89123970a39661135c4625d8b854cbf96bcb9a2eedc72d Modified: 2020-05-12 18:48:15 Accessed: 2020-06-27 16:21:00 Size: 2390 bytes

1 Name: Categories.plist Created: 2020-05-09 8 Path: Library/UserNotifications/FF072BBD-8F09-4A7F-8F12-27156DF6A2EF/Categories.plist 10:08:08 1 SHA256: cc882d890139b18880fc727aced3f5ea2b3c5e90c34b335833848e90dd58a5b7 Modified: 2020-05-09 10:08:08 Accessed: 2020-05-11 14:40:31 Size: 1750 bytes

1 Name: Categories.plist Created: 2020-06-09 8 Path: Library/UserNotifications/5FE34ED9-3F78-4963-BCDE-C7F4F8A709D0/Categories.plist 11:10:59 2 SHA256: 2fed2f613c52d0629bbcd2eb4fe4d150e170cac9fe1f2f48d1391ca6537bbc43 Modified: 2020-06-09 11:10:59 Accessed: 2020-06-27 16:21:00 Size: 9337 bytes

1 Name: Categories.plist Created: 2020-05-11 8 Path: Library/UserNotifications/8851CB24-7E3C-43C9-9A49-FD5B54D2104F/Categories.plist 14:57:22 3 SHA256: d2d87f8a030927f200bd40a0240e816e13b5ffdb290d3a99a7b1503b0b504a58 Modified: 2020-05-11 14:57:22 Accessed: 2020-06-27 16:21:00 Size: 1749 bytes

1 Name: Categories.plist Created: 2020-05-09 8 Path: Library/UserNotifications/B6B38ECB-6331-474A-8862-3CA853592EAD/Categories.plist 10:08:04 4 SHA256: a3c6400eef38645d2b654a16910a723c01e155e2762810939bd261f6a8e7cc6a Modified: 2020-05-09 10:08:04 Accessed: 2020-05-11 14:40:31 Size: 7592 bytes

1 Name: Categories.plist Created: 2020-06-27 8 Path: Library/UserNotifications/BAEC9EC8-BC7A-4E3D-BB38-EFAB475772D4/Categories.plist 16:30:44 5 SHA256: 97c46ed90d989cf5b007ebfffda6eea84a7faf52fc9e99c48d821db994bf9de9 Modified: 2020-06-27 16:30:44 Accessed: 2020-06-27 16:30:44 Size: 1762 bytes

1 Name: Categories.plist Created: 2020-06-27 8 Path: Library/UserNotifications/D3FCA3DF-008D-4CA5-BE7A-F9F1C382E058/Categories.plist 16:30:44 6 SHA256: d57d09b10f5669cb9bea7bc1f8125f7cb89e562c5d2aec3adf9de0e385de4c7f Modified: 2020-06-27 16:30:44 Accessed: 2020-06-27 16:30:44 Size: 1746 bytes

1 Name: Categories.plist Created: 2020-04-07 8 Path: Library/UserNotifications/612D55C2-46F9-406E-A316-A0238496BBA8/Categories.plist 13:08:59 7 SHA256: 4f6c0fea425693194a89123970a39661135c4625d8b854cbf96bcb9a2eedc72d Modified: 2020-04-07 13:08:59 Accessed: 2020-05-05 11:38:26 Size: 2390 bytes

1 Name: Categories.plist Created: 2020-04-02 8 Path: Library/UserNotifications/3A2A646B-6EC4-4919-B16F-48464FB668BD/Categories.plist 09:13:53 8 SHA256: 85979fd223ea708722764e6929f7d244e0a90cd1ebd19e0350a92057df989d57 Modified: 2020-04-02 09:13:53 Accessed: 2020-05-05 11:38:26 Size: 2662 bytes

1 Name: Categories.plist Created: 2020-06-27 8 Path: Library/UserNotifications/53D90827-D480-402D-A1C6-4D6B81263C80/Categories.plist 16:30:45 9 SHA256: 81a6cf27db4d497a56c9be36250d06a25b08f72ec110b07934a0a52ad0900e8c Modified: 2020-06-27 16:30:45 Accessed: 2020-06-27 16:30:45

iREPAIR - Backup Forensics Report (https://thelead82.com) - 32 of 75 I File Info Extra File Info D

1 Name: Schedule.plist Created:Size: 25689 2020-06-15 bytes 9 Path: Library/UserNotifications/E96D1488-2249-49C6-94B6-189EEA078B2F/Schedule.plist 09:12:42 0 SHA256: 3ddb53d4b22bbb64854974041052b24c7a10f4d8189f27c9ee94f5c0fb3d1436 Modified: 2020-06-15 09:12:42 Accessed: 2020-06-27 16:21:00 Size: 377 bytes

1 Name: PendingNotifications.plist Created: 2020-06-15 9 Path: Library/UserNotifications/E96D1488-2249-49C6-94B6-189EEA078B2F/PendingNotifications.plist 09:12:42 1 SHA256: 43e866814ad100965d32f4ab8c1ebf7d516102aa534d6199931e876f0c2580c3 Modified: 2020-06-15 09:12:42 Accessed: 2020-06-27 16:21:00 Size: 236 bytes

1 Name: PushRegistration.plist Created: 2020-05-10 9 Path: Library/UserNotifications/DE028209-52FB-4F53-A40F-7AEAB8D95993/PushRegistration.plist 08:56:27 2 SHA256: 4b2ec041689fbd22d97d2880258a296f5680c20204c9011bd183963d4417cd2e Modified: 2020-05-10 08:56:27 Accessed: 2020-05-11 14:40:31 Size: 456 bytes

1 Name: Categories.plist Created: 2020-04-01 9 Path: Library/UserNotifications/AE451699-26B8-43E1-A472-C396F275E9CF/Categories.plist 17:14:12 3 SHA256: 65fe547d7adc4aa7e97df83137c1bdfa48f3acf727dca3f92681467c73375fc3 Modified: 2020-04-01 17:14:12 Accessed: 2020-05-05 11:38:26 Size: 5685 bytes

1 Name: PushRegistration.plist Created: 2020-05-08 9 Path: Library/UserNotifications/CBEEE402-97DD-4D0D-992F-9236859266C9/PushRegistration.plist 14:02:55 4 SHA256: 1fbda37389fde57d59bb33f111b6cf7d0a7e3610c131b63d4176d9c65a17a167 Modified: 2020-05-08 14:02:55 Accessed: 2020-05-11 14:40:31 Size: 456 bytes

1 Name: Categories.plist Created: 2020-05-08 9 Path: Library/UserNotifications/CBEEE402-97DD-4D0D-992F-9236859266C9/Categories.plist 14:02:55 5 SHA256: 7966170c1332b788dc373129da3a2eb1d0cdc84df9c7889d22fe323f3c6fe95f Modified: 2020-05-08 14:02:55 Accessed: 2020-05-11 14:40:31 Size: 2417 bytes

1 Name: Categories.plist Created: 2020-05-09 9 Path: Library/UserNotifications/2F1A0493-124E-4E7E-8343-7DC9340EC089/Categories.plist 10:08:04 6 SHA256: d57d09b10f5669cb9bea7bc1f8125f7cb89e562c5d2aec3adf9de0e385de4c7f Modified: 2020-05-09 10:08:04 Accessed: 2020-05-11 14:40:31 Size: 1746 bytes

1 Name: Categories.plist Created: 2020-05-10 9 Path: Library/UserNotifications/CC0246EF-BE24-4C9A-9D65-FED0CB336318/Categories.plist 08:56:23 7 SHA256: 24a5445762081b8a3c8a1da1a5d1fbcde815fb08328b5ab0e7946f5b40d7e762 Modified: 2020-05-10 08:56:23 Accessed: 2020-05-11 14:40:31 Size: 13703 bytes

1 Name: Categories.plist Created: 2020-05-11 9 Path: Library/UserNotifications/BE656A26-C559-4713-A05A-07DA6B84BAE5/Categories.plist 14:57:21 8 SHA256: cc882d890139b18880fc727aced3f5ea2b3c5e90c34b335833848e90dd58a5b7 Modified: 2020-05-11 14:57:21 Accessed: 2020-06-27 16:21:00 Size: 1750 bytes

1 Name: Categories.plist Created: 2020-05-11 9 Path: Library/UserNotifications/327EFDCC-A3CD-4865-8126-7A624F691850/Categories.plist 14:57:21 9 SHA256: c7037bbef61f8dc70a4f91c42c2b6088ba174238bf0b87745a374977f1219bee Modified: 2020-05-11 14:57:21 Accessed: 2020-06-27 16:21:00 Size: 4721 bytes

2 Name: Categories.plist Created: 2020-06-27 0 Path: Library/UserNotifications/6E5C815C-A7E2-4D63-8B90-806D13CA0DE5/Categories.plist 16:33:57 0 SHA256: d2d87f8a030927f200bd40a0240e816e13b5ffdb290d3a99a7b1503b0b504a58 Modified: 2020-06-27 16:33:57 Accessed: 2020-06-27 16:33:57 Size: 1749 bytes

2 Name: Topics.plist Created: 2020-06-27 0 Path: Library/UserNotifications/19D3FC48-5122-4FC9-B6CF-16980F784C55/Topics.plist 16:34:22 1 SHA256: 9f86f6fa3e94d13f43e4ee2620f2954c0164c1a8facfcb8746f4f7d921a51283 Modified: 2020-06-27 16:34:22 Accessed: 2020-06-27 16:34:22 Size: 631 bytes

2 Name: Categories.plist Created: 2020-06-27 0 Path: Library/UserNotifications/19D3FC48-5122-4FC9-B6CF-16980F784C55/Categories.plist 16:34:22 2 SHA256: 8feaea3156e49e48183e854505eb21d841fab59f65f9038747c0c50368353f3a Modified: 2020-06-27

iREPAIR - Backup Forensics Report (https://thelead82.com) - 33 of 75 I File Info Extra File Info D

16:34:22 Accessed: 2020-06-27 16:34:22 2 Name: Categories.plist Created:Size: 1745 2020-06-27 bytes 0 Path: Library/UserNotifications/50EE97B6-5130-4D1C-9338-1968B0CE58FA/Categories.plist 16:33:56 3 SHA256: cc882d890139b18880fc727aced3f5ea2b3c5e90c34b335833848e90dd58a5b7 Modified: 2020-06-27 16:33:56 Accessed: 2020-06-27 16:33:56 Size: 1750 bytes

2 Name: Categories.plist Created: 2020-04-01 0 Path: Library/UserNotifications/1ADD170A-27D0-47D2-ACD8-3F03CE2D84D2/Categories.plist 17:14:12 4 SHA256: 81a6cf27db4d497a56c9be36250d06a25b08f72ec110b07934a0a52ad0900e8c Modified: 2020-04-01 17:14:12 Accessed: 2020-05-05 11:38:26 Size: 25689 bytes

2 Name: Categories.plist Created: 2020-05-11 0 Path: Library/UserNotifications/6A54836F-D64B-47E8-9FF4-3FA28E68FFF9/Categories.plist 17:56:08 5 SHA256: 766808754a2d087b100f8d4173bd6a63b655bf1221cb16b1e4ae864f5f111d47 Modified: 2020-05-11 17:56:08 Accessed: 2020-06-27 16:21:00 Size: 2472 bytes

2 Name: Categories.plist Created: 2020-04-01 0 Path: Library/UserNotifications/25294C7F-A6B9-45A3-AFBF-DF0290621FE5/Categories.plist 17:12:39 6 SHA256: 43e866814ad100965d32f4ab8c1ebf7d516102aa534d6199931e876f0c2580c3 Modified: 2020-04-01 17:12:39 Accessed: 2020-05-05 11:38:26 Size: 236 bytes

2 Name: PayloadDependency.plist Created: 2020-05-02 0 Path: Library/UserConfigurationProfiles/PayloadDependency.plist 08:40:28 7 SHA256: 97704a8960b4facceef54397a08fb5d0a456247c3627359215aa2a27df22656c Modified: 2020-05-02 08:40:28 Accessed: 2020-05-02 08:40:28 Size: 181 bytes

2 Name: TodayViewArchive.plist Created: 2020-04-01 0 Path: Library/SpringBoard/TodayViewArchive.plist 17:12:36 8 SHA256: 79ae4f846d75a4330a990ff7551d6690c4bf1e5f56c1eaf31f1a502e2aa7d3ba Modified: 2020-04-01 17:12:36 Accessed: 2020-04-01 17:12:36 Size: 1480 bytes

2 Name: OriginalLockBackgrounddark.cpbitmap Created: 2020-04-01 0 Path: Library/SpringBoard/OriginalLockBackgrounddark.cpbitmap 17:12:35 9 SHA256: bd61a840433aaf6e53c34bc94a0ff0ad08af5802d0a83144bf37947ff70fa7f9 Modified: 2020-04-01 17:12:35 Accessed: 2020-04-01 17:12:35 Size: 10771472 bytes

2 Name: OriginalLockBackground.cpbitmap Created: 2020-04-01 1 Path: Library/SpringBoard/OriginalLockBackground.cpbitmap 17:12:34 0 SHA256: b31b8fddf125059921bab8e00f978fe5638ddc14c28f95d72a128d488d66ea09 Modified: 2020-04-01 17:12:34 Accessed: 2020-04-01 17:12:34 Size: 10771472 bytes

2 Name: LockBackgrounddark.cpbitmap Created: 2020-04-01 1 Path: Library/SpringBoard/LockBackgrounddark.cpbitmap 17:12:34 1 SHA256: 06dc89ba5d7f592508284a8012b39cc4e90804f21dd48511b6459dc0efe266c2 Modified: 2020-04-01 17:12:34 Accessed: 2020-04-01 17:12:34 Size: 10176144 bytes

2 Name: LockBackgroundThumbnaildark.jpg Created: 2020-04-01 1 Path: Library/SpringBoard/LockBackgroundThumbnaildark.jpg 17:12:35 2 SHA256: 3307786b35b146ea282c406837e6a9d970af00039431e394e50e7a66f597c16d Modified: 2020-04-01 17:12:35 Accessed: 2020-04-01 17:12:35 Size: 10890 bytes

2 Name: LockBackgroundThumbnail.jpg Created: 2020-04-01 1 Path: Library/SpringBoard/LockBackgroundThumbnail.jpg 17:12:34 3 SHA256: e704be8f0d1ef6178f8767911d881f157694f74e5388c2aeaf1936ace251ea18 Modified: 2020-04-01 17:12:34 Accessed: 2020-04-01 17:12:34 Size: 9945 bytes

2 Name: LockBackground.cpbitmap Created: 2020-04-01 1 Path: Library/SpringBoard/LockBackground.cpbitmap 17:12:34 4 SHA256: a49c1151ba67d11df0cbd7c05c02d05cc97b8408795dc12aaa7d0a48588140e8 Modified: 2020-04-01 17:12:34 Accessed: 2020-04-01 17:12:34 Size: 10176144 bytes

iREPAIR - Backup Forensics Report (https://thelead82.com) - 34 of 75 I File Info Extra File Info D

2 Name: IconState.plist Created: 2020-05-02 1 Path: Library/SpringBoard/IconState.plist 09:04:53 5 SHA256: 435d3e8519f20406466dfd23b3e78dc9aa577b3fff7c07a1222538378501ad17 Modified: 2020-05-02 09:04:53 Accessed: 2020-05-02 09:04:53 Size: 1335 bytes

2 Name: Shortcuts.sqlite Created: 2020-04-01 1 Path: Library/Shortcuts/Shortcuts.sqlite 17:12:28 6 SHA256: 9092c9d05bb1aac4dfb3aa02632b5cef990ac695327929da61232b7de5ad8141 Modified: 2020-04-01 17:12:28 Accessed: 2020-04-01 17:12:28 Size: 65536 bytes

2 Name: Data-local.sqlite Created: 2020-04-01 1 Path: Library/Reminders/Container_v1/Stores/Data-local.sqlite 17:12:34 7 SHA256: c4293629eef69550d9d9af58e33975ecb1e53a9ffe32d479722d90af43896c3c Modified: 2020-04-01 17:12:34 Accessed: 2020-04-01 17:10:43 Size: 253952 bytes

2 Name: Data-8989D230-5D20-499A-8321-98B63ABF8E79.sqlite Created: 2020-04-10 1 Path: Library/Reminders/Container_v1/Stores/Data-8989D230-5D20-499A-8321-98B63ABF8E79.sqlite 17:57:57 8 SHA256: 73a4aedaca98d00ae7aa453f26311c158a12fa92d3c7753747d25ad1b435fd03 Modified: 2020-04-10 17:57:57 Accessed: 2020-04-01 17:10:44 Size: 253952 bytes

2 Name: Data-5B5888C7-CBAE-4B31-9C69-1F79ACD69CD4.sqlite Created: 2020-05-09 1 Path: Library/Reminders/Container_v1/Stores/Data-5B5888C7-CBAE-4B31-9C69-1F79ACD69CD4.sqlite 16:10:38 9 SHA256: 1b29e8bca5cbf0eac074fa0ea755bfa270b685feeae05b93acd04b7a476724bd Modified: 2020-05-09 16:10:38 Accessed: 2020-04-01 17:10:44 Size: 253952 bytes

2 Name: Data-10ADB379-313C-405D-907F-2FB0C758F2F5.sqlite Created: 2020-05-09 2 Path: Library/Reminders/Container_v1/Stores/Data-10ADB379-313C-405D-907F-2FB0C758F2F5.sqlite 16:24:20 0 SHA256: fc1a808ac3f5a89ff32e78a814b2f3a5bc7e2ee3ac1037debfd3715fda40abbc Modified: 2020-05-09 16:24:20 Accessed: 2020-05-09 16:10:38 Size: 253952 bytes

2 Name: AccountInformation.plist Created: 2020-05-09 2 Path: Library/Reminders/DataAccess/AccountInformation.plist 16:11:43 1 SHA256: a10310ff9de4a909ffa4b1b8086d0bd1be4dd20103dddd6965d3a5afe6ff8052 Modified: 2020-05-09 16:11:43 Accessed: 2020-05-11 14:40:31 Size: 437 bytes

2 Name: group.com.apple.notes.plist Created: 2020-06-29 2 Path: Library/Preferences/group.com.apple.notes.plist 13:11:11 2 SHA256: b42fbebffcd9ce2aa9d089a68ba665d5de1fc716ad039f87026ee97a376408eb Modified: 2020-06-29 13:11:11 Accessed: 2020-06-29 13:11:11 Size: 197 bytes

2 Name: com.apple.wcd.plist Created: 2020-04-01 2 Path: Library/Preferences/com.apple.wcd.plist 17:11:04 3 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-04-01 17:11:04 Accessed: 2020-04-01 17:11:04 Size: 42 bytes

2 Name: com.apple.voiceservices.plist Created: 2020-04-02 2 Path: Library/Preferences/com.apple.voiceservices.plist 00:00:55 4 SHA256: 56357708357f943e95dec77eb3cea0866012d498a7acc3317962856e9545798c Modified: 2020-04-02 00:00:55 Accessed: 2020-04-02 00:00:55 Size: 10225 bytes

2 Name: com.apple.suggestions.plist Created: 2020-05-09 2 Path: Library/Preferences/com.apple.suggestions.plist 16:12:40 5 SHA256: d700075de98ead764b76b81ecf183db3c87b2522516469b8f7029ea94becc314 Modified: 2020-05-09 16:12:40 Accessed: 2020-05-09 16:12:40 Size: 1063 bytes

2 Name: com.apple.storebookkeeperd.plist Created: 2020-04-19 2 Path: Library/Preferences/com.apple.storebookkeeperd.plist 18:34:10 6 SHA256: 75ae80b079ac01a31ae27cb09ab62f7b8ad37ef7b8b06556a01c9efb905c7ef3 Modified: 2020-04-19 18:34:10 Accessed: 2020-04-19 18:34:10 Size: 128 bytes

2 Name: com.apple.storebookkeeper.plist Created: 2020-05-09 2 Path: Library/Preferences/com.apple.storebookkeeper.plist 14:04:41 7 SHA256: 6382b8dda40637f5b1a7f5174625b7e7c395c2012e5130d28a5bc9fa60431b0a Modified: 2020-05-09 14:04:41

iREPAIR - Backup Forensics Report (https://thelead82.com) - 35 of 75 I File Info Extra File Info D

Accessed: 2020-05-09 14:04:41 Size: 837 bytes 2 Name: com.apple.stocks.account.plist Created: 2020-05-09 2 Path: Library/Preferences/com.apple.stocks.account.plist 14:04:24 8 SHA256: 56ec28502bf816b907acf148ab763ce5d0ad7d3c0669f7a8de1fffa1da92e8a0 Modified: 2020-05-09 14:04:24 Accessed: 2020-05-09 14:04:24 Size: 68 bytes

2 Name: com.apple.stockholm.tsmreg.plist Created: 2020-04-01 2 Path: Library/Preferences/com.apple.stockholm.tsmreg.plist 17:10:40 9 SHA256: 4a7464e2298ce19065741446ef9d35b72f4d46632a053ae46240f01c2435d096 Modified: 2020-04-01 17:10:40 Accessed: 2020-04-01 17:10:40 Size: 74 bytes

2 Name: com.apple.springboard.usage.plist Created: 2020-06-05 3 Path: Library/Preferences/com.apple.springboard.usage.plist 16:59:31 0 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-06-05 16:59:31 Accessed: 2020-06-05 16:59:31 Size: 42 bytes

2 Name: com.apple.spotlightui.plist Created: 2020-04-10 3 Path: Library/Preferences/com.apple.spotlightui.plist 17:57:59 1 SHA256: c9287f7be3c023b26fd47ae4452ae3dce15ff436f61f8b160aa4a424f0cd009e Modified: 2020-04-10 17:57:59 Accessed: 2020-04-10 17:57:59 Size: 175 bytes

2 Name: com.apple.softwareupdateservicesd.plist Created: 2020-06-27 3 Path: Library/Preferences/com.apple.softwareupdateservicesd.plist 16:34:17 2 SHA256: f60183818b23c886f099ffc29cdfa290677894c0193c5eca5e6ebaff4900dec5 Modified: 2020-06-27 16:34:17 Accessed: 2020-06-27 16:34:17 Size: 76 bytes

2 Name: com.apple.softwareupdateservices.security.plist Created: 2020-04-01 3 Path: Library/Preferences/com.apple.softwareupdateservices.security.plist 17:10:43 3 SHA256: 185e107ee633121030e57992e771797136c259a4112cc8bd2642364757d661af Modified: 2020-04-01 17:10:43 Accessed: 2020-04-01 17:10:43 Size: 88 bytes

2 Name: com.apple.siri.shortcuts.plist Created: 2020-04-01 3 Path: Library/Preferences/com.apple.siri.shortcuts.plist 17:10:43 4 SHA256: 6e7e25a8578d4d93fe40d37de399bce29eba8056dfb6bdf819e2efc7dee17edc Modified: 2020-04-01 17:10:43 Accessed: 2020-04-01 17:10:43 Size: 76 bytes

2 Name: com.apple.siri.context.service.plist Created: 2020-04-01 3 Path: Library/Preferences/com.apple.siri.context.service.plist 17:12:27 5 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-04-01 17:12:27 Accessed: 2020-04-01 17:12:27 Size: 42 bytes

2 Name: com.apple.searchd.plist Created: 2020-05-02 3 Path: Library/Preferences/com.apple.searchd.plist 09:20:12 6 SHA256: c836e8426eeba906978b68a107174099159bde2c094f9ce5c446d5ed7aa42cb7 Modified: 2020-05-02 09:20:12 Accessed: 2020-05-02 09:20:12 Size: 101 bytes

2 Name: com.apple.remindd.plist Created: 2020-07-13 3 Path: Library/Preferences/com.apple.remindd.plist 12:04:32 7 SHA256: 3f83c909217bd0424b276b4e2c494579f951da0568db8c7a44d960603c01c1bc Modified: 2020-07-13 12:04:32 Accessed: 2020-07-13 12:04:32 Size: 786 bytes

2 Name: com.apple.protectedcloudstorage.protectedcloudkeysyncing.plist Created: 2020-06-13 3 Path: Library/Preferences/com.apple.protectedcloudstorage.protectedcloudkeysyncing.plist 12:47:48 8 SHA256: 7a4ad385cfd474c26ce6f9f3132f5024611803bbca434d6eb8e93e22ba1091eb Modified: 2020-06-13 12:47:48 Accessed: 2020-06-13 12:47:48 Size: 72 bytes

2 Name: com.apple.proactive.PersonalizationPortrait.plist Created: 2020-04-01 3 Path: Library/Preferences/com.apple.proactive.PersonalizationPortrait.plist 17:16:57 9 SHA256: 48f2e17136230d4a35ffe1d1fff8ac60bf5dae8b869831fa454d147862539287 Modified: 2020-04-01 17:16:57 Accessed: 2020-04-01 17:16:57 Size: 146 bytes

2 Name: com.apple.private.health.menstrual-cycles.plist Created: 2020-04-01

iREPAIR - Backup Forensics Report (https://thelead82.com) - 36 of 75 I File Info Extra File Info D

4 Path: Library/Preferences/com.apple.private.health.menstrual-cycles.plist 17:16:17 0 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-04-01 17:16:17 Accessed: 2020-04-01 17:16:17 Size: 42 bytes 2 Name: com.apple.preferences.plist Created: 2020-04-01 4 Path: Library/Preferences/com.apple.preferences.plist 17:12:29 1 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-04-01 17:12:29 Accessed: 2020-04-01 17:12:29 Size: 42 bytes

2 Name: com.apple.powerlogHelperd.plist Created: 2020-06-26 4 Path: Library/Preferences/com.apple.powerlogHelperd.plist 14:50:50 2 SHA256: b899f21f51167e1f1d33ce7eafc63ce88ce67ab3170459d2ffe2714177daa8f8 Modified: 2020-06-26 14:50:50 Accessed: 2020-06-26 14:50:50 Size: 81 bytes

2 Name: com.apple.mt.launchDelay.plist Created: 2020-05-08 4 Path: Library/Preferences/com.apple.mt.launchDelay.plist 14:02:55 3 SHA256: c8c7710f84469669e59b2225980a15ba17790fd46272de4a76deba5b82794ee6 Modified: 2020-05-08 14:02:55 Accessed: 2020-05-08 14:02:55 Size: 86 bytes

2 Name: com.apple.mt.lastLaunch.plist Created: 2020-05-08 4 Path: Library/Preferences/com.apple.mt.lastLaunch.plist 14:03:03 4 SHA256: 1d9d4c40b07682b922c1c59c08e665da08426cc5178a99082db36f2a358bf189 Modified: 2020-05-08 14:03:03 Accessed: 2020-05-08 14:03:03 Size: 88 bytes

2 Name: com.apple.mt.killed.plist Created: 2020-05-22 4 Path: Library/Preferences/com.apple.mt.killed.plist 17:35:52 5 SHA256: 9199831586f3e26bb806300f7021071d65bcb01a0f9400cae35024b926645bee Modified: 2020-05-22 17:35:52 Accessed: 2020-05-22 17:35:52 Size: 79 bytes

2 Name: com.apple.mobiletimer.plist Created: 2020-04-01 4 Path: Library/Preferences/com.apple.mobiletimer.plist 17:12:39 6 SHA256: 7ce0603c3d201febf052565eb14f0abfdc13842771d7a46a90e5a3c7c40c2e75 Modified: 2020-04-01 17:12:39 Accessed: 2020-04-01 17:12:39 Size: 66 bytes

2 Name: com.apple.mobilephone.plist Created: 2020-05-11 4 Path: Library/Preferences/com.apple.mobilephone.plist 12:31:49 7 SHA256: bf87334caef66cc5f5c0468c1b05d49c075b2289b3368d7d9e7364632c3f5255 Modified: 2020-05-11 12:31:49 Accessed: 2020-05-11 12:31:49 Size: 231 bytes

2 Name: com.apple.mobilenotes.plist Created: 2020-07-13 4 Path: Library/Preferences/com.apple.mobilenotes.plist 15:41:19 8 SHA256: 667ea501486127213916c4c4824ed7d1b7eb64d73d9f7076872612115df83cb5 Modified: 2020-07-13 15:41:19 Accessed: 2020-07-13 15:41:19 Size: 4312 bytes

2 Name: com.apple.mobileipod.plist Created: 2020-04-19 4 Path: Library/Preferences/com.apple.mobileipod.plist 18:51:33 9 SHA256: 7f3235892cfae070bd324a02ef409ec30736b6f74a3fb522d1165176abb7ab5a Modified: 2020-04-19 18:51:33 Accessed: 2020-04-19 18:51:33 Size: 388 bytes

2 Name: com.apple.mobilecal.plist Created: 2020-07-13 5 Path: Library/Preferences/com.apple.mobilecal.plist 14:16:29 0 SHA256: 1cd10039f95f3ab48ca3e9650e4d00539211342255030ec954f11295ae3d37b4 Modified: 2020-07-13 14:16:29 Accessed: 2020-07-13 14:16:29 Size: 747 bytes

2 Name: com.apple.mobile.user_preferences.plist Created: 2020-04-01 5 Path: Library/Preferences/com.apple.mobile.user_preferences.plist 17:29:34 1 SHA256: ace59328acecc64f64ad33e5686084f2e7720ef8e3aa22af6ffebe20b8a4423d Modified: 2020-04-01 17:29:34 Accessed: 2020-04-01 17:29:34 Size: 84 bytes

2 Name: com.apple.migrationpluginwrapper.plist Created: 2020-04-10 5 Path: Library/Preferences/com.apple.migrationpluginwrapper.plist 17:57:50 2 SHA256: 588fdc23cafdada56d60b5fd6331bd85d351768df80e22b3ad203a8196bb204e Modified: 2020-04-10 17:57:50 Accessed: 2020-04-10 17:57:50

iREPAIR - Backup Forensics Report (https://thelead82.com) - 37 of 75 I File Info Extra File Info D

2 Name: com.apple.messaging.downgrade.sms.plist Created:Size: 1155 2020-07-13 bytes 5 Path: Library/Preferences/com.apple.messaging.downgrade.sms.plist 12:05:02 3 SHA256: 744937defa7f3f5286099d664fa0c799800a9b6af5f4e8d6346aa36ad5b0d215 Modified: 2020-07-13 12:05:02 Accessed: 2020-07-13 12:05:02 Size: 69 bytes

2 Name: com.apple.messages.notifications.plist Created: 2020-07-09 5 Path: Library/Preferences/com.apple.messages.notifications.plist 00:34:48 4 SHA256: 8d2a2d33eb8d927dc757ae7a72643ab42d929d24ea3fcdc5df6a8d1421da78b3 Modified: 2020-07-09 00:34:48 Accessed: 2020-07-09 00:34:48 Size: 178 bytes

2 Name: com.apple.mediaremoted.plist Created: 2020-05-08 5 Path: Library/Preferences/com.apple.mediaremoted.plist 14:46:29 5 SHA256: 3578c1c9821e6bf5d700ae16e6bb1687b01761cdacdfe30e9470356ac0008d21 Modified: 2020-05-08 14:46:29 Accessed: 2020-05-08 14:46:29 Size: 218 bytes

2 Name: com.apple.medialibrary.plist Created: 2020-06-10 5 Path: Library/Preferences/com.apple.medialibrary.plist 19:20:00 6 SHA256: 06c7f639f37a1fbc7eeb590e4754f084f6fe9468f8032e0be22ca49bcbbd493c Modified: 2020-06-10 19:20:00 Accessed: 2020-06-10 19:20:00 Size: 85 bytes

2 Name: com.apple.lasd.plist Created: 2020-07-13 5 Path: Library/Preferences/com.apple.lasd.plist 12:03:12 7 SHA256: db00309eac0cc377249c973f8ed1a6054c4c84c14162bc916549253258ab20a0 Modified: 2020-07-13 12:03:12 Accessed: 2020-07-13 12:03:12 Size: 411 bytes

2 Name: com.apple.kbd.plist Created: 2020-04-19 5 Path: Library/Preferences/com.apple.kbd.plist 18:56:15 8 SHA256: b38d6a3acd72d04aba2ab2de95c1b2a270b0071e2d2a1950fb24c0eb26a31675 Modified: 2020-04-19 18:56:15 Accessed: 2020-04-19 18:56:15 Size: 183 bytes

2 Name: com.apple.itunescloud.daemon.plist Created: 2020-05-09 5 Path: Library/Preferences/com.apple.itunescloud.daemon.plist 14:04:41 9 SHA256: 82da66b03bf2404db0c62499d3392d65a1ddb9f5e01e53102434c5da11f1a4ab Modified: 2020-05-09 14:04:41 Accessed: 2020-05-09 14:04:41 Size: 80 bytes

2 Name: com.apple.internal.ck.plist Created: 2020-04-19 6 Path: Library/Preferences/com.apple.internal.ck.plist 18:48:23 0 SHA256: 103dc3c7ae8f532ada168d02250679a93369f698258f25b18d53b5dd2ba4389a Modified: 2020-04-19 18:48:23 Accessed: 2020-04-19 18:48:23 Size: 415 bytes

2 Name: com.apple.internal.carkitd.plist Created: 2020-04-01 6 Path: Library/Preferences/com.apple.internal.carkitd.plist 17:19:21 1 SHA256: 3bbe3bfbc7cb33124bd4dd75beba66bcec4d35ed63931ade24362e9c24ee2062 Modified: 2020-04-01 17:19:21 Accessed: 2020-04-01 17:19:21 Size: 357 bytes

2 Name: com.apple.imservice.ids.FaceTime.plist Created: 2020-05-09 6 Path: Library/Preferences/com.apple.imservice.ids.FaceTime.plist 16:11:43 2 SHA256: 6f8a8a9ff253e882e5f401cf67b4ac31b4b203ecc66d83ae7192f3870ebc3f6f Modified: 2020-05-09 16:11:43 Accessed: 2020-05-09 16:11:43 Size: 241 bytes

2 Name: com.apple.imservice.SMS.plist Created: 2020-06-05 6 Path: Library/Preferences/com.apple.imservice.SMS.plist 17:00:03 3 SHA256: 3fa290889e5fc414b9e8f8c1d21702ccf5f1b6ed75eb2cbc5d81ebb4b6ba1264 Modified: 2020-06-05 17:00:03 Accessed: 2020-06-05 17:00:03 Size: 398 bytes

2 Name: com.apple.imessage.plist Created: 2020-04-01 6 Path: Library/Preferences/com.apple.imessage.plist 17:12:27 4 SHA256: 17e110af177b8f9650302d9686e1a61da130f209fa07d0afa1423addff799341 Modified: 2020-04-01 17:12:27 Accessed: 2020-04-01 17:12:27 Size: 96 bytes

2 Name: com.apple.imdpersistence.IMDPersistenceAgent.plist Created: 2020-04-01 6 Path: Library/Preferences/com.apple.imdpersistence.IMDPersistenceAgent.plist 17:10:39 5 SHA256: 3849118e47f209e18ae05cd702794e40eeeb4c2a8ba0800e9bfe61e768077e67 Modified: 2020-04-01

iREPAIR - Backup Forensics Report (https://thelead82.com) - 38 of 75 I File Info Extra File Info D

17:10:39 Accessed: 2020-04-01 17:10:39 2 Name: com.apple.imdbadgeutilities.plist Created:Size: 62 bytes2020-05-22 6 Path: Library/Preferences/com.apple.imdbadgeutilities.plist 17:34:21 6 SHA256: 65d6f2ba4499a893695cb21eab9858096ebbad8c873af9aab1c17384c25e5ba0 Modified: 2020-05-22 17:34:21 Accessed: 2020-05-22 17:34:21 Size: 77 bytes

2 Name: com.apple.imagent.plist Created: 2020-06-27 6 Path: Library/Preferences/com.apple.imagent.plist 16:30:51 7 SHA256: 9a773c44a7aed37c00f7687861f412998365ef078e7a1f638d0ab22fc6d20ae7 Modified: 2020-06-27 16:30:51 Accessed: 2020-06-27 16:30:51 Size: 513 bytes

2 Name: com.apple.ids.subservices.plist Created: 2020-04-01 6 Path: Library/Preferences/com.apple.ids.subservices.plist 17:11:03 8 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-04-01 17:11:03 Accessed: 2020-04-01 17:11:03 Size: 42 bytes

2 Name: com.apple.identityservices.idstatuscache.plist Created: 2020-07-13 6 Path: Library/Preferences/com.apple.identityservices.idstatuscache.plist 12:38:22 9 SHA256: 2abc319966272973f3e0c64f1cc152d84447936273baaa53d91c95a8d333ebf9 Modified: 2020-07-13 12:38:22 Accessed: 2020-07-13 12:38:22 Size: 707 bytes

2 Name: com.apple.icloud.findmydeviced.postwipe.plist Created: 2020-04-01 7 Path: Library/Preferences/com.apple.icloud.findmydeviced.postwipe.plist 17:19:16 0 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-04-01 17:19:16 Accessed: 2020-04-01 17:19:17 Size: 42 bytes

2 Name: com.apple.iapd.plist Created: 2020-04-01 7 Path: Library/Preferences/com.apple.iapd.plist 17:10:32 1 SHA256: f9b11e7f1aee16858d5d3de8e6b9aee1ea767e3454ccf38d423a70a4cd45c743 Modified: 2020-04-01 17:10:32 Accessed: 2020-04-01 17:10:32 Size: 57 bytes

2 Name: com.apple.iCloudDriveApp.plist Created: 2020-04-10 7 Path: Library/Preferences/com.apple.iCloudDriveApp.plist 17:54:56 2 SHA256: df09b286347bc3a11c458aeab30200e4b98ad1fbc0d824c8c271e1240cb157bf Modified: 2020-04-10 17:54:56 Accessed: 2020-04-10 17:54:56 Size: 66 bytes

2 Name: com.apple.homesharing.plist Created: 2020-05-07 7 Path: Library/Preferences/com.apple.homesharing.plist 12:51:56 3 SHA256: f0584872ee898499742155c65ce0d78f41d335ec5e0b89599c1ca9f66db48982 Modified: 2020-05-07 12:51:56 Accessed: 2020-05-07 12:51:56 Size: 192 bytes

2 Name: com.apple.healthappd.plist Created: 2020-04-01 7 Path: Library/Preferences/com.apple.healthappd.plist 17:16:17 4 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-04-01 17:16:17 Accessed: 2020-04-01 17:16:17 Size: 42 bytes

2 Name: com.apple.gamed.plist Created: 2020-05-09 7 Path: Library/Preferences/com.apple.gamed.plist 14:04:31 5 SHA256: 7481daa61b73f117c1ef9471e6d78517d5f1f1b5c52a9c2f8197050f6894ccd1 Modified: 2020-05-09 14:04:31 Accessed: 2020-05-09 14:04:31 Size: 692 bytes

2 Name: com.apple.gamecenter.plist Created: 2020-04-19 7 Path: Library/Preferences/com.apple.gamecenter.plist 18:46:13 6 SHA256: 9b508bfdb3549f5279ab3f3ee6db620e6ecb64c7f1157a6df3935c019d957cac Modified: 2020-04-19 18:46:13 Accessed: 2020-04-19 18:46:13 Size: 112 bytes

2 Name: com.apple.fontservicesd.plist Created: 2020-04-01 7 Path: Library/Preferences/com.apple.fontservicesd.plist 17:10:40 7 SHA256: f22544899e88fadf982317f67894a7225313221b9664e2c8036e3e656a8b17a0 Modified: 2020-04-01 17:10:40 Accessed: 2020-04-01 17:10:40 Size: 56 bytes

2 Name: com.apple.fileproviderd.plist Created: 2020-04-01

iREPAIR - Backup Forensics Report (https://thelead82.com) - 39 of 75 I File Info Extra File Info D

7 Path: Library/Preferences/com.apple.fileproviderd.plist 17:20:50 8 SHA256: 8c085ef9afa63a366b72085b5e6e28b4f0a22f05b8f1b44c9c00187e23cdb5b6 Modified: 2020-04-01 17:20:50 Accessed: 2020-04-01 17:20:50 Size: 184 bytes 2 Name: com.apple.email.maild.plist Created: 2020-05-09 7 Path: Library/Preferences/com.apple.email.maild.plist 16:17:29 9 SHA256: fc554aff87c02c0e50182f3f5225a489c972fa246b4fce5eedc8cb302fb1e22d Modified: 2020-05-09 16:17:29 Accessed: 2020-05-09 16:17:29 Size: 795 bytes

2 Name: com.apple.duetexpertd.plist Created: 2020-05-11 8 Path: Library/Preferences/com.apple.duetexpertd.plist 12:31:59 0 SHA256: 52255b38d398cf3ab9af980bd638426eb57f33ddc48687623b91b82cfad3dec3 Modified: 2020-05-11 12:31:59 Accessed: 2020-05-11 12:31:59 Size: 932 bytes

2 Name: com.apple.dataaccess.launchd Created: 2020-04-01 8 Path: Library/Preferences/com.apple.dataaccess.launchd 17:12:28 1 SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Modified: 2020-04-01 17:12:28 Accessed: 2020-04-01 17:12:28 Size: 0 bytes

2 Name: com.apple.dataaccess.babysitter.plist Created: 2020-06-09 8 Path: Library/Preferences/com.apple.dataaccess.babysitter.plist 11:28:13 2 SHA256: 4e8879783ccd3c88303fdbd8721180db1905f499a0df71f86e0e63be319cec0c Modified: 2020-06-09 11:28:13 Accessed: 2020-06-09 11:28:13 Size: 141 bytes

2 Name: com.apple.corespotlightui.plist Created: 2020-05-11 8 Path: Library/Preferences/com.apple.corespotlightui.plist 12:32:29 3 SHA256: 7e0ba0be98443219809e7b03b4bf553fa4607d7cdfea59bbee13dca1df81e7fa Modified: 2020-05-11 12:32:29 Accessed: 2020-05-11 12:32:29 Size: 847 bytes

2 Name: com.apple.coreservices.useractivityd.dynamicuseractivites.plist Created: 2020-05-09 8 Path: Library/Preferences/com.apple.coreservices.useractivityd.dynamicuseractivites.plist 13:45:29 4 SHA256: 8fa75799bfd930ecb10e9bf2b20905931f2bab56df75519c1ed67588252bb7e1 Modified: 2020-05-09 13:45:29 Accessed: 2020-05-09 13:45:29 Size: 77 bytes

2 Name: com.apple.corerecents.recentsd.plist Created: 2020-05-09 8 Path: Library/Preferences/com.apple.corerecents.recentsd.plist 14:09:21 5 SHA256: 0f7c64d85abf7fca9dea089556b1e092b73b8d9155a816719dfa7a0bb2dd3ef1 Modified: 2020-05-09 14:09:21 Accessed: 2020-05-09 14:09:21 Size: 122 bytes

2 Name: com.apple.coremedia.bag.crabs.plist Created: 2020-05-08 8 Path: Library/Preferences/com.apple.coremedia.bag.crabs.plist 14:39:10 6 SHA256: 0aa838d229cafdd1bde54f8990691f37a7f2e053666b99e6ef0983310018fbe4 Modified: 2020-05-08 14:39:10 Accessed: 2020-05-08 14:39:10 Size: 296 bytes

2 Name: com.apple.coreidv.coreidvd.plist Created: 2020-06-09 8 Path: Library/Preferences/com.apple.coreidv.coreidvd.plist 11:10:13 7 SHA256: 15897353b1f10cd9c2c3377a90d593d5bafb2f8a5ab51d7fb7c9f77bb05ab51f Modified: 2020-06-09 11:10:13 Accessed: 2020-06-09 11:10:13 Size: 638 bytes

2 Name: com.apple.control-center.OrientationLockModule.plist Created: 2020-04-01 8 Path: Library/Preferences/com.apple.control-center.OrientationLockModule.plist 17:12:37 8 SHA256: df09b286347bc3a11c458aeab30200e4b98ad1fbc0d824c8c271e1240cb157bf Modified: 2020-04-01 17:12:37 Accessed: 2020-04-01 17:12:37 Size: 66 bytes

2 Name: com.apple.control-center.MuteModule.plist Created: 2020-04-01 8 Path: Library/Preferences/com.apple.control-center.MuteModule.plist 17:14:17 9 SHA256: 57d6684487d4c9b017626f888073aae8ec94d726742048a0989976e84f72e301 Modified: 2020-04-01 17:14:17 Accessed: 2020-04-01 17:14:17 Size: 66 bytes

2 Name: com.apple.contacts.donation-agent.plist Created: 2020-07-13 9 Path: Library/Preferences/com.apple.contacts.donation-agent.plist 13:01:07 0 SHA256: 24e38721ab2a1a5f2deb57eee94fa34724f0b5bc474e8adb505e313b92ea93fe Modified: 2020-07-13 13:01:07 Accessed: 2020-07-13 13:01:07

iREPAIR - Backup Forensics Report (https://thelead82.com) - 40 of 75 I File Info Extra File Info D

2 Name: com.apple.conference.plist Created:Size: 78 bytes2020-06-27 9 Path: Library/Preferences/com.apple.conference.plist 16:34:37 1 SHA256: e5e052b9e8501be5affa4013cb74c3747c1a83ec809c2cfaaa2321bfaea93fad Modified: 2020-06-27 16:34:37 Accessed: 2020-06-27 16:34:37 Size: 184 bytes

2 Name: com.apple.commcenter.shared.plist Created: 2020-05-02 9 Path: Library/Preferences/com.apple.commcenter.shared.plist 08:40:33 2 SHA256: c6250ffcd525702053c04eed4411073f2780878aabaa817fd017b28038e642e4 Modified: 2020-05-02 08:40:33 Accessed: 2020-05-02 08:40:33 Size: 82 bytes

2 Name: com.apple.cloudpaird.plist Created: 2020-04-21 9 Path: Library/Preferences/com.apple.cloudpaird.plist 19:25:36 3 SHA256: 8f2fe87d217288dc811e16c16a93063724aabf74c2ab88b3a1069ef6bae72e31 Modified: 2020-04-21 19:25:36 Accessed: 2020-04-21 19:25:36 Size: 180 bytes

2 Name: com.apple.cloudd.plist Created: 2020-04-01 9 Path: Library/Preferences/com.apple.cloudd.plist 17:11:02 4 SHA256: 5a340a740c26c4b6c961f6c63d0120267618a53eadb2855e7cc4016b41add0fd Modified: 2020-04-01 17:11:02 Accessed: 2020-04-01 17:11:02 Size: 103 bytes

2 Name: com.apple.certui.plist Created: 2020-04-01 9 Path: Library/Preferences/com.apple.certui.plist 17:12:26 5 SHA256: 45a39d1e3917218fc4f369c21225ec4d0c0139bc478e2e31cabcdb78a8454fa2 Modified: 2020-04-01 17:12:26 Accessed: 2020-04-01 17:12:26 Size: 56 bytes

2 Name: com.apple.carplay.plist Created: 2020-04-01 9 Path: Library/Preferences/com.apple.carplay.plist 17:11:02 6 SHA256: ac56d9489fb5b95c112501dfb330c800eaba840068bf82c1b266d49eaffb8f8c Modified: 2020-04-01 17:11:02 Accessed: 2020-04-01 17:11:03 Size: 132 bytes

2 Name: com.apple.camera.plist Created: 2020-07-13 9 Path: Library/Preferences/com.apple.camera.plist 15:38:43 7 SHA256: abfea187e3e65ddbf4d907029a99bbcfb8c3fa042ed947e45afad9fac20bf496 Modified: 2020-07-13 15:38:43 Accessed: 2020-07-13 15:38:43 Size: 1001 bytes

2 Name: com.apple.calaccessd.plist Created: 2020-06-27 9 Path: Library/Preferences/com.apple.calaccessd.plist 16:21:08 8 SHA256: c996a90f043b85ca768a11fe3d458709921be9df9c82663e7aec82b1274cb90f Modified: 2020-06-27 16:21:08 Accessed: 2020-06-27 16:21:08 Size: 277 bytes

2 Name: com.apple.bird.plist Created: 2020-05-09 9 Path: Library/Preferences/com.apple.bird.plist 16:10:41 9 SHA256: 74f15fbb62fc222d5e5a6e2fbbd5b41361de127c860bee59d49fdcd01f083169 Modified: 2020-05-09 16:10:41 Accessed: 2020-05-09 16:10:41 Size: 157 bytes

3 Name: com.apple.backboardd.plist Created: 2020-04-01 0 Path: Library/Preferences/com.apple.backboardd.plist 17:10:32 0 SHA256: cb9e43b9a54a846778eb8aa7d4045d39c4c747d72e1ddb231ab7028d2d9101f3 Modified: 2020-04-01 17:10:32 Accessed: 2020-04-01 17:10:32 Size: 542 bytes

3 Name: com.apple.assistant.support.plist Created: 2020-04-01 0 Path: Library/Preferences/com.apple.assistant.support.plist 17:14:47 1 SHA256: fbd392b8c039e5183c05d90a3449d2b6464ce82788a09e29be83c042d97eb743 Modified: 2020-04-01 17:14:47 Accessed: 2020-04-01 17:14:47 Size: 139 bytes

3 Name: com.apple.asd.plist Created: 2020-04-21 0 Path: Library/Preferences/com.apple.asd.plist 13:05:43 2 SHA256: c680de71f058b04ad878d6dd1f0291539385644229751422d4f6cf9c55c6c9be Modified: 2020-04-21 13:05:43 Accessed: 2020-04-21 13:05:43 Size: 63 bytes

3 Name: com.apple.adtracking.plist Created: 2020-04-01 0 Path: Library/Preferences/com.apple.adtracking.plist 17:10:34 3 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-04-01

iREPAIR - Backup Forensics Report (https://thelead82.com) - 41 of 75 I File Info Extra File Info D

17:10:34 Accessed: 2020-04-01 17:10:34 3 Name: com.apple.accounts.dom.plist Created:Size: 42 bytes2020-05-09 0 Path: Library/Preferences/com.apple.accounts.dom.plist 14:03:43 4 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-05-09 14:03:43 Accessed: 2020-05-09 14:03:43 Size: 42 bytes

3 Name: com.apple.WirelessRadioManager.debug.plist Created: 2020-04-01 0 Path: Library/Preferences/com.apple.WirelessRadioManager.debug.plist 17:11:07 5 SHA256: 3dbdaf30b1846c015f2bd78403912765d6765673c6b3939c9fbce8c65f694ddd Modified: 2020-04-01 17:11:07 Accessed: 2020-04-01 17:11:07 Size: 139 bytes

3 Name: com.apple.WebUI.plist Created: 2020-04-01 0 Path: Library/Preferences/com.apple.WebUI.plist 17:20:50 6 SHA256: c58ad8bef5681a3e4c21a40c4aaccf845e4361aa9b95485290ceb201fed91102 Modified: 2020-04-01 17:20:50 Accessed: 2020-04-01 17:20:50 Size: 152 bytes

3 Name: com.apple.WatchListKit.plist Created: 2020-04-19 0 Path: Library/Preferences/com.apple.WatchListKit.plist 18:49:53 7 SHA256: 56adef1ade69b1020c39f88fa719e82fe48172ac4548b3fe0b8406c8194e9409 Modified: 2020-04-19 18:49:53 Accessed: 2020-04-19 18:49:53 Size: 212 bytes

3 Name: com.apple.VoiceOverTouch.plist Created: 2020-04-10 0 Path: Library/Preferences/com.apple.VoiceOverTouch.plist 17:57:50 8 SHA256: 26313eb855c74791366975c731780d80b6ad1b31e7c898e34b89c7ad5f93476a Modified: 2020-04-10 17:57:50 Accessed: 2020-04-10 17:57:50 Size: 1137 bytes

3 Name: com.apple.UIKit.plist Created: 2020-04-01 0 Path: Library/Preferences/com.apple.UIKit.plist 17:12:38 9 SHA256: de9e349b465de1d09bd0b86efb8a0bae6643e5bef19cd6ad7a4dc7519ab3cc75 Modified: 2020-04-01 17:12:38 Accessed: 2020-04-01 17:12:38 Size: 103 bytes

3 Name: com.apple.TTY.plist Created: 2020-07-13 1 Path: Library/Preferences/com.apple.TTY.plist 13:09:57 0 SHA256: 86942b551676eac8b155c2a806ae747911d31ada5457887495c6a3210961f60b Modified: 2020-07-13 13:09:57 Accessed: 2020-07-13 13:09:57 Size: 474 bytes

3 Name: com.apple.SpringBoard.plist Created: 2020-04-01 1 Path: Library/Preferences/com.apple.SpringBoard.plist 17:10:48 1 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-04-01 17:10:48 Accessed: 2020-04-01 17:10:48 Size: 42 bytes

3 Name: com.apple.SpeakSelection.plist Created: 2020-04-07 1 Path: Library/Preferences/com.apple.SpeakSelection.plist 13:09:26 2 SHA256: 879f523a0f32a85b9d67380943ae4246d0a16b1fab62fa91715da144cbd331ba Modified: 2020-04-07 13:09:26 Accessed: 2020-04-07 13:09:26 Size: 36505 bytes

3 Name: com.apple.Sharing.plist Created: 2020-04-19 1 Path: Library/Preferences/com.apple.Sharing.plist 20:46:15 3 SHA256: c0a85502911fa29e066c714a041f2892b71d494efbd0e0d08a8629b26dafb6dc Modified: 2020-04-19 20:46:15 Accessed: 2020-04-19 20:46:15 Size: 92 bytes

3 Name: com.apple.SetupAssistant.plist Created: 2020-06-09 1 Path: Library/Preferences/com.apple.SetupAssistant.plist 11:29:13 4 SHA256: d8301497a8a0b67ac41fa395d6830a70ae91a9d282cb8110fbd30d52dbd5c721 Modified: 2020-06-09 11:29:13 Accessed: 2020-06-09 11:29:13 Size: 89 bytes

3 Name: com.apple.Search.framework.plist Created: 2020-07-13 1 Path: Library/Preferences/com.apple.Search.framework.plist 14:15:29 5 SHA256: 3195330e0b5bc5c98209bdc1bdc68b42bc4a3c8d4e93848dcc1f7bf4a872f89a Modified: 2020-07-13 14:15:29 Accessed: 2020-07-13 14:15:29 Size: 65 bytes

iREPAIR - Backup Forensics Report (https://thelead82.com) - 42 of 75 I File Info Extra File Info D

3 Name: com.apple.ScreenTimeAgent.plist Created: 2020-05-09 1 Path: Library/Preferences/com.apple.ScreenTimeAgent.plist 14:04:31 6 SHA256: a2c6f01b9c7f59e9221961ed91031ed88b932ddbd3871c6a8f4b3d5ccf90c9f9 Modified: 2020-05-09 14:04:31 Accessed: 2020-05-09 14:04:31 Size: 242 bytes

3 Name: com.apple.SafariCloudHistoryPushAgent.plist Created: 2020-05-08 1 Path: Library/Preferences/com.apple.SafariCloudHistoryPushAgent.plist 14:38:36 7 SHA256: c78bb257a03aa59d0da57ad8643b05041bbebfbc92a528f8a29f96da858eddde Modified: 2020-05-08 14:38:36 Accessed: 2020-05-08 14:38:36 Size: 79 bytes

3 Name: com.apple.Safari.SafeBrowsing.plist Created: 2020-05-08 1 Path: Library/Preferences/com.apple.Safari.SafeBrowsing.plist 14:38:50 8 SHA256: 2e3ed1b7668589653e0b7d7010c11ba0c05b7a0e8a8d6417c46927d634643c02 Modified: 2020-05-08 14:38:50 Accessed: 2020-05-08 14:38:50 Size: 103 bytes

3 Name: com.apple.SOS.plist Created: 2020-04-01 1 Path: Library/Preferences/com.apple.SOS.plist 17:12:38 9 SHA256: 828fbec9c1a4fdb914de31ea4cdb30bedcc74647194a3ffeea2ccfa2f0303d2d Modified: 2020-04-01 17:12:38 Accessed: 2020-04-01 17:12:38 Size: 114 bytes

3 Name: com.apple.PrototypeTools.plist Created: 2020-06-05 2 Path: Library/Preferences/com.apple.PrototypeTools.plist 19:07:17 0 SHA256: 3db3eceb6d73033069c851fd189aab18adbc9b98b26c4bbf7b76dfd73b6352ed Modified: 2020-06-05 19:07:17 Accessed: 2020-06-05 19:07:17 Size: 187 bytes

3 Name: com.apple.Preferences.plist Created: 2020-07-13 2 Path: Library/Preferences/com.apple.Preferences.plist 14:15:49 1 SHA256: 4133ad196fd598aeea0def9ec943a09e89e8de932833b98d51f934f480050e8e Modified: 2020-07-13 14:15:49 Accessed: 2020-07-13 14:15:49 Size: 1775 bytes

3 Name: com.apple.NanoMusicSync.plist Created: 2020-04-01 2 Path: Library/Preferences/com.apple.NanoMusicSync.plist 17:12:47 2 SHA256: 45aa1114f8ef20c1bf5d6b1ec3a8b40fe9e0763332426aa6a8adf9cf3ca594d5 Modified: 2020-04-01 17:12:47 Accessed: 2020-04-01 17:12:47 Size: 231 bytes

3 Name: com.apple.NanoMail.plist Created: 2020-07-13 2 Path: Library/Preferences/com.apple.NanoMail.plist 12:03:22 3 SHA256: a22d9cf2ad45955aaca33834027c37f64659a8e318e674785447244106d49fc9 Modified: 2020-07-13 12:03:22 Accessed: 2020-07-13 12:03:22 Size: 876 bytes

3 Name: com.apple.Music.plist Created: 2020-04-19 2 Path: Library/Preferences/com.apple.Music.plist 20:46:16 4 SHA256: 422ce615f8dab9e23d0c54ec3c18b42973db2d6ea32295604abe0c3fcf81adc8 Modified: 2020-04-19 20:46:16 Accessed: 2020-04-19 20:46:16 Size: 931 bytes

3 Name: com.apple.MobileSMSPreview.plist Created: 2020-05-02 2 Path: Library/Preferences/com.apple.MobileSMSPreview.plist 09:05:53 5 SHA256: f1eb301d22f9ee4464224d9dfe0dd460053c07461ae209173b27f33ba6acc82f Modified: 2020-05-02 09:05:53 Accessed: 2020-05-02 09:05:53 Size: 198 bytes

3 Name: com.apple.MobileSMS.plist Created: 2020-07-09 2 Path: Library/Preferences/com.apple.MobileSMS.plist 00:34:47 6 SHA256: 146e6b40be413e04f2db2c7fbf6098ca92d960012c6b40fadee62e57e9ec70bf Modified: 2020-07-09 00:34:47 Accessed: 2020-07-09 00:34:47 Size: 9325 bytes

3 Name: com.apple.MobileSMS.CKDNDList.plist Created: 2020-05-07 2 Path: Library/Preferences/com.apple.MobileSMS.CKDNDList.plist 12:52:39 7 SHA256: 4e37843c037980611dd644a2cde4bab28000623b27d8ced50a9e38702fad451d Modified: 2020-05-07 12:52:39 Accessed: 2020-05-07 12:52:39 Size: 68 bytes

3 Name: com.apple.Messages.plist Created: 2020-06-27 2 Path: Library/Preferences/com.apple.Messages.plist 16:21:17 8 SHA256: e79355ff8556a218f23e4b6960db321f4b70ce6c798d21ae8587b6806100ad2f Modified: 2020-06-27 16:21:17

iREPAIR - Backup Forensics Report (https://thelead82.com) - 43 of 75 I File Info Extra File Info D

Accessed: 2020-06-27 16:21:17 Size: 102 bytes 3 Name: com.apple.Maps.TransitWidget.plist Created: 2020-04-01 2 Path: Library/Preferences/com.apple.Maps.TransitWidget.plist 17:12:26 9 SHA256: df09b286347bc3a11c458aeab30200e4b98ad1fbc0d824c8c271e1240cb157bf Modified: 2020-04-01 17:12:26 Accessed: 2020-04-01 17:12:26 Size: 66 bytes

3 Name: com.apple.ImageCaptureFramework.plist Created: 2020-04-01 3 Path: Library/Preferences/com.apple.ImageCaptureFramework.plist 17:10:34 0 SHA256: a8645cc21df58f1755e2055bd51691a8a876d55f1308f2ac9a0fc0047b23080e Modified: 2020-04-01 17:10:34 Accessed: 2020-04-01 17:10:34 Size: 62 bytes

3 Name: com.apple.Home.group.plist Created: 2020-04-03 3 Path: Library/Preferences/com.apple.Home.group.plist 13:28:35 1 SHA256: 290c5d0911e05ce18c8c303b40fc09736c249844a152b035022a8d36c080a5cf Modified: 2020-04-03 13:28:35 Accessed: 2020-04-03 13:28:35 Size: 70 bytes

3 Name: com.apple.HearingAids.plist Created: 2020-04-01 3 Path: Library/Preferences/com.apple.HearingAids.plist 17:12:37 2 SHA256: b10a40394144d34bd56ce29619f0b79384829d4447844e6dc79a66a2e3bf044b Modified: 2020-04-01 17:12:37 Accessed: 2020-04-01 17:12:37 Size: 80 bytes

3 Name: com.apple.GEO.plist Created: 2020-04-01 3 Path: Library/Preferences/com.apple.GEO.plist 17:14:17 3 SHA256: d8d27e716d92b13a8efa9a97439430e2f19e3be4d4d34b4bb68f874f879efd65 Modified: 2020-04-01 17:14:17 Accessed: 2020-04-01 17:14:17 Size: 121 bytes

3 Name: com.apple.EmojiPreferences.plist Created: 2020-04-01 3 Path: Library/Preferences/com.apple.EmojiPreferences.plist 17:12:27 4 SHA256: 9b4b39f7dc1d779197c4eebaa5e46c6eec024de4b468b513a19c9ce43a7fd84d Modified: 2020-04-01 17:12:27 Accessed: 2020-04-01 17:12:28 Size: 120 bytes

3 Name: com.apple.DocumentManager.defaults.plist Created: 2020-04-19 3 Path: Library/Preferences/com.apple.DocumentManager.defaults.plist 20:45:56 5 SHA256: 9162824fd53d2a0cdf7a699eb0efb71574f617447f216373cf4a9dd07185148e Modified: 2020-04-19 20:45:56 Accessed: 2020-04-19 20:45:56 Size: 7449 bytes

3 Name: com.apple.DictionaryServices.plist Created: 2020-04-01 3 Path: Library/Preferences/com.apple.DictionaryServices.plist 17:21:54 6 SHA256: 828a0509211c193caf9662704027885889d21cc8012f176ccd4268ecc44b0c66 Modified: 2020-04-01 17:21:54 Accessed: 2020-04-01 17:21:54 Size: 125 bytes

3 Name: com.apple.CoreBrightness.plist Created: 2020-07-13 3 Path: Library/Preferences/com.apple.CoreBrightness.plist 14:15:40 7 SHA256: 5b29675fe374e31d7ecc778d20bfa6b2bc9f679d911a0e57eec9c2dc7637df86 Modified: 2020-07-13 14:15:40 Accessed: 2020-07-13 14:15:40 Size: 368 bytes

3 Name: com.apple.CallHistorySyncHelper.plist Created: 2020-06-27 3 Path: Library/Preferences/com.apple.CallHistorySyncHelper.plist 16:21:08 8 SHA256: 1655f0cf63ebca9baefe2e78a1f57c8a15e2bb73766bcc94ffc28cede9ada469 Modified: 2020-06-27 16:21:08 Accessed: 2020-06-27 16:21:08 Size: 136 bytes

3 Name: com.apple.AssistiveTouch.plist Created: 2020-04-10 3 Path: Library/Preferences/com.apple.AssistiveTouch.plist 17:57:49 9 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-04-10 17:57:49 Accessed: 2020-04-10 17:57:49 Size: 42 bytes

3 Name: com.apple.AppleMediaServices.plist Created: 2020-06-13 4 Path: Library/Preferences/com.apple.AppleMediaServices.plist 11:38:18 0 SHA256: 578fd4548cf815c2a3899ecb57c90bbd8dd691dd5d92aa351ef08a23d13b9e27 Modified: 2020-06-13 11:38:18 Accessed: 2020-06-13 11:38:18 Size: 808 bytes

3 Name: com.apple.AppleMediaServices.notbackedup.plist Created: 2020-05-09

iREPAIR - Backup Forensics Report (https://thelead82.com) - 44 of 75 I File Info Extra File Info D

4 Path: Library/Preferences/com.apple.AppleMediaServices.notbackedup.plist 14:09:21 1 SHA256: 1826f85cac915b3a2847d9f992397ba15d728041a5d270e80407beda6ab8a11b Modified: 2020-05-09 14:09:21 Accessed: 2020-05-09 14:09:21 Size: 151 bytes 3 Name: com.apple.AppSupport.plist Created: 2020-05-02 4 Path: Library/Preferences/com.apple.AppSupport.plist 08:40:28 2 SHA256: 8a9cd43591b9f20a8992efd0a9b2de2bc4d63faa4f5526788aebde028b205263 Modified: 2020-05-02 08:40:28 Accessed: 2020-05-02 08:40:28 Size: 155 bytes

3 Name: com.apple.AppStore.plist Created: 2020-05-02 4 Path: Library/Preferences/com.apple.AppStore.plist 09:04:22 3 SHA256: 08992fac5d6ee2c91e6cb11c27b1aee5f9c32cd8b8a91e0a8827668a7627ca0d Modified: 2020-05-02 09:04:22 Accessed: 2020-05-02 09:04:22 Size: 430 bytes

3 Name: com.apple.AppPredictionWidget.defaults.plist Created: 2020-05-11 4 Path: Library/Preferences/com.apple.AppPredictionWidget.defaults.plist 14:39:20 4 SHA256: 85f6449d782041d461ffda555f80716ddffab07544ace30ef2efde2e72111e7e Modified: 2020-05-11 14:39:20 Accessed: 2020-05-11 14:39:20 Size: 109 bytes

3 Name: com.apple.Accessibility.plist Created: 2020-06-27 4 Path: Library/Preferences/com.apple.Accessibility.plist 16:34:27 5 SHA256: c043efb5864c1c18d927f7c702d2d1b3cba0ae8f494cb7801f3f320431da415e Modified: 2020-06-27 16:34:27 Accessed: 2020-06-27 16:34:27 Size: 1046 bytes

3 Name: com.apple.Accessibility.SwitchControl.plist Created: 2020-04-10 4 Path: Library/Preferences/com.apple.Accessibility.SwitchControl.plist 17:57:49 6 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-04-10 17:57:49 Accessed: 2020-04-10 17:57:49 Size: 42 bytes

3 Name: com.apple.Accessibility.Collection.plist Created: 2020-07-13 4 Path: Library/Preferences/com.apple.Accessibility.Collection.plist 13:09:57 7 SHA256: d729f15f8b78b966f9e6974f5cf834c0d59e91df9908d45d2fdaed1a23051244 Modified: 2020-07-13 13:09:57 Accessed: 2020-07-13 13:09:57 Size: 237 bytes

3 Name: UITextInputContextIdentifiers.plist Created: 2020-05-18 4 Path: Library/Preferences/UITextInputContextIdentifiers.plist 16:33:38 8 SHA256: d0d3f6d0a7f66c82447ac0fcbb5e479def2f230b9a128c8ddcb97dddd09ae981 Modified: 2020-05-18 16:33:38 Accessed: 2020-05-18 16:33:38 Size: 2618 bytes

3 Name: TVRemoteConnectionService.plist Created: 2020-04-01 4 Path: Library/Preferences/TVRemoteConnectionService.plist 17:11:49 9 SHA256: 27df21ab1e75eea35aa902b3c87fbb0001906f020071d5d4263291f5d837760a Modified: 2020-04-01 17:11:49 Accessed: 2020-04-01 17:11:49 Size: 82 bytes

3 Name: localizable.strings Created: 2020-07-10 5 Path: Library/Passes/Discovery/messages.pkmessage/de.lproj/localizable.strings 18:39:18 0 SHA256: 6917d9d10c1932b5f8e1547419a75555e26939d38cddfaf0b636a515c9887410 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2208 bytes

3 Name: localizable.strings Created: 2020-07-10 5 Path: Library/Passes/Discovery/messages.pkmessage/he.lproj/localizable.strings 18:39:18 1 SHA256: 61ab330b2ab67b28e4db88c3433f105d6d30dca0d481ee72789d87d3c4f0691f Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 1981 bytes

3 Name: localizable.strings Created: 2020-07-10 5 Path: Library/Passes/Discovery/messages.pkmessage/ar.lproj/localizable.strings 18:39:18 2 SHA256: 423f392df0c6fe6a48c5dce3a0e6cf3f34599d4ef3be58ab5fd6b0059306ddb2 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2129 bytes

3 Name: localizable.strings Created: 2020-07-10 5 Path: Library/Passes/Discovery/messages.pkmessage/el.lproj/localizable.strings 18:39:18 3 SHA256: ee181befac2e295c96cb3867e4542954a5e8520fadf3cc7f812c3479ac4165c6 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27

iREPAIR - Backup Forensics Report (https://thelead82.com) - 45 of 75 I File Info Extra File Info D

3 Name: localizable.strings Created:Size: 2461 2020-07-10 bytes 5 Path: Library/Passes/Discovery/messages.pkmessage/ja.lproj/localizable.strings 18:39:18 4 SHA256: d50fb10c918e19bfb98d2b4c03318e4a372f13401b6fd231d0fb53c725584976 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 1655 bytes

3 Name: localizable.strings Created: 2020-07-10 5 Path: Library/Passes/Discovery/messages.pkmessage/en.lproj/localizable.strings 18:39:18 5 SHA256: ddd497b98aa4d02f2bfd0286802cc20c7bb07bae679bd4d77a2415ef54c905b2 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 6140 bytes

3 Name: localizable.strings Created: 2020-07-10 5 Path: Library/Passes/Discovery/messages.pkmessage/uk.lproj/localizable.strings 18:39:18 6 SHA256: d05946da68011bf49c846331bf4d4ac883089982bd052f7798e4c43f9889d593 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2125 bytes

3 Name: localizable.strings Created: 2020-07-10 5 Path: Library/Passes/Discovery/messages.pkmessage/es_419.lproj/localizable.strings 18:39:18 7 SHA256: 9e6434e3b6a98ef08d2e8ec412ec85b5c3a7f186ac60f841dc713c2ffa40780f Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2124 bytes

3 Name: localizable.strings Created: 2020-07-10 5 Path: Library/Passes/Discovery/messages.pkmessage/pt_PT.lproj/localizable.strings 18:39:18 8 SHA256: 5309ca52971981a16543f6f61b9a92b69f9f72c4b79746b6bfb2d52b3a7ceee7 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2217 bytes

3 Name: localizable.strings Created: 2020-07-10 5 Path: Library/Passes/Discovery/messages.pkmessage/es.lproj/localizable.strings 18:39:18 9 SHA256: 2cf27257786663ec7817a98d981dc741d2ea698143ecdce470f21d2ecb14a5e1 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2320 bytes

3 Name: localizable.strings Created: 2020-07-10 6 Path: Library/Passes/Discovery/messages.pkmessage/da.lproj/localizable.strings 18:39:18 0 SHA256: f7707d82ad9c08e73019c746cd81d97297fce4726bd570f1bf719d35db0f5a8f Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 1957 bytes

3 Name: localizable.strings Created: 2020-07-10 6 Path: Library/Passes/Discovery/messages.pkmessage/it.lproj/localizable.strings 18:39:18 1 SHA256: ba965be243c4dae088b12f6057542f2a903e5455e6186ccfdf8cb375895f671c Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2382 bytes

3 Name: localizable.strings Created: 2020-07-10 6 Path: Library/Passes/Discovery/messages.pkmessage/sk.lproj/localizable.strings 18:39:18 2 SHA256: 8fa6cb65544bfd4747f5032aec0fcd5acc80960c195cc9a4fb55e205a8d2d36a Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2307 bytes

3 Name: localizable.strings Created: 2020-07-10 6 Path: Library/Passes/Discovery/messages.pkmessage/zh_CN.lproj/localizable.strings 18:39:18 3 SHA256: b836cc5aa3e7e4e7dc9eb0c32b75a75fde40ec990b52933ef3da08e58521a616 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 1423 bytes

3 Name: localizable.strings Created: 2020-07-10 6 Path: Library/Passes/Discovery/messages.pkmessage/ms.lproj/localizable.strings 18:39:18 4 SHA256: 212337da6c9cd8ad591a793f41599e4d461b13f19738a5ce7165a642588e7be2 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2097 bytes

3 Name: localizable.strings Created: 2020-07-10 6 Path: Library/Passes/Discovery/messages.pkmessage/sv.lproj/localizable.strings 18:39:18 5 SHA256: a2d5a424be0350fafeced5df93ab047861dc51a291afd21513178427854f1199 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2016 bytes

3 Name: localizable.strings Created: 2020-07-10 6 Path: Library/Passes/Discovery/messages.pkmessage/en_AU.lproj/localizable.strings 18:39:18 6 SHA256: 1306eae6d59fa319eafe58c3dcac2a01f62c33650f707a631ba12f83046c219d Modified: 2020-07-10

iREPAIR - Backup Forensics Report (https://thelead82.com) - 46 of 75 I File Info Extra File Info D

18:39:18 Accessed: 2020-07-13 12:47:27 3 Name: localizable.strings Created:Size: 6137 2020-07-10 bytes 6 Path: Library/Passes/Discovery/messages.pkmessage/cs.lproj/localizable.strings 18:39:18 7 SHA256: 37782d2a12271f55d99980a90b46c3ae6c9e8e89f6e5b3babc4a405ea2392f0a Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2215 bytes

3 Name: localizable.strings Created: 2020-07-10 6 Path: Library/Passes/Discovery/messages.pkmessage/ko.lproj/localizable.strings 18:39:18 8 SHA256: cc38450b710c96d08c75c208eef1ce4caa606a8826a5a4763963fac74600f0d4 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 1671 bytes

3 Name: localizable.strings Created: 2020-07-10 6 Path: Library/Passes/Discovery/messages.pkmessage/no.lproj/localizable.strings 18:39:18 9 SHA256: 06166f4d2a9aba494c67f8d8fbcad8ac976dffeb3bc3cd21a390a764b785a9f2 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2059 bytes

3 Name: localizable.strings Created: 2020-07-10 7 Path: Library/Passes/Discovery/messages.pkmessage/hu.lproj/localizable.strings 18:39:18 0 SHA256: 3b61f4f0a2075bc7b355d24ac4a27147f342968dbf04879e2d026ff62a4aa183 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2505 bytes

3 Name: localizable.strings Created: 2020-07-10 7 Path: Library/Passes/Discovery/messages.pkmessage/tr.lproj/localizable.strings 18:39:18 1 SHA256: 54256d5c0461e5dbeec0344c1943243640bcc35b31d13a0b4b6bdc7de2652ae1 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2210 bytes

3 Name: localizable.strings Created: 2020-07-10 7 Path: Library/Passes/Discovery/messages.pkmessage/pl.lproj/localizable.strings 18:39:18 2 SHA256: 5fd180107bfcb64b2343bdb022a6d90490ca50af4128dbae642e2bb705a31af3 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2356 bytes

3 Name: localizable.strings Created: 2020-07-10 7 Path: Library/Passes/Discovery/messages.pkmessage/fr_CA.lproj/localizable.strings 18:39:18 3 SHA256: 0be4477f6ce37a639d6454bb98d0831d01ff263a9ccaaa377429b362cc44dbf1 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2370 bytes

3 Name: localizable.strings Created: 2020-07-10 7 Path: Library/Passes/Discovery/messages.pkmessage/vi.lproj/localizable.strings 18:39:18 4 SHA256: d498e373b28f4d631a29e4ece30db0116825254fbea1a427d76d11e350509a98 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2141 bytes

3 Name: localizable.strings Created: 2020-07-10 7 Path: Library/Passes/Discovery/messages.pkmessage/ru.lproj/localizable.strings 18:39:18 5 SHA256: cdea805a9a8a5b603a9bc9374f777afbb4c0cc2671ffb33fdbcb3f1b71f2e20f Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2291 bytes

3 Name: localizable.strings Created: 2020-07-10 7 Path: Library/Passes/Discovery/messages.pkmessage/en_GB.lproj/localizable.strings 18:39:18 6 SHA256: 245c6bc6270e723293d29ca453a7748f351c82447206bd965a441dd0bd531a54 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 6139 bytes

3 Name: localizable.strings Created: 2020-07-10 7 Path: Library/Passes/Discovery/messages.pkmessage/fr.lproj/localizable.strings 18:39:18 7 SHA256: 93882d16ad223ad01c0fd7430aa921052c364a0137b32ed6e839a6d7bf5f3112 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2337 bytes

3 Name: localizable.strings Created: 2020-07-10 7 Path: Library/Passes/Discovery/messages.pkmessage/fi.lproj/localizable.strings 18:39:18 8 SHA256: acb820e67d2297a382e9fd1541079ee503179b620329fcf7f2034d5efd9cd101 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 1982 bytes

3 Name: localizable.strings Created: 2020-07-10

iREPAIR - Backup Forensics Report (https://thelead82.com) - 47 of 75 I File Info Extra File Info D

7 Path: Library/Passes/Discovery/messages.pkmessage/id.lproj/localizable.strings 18:39:18 9 SHA256: 4db69911e808e7dcae9a7251b3e121f4e5f271f009145d543ed349050179779e Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2012 bytes 3 Name: localizable.strings Created: 2020-07-10 8 Path: Library/Passes/Discovery/messages.pkmessage/nl.lproj/localizable.strings 18:39:18 0 SHA256: 007623fe25218c26b8231e056334f5132a967b0a15e4c6bae988dc375a7586bf Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 1992 bytes

3 Name: localizable.strings Created: 2020-07-10 8 Path: Library/Passes/Discovery/messages.pkmessage/th.lproj/localizable.strings 18:39:18 1 SHA256: 8884e4001825cb17ce5cbc417fc1b556c977f13f06eaf1271c576b84cb230203 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2129 bytes

3 Name: localizable.strings Created: 2020-07-10 8 Path: Library/Passes/Discovery/messages.pkmessage/pt.lproj/localizable.strings 18:39:18 2 SHA256: abf621b6cf9b73d88073c4cf8c492e5a38a97b892f7aaad7f27aea2983ae2aef Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2223 bytes

3 Name: localizable.strings Created: 2020-07-10 8 Path: Library/Passes/Discovery/messages.pkmessage/ro.lproj/localizable.strings 18:39:18 3 SHA256: 608bb98c0df77e64fa56e754e9ee161b4c0679306b67d7d1892fcea5586c96fe Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2329 bytes

3 Name: localizable.strings Created: 2020-07-10 8 Path: Library/Passes/Discovery/messages.pkmessage/zh_HK.lproj/localizable.strings 18:39:18 4 SHA256: b15450bf734fa50c911b73c05d94a375b62e2c83f5ec6c3634bfd9ed57553082 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 1451 bytes

3 Name: localizable.strings Created: 2020-07-10 8 Path: Library/Passes/Discovery/messages.pkmessage/hr.lproj/localizable.strings 18:39:18 5 SHA256: f4e8f1e06920a85a31677cb37f3027687292cb3ff7c2aad3072303fca85ba50b Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2236 bytes

3 Name: localizable.strings Created: 2020-07-10 8 Path: Library/Passes/Discovery/messages.pkmessage/hi.lproj/localizable.strings 18:39:18 6 SHA256: 05b27a9c06e79ac0cebaf37c6aa4e56d0310657b379b895f67926b0716aa621c Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2195 bytes

3 Name: localizable.strings Created: 2020-07-10 8 Path: Library/Passes/Discovery/messages.pkmessage/ca.lproj/localizable.strings 18:39:18 7 SHA256: eaa719e701824ddd454328bd64aa765fcef1987610ae44f670463a3d5ebb02c1 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 2340 bytes

3 Name: localizable.strings Created: 2020-07-10 8 Path: Library/Passes/Discovery/messages.pkmessage/zh_TW.lproj/localizable.strings 18:39:18 8 SHA256: bf2f983b9ba5563c5f87859e562c196faf0b3124ee05d29fd32ae4f3ce201a2d Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 1465 bytes

3 Name: messages.json Created: 2020-07-10 8 Path: Library/Passes/Discovery/messages.pkmessage/messages.json 18:39:18 9 SHA256: 75f540767b31aa2c7792465c4c7c3673dcfd04fac633ea14ff1f1d3a98908cb4 Modified: 2020-07-10 18:39:18 Accessed: 2020-07-13 12:47:27 Size: 15054 bytes

3 Name: notes.sqlite Created: 2020-05-08 9 Path: Library/Notes/notes.sqlite 14:33:27 0 SHA256: f5cab80304f87a33c19265ef54f6b854e4da13e1d74f142635424a1cafde5a4c Modified: 2020-05-08 14:33:27 Accessed: 2020-04-01 17:20:44 Size: 143360 bytes

3 Name: .receipt.0.cdt.icloud Created: 2020-04-19 9 Path: Library/Mobile Documents/com~apple~TextInput/Dictionaries/mobile~FDABD62A-D0E1-5BD9-B125-2E9A65FDF1DD/UserDictionary/SAlQVUhF7208e6_ 18:56:16 1 gvZx_zdKx1U1AzKGem3HO2pLKjgY=/.receipt.0.cdt.icloud Modified: 2020-04-19 SHA256: 1362ec55f8591b28d255681ea5f2536d049cc887790223f73c1331ee70997063 18:56:16 Accessed: 2020-05-09 16:10:45

iREPAIR - Backup Forensics Report (https://thelead82.com) - 48 of 75 I File Info Extra File Info D

3 Name: MailboxCollections.plist Created:Size: 160 2020-05-11 bytes 9 Path: Library/Mail/MailboxCollections.plist 11:58:47 2 SHA256: 536934716380a6c3a6fe9fed4eda1edbd955c371bbf30628cebebb4472d34994 Modified: 2020-05-11 11:58:47 Accessed: 2020-05-11 11:58:47 Size: 451 bytes

3 Name: ClassAFile.txt Created: 2020-04-01 9 Path: Library/DeviceRegistry.state/ClassAFile.txt 17:10:40 3 SHA256: 4001ed171f0d0024f144ab7c0ce51777e4505f8436983a334fd382e35b42e379 Modified: 2020-04-01 17:10:40 Accessed: 2020-04-01 17:10:40 Size: 13 bytes

3 Name: AccountInformation.plist Created: 2020-07-13 9 Path: Library/DataAccess/AccountInformation.plist 12:03:13 4 SHA256: f520f49aab9042c2e26003a12c2675cbddfa0191aafadd1df5c646e9f4fea989 Modified: 2020-07-13 12:03:13 Accessed: 2020-07-13 12:03:13 Size: 684 bytes

3 Name: ModuleConfiguration.plist Created: 2020-04-01 9 Path: Library/ControlCenter/ModuleConfiguration.plist 17:11:02 5 SHA256: d3b963da5b52308ecc5e0e98daca823483158e7fa0a88f8b76f0325124b87d76 Modified: 2020-04-01 17:11:02 Accessed: 2020-04-01 17:11:02 Size: 570 bytes

3 Name: Notifications.Calendar.TriggeredEvent.TimeToLeaveRefresh Created: 2020-04-01 9 Path: Library/Calendar/Notifications.Calendar.TriggeredEvent.TimeToLeaveRefresh 17:10:43 6 SHA256: 86076769817ad2f9f187c24828a800c1d23415fb47f8aaab719ecf2856e7df6c Modified: 2020-04-01 17:10:43 Accessed: 2020-04-01 17:10:43 Size: 237 bytes

3 Name: Notifications.Calendar.TriggeredEvent.NotificationData Created: 2020-04-01 9 Path: Library/Calendar/Notifications.Calendar.TriggeredEvent.NotificationData 17:10:43 7 SHA256: 86076769817ad2f9f187c24828a800c1d23415fb47f8aaab719ecf2856e7df6c Modified: 2020-04-01 17:10:43 Accessed: 2020-04-01 17:10:43 Size: 237 bytes

3 Name: Notifications.Calendar.Protected Created: 2020-04-01 9 Path: Library/Calendar/Notifications.Calendar.Protected 17:10:43 8 SHA256: 289a629586a147ef4e9c1c07ea676f8ecbe6c5b9f4a51d093f7ee624820f4511 Modified: 2020-04-01 17:10:43 Accessed: 2020-04-01 17:10:43 Size: 219 bytes

3 Name: control-even Created: 2020-07-13 9 Path: Library/Application Support/CloudDocs/session/db/control-even 14:10:53 9 SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Modified: 2020-07-13 14:10:53 Accessed: 2020-07-13 14:10:53 Size: 0 bytes

4 Name: iCloud.com.apple.passd.plist Created: 2020-05-09 0 Path: Library/Application Support/CloudDocs/session/containers/iCloud.com.apple.passd.plist 16:10:44 0 SHA256: 27cd048678ee4bb7cbe84baf151ab41a1d601c701c50a2e85cd5ee2a39e6048a Modified: 2020-05-09 16:10:44 Accessed: 2020-05-11 14:40:31 Size: 872 bytes

4 Name: iCloud.com.apple.mobilesafari.plist Created: 2020-05-09 0 Path: Library/Application Support/CloudDocs/session/containers/iCloud.com.apple.mobilesafari.plist 16:10:44 1 SHA256: 9f890a4d8a3378be17e470336e287f026b407ee40d2818ef5327efcecde510ec Modified: 2020-05-09 16:10:44 Accessed: 2020-05-11 14:40:31 Size: 1341 bytes

4 Name: iCloud.com.apple.iBooks.plist Created: 2020-06-09 0 Path: Library/Application Support/CloudDocs/session/containers/iCloud.com.apple.iBooks.plist 11:11:01 2 SHA256: c8d6b5366d35df7d0fb7c1172e1361a4e8f10a219b1776f3e0e14f97b15da31b Modified: 2020-06-09 11:11:01 Accessed: 2020-06-27 16:21:01 Size: 3173 bytes

4 Name: iCloud.com.apple.iBooks.iTunesU.plist Created: 2020-06-09 0 Path: Library/Application Support/CloudDocs/session/containers/iCloud.com.apple.iBooks.iTunesU.plist 11:11:00 3 SHA256: c8d6b5366d35df7d0fb7c1172e1361a4e8f10a219b1776f3e0e14f97b15da31b Modified: 2020-06-09 11:11:00 Accessed: 2020-06-27 16:21:01 Size: 3173 bytes

4 Name: iCloud.com.apple.DocumentsApp.plist Created: 2020-06-09 0 Path: Library/Application Support/CloudDocs/session/containers/iCloud.com.apple.DocumentsApp.plist 11:11:01 4 SHA256: db29777e9cdf2c8929738f23df1d56381a6ccafe2cc84d0eafee0d5b4cbf3ce6 Modified: 2020-06-09

iREPAIR - Backup Forensics Report (https://thelead82.com) - 49 of 75 I File Info Extra File Info D

11:11:01 Accessed: 2020-06-27 16:21:01 4 Name: com.apple.shoebox.plist Created:Size: 1020 2020-05-09 bytes 0 Path: Library/Application Support/CloudDocs/session/containers/com.apple.shoebox.plist 16:10:44 5 SHA256: f1fb297c99f33374ee41ba89e1b15da0a238af93035165200a31efa48eb05a33 Modified: 2020-05-09 16:10:44 Accessed: 2020-05-11 14:40:31 Size: 126 bytes

4 Name: com.apple.iBooks.cloudData.plist Created: 2020-06-09 0 Path: Library/Application Support/CloudDocs/session/containers/com.apple.iBooks.cloudData.plist 11:11:00 6 SHA256: c8d6b5366d35df7d0fb7c1172e1361a4e8f10a219b1776f3e0e14f97b15da31b Modified: 2020-06-09 11:11:00 Accessed: 2020-06-27 16:21:01 Size: 3173 bytes

4 Name: com.apple.TextInput.plist Created: 2020-05-09 0 Path: Library/Application Support/CloudDocs/session/containers/com.apple.TextInput.plist 16:10:44 7 SHA256: 5d570460edd8a5954d68a1d17be529ecc97d4b1b12e64e0c82ff3afad4fad82a Modified: 2020-05-09 16:10:44 Accessed: 2020-05-11 14:40:31 Size: 90 bytes

4 Name: com.apple.SafariShared.History.plist Created: 2020-05-09 0 Path: Library/Application Support/CloudDocs/session/containers/com.apple.SafariShared.History.plist 16:10:44 8 SHA256: 9f890a4d8a3378be17e470336e287f026b407ee40d2818ef5327efcecde510ec Modified: 2020-05-09 16:10:44 Accessed: 2020-05-11 14:40:31 Size: 1341 bytes

4 Name: 57T9237FN3.net.whatsapp.WhatsApp.plist Created: 2020-05-11 0 Path: Library/Application Support/CloudDocs/session/containers/57T9237FN3.net.whatsapp.WhatsApp.plist 17:56:34 9 SHA256: 3cdc50a7c63f00c4570fd02bdf4b4571d2b04ad95b1802fd200efde445a2e99c Modified: 2020-05-11 17:56:34 Accessed: 2020-06-27 16:21:01 Size: 2408 bytes

4 Name: pkg_extensions.plist Created: 2020-04-19 1 Path: Library/Application Support/CloudDocs/pkg_extensions.plist 18:47:26 0 SHA256: 70bac0ca708f59efd902f2b8a892780e8ed74cab6d87c69471e1c337a615f055 Modified: 2020-04-19 18:47:26 Accessed: 2020-05-05 11:38:26 Size: 9752 bytes

4 Name: account.1 Created: 2020-05-09 1 Path: Library/Application Support/CloudDocs/account.1 16:10:36 1 SHA256: 4bdc6d4ebdf98eb9a3d8c1184e583ad285f3119f4e1ae7018ad750e1881f74c9 Modified: 2020-05-09 16:10:36 Accessed: 2020-05-11 14:40:31 Size: 11 bytes

4 Name: AddressBookImages.sqlitedb Created: 2020-05-02 1 Path: Library/AddressBook/AddressBookImages.sqlitedb 09:06:43 2 SHA256: 90215201efe461154e04d95579a463e1c4c66b5e2dfa282b6d8a440aeccdeb7d Modified: 2020-05-02 09:06:43 Accessed: 2020-04-01 17:10:42 Size: 65536 bytes

4 Name: Accounts3.sqlite Created: 2020-05-09 1 Path: Library/Accounts/VerifiedBackup/Accounts3.sqlite 14:19:42 3 SHA256: f6ee014dfa8ad59bec5a6925aa211299ad979ebb3edca3fcf76ca3a8d9c4a844 Modified: 2020-05-09 14:19:42 Accessed: 2020-05-09 14:19:42 Size: 233472 bytes

4 Name: AXSSPunctuation.sqlite Created: 2020-04-26 1 Path: Library/Accessibility/AXSSPunctuation/AXSSPunctuation.sqlite 17:02:33 4 SHA256: 5136bfeeb3aa91e32ce7e5bb08219d08c438d1572e3d681dccefdce70f6f9a2a Modified: 2020-04-26 17:02:33 Accessed: 2020-04-01 17:13:52 Size: 86016 bytes

4 Name: com.apple.RTTTranscripts.sqlite Created: 2020-05-11 1 Path: Library/Accessibility/com.apple.RTTTranscripts.sqlite 12:32:15 5 SHA256: d6a0fd7b006c42a2af1a468ac08fed0fbb980867cc9d6b882b8f745eac51aea6 Modified: 2020-05-11 12:32:15 Accessed: 2020-05-11 12:32:01 Size: 204800 bytes

4 Name: com.apple.ipTelephony.plist Created: 2020-04-01 1 Path: Library/Preferences/com.apple.ipTelephony.plist 17:10:34 6 SHA256: 944fde3bbe67fc876d1864b7fa9b9820d9491d3a9ac99002d6da7429317fe0aa Modified: 2020-04-01 17:10:34 Accessed: 2020-06-27 16:21:04 Size: 67 bytes

iREPAIR - Backup Forensics Report (https://thelead82.com) - 50 of 75 I File Info Extra File Info D

4 Name: com.apple.commcenter.callservices.plist Created: 2020-05-09 1 Path: Library/Preferences/com.apple.commcenter.callservices.plist 14:09:21 7 SHA256: 9ca1ef4e087447a6990eab2f253ad158b4925b6575c3fd4f93bcfb8738a7d9b2 Modified: 2020-05-09 14:09:21 Accessed: 2020-06-27 16:21:04 Size: 112 bytes

4 Name: Recordings.db Created: 2020-04-17 1 Path: Media/Recordings/Recordings.db 09:36:50 8 SHA256: cc7f10669a29420cf7f33e7b83a9dcd0fbc55374a2d78cad120c630df771da78 Modified: 2020-04-17 09:36:50 Accessed: 2020-04-17 09:36:25 Size: 86016 bytes

4 Name: CloudRecordings.db Created: 2020-04-17 1 Path: Media/Recordings/CloudRecordings.db 09:36:25 9 SHA256: 409f74e9c749a5c243894696d415e00416a3d3ce5535fa0876781e259fd1db30 Modified: 2020-04-17 09:36:25 Accessed: 2020-04-17 09:36:25 Size: 86016 bytes

4 Name: AssetManifest.plist Created: 2020-04-17 2 Path: Media/Recordings/AssetManifest.plist 09:40:52 0 SHA256: 97704a8960b4facceef54397a08fb5d0a456247c3627359215aa2a27df22656c Modified: 2020-04-17 09:40:52 Accessed: 2020-05-05 11:38:26 Size: 181 bytes

4 Name: part000001.jpg Created: 2020-05-09 2 Path: Library/SMS/Attachments/72/02/3B364B5D-AE86-4C88-9ADE-8C4A097AD6CA/part000001.jpg 16:29:18 1 SHA256: 1e1cc55aebec077aa0f89665b5a0725023db1f1d471f96b491cb260dcb9e9a35 Modified: 2020-05-09 16:29:18 Accessed: 2020-05-09 16:29:18 Size: 48738 bytes

4 Name: lskd.rl Created: 2020-04-15 2 Path: Library/lskd.rl 22:47:44 2 SHA256: 282e2c127b0f52aef205c9d7bd5e8803a3ccfc82fcb0a4d6ab18064cc00ebe81 Modified: 2020-04-15 22:47:44 Accessed: 2020-04-15 22:47:44 Size: 64 bytes

4 Name: group.com.apple.notes.plist Created: 2020-07-13 2 Path: Library/Preferences/group.com.apple.notes.plist 15:38:59 3 SHA256: c361a3be24ddcc4abef9222b4ff2f14ca760e0c660f8882692ce6fda609c0ee0 Modified: 2020-07-13 15:38:59 Accessed: 2020-07-13 15:38:59 Size: 328 bytes

4 Name: BE4433AC-4306-45CE-94C5-AFB9907FE335.jpg Created: 2020-07-13 2 Path: Accounts/586C4E7F-B5A2-44FD-8D28-B12A2CD8B6FC/FallbackImages/BE4433AC-4306-45CE-94C5-AFB9907FE335.jpg 15:38:56 4 SHA256: 8383e413ac19cb6c7484de095dd991c2604e10b111ecd174b7d0b6c75edd67a7 Modified: 2020-07-13 15:38:56 Accessed: 2020-07-13 15:38:56 Size: 358443 bytes

4 Name: IMG_0010.jpeg Created: 2020-07-13 2 Path: Accounts/586C4E7F-B5A2-44FD-8D28-B12A2CD8B6FC/Media/C58D1EA0-DFDA-4ADB-945C-54F8374CB28C/IMG_0010.jpeg 15:38:55 5 SHA256: a444b4969347c8c64739e226c9c1273ff3abcc0b7b6e4815bbb158ac6f51d30b Modified: 2020-07-13 15:38:55 Accessed: 2020-07-13 15:38:55 Size: 31409 bytes

4 Name: BE4433AC-4306-45CE-94C5-AFB9907FE335-1-768x768-1.png Created: 2020-07-13 2 Path: Accounts/586C4E7F-B5A2-44FD-8D28-B12A2CD8B6FC/Previews/BE4433AC-4306-45CE-94C5-AFB9907FE335-1-768x768-1.png 15:38:55 6 SHA256: 4f9d3dacba2021c81bfdafc751a5afea67d207641ac30bd4d9535a364dfd3f9e Modified: 2020-07-13 15:38:55 Accessed: 2020-07-13 15:38:55 Size: 153083 bytes

4 Name: BE4433AC-4306-45CE-94C5-AFB9907FE335-1-768x768-0.png Created: 2020-07-13 2 Path: Accounts/586C4E7F-B5A2-44FD-8D28-B12A2CD8B6FC/Previews/BE4433AC-4306-45CE-94C5-AFB9907FE335-1-768x768-0.png 15:38:55 7 SHA256: 68cc9696e47e472db4e4934b06a353bdcc41b6f711f27263403698197f88f990 Modified: 2020-07-13 15:38:55 Accessed: 2020-07-13 15:38:55 Size: 156777 bytes

4 Name: 5BFB6A5E-6420-4EBC-8700-5CD1CF19AF85-1-384x192-0.png Created: 2020-07-13 2 Path: Accounts/586C4E7F-B5A2-44FD-8D28-B12A2CD8B6FC/Previews/5BFB6A5E-6420-4EBC-8700-5CD1CF19AF85-1-384x192-0.png 15:38:55 8 SHA256: 2af3f67dc43bb192215dee121f20f5397c127c8b21679633453d76aa57139d7f Modified: 2020-07-13 15:38:55 Accessed: 2020-07-13 15:38:55 Size: 70005 bytes

4 Name: 5BFB6A5E-6420-4EBC-8700-5CD1CF19AF85-1-192x96-0.png Created: 2020-07-13 2 Path: Accounts/586C4E7F-B5A2-44FD-8D28-B12A2CD8B6FC/Previews/5BFB6A5E-6420-4EBC-8700-5CD1CF19AF85-1-192x96-0.png 15:38:55 9 SHA256: cd5079d2c723b5c33217ba6a757cfb3676514fc3259d5405376e632f41d02c17 Modified: 2020-07-13 15:38:55

iREPAIR - Backup Forensics Report (https://thelead82.com) - 51 of 75 I File Info Extra File Info D

Accessed: 2020-07-13 15:38:55 Size: 21147 bytes 4 Name: NoteStore.sqlite Created: 2020-05-29 3 Path: Backups/Backup-2020-06-27_16-20-01-E4E37B36-68B8-4D67-94A4-166ED5AF0DB5/NoteStore.sqlite 16:33:26 0 SHA256: df5cc276268297284337a79177fac5601b52cf5dfb572809d206e1c34c1e0f57 Modified: 2020-05-29 16:33:26 Accessed: 2020-06-27 16:20:01 Size: 282624 bytes

4 Name: NoteStore.sqlite Created: 2020-05-11 3 Path: Backups/Backup-2020-05-22_17-11-48-B89B302F-D1FE-4521-AC6F-A20B2E4E144E/NoteStore.sqlite 11:52:12 1 SHA256: a7b5e2f28fbae0574cf5c9d2a3ec9b0f4e732b75b5be94c117b5eca83ccc2efd Modified: 2020-05-11 11:52:12 Accessed: 2020-06-27 16:19:40 Size: 290816 bytes

4 Name: NoteStore.sqlite Created: 2020-04-19 3 Path: Backups/Backup-2020-05-05_11-37-35-C9B84FB7-43BE-41F7-A242-FBEB5850DB7C/NoteStore.sqlite 18:47:27 2 SHA256: 3a669a927566674577234745aa44033c21912cc9c424dfa59480e9d7da89a1c8 Modified: 2020-04-19 18:47:27 Accessed: 2020-06-27 16:19:40 Size: 229376 bytes

4 Name: SharingExtensionDeviceUUID Created: 2020-05-08 3 Path: SharingExtensionDeviceUUID 14:33:47 3 SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Modified: 2020-05-08 14:33:47 Accessed: 2020-06-27 16:19:40 Size: 0 bytes

4 Name: NoteStore.sqlite Created: 2020-07-13 3 Path: NoteStore.sqlite 15:41:15 4 SHA256: a987d7e068a9cd0199eda98b3bff1ecfe91267e88741aa667895a379a16d9225 Modified: 2020-07-13 15:41:15 Accessed: 2020-07-13 15:39:04 Size: 278528 bytes

4 Name: NSFileProviderDomainDefaultIdentifier.plist Created: 2020-04-01 3 Path: Library/Preferences/com.apple.FileProvider/com.apple.FileProvider.LocalStorage/NSFileProviderDomainDefaultIdentifier.plist 17:20:45 5 SHA256: 716dac753b3ee8161426efc31307c2ce412826aa0e6f1b23c61158d769dcb8e1 Modified: 2020-04-01 17:20:45 Accessed: 2020-06-27 16:19:40 Size: 108 bytes

4 Name: com.apple.mobilemail.plist Created: 2020-05-08 3 Path: Library/Preferences/com.apple.mobilemail.plist 14:39:29 6 SHA256: a7c9de767ff661e113b5374135b30cf7d74a4d0dfcc24ccae73a03321bfb0d34 Modified: 2020-05-08 14:39:29 Accessed: 2020-06-27 16:19:40 Size: 98 bytes

4 Name: fd26f155-b372-48ab-be19-e11ac93ec584.webp Created: 2020-05-02 3 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/fd26f155-b372-48ab-be19-e11ac93ec584.webp 09:06:06 7 SHA256: 997e6df5b4f6b1d38b543e6382375ac63f2bd745daf281cad8d81e8d0e9f2141 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 18664 bytes

4 Name: f3cf2aa7-ca56-4e5a-8304-82dc270ebdd9.webp Created: 2020-05-02 3 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/f3cf2aa7-ca56-4e5a-8304-82dc270ebdd9.webp 09:06:06 8 SHA256: 4591049791d5593e12e82d0fa0e8236024150d6b397ac20c26c8dc0d823cd191 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 9672 bytes

4 Name: e3c8d2d1-88bf-4840-8c99-c8422f2d6952.webp Created: 2020-05-02 3 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/e3c8d2d1-88bf-4840-8c99-c8422f2d6952.webp 09:06:06 9 SHA256: b92d43833bb97782cd12d77fb16d7d9b9c2d93faac57b1fb63bbb8de5ba37865 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 8764 bytes

4 Name: df96a338-7b9d-441b-bc80-e8b6ba1c1fb5.webp Created: 2020-05-02 4 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/df96a338-7b9d-441b-bc80-e8b6ba1c1fb5.webp 09:06:06 0 SHA256: 98267fedaeac67a4cc6b5e18a2444249fba5b6363a690115139675d53a63b0ff Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 8076 bytes

4 Name: daed5a48-fc2b-4261-9e94-eabe4d9585e5.webp Created: 2020-05-02 4 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/daed5a48-fc2b-4261-9e94-eabe4d9585e5.webp 09:06:06 1 SHA256: 05c663045bf27aa9fe80ae0081020609c9219f6b91b2a40b042830c1fa1c0570 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 10016 bytes

4 Name: d4edf2df-72a5-403d-88a0-3a1ec2b4e38b.webp Created: 2020-05-02

iREPAIR - Backup Forensics Report (https://thelead82.com) - 52 of 75 I File Info Extra File Info D

4 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/d4edf2df-72a5-403d-88a0-3a1ec2b4e38b.webp 09:06:06 2 SHA256: 29202e364d53b79111566e48c994d4781915c9a5db3da71f55e4a090300c833d Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 11208 bytes 4 Name: d2d59916-5ac9-4c9a-bff1-518c4a6467d2.webp Created: 2020-05-02 4 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/d2d59916-5ac9-4c9a-bff1-518c4a6467d2.webp 09:06:06 3 SHA256: 38403c9ff0eddb1b42a93b54dff2088b7233a8b1616e5136643e7065f135bcd8 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 15108 bytes

4 Name: d137d2ad-4460-4e2f-b56e-397f7cfc3556.webp Created: 2020-05-02 4 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/d137d2ad-4460-4e2f-b56e-397f7cfc3556.webp 09:06:06 4 SHA256: 802a209f1e2e1d6ee8f2c7c4202ec9c90054f3c706f790ead7523c773e0eb656 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 10624 bytes

4 Name: c437842c-3a93-449e-b096-b3b597003d47.webp Created: 2020-05-02 4 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/c437842c-3a93-449e-b096-b3b597003d47.webp 09:06:06 5 SHA256: e7726be4da2ee6b3463e2c277fc64cfe7f8fd929e1ac386b716ed35402111c91 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 11130 bytes

4 Name: c345e962-2643-43b7-ae79-a229c47f82a5.webp Created: 2020-05-02 4 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/c345e962-2643-43b7-ae79-a229c47f82a5.webp 09:06:06 6 SHA256: d518237997024108f2cd89ef72f227bf37acfe7f5384727835daf777319478fd Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 12400 bytes

4 Name: bfe44296-16de-4d7c-a84d-11915424c199.webp Created: 2020-05-02 4 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/bfe44296-16de-4d7c-a84d-11915424c199.webp 09:06:06 7 SHA256: c09820a7bcfe9bc10407850acf48d0e8ce053621f20b1a35766b4ff671274b68 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 13404 bytes

4 Name: 9d870666-78b4-4871-9881-0ccb4525233d.webp Created: 2020-05-02 4 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/9d870666-78b4-4871-9881-0ccb4525233d.webp 09:06:06 8 SHA256: 9e4439f4e2acbda2dd4a84d17a038a62c07061fbe2b50a7d0833e8c387a1fc5e Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 10142 bytes

4 Name: 8e83a577-c7c3-45a3-9e8e-1d7e0c78af45.webp Created: 2020-05-02 4 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/8e83a577-c7c3-45a3-9e8e-1d7e0c78af45.webp 09:06:06 9 SHA256: f93038a6cfaec35b0b188a2500ae93f343924785a32f11244336d2da5dd46560 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 11478 bytes

4 Name: 84426fba-f7d2-4e8b-8a6d-ab4c72355f21.webp Created: 2020-05-02 5 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/84426fba-f7d2-4e8b-8a6d-ab4c72355f21.webp 09:06:06 0 SHA256: 0063c1ed59e19dddd1b640a689d35ca5f5a2b720d04e2c8c356f79a354009168 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 12782 bytes

4 Name: 829526fb-f9f7-41f3-ba0b-3c408fd1fc17.webp Created: 2020-05-02 5 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/829526fb-f9f7-41f3-ba0b-3c408fd1fc17.webp 09:06:06 1 SHA256: b918ace1d4e4a8446a80807ad856156b6783934f840095773e2c284281074cf7 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 13730 bytes

4 Name: 81655f52-1fa3-4595-a0fd-e24d049dc123.webp Created: 2020-05-02 5 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/81655f52-1fa3-4595-a0fd-e24d049dc123.webp 09:06:06 2 SHA256: cf87a46b8697a7b92c6771a1fd5b0370f604dfe0eb25c71b03d29e0b3d29372f Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 11312 bytes

4 Name: 79c6c954-bc53-4418-811c-8026e324a49c.webp Created: 2020-05-02 5 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/79c6c954-bc53-4418-811c-8026e324a49c.webp 09:06:06 3 SHA256: 52e3d18d4dcad9ac202d719a96ce2b11db16bf14be3cf232d7cb96c4938efc90 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 10940 bytes

4 Name: 77d3dc84-bcb1-4d0c-8dfb-ae5e93f436ba.png Created: 2020-05-02 5 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/77d3dc84-bcb1-4d0c-8dfb-ae5e93f436ba.png 09:06:06 4 SHA256: e6f3738b8dec78543669748958184da4931c98ef2a9482af68f7228c8bf9dddd Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40

iREPAIR - Backup Forensics Report (https://thelead82.com) - 53 of 75 I File Info Extra File Info D

4 Name: 724e70da-5973-42ae-854a-1a2b12827369.webp Created:Size: 6192 2020-05-02 bytes 5 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/724e70da-5973-42ae-854a-1a2b12827369.webp 09:06:06 5 SHA256: 3841b15a2a9a4951e6d19b3460e695d85a64707b97e6da9e6525012f7d4662fd Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 11820 bytes

4 Name: 57c012ae-553b-4be2-b0eb-2815247b46b8.webp Created: 2020-05-02 5 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/57c012ae-553b-4be2-b0eb-2815247b46b8.webp 09:06:06 6 SHA256: 8a2c1c26f9bf6b0a5ac48865b2dc7eabe0b45d32bcada0c0fd58e49785ac6a1a Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 12230 bytes

4 Name: 452de452-b9e2-4bdc-a4e6-665896dcea06.webp Created: 2020-05-02 5 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/452de452-b9e2-4bdc-a4e6-665896dcea06.webp 09:06:06 7 SHA256: aedf2a8e22b469f75c15fabac5a0b08944a3a10a4fbd0be292df0fe640d37b5c Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 11534 bytes

4 Name: 34040b4e-ecef-481e-87f6-8ab6320e8f08.webp Created: 2020-05-02 5 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/34040b4e-ecef-481e-87f6-8ab6320e8f08.webp 09:06:06 8 SHA256: b67ef21327333c8effe2a263e537926bb0b0f5ef3e707d093ad52e84b2a35b76 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 9756 bytes

4 Name: 2bb19547-7f0d-46e7-b64e-d43f353efd8d.webp Created: 2020-05-02 5 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/2bb19547-7f0d-46e7-b64e-d43f353efd8d.webp 09:06:06 9 SHA256: 1fccfd2f868d3c83c52fbab3cfef3788046fdcb5c7441e1b280ea08b02749341 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 11372 bytes

4 Name: 120af02c-1da4-4e44-a1d0-330838aa2dc1.webp Created: 2020-05-02 6 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/120af02c-1da4-4e44-a1d0-330838aa2dc1.webp 09:06:06 0 SHA256: 7325417361f09dee254c664080f4d93106a77be3e16e6034b2ea2d0984e218db Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 12452 bytes

4 Name: 04695761-a5fe-4c79-81b9-94851e4ce310.webp Created: 2020-05-02 6 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/04695761-a5fe-4c79-81b9-94851e4ce310.webp 09:06:06 1 SHA256: cd6227b5f9ffd8e03745b85ee27312f719caedaf0cf56a5ab180630e38b2e0af Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 12696 bytes

4 Name: 02c1ff64-409e-4acd-9ddc-e11277559e93.webp Created: 2020-05-02 6 Path: stickers/91464c92a1e65c878362771dd0661b05d8ac5c2488087eaf7fbef6d7b4e923f9/02c1ff64-409e-4acd-9ddc-e11277559e93.webp 09:06:06 2 SHA256: 22e1ba764d66f2c4adf48362189d3537665e0bdd35719fee77d1dcaf3f102191 Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 16208 bytes

4 Name: wam.wam Created: 2020-06-26 6 Path: FieldStats2/WhatsApp/wam.wam 14:50:53 3 SHA256: fd0c6e7e01a04ea951806b5d9aad3e85236592cb736130013888ff041aeb0173 Modified: 2020-06-26 14:50:53 Accessed: 2020-06-27 16:19:40 Size: 458752 bytes

4 Name: Biz.sqlite Created: 2020-06-26 6 Path: Biz/Biz.sqlite 14:51:13 4 SHA256: 972e03b435fdc1b69846f7a8f7a4c1cdf2dbd585fffe81af3de8c19048121a76 Modified: 2020-06-26 14:51:13 Accessed: 2020-06-27 16:19:40 Size: 86016 bytes

4 Name: group.net.whatsapp.WhatsApp.shared.plist Created: 2020-06-26 6 Path: Library/Preferences/group.net.whatsapp.WhatsApp.shared.plist 14:51:19 5 SHA256: 0660d9a24a24283b35e140734e550798dc29f200efdfe7bcbb334af7b782be96 Modified: 2020-06-26 14:51:19 Accessed: 2020-06-27 16:19:40 Size: 9531 bytes

4 Name: f7ff5893-a1eb-43ae-b6a2-3b955f36b1bf.thumb Created: 2020-05-02 6 Path: Message/Media/[email protected]/f/7/f7ff5893-a1eb-43ae-b6a2-3b955f36b1bf.thumb 09:19:25 6 SHA256: 64658fac49d5c3e10721af5c81e469d56972eb1f4d01a4a39771d7173224f611 Modified: 2020-05-02 09:19:25 Accessed: 2020-06-27 16:19:40 Size: 4372 bytes

4 Name: f7ff5893-a1eb-43ae-b6a2-3b955f36b1bf.mp4 Created: 2020-05-02 6 Path: Message/Media/[email protected]/f/7/f7ff5893-a1eb-43ae-b6a2-3b955f36b1bf.mp4 09:19:26 7 SHA256: 39123d4fa523f5ab3ec6c3382ca05a5fffaf09ec181267d9dfb2114df06910f7 Modified: 2020-05-02

iREPAIR - Backup Forensics Report (https://thelead82.com) - 54 of 75 I File Info Extra File Info D

09:19:26 Accessed: 2020-06-27 16:19:40 4 Name: cba0fbba-b817-4791-bca6-23122cbbcfc0.thumb Created:Size: 970095 2020-05-02 bytes 6 Path: Message/Media/[email protected]/c/b/cba0fbba-b817-4791-bca6-23122cbbcfc0.thumb 09:19:05 8 SHA256: 8b6ce7f196c78ec778cfda14a2a0113eef4edd7ce665089214e6e80cdf886dbf Modified: 2020-05-02 09:19:05 Accessed: 2020-06-27 16:19:40 Size: 6215 bytes

4 Name: cba0fbba-b817-4791-bca6-23122cbbcfc0.jpg Created: 2020-05-02 6 Path: Message/Media/[email protected]/c/b/cba0fbba-b817-4791-bca6-23122cbbcfc0.jpg 09:39:11 9 SHA256: a444b4969347c8c64739e226c9c1273ff3abcc0b7b6e4815bbb158ac6f51d30b Modified: 2020-05-02 09:39:11 Accessed: 2020-06-27 16:19:40 Size: 31409 bytes

4 Name: 48570005956-1499351901.thumb Created: 2020-05-12 7 Path: Media/Profile/48570005956-1499351901.thumb 18:35:17 0 SHA256: ce5b5bf99fb197274d9d613b7a2ed879a71de4da47762c75ae64978c01db55cf Modified: 2020-05-12 18:35:17 Accessed: 2020-06-27 16:19:40 Size: 4558 bytes

4 Name: emoji.sqlite Created: 2020-06-26 7 Path: emoji.sqlite 14:50:51 1 SHA256: 7cdb572d2814c8996d4e6a8e8a8ab37c5d1cd99a1e4b395950a73d93c41a1e98 Modified: 2020-06-26 14:50:51 Accessed: 2020-06-27 16:19:40 Size: 28672 bytes

4 Name: current_wallpaper.jpg Created: 2020-05-02 7 Path: current_wallpaper.jpg 09:05:06 2 SHA256: fddfa3586802abd52ddc73243a4d577a806b792cbc90bdd93e54c3187c2dd49c Modified: 2020-05-02 09:05:06 Accessed: 2020-06-27 16:19:40 Size: 711110 bytes

4 Name: consumer_version Created: 2020-05-02 7 Path: consumer_version 09:05:05 3 SHA256: d67367e35f98863f9ff998d06a0214b625c8f290fcdb3c1d0654b11f2aab45a0 Modified: 2020-05-02 09:05:05 Accessed: 2020-06-27 16:19:40 Size: 7 bytes

4 Name: Sticker.sqlite Created: 2020-06-26 7 Path: Sticker.sqlite 14:51:13 4 SHA256: 8a4655fcf9d59c9a29c5e527543f261de9036c4994cd324223cdae57c09d4e93 Modified: 2020-06-26 14:51:13 Accessed: 2020-06-27 16:19:40 Size: 90112 bytes

4 Name: Ranking.sqlite Created: 2020-06-26 7 Path: Ranking.sqlite 14:51:13 5 SHA256: 5bbb268d36e19373eb753de3d9675e42524e1771d227fda68937e688eefee0ab Modified: 2020-06-26 14:51:13 Accessed: 2020-06-27 16:19:40 Size: 45056 bytes

4 Name: ContactsV2.sqlite Created: 2020-06-26 7 Path: ContactsV2.sqlite 14:51:13 6 SHA256: d86859a57d14ff6d9b6d22b98fb1b7cbb9b263811fc847ca8492433b137418b6 Modified: 2020-06-26 14:51:13 Accessed: 2020-06-27 16:19:40 Size: 53248 bytes

4 Name: ChatStorage.sqlite Created: 2020-06-26 7 Path: ChatStorage.sqlite 14:51:13 7 SHA256: 1b677d9948b8d3ed062b8458fe76a2b2325a49a16086dbdae2181d1e77c24d92 Modified: 2020-06-26 14:51:13 Accessed: 2020-06-27 16:19:40 Size: 344064 bytes

4 Name: CallHistory.sqlite Created: 2020-05-02 7 Path: CallHistory.sqlite 09:05:06 8 SHA256: 6ba6d304f8f235e041f0b6cae2efd0b340da84a7ae9cf815cf0b9bab7411c360 Modified: 2020-05-02 09:05:06 Accessed: 2020-06-27 16:19:40 Size: 49152 bytes

4 Name: BackedUpKeyValue.sqlite Created: 2020-06-26 7 Path: BackedUpKeyValue.sqlite 14:51:13 9 SHA256: f86af9cdb637c32fc0750edf31bbf494d18f49f1539270c7dfb5a200a194b5c2 Modified: 2020-06-26 14:51:13 Accessed: 2020-06-27 16:19:40 Size: 36864 bytes

4 Name: NSFileProviderDomainDefaultIdentifier.plist Created: 2020-04-19

iREPAIR - Backup Forensics Report (https://thelead82.com) - 55 of 75 I File Info Extra File Info D

8 Path: Library/Preferences/com.apple.FileProvider/com.apple.CloudDocs.MobileDocumentsFileProvider/NSFileProviderDomainDefaultIdentifier.plist 18:47:28 0 SHA256: 716dac753b3ee8161426efc31307c2ce412826aa0e6f1b23c61158d769dcb8e1 Modified: 2020-04-19 18:47:28 Accessed: 2020-06-27 16:19:40 Size: 108 bytes 4 Name: net.whatsapp.WhatsApp.plist Created: 2020-06-26 8 Path: Library/Preferences/net.whatsapp.WhatsApp.plist 14:51:00 1 SHA256: c0b2a567e94d3ca1d5270871ac9724b1b76b30b5135d98d4df5cfec8174e214f Modified: 2020-06-26 14:51:00 Accessed: 2020-06-27 16:19:40 Size: 2043 bytes

4 Name: UITextInputContextIdentifiers.plist Created: 2020-05-02 8 Path: Library/Preferences/UITextInputContextIdentifiers.plist 09:06:47 2 SHA256: 3135856569b453d2c9025949312abcd348a8c8e9b05e3c101574e907555d5ddc Modified: 2020-05-02 09:06:47 Accessed: 2020-06-27 16:19:40 Size: 456 bytes

4 Name: network-usage.data Created: 2020-06-26 8 Path: Library/network-usage.data 14:50:58 3 SHA256: e6e5a27fd5dedb486b9afd4708dacf74f476efaff6eb381ecb4845285605fdb7 Modified: 2020-06-26 14:50:58 Accessed: 2020-06-27 16:19:40 Size: 29 bytes

4 Name: blockedcontacts.dat Created: 2020-05-02 8 Path: Documents/blockedcontacts.dat 09:06:06 4 SHA256: 22d9c9de1e98ec48c008c8d00c0fd2b68ab8c2178558384cc189d6e24918bf1a Modified: 2020-05-02 09:06:06 Accessed: 2020-06-27 16:19:40 Size: 217 bytes

4 Name: SyncHistory.plist Created: 2020-05-22 8 Path: Documents/SyncHistory.plist 17:11:41 5 SHA256: e9bdae66d23f53fd78c3a656839ce11cb41ee2358305ae7730344dc74880c491 Modified: 2020-05-22 17:11:41 Accessed: 2020-06-27 16:19:40 Size: 334 bytes

4 Name: StatusMessages.plist Created: 2020-05-02 8 Path: Documents/StatusMessages.plist 09:05:06 6 SHA256: cdf2916aacd7af908ad0ec730f85070ebbecfa8c89a5ebd3f69ed2e2c8fcc90a Modified: 2020-05-02 09:05:06 Accessed: 2020-06-27 16:19:40 Size: 589 bytes

4 Name: PayloadDependency.plist Created: 2020-05-02 8 Path: Library/ConfigurationProfiles/PayloadDependency.plist 08:40:28 7 SHA256: 97704a8960b4facceef54397a08fb5d0a456247c3627359215aa2a27df22656c Modified: 2020-05-02 08:40:28 Accessed: 2020-06-27 16:21:02 Size: 181 bytes

4 Name: CloudConfigurationDetails.plist Created: 2020-06-27 8 Path: Library/ConfigurationProfiles/CloudConfigurationDetails.plist 16:34:19 8 SHA256: 493a9b4a89af15939d0ed8f838d97fe064e76b71415f21d7d71538cfd0adabfe Modified: 2020-06-27 16:34:19 Accessed: 2020-06-27 16:34:19 Size: 411 bytes

4 Name: com.apple.RemoteManagement.ManagementTestExtension.plist Created: 2020-04-07 8 Path: Library/Preferences/com.apple.RemoteManagement.ManagementTestExtension.plist 13:12:47 9 SHA256: ba5dbbf4b39382d972594ec653cc7c18f9446fc082fc2a4e07e9380d9911c820 Modified: 2020-04-07 13:12:47 Accessed: 2020-06-27 16:19:40 Size: 319 bytes

4 Name: TrustStore.sqlite3 Created: 2020-04-01 9 Path: TrustStore.sqlite3 17:11:50 0 SHA256: a147ab39208650cf9ed4ad13ae92c3efd6baccf879050c74bf8e90de503c1c53 Modified: 2020-04-01 17:11:50 Accessed: 2020-04-01 17:11:50 Size: 16384 bytes

4 Name: com.apple.tips.TipsWidgetExtension.plist Created: 2020-04-20 9 Path: Library/Preferences/com.apple.tips.TipsWidgetExtension.plist 03:26:43 1 SHA256: e0fe83bfdfc0c5e44ccc45e1d5eaa4f776d56b50f0912ca1f907621cf839dafd Modified: 2020-04-20 03:26:43 Accessed: 2020-06-27 16:19:40 Size: 2370 bytes

4 Name: group.com.facebook.family.plist Created: 2020-05-02 9 Path: Library/Preferences/group.com.facebook.family.plist 09:05:05 2 SHA256: 40f7e5a3144149bd8e28cfb80cef42d6f175ace00f761a6abd4f364fb2a7769b Modified: 2020-05-02 09:05:05 Accessed: 2020-06-27 16:19:40

iREPAIR - Backup Forensics Report (https://thelead82.com) - 56 of 75 I File Info Extra File Info D

4 Name: com.apple.mobilenotes.SharingExtension.plist Created:Size: 93 bytes2020-05-08 9 Path: Library/Preferences/com.apple.mobilenotes.SharingExtension.plist 14:33:47 3 SHA256: 464760d36ad82e09481bd577d59e116634ef2c4f1202e00b588b97d3ede7a32a Modified: 2020-05-08 14:33:47 Accessed: 2020-06-27 16:19:40 Size: 90 bytes

4 Name: com.apple.notes.analytics Created: 2020-07-13 9 Path: Library/Application Support/com.apple.kvs/ChangeTokens/com.apple.notes.analytics 15:42:16 4 SHA256: fc2c6bb4545e8bcf212fc1dd71a8cfedc1f9513d776cf60f9556bc9f0de502f8 Modified: 2020-07-13 15:42:16 Accessed: 2020-07-13 15:42:16 Size: 478 bytes

4 Name: group.com.apple.Maps.plist Created: 2020-04-17 9 Path: Library/Preferences/group.com.apple.Maps.plist 09:38:00 5 SHA256: d9158a1b959a44bc314627f9a18d4544da0d2c9e43db92272d13ef9431c427c2 Modified: 2020-04-17 09:38:00 Accessed: 2020-06-27 16:19:40 Size: 329 bytes

4 Name: musicAppBytecodeCache._jsc Created: 2020-04-19 9 Path: Library/com.apple.Music/musicAppDataVault/musicAppBytecodeCache._jsc 18:32:32 6 SHA256: 04199e36c606d8b64324e6f51b6967b6abb0b53906021567ac821bcf007b7423 Modified: 2020-04-19 18:32:32 Accessed: 2020-06-27 16:19:40 Size: 5526428 bytes

4 Name: com.apple.Music.ScriptingLocalStorage.plist Created: 2020-04-19 9 Path: Library/Preferences/com.apple.Music.ScriptingLocalStorage.plist 18:32:47 7 SHA256: 6ba5db4a1cb7466ead33337dced0957498e647958b964dc384462c5288d53476 Modified: 2020-04-19 18:32:47 Accessed: 2020-06-27 16:19:40 Size: 30909 bytes

4 Name: com.apple.metrickitd.plist Created: 2020-07-21 9 Path: Library/Preferences/com.apple.metrickitd.plist 19:39:27 8 SHA256: 72eb314dc4bb13f677da50b6a71271d3c60ae78474b41679e73636532e21c48e Modified: 2020-07-21 19:39:27 Accessed: 2020-07-21 19:39:27 Size: 170 bytes

4 Name: DeliveredNotificationshc18zY Created: 2020-07-16 9 Path: Library/UserNotifications/BAEC9EC8-BC7A-4E3D-BB38-EFAB475772D4/staging/DeliveredNotificationshc18zY 09:32:38 9 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: DeliveredNotificationsHb7EaX Created: 2020-07-16 0 Path: Library/UserNotifications/D1600195-BD4D-4E88-9D77-F08A4B52925A/staging/DeliveredNotificationsHb7EaX 09:32:38 0 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: com.apple.mobileslideshow.plist Created: 2020-07-21 0 Path: Library/Preferences/com.apple.mobileslideshow.plist 20:04:07 1 SHA256: 4632dec2b2d1e9dc12be3c3f803b3e48ae4d243858e9886ad28e929f4755bd2f Modified: 2020-07-21 20:04:07 Accessed: 2020-07-21 20:04:07 Size: 1054 bytes

5 Name: DeliveredNotifications0jufsG Created: 2020-07-16 0 Path: Library/UserNotifications/33E3F10E-FCB4-41C6-9BB7-38DC514390D2/staging/DeliveredNotifications0jufsG 09:32:38 2 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: clients.plist Created: 2020-07-22 0 Path: Library/Caches/locationd/clients.plist 08:26:02 3 SHA256: 0752eeebffdf7984c40d38797bf3d5a4dab0eefffbfe3e0e220eb298d33c1bc6 Modified: 2020-07-22 08:26:02 Accessed: 2020-07-22 08:26:02 Size: 12684 bytes

5 Name: com.apple.messages.nicknames.plist Created: 2020-07-16 0 Path: Library/Preferences/com.apple.messages.nicknames.plist 10:04:04 4 SHA256: 8b7b4b32e339a71f3e071f2be46a6ce158af4118d6ee7dda754669431c979a8e Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 224 bytes

5 Name: com.apple.wifi.plist Created: 2020-07-16 0 Path: SystemConfiguration/com.apple.wifi.plist 10:09:31 5 SHA256: 9d7b594966545e0d6d61e1fe91abad09e13039c738f274b437caa79322424e74 Modified: 2020-07-16

iREPAIR - Backup Forensics Report (https://thelead82.com) - 57 of 75 I File Info Extra File Info D

10:09:31 Accessed: 2020-07-16 10:09:31 5 Name: DeliveredNotificationsIWpLrY Created:Size: 4319 2020-07-16 bytes 0 Path: Library/UserNotifications/FAF3C5AC-5924-4DBC-8D66-8760877FA452/staging/DeliveredNotificationsIWpLrY 09:32:39 6 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: Schedule.plist Created: 2020-07-20 0 Path: Library/UserNotifications/90C5E1CB-5C3F-460E-89F8-2824593D24CE/Schedule.plist 09:12:42 7 SHA256: 8a325533bea9c4978bfb57544113f3fb551268bdce4ede9cdbe97b1046c4c55d Modified: 2020-07-20 09:12:42 Accessed: 2020-07-20 09:12:42 Size: 377 bytes

5 Name: com.apple.softwareupdateservices.ui.ios.plist Created: 2020-07-16 0 Path: Library/Preferences/com.apple.softwareupdateservices.ui.ios.plist 09:45:39 8 SHA256: 13bf583de440bbb822140847bc480e3c061c7c2e0a93893b160e403a08542a43 Modified: 2020-07-16 09:45:39 Accessed: 2020-07-16 09:45:39 Size: 816 bytes

5 Name: com.apple.mobilesafari.plist Created: 2020-07-16 0 Path: Library/Preferences/com.apple.mobilesafari.plist 09:56:50 9 SHA256: bd53a322d90a07059584147945d06a0dd87a9efa4b0a4e6441144694cc01e1f3 Modified: 2020-07-16 09:56:50 Accessed: 2020-07-16 09:56:50 Size: 1135 bytes

5 Name: DeliveredNotificationsjbkejZ Created: 2020-07-16 1 Path: Library/UserNotifications/1EF3C7E2-3B70-4CA2-947F-D3EE04E3F065/staging/DeliveredNotificationsjbkejZ 09:32:39 0 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: com.apple.thermalmonitor.upostepper.plist Created: 2020-07-16 1 Path: Library/Preferences/com.apple.thermalmonitor.upostepper.plist 10:04:04 1 SHA256: a006da549495aeb1b2f9733981df054405236854c540817be9c28941bcb065b1 Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 137 bytes

5 Name: DeliveredNotifications8hxIVW Created: 2020-07-16 1 Path: Library/UserNotifications/C1DABCD4-6EAA-4096-9980-2C38D5EDC6BE/staging/DeliveredNotifications8hxIVW 09:32:39 2 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: DeliveredNotificationslbYJvI Created: 2020-07-16 1 Path: Library/UserNotifications/F218301F-2CDE-4C67-8DA4-CBA01E3538B0/staging/DeliveredNotificationslbYJvI 09:32:39 3 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: DeliveredNotifications9gorIR Created: 2020-07-16 1 Path: Library/UserNotifications/D8D9A43E-B47C-47EE-A3E2-97E0AB4DBB2E/staging/DeliveredNotifications9gorIR 09:32:38 4 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: DeliveredNotificationsKTUZOp Created: 2020-07-16 1 Path: Library/UserNotifications/BAE7D1D3-982B-4045-9713-1F966C8EB98E/staging/DeliveredNotificationsKTUZOp 09:32:38 5 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: Categories.plist Created: 2020-07-16 1 Path: Library/UserNotifications/8E84E640-90CD-4475-ADE7-A5D3D27B2A12/Categories.plist 10:05:53 6 SHA256: 6e5c294acee53f875a4ad5dcd9a3853727679f22c8b196b46f6af1cde578a48d Modified: 2020-07-16 10:05:53 Accessed: 2020-07-16 10:05:53 Size: 5791 bytes

5 Name: .GlobalPreferences.plist Created: 2020-07-16 1 Path: mobile/.GlobalPreferences.plist 10:04:06 7 SHA256: cad994906a4a4887daaa15747c7f6cb6b969014633cb664e932849215f48a4e0 Modified: 2020-07-16 10:04:06 Accessed: 2020-07-16 10:04:06 Size: 377 bytes

iREPAIR - Backup Forensics Report (https://thelead82.com) - 58 of 75 I File Info Extra File Info D

5 Name: com.apple.tailspin.plist Created: 2020-07-16 1 Path: Library/Preferences/com.apple.tailspin.plist 09:45:40 8 SHA256: 6f5b042406b1cdb2f6201fbb61af9f9fdbc01f5bc790bc639e78d763edcc21d2 Modified: 2020-07-16 09:45:40 Accessed: 2020-07-16 09:45:40 Size: 94 bytes

5 Name: com.apple.accessoryd.plugin.plist Created: 2020-07-22 1 Path: Library/Preferences/com.apple.accessoryd.plugin.plist 08:25:05 9 SHA256: 2f591e27a9cec89d459e911aa5674b2c05c7e7f126b59335ab2029e11909d317 Modified: 2020-07-22 08:25:05 Accessed: 2020-07-22 08:25:05 Size: 107 bytes

5 Name: com.apple.tipsd.plist Created: 2020-07-21 2 Path: Library/Preferences/com.apple.tipsd.plist 19:39:27 0 SHA256: ccebd3b2c9ab394976f502e8b6d34bf7d2334093de4bf77475b8327b207752c0 Modified: 2020-07-21 19:39:27 Accessed: 2020-07-21 19:39:27 Size: 5504 bytes

5 Name: com.apple.osanalytics.addaily.plist Created: 2020-07-22 2 Path: Library/Preferences/com.apple.osanalytics.addaily.plist 02:28:03 1 SHA256: 1fca761e17a3dd56a792b002aa57d06080fc2f65e1554affdb169d38cd1bbb5d Modified: 2020-07-22 02:28:03 Accessed: 2020-07-22 02:28:03 Size: 8495 bytes

5 Name: com.apple.triald.plist Created: 2020-07-21 2 Path: Library/Preferences/com.apple.triald.plist 13:35:20 2 SHA256: ef6cdf9441d7a9cfbaaf0af0bdc94dc2ae85d8ae270ba9050845520c0e333cc1 Modified: 2020-07-21 13:35:20 Accessed: 2020-07-21 13:35:20 Size: 101 bytes

5 Name: consolidated.db Created: 2020-07-21 2 Path: Library/Caches/locationd/consolidated.db 13:50:19 3 SHA256: b6c3d929800a008cb93cb7eeed7e128740b52e40b779d6bc3dd8d0941d3390bb Modified: 2020-07-21 13:50:19 Accessed: 2020-07-21 13:50:19 Size: 53248 bytes

5 Name: history.db Created: 2020-07-16 2 Path: Library/com.apple.internal.ck/history.db 10:05:47 4 SHA256: b71ca5256dd81442292be3921169892ca89d08d9220f9febd086780b2cfc7a84 Modified: 2020-07-16 10:05:47 Accessed: 2020-07-16 10:05:47 Size: 45056 bytes

5 Name: com.apple.routined.plist Created: 2020-07-22 2 Path: Library/Preferences/com.apple.routined.plist 08:26:49 5 SHA256: d356d241e9789312bbc95fbcbe43a4e71e81c45288a9a8239f14dea625c0c199 Modified: 2020-07-22 08:26:49 Accessed: 2020-07-22 08:26:49 Size: 2075 bytes

5 Name: sms.db Created: 2020-07-22 2 Path: Library/SMS/sms.db 03:17:57 6 SHA256: 0c8503da0366e43455a1ebbd8044837fc3f91c18ae7ce2d2e96a3586616a755a Modified: 2020-07-22 03:17:57 Accessed: 2020-07-22 03:17:57 Size: 327680 bytes

5 Name: Data-4CE468F4-9242-4DB1-A350-EF7515220E02.sqlite Created: 2020-07-21 2 Path: Library/Reminders/Container_v1/Stores/Data-4CE468F4-9242-4DB1-A350-EF7515220E02.sqlite 13:34:04 7 SHA256: 342f290c147c7c9c0fb0901cd3c4c6530232d9cde38cca5cccf65bbdf2fc950b Modified: 2020-07-21 13:34:04 Accessed: 2020-05-09 16:10:38 Size: 262144 bytes

5 Name: UserSettings.plist Created: 2020-07-16 2 Path: Library/UserConfigurationProfiles/UserSettings.plist 10:09:32 8 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-07-16 10:09:32 Accessed: 2020-07-16 10:09:32 Size: 42 bytes

5 Name: group.is.workflow.my.app.plist Created: 2020-07-22 2 Path: Library/Preferences/group.is.workflow.my.app.plist 00:48:11 9 SHA256: 951abfe4db4a37970ab51bc1b108094843dd2aabd14cdef39c954d53f39b272e Modified: 2020-07-22 00:48:11 Accessed: 2020-07-22 00:48:11 Size: 165 bytes

5 Name: com.apple.passd.plist Created: 2020-07-16 3 Path: Library/Preferences/com.apple.passd.plist 09:56:59 0 SHA256: 610e41afa8ef00c0706da38764e3461f27a11a68c675bdf8bd8eaa9927098f72 Modified: 2020-07-16 09:56:59

iREPAIR - Backup Forensics Report (https://thelead82.com) - 59 of 75 I File Info Extra File Info D

Accessed: 2020-07-16 09:56:59 Size: 282 bytes 5 Name: PublicEffectiveUserSettings.plist Created: 2020-07-16 3 Path: Library/UserConfigurationProfiles/PublicInfo/PublicEffectiveUserSettings.plist 09:45:28 1 SHA256: fdae1a29abf1406377ae7a96b0b062b7b45830307046b9101c22a9aa8dbdc919 Modified: 2020-07-16 09:45:28 Accessed: 2020-07-16 09:45:28 Size: 9140 bytes

5 Name: com.apple.accounts.exists.plist Created: 2020-07-22 3 Path: SystemConfiguration/com.apple.accounts.exists.plist 08:26:19 2 SHA256: c9a80393cbcfdf4339c1da53588d34dbe4371793b2f863b3bc8d12e2f96fc413 Modified: 2020-07-22 08:26:19 Accessed: 2020-07-22 08:26:19 Size: 1166 bytes

5 Name: DeliveredNotificationsjCB87v Created: 2020-07-16 3 Path: Library/UserNotifications/D92B71DF-E626-470C-BFF1-60AD069CD706/staging/DeliveredNotificationsjCB87v 09:32:39 3 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: com.apple.webcontentfilter.plist Created: 2020-07-16 3 Path: mobile/com.apple.webcontentfilter.plist 10:05:42 4 SHA256: 7e7b4a8ee270667672a7decbce0434432476fee9e5e2be76abced4f6c9d921ad Modified: 2020-07-16 10:05:42 Accessed: 2020-07-16 10:05:42 Size: 423 bytes

5 Name: gyroCal.db Created: 2020-07-22 3 Path: Library/Caches/locationd/gyroCal.db 08:26:02 5 SHA256: 30692d511d1ecf104f87ce653fb3983b6d82f9fa796d638c18f3112aed350e69 Modified: 2020-07-22 08:26:02 Accessed: 2020-07-04 07:39:02 Size: 53248 bytes

5 Name: DeliveredNotifications7U7vDl Created: 2020-07-16 3 Path: Library/UserNotifications/D04D26AE-C6DB-4C59-8B4B-8B39DA79CF17/staging/DeliveredNotifications7U7vDl 09:32:38 6 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: kvs.sqlitedb Created: 2020-07-16 3 Path: Library/com.apple.itunesstored/kvs.sqlitedb 10:05:50 7 SHA256: a1654f2edef81296541928a411667ad8a7809f96eeb5b12c7ef8b18e73e6e75e Modified: 2020-07-16 10:05:50 Accessed: 2020-07-16 10:05:50 Size: 16384 bytes

5 Name: DeliveredNotificationsdFqU3C Created: 2020-07-16 3 Path: Library/UserNotifications/A0EC8ED0-B7AE-4172-BFA6-D8FD04707973/staging/DeliveredNotificationsdFqU3C 09:32:39 8 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: ClientTruth.plist Created: 2020-07-16 3 Path: Library/UserConfigurationProfiles/ClientTruth.plist 09:45:28 9 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-07-16 09:45:28 Accessed: 2020-07-16 09:45:28 Size: 42 bytes

5 Name: DeliveredNotificationsVAYm5K Created: 2020-07-16 4 Path: Library/UserNotifications/E2BDCEB0-A3D5-410A-AFFB-02A249C850ED/staging/DeliveredNotificationsVAYm5K 09:32:39 0 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: Bookmarks.db Created: 2020-07-16 4 Path: Library/Safari/Bookmarks.db 10:10:35 1 SHA256: fe5932fdd959c69310c6481d99ff8311cf32f7c4e436f1fc50ea7d7fdfb2d4de Modified: 2020-07-16 10:10:35 Accessed: 2020-07-16 10:10:35 Size: 98304 bytes

5 Name: RecentAppLayouts.pb.lzfse Created: 2020-07-16 4 Path: Library/SpringBoard/RecentAppLayouts.pb.lzfse 10:06:02 2 SHA256: 094286f31f7badbecf31e0b60c9ae7c58129c887348cdb8429c087e863bf34fa Modified: 2020-07-16 10:06:02 Accessed: 2020-07-16 10:06:02 Size: 502 bytes

5 Name: com.apple.springboard.datamigrator.plist Created: 2020-07-16

iREPAIR - Backup Forensics Report (https://thelead82.com) - 60 of 75 I File Info Extra File Info D

4 Path: Library/Preferences/com.apple.springboard.datamigrator.plist 10:05:54 3 SHA256: 01e37904210fb4bc5b721bd31b1de502826a57c390d4df627b8621d3f2b68572 Modified: 2020-07-16 10:05:54 Accessed: 2020-07-16 10:05:54 Size: 71 bytes 5 Name: DeliveredNotificationsOrJfMC Created: 2020-07-16 4 Path: Library/UserNotifications/29E62845-5D97-4485-8D15-5B923A2543AD/staging/DeliveredNotificationsOrJfMC 09:32:39 4 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: MCOutstandingNagComputation Created: 2020-07-16 4 Path: Library/UserConfigurationProfiles/MCOutstandingNagComputation 10:09:32 5 SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Modified: 2020-07-16 10:09:32 Accessed: 2020-07-16 10:09:32 Size: 0 bytes

5 Name: com.apple.networkextension.plist Created: 2020-07-16 4 Path: com.apple.networkextension.plist 10:05:42 6 SHA256: 11cc841610e1c6efe0431c9767bb31fdc0a5ced34ef5dd845cf64a99d1be749c Modified: 2020-07-16 10:05:42 Accessed: 2020-07-16 10:05:42 Size: 8659 bytes

5 Name: DeliveredNotificationsFrBncJ Created: 2020-07-16 4 Path: Library/UserNotifications/E3A1E093-D3DF-4DAE-AE81-C12A6DF894EE/staging/DeliveredNotificationsFrBncJ 09:32:38 7 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: DeliveredNotificationsNDmItw Created: 2020-07-16 4 Path: Library/UserNotifications/B0E25F55-4328-4A11-97DC-613FEE9BB0DE/staging/DeliveredNotificationsNDmItw 09:32:39 8 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: com.apple.mobile.ldbackup.plist Created: 2020-07-13 4 Path: Library/Preferences/com.apple.mobile.ldbackup.plist 15:52:19 9 SHA256: 56e7093c91844748edae20b4d48cbc3504854a32b896669bb681897bad608440 Modified: 2020-07-13 15:52:19 Accessed: 2020-07-13 15:52:19 Size: 245 bytes

5 Name: DeliveredNotificationsm7J8Ud Created: 2020-07-16 5 Path: Library/UserNotifications/317D7474-910D-4811-AB2B-16C42F27F44B/staging/DeliveredNotificationsm7J8Ud 09:32:39 0 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: Categories.plist Created: 2020-07-21 5 Path: Library/UserNotifications/5EE668F8-FDFF-436F-9CA8-6394F757C8CB/Categories.plist 13:34:02 1 SHA256: 76c43a45683524712cc83dae904eae2b362a4d05766c9125b26a02754d602777 Modified: 2020-07-21 13:34:02 Accessed: 2020-07-21 13:34:02 Size: 13703 bytes

5 Name: DeliveredNotifications3ImRg5 Created: 2020-07-16 5 Path: Library/UserNotifications/6E5C815C-A7E2-4D63-8B90-806D13CA0DE5/staging/DeliveredNotifications3ImRg5 09:32:39 2 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: Photos.sqlite Created: 2020-07-21 5 Path: Media/PhotoData/Photos.sqlite 19:40:05 3 SHA256: fc0e58fec0816b97494381b78a7f7300eba4899d4a9de0f8e02757d192e75baa Modified: 2020-07-21 19:40:05 Accessed: 2020-07-21 19:40:05 Size: 1794048 bytes

5 Name: PendingNotifications.plist Created: 2020-07-20 5 Path: Library/UserNotifications/90C5E1CB-5C3F-460E-89F8-2824593D24CE/PendingNotifications.plist 09:12:42 4 SHA256: 43e866814ad100965d32f4ab8c1ebf7d516102aa534d6199931e876f0c2580c3 Modified: 2020-07-20 09:12:42 Accessed: 2020-07-20 09:12:42 Size: 236 bytes

5 Name: PayloadManifest.plist Created: 2020-07-16 5 Path: Library/UserConfigurationProfiles/PayloadManifest.plist 09:45:28 5 SHA256: 7728c4a1ade18218c4301c1fe971f2df8deded0fcd045ce7525116e2908c6350 Modified: 2020-07-16 09:45:28 Accessed: 2020-07-16 09:45:28

iREPAIR - Backup Forensics Report (https://thelead82.com) - 61 of 75 I File Info Extra File Info D

5 Name: DeliveredNotificationsTCp2xJ Created:Size: 263 2020-07-16 bytes 5 Path: Library/UserNotifications/4408CA44-8E98-4086-B591-F339CD0DA787/staging/DeliveredNotificationsTCp2xJ 09:32:38 6 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: com.apple.photoanalysisd.plist Created: 2020-07-21 5 Path: Library/Preferences/com.apple.photoanalysisd.plist 13:34:10 7 SHA256: 1b5cb9f87436ef32dfa4c16cbfd5664c6c390d37de7208378e577065e5a41195 Modified: 2020-07-21 13:34:10 Accessed: 2020-07-21 13:34:10 Size: 160 bytes

5 Name: synched.db Created: 2020-07-16 5 Path: Library/com.apple.internal.ck/synched.db 10:05:47 8 SHA256: b71ca5256dd81442292be3921169892ca89d08d9220f9febd086780b2cfc7a84 Modified: 2020-07-16 10:05:47 Accessed: 2020-07-16 10:05:47 Size: 45056 bytes

5 Name: DeliveredNotificationsMcAWKa Created: 2020-07-16 5 Path: Library/UserNotifications/3BF61D76-C7C4-493D-8505-199CCFED1202/staging/DeliveredNotificationsMcAWKa 09:32:38 9 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: DeliveredNotificationshj6leG Created: 2020-07-16 6 Path: Library/UserNotifications/2A3C0BB4-6B80-4B55-A9F4-0D7BD089BDA5/staging/DeliveredNotificationshj6leG 09:32:38 0 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: DeliveredNotificationsbr5AFM Created: 2020-07-16 6 Path: Library/UserNotifications/938E53B1-ACAE-478E-A9C8-78BD162D5904/staging/DeliveredNotificationsbr5AFM 09:32:38 1 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: com.apple.MobileBackup.plist Created: 2020-07-22 6 Path: Library/Preferences/com.apple.MobileBackup.plist 08:26:29 2 SHA256: 397e7f5f5b6b62ff2db92b1717e9219269b5ddd78c71b2fbb55ed55f190e8062 Modified: 2020-07-22 08:26:29 Accessed: 2020-07-22 08:26:29 Size: 2305 bytes

5 Name: com.apple.mobilemail.plist Created: 2020-07-16 6 Path: Library/Preferences/com.apple.mobilemail.plist 10:06:03 3 SHA256: 210b64ddc82ba4593624d512ac031ee08df7758031125cf1272d5dfa7bf21b8b Modified: 2020-07-16 10:06:03 Accessed: 2020-07-16 10:06:03 Size: 77 bytes

5 Name: DeliveredNotifications0MESvC Created: 2020-07-16 6 Path: Library/UserNotifications/8E84E640-90CD-4475-ADE7-A5D3D27B2A12/staging/DeliveredNotifications0MESvC 09:32:38 4 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: com.apple.security.ctkd-db.plist Created: 2020-07-16 6 Path: Library/Preferences/com.apple.security.ctkd-db.plist 09:46:09 5 SHA256: 24486e7e3000b74e168e986fc3dd691d89be4681ded7c0191615d4f3b336f99a Modified: 2020-07-16 09:46:09 Accessed: 2020-07-16 09:46:09 Size: 1599 bytes

5 Name: NamespacedUserSettings.plist Created: 2020-07-16 6 Path: Library/UserConfigurationProfiles/PublicInfo/NamespacedUserSettings.plist 10:09:32 6 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-07-16 10:09:32 Accessed: 2020-07-16 10:09:32 Size: 42 bytes

5 Name: com.apple.textInput.keyboardServices.textReplacement.plist Created: 2020-07-21 6 Path: Library/Preferences/com.apple.textInput.keyboardServices.textReplacement.plist 19:31:06 7 SHA256: 42bc6b003f14aefaedc50dea427aa633866fcee8c6e5b90fd23db6f5823837a4 Modified: 2020-07-21 19:31:06 Accessed: 2020-07-21 19:31:06 Size: 1430 bytes

5 Name: com.apple.security.CircleJoinRequested.plist Created: 2020-07-22 6 Path: Library/Preferences/com.apple.security.CircleJoinRequested.plist 08:27:05 8 SHA256: e5458400d4be6d1ec139dd6318762d7cf69c91eea6374f0108ec4815e906f5a5 Modified: 2020-07-22

iREPAIR - Backup Forensics Report (https://thelead82.com) - 62 of 75 I File Info Extra File Info D

08:27:05 Accessed: 2020-07-22 08:27:05 5 Name: MCMeta.plist Created:Size: 560 2020-07-16 bytes 6 Path: Library/UserConfigurationProfiles/PublicInfo/MCMeta.plist 09:45:33 9 SHA256: 2802b4044dbf6abd6d71ae773e008784e304587d9a390382c7144a95b8b2d80d Modified: 2020-07-16 09:45:33 Accessed: 2020-07-16 09:45:33 Size: 242 bytes

5 Name: com.apple.messages.statistics.plist Created: 2020-07-22 7 Path: Library/Preferences/com.apple.messages.statistics.plist 08:26:29 0 SHA256: 71fef560d850d896e9629c0ce01c338df782660287ab40c15014b7272578ffbc Modified: 2020-07-22 08:26:29 Accessed: 2020-07-22 08:26:29 Size: 140 bytes

5 Name: DeliveredNotificationsk37zXR Created: 2020-07-16 7 Path: Library/UserNotifications/7A453C54-FF0E-4A63-8F72-319F324CE670/staging/DeliveredNotificationsk37zXR 09:32:39 1 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: com.apple.parsecd.plist Created: 2020-07-16 7 Path: Library/Preferences/com.apple.parsecd.plist 10:09:34 2 SHA256: 1bc588a484eeaf3ae0082394dfeada2f91c0908514df4c083637a7f8f96c5a4e Modified: 2020-07-16 10:09:34 Accessed: 2020-07-16 10:09:34 Size: 2095 bytes

5 Name: DeliveredNotificationstpr6JY Created: 2020-07-16 7 Path: Library/UserNotifications/B1F6C5C3-7AAF-469E-84ED-8E22020BCAF4/staging/DeliveredNotificationstpr6JY 09:32:39 3 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: com.apple.systemstats.microstackshot.plist Created: 2020-07-21 7 Path: Library/Preferences/com.apple.systemstats.microstackshot.plist 13:38:32 4 SHA256: c33e551832fd2b179e52f3b7d017810d2253ec9b199810c9f97fe2b01936c7cc Modified: 2020-07-21 13:38:32 Accessed: 2020-07-21 13:38:32 Size: 129 bytes

5 Name: com.apple.rapport.plist Created: 2020-07-21 7 Path: Library/Preferences/com.apple.rapport.plist 13:22:11 5 SHA256: 3059b5079418fa298b2db4dba3f7827b96c5b442957ffc139f414f864007ced5 Modified: 2020-07-21 13:22:11 Accessed: 2020-07-21 13:22:11 Size: 154 bytes

5 Name: Shortcuts.realm Created: 2020-07-16 7 Path: Library/Shortcuts/Shortcuts.realm 10:05:44 6 SHA256: 72c007958991a99e6b6f480afed9e1a9528a21a884b669b3c3c791fe0d1f9b4c Modified: 2020-07-16 10:05:44 Accessed: 2020-07-16 10:05:44 Size: 16384 bytes

5 Name: applications.mdplist Created: 2020-07-21 7 Path: Library/Spotlight/applications.mdplist 13:39:07 7 SHA256: e080c9dfad4d108d5415dfae72b83c03f8c6fcabc717d850a6477e145e87448e Modified: 2020-07-21 13:39:07 Accessed: 2020-07-21 13:39:07 Size: 6763 bytes

5 Name: com.apple.AppPredictionWidget.extension.plist Created: 2020-07-21 7 Path: Library/Preferences/com.apple.AppPredictionWidget.extension.plist 18:26:54 8 SHA256: 4101d8cc856cf7591c80e28c7027fe3a044a9ee27b550a94bce98c0f7626915d Modified: 2020-07-21 18:26:54 Accessed: 2020-07-21 18:26:54 Size: 297 bytes

5 Name: com.apple.sharingd.plist Created: 2020-07-22 7 Path: Library/Preferences/com.apple.sharingd.plist 08:26:19 9 SHA256: b5a4b11b52681dbdf63cafb4830a4f7c877cd3b92a5517fca8a7327796804507 Modified: 2020-07-22 08:26:19 Accessed: 2020-07-22 08:26:19 Size: 7628 bytes

5 Name: cacheMetrics.plist Created: 2020-07-22 8 Path: Library/cacheMetrics.plist 08:26:25 0 SHA256: d163c21903363738cc552d8b27001a97be74b9fab6894c819e0b6cbcaa587def Modified: 2020-07-22 08:26:25 Accessed: 2020-07-22 08:26:25 Size: 129 bytes

5 Name: DeliveredNotificationsLMBIpq Created: 2020-07-16

iREPAIR - Backup Forensics Report (https://thelead82.com) - 63 of 75 I File Info Extra File Info D

8 Path: Library/UserNotifications/83AE690A-2149-4306-BDEC-303CBB51C565/staging/DeliveredNotificationsLMBIpq 09:32:38 1 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes 5 Name: TCC.db Created: 2020-07-22 8 Path: Library/TCC/TCC.db 08:26:19 2 SHA256: c4d803eb63174223a5ada1c1d37924879a27f3dcde721caa1fd515a30d594bc4 Modified: 2020-07-22 08:26:19 Accessed: 2020-04-26 17:09:17 Size: 57344 bytes

5 Name: DeliveredNotificationstxV9G5 Created: 2020-07-16 8 Path: Library/UserNotifications/DB883418-C3A7-4B39-BE14-22C3BD9398BC/staging/DeliveredNotificationstxV9G5 09:32:39 3 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: Truth.plist Created: 2020-07-16 8 Path: Library/UserConfigurationProfiles/PublicInfo/Truth.plist 10:05:44 4 SHA256: 5471a92e3045a1ad244307c726145d0718fe37823c5bcb6c40eaf9e8383e6e08 Modified: 2020-07-16 10:05:44 Accessed: 2020-07-16 10:05:44 Size: 9639 bytes

5 Name: com.apple.remindd.babysitter.plist Created: 2020-07-21 8 Path: Library/Preferences/com.apple.remindd.babysitter.plist 13:34:10 5 SHA256: 716450c0567426b1fb05ab41b44475655df7b9929ec6c61c7382d3d669cd17c1 Modified: 2020-07-21 13:34:10 Accessed: 2020-07-21 13:34:10 Size: 141 bytes

5 Name: DeliveredNotificationsC3ffUv Created: 2020-07-16 8 Path: Library/UserNotifications/51225703-022B-4265-9004-EA8953364FE1/staging/DeliveredNotificationsC3ffUv 09:32:39 6 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: com.apple.persistentconnection-mcc.plist Created: 2020-07-16 8 Path: Library/Preferences/com.apple.persistentconnection-mcc.plist 09:45:40 7 SHA256: 4c4058cd0a691937d5b7a545cf5874457254ec2e7fe0b33a34abefd0f00797ce Modified: 2020-07-16 09:45:40 Accessed: 2020-07-16 09:45:40 Size: 74 bytes

5 Name: systemgroup.com.apple.icloud.searchpartyd.sharedsettings.plist Created: 2020-07-16 8 Path: Library/Preferences/systemgroup.com.apple.icloud.searchpartyd.sharedsettings.plist 10:06:04 8 SHA256: 7ca039a026b486a69382423c06b0d798fd3c6ca6c56aed71b6fa03e47252770a Modified: 2020-07-16 10:06:04 Accessed: 2020-07-16 10:06:04 Size: 128 bytes

5 Name: kNPProgressTrackerDomain.plist Created: 2020-07-16 8 Path: Library/Preferences/kNPProgressTrackerDomain.plist 10:04:04 9 SHA256: 61ee601a6fddc8b86e3a23f9d1e09b75daa549a5a45b9c47b10a9e9337119b49 Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 89 bytes

5 Name: com.apple.mobile.ldpair.plist Created: 2020-07-22 9 Path: Library/Preferences/com.apple.mobile.ldpair.plist 08:26:29 0 SHA256: c3b6799122f99d185a7561700ba67ca8930813b201aa79b0e73e6ffe87e8e6e7 Modified: 2020-07-22 08:26:29 Accessed: 2020-07-22 08:26:29 Size: 542 bytes

5 Name: com.apple.mobiletimerd.plist Created: 2020-07-22 9 Path: Library/Preferences/com.apple.mobiletimerd.plist 07:47:25 1 SHA256: e084398b1679ad1680f5acd33d189db9604f158ded69d565a271da9915b2ec77 Modified: 2020-07-22 07:47:25 Accessed: 2020-07-22 07:47:25 Size: 691 bytes

5 Name: main.db Created: 2020-07-16 9 Path: Library/com.apple.internal.ck/main.db 10:05:47 2 SHA256: b71ca5256dd81442292be3921169892ca89d08d9220f9febd086780b2cfc7a84 Modified: 2020-07-16 10:05:47 Accessed: 2020-07-16 10:05:47 Size: 45056 bytes

5 Name: DeliveredNotificationsNwGovV Created: 2020-07-16 9 Path: Library/UserNotifications/8695E66E-90EA-47C2-B084-3340BA769404/staging/DeliveredNotificationsNwGovV 09:32:39 3 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39

iREPAIR - Backup Forensics Report (https://thelead82.com) - 64 of 75 I File Info Extra File Info D

5 Name: DeliveredNotifications8Wjf1y Created:Size: 135 2020-07-16 bytes 9 Path: Library/UserNotifications/EB8F2123-C8E7-428C-B00B-F1C7968CCE64/staging/DeliveredNotifications8Wjf1y 09:32:38 4 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: DeliveredNotifications7onS87 Created: 2020-07-16 9 Path: Library/UserNotifications/53D90827-D480-402D-A1C6-4D6B81263C80/staging/DeliveredNotifications7onS87 09:32:38 5 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: DeliveredNotificationsS40Q9V Created: 2020-07-16 9 Path: Library/UserNotifications/2CF83409-4241-46C9-93B6-2C514CC971C7/staging/DeliveredNotificationsS40Q9V 09:32:38 6 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: DeliveredNotificationskz2qQC Created: 2020-07-16 9 Path: Library/UserNotifications/8C05E82A-57B1-455B-A086-0ADD51901A79/staging/DeliveredNotificationskz2qQC 09:32:38 7 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

5 Name: DeliveredNotificationspGJXJb Created: 2020-07-16 9 Path: Library/UserNotifications/14E3CA1A-0520-48ED-8985-7FC5A1C02895/staging/DeliveredNotificationspGJXJb 09:32:39 8 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

5 Name: group.com.apple.tips.plist Created: 2020-07-21 9 Path: Library/Preferences/group.com.apple.tips.plist 13:34:10 9 SHA256: fea806bf0d7c3c44f481d74a4bb07d6adca2fd4b21c5ecf02a03160378d48d75 Modified: 2020-07-21 13:34:10 Accessed: 2020-07-21 13:34:10 Size: 10588 bytes

6 Name: preferences.plist Created: 2020-07-16 0 Path: SystemConfiguration/preferences.plist 10:03:56 0 SHA256: 71082c65b9e21c422e7fd6243b47f8dff1be25a29dc5fdac9c5610725ab9e6bc Modified: 2020-07-16 10:03:56 Accessed: 2020-07-16 10:03:56 Size: 4682 bytes

6 Name: DeliveredNotifications3MPgTJ Created: 2020-07-16 0 Path: Library/UserNotifications/19D3FC48-5122-4FC9-B6CF-16980F784C55/staging/DeliveredNotifications3MPgTJ 09:32:39 1 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

6 Name: com.apple.springboard.plist Created: 2020-07-22 0 Path: Library/Preferences/com.apple.springboard.plist 08:25:05 2 SHA256: 0064728548068bce6cef45af8cd7cc4d6c9fd44685d064e513bff267677e7bee Modified: 2020-07-22 08:25:05 Accessed: 2020-07-22 08:25:05 Size: 2273 bytes

6 Name: com.apple.siri.VoiceShortcuts.plist Created: 2020-07-16 0 Path: Library/Preferences/com.apple.siri.VoiceShortcuts.plist 10:05:54 3 SHA256: 1d0e50e59458229a51f9df8ccfa1af4f2fd039115dd5a4cddbe598bc398f0ce1 Modified: 2020-07-16 10:05:54 Accessed: 2020-07-16 10:05:54 Size: 136 bytes

6 Name: DeliveredNotificationsrl85jO Created: 2020-07-16 0 Path: Library/UserNotifications/7C69391F-3822-4D5C-8F9F-CB98D252BC54/staging/DeliveredNotificationsrl85jO 09:32:38 4 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

6 Name: mediaanalysis.backup Created: 2020-07-21 0 Path: Media/MediaAnalysis/.backup/mediaanalysis.backup 13:35:17 5 SHA256: 0f1ffbc7acd74c2534d886bb0d81993b2904501a70e41ce713c1475d10771a80 Modified: 2020-07-21 13:35:17 Accessed: 2020-07-21 13:35:17 Size: 21278 bytes

6 Name: DeliveredNotificationsBYKuMv Created: 2020-07-16 0 Path: Library/UserNotifications/A8DBF39A-620F-49AA-AA57-C1A5AAFF15E4/staging/DeliveredNotificationsBYKuMv 09:32:39 6 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16

iREPAIR - Backup Forensics Report (https://thelead82.com) - 65 of 75 I File Info Extra File Info D

09:32:39 Accessed: 2020-07-16 09:32:39 6 Name: EffectiveUserSettings.plist Created:Size: 135 2020-07-16 bytes 0 Path: Library/UserConfigurationProfiles/EffectiveUserSettings.plist 09:45:28 7 SHA256: 12917cd90ed804b4e8bbc81c0b7c11b5bc3e6b1f4529cb7b3500adba7ceec812 Modified: 2020-07-16 09:45:28 Accessed: 2020-07-16 09:45:28 Size: 9274 bytes

6 Name: DeliveredNotificationsVsuoWW Created: 2020-07-16 0 Path: Library/UserNotifications/5EE668F8-FDFF-436F-9CA8-6394F757C8CB/staging/DeliveredNotificationsVsuoWW 09:32:39 8 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

6 Name: DeliveredNotifications5C6tL1 Created: 2020-07-16 0 Path: Library/UserNotifications/D3FCA3DF-008D-4CA5-BE7A-F9F1C382E058/staging/DeliveredNotifications5C6tL1 09:32:38 9 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

6 Name: com.apple.sensorkitd.plist Created: 2020-07-16 1 Path: Library/Preferences/com.apple.sensorkitd.plist 10:04:04 0 SHA256: 445582ced32f75eb6fbc70a4b8a1f98086507f5d9c24e9bb9c1309210a4748e6 Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 79 bytes

6 Name: DeliveredNotificationsyxJGez Created: 2020-07-16 1 Path: Library/UserNotifications/7E7CB8DF-2BF2-48B2-88FC-1EFE7DEEAAD8/staging/DeliveredNotificationsyxJGez 09:32:38 1 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

6 Name: com.apple.purplebuddy.plist Created: 2020-07-16 1 Path: Library/Preferences/com.apple.purplebuddy.plist 10:05:54 2 SHA256: 208d9674dea61b8e796c57c47aadaef226927b7acf4e6989d5715dff2592efa9 Modified: 2020-07-16 10:05:54 Accessed: 2020-07-16 10:05:55 Size: 839 bytes

6 Name: DeliveredNotificationsyvZOE1 Created: 2020-07-16 1 Path: Library/UserNotifications/AA2526B1-CB8B-4D2B-A8BA-FA509D7F33B8/staging/DeliveredNotificationsyvZOE1 09:32:39 3 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

6 Name: DeliveredNotificationsjeIvxG Created: 2020-07-16 1 Path: Library/UserNotifications/50EE97B6-5130-4D1C-9338-1968B0CE58FA/staging/DeliveredNotificationsjeIvxG 09:32:39 4 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

6 Name: ProfileTruth.plist Created: 2020-07-16 1 Path: Library/UserConfigurationProfiles/ProfileTruth.plist 10:05:42 5 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-07-16 10:05:42 Accessed: 2020-07-16 10:05:42 Size: 42 bytes

6 Name: com.apple.MobileAsset.plist Created: 2020-07-16 1 Path: Library/Preferences/com.apple.MobileAsset.plist 09:32:38 6 SHA256: c94ee05dba7a0a4bd69e7a7ea205ae555b9798dbe0a3735bb716decf7bb73026 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 111 bytes

6 Name: DeliveredNotificationsjPTf75 Created: 2020-07-16 1 Path: Library/UserNotifications/2EC60046-3DC7-45A4-9AB9-1338674F1882/staging/DeliveredNotificationsjPTf75 09:32:39 7 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

6 Name: DeliveredNotificationsFy53l1 Created: 2020-07-16 1 Path: Library/UserNotifications/5FF0BEDB-378E-48EB-96EB-F50BC756FF35/staging/DeliveredNotificationsFy53l1 09:32:38 8 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

iREPAIR - Backup Forensics Report (https://thelead82.com) - 66 of 75 I File Info Extra File Info D

6 Name: com.apple.madrid.plist Created: 2020-07-22 1 Path: Library/Preferences/com.apple.madrid.plist 03:38:25 9 SHA256: dd7abd03f4270345ddcca5986b9ae8b48b376032d1cb082696378acc50c5cad3 Modified: 2020-07-22 03:38:25 Accessed: 2020-07-22 03:38:25 Size: 1235 bytes

6 Name: com.apple.MobileBluetooth.ledevices.other.db Created: 2020-07-16 2 Path: Library/Database/com.apple.MobileBluetooth.ledevices.other.db 10:06:13 0 SHA256: 6c9796049587f407a9f7e4981ff3264b98b8d3e064deefe9cffe4a239fcf6759 Modified: 2020-07-16 10:06:13 Accessed: 2020-04-01 17:10:34 Size: 16384 bytes

6 Name: com.apple.stockholm.atl.plist Created: 2020-07-16 2 Path: Library/Preferences/com.apple.stockholm.atl.plist 09:45:39 1 SHA256: ecf24d858825e97051389f6a268ab5150383d6d71dd586287a5d9554574bae49 Modified: 2020-07-16 09:45:39 Accessed: 2020-07-16 09:45:39 Size: 1085 bytes

6 Name: DeliveredNotificationsZrQ0Te Created: 2020-07-16 2 Path: Library/UserNotifications/90C5E1CB-5C3F-460E-89F8-2824593D24CE/staging/DeliveredNotificationsZrQ0Te 09:32:38 2 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:38 Accessed: 2020-07-16 09:32:38 Size: 135 bytes

6 Name: com.apple.corecaptured.plist Created: 2020-07-16 2 Path: Library/Preferences/com.apple.corecaptured.plist 09:45:40 3 SHA256: da84e91226daca74b740af03e39b43bd9fa89ffcadde13d6851bbf76634ef425 Modified: 2020-07-16 09:45:40 Accessed: 2020-07-16 09:45:40 Size: 84 bytes

6 Name: DeliveredNotificationsFtjty5 Created: 2020-07-16 2 Path: Library/UserNotifications/133045B2-CC2F-4774-B86F-8E46AA52FC90/staging/DeliveredNotificationsFtjty5 09:32:39 4 SHA256: 15a69069624b314c78589fb5b257d463927b828955592c0919f6ef40f23ce123 Modified: 2020-07-16 09:32:39 Accessed: 2020-07-16 09:32:39 Size: 135 bytes

6 Name: com.apple.mediaremote.plist Created: 2020-07-16 2 Path: Library/Preferences/com.apple.mediaremote.plist 10:17:04 5 SHA256: 0d3326c8730afd430b7e982a30e7d899e877a9fcec9570037e70f15d598b1aef Modified: 2020-07-16 10:17:04 Accessed: 2020-07-16 10:17:04 Size: 1586 bytes

6 Name: VersionedSectionInfo.plist Created: 2020-07-22 2 Path: Library/BulletinBoard/VersionedSectionInfo.plist 08:26:38 6 SHA256: d8d957e4babe2098560573658729028cd34e78b88387fa02f90fdbc0a75a5d88 Modified: 2020-07-22 08:26:38 Accessed: 2020-07-22 08:26:38 Size: 47388 bytes

6 Name: com.apple.NanoRegistry.plist Created: 2020-07-16 2 Path: Library/Preferences/com.apple.NanoRegistry.plist 10:04:04 7 SHA256: 7aa6f027de088672caacd9e43f3047900dd2770768c6fee55345433c8ed69dd8 Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 109 bytes

6 Name: com.apple.NanoTimeKit.daemon.plist Created: 2020-07-16 2 Path: Library/Preferences/com.apple.NanoTimeKit.daemon.plist 09:46:09 8 SHA256: d1cb19aa6681de6846fca86f820f69535113bb82deb0eb19159d9ef607306747 Modified: 2020-07-16 09:46:09 Accessed: 2020-07-16 09:46:09 Size: 251 bytes

6 Name: com.apple.Maps.plist Created: 2020-07-21 2 Path: Library/Preferences/com.apple.Maps.plist 19:35:21 9 SHA256: 9d0c8a0d14f4159d36a1c5251249b92fd0efa41958c2f1fb94d69f5e7bbbf674 Modified: 2020-07-21 19:35:21 Accessed: 2020-07-21 19:35:21 Size: 324 bytes

6 Name: nickNameKeyStore.db Created: 2020-07-16 3 Path: Library/MessagesMetaData/NickNameCache/nickNameKeyStore.db 10:04:34 0 SHA256: c01bf001518342ab291f2364de4bdce00227caa61e216463849f08f4e5d07fec Modified: 2020-07-16 10:04:34 Accessed: 2020-07-16 10:04:34 Size: 32768 bytes

6 Name: profile-4f6b9ae112faa4367f0e3d3e9980107b698c99dd1338fca22859f3b724f0f51d.stub Created: 2020-07-16 3 Path: Library/ConfigurationProfiles/profile-4f6b9ae112faa4367f0e3d3e9980107b698c99dd1338fca22859f3b724f0f51d.stub 09:45:28 1 SHA256: cc047b0548f9b6344029c9183155a82b7c18b9dc0beb9475389271cc299e4e82 Modified: 2020-07-16 09:45:28

iREPAIR - Backup Forensics Report (https://thelead82.com) - 67 of 75 I File Info Extra File Info D

Accessed: 2020-07-16 09:45:28 Size: 2122 bytes 6 Name: AddressBook.sqlitedb Created: 2020-07-16 3 Path: Library/AddressBook/AddressBook.sqlitedb 10:16:57 2 SHA256: afc7997ad2f6f0b7313867ba98b9f2f99c611787d58f7c42b5eac2757bd8245d Modified: 2020-07-16 10:16:57 Accessed: 2020-05-05 11:56:04 Size: 303104 bytes

6 Name: AppAccessibilityParameters.plist Created: 2020-07-16 3 Path: Library/ConfigurationProfiles/AppAccessibilityParameters.plist 10:05:42 3 SHA256: 97704a8960b4facceef54397a08fb5d0a456247c3627359215aa2a27df22656c Modified: 2020-07-16 10:05:42 Accessed: 2020-07-16 10:05:42 Size: 181 bytes

6 Name: ClientTruth.plist Created: 2020-07-16 3 Path: Library/ConfigurationProfiles/ClientTruth.plist 09:45:28 4 SHA256: e0a05ee34e70dd5e73f8c2353938a9214c8d99fe50f9fd09075377e3144417ef Modified: 2020-07-16 09:45:28 Accessed: 2020-07-16 09:45:28 Size: 1028 bytes

6 Name: com.apple.duetactivityscheduler.plugin.plist Created: 2020-07-22 3 Path: Library/Preferences/com.apple.duetactivityscheduler.plugin.plist 08:26:29 5 SHA256: 1cb51784135af2c21aef764c2d962fa22744507b4331c30400c785b486b97041 Modified: 2020-07-22 08:26:29 Accessed: 2020-07-22 08:26:29 Size: 286 bytes

6 Name: MCMeta.plist Created: 2020-07-16 3 Path: Library/ConfigurationProfiles/PublicInfo/MCMeta.plist 10:05:50 6 SHA256: 04fef5eb4ddd5c74103b541a73b82315bad58ee9d0d60fa5682ced19b5bc2211 Modified: 2020-07-16 10:05:50 Accessed: 2020-07-16 10:05:50 Size: 360 bytes

6 Name: com.apple.appstored.plist Created: 2020-07-22 3 Path: Library/Preferences/com.apple.appstored.plist 02:28:03 7 SHA256: 6045b905c5f976a7958652f5157462ecc8563d48a3d747c26541e3cc9cb65f9d Modified: 2020-07-22 02:28:03 Accessed: 2020-07-22 02:28:03 Size: 1272 bytes

6 Name: Notifications.Calendar.Unprotected Created: 2020-07-16 3 Path: Library/Calendar/Notifications.Calendar.Unprotected 09:54:52 8 SHA256: 289a629586a147ef4e9c1c07ea676f8ecbe6c5b9f4a51d093f7ee624820f4511 Modified: 2020-07-16 09:54:52 Accessed: 2020-07-16 09:54:52 Size: 219 bytes

6 Name: 120x120_iOS.png Created: 2020-07-16 3 Path: Library/Application Support/CloudDocs/session/containers/iCloud.is.workflow.my.workflows/120x120_iOS.png 10:04:04 9 SHA256: bfe7c24e7b6db4d4c02a71cb606c855634744c32c3450d6e6c5a9c0f13268efe Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 15870 bytes

6 Name: com.apple.das.fairscheduling.plist Created: 2020-07-21 4 Path: Library/Preferences/com.apple.das.fairscheduling.plist 20:03:27 0 SHA256: b37e8c78cd5b2bc3316ac0707c64b51c68efa2204542def5627db252287e9be1 Modified: 2020-07-21 20:03:27 Accessed: 2020-07-21 20:03:27 Size: 919 bytes

6 Name: com.apple.coreduet.complications.pushLimits.plist Created: 2020-07-22 4 Path: Library/Preferences/com.apple.coreduet.complications.pushLimits.plist 05:26:14 1 SHA256: 846528080ace9f45fac6bfed159b2872a30fc512414a9f5693ccc359d30849a3 Modified: 2020-07-22 05:26:14 Accessed: 2020-07-22 05:26:14 Size: 69 bytes

6 Name: com.apple.CommCenter.counts.plist Created: 2020-07-22 4 Path: Library/Preferences/com.apple.CommCenter.counts.plist 08:26:02 2 SHA256: 0de27d6c018246987ddf3ce38154051b0b1f76cd898e0a8428f79c7d74f979ff Modified: 2020-07-22 08:26:02 Accessed: 2020-07-22 08:26:02 Size: 645 bytes

6 Name: com.apple.aggregated.plist Created: 2020-07-22 4 Path: Library/Preferences/com.apple.aggregated.plist 08:26:29 3 SHA256: d4b18f6751344e1743a9513d87d5a69841978c7bf20a7d86b511e8d444f55ddf Modified: 2020-07-22 08:26:29 Accessed: 2020-07-22 08:26:29 Size: 166 bytes

6 Name: UserSettings.plist Created: 2020-07-16

iREPAIR - Backup Forensics Report (https://thelead82.com) - 68 of 75 I File Info Extra File Info D

4 Path: Library/ConfigurationProfiles/UserSettings.plist 10:09:32 4 SHA256: 43f650bf8a5db31eed90b814bb7135feadbf39835a30adf342c4ed610b44b67b Modified: 2020-07-16 10:09:32 Accessed: 2020-07-16 10:09:32 Size: 9168 bytes 6 Name: server.db Created: 2020-07-21 4 Path: Library/Application Support/CloudDocs/session/db/server.db 13:35:20 5 SHA256: 886fae9c27482cc60c04292a61cecd6c9cd1076fd68c1719c9120b4b2d6b8a45 Modified: 2020-07-21 13:35:20 Accessed: 2020-05-09 16:10:36 Size: 143360 bytes

6 Name: com.apple.CoreDuet.plist Created: 2020-07-21 4 Path: Library/Preferences/com.apple.CoreDuet.plist 13:38:52 6 SHA256: d2d88a6ca6c52a370128f476ca4ba927dd7229e8277b7d0c7e972211543f2ab6 Modified: 2020-07-21 13:38:52 Accessed: 2020-07-21 13:38:52 Size: 68 bytes

6 Name: com.apple.AirPlayRoutePrediction.plist Created: 2020-07-21 4 Path: Library/Preferences/com.apple.AirPlayRoutePrediction.plist 19:41:45 7 SHA256: 8f0f71a5500eec165380de49ada8d2d5a4677b23d6b0573f3566c4ff98246740 Modified: 2020-07-21 19:41:45 Accessed: 2020-07-21 19:41:45 Size: 85 bytes

6 Name: com.apple.da.plist Created: 2020-07-17 4 Path: Library/Preferences/com.apple.da.plist 02:14:46 8 SHA256: 9492e4bf5716b588d2a45f99db365b2aa6e52003c19e97f4e3a9ce942324a5c0 Modified: 2020-07-17 02:14:46 Accessed: 2020-07-17 02:14:46 Size: 1661 bytes

6 Name: pendingNicknamesKeyStore.db Created: 2020-07-16 4 Path: Library/MessagesMetaData/NickNameCache/pendingNicknamesKeyStore.db 10:04:34 9 SHA256: c01bf001518342ab291f2364de4bdce00227caa61e216463849f08f4e5d07fec Modified: 2020-07-16 10:04:34 Accessed: 2020-07-16 10:04:34 Size: 32768 bytes

6 Name: applicationState.db Created: 2020-07-16 5 Path: Library/FrontBoard/applicationState.db 10:05:53 0 SHA256: d743db345f273f5b979dddc364388e5e73a41b84972e565b86056c05a0b4d7e9 Modified: 2020-07-16 10:05:53 Accessed: 2020-07-16 13:09:22 Size: 380928 bytes

6 Name: iCloud.is.workflow.my.workflows.plist Created: 2020-07-16 5 Path: Library/Application Support/CloudDocs/session/containers/iCloud.is.workflow.my.workflows.plist 10:04:04 1 SHA256: 9944267342f6692aa72cf96ec61a1c2b5f7037d01cae09e519a61e84f7dd2857 Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 1137 bytes

6 Name: com.apple.identityservicesd.plist Created: 2020-07-16 5 Path: Library/Preferences/com.apple.identityservicesd.plist 10:06:14 2 SHA256: e2e79d9e9829295145c8a39368d8357dfaab69752f76117080ff90724aeddd53 Modified: 2020-07-16 10:06:14 Accessed: 2020-07-16 10:06:14 Size: 8943 bytes

6 Name: com.apple.languageassetd.plist Created: 2020-07-16 5 Path: Library/Preferences/com.apple.languageassetd.plist 10:07:14 3 SHA256: 3672237aa317f98cd82d0d96b7c8968061f6aeea9e6b875cd2e8d1a9cf40c404 Modified: 2020-07-16 10:07:14 Accessed: 2020-07-16 10:07:14 Size: 219 bytes

6 Name: com.apple.locationd.plist Created: 2020-07-16 5 Path: Library/Preferences/com.apple.locationd.plist 10:05:54 4 SHA256: 6415f425c00823821a6d974cf6f8c4e7fccd00f8f80ed895cfb5c8b7f921aeef Modified: 2020-07-16 10:05:54 Accessed: 2020-07-16 10:05:54 Size: 197 bytes

6 Name: csidata Created: 2020-07-16 5 Path: Library/Preferences/csidata 10:05:43 5 SHA256: 9b993f65473962e27bc9b41ba42c4c2a88e929fbaaab0011d9cffe72fe663a71 Modified: 2020-07-16 10:05:43 Accessed: 2020-07-16 10:05:43 Size: 485 bytes

6 Name: com.apple.imservice.ids.iMessage.plist Created: 2020-07-16 5 Path: Library/Preferences/com.apple.imservice.ids.iMessage.plist 10:04:16 6 SHA256: 69ba47b7636ee32988cbded960bd0e4c93e3f7679054315597fdb44bbaad3760 Modified: 2020-07-16 10:04:16 Accessed: 2020-07-16 10:04:16

iREPAIR - Backup Forensics Report (https://thelead82.com) - 69 of 75 I File Info Extra File Info D

6 Name: com.apple.keyboard.plist Created:Size: 241 2020-07-16 bytes 5 Path: Library/Preferences/com.apple.keyboard.plist 10:12:44 7 SHA256: d2ab77895350a3095686ba6cff2f5638594da1c691852df2239c0a95cbc7321a Modified: 2020-07-16 10:12:44 Accessed: 2020-07-16 10:12:44 Size: 189 bytes

6 Name: com.apple.lsd.iconNames.plist Created: 2020-07-16 5 Path: Library/Preferences/com.apple.lsd.iconNames.plist 09:45:40 8 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-07-16 09:45:40 Accessed: 2020-07-16 09:45:40 Size: 42 bytes

6 Name: com.apple.imdsmsrecordstore.plist Created: 2020-07-16 5 Path: Library/Preferences/com.apple.imdsmsrecordstore.plist 10:05:54 9 SHA256: f1fb2b9b19a7dc4818248f177ff683e84a9c2ba20e04af4e20cc6c9f7b222c51 Modified: 2020-07-16 10:05:54 Accessed: 2020-07-16 10:05:54 Size: 556 bytes

6 Name: PayloadManifest.plist Created: 2020-07-16 6 Path: Library/ConfigurationProfiles/PayloadManifest.plist 09:45:28 0 SHA256: c8a73c9a137f0e3f6317154780297a87ac6aa6fce5af3abd70e93979edcb0117 Modified: 2020-07-16 09:45:28 Accessed: 2020-07-16 09:45:28 Size: 357 bytes

6 Name: com.apple.cloudphotod.plist Created: 2020-07-16 6 Path: Library/Preferences/com.apple.cloudphotod.plist 10:06:04 1 SHA256: c9d13079532ec7e75c29b2b3fa8b67dbcbf83dbca7fd1a92ed1885425f7845bd Modified: 2020-07-16 10:06:04 Accessed: 2020-07-16 10:06:04 Size: 666 bytes

6 Name: com.apple.AppleBasebandManager.Statistics.plist Created: 2020-07-16 6 Path: Library/Preferences/com.apple.AppleBasebandManager.Statistics.plist 10:04:04 2 SHA256: 1092ef2c1bdef7a2201f2af1ffbf1bf9728a37bcbbbe6cb02c29cc2a03850799 Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:05:43 Size: 236 bytes

6 Name: com.apple.homed.plist Created: 2020-07-16 6 Path: Library/Preferences/com.apple.homed.plist 10:06:04 3 SHA256: 03af7211075c314a5d64fca405a413d37568ba5574243c9857a23138e3ec6ce2 Modified: 2020-07-16 10:06:04 Accessed: 2020-07-16 10:06:04 Size: 354 bytes

6 Name: com.apple.BTServer.plist Created: 2020-07-16 6 Path: Library/Preferences/com.apple.BTServer.plist 10:04:04 4 SHA256: a50e906b494f9d5f1ebc56cd0e21b5062665b197104144796a00ef4137d626ff Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 257 bytes

6 Name: handledNicknamesKeyStore.db Created: 2020-07-16 6 Path: Library/MessagesMetaData/NickNameCache/handledNicknamesKeyStore.db 10:04:34 5 SHA256: c01bf001518342ab291f2364de4bdce00227caa61e216463849f08f4e5d07fec Modified: 2020-07-16 10:04:34 Accessed: 2020-07-16 10:04:34 Size: 32768 bytes

6 Name: 80x80_iOS.png Created: 2020-07-16 6 Path: Library/Application Support/CloudDocs/session/containers/iCloud.is.workflow.my.workflows/80x80_iOS.png 10:04:04 6 SHA256: bf81dc6d1364495c1aec6e69c804ad7f46d49aed16140b4abf08b4b0e49536df Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 8914 bytes

6 Name: com.apple.itunescloud.plist Created: 2020-07-16 6 Path: Library/Preferences/com.apple.itunescloud.plist 10:06:04 7 SHA256: 95441c94412ef2c4b5ca002f8cd8e51d9fed3c3302e526a5c2ee099e9159f9f3 Modified: 2020-07-16 10:06:04 Accessed: 2020-07-16 10:06:04 Size: 3546 bytes

6 Name: apps.plist Created: 2020-07-17 6 Path: Library/apps.plist 00:52:28 8 SHA256: 6578203ae8fdecf560b41c9c2a258f3193a27f68d7fb6892abdc6cadb3a9e6c3 Modified: 2020-07-17 00:52:28 Accessed: 2020-07-17 00:52:28 Size: 228 bytes

6 Name: Extras.db Created: 2020-07-16 6 Path: Library/Calendar/Extras.db 09:54:52 9 SHA256: 19a4acd4ac0d7db91cc4361b63b2b701744d5528402cea7a807f10e0528621ea Modified: 2020-07-16

iREPAIR - Backup Forensics Report (https://thelead82.com) - 70 of 75 I File Info Extra File Info D

09:54:52 Accessed: 2020-04-01 17:10:45 6 Name: Calendar.sqlitedb Created:Size: 32768 2020-07-16 bytes 7 Path: Library/Calendar/Calendar.sqlitedb 10:13:24 0 SHA256: bead4b0cc342410754f9fe4c70f1cf411c25a8fc3419697468666f4e209bba78 Modified: 2020-07-16 10:13:24 Accessed: 2020-07-16 10:03:56 Size: 483328 bytes

6 Name: com.apple.commcenter.plist Created: 2020-07-16 7 Path: Library/Preferences/com.apple.commcenter.plist 10:04:04 1 SHA256: 4254310a986162c0f247f3f9debcedc5b99640f6694bb9c26666ff25834b27af Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:05:46 Size: 1628 bytes

6 Name: com.apple.icloud.searchpartyd.plist Created: 2020-07-21 7 Path: Library/Preferences/com.apple.icloud.searchpartyd.plist 13:49:22 2 SHA256: bb476b3d1135f0f21878e5a1a12fa700d660bb863423160ba7e0e82155d9f594 Modified: 2020-07-21 13:49:22 Accessed: 2020-07-21 13:49:22 Size: 354 bytes

6 Name: com.apple.CoreBehaviorRuleFeedback.plist Created: 2020-07-21 7 Path: Library/Preferences/com.apple.CoreBehaviorRuleFeedback.plist 19:35:59 3 SHA256: 6018bbd6dc1e1f72548a6affc104ebf9396c41bdea7b0a5e84a8191be6ff3502 Modified: 2020-07-21 19:35:59 Accessed: 2020-07-21 19:35:59 Size: 85 bytes

6 Name: com.apple.aggregated.addaily.plist Created: 2020-07-22 7 Path: Library/Preferences/com.apple.aggregated.addaily.plist 02:28:03 4 SHA256: ae74c44ece850128bab820b31bcdbe7c5ec98bdc2e6a277d58acaf41aa5221dd Modified: 2020-07-22 02:28:03 Accessed: 2020-07-22 02:28:03 Size: 2487 bytes

6 Name: 40x40_iOS.png Created: 2020-07-16 7 Path: Library/Application Support/CloudDocs/session/containers/iCloud.is.workflow.my.workflows/40x40_iOS.png 10:04:04 5 SHA256: a9a856412045c6faaaf0e959be30a2910cdcd29196b1da4ab0fd5844bad7820c Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 2981 bytes

6 Name: control-odd Created: 2020-07-16 7 Path: Library/Application Support/CloudDocs/session/db/control-odd 09:56:57 6 SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Modified: 2020-07-16 09:56:57 Accessed: 2020-07-16 09:56:57 Size: 0 bytes

6 Name: com.apple.assetsd.plist Created: 2020-07-16 7 Path: Library/Preferences/com.apple.assetsd.plist 10:06:14 7 SHA256: 83c157972a510f3d4698334aab17e045838487bd9e8b8db10b688de404787d28 Modified: 2020-07-16 10:06:14 Accessed: 2020-07-16 10:06:14 Size: 457 bytes

6 Name: com.apple.ExposureNotification.plist Created: 2020-07-16 7 Path: Library/Preferences/com.apple.ExposureNotification.plist 10:04:04 8 SHA256: 2f76070bdffe93691fed3ee5902a9c0af5171bdec1da07a4a172fc351b4a7a3e Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 381 bytes

6 Name: com.apple.coreduetd.plist Created: 2020-07-16 7 Path: Library/Preferences/com.apple.coreduetd.plist 10:05:54 9 SHA256: 99b26e7f24d747cc7baecfc1bc88bc13fa0d702f915386ca9727626c216b5102 Modified: 2020-07-16 10:05:54 Accessed: 2020-07-16 10:05:54 Size: 2077 bytes

6 Name: com.apple.dataaccess.dataaccessd.plist Created: 2020-07-16 8 Path: Library/Preferences/com.apple.dataaccess.dataaccessd.plist 09:56:59 0 SHA256: f3fbb14bb3551b523e9209300c3ca14211a25a32a38e5522b7fca1ccdc81c335 Modified: 2020-07-16 09:56:59 Accessed: 2020-07-16 09:56:59 Size: 82 bytes

6 Name: com.apple.itunesstored.2.sqlitedb Created: 2020-07-16 8 Path: Library/Cookies/com.apple.itunesstored.2.sqlitedb 10:05:50 1 SHA256: cd423ebbdde47fd6d7130b6943b3731a79f5cd667a4c3005951127c11dd0ed60 Modified: 2020-07-16 10:05:50 Accessed: 2020-04-10 17:57:49 Size: 12288 bytes

6 Name: UDIDChangeTracker.plist Created: 2020-07-16

iREPAIR - Backup Forensics Report (https://thelead82.com) - 71 of 75 I File Info Extra File Info D

8 Path: Library/DeviceRegistry.state/UDIDChangeTracker.plist 10:04:03 2 SHA256: a50759c805c636f2774b286b9bb294dcdc02e065835ef7971c1c12ba77058b04 Modified: 2020-07-16 10:04:03 Accessed: 2020-07-16 10:04:03 Size: 272 bytes 6 Name: com.apple.contextstored.plist Created: 2020-07-16 8 Path: Library/Preferences/com.apple.contextstored.plist 09:04:28 3 SHA256: ed64656e4a6b1024c9228b9e137f6e57e870689a6edeb36a84f437a7c28c2a34 Modified: 2020-07-16 09:04:28 Accessed: 2020-07-16 09:04:28 Size: 615 bytes

6 Name: com.apple.NanoTimeKit.face.plist Created: 2020-07-16 8 Path: Library/Preferences/com.apple.NanoTimeKit.face.plist 09:46:09 4 SHA256: 6de49aa41ec4f6efa7d172aff7db7f9196d1b6f6bd03562d44ba75ade4870ca1 Modified: 2020-07-16 09:46:09 Accessed: 2020-07-16 09:46:09 Size: 80 bytes

6 Name: com.apple.AdLib.plist Created: 2020-07-20 8 Path: Library/Preferences/com.apple.AdLib.plist 22:43:28 5 SHA256: 9c243301d342915e69185d5dd65ada4ba9c902d8f38a79bfb11153cec55cc133 Modified: 2020-07-20 22:43:28 Accessed: 2020-07-20 22:43:28 Size: 256 bytes

6 Name: com.apple.cloud.quota.plist Created: 2020-07-16 8 Path: Library/Preferences/com.apple.cloud.quota.plist 10:04:15 6 SHA256: 67e329ee8c584ecae77a6d163ce0d712710fc3236148e5061dafc235a5045fe5 Modified: 2020-07-16 10:04:15 Accessed: 2020-07-16 10:04:15 Size: 895 bytes

6 Name: com.apple.IMCoreSpotlight.plist Created: 2020-07-21 8 Path: Library/Preferences/com.apple.IMCoreSpotlight.plist 13:27:28 7 SHA256: 1b0a2d0402f7259ddbff71377b9f3bc50bf23e4642643106862f82f0334dcdab Modified: 2020-07-21 13:27:28 Accessed: 2020-07-21 13:27:28 Size: 331 bytes

6 Name: com.apple.accountsd.plist Created: 2020-07-16 8 Path: Library/Preferences/com.apple.accountsd.plist 09:56:59 8 SHA256: 88ef0170743f067008fc4c6e33a46727a2320ab3fd055b54677631a861b7fc69 Modified: 2020-07-16 09:56:59 Accessed: 2020-07-16 09:56:59 Size: 1883 bytes

6 Name: com.apple.healthd.plist Created: 2020-07-22 8 Path: Library/Preferences/com.apple.healthd.plist 08:26:29 9 SHA256: 9ab97e714c79bf048015491b45cdea940cd3da313d965dcded05f9811fbaf083 Modified: 2020-07-22 08:26:29 Accessed: 2020-07-22 08:26:29 Size: 6006 bytes

6 Name: com.apple.icloud.findmydeviced.plist Created: 2020-07-16 9 Path: Library/Preferences/com.apple.icloud.findmydeviced.plist 09:47:09 0 SHA256: 6027d4a031650d439963a8936a5864b50e1cd696eeaaed30ce292b1fb685543e Modified: 2020-07-16 09:47:09 Accessed: 2020-07-16 09:47:09 Size: 103 bytes

6 Name: handleSharingPreferences.db Created: 2020-07-16 9 Path: Library/MessagesMetaData/NickNameCache/handleSharingPreferences.db 10:04:34 1 SHA256: c01bf001518342ab291f2364de4bdce00227caa61e216463849f08f4e5d07fec Modified: 2020-07-16 10:04:34 Accessed: 2020-07-16 10:04:34 Size: 32768 bytes

6 Name: com.apple.celestial.plist Created: 2020-07-19 9 Path: Library/Preferences/com.apple.celestial.plist 13:39:04 2 SHA256: a176b40f5bd4d07f751fa2f2919fd3eb55dc48502a2490ab14994a07a1f9786c Modified: 2020-07-19 13:39:04 Accessed: 2020-07-19 13:39:04 Size: 12992 bytes

6 Name: com.apple.imessage.bag.plist Created: 2020-07-16 9 Path: Library/Preferences/com.apple.imessage.bag.plist 09:54:59 3 SHA256: 22135b774e0d2688a2fcfbf70b9cde132c44ed644cc5d9f1045af66fd888b043 Modified: 2020-07-16 09:54:59 Accessed: 2020-07-16 09:54:59 Size: 9046 bytes

6 Name: com.apple.apsd.plist Created: 2020-07-17 9 Path: Library/Preferences/com.apple.apsd.plist 19:57:31 4 SHA256: 68f3923452278b4a6a2641ae83394bd84c95e1f568568bf36119ce8d379d606d Modified: 2020-07-17 19:57:31 Accessed: 2020-07-17 19:57:31

iREPAIR - Backup Forensics Report (https://thelead82.com) - 72 of 75 I File Info Extra File Info D

6 Name: NamespacedUserSettings.plist Created:Size: 10431 2020-07-16 bytes 9 Path: Library/ConfigurationProfiles/PublicInfo/NamespacedUserSettings.plist 10:09:32 5 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-07-16 10:09:32 Accessed: 2020-07-16 10:09:32 Size: 42 bytes

6 Name: Assertions.json Created: 2020-07-22 9 Path: Library/DoNotDisturb/DB/Assertions.json 07:47:22 6 SHA256: d5c1e8b77819bfdc5d18cafec4817278ba07601a9024dfd240c83c2c5d14ddcb Modified: 2020-07-22 07:47:22 Accessed: 2020-07-22 07:47:22 Size: 67 bytes

6 Name: com.apple.mobilemail.plist Created: 2020-07-16 9 Path: Library/Application Support/CloudDocs/session/containers/com.apple.mobilemail.plist 09:56:59 7 SHA256: a2c15583d0783beea0473a951fd89476f8d90d4365815576c99295ff226f1263 Modified: 2020-07-16 09:56:59 Accessed: 2020-07-16 09:56:59 Size: 1359 bytes

6 Name: com.apple.bulletinboard.plist Created: 2020-07-16 9 Path: Library/Preferences/com.apple.bulletinboard.plist 10:05:54 8 SHA256: 0a1ba859319199192b77443aae7f7affa329041b5e1c453bc58dddcfafd95a06 Modified: 2020-07-16 10:05:54 Accessed: 2020-07-16 10:05:54 Size: 74 bytes

6 Name: com.apple.icloud.fmfd.plist Created: 2020-07-16 9 Path: Library/Preferences/com.apple.icloud.fmfd.plist 10:04:05 9 SHA256: 4212a800441623d503e00a8b275a53aec06320e034535c50cc5e90bf72642ee4 Modified: 2020-07-16 10:04:05 Accessed: 2020-07-16 10:04:05 Size: 1174 bytes

7 Name: log-2020-07-20 Created: 2020-07-21 0 Path: PerfPowerServices/log-2020-07-20 13:22:32 0 SHA256: a233c427bfaf213402197ae2bfa74944c9aa5fb46c55efada0a82640f0863b83 Modified: 2020-07-21 13:22:32 Accessed: 2020-07-21 13:22:32 Size: 462 bytes

7 Name: com.apple.icloud.fmflocatord.plist Created: 2020-07-16 0 Path: Library/Preferences/com.apple.icloud.fmflocatord.plist 09:47:09 1 SHA256: 33397c9ebbe4510672f5f6b1b51896b7dba2da6854f70558ec7e3181c69d9b3a Modified: 2020-07-16 09:47:09 Accessed: 2020-07-16 09:47:09 Size: 81 bytes

7 Name: DataUsage.sqlite Created: 2020-07-22 0 Path: Library/Databases/DataUsage.sqlite 08:26:57 2 SHA256: 459444193a64e1afbb97e470e47e0630b1a204d9bde37bf81a43ba9ae48f1101 Modified: 2020-07-22 08:26:57 Accessed: 2020-07-16 09:33:11 Size: 102400 bytes

7 Name: com.apple.MobileInternetSharing.plist Created: 2020-07-16 0 Path: Library/Preferences/com.apple.MobileInternetSharing.plist 09:45:49 3 SHA256: a36aa0ea490ff46f478976277aeb3a6d97946da820e1847b017c416e5c4f47a8 Modified: 2020-07-16 09:45:49 Accessed: 2020-07-16 09:45:49 Size: 273 bytes

7 Name: com.apple.dasd.swapkills.plist Created: 2020-07-14 0 Path: Library/Preferences/com.apple.dasd.swapkills.plist 02:12:22 4 SHA256: 82d031f3f5addc7bd42651ef9c5e9c9c8850728f004208fbf31a3362b799df34 Modified: 2020-07-14 02:12:22 Accessed: 2020-07-14 02:12:22 Size: 111 bytes

7 Name: Accounts3.sqlite Created: 2020-07-22 0 Path: Library/Accounts/Accounts3.sqlite 08:26:19 5 SHA256: 8913822515dd2d42c8b4263fbccc353a3863aac81c2dc14f7b39a5b27519a073 Modified: 2020-07-22 08:26:19 Accessed: 2020-05-09 14:19:42 Size: 217088 bytes

7 Name: com.apple.NanoRegistry.NRRootCommander.volatile.plist Created: 2020-07-16 0 Path: Library/Preferences/com.apple.NanoRegistry.NRRootCommander.volatile.plist 10:04:04 6 SHA256: 0afea51fbaa1282de65c54840f740f2182f868be03f2c71658ab1fcb24f0f500 Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 106 bytes

7 Name: ProfileTruth.plist Created: 2020-07-16 0 Path: Library/ConfigurationProfiles/ProfileTruth.plist 10:05:42 7 SHA256: b00cf431ec71a6026ab4555ae936ffe3aa1a3dafa362faedb80ba8ae0af6dc62 Modified: 2020-07-16

iREPAIR - Backup Forensics Report (https://thelead82.com) - 73 of 75 I File Info Extra File Info D

10:05:42 Accessed: 2020-07-16 10:05:42 7 Name: .GlobalPreferences.plist Created:Size: 115 2020-07-16 bytes 0 Path: Library/Preferences/.GlobalPreferences.plist 09:56:59 8 SHA256: c50ea60d314ade73b26d738fee5d1853b248b8bc414c0f242919d334d20e87c6 Modified: 2020-07-16 09:56:59 Accessed: 2020-07-16 09:56:59 Size: 987 bytes

7 Name: keychain-backup.plist Created: 2020-07-22 0 Path: keychain-backup.plist 08:27:08 9 SHA256: 08e6c4d9249c1b34c36c3c8f25cd97cca68e96829f5fa2f7b939baa31a3ddcb0 Modified: 2020-07-22 08:27:08 Accessed: 2020-07-22 08:27:08 Size: 297320 bytes

7 Name: com.apple.health.shared.plist Created: 2020-07-22 1 Path: Library/Preferences/com.apple.health.shared.plist 08:26:59 0 SHA256: 0c8a05ba75c2b599d5254fb03572a3b26fc71594a8b848d253c74e05c07311c6 Modified: 2020-07-22 08:26:59 Accessed: 2020-07-22 08:26:59 Size: 130 bytes

7 Name: com.apple.SafariBookmarksSyncAgent.plist Created: 2020-07-16 1 Path: Library/Preferences/com.apple.SafariBookmarksSyncAgent.plist 10:06:04 1 SHA256: 6730146de14c775f6005458d3e765fb9b207186ccf7b4651aad426be4bd908b3 Modified: 2020-07-16 10:06:04 Accessed: 2020-07-16 10:06:04 Size: 2530 bytes

7 Name: com.apple.DuetExpertCenter.AppPredictionExpert.plist Created: 2020-07-22 1 Path: Library/Preferences/com.apple.DuetExpertCenter.AppPredictionExpert.plist 08:26:29 2 SHA256: 266e3106e29fbde129ec52985b5868db2276ecc463c0bf938d1d5223f1f52075 Modified: 2020-07-22 08:26:29 Accessed: 2020-07-22 08:26:29 Size: 940 bytes

7 Name: BLDatabaseManager.sqlite Created: 2020-07-16 1 Path: Documents/BLDatabaseManager/BLDatabaseManager.sqlite 10:05:53 3 SHA256: a2a953d272b436e3c1335e19d213ab5faf0004ddf355c56b7ba332497db70fec Modified: 2020-07-16 10:05:53 Accessed: 2020-04-01 17:12:38 Size: 40960 bytes

7 Name: backup_manifest.db Created: 2020-07-22 1 Path: Library/Application Support/CloudDocs/backup/backup_manifest.db 08:27:10 4 SHA256: b9fe65611d0e02af151b2cdf9933295900f2df449f78a4d093d99f0d928d28a7 Modified: 2020-07-22 08:27:10 Accessed: 2020-07-22 08:27:10 Size: 16384 bytes

7 Name: com.apple.assistant.backedup.plist Created: 2020-07-16 1 Path: Library/Preferences/com.apple.assistant.backedup.plist 10:05:55 5 SHA256: bf52249c340e641d191ea02b91e93b4714dea2c3830d7ed6e3838a1809871ff5 Modified: 2020-07-16 10:05:55 Accessed: 2020-07-16 10:05:55 Size: 327 bytes

7 Name: com.apple.facetime.bag.plist Created: 2020-07-16 1 Path: Library/Preferences/com.apple.facetime.bag.plist 09:57:00 6 SHA256: 21319ac87e86298af00dcf37e3cd156bcdfab27671ec707764aa92f38c8d857f Modified: 2020-07-16 09:57:00 Accessed: 2020-07-16 09:57:01 Size: 20378 bytes

7 Name: com.apple.NanoRegistry.NRLaunchNotificationController.volatile.plist Created: 2020-07-16 1 Path: Library/Preferences/com.apple.NanoRegistry.NRLaunchNotificationController.volatile.plist 10:04:04 7 SHA256: d8cf105dae79bb9f200cadb5ef5ac6939f10c077e153b5032c5e43e942e41381 Modified: 2020-07-16 10:04:04 Accessed: 2020-07-16 10:04:04 Size: 491 bytes

7 Name: com.apple.itunesstored.plist Created: 2020-07-21 1 Path: Library/Preferences/com.apple.itunesstored.plist 21:40:45 8 SHA256: ebd65d4ecf9f164875f0b3d252dfb5d7c8607ab537ced5c81ca3b46aba8cd7fb Modified: 2020-07-21 21:40:45 Accessed: 2020-07-21 21:40:45 Size: 1689 bytes

7 Name: com.apple.EmojiCache.plist Created: 2020-07-16 1 Path: Library/Preferences/com.apple.EmojiCache.plist 10:05:54 9 SHA256: db982b2d198b4e93ffe2ed6acab03f5c238d8b2513d1756f12514288e8178447 Modified: 2020-07-16 10:05:54 Accessed: 2020-07-16 10:05:54 Size: 3469 bytes

iREPAIR - Backup Forensics Report (https://thelead82.com) - 74 of 75 I File Info Extra File Info D

7 Name: ClearedSections.plist Created: 2020-07-16 2 Path: Library/BulletinBoard/ClearedSections.plist 10:05:52 0 SHA256: 9261ecceda608ef174256e5fdc774c1e6e3dcf533409c1bc393d490d01c713f1 Modified: 2020-07-16 10:05:52 Accessed: 2020-07-16 10:05:52 Size: 42 bytes

7 Name: CellularUsage.db Created: 2020-07-21 2 Path: Library/Databases/CellularUsage.db 12:42:23 1 SHA256: d0a702923deca270ab714d131ca4466d5edf6a42ac826f70da06d81454dc5012 Modified: 2020-07-21 12:42:23 Accessed: 2020-07-21 12:42:23 Size: 45056 bytes

7 Name: com.apple.TelephonyUtilities.plist Created: 2020-07-16 2 Path: Library/Preferences/com.apple.TelephonyUtilities.plist 10:04:05 2 SHA256: ec245390edf8f574da85f04b0b2033c29de66972edc6fa35ca6c46bb7a468f52 Modified: 2020-07-16 10:04:05 Accessed: 2020-07-16 10:04:05 Size: 761 bytes

7 Name: client.db Created: 2020-07-21 2 Path: Library/Application Support/CloudDocs/session/db/client.db 19:39:27 3 SHA256: 31c772789f0c01679da8aa23084f1da6d9a48baa0eafef6913ef3369577343db Modified: 2020-07-21 19:39:27 Accessed: 2020-06-27 16:19:56 Size: 458752 bytes

iREPAIR - Backup Forensics Report (https://thelead82.com) - 75 of 75