Hi All, I am having similar issue
This is from sierra 10.2.14 from
/Users/$username$/Library/Preferences/com.apple.sidebar.plist
How to decode below data manually?
<key>com.apple.LSSharedFileList.TemplateSystemSelector</key>
<integer>1935820100</integer>
</dict>
<key>EntryType</key>
<integer>515</integer>
<key>Name</key>
<string>File Container 1</string>
</dict>
<dict>
<key>Bookmark</key>
<data>
Ym9va5gHAAAAAAQQMAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAlAYAAAcAAAABAQAAVm9sdW1l
cwAQAAAAAQEAAEZpbGUgQ29udGlhbmVyIDIIAAAAAQYA
AAQAAAAUAAAACAAAAAQDAAAgZwYAAAAAAAgAAAAEAwAA
AgAAAAAAAAAIAAAAAQYAADwAAABMAAAACAAAAAAEAABB
vq4pRwAAABgAAAABAgAACgAAAAAAAAAPAAAAAAAAAAAA
AAAAAAAAAAAAAAEFAAAlAAAAAQkAAGZpbGU6Ly8vVm9s
dW1lcy9GaWxlJTIwQ29udGlhbmVyJTIwMi8AAAAIAAAA
BAMAAADg9QUAAAAAJAAAAAEBAAAwMDk4QzJEOS1GRjhG
LTNGNDEtQjNDQS01Rjg3Q0Y1NEEwMjUYAAAAAQIAAGEC
AAABAAAA7xMAAAEAAAAAAAAAAAAAAAQAAAADAwAAoA8A
AAcAAAABAQAAVm9sdW1lMgAUAAAAAQEAAEZpbGUgQ29u
dGlhbmVyIDIuZG1nDAAAAAEGAAAEAAAAPAEAAEwBAAAI
AAAABAMAAJkAAAAAAAAADAAAAAEGAAA8AAAATAAAAHwB
AAAIAAAAAAQAAEG+rilGAAAAGAAAAAECAAABAAAAAAAA
AA8AAAAAAAAAAAAAAAAAAAAYAAAAAQkAAGZpbGU6Ly8v
Vm9sdW1lcy9Wb2x1bWUyLwgAAAAEAwAAAKAj/AYAAAAI
AAAAAAQAAEG+rfrpAAAAJAAAAAEBAAA5MzlENEEyNS0w
MzE5LTMyOEEtQkZGNC1BQ0I2MTA2RDFEMUIYAAAAAQIA
AIEAAAABAAAA7xMAAAEAAAAAAAAAAAAAABAAAAABAQAA
L1ZvbHVtZXMvVm9sdW1lMggAAAABCQAAZmlsZTovLy8M
AAAAAQEAAE1hY2ludG9zaCBIRAgAAAAEAwAAAFBH+A0A
AAAIAAAAAAQAAEG+qsHGAAAAJAAAAAEBAAAwRjgzQUEz
NC0zMDA2LTNGQ0EtQkNGQS1BNjdDQTIwMzVGQjkBAAAA
AQEAAC8AAABgAAAA/v///wDwAAAAAAAABwAAAAIgAADk
AgAAAAAAAAUgAAB0AgAAAAAAABAgAACEAgAAAAAAABEg
AAC4AgAAAAAAABIgAACYAgAAAAAAABMgAACoAgAAAAAA
ACAgAAA8AgAAAAAAAAQAAAADAwAAAPAAAAQAAAADAwAA
AAAAABAAAAABBgAAWAMAAGQDAAAwAQAAZAMAALYAAAAB
AgAAN2JhYTljNzRkMjVmY2EwZDQ4NGY4ZTMxZmFjMmRi
YTg5NGFiMTUzNDswMDAwMDAwMDswMDAwMDAwMDswMDAw
MDAwMDAwMDAwMDIwO2NvbS5hcHBsZS5hcHAtc2FuZGJv
eC5yZWFkLXdyaXRlOzAwMDAwMDAxOzAxMDAwMDA0OzAw
MDAwMDAwMDAwMDAwOTk7L3ZvbHVtZXMvdm9sdW1lMi9m
aWxlIGNvbnRpYW5lciAyLmRtZwAAAKgAAAD+////oA8A
APACAAANAAAABBAAAGgBAAAAAAAABRAAAIwBAAAAAAAA
EBAAALABAAAAAAAAQBAAAKABAAAAAAAAACAAAHADAAAA
AAAAAiAAAFwCAAAAAAAABSAAANABAAAAAAAAECAAADwB
AAAAAAAAESAAABACAAAAAAAAEiAAAPABAAAAAAAAEyAA
AAACAAAAAAAAICAAADwCAAAAAAAAgPAAAIgDAAAAAAAA
GQAAAAEBAAAvVm9sdW1lcy9GaWxlIENvbnRpYW5lciAy
AAAAYAAAAP7///8B8AAASAQAAAcAAAACIAAA5AIAAAAA
AAAFIAAAdAIAAAAAAAAQIAAAhAIAAAAAAAARIAAAuAIA
AAAAAAASIAAAmAIAAAAAAAATIAAAqAIAAAAAAAAgIAAA
PAIAAAAAAAAEAAAAAwMAAAHwAAAEAAAAAwMAAAEAAAAM
AAAAAQYAAIQFAABkAwAAkAUAABoAAAABAQAATlNVUkxE
b2N1bWVudElkZW50aWZpZXJLZXkAAAQAAAADAwAAAgAA
AKoAAAABAgAAODBmMjVjZjdkYWNhZjI5NTEzNjljZGFh
ZGViNWQ4ZTI3ZTA4Mzc5MjswMDAwMDAwMDswMDAwMDAw
MDswMDAwMDAwMDAwMDAwMDIwO2NvbS5hcHBsZS5hcHAt
c2FuZGJveC5yZWFkLXdyaXRlOzAwMDAwMDAxOzAxMDAw
MDBiOzAwMDAwMDAwMDAwMDAwMDI7L3ZvbHVtZXMvZmls
ZSBjb250aWFuZXIgMgAAAMwAAAD+////AQAAABwFAAAQ
AAAABBAAACwAAAAAAAAABRAAAFwAAAAAAAAAEBAAAHwA
AAAAAAAAQBAAAGwAAAAAAAAAACAAAJwFAAAAAAAAAiAA
APgEAAAAAAAABSAAAKQAAAAAAAAAECAAABQAAAAAAAAA
ESAAAOQAAAAAAAAAEiAAANQAAAAAAAAAEyAAAGwAAAAA
AAAAICAAABABAAAAAAAAQCAAADABAAAAAAAAAdAAAJwA
AAAAAAAAgPAAAOAFAAAAAAAAsAUAgNQFAAAAAAAA
</data>
I know USB parameters so I searched the entire E01 for a plain text for USB S/N’s, VID’s and PID’s but so far found only
~Private/Vatr/db/Diagnostics/Persist/00000000000.b.tracev 3
I have found some plain text strings with USB s/n’s , but nothing in install log or gz logs. Any other places I could look into?