All Details Evidence Details Case Photographs Forensic Hardware and Sofware 0384 Report Produced : 01/31/2020 07:42:18 Produced By : Ps Forensic Hardware and Sofware 0384 Report Produced : 01/31/2020 07:42:18 Produced By : Evidence Details Evidence Reference 0005 Evidence Type Desktop Logged In Date/Time 08/21/2019 14:15:24 (-0400) Original Seal Number N/A Priority High Description HP EliteDesk 800 S/N: 2UA438LXJW Property Number 0214207266 Archived No Pre-Imaging Details Start Date/Time 08/21/2019 14:27:41 (-0400) End Date/Time 08/21/2019 15:00:49 (-0400) Conducted By (Name) Manufacturer Hewlett Packard Model EliteDesk 800 Serial Number 2UA4381XJW Casing Type Workstation Casing Colour Black BIOS Key F10 BIOS Date/Time 08/21/2019 15:00 Actual Date/Time 08/21/2019 15:00 Password Protected No Attachment(s) IMG _0104[1].JPG Evidence Reference 0006 Evidence Type Hard Drive Logged In Date/Time 08/21/2019 14:15:25 (-0400) Original Seal Number N/A Priority High Description Seagate 500GB SATA HDD S/N: Z6E8KD3N Property Number N/A Archived No Pre-Imaging Details EFTA00128432

--=PAGE_BREAK=--

Start Date/Time 08/21/2019 15:04:40(-0400) Conducted By (Name) Manufacturer Seagate Model ST500DM002 Serial Number Z6E8KD3N Type SATA HDD Imaging Details Start Date/Time 01/29/2020 11:02:45 (-0600) End Date/Time 01/29/2020 11:03:00 (-0600) Conducted By (Name) | Software Used Tableau TX1 SN: 000eccS801d10f Write Blocker Tableau TX1 SN: 000ecc5801d10f Image Type E01 Compression None Block Size 64 Cyclic Redundancy Check (CRC) 64 MDS Odd9c2ad8 1 8c4aSaS58bab2£78d57f2d7 SHAI 0d7825 1b33302e327c56c1ef28e9ccc8f353bd46 Image Verified Yes Imaging Workstation Tableau TX1 SN: 000ecc5801d10f Image Destination W300M6W8 Imaging started: Thu Aug 22 03:36:11 2019 (UTC-0400) Source device model: ATA STS00DM002-1BD142 Notes Log File indicates incorrect BOP Barcode. Attachment(s) Z6E8KD3N.log Evidence Reference 0007 Evidence Type Desktop Logged In Date/Time 08/21/2019 14:15:26 (-0400) Original Seal Number N/A Priority High Description HP Compaq 8200 Elite Property Number 0214107384 Archived No Pre-Imaging Details Start Date/Time 01/29/2020 11:07:30 (-0600) End Date/Time 01/29/2020 11:10:48 (-0600) Conducted By (Name) fF Manufacturer Hewlett Packard Model Compaq 8200 Elite Serial Number MXL14700DY Casing Type Small Form Factor Casing Colour Black BIOS Date/Time 08/22/2019 07:45 EFTA00128433

--=PAGE_BREAK=--

Actual Date/Time 08/22/2019 07:45 Password Protected No Attachment(s) IMG _0108.JPG Evidence Reference 0008 Evidence Type Hard Drive Logged In Date/Time 08/21/2019 14:15:27 (-0400) Original Seal Number N/A Priority High Description Hitachi 5S00GB SATA HDD S/N: JP1572JE36LSNK Property Number N/A Archived No Pre-Imaging Details Start Date/Time 01/29/2020 12:01:44(-0600) Conducted By (Name) [iy Manufacturer Hitachi Model HDS721050CLA662 Serial Number JP1572JE36LSNK Type SATA HDD Imaging Details Start Date/Time 01/29/2020 12:02:57 (-0600) End Date/Time 01/29/2020 12:04:16 (-0600) Conducted By (Name) | Software Used Tableau TX1 SN: 000ecc5801d10f Write Blocker Tableau TX1 SN: 000ecc5801d10F Image Type E01 Compression None Block Size 64 Cyclic Redundancy Check (CRC) 64 MDS5 6296943861 55e0f49e7a8c0da0da2840 SHAI 3ac4c0fa2b1cb97020e22bc3966d4b3609c89d57 Image Verified Yes Imaging Workstation Tableau TX1 SN: 000eccS801d10f Image Destination W300M6W8 Notes Attachment(s) Case Photographs 0005: IMG_0078.JPG le /3960_IMG_0078.JPG 0005: IMG_0079.JPG 3961_IMG_0079.JPG 0005: IMG_0080.JPG 3962_IMG_0080.JPG Imaging started: Thu Aug 22 03:34:35 2019 (UTC-0400) Source device model: Hitachi HDS721050CLA662 Log File indicates incorrect BOP Barcode. JP1572JE36LSNK.log EFTA00128434

--=PAGE_BREAK=--

0005: IMG_0081.JPG \523963_IMG_0081.JPG 0005: IMG_0082.JPG \623964_IMG_0082.JPG 0005: IMG_0083.JPG 1623965 IMG_0083.JPG 0005: IMG_0084.JPG \613966_IMG_0084.JPG 0005: IMG_0085.JPG \»33967_IMG_0085.JPG 0005: IMG_0086.JPG 633968 _IMG_0086.JPG 0006: IMG_0087.JPG \»13969_IMG_0087.JPG 0006: IMG_0088.JPG \613970_IMG_0088.JPG 0006: IMG_0089.JPG \613971_IMG_0089.JPG 0007: IMG_0090.JPG \»35047_IMG_0090.JPG 0007: IMG_0091.JPG (635048 IMG _0091.JPG 0007: IMG_0092.JPG (635049 IMG _0092.JPG 0007: IMG_0093.JPG (635050 _IMG_0093.JPG 0007: IMG_0094.JPG (635051 IMG _0094.JPG 0007: IMG_0095.JPG \615052_IMG_0095.JPG 0007: IMG_0096.JPG \615053_IMG_0096.JPG 0007: IMG_0097.JPG (615054. IMG_0097.JPG 0007: IMG_0098.JPG \625055_IMG_0098.JPG 0007: IMG_0099.JPG 65056 _IMG_0099.JPG 0008: IMG_0100.JPG \65057_IMG_0100.JPG 0008: IMG_0101.JPG \»!5058 IMG _0101.JPG 0008: IMG_0102.JPG (615059 IMG _0102.JPG 0008: IMG_0103.JPG \65060_IMG_0103.JPG EFTA00128435