From: Sent: To: Cc: Subject: Monda Ma 24, 2021 1:31 PM FW: Tova Good afternoon. At 12:22pm my partner, lames Seplowitz, received the email below. I interpret the email as a threat against Tova's safety. I am requesting that the Government use its resources to thoroughly expeditiously investigate the perceived threat and let us know whether it is credible. Note that I believe the email went to my partner because when people email us from the link on our website, it goes to my partner and not me. Please give me a call to discuss in further detail. Thank you. Jason -42da e FOY & SEPLOWITZ LLC www.foyseplowitz.com From: James Seplowitz < Sent: Monday, May 24, 2021 12:29 PM To: Subject: FW: From: Sent: Monday, May 24, 2021 12:22 PM To: Subject: Tova Go ahead and let your client Tova know, THIS ISN'T OVER!! Q 1 EFTA00131930

5/24/2021 N-DEx - Print View Bakersfield PD CA Incident Report March 03, 2014 Agency POC Name: COPLINK Bakersfield PD CA Agency POC Phan Data Owner Organization: Bakersfield PD CA Data Owner Old: CA0150200 Data Item Category: Incident Report Data Item Date: March 03.2014 Data Item Reference ID: 2014za0130423 E Record QUID: 9a3cd3de-c353-43d5-9d14-99f39cel 8f3c People (1) Born: Height: in Weight: 21510 Halt Color: Brown Eye Color: Green Gender: Male Race: irninte Identifiers Driv ers License Gau l er: CA [Locations Residence Activities (2) Offense Dal: March 03. 2014 Activity ID: ID_CHARGEOFDOCuMENTSAKERSFI ELD.1493590 Offense Data Date: March 03. 2014 Offense Text: MAXIMUM SPEED 65 MILES PER HOUR DOB: Associated Activities Activity Involved Pawn Incident Date: 6:07 AM March 03. 2014 Other Data Biographic Data Ethnicity: NonhapanIC Or NOnlalln0 Associated Activities Incident ID: 2014:n080423 E Actsvity Descri nron Description: 223491A) Description: MAXIMUM SPEED 65 MILES PER HOUR Incident Date: 6:07 AM Mardi 03.2014 Activity ID: 201425080423 E Associated Persons " Inwrved Person riled Activite!-; Offense ID: ID_CHAFtGEOFCXX UMENT.BAKERSF *La 1493590 Activity Description BAKERSFIELDPD CITATION 20142A080423 E 20140303 Locations (3) S Ca Bakersfield R 991 Ming Bakersfield Items (1) Color. Black License Platen Style: 4 Door hack fe, the SallarinaVi N-DEx information may be viewed, output, or discussed without advance authorization of the record owning agency. However, any use of N- DEx information requires the satisfaction of the Advanced Permission Requirement (confirming the terms of information use) and the Verification Requirement (verifying the completeness, timeliness. accuracy, and relevancy). httpsfindexibLgov/N-DExPortadocumenVshowPrintViewMulti.htm?guid=9a3cd3de-c353-43d5-9df4-99f39ce18f3cadocumentType=record&purposeC... 1/1 EFTA00131931

5124/2021 Omnixx Force QH: C, 2019010614, , U, - Received 05/24/2021 15:4 0:49 SOURCE: III NL01061300255EQH NYD030100 NO IDENTIFIABLE RECORD IN THE NCIC INTERSTATE IDENTIFICATION INDEX (III) FOR NANIMI ATN/2019010614. END TRACKING: 05/24/2021, 15:40:48 - MKE: QH - Source: III - REF: 06130000QW - ISN: 061300255H https://csa.justice.gov/OmnixxForce/ 1/1 EFTA00131932

5/2412021 Omnixx Force DQNAM: NV, Y, M - Received 05/24/2021 15:37:28 SOURCE: NLETS - NVDMVPS00 DR.NVDMVPS00 12:37 05/24/2021 08594 12:37 05/24/2021 10834 NYD0J0100 *06130024UQ TXT NAME: RESIDENCE ADDRESS: PRIMARY CONTACT ADDRESS: DATE OF BIRTH: SSN: HEIGHT: 510 WEIGHT: 225 EYE COLOR: GRN HAIR COLOR: BRO GENDER: Male MEDICAL DETAILS: false *** DRIVER LICENSE DETAILS *** DRIVER AUTHORIZATION ID: ISSUE DATE: EXPIRATION DATE: DRIVING RESTRICTION: Corrective lenses DRIVER LICENSE NON-COMMERCIAL CLASS: C / NORMAL LICENSED COMMERCIAL DRIVER: NO LICENSED NON-COMMERCIAL DRIVER: YES DRIVER LICENSE NON-COMMERCIAL STATUS: VALID - Expires: *** ADDITIONAL INFORMATION *** FIELD NAME: CAVEAT FIELD VALUE: THIS INFORMATION MAY BE USED FOR CRIMINAL JUSTICE PURPOSES ONLY. NEVADA DEPARTM ENT OF MOTOR VEHICLES PER NRS 52.205(3) TRACKING: 05/24/2021, 15:37:27 - MKE: DR - Source: NLETS - From: NVDMVPS00 - REF: 06130000T0 - ISN: 06130024UW httpslicsa.justice.gov/OmnixxForce/ 1/1 EFTA00131933

TransUnion Provided Information First Name: Middle Name: Last Name: Date Of Birth: Email: Phone: Current Address: Requestid: Discovered Subject Information Smalls: Gender: Aliases: Jobs: Male Languages: Usernames: White Collar Worker. Environmental Health Safety and Hazmat Task Force Leader at Images Important. Ths is NOT a CONSUMER REPORT and does not constitute a 'consumer report" under the Far Credit Reporting Act ('FCRA'). This report may not be used to determine the eligibility for credit. insurance. employment or any other purpose regulated under the FCRA. This system may be used only n accordance vnth your Subscriber Agl the Gramm-Leach-Bliley Act ('GLBA'). the Driver's Privacy Protection Act ('OPPA") and all other applicable laws User agrees to having knowledge of all applicable laws pertaining to the usage of data. User accepts all responsibility civily and criminally for any use of the system. Violations of these restrictions or misuse of this system will cause your access to be terminated and will cause an tate investigation. EFTA00131934

TransUnion EFTA00131935

TransUnion. Interests Category: General Interests: Pets, Home And Garden, News And Current Events, Books, Business. Charitable Donors, Sports, Automotive. Travel, Arts And Crafts, Magazine Buyer. Health And Wellness Household Has Credit Card: Has Premium Credit Card: Yes Household Income: Invested Assets: 75k-1OOk Has Retail Card: High Net Worth: Home Market Value: Home Owner Status: 25Ok-3OOk Own Length of Residence: Marital Status Net Worth: Spending Score: 3 Years Married 25Ok-5OOk Home Property Type: Super High Net Worth: EFTA00131936

TransUnion. Related UrIs You Tube You C I] I] domain: 1.vwittlinkedin.com domain: you tube.com category: persona _pro Iles category personal_protiles category: personal_profiles category personal_profiles EFTA00131937

S TransUnion Hits Domain CateRon' Matched By Content Rating URL facebootcom Social Network Vey High Profiles myspaoacom Social Network Myeass dd Profits Vey High faceboolccom Social Network Very High Profiles youtube.conguser Picture and Video . Very High Shame telle.COM °thee Very Hit Unkedin.com/in Sccial Nefiosrk Very HO Profiles Medium • '' Other &wise/ Other Medium ebay.corn Online Ccairroorce Medium ebay.corn Online Canmorce I Medium EFTA00131938

wn'F'''W IMIMIMI l ' 48°,"' W wn'Is''W MM= .4.0 wn'Is''W --- '.... ,.1.79.H.I,Pu.q44.onapna asnag jaw. Arno uo iludthys aas j uroyAvsa m uapaps awl.* .3.0.4, dogs na 0..., anup umfrp aukni uo 'rap mq .1.9 1.1O!UnSUD.11 GY EFTA00131939

FOR LAW ENFORCEMENT PURPOSES ONLY People-Search ADDRESS FIRST SEEN LAST SEEN SSN DOB ifilia.14112 21 SSN: IssuelMIMMI =Pr Other People who have used this SSN. This does not usually indicate Indicators fraud. Bankruptcies: None Found View Person Liens: None Found Record ] Judgments: None Found Utilities: None Found Date • DOB. Age: Other DOB: Age:. Gender: Male Possible Email Addresses 73%) (40%) 03/29/2017 05/24/2021 Possible Phone Page 1 of 3 05/24/2021 EFTA00131940

FOR LAW ENFORCEMENT PURPOSES ONLY People-Search Addre I4I I4I ICI I4I I4I I4I I4I (40%) I4I hI Page 2 of 3 05/24/2021 EFTA00131941

FOR LAW ENFORCEMENT PURPOSES ONLY People-Search Page 3 of 3 05,24,202I EFTA00131942

EFTA00131943

90A-NY-3151227 Serial 192 FD-1087:i IbEcv5S44$1()) UNCLASSIFIED FEDERAL BUREAU OF INVESTIGATION Collected Item Log Event Title: (U) Submission of CART Derivative Date: 07/26/2021 Evidence NYC026022 CC: Approved By: Drafted By: Case ID *: 90A-NY-3151227 (U) UNSUB(S); JEFFREY EPSTEIN - VICTIM; DEATH INVESTIGATION Enclosure(s): Enclosed are the following items: 1. (U) Tape Information Details: Submission of CART Derivative Evidence NYC026022: Two (2) Ultrium LTO-6 tapes containing the CART network archive of video images taken from MCC- NY video recorder hard drives, as of 06/21/2021. Master Copy. Collected From: (U) CART-NY Receipt Given?: No Holding Office: NY - NEW YORK Item Type 16 Digital Description (U) Two (2) Ultrium LTO-6 tapes containing the CART network archive of video images taken from MCC-NY video recorder hard drives, as of 06/21/2021. Master Copy. Collected On: 07/23/2021 06:30 PM EDT Seizing Individual: Located By: Device Type: Magnetic Tape Number of Devices Collected: 2 UNCLASSIFIED This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents arc not to be distributed outside your agency. EFTA00131944

90A-NY-3151227 Serial 192 UNCLASSIFIED Title: (U) Submission of CART Derivative Evidence NYCO26022 Re: 90A-NY-3151227, 07/26/2021 .• UNCLASSIFIED 2 EFTA00131945

Page 1 of 3 [Job Detail Job Log *******************(MESSAGES OF MASTER JOB)******************* Arcserve Backup Backup [SubJob] Totals For SubJob 1 Job No 12 Job ID 183 Total Session(s) 1 Total Size (Disk) 4.04 TB Total Size (Media) 4.04 TB Elapsed Time 24h 3m is Average Throughput 2.87 GB/min SubJob Status Finished [Master Job] Totals For Master Job Job No 11 Job ID 182 Total Session(s) 1 Total Directories 78 Total File(s) 2,318 Total Skip(s) 0 Total Size (Disk) 4.04 TB Total Size (Media) 4.04 TB Elapsed Time 24h 3m is Average Throughput 2.87 GB/min Backup Operation Successful. *******************(MESSAGES OF CHILD JOB #1]******************* Arcserve Backup Backup Job No 12 Job ID 183 Description NY-3151227 Backup-Full Workstation NY-F07 Source \\NY-F07\CASES13\NY-3151227 Target NY-3151227, ID 787A, Sequence #1, S/N RW6666L6 Session 1 Start Time 6/16/21 5:12 PM Session Method Full Directories Backed Up Target NY-3151227, ID 787A, Sequence #2, S/N RW6669L6 Session 1 res://asres2.dll/FITML JS PROPERTIES 6/21/2021 EFTA00131946

Page 2 of 3 Total Directories 78 Total File(s) 2,318 Total Skip(s) 0 Total Size (Disk) 4.04 TB Total Size (Media) 4.04 TB Elapsed Time 24h 3m is Average Throughput 2.87 GB/min Session Status Finished Totals For \\NY-F07 Total Session(s) 1 Total Directories 78 Total File(s) 2,318 Total Skip(s) 0 Total Size (Disk) 4.04 TB Total Size (Media) 4.04 TB Elapsed Time 24h 3m is Average Throughput 2.87 GB/min Node Status Finished Verify With CRC Backup(s) Job No 12 Job ID 183 Workstation NY-BACKUP Source NY-3151227, ID 787A, Sequence #1 Session 1 Target \\NY-F07\CASES13\NY-3151227 Start Time 6/17/21 5:21 PM Total Directories 78 Total File(s) 2,318 Total Skip(a) 0 Total Size (Disk) 4.04 TB Total Size (Media) 4.04 TB Elapsed Time 7h 20m 2s Average Throughput 9.41 GB/min Totals For Job Total Session(s) 1 Total Directories 78 Total File(s) 2,318 Total Skip(s) 0 Total Size (Disk) 4.04 TB Total Size (Media) 4.04 TB res://asres2.d11/HTIvfL_JS_PROPERTIES 6/21/2021 EFTA00131947

Page 3 of 3 Elapsed Time 24h 3m is Average Throughput 2.87 GB/min Backup Operation Successful. res://asres2.d11/HTML_JS_PROPERTIES 6/21/2021 EFTA00131948

90A-NY-3151227 Serial 193 FD-I036 (12cv. 10-16-2009) UNCLASSIFIED FEDERAL BUREAU OF INVESTIGATION Import Form Form Type: DEL REX - Digital Evidence Laboratory Date: 09/02/2021 Report of Examination Title:(U) Request* HQQ190816001 TB Approved By: Drafted By: Case ID #: 90A-NY-3151227 (U) UNSUB(S); JEFFREY EPSTEIN - VICTIM; DEATH INVESTIGATION Synopsis: (U) RE: 8/16/2019 Enclosure(s): Enclosed are the following items: 1. (U) Request* HQQ190816001 TB; retained at ERF .• UNCLASSIFIED EFTA00131949

UNCLASSIFIED Physical 1A/1C Cover Sheet for Serial Export Created From: 90A-NY-3151227 Serial 193 Package: 1A93 Stored None Location: Summary: (U) 2 Lab Report, 16 CoC, 2 Shipping invoice, 1 CD-R (logs), 1 DEMS disc Acquired By: Acquired On: 2021-06-16 Attachment: (U) Request# HQQ190816001 TB; retained at ERF EFTA00131950

18-I (Rev. 08.15.2017) UNCLASSIFIED ill Federal Bureau of Investigation Digital Evidence Laboratory To: New York Request Date: Ref. No: Title: REPORT OF EXAMINATION August 16, 2019 Serial 58 UNSUB(S); JEFFREY EPSTEIN - VICTIM; DEATH INVESTIGATION Date item(s) received: August 16, 2019 Item(s) submitted: HQQ019594: HQQ019333: HQQ019334: HQQ019595: HQQ019596: HQQ019331: Page 1 of 9 ERF Building 27958A Quantico. VA 22135 Date: June 16, 2021 Case ID: 090A-NY-3151227 Request No.: HQQ190816001 DVR, Dell, PowerEdge R420, SBMQZI2, 1B20, One (1) DVR System Controller (Examined) Hard Drive, Dell, WD5003ABYX-18WERA0, WMAYP0DFPY4F, 1B20, One (1) hard disk drive from Bay 1 of DVR System Controller. (Examined) Hard Drive, Dell, WD5003ABYX-18WERA0, WMAYP0DNCDAV, 1B20, One (1) hard disk drive from Bay 2 of DVR System Controller. (Examined) DVR, NICE Systems, SA-6640S. F96168201-004, 1B19, One (1) DVR Disk Array (DVR 2) (Examined) DVR, NICE Systems, Nicevision PRO (NP-2000), 43144902, 1B19, One (1) DVR Disk Array Controller (DVR 2) (Examined) Hard Drive, Seagate, ST3320620AV, 9QFCN325, 1B19, One (1) hard disk UNCLASSIFIED An Accredited Laboratory Since January 16, 2007 e c EFTA00131951

UNCLASSIFIED HQQ019597: HQQ018772: HQQ018773: HQQ018774: HQQ018775: HQQ018776: HQQ018777: HQQ018778: HQQ018779: HQQ018780: HQQ018781: HQQ018782: HQQ018783: HQQ018784: HQQ018785: HQQ018786: HQQ018787: HQQ019598: HQQ190816001 090A-NY-3 151227 Page 2 of 9 drive from top bay of DVR 2 Disk Array Controller. (Examined) DVR, NICE Systems, Premium 8600, 232476, 1B21, One (1) DVR Disk Array (DVR 1) (Examined) Hard Drive, Western Digital, WD3200AAJB, WCAV21723809, From Bay 1 of HQQ019597 (Examined) Hard Drive, Seagate, ST3320620AV, 9QF7PFHZ, From Bay 2 of HQQ019597 (Examined) Hard Drive, Seagate, ST3320620AV, 9QF7P84L, Drive from Bay 3 of HQQ019597 (Examined) Hard Drive, Seagate, ST3320620AV, 9QFCM8PR, From Bay 4 of HQQ0 19597 (Examined) Hard Drive, Seagate, ST3320620AV, 9QF649J4, From Bay 5 of HQQ0 19597 (Examined) Hard Drive, Seagate, ST3320620AV, 9QF7NJTG, From Bay 6 of HQQ0 19597 (Examined) Hard Drive, Seagate, ST3320620AV, 9QFB0S6N, From Bay 7 of HQQ0 19597 (Examined) Hard Drive, Seagate, ST3320620AV, 9QFB0P1Q, From Bay 8 of HQQ0 19597 (Examined) Hard Drive, Seagate, ST3320620AV, 9QF7P8W1, From Bay 9 of HQQ0 19597 (Examined) Hard Drive, Seagate, ST3320620AV, 9QF7PFPY, Bay 10 of HQQ0 19597 pcarnined) Hard Drive, Seagate, ST3320620AV, 9QFCM7CS, From Bay 11 of HQQ019597 (Examined) Hard Drive, Seagate, ST3320620AV, 9QF9Q0F5, From Bay 12 of HQQ0 19597 (Examined) Hard Drive, Maxtor, MaXLine II, A830RYBE, Drive from Bay 13 (Examined) Hard Drive, Western Digital, WD3200AAJB-00J3A0, WCAV21023754, From Bay 14 of HQQ019597 (Examined) Hard Drive, Seagate, ST3320620AV, 9QFCJV3P, Bay 15 of HQQ0 19597 (Examined) Hard Drive, Seagate, ST3320620AV, 9QF7N0SX, From Bay 16 of HQQ0 19597 (Examined) DVR, NICE Systems, Nicevision PRO (NP-2000), 43144901, 1B21, One (1) UNCLASSIFIED EFTA00131952

UNCLASSIFIED HQQ018525: HQQ018526: HQQ019599: HQQ019600: HQQ019601: HQQ019602: HQQ019603: HQQ019604: HQQ019605: HQQ019606: HQQ019607: HQQ019608: HQQ019609: HQQ019610: HQQ01961I: HQQ019612: HQQ019613: HQQ190816001 090A-NY-3151227 Page 3 of 9 DVR Disk Array Controller (DVR 1) (Examined) Hard Drive, Maxtor, DiamondMax 10 (6L080P0), L25C8D3G, 1B21, One (1) hard disk drive from top bay of DVR 1 Disk Array Controller. (Examined) Hard Drive, Maxtor, DiamondMax 10 (6L080P0), L25CF5QG, 1821, One (1) hard disk drive from bottom bay of DVR 1 Disk Array Controller. (Examined) Hard Drive, Seagate, ST500DM002, Z3T6C.JJA, 1BI, One (1) hard drive (E6516194) (Examined) Hard Drive, Hitachi, HDS721050CLA662, JP1572.1E36A13K, 182, One (I) hard drive (E6516195) (Examined) Hard Drive, Seagate, ST500DM002, Z3T6CF5X, 183, One (1) hard drive (E6516196) (Examined) Hard Drive, Seagate, ST3500320NS, 9QM8MT9P, 1134, One (1) hard drive (E6516197) (Examined) Hard Drive, Hitachi, HDS721050CLA662, JP1572JE36MWNK, 1B5, One (1) hard drive (E6516198) (Examined) Hard Drive, Seagate, ST3500320NS, 9QM8EC75, 1B6, One (1) hard drive (86516199) (Examined) Hard Drive, Seagate, ST500NM0011, Z1M1PZPE, 1B7, One (1) hard drive (E6516200) (Examined) Hard Drive, Western Digital, WD5000AVDS, WCAV9Z911026, 188, One (1) hard drive (E6516201) (Examined) Hard Drive, Western Digital, WD5000AAKX, WCC2EJUC34CJ, 1B9, One (1) hard drive (86516202) (Examined) Hard Drive, Seagate, ST3500320NS, 9QM8MSEZ, 1810, One (1) hard drive (E6516203) (Examined) Hard Drive, Seagate, ST3500641A, 3PO00Q5E, Partial image of DVR 2 system drive (Examined) CD-R, Photos of bad drives. (Examined). Hard Drive, Seagate, ST500NM0011, Z1M1PX26, 1811, One (1) hard drive (E6516204) (Examined) Hard Drive, Seagate, ST500NM0011, ZIMIQIFX, 1812, One (1) hard drive (E6516205) (Examined) Hard Drive, Western Digital, WD5000AVDS, WCAV9T870016, 1813, One (1) hard drive (86516206) (Examined) UNCLASSIFIED EFTA00131953

UNCLASSIFIED HQQ019614: Hard Drive, Western Digital, WD5000AAKX, WCC2E0DE83YK, 1B14, One (1) hard drive (E6516207) (Examined) HQQ0I9615: Hard Drive, Seagate, ST3500320NS, 9QM8MT6D, 1B15, One (1) hard drive (E6516208) (Examined) 11QQ019616: Hard Drive, Seagate, ST500NM0011, Z1M1PZ07, 1B16, One (1) hard drive (E6516209) (Examined) HQQ019617: Hard Drive, Seagate, ST500NM0011, Z1M1L0YG, 1B17, One (1) hard drive (E6516210) (Examined) HQQ019618: Hard Drive, Seagate, ST3500320NS, 9QM8MSRR, 1B18, One (1) hard drive (E6516211) (Examined) HQQ019619: Hard Drive, Seagate, ST1000DM003, S1D85PLA, 1B22, Clone of 1B1 (E6515200) (Examined) HQQ019620: Hard Drive, Hitachi, HUA722010CLA330, N039F71 T 1B23, Clone of IB2 (E6515201) (Examined) HQQ019621: Hard Drive, Seagate, ST1000DM003, Z1D3ZSS0, IB24, Clone of 1B3 (E6515202) (Examined) HQQ019622: Hard Drive, Seagate, ST1000DM003, Z4YDJL1T, 1B25, Clone of 1B4 (E6515203) (Examined) HQQ019623: Hard Drive, Seagate, ST1000DM003, Z4YDHX5M, 1B26, Clone of 1B6 (E6515204) (Examined) HQQ019624: Hard Drive, Seagate, ST1000DM003, W1D48YH6, 1B27, Clone of 1B7 (E6515205) (Examined) HQQ019625: Hard Drive, Western Digital, WD10EADS, WCAU45803950, 1B28, Clone of 1B8 (E6515206) (Examined) HQQ019626: Hard Drive, Seagate, STI000DM003, Z4Y00Q48, 1B29, Clone of 1B9 (E6515207) (Examined) HQQ019627: Hard Drive, Seagate, ST1000DM003, W1D496N0, 1B30, Clone of 1B10 (E6516228) (Examined) HQQ019628: Hard Drive, Seagate, STI000DM003, Z1DB25CT, 1B31, Clone of 1B11 (E6516229) (Examined) HQQ019629: Hard Drive, Seagate, ST1000DM003, W1D48Z6E, 1B32, Clone of 1B12 (E6516230) (Examined) HQQ019630: Hard Drive, Western Digital, WD1003FZEX, WCC3F2783519, IB33, Clone of IBIS (E651623 I) (Examined) HQQ019631: Hard Drive, Seagate, ST1000DM003, S1D9GK9P, 1B34, Clone of 1B16 HQQ190816001 090A-NY-3 151227 Page 4 of 9 UNCLASSIFIED EFTA00131954

UNCLASSIFIED (E6516232) (Examined) HQQ019632: Hard Drive, Seagate, ST1000DM003, S1D9DETC, (E6516233) (Examined) HQQ019633: Hard Drive, Seagate, STI000DM003, W1D06T5L, (E6516234) (Examined) 1B35, Clone of 1B17 1B36, Clone of 1B18 Summary: Per Electronic Communication (EC) dated 8/26/2019, Special Agent ( I atransferred the submitted specimens from the New York field office to the Operational Technology Division/Digital Forensics Analysis Unit (OTD/DFAU) in Quantico for examination. The specimens were received by the Computer Analysis Response Team (CART) for analysis. Per discussion with CART Laboratory Supervisor a on 8/19/2019, the Digital Video Recorder (DVR) system is to be assembled to allow export of videos contained on the system. The DVR system consisted of a main controller and 2 disk arrays, labeled as DVR 1 and DVR 2. DVR 1 was assembled successfully and made available for export of videos. Video Specialise es performed exports based on requests made by the NY investigative team. On 12/19/2019, DVR 1 failed due to hardware issues. Contact with the vendor and attempts to use replacement parts were unsuccessful in restoring the disk array to a usable state. DVR 2 contained 3 hard disk drives that were repaired by Advanced Data Recovery Specialist Dan M. However, DVR 2 was never able to be assembled successfully. A review of the logs on the DVR 2 controller indicated catastrophic disk failures before receipt by the FBI. A master copy of the images of the hard disk drives contained in the DVR system were placed on to 3 hard drives for storage (labeled as HQQ026637-HQQ026639). Details of Examination: The dates of this examination were August 20, 2019 through May 24, 2021. HQQ190816001 090A-NY-3151227 Page 5 of 9 UNCLASSIFIED EFTA00131955

UNCLASSIFIED The submitted items were parts of a DVR system, overview as follows: 1B# AQQ# Item Contents 1820 ' HQQ019594 in Controller Contained 2 drives 11321 (2 of 2) HQQ019598 DVR 1 Controller 1821 (1 of 2) HQQ019597 DVR 1 Disk Array Contained 2 drives Contained 16 drives 1819 (2 oft) 1819 (1 oft) HQQ019596 DVR 2 Controller HQQ019595 IDVR 2 Disk Array Array is empty Contained 1 drive The hard disk drives contained in the units were write blocked and forensic images created as follows: Main Controller - Forensic images of the 2 drives were created to a forensically clean network share in Quantico for archive. Forensic copies of the drives (clones) were also created on additional physical drives to be used in the unit for assembly. These actions were performed by =Ms. DVR 1 Controller - The top bay drive was repaired by Recovery Specialist Forensic images of the 2 drives were created to a forensically clean network share in Quantico for archive. Forensic copies of the drives (clones) were also created on additional physical drives to be used in the unit for assembly. These actions were performed by =Ms. DVR 1 Disk Array - Forensic images of the 16 drives were created to a forensically clean network share in Quantico for archive. Forensic copies of the drives (clones) were also created o physical drives to be used in the unit for assembly. These actions were performed by F DVR 2 Controller - Forensic image of the 1 drive was created to a forensically clean network share in Quantico for archive. A forensic copy of the drive (clone) was also created on an additio physical drive to be used in the unit for assembly. These actions were performed by DVR 2 Disk Array - The 16 drives originally contained in the unit were provided to the NY FO. Forensic images of the 16 drives were created to a forensically clean network share in New York for archive. Forensic copies of the drives (clones) were also created on additional physical drives to be used in the unit for assembly. These actions were performed by NY FE's and provided to the CART team in Quantico. The DVR system was assembled using the clones and powered on. The Main Controller started up successfully and was accessed using Administrator password If as provided by the vendor. The NICE suite of software, which provides visibility into the HQQ190816001 090A-NY-3151227 Page 6 of 9 UNCLASSIFIED EFTA00131956

UNCLASSIFIED setup and recordings on DVR 1 and DVR 2 was accessed using password a to gain access to the administrator functions. A review indicated that roughly half of the camera assignments were allotted to each DVR. DVR 1 started up successfully and recordings were available for export through the Main Controller software interface. DVR 2 did not start successfully. On 9/18/2019, a meeting was conducted with DVR vendor Technical Support Representative M i logs 'f SigNet Technologies. . rovided an overview of the operation of the system. A review of the DVR 2 controller logs by and Senior Advisor indicated that there had been catastrophic disk failures in the array and no recordings would have been available after 7/29/2019. l and Computer Scientist were provided access to the beginning sectors of the 16 drives to see if the structure would indicate clues of a possible rebuild. None were apparent. Video Specialist = was provided access to the DVR software and performed exports of the available recordings on DVR 1 based on investigative team requests. On 12/19/2019, Video Specialist =reported beeping from the disk array and inability to use the software to continue to perform exports. A review of the unit indicated memory errors. Attempts at reseating memory board and RAM were unsuccessful. The vendor was contacted for replacement parts, but none were available due to the age of the unit. Lab Supervisor = purchased and provided exemplar memory board and RAM. Several attempts to restore the unit to working order with replacement parts were unsuccessful and eventually exhausted. The DVR system original items and clones were returned to NY FO. Master copies of the Main Controller, DVR 1 images, DVR 2 repaired drive images, and video exports were placed on to hard disk drives (HQQ026637-HQQ026639) for storage. NY CART Examiners will perform archive of the DVR 2 images located on the NY FO network share. Derivative Evidence/Copies: HQQ018788: Hard Drive, Western Digital, WD3200AAJB, WCARW3862711, Clone of HQQO 18772 Bay 1 HQQ018789: Hard Drive, Western Digital, WD3200AAJB, WCARW4061457, Clone of HQQ018773 Bay 2 HQQ018790: Hard Drive, Western Digital, WD3200AAJB, WCARW4061578, Clone of HQQO 18774 Bay 3 HQQ018791: Hard Drive, Western Digital, WD3200AAJB, WCARW3816411, Clone of HQQ018775 Bay 4 HQQ018792: Hard Drive, Western Digital, WD3200AAJB, WCARW3886572, Clone of HQQ 190816001 090A-NY-3 151227 Page 7 of 9 UNCLASSIFIED EFTA00131957

UNCLASSIFIED HQQ018776 Bay 5 HQQ018793: Hard Drive, Western Digital, WD3200AAJB, WCARW3914931, Clone of HQQO 18777 Bay 6 HQQ018794: I-Iard Drive, Western Digital, WD3200AAJB, WCARW3809038, Clone of HQQ0I8778 Bay 7 HQQ018795: Hard Drive, Western Digital, WD3200AAJB, WCARW4064417, Clone of HQQ0I8779 Bay 8 HQQ018796: Hard Drive, Western Digital, WD3200AAJB, WCARW3816301, Clone of HQQ018780 Bay 9 HQQ018797: Hard Drive, Western Digital, WD3200AAJB, WCARW3915042, Clone of HQQ018781 Bay 10 HQQ018798: Hard Drive, Western Digital, WD3200AAJB, WCARW3809320, Clone of HQQ018782 Bay 11 HQQ018799: Hard Drive, Western Digital, WD3200AAJB, WCARW3816426, Clone of HQQO 18783 Bay 12 HQQ018800: Hard Drive, Western Digital, WD3200AAJB, WCARW3809296, Clone of HQQ018784 from Bay 13 of IIQQ019597 HQQ01880I: Hard Drive, Western Digital, WD3200AAJB, WCARW3809224, Clone of HQQ018785 Bay 14 HQQ018802: Hard Drive, Western Digital, WD3200AAJB, WCARW3755653, Clone of HQQ018786 Bay 15 HQQ018803: Hard Drive, Western Digital, WD3200AAJB, WCARW3816498, Clone of HQQ018787 Bay 16 HQQ019332: Hard Drive, Seagate, ST3500630A, 9QG23RDP, Clone of HQQ019331 (top bay of DVR2 Disk Array Controller) HQQ019335: Hard Drive, Western Digital, WD1001FALS-41Y6A1, WCATR7962678, Clone of HQQO 19333 (Bay 1 of Main Controller) HQQ019336: Hard Drive, Western Digital, WD15EVDS-73V9B1, WMAVU4005952, Clone of HQQ019334 (Bay 2 of Main Controller) HQQ019337: Hard Drive, Maxtor, DiamondMax 6L300R0, L60YGFBG, Clone of HQQ018526 HQQ019353: Hard Drive, Maxtor, 6L200PD, L41RWHTH, Clone of repaired HQQO 18525 HQQ019354: Hard Drive, Seagate, ST3500630AS, 9QG4FNAD, Clone of repaired 1B17 HQQ019355: Hard Drive, Toshiba, dt01aca050, 74J2Z3GAS, Clone of repaired 1B18 HQQ1908 16001 090A-NY-3 151227 Page 8 of 9 UNCLASSIFIED EFTA00131958

UNCLASSIFIED HQQ019356: Hard Drive, Seagate, ST3500410SV, 6VM5VRFN, Clone of repaired 1B14 HQQ019361: Hard Drive, Seagate, ST5OONM0011, ZIMI6CCO, Clone of repaired 1B13 HQQ019363: Hard Drive, Seagate. ST5OONM0011, Z1M16CMQ, Clone of repaired 185 HQQ026637: Hard Drive, Western Digital, WD20EARS-22MVWBO, WCAZA6894206, Contains Master Copy of DVR Main Controller images. HQQ026638: Hard Drive, Seagate, ST100000VN0008, ZPWOICE1R, Contains Master Copy of DVR 1 images. HQQ026639: Hard Drive. Western Digital, WD4003F1EX-00Z4SAO, WMC5D0D9K9RO, Contains Master Copy of DVR 2 controller, DVR 2 repaired drive images, and Video Exports. Disposition of Items: All original evidence items and derivative evidence items including Master Copies (HQQ026637- HQQ026639) were submitted to MD Evidence Control for delivery to the contributing office. No electronic evidence is being retained at DFAU Headquarters. The notes of this examination are being placed in a Digital Evidence Laboratory (DEL) file jacket and being retained in the FBI O11) file. Examiner. na ec ology Division Computer Analysis Response Team Program HQQ190816001 090A-NY-3 151227 Page 9 of 9 UNCLASSIFIED EFTA00131959

90A-NY-3151227 Serial 194 ED-1036 (Rev. 10-16-2009) UNCLASSIFIED FEDERAL BUREAU OF INVESTIGATION Import Form Form Type: EMAIL - Email Title:(U) FW: Evidence Recharge Approved By: Drafted By: Case ID #: 90A-NY-3151227 (U) UNSUB(S); JEFFREY EPSTEIN - VICTIM; DEATH INVESTIGATION Synopsis: (U) FW: Evidence Recharge .• UNCLASSIFIED Date: 11/22/2021 EFTA00131960