Date: Mon, 21 Oct 20194:01:12 PM (UTC) Sent: Mon, 21 Oct 20194:01:14 PM (UTC) Subject: RE: Keychain cracking — UNCLASSIFIED From: To: CC: Classification: UNCLASSIFIED We tried to do an EC way back when, but the case classification did not allow for us to do it. The UCFN is 3IE-NY-3027571 (Epstein) Senior Forensic Examiner Office) Cell) (Fax) From Sent: Monda , October 21,2019 11:32 AM To: c: Subject: RE: Keychain cracking --- UNCLASSIFIED Classification: UNCLASSIFIED Hey there, DID we have an EC/Lead for this? Or a UCFN for tracking purposes? Trying to document this for our records (and yours potentially) Let me know. Thanks From Sent: onday, October21,2019 I I:2U AM To: Subject: RE: Keychain cracking-- UNCLASSIFIED Classification: UNCLASSIFIED 3503-01I Page I of SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00001898 EFTA00157083

I've said it before, and say it again. THERE IS NOBODY BETTER THAN YOU GUYS!!!! Thanks. The password you provided unlocked the drive. I owe you a beer. Senior Forensic Examiner From' Sent: Monde October 21 201911:14 AM To: Cc: Subject: RE: Keychain cracking — UNCLASSIFIED Classification: UNCLASSIFIED Good momin STXU has recovered a password "asdfasdfasdfasdr (no quotes) for item NYCO24364. Once your forensic analysis is complete. a brief summary (a few sentences) as to the value of STXU's efforts/password provided is appreciated when convenient. This helps STXU focus our expertise and streamline decryption efforts in support of figure investigations. STXU will remove all copies of this data and considers this request complete. Please contact STXU for further dissemination of these results outside of the FBI. If you have any funher quest ions, please contact EE at If everything looks good and you have no further questions, please "remove HQCU-VAP permissions in the CAT tool". IT Specialist /Senior Forensic Examiner Secure Technologies Exploitation Unit (STXU) Orcrntional Technology Division (OTD) - Miami From Sent: Thursday, October 17, 2019 12:16 PM To: Cc: 3503-011 Page 2 of SUBJECT TO PROTECTIVE ORDER PARAGRAPHS 7, 8, 9, 10, 15, and 17 EFTA_00001899 EFTA00157084