6fbe417b4674fecb7250ea41e071fca6c0f09749d848703785a0a255fc2de6e0 Recompute SHA-256 over each sealedContent line followed by a newline (UTF-8); the result must equal the stated hash. fixture EMAIL FORENSICS CERTIFICATE Template: email-forensics Case: Mailbox preservation (CASE-EMAIL) FIR: FIR-2026-77 Analyst: Pallavi Pawar Organisation: Innovativa SoftTech SOURCE_DEVICE DeviceName=Microsoft 365 mailbox export DeviceType=Cloud mailbox (PST/EML) DeviceOwnership=Custodian: finance@acme.test SUMMARY files=3 size=163577856 matches=3 mismatches=0 errors=0 ANNEXURE 1. mailbox-1.eml | 53477376 | Verified SHA-256=874e9c3ea2b3c4dda2b3c4e5a2b3c4eda2b3c4f5a2b3c4fda2b3c505a2b3c50d 2. mailbox-2.eml | 54525952 | Verified SHA-256=913213d9a3b4c5dea3b4c5e6a3b4c5eea3b4c5f6a3b4c5fea3b4c606a3b4c60e 3. mailbox-3.eml | 55574528 | Verified SHA-256=9b158b74a4b5c6dfa4b5c6e7a4b5c6efa4b5c6f7a4b5c6ffa4b5c707a4b5c70f VERIFICATION verified=3 failed=0 errors=0 DECLARATION I certify that the email items and associated data described in this certificate were collected and processed with e-Dex, that the cryptographic hash values of the collected items are reproduced in the annexure, and that the verification result stated above reflects, accurately and completely, the integrity of those items as against the recorded values.