| Template | forensic-examination |
| Case | Seized laptop examination (CASE-FEXAM) |
| CaseNumber | CC/2026/0042 |
| FIR | FIR-2026-77 |
| Court | Court of the Chief Judicial Magistrate, Pune |
| Analyst | Pallavi Pawar |
| Organisation | Innovativa SoftTech |
| exam.methodology: Write-blocked acquisition; keyword and timeline analysis; manual review of recovered artifacts. |
| exam.tools: e-Dex 1.4.0, Autopsy 4.21, hardware write-blocker |
| exam.findings: Examination of the seized hard disk recovered 14 deleted documents relevant to the matter. The artifact timestamps are consistent with the period under investigation. No evidence of anti-forensic wiping was observed. The recovered items and their cryptographic hashes are listed in the annexure to this certificate. |
| SOURCE_DEVICE |
| DeviceName=Seized laptop HDD |
| DeviceType=Hard Disk Drive |
| DeviceMake=Western Digital |
| DeviceModel=WD10EZEX |
| DeviceSerial=WD-WX21A1234567 |
| DeviceOs=Windows 11 Pro |
| DeviceOwnership=Accused |
| ANNEXURE |
| 1. evidence-1.dd | 53477376 | Verified |
| SHA-256=874e9c3ea2b3c4dda2b3c4e5a2b3c4eda2b3c4f5a2b3c4fda2b3c505a2b3c50d |
| 2. evidence-2.dd | 54525952 | Verified |
| SHA-256=913213d9a3b4c5dea3b4c5e6a3b4c5eea3b4c5f6a3b4c5fea3b4c606a3b4c60e |
| 3. evidence-3.dd | 55574528 | Verified |
| SHA-256=9b158b74a4b5c6dfa4b5c6e7a4b5c6efa4b5c6f7a4b5c6ffa4b5c707a4b5c70f |
| VERIFICATION verified=3 failed=0 errors=0 |
| DECLARATION I certify that I conducted the digital forensic examination described in this certificate, that the methodology and tools recorded above were used, that the cryptographic hash values of the examined items are reproduced in the annexure, and that the findings stated above are a true and accurate record of the results of that examination to the best of my knowledge, information and belief. |