| Template | mobile-extraction |
| Case | WhatsApp data preservation (CASE-MOB) |
| FIR | FIR-2026-77 |
| Analyst | Pallavi Pawar |
| Organisation | Innovativa SoftTech |
| mobile.extractionTool: Cellebrite UFED 7.6 |
| mobile.extractionType: Logical extraction (WhatsApp + media) |
| mobile.account: +91 98XXXXXX01 |
| SOURCE_DEVICE |
| DeviceName=Seized smartphone |
| DeviceType=Mobile phone (Android) |
| DeviceMake=Samsung |
| DeviceModel=Galaxy S23 |
| DeviceImei=356938035643809 |
| DeviceOwnership=Accused |
| SUMMARY files=3 size=163577856 matches=3 mismatches=0 errors=0 |
| ANNEXURE |
| 1. mobile-export-1.zip | 53477376 | Verified |
| SHA-256=874e9c3ea2b3c4dda2b3c4e5a2b3c4eda2b3c4f5a2b3c4fda2b3c505a2b3c50d |
| 2. mobile-export-2.zip | 54525952 | Verified |
| SHA-256=913213d9a3b4c5dea3b4c5e6a3b4c5eea3b4c5f6a3b4c5fea3b4c606a3b4c60e |
| 3. mobile-export-3.zip | 55574528 | Verified |
| SHA-256=9b158b74a4b5c6dfa4b5c6e7a4b5c6efa4b5c6f7a4b5c6ffa4b5c707a4b5c70f |
| VERIFICATION verified=3 failed=0 errors=0 |
| DECLARATION I certify that the data described in this certificate was extracted from the mobile device identified above using the extraction tool and method recorded, that the cryptographic hash values of the extracted items were computed with e-Dex and are reproduced in the annexure, and that the verification result stated above reflects, accurately and completely, the integrity of the extracted data as against those recorded values. |