A0 93 (SDNY Rev. 05/10) Search and Seizure Warrant UNITED STATES DISTRICT COURT for the Southern District of New York MSOMAG 612; 3 In the Matter of the Search of (Brie?y describe the property to be searched or identify the person by name and address) See Attachment A SEARCH AND SEIZURE WARRAN To: Any authorized law enforcement of?cer An application by a federal law enforcement of?cer or an attorney for the government requests the search of the following person or property located in the Southern District of New York (identi?v the person or describe the property to be searched and give its location)! See Attachment A The person or property to be searched,- described above, is believed to conceal (idenn? the person or describe the property (a be seized: See Attachment A I ?nd that the or any recorded testimony, establish probable cause to search and seize the person or property. (wry/e YOU ARE COMMANDED to execute this warrant on or before 0(3th (not to exceed 14 day?sr? .?in daytime 6:00 am. to 10 pm. at any time in the day or night as I ?nd reasonable cause has been established. Unless delayed notice is authorized below, you must give a c0py of the warrant and a receipt for the property taken to the person from whom, or from whose premises, the prOperty was taken, or leave the copy and receipt at the place where the property was taken. The of?cer executing this warrant, or an of?cer present during the execution of the warrant, must prepare an as required by law and return?this warrant and inventory to the Clerk of the Court. invento Upon its return, this warrant and inventory should be ?led under seal by the Clerk of the Court. USMJ Initial: I ?nd that immediate noti?cation may have an adverse result listed in 18 U.S.C. 2705 (except for delay of trial), and authorize the of?cer executing this warrant to delay notice to the person who, or whose property, will be searched or seized (check the appropriate box) Dfor days (not to exceed 30). Duntil, the facts'justifying, the later speci?c date of 4 M, 2:5? 7 Judge signature New YorL NY Date and time issued: The Honorable Ronald L. Ellis City and state: Printed name and title Ml A0 93 (Rev. 01/09) Search and Seizure Warrant (Page 2) Return Case No.: Date and time warrant executed: Copy of warrant and-inventory left with: 16 Mag. Inventory made in the presence of Inventory of the property taken and name of any person(s) seized: Certi?cation [declare-under penalty of perjury that this inventory is correct and was returned along with the original warrant to the Court. Date: Executing o?icer Signature Printed name and title Attachment A I. Devices to be Searched The devices to be searched (the ?Subject Devices?) are described as Subject Device-1 is an iPhone that was transferred from the Target Subject to Granite Intelligence LLC (the ?Security inn?) on September 23, 2016, and that currently is housed at the Security Finn?s of?ce. Subject Device-2 is an iPad that was transferred from the Target Subject to the Security Firm on September 23, 2016, and that currently is housed at the Security Firm?s of?ce, Subject Device-3 is a laptop computer, believed to be a Dell, that was transferred from the Target Subject to the Security Firm on September 23, 2016, and that currently is housed at the Security Firrn?s office. II. Review of ?81 on the Subject Devices Law enforcement personnel (including, in addition to law enforcement officers and agents, and depending on the nature of the E81 and the status of the investigation and related proceedings, attorneys for the government, attorney support staff, agency personnel assisting the government in this investigation, and outside technical experts under government control) are authorized to review the E81 contained on the Subject Devices for the following evidence, fruits, and instrumentalities of violations of Title 18, United States Code, Sections 1470, 2251, 2252, 2252A, and 2422 (the ?Subject O?enses?): 1. Evidence concerning the identity or location of, and communications with, victims or intended victims of the Subject Offenses, including, but not limited to, photographs, contact lists, address books, instant messages, chats, text messages, emails, and photographs or videos sent to and received by minors; 2. Evidence concerning the commission of the Subject Offenses, including images of child pornography or suggestive images of the Target Subject. 3. Evidence of who used, owned, or controlled the Subject Devices at the time the things described in this warrant were created, edited, or deleted, such as logs, registry entries, con?guration ?les, saved usernames and passwords, documents, browsing history, user pro?les, email, email contacts, ?chats,? instant messaging logs, photographs, and correspondence. 4. Evidence of the times the Subject Devices were used. 5. Evidence of the existence of other electronic devices that the Target Subject may have used to commit the Subject Offenses. Seizure for Later Review of Electronically Stored Information A. Seizure of Computers and Media This warrant authorizes the seizure of computers and electronic storage media as set forth below. In 11eu of seizing any particular electronic storage media, this warrant also authorizes the copying of electronically stored information for later review. Electronic storage media which may be seized or copied include without limitation: I Computer devices, electronic media and electronic storage devices, including, but not limited to, computers, disk drives, modems, thumb drives, personal digital assistants, smart phones, digital Cameras, and scanners and the data within the aforesaid objects relating to said materials, which may contain information within the scope of this warrant. Any PhYSical keys, devices, and similar physical items that are necessary to gain access to the computer equipment, storage devices or data mentioned above, or any passwords, password ?les, test keys, codes or other information necessary to access the above?mentioned Computer equipment, storage devices or data. B. Review of Electronic Storage Media and Electronically Stored Information Following creation of forensic image copies as may be necessary to preserve the integrity of seized electronically stored information, law enforcement personnel (who may include, in addition to law enforcement of?cers and agents, attorneys for the government, attorney support sta?, and outside technical experts under government control) are authorized to review the seized information for information and data within the scope of this warrant. In conducting this review, law enforcement personnel may use various techniques to determine which ?les or other ESI contain evidence or fruits of the Subject Offenses. Such techniques may include, but shall not be limited to, surveying various ?le directories or folders and the individual ?les they contain; conducting a ?le-by-?le review by ?opening? or reading the ?rst few ?pages? of such ?les in order to determine their precise contents; ?scanning? storage areas to discover and possibly recover recently deleted data; scanning storage areas for deliberately hidden ?les; and performing electronic ?key-word? searches through all electronic storage areas to determine whether occurrences of language contained in such storage areas exist that are related to the subject matter of the investigation. Depending on the circumstances, a complete review of the seized ESI may require examination of all of the seized data to evaluate its contents and determine whether the data is responsive to the warrant. Forensically trained law enforcement personnel may also, as appropriate to the circumstances, search for and attempt to recover ?deleted,? ?hidden,? or data to determine whether the data falls within the list of items to be seized as set forth in this af?davit. ESI that is responsive to the warrant will be' identi?ed and/or copied for further use in the investigation and any resultant prosecution.