Forensic Analysis of e-mail metadata & attachment

Snap-shot of mail:

Carried out on: 2017-09-05

Subject e-mail: Copy of Guest List Vega Marriage Email.xlsx

Hop Delay From By With Time (UTC) Blacklist

1 * 10.13.204.13 SMTP 10/11/2015 6:16:22 AM

Header Name Header Value

Delivered-To ashu@sahara.co.za

X-Received by 10.180.210.71 with SMTP id ms7mr1510909wic.4.1444544157997; Sat, 10 Oct 2015

23:15:57 -0700 (PDT)

From "Ashu" <ashu@sahara.co.za>

To "Ashu" <ashu@sahara.co.za>

Page 1 of 3
Subject Copy of Guest List Vega Marriage Email.xlsx

Date Sun, 17 Feb 2013 10:54:48 +0200

Message-ID <D2497824B2F53A439343A564CBAF5F21213634D6@ZASAHHOBL1.internal.lan>

MIME-Version 1.0

X-Mailer Microsoft Outlook 15.0

Thread-Index AQF8jZc2k4SuuC570FHqi64CGS4JFg==

Content-Language en-us

x-ms-exchange-or 41.150.206.102
ganization-original
clientipaddress

x-ms-exchange-or ::1
ganization-original
serveripaddress

x-google-migrated true

CONCLUSIONS

The email was sent from ashu@sahara.co.za and having display name Ashu and the domain name
being sahara.co.za

With subject line: Copy of Guest List Vega Marriage Email.xlsx

Sent on: Sun, 17 Feb 2013 10:54:48 +0200

To the recipient email address ashu@sahara.co.za

Originating IP: 41.150.206.102

Originating ISP: Telkom SA Limited

Country of Origin: South Africa

The e-mail was sent to the sender

Page 2 of 3
The Properties analysis of the EXCEL document attached to the email confirms that the Excel
document was created on 2012-12-19, last modified on 2013-02-17 and authored by Ismail [2010]

Excel file properties of File Name: Copy of Guest List Vega Marriage Email.xlsx

CERTIFICATE:
Having completed the metadata analysis of the above e-mail, Forensics for Justice hereby
CERTIFY that the email presented to us for authentication, with attachment is authentic in
all respects and that information contained in the above conclusions is therefore accurate.
Sarah-Jane Trent Bachelor of Laws (LL.B) Inspected and verified:
Executive Director
Tel: +27 84 849 1776
Fax: +27 86 568 0182 Paul OSullivan CFE
FORENSICS FOR JUSTICE
P.O. Box 78200
Sandton
2146

Page 3 of 3