Exhibit
A single printed sheet (A4, 75 gsm) was recovered folded in thirds on the surface of Rohan Mehta's desk. The document was passed to Cyber Forensics for source tracing.
Document Metadata — Full Extract
| Metadata Field | Value |
|---|
| File type | Microsoft Word (.docx), converted to PDF for printing |
| Author (system) | ANANYA-CTO-LAPTOP |
| Created | Thursday 21:14:33 |
| Last modified | Thursday 21:16:02 |
| Total editing time | 1 minute 29 seconds |
| Print source (hostname) | RMEHT-CEO-DESK |
| Print timestamp | Thursday 23:32:17 |
| Printer | HP LaserJet Pro M404dn — Floor 14, PaySpark |
| Print initiated via | Remote Desktop Protocol (RDP) session |
Remote Session Log — Rohan Mehta's Workstation (RMEHT-CEO-DESK)
| Timestamp | Event | Source IP |
|---|
| 23:29:44 | RDP session initiated | 192.168.14.███ |
| 23:31:58 | File "farewell_v2.pdf" opened | — |
| 23:32:17 | Print command to HP LaserJet M404dn | — |
| 23:32:51 | RDP session terminated | — |
Network Details
The source IP address 192.168.14.███ is within the Floor 14 internal subnet (192.168.14.0/24). This subnet is not accessible from outside the building. The specific device associated with this IP is subject to a separate forensic retrieval order. The final octet has been provisionally redacted pending that retrieval.