Crime Detection/Prevention and Narco-Analysis Test
Who is Spencer McDaniel? And Does He Actually Exist?
1. Examination Report
Case 82D05-2209-PL-004150
Requested by Abdul Hakim Shabazz, Esq.
Completed by Gabrielle M. Kendall, CSAP, GCTI
Date ofReport (final signed version): 04/23/2024
Signature:
Digitally signed
Gabrielle byGabrielleM.
Kendall
M. Kenda11 Date: 2024.04.23
16:29:11 -04'00'
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 1 of 144
2. Examination Report...
Introduction .....................
Duties and Responsibilities
Case Summary
Conclusions....
Factually-reasoned Conclusions
Rendered Opinions ..............
Evidence
Objective ..........................
Methodologies
Tools ........
Preparation
Acquisition..................
FEC Filings
4116 E 3rd St., Lubbock, TX 79403.
Hoosier Hive News .............
Facebook.com ......................
April 2019 Marriage
Linkedln.com ...
Save the U S.A
Analysis ...
Table ofContents
4116 E 3rd
St., Lubbock, TX 79403.................
Facebook.com Profile Photo .......
April 2019 Marriage - Public Index ..............
Linkedln.com Profile Photo .
Conclusions .
Factually-reasoned Conclusions
Rendered Opinions
Jurat
Glossary ...........................
Table ofFigures ...
Exhibits.............................
Examination Report
Version 2.0 (April 23, 2024)
................... 1
.......3
············· .......3
.3
........4
........4
........ 5
........6
........6
......6
......6
············· .... 11
..... 12
············· ..... 12
...... 17
......21
......35
......49
.....54
············· ············· ....66
....74
....75
············· ....79
.....85
············· .....91
......95
......95
.....97
......98
.....98
············· ..101
.. 104
This document includes a cover page with the signature of the report author.
Page 2 of 144
3. Introduction
The purpose ofthis report is to summarize the acquisition and analysis ofrelevant facts that
determine if Defendant SPENCER MCDANIEL exists as a living natural person. The facts
presented within this report have been acquired and analyzed within the scope ofmy objective
professional expertise and knowledge, and such analysis does not extend beyond that scope to
outside matters, expertise, or knowledge.
Duties and Responsibilities
It is my duty and responsibility as an expert witness to provide independent assistance to the
utmost ofmy ability through objective acquisition and analysis ofrelevant facts in relation to my
personal knowledge and expertise.
Case Summary
On April 3, 2024, I met with Attorney ABDUL HAKIM SHABAZZ (Attorney SHABAZZ)
and was accompanied by his client, PlaintiffROBERT MICHAEL KENDALL (Plaintiff
KENDALL). Attorney SHABAZZ requested that I conduct a targeted open-source intelligence
(OSINT)1
investigation to assist in Plaintiff KENDALL's civil plenary proceedings that Attorney
SHABAZZ represents PlaintiffKENDALL in.
1 "Open-Source Intelligence (OSINT) is defined as intelligence produced by collecting, evaluating and analyzing
publicly available information with the purpose of answering a specific intelligence question".
https:I/www.sans.org/blog/what-is-open-source-intelligence/.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 3 of 144
4. Since September 2022, Attorney SHABAZZ has been unable to complete service-by-mail to
Defendant SPENCER MCDANIEL (Defendant MCDANIEL). Defendant MCDANIEL has not
filed any appearances or answers in the civil plenary proceedings.
Conclusions
Based on the unbiased analysis ofthe facts presented herein, I presentthe following conclusions
made ofsound mind and judgment:
Factually-reasoned Conclusions
I reasonably conclude that Defendant MCDANIEL does not factually exist as a living natural
person for the following reasons:
1. There are no verifiable records ofDefendant MCDANIEL, any person under that name,
or any derivative of such name, that would verify Defendant MCDANIEL owning,
having owned, living, or having lived at the property ofthe reported mailing address.
2. Defendant MCDANIEL is reported to be self-employed at 'Hoosier Hive News' a
business that no verifiable records exist of, which would demonstrate it as a taxable entity
in the State oflndiana or in the State ofTexas.
3. Defendant MCDANIEL is reported to be employed as the Chief Executive Officer at
'Save the U.S.A.', a political consulting business, which no verifiable records exist of
that would demonstrate it as a taxable entity in State oflndiana, the State ofTexas, or in
the District ofColumbia; additionally, no verifiable records exist ofthat would
demonstrate registration with the Federal Election Commission as a Political Action
Committee ('PAC').
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 4 of 144
5. 4. The Facebook.com profile that matches the information ofDefendant MCDANIEL
includes biographical information about a marriage in April 2019, in which no verifiable
records exist of in the State ofIndiana or in the State ofTexas that would verify a legal
marriage taking place.
5. The sole identifiable photo uploaded to the Facebook.com profile that matches the
information of Defendant MCDANIEL and claims to be of Defendant MCDANIEL is a
photo oftwo separate individuals identified as KATIE ARNOLD and "Luke".
6. The sole identifiable photo uploaded to the Linkedin.com profile that matches the
information of Defendant MCDANIEL and is used as a profile photo for Defendant
MCDANIEL is a photo ofa separate, public individual identified as ALEXANDER
RICHARD PETTYFER.
Rendered Opinions
Using my professional experience in open-source intelligence investigations, in addition to my
objective acquisition and analysis ofthe facts, I render the following opinions on these matters:
1. Spencer McDaniel is not a living, natural person.
2. Spencer McDaniel is not a living, natural person who can be factually proven to be a
living, natural person who is independent ofGABRIEL WHITLEY
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 5 of 144
6. Evidence
The items listed in the Evidence section ofthis report remained in a secure Chain ofCustody
(Exhibit MM) throughout the analysis process and were turned over to Attorney SHABAZZ
upon conclusion of analysis.
Objective
The objective ofthis targeted OSINT investigation is to determine, based on publicly accessible
information, if Defendant MCDANIEL exists as a living natural person.
Methodologies
Tools
The forensic tools that were used in this investigation are listed herein. To my knowledge, there
is no software in use below that possesses any material issues whose severity would invalidate
the findings thereof.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 6 of 144
7. • Virtualization - Oracle VirtualBox version 7.0.14
o Oracle VirtualBox is an open-source virtual machine manager. Avirtual machine2
is a software-based computing resource installed on a physical computer that is
partitioned from the physical computer's primary operating system.
o The Scientific Working Group on Digital Evidence (SWGDE)3
states that best
practice is to use a virtual machine when acquiring online content, as any device
used for online content acquisition must be configured without extraneous
software or data to prevent issues with the acquisition process, and to prevent
issues ofcross-contamination that may alter evidence4.
• Content and Data Acquisition - Forensic OSINT
o Forensic OSINT is a browser extension software (browser plugin)5
that allows for
full web page captures. A full web page capture is the acquisition of all content
and data associated with a web page, such as images, text, and hypertext markup
language (HTML)6
ofthe web page.
o Forensic OSINT ensures the authenticity and integrity ofall web page content and
data acquisitions using the message-digest 5 (MD5)7
cryptographic hash
function8. SWGDE states that it is appropriate to use MD5 hashes for file
identification and integrity verification9. The MD5 algorithm is used to convert
data into a unique string of 32 individual characters, which is equal to 128 bytes
ofdata. Ifthe data ofthe file is changed, a new hash is generated. The new file
hash no longer matches the hash generated from the original file. Therefore, the
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 7 of 144
8. hash calculated by MD5 or any cryptographic hash algorithm is unique to each
file.
o Forensic OSINT ensures the completeness of all webpage content by performing
still-image capture ('screen capture') at an interval of2000ms, equivalent to 2
seconds per capture. While SWGDE does not state a specific interval that still-
image capture must be completed at, SWGDE does state that the best practice is
to perform still-image capture "at the shortest and most focused viable interval in
order to create a seamless and complete records ofthe content being displayed"10
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 8 of 144
9. 2
"A simulated [computer] environment created by virtualization".
https://csrc.nist.gov/glossary/term/virtual machine.
3
"The Scientific Working Group on Digital Evidence is a group that brings together law enforcement, academic, and
commercial organizations actively engaged in the field of digital forensics to develop cross-disciplinary guidelines
and standards for the recovery, preservation, and examination of digital evidence".
https://www.en.wikipedia.org/wiki/Scientific Working Group on Digital Evidence
4
Per SWGDE BestPractices on Acquiring Online Content. https://www.swgde.org/21-f-OOl/.
5
"A browser extension is a piece of software that adds features to your web browser or to programs you use in your
browser". https://www.microsoft.com/en-us/edge/learning-center/everything-to-know-about-browser-
extensions?form=:MA1312.
6
"[Hypertext markup language] is the standard language for creating Web pages".
https://www.w3schools.com/html/html intro.asp.
7 "The Iv.IDS message-digest algorithm is a widely used hash function producing a 128-bit hash value".
https://en.wikipedia.org/wiki/tvID5.
8
"An algorithm that computes a numerical value (called the hash value) on a data file or electronic message that is
used to represent that file or message and depends on the entire contents of the file or message. A hash function can
be considered to be a fingerprint of the file or message".
https://csrc.nist.gov/glossary/term/cryptographic hash function
9
Per SWGDE Position on the Use ofMD5 andSHA] Hash Algorithms in Digital andMultimedia Forensics.
https:I!www.swgde.org/position-on-the-use-of-md5-and-shaI-hash-algorithms-in-digital-and-multimedia-forensics/.
10 Per SWGDE BestPracticesforAcquiring Online Content. https://www.swgde.org/21-f-001-2/.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 9 of 144
10. Analysis -TinEye, USPhonebook.com
o TinEye is an open-source image search and recognition service. TinEye uses
proprietary image recognition technology rather than keywords, metadata, or
watermarks to identify images and image sources. TinEye can identify modified
images and can assist in establishing the provenance of an image.
o USPhoneBook.com is an open-source public records aggregation (data broker)11
website that allows for reverse phone number, name, or address lookups.
USPhonebook.com provides a historical listing ofresidents per a specific address.
11 "A data broker is an individual or company that specializes in collecting personal data (such as income, ethnicity,
political beliefs, or geolocation data) or data about companies, mostly from public records but sometimes sourced
privately, and selling or licensing such information to third parties for a variety ofuses".
https://en.wikipedia.org/wiki!Data broker.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 10 of 144
11. Preparation
Before starting the investigatory process, I began preparation to complete a targeted OSINT
investigation. SWGDE states that the acquisition ofonline content can be driven by the
attribution ofpublic information to a subject1
2
. I first defined the subject ofthe targeted OSINT
investigation using information about Defendant MCDANIEL provided by Attorney SHABAZZ.
This included an assumed name ofthe subject ('Spencer McDaniel') and a mailing address
provided to Attorney SHABAZZ by a co-defendant ofthe civil plenary proceedings, GABRIEL
M. WHITLEY.
12 PerBestPracticesfor Acquiring Online Content. https://www.swgde.org/21-f-001-2/.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 11 of 144
12. Additionally, Attorney SHABAZZ stated that the assumed name and mailing address of
Defendant MCDANIEL matched public records filed with the Federal Election Commission
(FEC). These public records were filed by GABRIEL M. WHITLEY for his campaign
committee, 'Honest Gabe for Congress'.
I then developed an investigative hypothesis: using information from open sources, I can collect,
preserve, analyze, and report on findings to generate reasonable conclusions regarding Defendant
MCDANIEL's existence as a natural person.
Acquisition
All acquisitions were completed using the Google Chrome web browser version 123.0.6312.123.
FEC Filings
On April 16, 2024, I searched the URL13
https://www.fec.gov/data. On https://www.fec.gov/data,
I searched the term 'Honest Gabe for Congress' using the Candidate and Committee Profile
search function.
13
"A uniform resource locator (URL), colloquially known as [ a 'link', or as] an address on the Web, is a reference
to a resource that specifies its location on a computer network and a mechanism for retrieving it.".
https://en.wikipedia.org/wiki/URL.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 12 of 144
13. ~ Federal Elcc1ion Commission
~,ui o,.H " [ ;:) ~TU(~ ,( &M (~I C
:.A
- a::' ~ ~
Campaign finance data
, t,.., ,1J1,I,,,. , '"""' ,.,_r:1-<•1<l,p, 1Jriuri,111< ,,~,l,l«l1,r~ 11,-
11:1 <:1 ~IJi,hcp, o,r>rr~k,1rl1rr,, "~,,n,
Compare t:a mlilla tt:s
Look up candidate and
committee profile~
q
F<,.,_,~,.,-. r.J/~,.•1., N, ,,,,,,.,-,,,,,. r.ilr'>4.1144.~
; ll<r.
.•a,r....:•;-,>v.';
PU;l{liA'.~'i. .,,..,.,r.,,.,., ...,.~nu.,•tdf ~- u ,,,~oe:
Top tai sin,;candidatcsrunning in 2024:
~ t)~N.JOSPH U JI! [Dt:M) I L S-l~u,,t<.h,•'t
T~U'vP. OO!U.!.D J. [REP' I u;__I:!!.!!lent
lf>LCY. 111(1( [RCPI I us-~r_
H ld~nt
Brow~c data
Ui.srowr w~i,.;h
~·~1;t.!iil~ks ~•~ f;,u:.;,1~ ~;,~•
lli3cov..-rw::ikh
l,nJiJ•tl'S ~lC i ;icuL.i1
,11-
1ho- m.-.,1
fi nd contrihutions from
spcc il'ic ind ividuals
q
F«,,.•'/N,-..!llll ,.,-,,,,,,, ~ ,.,m~.t•~._r~,w-,·,.• Ir;"""" ,.;, /:11•, 1)1-;,,r, •
Th•~~,,~••
Possible uses ofthis data:
t.J <X>iuiOO. uri::.o·..._,. $2,000
A.l coti:r,bo.r:Ofl'i' n 1ri!l'!!!
Dr~~ , u trd •P-e!)·cu!tom Mar,
B1111 alll ~ EJIIII
q
Figure 1: a still image capture ofthe Candidate and CommitteeProfile searchfunction on https://www.fec.gov/data.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 13 of 144
14. One (1) result returned for Committee ID C0083820. The profile for C00838-
201 is located at https://www.fec.gov/data/committee/C00838201. Under Financial Summary -
Total Raised, I selected Browse Receipts. I filtered the data by Source Details - Name or ID
using the term "McDaniel". I observed three (3) results: McDaniel, Ashley Breanna; McDaniel,
Elizabeth; and, McDaniel, Spencer.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 14 of 144
15. 0 Select data type ◄I Receipts
•1<.r.1te• .-....... _..,_,.,..,~.,.
,.,,,.,.,u,~"-"'""r~r.,,.,VI
Edit filters(2)
0,...1.0,,,.,..:t ...,,...~ ,,,'O~
a ~,c.",.,
0.
,•u1
'..~:
~-
- ·-~;r.:s:}!r.,y
;;oo,l.:.'"T.t'C«c-clo.»
!tt- t ,IMI l'•UIO:') {!)
a ,...~.•xi-
• ·
. . . . . _ . . . . . . _ , - . , .. . . . . . . . . ....i. .
•,.._,,....,_,....,._I'"'""""-"'
)._. ...... 1t1,~.::i,_
,,,....
.............. .""'t;"''·--·
0
11111
v _
oc,coc 0
Figure 2: A still image capture ofthefiltered resultsfrom Browse Receipts on https://www.fec.gov/data/committee/C0083820l.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 15 of 144
16. I expanded the result for 'McDaniel, Spencer' by selecting the icon next to the Amount column. I
then selected Open Image. I performed a full webpage acquisition of https://docsearch.fec.gov/cg
i-bin/fecimg/?202402209619820366 (Capture ID la050e6b-3dcd-4837-bld0-18ebcf9c0e65).
Figure 3 demonstrates the contents ofthe full webpage acquisition and associated MDS hash
values.
File Hashes
MHTMLs
, Filename
~ Forensic OSINT
Capture Dt1te: 2024-C
4-16 00:32 f>l',1 UTC
2024-C4-1 6 04.J2 PM LastemOa)'I~"• ~me
Captured By: Uabnelle Ken(la
Web6ite Title: 1-'AUt: bY 1-);Ut:. Ht:::1-'UHI Ul::il-'L.AY H)I<:.11.T..i-
1022Ul:J'JUl8L034.i1
(P(jij() 5 ul 10)
Website URL llll1~•/'tkx:qt1<:1y lc1 u1:,,l1!,Ji-!;i1L1 f<~:imu,'??!);140??0!)f,1!)F
0 0:vlff
l-!affl (M06)
1 mHtml-Snnrc:P.C.odP.-111 mhtml
mHtml-Sou,ceCooe-02 mhtml
$4;:reen Captures
t FiltlWlm t
1 s.ueer,shotuUt.png
1 saoonshoto02.png
l ~.:u::c..-rl'
.J1
vl003.µuy
Images
v FIiename
• fee coner loqo_!1if
fee rcne.Q
ir
9766187626d9402debottt:4'7dc8192co
H.11Sll (l.1105>
49L4lid8f4bfH!bLb'Ja/!.I(c.a:l&.4~1124
a1cCaa)7bf28&l0SG9'GdH307deG0a
451'lx:1lJ8160u2703t,
-,;:iJ47.JSOd)2f2f0c
l-!3stl (MOS)
605dGC66:nse112c258725cOOb14!>50to
e4066!lmcoo, 52fOJ01te6b26e39317
EXIF
Figure 3: the hash values ofthe contentfrom Capture ID la050e6b-3dcd-4837-bld0-18ebcf9c0e65.
Capture ID la050e6b-3dcd-4837-bld0-l8ebcf9c0e65 contains still-image captures of a receipt
from a contribution made by 'Spencer McDaniel' to Committee ID C00838201 on June 6th
,
2023. ScreenshotO0l.png (MD5 hash 49246d874b718b2b9a757ca28c45ffa4) (Exhibit A)
demonstrates a legal name, mailing address, occupation, and employer for 'Spencer McDaniel'.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 16 of 144
17. , :==~==~:::____
_
_
' '"' ""
~ ~ NJ:W)PY':iUPSE)BCH ::PEEPf'"°TSC'1lJ:::S:
Pageby Page Report Dffiplay (Page 6 ofJO)
l r.,.,1.. ,.r~IL_J ~ !•• Plw
,;..,.,.. I
SCHEDULE A (FEC Form 31
ITEMIZED RECEIPTS
1,N,'£0"COPIVITT[E f 11F11•
Hone~t Ga~fOf Congress
llJI i-... ,..,.., !'ht, u- ......
~
~=:a~::
~G..IIIIMl,l°qle
••=
:~=
~::.....=
··=7=
~·,,
=
·~1~,
-~----------, ~="·"~-.
~ ~
ttt!l>Nfl:.-:lf«l'll1tN.I ~
11w- 1
•·1d1!>11~·..-11 -
R,,-,off,1 ~ 2a.i'4
G M""1c:ll!dlllec<tlllltlsa r ricd
~:o
Figure 4: screenshot00lpng (ExhibitA).
4116 E 3rdSt., Lubbock, TX 79403
I began the verification process ofthe 'Spencer McDaniel' mailing address from Exhibit A.
Using Google Search, I performed a general search using the term '4116 e 3rd st lubbock tx
79403'. The first text result for this search was for a Zillow.com profile for 4116 E. 3rd St.,
Lubbock, TX 79403, located at https://www.zillow.com/homedetails/4116-E-3rd-St-Lubbock-
TX-79403/54137688 zpid/.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 17 of 144
18. ~ ➔ 0 !; ?illo-.-,•comihom~de:3 ls/4'16-E-3rd-St-Lubbo:l(-TX-79t.03/S4"37688 2pid/
~Zillow
2 bd 1 ba /&8 ~qft
41 1fl E 1rd SI, I ulibut_
k, TX 79403
• Offm,n ket
~~.?!~.~~~~: $69,800 .~~~-~-~;-~_~(~-~-~~-~: $77S
Est. r efi paymen t : $'16R/mri e Refinance your loan
LJ Get pre-qualified for a loan
At Zil1011.' Home loans.we can pre-qualify you in as little as 3 minutes
with no impact to your credit score.
Start now
Home value
Ze~t1mate
$69,800
~ Zestimt1te range
$53,000 - $88,000
~ La~t 3-U claychange
+$2,740 (-4.1%1
Figure 5: the Zillow.com profile for 4116E 3rdSt., Lubbock, TX 79403.
(J X
I selected this result and began attempting to locate identifiable property information, such as a
parcel number. Under Home Details~ Other Information, I observed the property's parcel
number as being 'R90829'.
Additionally, the Home Details section ofthe property's profile on Zillow.com contained a URL
for the Lubbock Central Appraisal District, located at https://lubbockcad.org/. Using the Property
Search function on https://www.lubbockcad.org/, I searched the term 'R90829'. I performed a
full web page capture of https://lubbockcad.org/PropertyDetail/PropertvOuickReflD/R90892/Pa
rtyOuickReflD/O0130419# (Capture ID 86caf66e-1394-450f-86f5-82f35c3b770c).
Capture ID 86caff66e-1394-450f-86f5-82f35c3b770c
contains still image captures ofhttps://lubbockcad.org!PropertyDetail/PropertyOuickReflD/R908
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 18 of 144
19. 92/PartyOuickReflD/O0130419#. Figure 6 demonstrates the contents ofthe full webpage
acquisition and associated MD5 hash values.
File Hashes
MHTMLs
CiForensic OSINT
Capture D11te: 2024-C4-16 08:44 f"'M UTC
2024-C4-·604.44 PM [astemDal'l~~:Tirne
Ca.pturt-d By: Gabrielle Kenda
Wabsil• URL: https:llfubbockc ""1.orQ1P rcJ;erty UehI~
·1-'Jotiertyi,JuIckHetlU'k!..,IUOOVl-'ar
lyQtnkRuf1D1
O01~ 10#
Hash (MOS)
1 11tHl111I-S 1itH1d 'o1d ::-fi1 111!11
1111
l. rrHlml-Snt1rCP..oc1P.-llil nhtml
Screen Captures
• FileMme
1 saeenshot001.~
2 s.aeershotuU:l.png
1 sa8€r.shotfJU:J.png
Images
No Images ObtainE<J
P.fi1P8hff4)hh85!=/f!r:f.hr17MP.70e)(i1!ti4/
Hash IMDS)
~ O
e<labc5i:1145a04797aJ7585Wd7e
OYtit:ULJdt.:lbc.~11a 161W:!0:)8 .:lb'.:ob'.$0
!flJ5130c,;44l:72ft.t:..:007'1c6C,00[)h:7r54
Figure 6: the hash values ofthe content.from Capture ID 86caf66e-1394-450f-86f5-82f35c3b770c.
Screenshot00l.png (MD5 hash 36d68edabc5dl45a84797a37585b6d7e) (Exhibit B) demonstrates
the property ID ('parcel number'), the entity that owns the deed, and the type ofproperty located
at 4116 e 3rd
St., Lubbock, TX 79403.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 19 of 144
20. ~
;e Lubbock Central Appraisal District
HOM[ PROP[RTY AND TAX INFORMATION ORGANIZATION FORMS GIS MAPS FAQ R[?ORTS PROHST INFORMATION [5TIMATCTAXES
HOAl-lll OF Dll-lECTORS ELECTION PROTEST HEAIUNG DATAH.ASE ~
,..,.OIX"~
•."ld•~:
R90892 $35,441
.,,- 8tlls
Iii o i- Ill ~
:ftim;:e-axes lnquiry,r rot~~t HS Exemption 2C24 Nc'ltice r rir,t
.l014GU, _l•A1. NlOIIM:..I ..:"I JOJ4 VAi ui; lNFORMAT . ~
MARKETI/ALUE
..
S.M.C'Jl
Figure 7: screenshot00J.png (Exhibit B).
Screenshot004.png (MD5 hash flb5130e44c72fae9974e600097c7f64) (Exhibit C) demonstrates
the sales history of 4116 E 3rd St., Lubbock, TX 74903 from 1989 to present.
~•
::?J S34.091 S1.3S::> S3S.441 S) SO H S.40:1 SJ $3$-441
SPCOI '1,'J16E ;.nSTR:ET TRUS- SPOCN (H~_
i;._ES D& Ell:"'J _,, RfV 1:i1J.••11997
SPCot,._ /ERR'-'P.
SPCOI jERR'-'P.
sueLETT. .',~YINC
l."IK~O'l'/N
UVTRS
SPOCN. TERESA 2:)(t/.~J01 73
SPOCN,_.:RVi ll 71261322
SPOCN, _:P.i;.¥ R 71261322
SL 3LETT, 1
l...'.'l"I C 307)'/083
f,end" H l =k<- , .,. .,., Lri.,u., .,._,.~u , e• • cu,,., ,~..,.,,._.., ,_.,.,,t,eA, I = ~""e, n e ,~._.. ,., ._. , ._lu.,.J u U .,,._..fMX" ' '"''i...-,, ,, klll.o, fli. , , Jr ,u .,, ,_ i A ,,..e., o.J ,,~l,= t<L c h, ,o;e ,.ll '-"". ...._,
Tl el w ....1 Ct ~ - " >+" •"'• °'"' .... , i.,e, ·~-· d· e , , .,.,.,.,..., ..... , ..1
,. ,,.._._.., , , e-
,.., J II ., ..,~ •• u l e l --'-'""""' "''"'' ....__..,,._.... ...i°"l" '"--vf> cl f , ,.,., . ,.i ,1,1,o T e l l.,= l (e, ,.,d,. 1' • ... r,;...,,c "'"'"'' 1.,, ....1~
"' ,,.., ... ~.... . ,..,, ,. ,.. 1 .. "'"~I:'.,,,. , " , . ,r.rr-. r.. " ' " ' • • .. . , ,. ,,.,,,.1~..., , .. ,, , 1 • • • " " , ,. " , " .. " '"", ..,t- "• "''""I' • " '' t'"'" "' .,,. ,;..i,..,,..r; •• r..
•,..,u....,.J.,, , o c...,,s. L <l=~l""b
"" ,._tuJ , is Lui. ..o. l m ""- "' .,, u(cJ.o,.e, iu ,-, , , ~u _,,,, ..,,, .,,.,
, , i:c-eo .J • • f • •"')''u., . r,..,.. n ., .,, ., ., _....
., .,,...._..t.,u,_;,_i .._,""' "' tJ "' •i,l'-""..o•T e lul,.,,.J, C .,,I
" ' r ..,1n..,..,. +.-I .,..,..,, ,.,.,, r,-. ,. v+-.,•u'"+,. ,.,......,., ,. ' "'::", "'""Y" "'"''""' n, ,.,.,,., ,.,.._, "-1'1' ,.,..,.. <n'«fi t:'"" ...,.•..., '¥1 ,., ,,,..,i,-, " "''"'""" n,,......,, ,.,--. , "' n.-,...,, "' ~
'"" n"""''"" --c,,.,.,.,1 n h,..,. r·t:""
" , yl~ • ,-..- ,,--,.._,.,w-,-.,.1")' ,.,.,...,..,t: nfc"""' "" "'.!...- m 1'¥1
Figure 8: screenshot004.png (Exhibit C).
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 20 of 144
I
21. Hoosier Hive News
I began the verification process ofthe 'Spencer McDaniel' employer demonstrated in Exhibit A.
Using Google Search, I performed a general search using the term 'hoosier hive news'. The first
text result for this search was for a Newsbreak.com profile for Hoosier Hive News, located at
https://original.newsbreak.com/@hoosier-hive-news-1755501.
0 Indiana State
Hoosier Hive News
Hu~ier Hivt: New~
Jl.'1> v•;fl Artif r ~I l!"lff'I ilJ"""'"tn wrilfl r,ur
.irli..k>, .,.,,; rq)Qll lll.'Wl> ' ~1,1~1;11iny
u:M1-r1 thfa Hco<1f'r <;fatPancf N.::it n-~ •
o> httfY.,i/WW',',.foc~bo::)K.,:oMiHo::,sioc!H
Vfl1'>.l'W~?n,h~,c- rt- QQJ4r
Congressional Candidate Challenges Biden's Ballot
Ellglblllty In Indiana
C:.::ih ,. 'llhitl..v ,. r on,.,....._.,.;.,n.:il r,o n,li,l:>IP },.,. tah•n "hr.1,1«t:m r,. hvfilin,,-,. l:A.N , r-'nrm to
Figure 9: the Newsbreak.com profilefor Hoosier Hive News.
- 0 X
* 1.1 0(! 0 [I .I.
To locate attribution information, I selected the first most recent article published by the
Newsbreak.com profile for Hoosier Hive News on February 14, 2024, located at https://original.
newsbreak.com/@hoosier-hive-news-1755501/3333963805654-congressional-candidate-
challenges-biden-s-ballot-eligibility-in-indiana. I did not observe any attribution information.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 21 of 144
22. f- ➔ 0 !; o r i g i r ul ne.....sm<1k..com/@i"'oosier- h iv~-nt>wS-17 JSS01 /3.333963005fS4-ccngressicn..'ll-c.lnd dlte-chi'll enges- b i ~ - s - t »' lct-el19 b Uy-1-i-i nd ~n.l
Hoosier Hive News
0
Yv,t<.1aA-tk;aflrt4-:lig,troc.1~ ,.,..;t,o,.,r
31t,i,;, Ml•~•c•••~l~r••!:
""'"' •l U•,) l"~<r,,,~ t..t,•.- :J Hd• •,.. •
d' ht~
•;,....-,.._
fau;oot,(~ :o.i« ,
Ht; t-o1,;.1mlt,~rid l OCJ,<J
Congressional Candidate Challenges Biden's
Ballot Eligibility in Indiana
CuU
~
-'A.11itky. a ~
v 11~_1,.-.,::1i-.i1
wl <."U:nliJi.t1:, ha::1 htkmc b...lJ ~tu11,.,: b) fili11);u C.l.l 1
l•(lm, ro t"hall1m3e Pl'f:l'.idf'nt Joe Biele:,'$, r rH;l'nooon rhe lndi:ina hall-01 :ir lhe Indiana
Elcctiou Di,i~ion. 11itk·y'~ ucliun~ <.
VU1L
•i11 h ::;po11:;,.: to alk·g~·J im;gu!mitk'l> ill
llidfl:11·~~iinam re ~ition,o., ir.d uding h1c:om ple1e ~IJnature.,; and purp<i,:1,dlythnd11-
Figure 10: the article publishedby Hoosier Hive News on February 14, 2024.
n
®
0
0
e
-
0
(J X
I then selected the second most recent article published by the Hoosier Hive News profile on
January 29, 2024, located at https://original.newsbreak.com/@hoosier-hive-news-
1755501/3315222253411-indiana-congressional-candidate-fires-campaign-staffer-after-social-
media-snafu. I did not observe any attribution information.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 22 of 144
23. +- ➔ 0 -• origirul ne.....sm<1k..com/@i"'oosier-hiv
e -nt>wS- 17JS501/BIS2222':.341 1- ndian3-congr~~on,1...:ancio.;te-firEes-~,1T1?<'ign-~t.1ffff-.Jlter-social-rrE'CI <MM"u
Hoosier Hive News
0
Yv,t~1•A-tk;aflrt4-:lig,troc.1~ ,.,..;t,o,.,r
31t,i,;, Ml•~•c•••~l~r••!:
""'"' •l U•,) l"~<r,,,~ t..t,•.- :J Hd• •,.. •
d' ht~
•;,....-,.._
fau;oot,(~ :o.i« ,
Ht; t-o1,;.1mlt,~rid l OCJ,<J
Ji. , ·o»i,,,.·m
Indiana Congressional Candidate fires
Campaign Staffer after Social Media Snafu
lndm::ia Congre>JSional CandidateGabe Whitleyhas found hmuelfenlimgled ma web
ot ronuv.·l."l·sy(IS l.e n,.,_..._,ntly fired .asoci.-tl me-din sroffer ~or:.~exist Fattbook post ta!'-
F,etin~ Trump'sla"".Yer. The3ituation escalated when Indy l'oliti:spublishedim article
Rccudng Whitleyof se.11ism,s-cttingoff11. t"!min ofeventstlml h.-..s brought p:.stfllleg-1-
tion~and le,1,al battles to lhe forefronL
Figure 11: the article published by Hoosier Hive News on January 29, 2024.
n
®
0
0
e
-
0
I then selected the third most recent article published by the Hoosier Hive News profile on
January 28, 2024, located at https://original.newsbreak.com/@hoosier-hive-news-
1755501/3314081163449-gabe-whitley-exposes-indy-politics-rape-allegations-after-failed-
attempt-to-label-him-a-sexist. I observed attribution to 'Spencer McDaniel'.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 23 of 144
(J X
24. (J X
t- ➔ 0 !; origirulne...,.sm<1k..com/@i"'oosier-hiv~-nt>wS-17JS501/B140811Ci3449-gabe-whitle:,•eJ1po;es-iN.t,'-politc~-•ape-alegatioM-,3fter-fJIM-~ernot-~o-b~l-hm-.>-~ ~ * ri) Q Ii] 0 (I .:.
Hoosier Hive News
0
Yv,t~1•A-tk;aflrt4-:lig,troc.1~ ,.,..;t,o,.,r
31t,i,;, Ml•~•c•••~l~r••!:
""'"' •l U•,) l"~<r,,,~ t..t,•.- :J Hd• •,.. •
d' ht~•;,....-,.._
fau;oot.(~ :o.i« ,
Ht; t-o1,;.1mlt,~rid l OCJ,<J
Gabe Whitley Exposes Indy Politics Rape
Allegat ions After Failed Attempt To Label
Him A Sexist
Vrith.:n by S ix:m....,r)fcD unid
Iudi..1.ui,. C'.ongression:il Candidatt'Gabe"'1iitlcyhas uken i'I bold st3n~....-ag3int;I what
he dainu i~a smearcamoaiu1orchestrated hrlnJy Politi~ writer Abdul Shabar.o:.
n
®
0
0
e
a
0
Figure 12: the articlepublished on January 28, 2024 byHoosier Hive News that is attributed to 'Sp encer McDaniel'.
I completed a full web page capture of https://original.newsbreak.com/@hoosier-hive-news-
1755501/3314081163449-gabe-whitley-exposes-indy-politics-rape-allegations-after-failed-
attempt-to-label-him-a-sexist (Capture ID 5a7a0c34-a166-4830-8c06-3691abfb39e3). Figure 13
demonstrates the contents ofthe full webpage acquisition and associated MD5 hash values.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 24 of 144
25. File Hashes
MHTMLs
FIiename
~ Forensic OSINT
Capture Dale: 202-t 0-1 10 08:-19 PU UTC
,o,-4.-r.4-"R 04 -ifl PP.I F;1-,trnnOayli!J' T- rn:
Captured By· c;,'lhriillln Konn~
Web!llte n tte· Gabe V,'h je;, EXPJSeS l'"ldy roli1ie5 RepeAJ1990.lionc, After roil9d
Attempt To Label t Im A SexistI I loosier II,ve News I N~·,.rsO-eak
0'1qlll3I
W*bsile URL: https:l'or~11al.rM::MbJEak.ccm·~cos11,r hl'e news 1f!>{:~U1.":fj11001
i 63-44!l-ya.tt:-wtiU
G
y-cx.;x.r.;c~-irldy"i)ubliL:ti-1ui;c.:-:Jl q,11Jlivrr,,-:Jfit:1-f:.t 'ctl
4lT1P.mp·-trl-iflhP.1-him-El-S~Xl~I
mHlml-SourceCode-0 I mhtml
rrtltml-SourceCode-02 mhtml
Hash (MOS)
txtb8G'll?e053e9456dbl f0502e2b:5d00(l
1J46tl6dct.275~7ce9Jd!Ce5ece0CC40e:
Scrten Captures
Filtmame-
screenshot0U1.png
screer.shot004.png
Images
FileMme
Hnh (M05)
&;87I34D582u152I0562u:2L0,.1i.;,.1240tl
.ffl5!17t:?:'l.1I1R1&:fl~a1:1!17M4c:!n:t0?~
1obb338731c7123b3C6e83915bl59-49tl
Hash{M06) EXIF
7fa?1f4622COe209o79c051 599511d7f2.png 455aeJ2c€~19cd'Oc5c:'541<1)20C4bed2
1c1c1:i20SJ1c6c6.l·1611
a1c11.)at2&Qa()ljc
f2d3a8bb911-1081S2H8500c2<:GSdba
d:J9llJ200;,,t.88..,5r::>0480..t:.?t.:8t.:31J66!J27
inage_1php
,o nwge_3 _:)hp 7El208df1c4e3S2518e4Bd 1El1e978d177
Figure 13: the hash values ofthe contentfrom Capture ID 5a7a0c34-al66-4830-8c06-369labjb39e3.
Capture ID 5a7a0c34-a166-4830-8c06-3691abfb39e3 contains still-image captures of
https://original.newsbreak.com/@hoosier-hive-news-1755501/3314081163449-gabe-whitley-
exposes-indy-politics-rape-allegations-after-failed-attempt-to-label-him-a-sexist.
Screenshot002.png (MD5 hash 6c87f349582el 52f0562ce220aca240d) (Exhibit D) demonstrates
attribution to 'Spencer McDaniel'.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 25 of 144
26. Hoosier Hive News
'A'•useJl.rthcallrote!JQ•ro:etio ,.,il•c-a.¥
,.,.in•< w ~ -~r,-n .,....,,h~rrMnJ
.Yound the iioo:::iers:~tc .lM L;Jti:>nJ.. •
Wrilt~n lJr Sp~uc.er-''lcUauit,J
Indiana Co:1gressionalCandidateGabe Vhitleyhas taken a bold stanceagainst wbat
!le.daims iia s:uearcampaign orc.bestu.teo. by Indyr olir.ks writerAbdul Shabazz.
Th, t~mlro'1•11-._yslmw; from ;trt :trfid11p1•11Prnl hy.:..h,;han., an :uo.:in;., 'hill1•;, <1f~ll~.'<
ism, ·,vhichthecandidatevehementlydenies. Vlhit.:aygoes :"urth.er, leveling EKious al•
legations i.gabst Shabazz and afailOC mayoral candidate.
111 a '",IM:ial mnilia JMJr-.1, Wh Iii-,; ;N-tds, ' @<ll}:hiilll @lmlyl-'olil .::•;Or;!, :tml @93wibc
:'l.a.s no room to ta:.l;:aboutse:-cism when the:-ewti:rea11icleswritten about them ~exu-
f!llyllssaulting and rnping,,,'Ome:1. I wentfaere!'.!! I was ~:it the fl.ttides ofLem mig-
Tl:.e b d:ana Congressio:iaJ Candidate is not holdingback. calli:ig into question the
Figure 14: screenshot002.png (ExhibitD) .
Using Google Search, I performed a general search using the term 'indiana secretary of state
business search'. The first text result for this search was for https://bsd.sos.in.gov/publicbusiness
search.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 26 of 144
27. INBiz: your one-stop source for your business.
H1;cd Hclp?G ~'Cus.,c.:ill:
1 317•234 976S
] Cont act INBi2.
1-31 /-234-9/tiiS
] Stay connected. ] Working together for you.
302 W. ','ll;;o;hn3ro11 Street
R:l(lmrnlR
IOCianapcli:;;, 1145204
f) a @)
- ~
e
@ 0 ,..,
@ l@
T 0
lridi~na
Figure 15: a still image capture ofthe business entity searchfanction on https:l/bsd.sos.in.gvlpublicbusinesssearch.
Using the search function on https://bsd.sos.in.gov/publicbusinesssearch, I petformed a search
for 'Business Name contains Hoosier Hive'. I observed one (1) business entity named
'HOOSIER HIVEWORKS LLC' with a registered agent named 'Joshua E. Allen'.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 27 of 144
28. I completed a full web page capture of https://bsd.sos.in.gov/publicbusinesssearch (Capture ID
4279dc29-2fb0-4cfd-8d0e-2863e5dde860). Figure 16 demonstrates the contents ofthe full
webpage acquisition and associated MD5 hash values.
File Hashes
MHTMLs
~ Filename
[,)Forensic OSINT
Capture Da~: l024-C4-1/ 12:4UAM U IC
202-t c~ ·o08:-10 PM Ea~t9mOa,rlig~: J;'T);,
Captur.d By: G<1lt!iel11:1 K~r11.J,i
WeOOite Title: INA:it Y1111f nnc-sb p i;11111u: k:,r ~'II.II hu~;i111~;~;
Web~ile URL: hll1r.-.l'1NI iu; in uuv/P.ihlil R11!-;r K:•.~.~:(lft:l1
1 rrHfml-Sourc.e.oc1P.-f'i 1 mhfml
H;,sh(MDli)
; mHtml-SourceCode-02 mhtml 31J2J.bo63818095o51l'.!8&a3ee4d354f9
Screen Captures
, FileRamoe- HnhiCM05}
1 sae,ershotuUi.png 1Ydat:db:l001b::18toeaf~~b/1JOf /tl9~
Images
, Filename Hash (MOS) EXIF
OHJ8.:120,.;133c233f00417!:00&ittf8l-'(>f
J mwhBr-imglln!J
,. ojnx-locder g f be1cede97289c:13920048f23Sf::137b85
Figure 16: the hash values ofthe contentfrom Capture JD 4279dc29-2jb0-4cfd-8d0e-2863e5dde860.
Capture ID 4279dc29-2fb0-4cfd-8d0e-
2863e5dde860 contains still image captures ofthe search results from https://bsd.sos.in.gov/publi
cbusinesssearch. ScreenshotO0l.png (MD5 hash f9dabdb266fbd8f0ea755b7d9077b998)
(Exhibit E) demonstrates the 'Hoosier Hiveworks LLC' business entity.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 28 of 144
29. IN BIZ JINQOV
Business Search
Business Search R
esult
BusinnsN.i~
J:02208171615~1 HOOSIER HMWOR.KS LLC
P• 1 of1, rttords 1 to tof 1
◄@Mtili·IW♦
pq~Type fntftyType
LEGAL NAME Domestic l.Jmrted lJab1lity Company
Figure 17: screenshot00l.png (Exhibit E).
Princlp.l Office Address
562 South Bluff Street. Montte~lo IN 47960 USA Joshua E. Allen
St.tus
Actow
Using Google Search, I performed a general search using the term ''texas business entity search".
The first text result for this search was for https://mycpa.cpa.state.tx.us/coa/.
0 X
* l. 0 lil 0 [I .:.
-,) .~J~LUI' ~tv 1.-1.1f'J.111,;A,.;,.,.-.11t~
•.J OIE"no HE•(pr
Q. Taxable Entity Search
S!!arch
A Tex.at. Comptroller of PublJeAc.counts
W,, GlennHeg.,r
• Home
• (;';)fltacl.Us
Tax1D
Entity Nam ■
File Number
Q search
U,.,.lho.
. 1'-<:tr,jACorr,~
:uoltr~ Te~ w
~, Nurnl"" "' lhc!!-,<jjg 1Fc,:k,ill
Cm~lo,•, 1'16r~fic.Moo ~lllber.
OR
OR
:::iReset
POC.ICIFS
• Pfh,11cy 1111dSIICUr,lyPolicy
• ~$!; btlll,1 Polley
• Pub'le-lnfr,,m,Mior./vJ
• C Oll'IP'l¢I M:11 foM
im~
• Cvrumvn~
/ u-.eoW'el.l B1VY"~ 111
OTHFR STATE SITES
• texn.gov
• Tex::.c Records Md lrlforMt.l 00 l◊e..:l•oi- (TRI L)
• S';i;i~~ U rik Policy
• TeXi'I J<'!~t;'lnl Porl-31
Figure 18: a still image capture ofthe business entity searchfanction on https:l
lmycpa.cpa.state.tx.us/coa/.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 29 of 144
30. Using the search function on https://mycpa.cpa.state.tx.us/coa/, I performed a search for 'Entity
Name contains Hoosier'. I observed 86 records for Texas taxable entities whose name contains
'Hoosier'. I did not observe any Texas taxable entities whose name also contains 'Hive News' or
any derivative ofsuch name.
I performed a full web page capture of https://www.mycpa.cpa.state.tx.us/coa/ (Capture ID
6fc09058-c074-45cc-a13d-26bllca30741). Figure 19 demonstrates the contents ofthe full
webpage acquisition and associated MD5 hash values.
~ Forensic OSINT
,.....,IJl' Sc....., C.,pklffo, O...Sc-,,atonm.
File Hashes
Capture Date: l0:l4-t:4-1l 01:04A~ U IC
202-t c-11G000,1 PM EastemOaylig~·Tirn.t
Capturwd By: GdU1MI~K" r11.h:1'1
MHTMLs
, Filename
rrHfml-Sntlf('J!f.000-0 I mhtml
1 mHtml-SoorceCode-02 mhtml
1 rrl ttml-SourceCode-03 mhtml
Screen Captures
, Filename-
SCl8ffl:hotuU1.l)OC1
2 SUWr!'!:llul002.l)fiy
SCfee.nshot00S.pog
screer shot005.l)n!:1
7 saeimshot007.pog
Images
• Filtmame
a silvers.eiallE p~
J ~i11·u1
~UW111WMuvrlilc.µny
10 t.ilvn~.r.allFtmnt.prvrn1
t r,no
ff0dee5e5a9143fd7e I8-5d91.3do1208
S7b7:la26f7b85ea&a1~f3b03ca9a17a
Hash IMD5)
1t1oc5t01::iR1h:>Th6c40lt:!J;l41r1f):>8rnh
360cJ6c95tla3btcf7et29f2e0€eD2cectd
baOSaO
1aea4b005141a472ef46b015eb
d119adfO79!:5aa24ed976.l:2'.}9iffi'Jb~
Hasfl !MD5)
b!:i::380) 722-177fjdb7i
Hccabd~O~Jb9a2
0261
Sof54324622434:l(J8bf5143C•80l¥..:
ch.'i/ :'il'
.r14<1<11h//B1OcV0'.'fir1r.r.flrff?/
EXIF
Figure 19: the hash values ofthe contentfrom Capture ID 6fc09058-c074-45cc-al3d-26bllca30741.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 30 of 144
31. Capture ID 6fc09058-c074-45cc-al3d-
26bllca30741 contains still image captures ofthe search results from https://mycpa.cpa.state.tx.
us/coal. The following still image captures demonstrates the search results from https://mycpa.cp
a.state.tx.us/coa/.
Screenshot00l.png (MD5 hash 86ce0a353dfb7ec9a20fc7dc06e7f28a) (Exhibit F):
""')' Texas Comptroller of Public: Ac.counts
.. Glenn Hegar
Q. Taxable Entity Search Results
0 86 matdleS found forme seardl string Hoosier fjh§fi@l•J
0 Ifyou have quesuons about the searcn resutts, send an email t o ~ ~ ~ ~ ° 'caU 1-800-252-1386
Results
V.ew Details Name
GIB HOOSIER & ASSOCIATES, LLC
GIB HOOSIER AIR TRANSPORT INC
GIB HOOSIERALLIANCE, LL C
~ HOOSIER ANO COMPANY LLC
GIB HOOSIER ARBROOK PLAZA LLC
GIB HOOSIER ARLINGTON SNF LLC
~ U f'V'<:'l i::O ICCnl"I A T i::<:' Ill.If"
Figure 20: screenshot00lpng (Exhibit F).
Taxpayers ID#
32046947431
13518624724
30119726906
32080641973
32015892345
32015892436
1 n:.fVl1 'l7 n i:io
z;p
75034
47202
77342
78702
78028
78028
Screenshot002.png (MD5 hash a90c294e2ee16e5edaa4ab79f23743e3) (Exhibit G):
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 31 of 144
32. am HOOSIERARBROOK PLAZA LLC 32015892345 78028
am HOOSIER ARLINGTON SNF LLC 32015892436 78028
am HOOSIER ASSOCIATES INC 17602137089 92126
am HOOSIER BIODISELCOMPANY 19120316443 47708
am HOOSIER BUILDERS, INC 17600484152 77379
am HOOSIER BUILT, INC. 32089379468 78620
am HOOSIER CARE OF TEXAS INC 32015892535 78028
am HOOSIER CHIEF CORPORATION 17526023514 75038
am HOOSIER CLEANING SERVICES LLC 32001703696 75093
am HOOSIER CONTRACTOR INC 17604284012 77064
am HOOSIER CORPORATION 17207233168 70606
am HOOSIER COWBOY, LLC 32059030141 77007
am HOOSIERCRANESER~CECOMPANY 32073507363 46517
am HOOSIER CUSTOM MILLWORK, INC 17109394191 77429
am HOOSIER DADDY LLC 32086837856 78621
am HOOSIER DADDY TRUCKING LLC 32050857856 36278
HOOSIER DEAL LLC 32039771632 40241
llzal!!l!l!I HOOSIFR OFSIC,N ANn (';,RAPHIC: INi. :?0:99?f;1% n011
Figure 21: screenshot002.png (Exhibit G).
Screenshot003.png (MD5 hash 9252045b3097e382cl3726900b0a2e2a) (Exhibit H):
am HOOSIER DADDY TRUCKING LLC 32050857856 36278
am HOOSIER DEAL LLC 32039771632 40241
am HOOSIER DESIGNAND GRAPHIC. INC 32039925196 77071
am HOOSIER DESK COMPANY 13503922208 47432
am HOOSIER DIAMOND PRODUCTS INC 17602371662 77301
am HOOSIER DRILLING EQUIPMENT CORPORATION 30004747868 77077
am HOOSIER ENERGY RURAL ELECTRIC CO-OP 32060192989 47403
am HOOSIER FACTORIES INCORPORATED 13511039706 46360
am HOOSIER FAMILY FOUNDATION 32077021114 76244
am HOOSIER GREAT PLAINS NE, LLC 32055298734 75251
am HOOSIER GREAT PLAINS LLC 32049670766 75035
am HOOSIER GULF POINTE PLAZA LLC 32015892303 78028
am HOOSIER GULF POINTE VILLAGE LLC 32015892295 78028
am HOOSIER HANDYMAN HOME REPAIRS, INC 32060456343 78003
am HOOSIER HANDYMAN L LC. 32020641125 75028
am HOOSIER HOLDINGS LLC 32030154127 75069
HOOSIER HOMES, LLC. 32051565847 78759
HOOSIER I INC 32063229382 75033
Figure 22: screenshot003.png (ExhibitH).
Screenshot004.png (MD5 hash ldac5601a81b27b6c49fb9241d628e6b) (Exhibit I):
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 32 of 144
I
I
33. am HOOSIER HOLDINGS LLC 32030154127 75069
am HOOSIER HOMES LLC. 32051565847 78759
am HOOSIER I INC 32063229382 75033
am HOOSIER INC 30010857529 75206
am HOOSIER INNOVATIONS LLC 32084097487 78253
am HOOSIER INVESTMENT HOLDINGS. LLC 32093498411 75001
am HOOSIER INVESTMENTS LLC 11418729668 76021
am HOOSIER INVESTMENTS. LLC 32072090858 46545
am HOOSIER IRVING SNF LLC 32015892287 78028
am HOOSIER LINE WIND, LLC 32090508535 77079
am HOOSIER LOBO LLC 3203-1770175 76034
am HOOSIER LOGISTICS. LLC 32093550880 46225
am HOOSIER MACHINERY INC 13821661991 49068
am HOOSIER MAGNETICS, INC. 32082100333 47170
am HOOSIER MANAGEMENT LLC 32016798020 75080
am HOOSIER MIO.ATLANTIC PA, LLC 32049670774 75035
HOOSIER MID-ATLANTIC. LLC 32049693297 75035
HOOSIER MOBILE HOMES LLC 32074978910 77356
Figure 23: screenshot004.png (Exhibit I).
Screenshot005.png (MD5 hash 360a6c95ba8bfcf7ef29f2e06e02cedd) (Exhibit J):
am HOOSIER MID-ATLANTIC PA, LLC 32049670774 75035
am HOOSIER MID-ATLANTIC. LLC 32049693297 75035
am HOOSIER MOBILE HOMES. LLC 32074978910 77356
am HOOSIER NORTHGATE PLA2A LLC 32015892428 78028
am HOOSIER NURSE LLC 32074064638 77070
am HOOSIER PATTERN INC 32079910629 46733
am HOOSIER PATTERN, INC. 32081748116 77339
am HOOSIER PL.AJNS MANAGEMENT SERVICES LLC 32065302799 75254
am HOOSIER PLUMBER. LLC 32020616242 77062
am HOOSIER PROFESSIONAL SERVICES, LLC 32061337336 75409
am HOOSIER PROPERTIES. L LC 32024277132 75219
am HOOSIER RACING TIRE CORPORATION 32041174668 46536
am HOOSIER REVITALIZATION TECHNOLOGIES LLC 32059265879 79424
am HOOSIER ROCKPORT ALF LLC 32015892477 78028
am HOOSIER ROCKPORT SNF LLC 32015892527 78028
am HOOSIER RV SERVICES LLC 32076831505 75087
HOOSIER RV TRANSPORT INC 13518898948 46507
HOOSIER SERVICE PRO LLC 32092092116 78252
Figure 24: screenshot005.png (Exhibit J).
Screenshot006.png (MD5 hash ba89a8 1aea4b085f41a472ef46b815eb) (Exhibit K):
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 33 of 144
I
I
34. am HOOSIER RV SERVICES LLC 32076831505 75087
l!l!!!!I HOOSIER RV TRANSPORT INC 13518898948 46507
l!l!!!!I HOOSIER SERVICE PRO LLC 32092092116 78252
l!l!!!!I HOOSIER SURGICAL MANAGEMENT GROUP LLC 32066205082 TT494
l!l!!!!I HOOSIER TECHNICAL SERVICES INC 12231050761 08070
l!l!!!!I HOOSIER TEXAN ENTERPRISES LLC 32053079276 78280
l!l!!!!I HOOSIER TEXAS I LP 18610588818 76040
l!l!!!!I HOOSIER TEXAS, LLC 32011134726 76040
am HOOSIER TIMES. INC 32069096603 46545
am HOOSIER TIRE MID-WEST INC 13712114506 62704
l!l!!!!I HOOSIER TOWER SERVICE. INC 17603182886 TT383
am HOOSIER TRANSPORT INC 13513133580 47620
l!l!!!!I HOOSIER TRANSPORTATION SYSTEM INC 15610137935 46052
am HOOSIER WIRE INC 30113522970 35620
l!l!!!!I HOOSIER YOUTH SPORTS ASSOCIATION INC 32069376948 76645
am HOOSIERBEAR VENTURES LLC 32092819591 75019
HOOSIERS I LLC 32039721397 54956
HOOSIERS II, LLC 17528780905 54956
Figure 25: screenshot006png (Exhibit K).
Screenshot007.png (MD5 hash d119adf879a5aa24ed97622397f93b5a) (Exhibit L):
am HOOSIERBEAR VENTURES LLC
l!l!!!!I HOOSIERS I, LLC
am HOOSIERS II, LLC
l!l!!!!I HOOSIERS INVESTMENTS, LLC
l!l!!!!I HOOSIERS MANAGEMENT LLC
l!l!!!!I HOOSIERS PARTNERS LTD
am HOOSIERTEX ELITE, LL C
•
Texas comptrollerof Public Accounts
Glenn H.;,u
• Home
• Contact us
Figure 26: screenshot007png (ExhibitL).
32092819591
32039721397
17528780905
32066443501
32033142665
32035008468
32067475833
"'**'
POLICIES
• Privacy and Secunty Policy
• AccessIbillty Poltcy
• Link POiiey
• Public lnfonnationAcJ.
• Compact With Texans
• Commonly Use<l WeD Browsers
Examination Report
Version 2.0 (April 23, 2024)
75019
54956
54956
75126
TT382
TT382
77471
OTHER STATE SITES
• texas gov
• Texas Records and Information Locator(TRAIL)
• Stale Link POIIC)'
• Texas Veterans Portal
This document includes a cover page with the signature of the report author.
Page 34 of 144
I
I
35. Facebook. com
I began searching for any other information regarding Defendant MCDANIEL. Using a non-
personal Facebook account created in April 2024 under the name Gabrielle Kendall, I petformed
a search on https://www.facebook.com/ for the term "Spencer McDaniel" and filtered
results by Employer using the term "hoosier hive news".
Gl
Search results
"',.
Figure 27: a still image capture of the People searchfanction on https:/lwww.f acebook.com.
I observed one (1) returned result for Spencer McDaniel, located at https://www.facebook.com/s
pencer.mcdaniel.509. Using Forensic OSINT Page Insights, I observed that the Page ID14
ofthe
Facebook.com profile located at https://www.facebook.com/spencer.mcdaniel.509 is
100049322332768. A Page ID is a unique identifier for Facebook.com profiles.
14 "Your User ID is a string of numbers that doesn't personally identify you but does connect to your Facebook
profile You have a User ID automatically, whether or not you choose to create a usem ame" .
https://www.facebook.com/help/211813265517027.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 35 of 144
36. v O (1} F.teebook x ~ CMS- Forern.icOS<NT X +
~ ➔ C -• faceboolc.com/spencer.mcdamel.509
0 Q. Search Facebook
Posts About Friend
• ,P Type here to search
~ Forensic OSINT
82005-2209-PL-004150 v
Data Insights for www.facebook.com
Data Insights
Id: 100049322332768
name: Spencer McDaniel
shortName: Spencer
isVtrified: fatse
gender: MALE
profilePhotoURL: https1twww.facebook comlphoto/?fbld=396020495385358&set=a.12270400 ~ ~
businHsPagelO: 100049322332768 ~
isAdditlon.ilProfilePlus: faJse ~
Current URL: https1twww.facebook comlspencermcdaniel.509
Please venty theabove extracted values before USUlQ them ll any legal proceedings
l~Mll!•UMH
ReUyC
(2j Full Gulde - ForensicOsintcom e Repor1 a Bug 9 Make a Suggestion
Figure 28: a still image capture ofthe Page ID for https://www.facebook.com/spencer.mcdaniel.509.
I performed a full web page capture ofhttps://www.facebook.com/spencer.mcdaniel.509
Ci X
(Capture ID dd7484e9-3231-451c-aae9-979f60df011a). Figure 29 demonstrates the contents of
the full webpage acquisition and associated MD5 hash values.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 36 of 144
37. ~ Forensic OSINT
f u,11 P~ Sc,- Caph,,•,0.,. lc,e..,, ol o nm.,
File Hashes
MHTMLs
Capw~oate: ?:1?4-04-17 01 1?/J,I IJT(;
n2-1 01 1t 00 1l. 1-'t.1 ::asttin Llayig1l lime
Captured By: Gabr el eKend~I
Web9He lltie: (1}rllcebook
Fileoome
111Hlml-Scu1t:(i',1ak:-f11 11'1!11I
111Hl111I-S !lH(:d'
',1ak:..(
1;i 11 ' 1hrl
Screen Captures
Filen..
,ITTl!I'
screenshot001.Pf',J
scre€nsh0l002.pr,o
1111.ages
FIiename
Q9()u4uU,;iz!tn Pf19
JV4o9nAg [h Pflil
VMZOISIJ!wn.png
s1At:i8LrLL pnQ
SHl ... HuoYO p,g
4:15/1M,fl5 f()IF;757Ml'.l.11R5 R!)7:'i00.",M751 41114M!l r1 ill!l
338512027 6"265J057.238705 1078335S9E.01614905? n .1)9
11 299264210 5TT56564.32975)8 64713549225432354!)6 n~
,, 270556610_5J434J900219G!l2_0i J 156l67404::1027365_n p;.
• J 272743927_40450966J203f'l7_130791565000132'9466_n..P;
1 s 271600699_4730509J7t!J2J13_96624714242066901_n,jpg
'S'l:'.1'¼3E
n U4f1 pn~
u 114e9_
pro
~3 430039309_3790395407914400_4J0750133536719254J_n,jpg
2.t 410171452_9710960570777:16_!.9Q020690195607917J_n.R-
~~ 417:',4.'.500_rA173? 441!i474,) 1_f.ROt'ii0?'.)()770775-..1!171_1
1i N
J
Hash (M06)
1A.4h0?)1!141!S7111hf0~4htlr4-1flf!)d(I
Ma:s.h (1.106)
3b32556380944952o64dc4.0075oo3169
C:41934dc4d36.)Se3o6t:OO<ll 4Mt3c627
Hath (MOS)
fdeJ211€6:i6adSb9dC95te2253d2oo25
207f1:>64)17C
-31aO:kba59d200ei bb!31e
<l9e0921:j~~c1dG!Uad:;.,:k/l:j10237
JI J()J1e(1
J<.lttd0lbd30ddc~3tt>del'..Me
111ii&-
.!k'lr:!ln!Ulct4:iall'.lhrni~i:,hc./(t
lh11:flR40844<1r:l:lc.fl(lafll77fd31,f.:tfl~4
47n4,ltlti?;:"1lffl.17f3L'i::tfl?1:()f1)7:>4~il
ecd8008cfS9c96itc2it:bo4bf'l1293<i7
.:ic-'245020ftx:2400f512107edcfd7b12
c747HJ124tl739129d4i74d79%J1242
d)J7de77:;i.t3e47672eba7699J€i6162)3
93oo5f75425eddf61d7::!0c55b0a70d:>S
'd/dc:UOOet1a111:1litiUb1 1M5a/21~V.;/
7h
bdR:lfl!6t:flt:?11
:'i?fl4rk:O!~t 4R4:tlxld?
4Sf::t6)u:Ol40')r.J(),_'68fd88f7 17:kC•1tJ
.:i3fc16ocl1D82 I 1
511e57c2~1:)79ee
ee97b4f'ff747ef83&0a;)9(Jffl8fD}56
01J60i775445d2edc2ldcIdem116-0e
Occe962fae0bf:lbf0::>a~fl76:!el.:)::117
5776ce6a7e405tl15ea30d144'e455J69
:31ttb:xJaJ8ael9a/ee380c./00;.lccl(J:::9
EXIF
Figure 29: the hash values ofthe contentfrom Capture ID dd7484e9-3231-45lc-aae9-979f60df011a.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 37 of 144
38. Capture ID dd7484e9-3231-45lc-aae9-979f60df011a contains still-image captures of
https://www.facebook.com/spencer.mcdaniel.509. The following still image captures demonstra-
tes the 'Spencer McDaniel' Facebook.com profile located at https://www.facebook.com/spencer.
mcdaniel.509:
ScreenshotO0l.png (MD5 hash 3b32555380944952a64dc48076ad8189) (Exhibit M):
Spencer McDaniel
Posts About Friends Photos Videos Reels More •
Figure 30: screenshot00J.png (Exhibit M).
Examination Report
Version 2.0 (April 23, 2024)
1
-lbhi v
This document includes a cover page with the signature of the report author.
Page 38 of 144
39. Screenshot002.png (MD5 hash d4d934da4c8608e9d64dddl4bdc3c827) (Exhibit N):
0 Q. Search Facebook
~ Spencer McDaniel
Cancer V,cum SuMvor/ Patnot / Proud Chnst1an
American/ Happily Married
~ Owner and CEO at Save the USA
!! Wnter and echtor at Hoosier Hive News
I'!►. Studied at California State University,
•..,, Bakersfield
t!' Went to Bakersfield High School
ft Lives 1n Nashville, Indiana
0 from Bakersfield, California
• Married to Ashley Breanna McDaniel
0 Joined April 2020
Dh....+,..r Ceo ::.II nhntn~
Figure 31: screenshot002.png (ExhibitN).
Oo
c:»
Spencer McDaniel
6d 0
Find friends
Thank you for the Birthday wishes everyone.
o, se
rf:J like Q Comment ,;) Share
View more comments
Vil Minh OJng
Xin ch.o anh Spencer McDaniel. Ben em hO trcJ tSt cAcac
dich VJ lien quan Mn #fACEBOOK #YOUTUBE #TIKTOK
#INSTGRAM #GOOGLE Neu anh Spencer McDaniel quan
tam thl vui long goi we t1ep SOT: I 0764.643.747 I
CSKH (24/24) Hooe nh~n tin ZALO : • 0764.643.... See
more
On https://www.facebook.com/spencer.mcdaniel.509, I selected About to observe the
0
biographical information for the Facebook.com profile of Spencer McDaniel, located at
https://www.facebook.com/spencer.mcdaniel.509/about. I performed a full web page capture of
https://www.facebook.com/spencer.mcdaniel.509/about (Capture ID 935dddc7-73dl-4a1e-a246-
73ece7bdb32c). Figure 32 demonstrates the contents ofthe full webpage acquisition and
associated MD5 hash values.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 39 of 144
40. ~ Forensic OSINT
File Hashes
CapW"e Date: Nl4-04-1/ Ot 1~Mt UIC
:,i,;1u-i ·t,n·,,.,~, ,a;~ff'lll"t;ll'/1r,fl"l:mi:;
C..,p!llr.d By: G~hriAl~Kl!Mil l
Wtb<a nti.: (1,~;)(>oo:.rl,l.-"');wii,;il ~;;1.~h,.",~
W.b<• URL: htt;:il:.'llo·,'
N,
•.f:acE!book.com'1pencer.tf!Cd~ni&I.suw..aboot
"1HTh4Ls
mHW!ll-Sourcc<:.odc-Ot .m'1~
mH~J
-SourtcCodc-·)3.mli~
ScrHn Captures
Images
Filename-
,-<.:S.,Ji:.w:4Uxt..L:>I~
11 poZ_P5Blff
YaV?09
11 x -sn·2001_122109349&74X(l(;3~_1n1,a1:;14000C74-074,_n.iPfl
•~ 42S37.:.:;GS_
9478507$0202~20_44clGC4l963v~174119_njpg
11 ~t]~t01)1_9-tJj,!5J(V2;)52C6_22022•3~1:Ja~(2)<;5JS1_r.JPJ
2i xs:n.:.1a4_4~7:t5e5S200100_21001~~ra,,11111e~nu,...-v
,, :»516003~_J.J.J25J!l1230.l-5'°_)101Hv)5J2m5610_r.J~
ICSS29J7~_321122392S7, 1
69_8~4~~15~ 12S23;'C,f._n_lYJ
116710004_1&596C-07t72l746_OOJ.4264)5024554262_njpg
11 3C~5m, :,_5e~ 127432Cl7-~S40_!34139440'3045637744-0_n._
iw
K9jUt,,ruo:Yz~.pn~
Hu h (M05)
fl:-4oo40Sdcb0:.b~1d18d7i7b0cd7d
124<:bc®41203c1d1&C3882c33;Jl]93'J1
11f3fjta14ii3dlJ2)1)(,jt:i(.tOC(:34fJOdt-
H• i h lllfD~I
otOOcu.6622(1,:12b~M21;>,gOOii=,o~~da
a7c34Ctl2b:b::.&:£,C£.c071
-4cD2cc:!lc$l
dJ6J001~oc1:,.g~Q62a:,.g110;J.reb20
1dvfoo611J2ocd4ac9':J'J~IJ07b~70lb
"4c5~7a54rJSa<"OOd-
430f6004~42
5<37dC<>5cJc8":a3~c33dCd24c6cl{lc18
oclik~f6JfOJ 14'l'4::i601tl3c::.C
EXF
Figure 32: the hash values ofthe contentfrom Capture ID 935dddc7-73dl-4ale-a246-73ece7bdb32c.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 40 of 144
41. Capture ID 935dddc7-73dl-4ale-a246-
73ece7bdb32c contains still image captures of https://www.facebook.com/spencer.mcdaniel.509/
about. The following still image captures demonstrates the ' Spencer McDaniel' Facebook.com p
rofile located at https://www.facebook.com/spencer.mcdaniel.509/about.
ScreenshotO0l.png (MD5 hash 8b75abadfl25387aeae26lblaf0le2fc) (Exhibit 0):
Spencer McDaniel
Posts About Friends Photos Videos Reels More •
Figure 33: screenshot00J.png (Exhibit OJ.
Examination Report
Version 2.0 (April 23, 2024)
1
-lbhi v
This document includes a cover page with the signature of the report author.
Page 41 of 144
42. Screenshot002.png (MD5 hash c37c368c0796689c2cc6lee003354965) (Exhibit P):
0 Q. Search Facebook
~ Spencer McDaniel
Overview
Work and education
Places lived
Contact and basic info
Family and relatlonshlps
Details About Spencer
life events
Photos
Spencer's Photos Albums
Figure 34: screenshot002.png (ExhibitP).
Oo
c:» Find friends
rjit vwner ana Lt.U at ::,.aveme U::>A. vwnerana 1...tu at ::.ave mo1ana ano
-:- Writer and editor at Hoosier Hive News
• Studied at (alifornla State University, Bakersfield
ft Lives in Nashville, Indiana
0 From Bakersfield, California
61 Married to Ashley Breanna McDaniel
W, Smee Apnl 13. 2019
Q.'.1,l.li&l1ill.U
1
Ja1.t1a
0
After observing the About section ofhttps://www.facebook.com/spencer.mcdaniel.509, I then
I
selected Photos to locate photos of an identifiable person that may be attributed to 'Spencer
McDaniel'. I selected the Profile Photos album, located at https://www.facebook.com/media/set/
?set=a.122704006050343&type=3. I performed a full web page capture of https://www.faceboo
k.com/media/set/?set=a.122704006050343&type=3 (Capture ID 59c50d4d-f4fd-46la-a4D-
94d903cc2219). Figure 35 demonstrates the contents ofthe full webpage acquisition and
associated MD5 hash values.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 42 of 144
43. riForensic OSINT
File Hashes
C~ptixe Date: 2C24-04-t 7 Ot 2J,M UTC
Ai.!1t>11(> 011JJ1-'M....dp.(T!Ot~:t'.:: I~
Capblred By: (:S.t~HI+<K111MIH'.I
Web~ittTitie: ,1, r e~DOClk
Wet,,;r.lt" UR.l: htl;.~::,,,.,·,,1.,,.to,COOOl;x,:m:mcdia-'~ct~t-.:i.1227(!40000~:S43&'.)'P'>-
'
"1HTh4Ls
1 mH'11!-Sour~eCode•(l1.m1lml
IT,l llm1
-SourccCodc-:l2.m·t~
Screl!n C aptures
Images
271G08>J!'IO_4730'"...09Jl'682313_½ 52~7142-42003'JS1_n ~
II 271!¼(,3jQ_'J~34J!){8,2 o/..,82__81J 1S()1(i74cA3()1?~_1'1.)~
u 212r,3927 4e4~3203107 13S791W..l.)€.61323400 ru9
•• 2i1 526llC{l_472<j5()2J435J0~_6700ill16:J.55LJJJ9457_r.!p:;i
11 z,;s~mn 4419392.W79~4ro :>4532114,:.15~5102 I'. ~
,1 1◄1 1&6002
_24"63C•71J!!S7671_01GS04<1~(l0W212l3J2_
n~
,, !)l-4:,o.iOO_122703092717011_782J02l9130712Wl28_njpg
» 12G1&4JS5_2CJ4920G100<!370_J0272J4i424517JSGG2_r..~
fdd513d:Cdc00o::7occ1o0t:c1t.0~1•)
40'.r::icc6M9W048200J7»:.bb0bd79J
HH M(M05)
:>3WEbcs«.OOb7a820otOOtf1~ :11
l;c0!)c87d002J72077c03J77a2btic71Xi
7ed4d133ee212X.41"60b2t;dtk.22495<1
.[.'Jc*20~bJcd63cJd7'Jfd.Jc41bcbc2
~181737lt!!18ub68fc:!002~-00l!7C,m7
.;,4f3t,08"'-fcM>4d17d-
011.:.f4t'4&:S4et
Sc&J'f219cJJ4Sd.xm.'.c5111:Jb2f72
J@SN47!l45dd7~5.J33'::707c49?001
Figure 35: the hash values ofthe contentfrom Capture ID 59c50d4d-f4fd-46la-a4f3-94d903cc2219.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 43 of 144
44. Capture ID 59c50d4d-f4fd-46la-a4f3-
94d903cc2219 contains still image captures ofhttps://www.facebook.com/media/set/?set=a.l 227
04006050343&type=3. The following still image captures demonstrates the profile photo album
located at https://www.facebook.com/media/set/?set=a.l22704006050343&type=3.
ScreenshotO0l.png (MD5 hash 1927afbf5353444042aa472cd908b286) (Exhibit Q):
Spencer McDaniel
Posts About Friends Photos Videos Reels More •
Figure 36: screenshot00J.png (Exhibit Q) .
Examination Report
Version 2.0 (April 23, 2024)
1
-lbhi v
This document includes a cover page with the signature of the report author.
Page 44 of 144
45. Screenshot002.png (MD5 hash 6403e0e687ec59d3a349f7de8c8d2b94) (Exhibit R):
0 Q. Search Facebook
<) Spencer McDaniel
.30 IWtls • 1Contributor •
Figure 37: screenshot002.png (ExhibitR).
Oo
o, Find friends
Screenshot003.png (MD5 hash 490bcc6be99890482bea7adcbb0bd793) (Exhibit S)
0 Q. Search Facebook
t; Spencer McDaniel
Figure 38: screenshot003.png (Exhibit S).
Oo
o,
Examination Report
Version 2.0 (April 23, 2024)
Find friends ... 0 .o .
This document includes a cover page with the signature of the report author.
Page 45 of 144
I
I
46. Screenshot004.png (MD5 hash 927d77d9694a3dc4dbfa37058955409e) (Exhibit T):
0 Q. Search Facebook
t9 Spencer McDaniel
Figure 39: screenshot004.png (Exhibit T).
Oo
00 Find friends
Screenshot005.png (MD5 hash 792363f5843886f12a767e01e7d770f4) (Exhibit U):
0 Q. Search Facebook
Spencer McDaniel
Figure 40: screenshot005.png (Exhibit U).
Oo
Oo
Examination Report
Version 2.0 (April 23, 2024)
Find friends
This document includes a cover page with the signature of the report author.
Page 46 of 144
I
0
47. In the Profile Photos album located at https://www.facebook.com/media/set/?set=a.12270400605
0343&type=3, I observed multiple photos of identifiable people. Four (4) photos containing ide-
ntifiable people included captions describing the people within the photos. I observed one (1) ph-
oto containing two identifiable people with the caption "Our honeymoon picture before covid".
... 0 .o
Spencer McDaniel
No..-ember 25_ 2023 0
Our honeymoon ptcture before coVJd.
0 0 1s
i::) Share
Figure 41: a still image capture ofhttps:l!www.facebook.com/media/setl?set=a.122704006050343&type=3.
I selected the photo, located at https://www.facebook.com/photo?fbid=90l875711466498&set=a.
122704006050343. I performed a full web page capture ofhttps://www.facebook.com/photo?fbi
d=901875711466498&set=a.122704006050343 (Capture ID dlf2ba47-fd49-46d7-a90f-
839db35el0af). Figure 42 demonstrates the contents ofthe full webpage acquisition and
associated MD5 hash values.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 47 of 144
48. File Hashes
MHTMLs
, Filename
~ Forensic OSINT
Capture Dale: 202-t 0-117 01:2GA"4 UTC
,o,-4.-N+"ROO?fl PP.I F;1-,trnnOayli!J' Ti·rn:
Caplured By: C.FlhriiP.IIP. KP-nflil1
Web!llte TitSe: (1} r .:1:e00Dk
Web!llite URL: https:/fv-,wI_locebook.com1photo?lbiti=901875711'&5498&se~=a.1227G
4l.ll.l&r.:iOJ4J
Hast. (MOSI
I rrtttml !:>ourceCode Ul mhtrnl
2 111Hb11
I S001uiCodi:I 02 mtilml l:ti9·
1912f00bv.16G7f-11O
J.t'1ht667L73
Screen Captures
, FIiename
, screenshot001.png
Images
, FileRamoe-
2 4U'.J:.1108lY.>_001i:lf 'J/U81331U'.J_O~/'.JYU!J.i(J('J1!.l.1140U9_n .J~
H:1sh (MC6)
3951tb6f1co'kfb-:1o5533c5t67c4e18il
Huh (MDS)
r,JIJe:Zc~dd1d 'l:'.Jb'..10/ Jc13{(.{c.ec0J
ai:ltc1li3c11b8.!11M1e'.J/c.2bdt1bilffle
0670UO-id21t:862U
2f48d7k.:3<:3626C84
EXIF
Figure 42: the hash values ofthe contentfrom Capture ID dlf2ba47-f
d49-46d7-a90f839db35el0af
Capture ID dlf2ba47-fd49-46d7-a90f-
839db35e10afcontains a file capture of405216805_901875708133165_8975965607514014069
_n.jpg (MD5 hash f00e2ce6bddld705b2873c137c7ced2b) (Exhibit
V), the photo from https://www.facebook.com/photo?fbid=901875711466498&set=a.122704006
050343.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 48 of 144
49. Figure 43: 405216805_901875708133165_8975965607514014069_njpg (Exhibit f7).
April 2019 Marriage
After completing the acquisitions from Facebook.com, I used Google Search to perform a
general search ofthe term "indiana marriage license database". The first text result for the search
was for the Indiana Marriage License Public Lookup databsase, located at https://public.courts.in
.gov/MLPL.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 49 of 144
50. INFORldATION FOR
mvrourts.lN.gov Pi,19i.JC JUOOCS. CLEIIJ(S. CDUC.UO'3:S
'~- Pfl!!'S.'I ..TTO!INl!Y!I C.OU!ITll•t..,p STIDl!HTI' -
Marriage License Puhlic Lookup (heta)
search "'or pub! ;1111~·::n11ble lfllorrr~tion11~1marriage licfflni ,e~ordedin lfldilln,11 Ti i dala~a·~ ~on'.liirn m11n~-t,utn11l llll-na,nitge re;orlh
from 1993 lotM~resent. Ifneeded pln,e ccnla<:I the County ci.rk of the Court thati111.1e':l lile mniage licemer.>r c:mfirm11lic1 t,at the
marriage~••beenrecor::ed.
Learn m°'•1boul lnd11n1's Milfltag■ L1c1m••••filitpro,ect. irick.Jding which counut11 un ■•Iii• >
Search:
Applicant 1 Name;
Applicant 2 Name:
7
Narrow your search (Optional):
M.11rriag11 Year (Range):
County Issued:
-
Rclotcd Information
O ldtr l0ill.10.1 m l •llag,e
loH:all inl'::1nrlalo11 INI~ tie
;,~;ad.tilt' l ru n Uielncli.m1
~ Lit:u.ar,
nclan&MarrtagH1'i68~ D17
EX.i '.J95
~~
vJ01,WA/.li:lw.:
:1
r.ti."lm!';
-
Bant1olome,~
...,...,,
Boc..-toro
-·
Dto1~n
Carr-:il
Notice
to
To1e1t1d111
1,~
OOJlllU,l)IHll"KI
holol:i.CT-«.bl..11: 1
t1en dlekuct,
r.r.~,-y,:,u
.,,,.1,,,10~.,-er,
PINsenoMt'Mtinet'Tl :I 1n'c'T"Mllkln f1.,,.rr n~■IK r ■mH or lnec-rtel ~a!H)::wdbe
lhe rn t. t oil c1111elllrye-r,:~. !;'CJ "8',e ~ oor-~:,nc,r ~ue11:ins •~ cdin;!'Ol-1aNr
nirriut;o ,oc,:,rtl ~ wi1WdlhoC •ou tCc.11ao,~..,. lt-o 00lnt1·,.. c"l! )~ no
mugo
.....~ '...,,, ....~;
Search lips
Applicant 1, Applicant 2
or Both
E n1
.., a1 a/l~lal.,,;5tMm,,,f~·
fflher1",Af>p-lic.nt10f
11.p,>I :,an! ~ Koo,, n .....-.;t 1~,~·
t~1 n'IQl'1 ir,lorma11oti;-011
..-u......,..,u.,,iw,u••'" 'yuu'
Ml.JY.h•• • bfl(l a ,!MJf&
·.-
(eCOfCI ·
,~i t>.i r.Mned).
Marriage- Year (Range-)
1.,..-,.idor I <nO_.., lhl>',~ .J· !t,11
!T'il[lll<;■ w~,;:; 11m,W.yuu
f"M'{ l~"l'li,1lhit.hlY,I: 11','0I!'
"'·eh r■'.l.ms t:o manf' 6S Jl'.S
j"Ollnll)Wlh"Xlpr:•
,ideWI
~U>Jl,,;,1(1 (JJU..JDyO.
County l1111ued
Thi,1,tt, lrdar11 co~:,•wl1•·•
lht1 ~ ~1dlul l11
01
n-arria;■ bMe-'10!
(M:!(.~',sa,:1-, !-ietr Wf"t'fll :>UtJrty
r,irr~r:JP.lf~Clll 1-0 nolls•ll'O,
),"Ollnll)'let,oie-;l-i1~11i<.lf)OI.I'
,;,.;,ct,1c:i..i,r~tw1rn..1
1fV:..JI;:;
',"OIIMII) ~<1'1!1d:C1'Maf r,-c•<1'
rouivl', lorecun>thv r.m-ti<,iul
Figure 44: a still image capture ofthe Marriage License Public Lookup at https://
public.courts.in.gov/
MLPL.
Using the search function, I searched by 'Applicant 1 Last Name: McDaniel' and'Applicant 2
First Name: Ashley'. In the search results, I did not observe any applicants with the last name
'McDaniel', the first name 'Spencer', and the second applicant with the first name 'Ashley'. I
performed a full web page capture ofhttps://public.courts.in.gov/MLPL (Capture ID 40100493-
0f6e-48ea-83a7-63e469lald97). Figure 45 demonstrates the contents ofthe full webpage
acquisition and associated MD5 hash values.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 50 of 144
51. ~ Forensic OSINT
File Hashes
Capture Date: l02-t 0-1 1/ o:n1A~U IC
,o,....r..vR 11 :>I P4 F.i~ik:1·1 r.,-r,litJhlT~1,1
Capiured By· C,ahtitlllu Krni,l.1
Websilte ntte· ~.lfmil)!]P I r:P.n '>f! Semr:h ?~">11
11!>
Web!lllte URL: https:/(pdlic_r:ot.rnJn.gov.lmlpVSe:1-ch/R~s.1!::s?~lndex=1&.reg,eSiz
e= 100
MHTMLs
FileMme
mlrtml-SourceCode-01 mhtml
mHtrnl !:iOUl"CEl<..:oda O
::! mhtrnl
mt-ttml SourceCode 01mhtml
Scr een Capt ures
Filen.ime
fnMr t.hnton1 ring
screershot002.png
5creenshot00l.~
screenshot001.png
Images
Fil•name
logo_courts_print.png
Hash (MD5J
J1e80b35ba19eed0fd7cc5al2669d960
!:M8'lc1(,(.d2lti!,:ij:ll:l1;Jcaj/-1~Id1H:Jdc
aefd9d12d7011f7GJ7G02aa7931&f!>J
07,'l;,oo11:15:>Rf1l'lCfiO.-:.Hl lfr.hffl1fi:'if,
41632442700c33ceb6fe12e5':4be4d52
101Dt>4ffc95J6679<!72Sre20tOJ6SOd,3
o7a2eet , a520ftac60eJ1:m ebf8t S56
Hash (MO~) EXIF
Figure 45: the hash values ofthe contentfrom CaptureID 40100493-0f
6e-48ea-83a7-63e469lald97.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 51 of 144
52. The following still image captures demonstrates the results ofthe search performed at
https://public.courts.in.gov/MLPL .
ScreenshotO0l.png (MD5 hash d7a2eella528flac60e3137febf81956) (Exhibit W):
INFORMATION FOR-.
mycourts.lN.gov PUBLIC JUDGE S CLERKS EDUCATORS
PRE SS A TTORN('l'S COURT 5TM f STUDENTS
Search Marriage Ucense Records logr,
Mamage Lcense Pubhc Lookup {beta)
Search Results
Rthne sea,cn [ I New Search Show10g seareh results for'"McOamel and Ashley" Records 1 • 17of 17
AppltcMI 1 Applicant 2 Marnnge Date lssumg County
HOEING. CHRISTOPHER N MCDANIEL. ASHLEY N 08/0512017 Rush o.. -
KIRTS. JUSTIN M MCDANIEL. ASHLEY L 05114/2004 Wilfftn
o.. -
MAffiS ANTHONY J MCDANIELS, ASHLEY N 06/1212014 PC<1e, o.. -
MCDANIEL. DUSTIN S Al.LEN. ASHLEY L 12131/2000 Wilrtn
0.. -
MCOANJEL MATTHEWT. GILBERT.ASHLEYA. 07fl4ll023 Rush o.. -
MCDANIEL. NATHAN R KEMP ASHLEY N 07/17/2022 c..k 0.. -ow
MCDANIEL, CHRJSTOPHER L MOELLER, ASt-n..EY L. 02/12/2019 landerburgh o.. -
MCDANIEL. RYAN NEALY.ASHLEY 07m12005 Manon o.. -
MCDANIEL ASHLEYM. VARBLE, JAKE T 07'26/2023 Wayne
0.. -
MCKINZIE. TODOA. MCDANIEL, ASHLEY C Ol/1812006 wwren 0.. ...
Figure 46: screenshot00J.png (Exhibit W).
Screenshot002.png (MD5 hash 41632442700c33cebefe l2e5c4be4d52) (Exhibit X):
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 52 of 144
53. MCDANIEL RYAN
MCDANIEL. ASHLEYM
MCKINZIE TODDA
MILLER, ASHLEY K
ROBY DAVID L
ROSLAN ASHLEY E
SHANAHAN MATTHEW M
TINSLEY. JOHNNYR.
WILKINSON, TONY 0
WRIGHT. JAMES M
Related Information
OlderIndiana marriage
lieenseintormeuon,nay be
NEAl.Y. ASHLEY 07/08/2005 Manon
"' """
VARBLE. JAKE T 07/2612023 w,,,.. a._ -
MCDANIEL, ASHLEY C 0311812006 Wanen a._ -
MCDANIEL, SETH M 05/08/2021 Vigo a._ -
MCDANIEL. ASHLEY N 10/2112008 Yamd< a._ -
MCDANIELS. JUSTIN M 1011612021 Tippecanoe a._ -
MCDANIEL,ASHLEY M 04/1312007 laPOOe a._ -
MCDANIEL ASHLEY M 11(06/2014 El<llan a._ -
MCDANIEL. ASHLEY C 01/09/2016 Wanen a._ -
MCDANIEL ASHLEY M 08/11/2007 EldUln a._ -
fl"I << Prev .a Ni•xt>> ...
Show me 100recordsper page
~
Notice
Please notethatncmectanfonna1:ion(e o...m sspellednames or IOCOfTed dales) c.ou1d be
the f8Slit orttna enuy errors tfyou haYe.trTY correcaonsor QUesuons ~YOU" awn
Figure 47: screenshot002.png (ExhibitX).
Screenshot003.png (MD5 hash 1810b4ffc9536679d725fe20103690d6) (Exhibit Y):
ROBY. DAVID L
ROSIAN ASHLEY E
SHANAHAN MATTHEW M
TINSLEY JOHNNYR
WILKINSON TONY 0
WRIGHT. JAMES M
Related Information
Older1nc1.... marrwoe
licensemronnationnmy be
availablefrom the lndllM
Stilt Ubnfy
lndtams Mamages 1958-2017
MCDANIEL.ASHLEY N 10/21/2008 Wamd<
°'-
MCDANIELS JUSTIN M 10/1612021 Tippecanoe a._ -
MCDANIEL, ASHLEY M 0411312007 LaPorte a._ -
MCDANIEL, ASHLEY M 11/06/2014 E.,,an a._ -
MCDANIEL, ASHLEY C 01/09/2016 wanen
°' -
MCDANIEL. ASHLEY M 08/11'2007 E""an a._ -
FIi-1t « Pr•vklius a Hex1 >> last
Notice
?teasenotetfalllneorrectlnb'mation{eg rruspelednames ot ricurect dales) CCIUJd be
the resutofdata enu:y errors tfyou haVe wrry correcoonsor quesbonsreoarding you- own
rnwMOtrecord. pleasecontaathecr0.11 CourtOefk ofthe~'#lhereycu mamaoe
lleensewas......,
Show me 100 recordsper page ----=:J
Figure 48: screenshot003.png (Exhibit Y).
I then used Google to petform a general search ofthe term ''texas marriage license search". The
first text result for the search was for https://www.dshs.texas.gov/vital-statistics/marriage-
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 53 of 144
54. divorce-records. I selected Public Indexes, located at https://www.dshs.texas.gov/vital-
statistics/marriage-divorce-records/marriage-divorce-indexes. I then downloaded marr19.zip
(Exhibit Z), located at https://www.dshs.texas.gov/sites/default/files/vs/marr-
div/indexes/marr/marr19.zip.
Linkedin.com
Using Google Search, I performed a parametric search of "'spencer mcdaniel" AND "save the
usa"'. This returned four (4) text results. I selected the result for https://www.linkedin.com/comp
any/save-the-usa-in.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 54 of 144
55. Linked!ffl [ffi
''""'
[3
LN'Tll,sJ
Save the U.S.A. Inc
Oper.iticns Consulting
{C'I) View all 2 employees
Hou:o,,Lon, -<:X<1'> 6 fu lo.,..er'>
l<.'e a'!." a Reout:l i:an 'laticn.al Con;.u li'1:i firm b11sed C v t of HooitOf'.
Wt: :.t:1~ :..,ri:,ii: ,,I~ ':1,.,IKH:d i·· 11d d:1~µcli,., I· t.l did,
♦Sit ( Follow)
About us
We c1re a r-ational republ can, ccnservatl'!e ccnsu,t,r19 firm thM !.pedal ze m grassroots mo...ements. We
were orig nJlly bJscd out o1 lndiJn<lpolis lndkin°", we rccc-ntt~• moved our hcadq•
.i.irtc
·rs to Housten
Tel!ilS.
Industry
Compan~• size
Headquarters
Type
Founded
Locations
Prirruy
Houston, 1ex.!ls 77U02, US
Get direction<; ~
'i
.'<1sh.ngton, Districtof Columbia ~0003, US
Gll!t dirll!ctio n:i. e'
Employees at Save the U.S.A. Inc
Gabe Whitley
Formt>1 CEO of S
c
M ! The USA
Opcr,rtions Ccmulting
Hous!on, Texas
Partne~hip
2023
ln:fom11pdis, ndi!rna 46;'10A, IJS
Get directions e'
~ Spencer McDaniel
~ Chi~f Executive Officer at Save tt-e U.SA Inc
( See all ll!mployee:> 'j
._ ___./
Join now ( Sign in )
'- -
Similar pages
IIPiltriot Media
~l(Jn!::P.r.icM
PIHQnl'w'1ea,•;-N
ATS ActSluc Tcchnic.11 Scrvicc-s
- - Sotr.•iUI! O!w!!klpm<!-nl
X
Linkcdln is better on 1hc app
:>'-'ul !,~~.; :ti:. ..~,~1 :=i~l l 111111.• t.1it.''A'-'fl S:,;.,1~.
Figure 49: a still image capture ofhttps://www.linkedin.com/companylsave-the-usa-in.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 55 of 144
56. I pe1formed a full web page capture of https://www.linkedin.com/company/save-the-usa-
in (Capture ID 8blce940-892e-43ad-8124-e890c05e0f92), which demonstrates a Linkedln.com
company profile for 'Save the U.S.A.' The two employees that are listed for 'Save the U.S.A.'
are 'Gabe Whitley' and 'Spencer McDaniel'. Figure 50 demonstrates the contents ofthe full
webpage acquisition and associated MD5 hash values.
~ Forensic OSINT
File Hashes
MHTML.s
Capture Dt1te: 2024-C
4-17 OO:J4AM UTC
2024-C4-1 611:J4 P'ot [i!ISleM Dl!.'1liqh1Time
Captured By: Uabnelle Ken(la
W"bsi~ Title': ::;aw tte U.S.A. n-
:. 1l.JnkEdln
Websile URL: https:/1'1""'"11.ltnke:1•1 com
1
c.ompanyl!.av8 the u!"ta me
mHh11I S:,u1uiC~ 01 111t1l111I
Ha&h{M05)
25627'.Jff97L:tJ7t.i~58fl1Ja~7a2l26Lli2
Z 1
1Hl111
I-S1
u1nif'
.111li!-II? mhlml
Screen Captures
, FIiename
screenshot001.~
2 screer shot002.Pf'lQ
3 saeer shotuU:J.png
1 su~en.stiot0U1.png
Images
~ Filename
170ti761457:>..'94
1711491139886
170676JYJ6055
i patrrotmedla_lo!)O
10 1m1J~2iuz:,:w
1cl111Rb
:k:18fl.4!1A~l11:l7h50t0:i.R7:11li:if
l·hl~ (MOS)
a3db43813af9o0€7427a5e9b75e4c903
007% 1Jt>)6fe0960cdd504dc'l503d6a4c!
Ha:sh (MD6)
08o5f14b.t2{lc600ffb519314437d23b5
aa0676€t!a9fe5:>9b04€957e::11J024:J2
EXIF
Figure 50: the hash values ofthe contentfrom Capture ID 8bl ce940-892e-43ad-8124-e890c05e0f92.
The following still image captures demonstrates the full web page acquisition of
https://www.linkedin.com/company/save-the-usa-in.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 56 of 144
57. ScreenshotO0l.png (MD5 hash a3db43813af9a067427a5e9b75e4c903) (Exhibit Z):
Linkedlm
Save the U.S.A. Inc
Operations Consulting
Houston Texas 5 followers
IJ..e are a Reoublica~ Na,tiona Consulting rm, based Olt of
Ho 1$ton We ere CY ~ "Ully founded In "Cl'1anapo 1. ndiana.
♦ifai♦ C~:)
About us
Figure 51: screenshot00J.png (Exhibit Z).
:: [!]
P~ e ..ea r,9
View all 2 employees
Job,
Joinnow §
Similar pages
IIPatriot Media
Design Services
P1
easant I/ 1::.v. TN
AJ'S ActBlue Technical Services
- Software Development
Im . !D
Linkedln is better on the app
Do t t,ave '. ... ....,p Get th~~"" osoft Store.
( Open the ~pp )
Screenshot002.png (MD5 hash 9079813b06fe0968cdd584da503d6a4d) (Exhibit AA):
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 57 of 144
X
58. About us
We are a national republican, conservative consulting firm that specialize in grassroots movements. We
were originally based out of Indianapolis Indiana, we recently moved our headquarters to Houston
Texas.
We help Republic..ns get elected on the national level.
Industry
Company size
Headquarters
Type
Founded
Locations
Figure 52: screenshot002.png (ExhibitM).
Operations Consulting
11-50 employees
Houston, Texas
Partnership
2023
lffl - <£D
Linkedln is better on the app
Dot t have •.,. app. Ge: • "I the 1'1,crosoft Srnre
( Open the app )
Screenshot003.png (MD5 hash 8b3229lf37afb9f8d299a9bl5d886f4d) (Exhibit BB):
Locations
Pnmary
Houston. Texas 77002, US
Get directions ~
Washington, District of Columbia 20003, US
Get directions t?
Employees at Save the U.S.A. Inc
Gabe Whitley
Former CEO of Save The USA
Indianapolis, Indiana 46204, US
Get directions ~
lffl ED
X
Spencer McDaniel
Linkedln is better on the app
Chief Executive Officer at Save the U.SA Inc
O t a,tt • PP' GE>t 1 1h1t M ~oft Store
( Open the app )
( See all employees )
Figure 53: screenshot003.pngfrom (Exhibit BB).
Screenshot004.png (MD5 hash 39ad6edd3c5efca49733bbe4be77928d) (Exhibit CC):
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 58 of 144
X
59. Get directions ~
Washington, Distrtct of Columbia 20003, US
Get directions e'
Employees at Save the U.S.A. Inc
Gabe Whitley
Former CEO of Save The USA
Spencer McDaniel
Chief Executive Officer at Save the U.SA. Inc
See all employees
lffl - <£D
Linkedln is better on the app
Dot t have •.,. app. Ge: • "I the 1'1,crosoft Stare
LJnked(m t 2v...J About AccHSfu ty
( Open the app )
IJHt Ag,um~t Privacy Poley YCNI C•l1
fotn&.1 Pnv.cyChokes Coobr Pot.cy Copynght Pok) . _
Cor,,muo1ty Ciu1ckh~ Lmguagt- -
Figure 54: screenshot004.png (Exhibit CC).
X
To view the Linkedln.com profile for the 'Save The U.S.A.' employee 'Spencer McDaniel', I
logged into a non-personal Linkedln account created in April 2024 under the name Gabrielle
Kendall. I performed a search on Linkedln.com using the term 'Spencer McDaniel'. I located the
profile at https://www.linkedin.com/in/spencer-mcdaniel-7a43b82b2/.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 59 of 144
60. ~ ➔ 0 -• hn1<ecincom/in!~Enctt-mcd~niel-7a4:>b3ib2i
Spencer McDaniel
Chief Execut1
~·e Officer at Save the U.S.A Inc
Units::! StJIC~. Cont.xt info
Activity
21cll~o!'S
Spencer hasn't posted yet
Rece1t~posts ~pen:e·sh.arei; w1
I be ::l1
ipl.ayed here
Show .ill .:activity ➔
Experience
CIP ~
Califcm:a State Univetsit)'·
Long Bf'M
.h - (L")ll<"g~ M
Su1>ine.s
~
For8'Js1-w» • . i ~
See who's hiring
on Linkedln.
01her similar profiles
~ G.11x! Whitley ~rd+
. . . , F'.A'n11:r CEO uf S..M . He USA
( + Follow )
Lluren 6. Pella~ · 3rd,
• us M·t Val.J~ <.,:xi, -,urnlv.
Am,rk<1 I F~dcd b,; my ~u ,i. .
( + Follow )
Br.indon An.1nian 3rd•
NOT lli:th11it ell
( 6 Message ) M~,....,.,i...,,
• ~, ..,
Figure 55: a still image capture ofhttps:llwww.linkedin.com/in/spencer-mcdaniel-7a43b82b2/.
I performed a full web page capture of https://www.linkedin.com/in/spencer-mcdaniel-
(J X
... ~ .....
7a43b82b2/ (Capture ID 4ff08b89-2b71-4686-a535-7cd6f7f9d94f). Figure 56 demonstrates the
contents ofthe full webpage acquisition and associated MD5 hash values.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 60 of 144
61. ~ Forensic OSINT
File Hashes
Capture Dale: 202-t 0-117 03:50A"4 UTC
,o,-4.-r.4-"R 11 ~ P4 F.i~ik:1
·1 r.,-r,litJhl T~111
Captured By· c;,'lhMln Konn~
Web!llte ntte· (1$Spencer McDaniel Ilncedln
Web!llite URL: https:/tw•,w/Jinked , com.ljn.lspencer-ncden e!.1.e143b82b2!
MHTMLs
FileMme
rrl rtml-SourceCode-01 nhtml
mltlml-~ourcet:ode-UL mhtml
mHtml Source<..:008 t!J mhtrnl
Screen Captures
Filename
:.Nr.(;(lf,hnt001 r,no
SC'feffshoto02.png
saeershot00ll)O!:I
saeenshot004.png
sct8€r shotfJUJ.png
Images
17067ol1:1.6B!i5_1
1706761457384
catifornia slate J1iver5•W lor19 beach colleqe ol business loqo
10 cabtornia_s1ate_".J'lllers1t1_ba<ersheld_logo
11 t t1:.M;.tli11801~
1.1 1712'173031H~Q
1,; 1€79262007520
IG 161679)190314
II 11,;!:tti11otli.il~1
19 te3131M1'3380
Huh(l.1
D5J
2a2al€0cd660011, 50ab4b:Sd42ecc}5c
teUb1:!t:ceUYccti/eUt:J/~b11:$e-Z!beta
H"h (M06)
e4bc1cdc01tc8ocol627fl:1.3e4l1e5d18
387oe929ctf63f5d550oca4cabe7434J
c24ad0f60tro5of.Jddb1bd67::i2f9fS9J
Huh(M05)
66J7Wddcfe94e35::-2g:1c809c713e79d
953131COJ4909:1'100ae lc01eee7250d9
d,tic3rc1UIYl562C53B2715kllf'1d5~..11
5.c:t7f64il0973521b8o984ff36c9193::l72
00cf74f7cJbJtO((z:7r::lc:t500d2:!0b159c
Olafiaaa1ac:.J11tlJ~:,&lc.lbtltt(J(it(i8:1
EXIF
Figure 56· the hash values ofthe contentfrom Capture ID 4ff08b89-2b7l -4686-a535-7cd6j7j9d94f
The following still image captures demonstrates the full web page acquisition of
https://www.linkedin.com/in/spencer-mcdanie1-7a43b82b2/
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 61 of 144
62. ScreenshotO0l.png (MD5 hash 075e93ldfl97465d51566eefcd4ac4ea) (Exhibit DD):
lffl Q. Search
Spencer McDaniel
Chief Executive Officer at Save the U.SA. Inc
U•111ed Sta~,es Contact info
2 connections
G+l:l:if•► <: Message ) ~
Activity
2 fo lowe•s
Figure 57: screenshot00J.png (Exhibit DD).
'? S..ve the U.S.A. Inc
ij California State University-
long Beach - College of
Business
.e.
f.iot ',catO!"s Me •
Tr,,Prenwmfor
ll!
See who's hiring
on Linkedln.
Other similar profiles
Gabe Whitley 3rd,..
Former CEO of Save The USA
( + Follow)
Brand on Ananian 3rd•
NOT technioan
•
Messaging ... ~ -
Screenshot002.png (MD5 hash e4bclcdc0lbc8aca26279a3e4fle5dl8) (Exhibit EE).
lffl
0
Q. Se3rch
Spencer McDaniel
Chief Executrvc Officer atSave the US.A. fnc
Recent posts Spencer shares will be displayed here.
Experience
..._. Chief Executive Officer
Save the U.SA Inc• FuJl-t1me
Show all activity ➔
t9
1--omc
'Q Operations Man.-.gement. Workforce Management and +1skill
Education
Iii
~ California State University-long Beach - College of Business
Bachelor of Business Adm1mstration - BB.A. Bus,ness Admin1slfatton and Management General
Jan 2.018 - :an 2020
Q Operations Management
ClCalifornia State University, Bakersfield
.O.ccrv-1:>ta'c A....-.raa R u c,na.cc .0.rtm, nict,~t,nn :,n,t t.A:,n:,non,ant r..cn.ar:ol
Figure 58: screenshot002.png (Exhibit EE).
Examination Report
Version 2.0 (April 23, 2024)
.e.
"-c'-;teatO<"S Mc • F
Ol'a...s,.,css •
~
ll!
~ ( Message : J @+l:l:M•►
Lauren B. Pei'ia Im 3rd+
• us My Values: God. Family.
Amenca I Fueled by my passi...
( + Follow)
Show all
People you may know
From Spencer's school
Mario Montecinos
DM.s,on Sales Manager at E
Mortgage Capital, Inc.
( : • Connect )
Dani Van Fossan
Swiss army kmfe ofdigital
• Messaging
This document includes a cover page with the signature of the report author.
Page 62 of 144
I
I
63. Screenshot003.png (MD5 hash 387ce929cbf63f5d558eca4cabe74343) (Exhibit FF):
ffl!
0
Q, Search
Spencer McDaniel
Ch,ef Ex:«utiveOffice-ratS,r,,;e tMU.S.A. Inc
¥i 2016- .JR 2018'"
Skills
Workforce Management
Chief Executive Officer at Save the U.SA Inc
Board of Directors
Chief Executive Officer at Save the U.S.A. Inc
Show all 3 skills ➔
Interests
Compomies Schools
r-1 California State University, Bakersfield
- 40 240 follo1•,ers
,------,.
Figure 59: screenshot004.pngfrom (Exhibit FF).
Je. California State University-long Beach -
College of Business
ForBvs•~ss •
Nick Hahn
Try Prtn'J'lMI fpr
~
SeniorAssociate - Net Lease
Retail at Matthews Real Estate...
( ;. Connect )
Priyanka Malla Ill!
IT ProJect Manager
@Foundat1onBu1
1d1ngMatenal...
( I• Connect )
Akhila Malla Ill!
Seamty Engineer IFull-Stack.
Software Developer IProiect...
( :• Connect )
Messaging
•
... ~ -
Screenshot004.png (MD5 hash c24ad0f60ff856fDddbfbd67b2f8f593) (Exhibit GG):
ffl!
0
Q. Se3rch
Spencer McDaniel
Chief Executrvc Officer atSave the US.A. fnc
= -------
Show all companies ➔
t9 Iii
1--omc
Figure 60: screenshot004.png {Exhibit GG).
Examination Report
Version 2.0 (April 23, 2024)
.e.
"-c'-;teatO<"S Me • FOl'a...s,.,ess •
~
~
G;)( Message : J @+1:1:Ma►
~ il<e-
p yes for you
G
Google
Software Dewlopment
32.670,65 fOl ewers
( +Follow)
OpenAI
Research SeMces
S005 322 fo loers
( +Follow)
Show all
See who's hiring
on Linkedln.
• M essaging
This document includes a cover page with the signature of the report author.
Page 63 of 144
I
I
64. On the Linkedln.com profile for Spencer McDaniel, I observed a photo of an identifiable person
set as the profile picture. I selected the profile photo, located at https://www.linkedin.com/in/spen
cer-mcdaniel-7a43b82b2/
" ft! (l1'.i1
m1orMcD.ffloellUrtk1d X + - c, X
Figure 61: the 'Spencer McDaniel' Linkedln.com profilephoto.
I then performed a full web page capture ofhttps://www.linkedin.com/in/spencer-mcdaniel-
7a43b82b2/ (Capture ID 2d352600-8662-4cfb-b730-03 la4f9aba08). Figure 62 demonstrates the
contents ofthe full webpage acquisition and associated MD5 hash values.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 64 of 144
65. ~ Forensic OSINT
File Hashes
Capture Dale: 202-t 0-1 17 03:53A"4 UTC
,o,-4.-r.4-"R 11 ~1 P4 F.i~ik:1·1 r.,-r,litJhlT~111
Captured By· c;,'lhMln Konn~
Websilte ntte· (1} S[)P.OC.P.l'Mr OnniP.I 11inkAC1ln
Web!lllte URL: https:/fv-.-.wlinked , com/in.
15pencer-ncdan e1
-7a4.3b82b2lo·~
e•ia~·:?not
"'
MHTMLs
• Filen.im~ Ha.sh(MD51
mltbTil-~ourcet:ode-Ul mhtml 04Yf:.!2!.11l:rueda:J~U:le-:leobt!~fb4cal::
1:116( Cl:IVJ1btt:..'1&.l:!d~cae~6l)l8l,l'
,;M
ocr-1c8L:6~22ur~umi511oou5538f
2 mHtrnl !:iOUl"CEl<..:oda O
::! mhtrnl
l mHlml SooiuiCudi.i 03 111!1111~
Screen Captures
'I Filcn.ime
SCTee.nshoto01.png
, screershot002.Pfl!'.I
J saeenshotOO'.l.~
~ screenshot004.png
s s.cn:1~n~hotuU'.J.png
Images
• Filename
170fi7o:U68!i5
£J65e5ct>efe48709e0"ti2~e994f928c63
4e7100&0384970f9S?0092doffif87)b
t:f6d~5c4c09ef690'0d2d4J6eJ2c
atYMJ41/1~/ b21bc81l>ac8aWl!;L4c
Ha, h (Mll6) EXIF
~r:rifi,lr}'i..1filr~'lttO::>flflClcf.r:fiIROfa7f4."i
Figure 62: the hash values ofthe contentfrom Capture m 2d352600-8662-4cjb-b730-03Ja4f9aba08.
Capture ID 2d352600-8662-4cfb-b730-03 la4f9aba08 contains still-image captures of
https://www.linkedin.com/in/spencer-mcdaniel-7a43b82b2/. Screenshot001.png (MDS hash
a65e5cbefe48709e0b29le9948928c63) (Exhibit HH) demonstrates the profile photo from
https://www.linkedin.com/in/spencer-mcdanie1-7a43b82b2/.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 65 of 144
66. Figure 63: screenshot00l.png (Exhibit HH).
Save the U.S.A.
In Exhibit P and Exhibit FF, I observed additional employment information for 'Spencer
McDaniel'. In both exhibits, 'Spencer McDaniel' is reported as the Chief Executive Officer of
'Save the U.S.A'. Per Exhibit CC, 'Save the U.S.A' is a 'national republican consulting firm...
originally based out oflndianapolis' that is currently headquartered in Houston, TX.
Additionally, per Exhibit DD, there is a 'Save the U.S.A.' location in the District of Columbia.
I searched the URL https://bsd.sos.in.gov/publicbusinesssearch. On
https://www.bsd.sos.in.gov/publicbusinesssearch, I performed a search for 'Business Name
Contains: Save the USA'. No results were found. I performed a full web page acquisition of
https://www.bsd.sos.in.gov/publicbusinesssearch (Capture ID a0860lf2-e9f5-428d-aadd-
619b38ede176) demonstrating this result. Figure 64 demonstrates the contents ofthe full web
page acquisition and associated MD5 hash values.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 66 of 144
67. •'1Forensic OSINT
Ful Poge k rMn Coptwe, One Sc1
Hn ot a n m.
File Hashes
Capture Date: 2024-04-23 02:58 AM UTC
2024-04-22 10 58 PM Eastern Dayhght T1111e
Captured By: Gabnelle Kendall
Website Title: INBiz· Your one-stop source for your business
Website URL: https://bsd.sos.in.gov/publlcbusinesssearch
MHTMLs
Filename
mHtml-SourceCode-01 mhtml
mHtml-SourceCode-02.mhtml
Screen Captures
Filename
screenshot001.png
screenshot002 png
screenshot003 png
Images
Filename
logo png
navbar-Img.png
partner-logo1 png
partner-logo2 png
partner-logo3.png
partner-logo4.png
10 partner-logo6 png
11 partner-logo8.png
12 partner-logo5.png
I) ISBDC-Partnerlogo.png
.. arrow-bg.png
15 nav-arrow-right.jpg
16 plus.png
17 mmus.png
18 aiax-loader.gif
Hash (MOS)
98bcd8ff6ee81c36615da99975bc3971
64d17ead4ed590d0774baece1d4bfc15
Hash (MOS)
41c659cbb006cd573198220d816479b1
6c333cd864d4bd678a43350cdb46e071
00b90d1fb811092blcba62ead20eee97
Hash (MOS)
04b8a20c133c233f004175066eaf8e0f
1bd7a7968d9fc465e81289e9222lbbc4
ad8220a2a006c3bc22e2304139aad60a
c2b38a11a141d827ded96f992b809b8d
232a9637eaf214bb13e9f91d6f150301
c83a783961dd4fa79588e4a9036184a4
9517fedba09d155d19016fb2b3237c96
Oe9b3233fe9eb3dcbl8638ca99e45b5b
62328489f015e1aa95111e1b5356eee7
813666831dcd527d11c4d431624db013
7c756f6154ffe1cf649416501fe21595
458b36891 be7142036a90fd25f47b7fb
836724b8521d7ed8434db136959c97b1
f58273964fae7a529321e6891c7d4ce3
be1cede97289c139200481238fd37b85
EXIF
Figure 64: the hash values ofthe contents from Capture ID a0860Jf2-e9f5-428d-aadd-6]9b38edel76
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 67 of 144
68. Capture ID a0860lf2-e9f5-428d-aadd-6l 9b38ede176
contains still image captures ofthe search results from https://www.bsd.sos.in.gov/publicbusines
ssearch. ScreenshotO0l.png (MD5 hash 4lc659cbb006cd573198220d816479bl) (Exhibit II)
from Capture ID a0860lf2-e9f5-428d-aadd-619b38edel76 demonstrates the results ofthe search
that I performed on 'Save the USA' using https://www.bsd.sos.in.gov/publicbusinesssearch.
1N] e1z J INQOV
INBiz: your one-stop source for your business.
Figure 65: screenshot00l .png (Exhibit II).
I then searched the URL https://mycpa.cpa.state.tx.us/coa/.
Need Help?Gtve us a call:
1-317-234-9768
On https://mycpa.cpa.state.tx.us/coa/, I performed a search for 'Entity name contains: Save the
USA'. No results were found. I performed a full web page acquisition of
https://mycpa.cpa.state.tx.us/coa/ (Capture ID 4db9299e-744a-436e-a2dc-2dflde7d5498)
demonstrating this result. Figure 66 demonstrates the contents ofthe full web page acquisition
and associated MD5 hash values.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 68 of 144
69. File Hashes
MHTMLs
, FIiename
~ Forensic OSINT
Capture Dale: l02-t 04 2:J 00:1f A~ U IC
202-4--C4-22 11 '7 Pi E.:1:;llr·r C..:J~lif,,lhllimu
Capiured By: C,ahtitlllu Krni,l.1
Websilte ntte: TBrn:-iA Fntity ~~.
:vdl
Web!lllte URL: https:/t'rnycpo.cpo ~ te.tc.us1coruco,;SeorchBtn
, rrHtml-SourceCooe-01 nhtml
Hash (1.1
05)
334b3495cc6o82169.2254o2Eoc808c4o
5~4067bc0b:!03<J46J74b6ed57bdf155c
2 mlttml-5ourceCode-02 mhtml
Screen Captures
, Filename
I SC18811ShotfJU1.png
2 MJ~H!:l1ul002.µ11y
Images
'I' Filename
-t s~
verseoH
Etransparem pn'J
Hasll (MD51
l '.J(blLl·
:19/~t:,acl:llltielJdJUJOea1bC1
(i8u;57t l:2"r-
13817ut.tJ37133'1511"'862
Hash {M0 5)
h:i?'.
Hh
1)7774771':cih7~ ,_.
_,.
..._hrtMW)h9nJ
cb52ocd4dcft b2631Od202€dce0.:ff2:2
EXIF
Figure 66: the hash values ofthe contentsfrom Capture ID 4db9299e-744a-436e-a2dc-2dflde7d5498.
Capture ID 4db9299e-744a-436e-a2dc-2dflde7d5498 contains still image captures ofthe search
results from https://mycpa.cpa.state.tx.us/coa/. ScreenshotOOl.png (Exhibit JJ) from Capture ID
4db9299e-744a-436e-a2dc-2dflde7d5498 demonstrates the results ofthe search on 'Save the
USA' that I performed using https://mycpa.cpa.state.tx.us/coa/.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 69 of 144
70. 0. Taxable Entity Search
Se.artr"I
•
Texa;.C:rrptrolerof Publ cAc.:.ounu
Q_,., Heg.ir
• H~-0!
Ta~ 10
0. Search
Figure 67: screenshot00l.png (Exhibit JJ).
CReset
, n:r. wr.rr.s;m.1 morm-,r(:n l nr
,1W ( l ll4.II)
After reviewing both Indiana and Texas business entities, I then performed a Google search of
"washington de business entity search". The first text result that I observed was
https://os.dc. gov/service/corporations. I selected https://os.de.gov/service/corporations. On
https://os.dc.gov/service/corporations, a URL was embedded for http://dlcp.dc.gov/ to search
registered corporations in Washington, DC.
On https://dlcp.dc.gov/, a URL was embedded for https://corponline.dlcp.dc.gov/. I registered for
an account to access https://corponline.dlcp.dc.gov/. Using the entity search function in
https://corponline.dlcp.dc.gov/, I performed a search for 'Entity name contains Save the USA'.
No results were found. I performed a full web page acquisition ofhttps://corponline.dlcp.dc.gov/
(Capture ID b8b74a89-cfff-4daa-bedl-08289a2fblle). Figure 68 demonstrates the contents of
the full web page acquisition and associated hash values.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 70 of 144
71. File Hashes
M-ITl.1L,
(tiForenslc OSINT
r..,.,,-.rw..· 'll:lol1Mnll:'"i,M.A1nr:
;o~;)11',JJ-tA~_,.,fl,..,,otr m,,
C-•~R:t8y: O•fllel(eMl>II
Webliltnle: OlCPiff!l"M'lo!r1fofl ~-cor$tmtfP!'Cle(t)Ctl
- , -.1111:l · H,p-.·f~,YJW'l'l""tlr"'"''l'"'/........,.~<f'>,p,,,,,..,.J;""l - 1
TIH!ml-Solro1C:>d~..(~ "1111
~1-2151~,21ITTll'm1a:
"6$(12~l)t::16le()7~
!,CJl)(:
flS.'}C)C)()I.~
SQOOl'l.'IO(IO}C'lCJ
lm;,ig,s
Ht1~(1tOSI
:,,f~ Jidl:/1'6ftll5)1)12SU6dtJt:/1
3'1x1'171d8~ 7.....:SCt13faa&btQ!,i
Figure 68: the hash values ofthe contentsfrom Capture ID b8b74a89-cfff-4daa-bedl-08289a2jbll
Screenshot002.png (MD5 hash 39bd671489b297ffa480e3f4638b495e) (Exhibit KK) from
Capture ID b8b74a89-cflf-4daa-bedl-08289a2fblle demonstrates the results ofthe search that I
performed on 'Save the USA' using https://corponline.dlcp.dc.gov/.
Tl·tl' Jvll1,;w11111 tllll.llS'11a111i ·pr-; 0 ¥<.:1.1111:!1.1.
• N11 Rn wlt'ii v~r, fuwn d.
Find Your Organization
j- Save the USA
Search Type: Enlity Name
Entity Status: ! Select
Searcl1 Results
Otg:t!IIZ.l!ICln N:l.mt Fltt Numaer
Figure 69: screenshot002.png (Exhibit KK).
Ill BP:·I-IW
7 Search Depth:
R.;1$11'.lltonC.:ite
Examination Report
Version 2.0 (April 23, 2024)
JUnsGICdOft
This document includes a cover page with the signature of the report author.
Page 71 of 144
72. Finally, I searched the URL https://www.fec.gov/data/. Using the Candidate and Committee
Profile search function from Figure 1 on Page 12, I performed a search ofthe term 'Save the
USA'. One (1) result returned for 'Committee to Save the USA' (Committee ID C00785220).
~ V-o!fi;;Nwtbi,woft.hcUr,troSta~fO''Cmmmt Hssa J9IO'YCUhnow'-'
C.11T.p.u,v:fuuncc d.1.u."' Hclpforc,m.:b.i.1.1csmc <o:1lllll.nc~s"' Lcg.Urcsourcc~ • Abo1.11"'
Candidate and committee profiles
$E;M1
CH CANO OME A NO ('OMM !TT'iE F'ROf'ILES
CCMMITIEfS O) Couunittcc results
CAN:H)l,TtiS{O) ,. COMMITTEETO SAVE T HE USA
Figure 70: results from https:/www.fec.gov/datafor 'Save the USA'.
Q.
I selected the URL, https://www.fec.gov/data/committee/C00785220, to view the Committee
Profile page for 'Committee to Save the USA'. On the Committee Profile page, I selected Filings
- Statement of Organization. I then selected Statement ofOrganization 2021 I Amendment, dated
July 22, 2021, located at https://docguery.fec.gov/cgi-bin/forms/C00785220/1529912/.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 72 of 144
73. I pe1formed a full web page acquisition ofhttps://docguery.fec.gov/cgi-
bin/fom1s/C00785220/1529912/ (Capture ID b6c6bdf7-bd10-4bc6-9caf-e27e69e58768). Figure
71 demonstrates the contents ofthe full web page acquisition and associated MD5 hash values.
[,)Forensic OSINT
File Hashes
Capture Da~: l024-C4-:l:J 04:24AM U IC
202,t C~ 2312·2,1A'A Easle1 Da,·ightlime
Captured By: G.JU1iclh; Kcm.J.:1
We OOite Title: J:um11 r(K C',111111iilk:c: h i Srtv1:lhc: l l~A
MHTMLs
, FIiename
1 rrHtml-SourceCode-0 I mhtml
, rrl ttml-SourceCode-02 nhtml
Screen Captures
, FileRamoe-
I SU8€11ShotuUi.png
2 S(.]l:l4:ll~ 11ul002.1,1111,1
Images
, Filename
I f€C_ COMer_ logo.gif
Ma~h (M06)
d2eeb4decea650t3164374193&1obce6
7baf977561d0d011a6b7625be76a€"'8c
Hash IM05)
6J•1::!txll ~/ aBa-11d:i::lb~3'1Ud11u:ldtefa
flI65til.:11'170560822vll;l2o1lk:'1lnJ39
Mast. (MOS)
605dCd66335e12c258735c00b14b501o
e48fi€-Sf1':80152f830fbe6b25e39317
EXIF
Figure 71: the hash values ofthe contentfrom Capture ID b6c6bdj7-bd10-4bc6-9caf-e27e69e58768.
ScreenshotO0l.png (MD5 hash 8343bd297aea4fd23b5340d1162dfe7a) (Exhibit LL) from
Capture ID b6c6bdf7-bd10-4bc6-9caf-e27e69e58768 demonstrates the Statement of
Organization for 'Committee to Save the USA' from https://docguery.fec.gov/cgi-
bin/forms/C00785220/1529912/.
Examination Report
Version 2.0 (April 23, 2024)
This document includes a cover page with the signature of the report author.
Page 73 of 144