DEPARTMENT OF JUSTICE CRIMINAL JUSTICE DIVISION REPORT OF INTERVIEW MATTERFILE NO.: cPC0001-09 ACTION DATE: June 17, 2009 PERSON INTERVIEWED: ‘THI MAL, Maria Portland, OR 97204 Office Phone: (503) 808-6003 DOB: OTHERS PRESENT: None DATE/TIME/PLACE OF INTERVIEW: June 17, 2009 2:20 p.m. (Telephonic) DATE OF REPORT: June 17, 2009 REPORT PREPARED BY: Ron Nelson On June 17, 2009, at 2:20 p.m., I contacted Maria THI MAI by telephone to request additional information, regarding this investigation, ‘THI MAI was asked if she recalled attending a P:EAR event at which a portrait of Sam ADAMS was on display on the evening of May 5, 2005. (May 5, is the date of a First Thursday event at City Hall). THI MAI advised she and ADAMS attended the event. She remembered viewing and discussing the portrait with ADAMS. ‘THI MAI was asked if it was possible for ADAMS to attend the First Thursday event and the P:EAR event on the same evening. She answered that it was not unusual for ADAMS to attend a number of events in one evening. THI MAI added that the P-EAR Gallery is only a few blocks from City Hall and that it would not be difficult for ADAMS to appear at both events. 43 ‘Nelson Special Agent La by £ a Special Agent in Charge NN tai 464860-01 ‘THiS DOCUMENT IS THE PROPERTY OF THE OREGON DEPARTMENT OF JUSTICE AND SHALLNOT BE DISTRIBUTED TO OTHER PERSONS OR AGENCIES WITHOUT THE EXPRESS CONSENT OF THE OREGON DEPARTMENT OF JUSTICE.‘SALEM POLICE -oF Teo Sane (pene ome am SMP09012562 134487 \o3/16/2009 11:10 _ [ASSIST OTHER AGENCY | 555 LIBERTY ST SE se INVESTIGATION On 04-03-2008, | received a second request from Oregon DOJ Special Agent Ron Nelson to assist him again with this investigation, SA Nelson advised he had recelved a Blackberry Peart collular phone/PDA device and asked for my assistance in retrieving information that might be stored on the Phone. SA Nelson delivered the phone to me, and | determined we had a USB data cable in our stock which would allow me to connect the phone to my government machine, [After receiving the seized phone, | noted it was a Blackberry Pearl 8100 device bearing the service provider T-Mobile's logo. The government computer in this case is a Del! Optiplex Optiplex 758, pvachine. Prior to attaching the phone, | activated a USB wiite-blocking feature of Windows Vista. This feature is a documented feature of the operating system and | have verified its write-protection abilty, After connecting the phone, | jaunched Device Seizure software installed on the government machine, | attempted to acquire the phone several times but in every case the Device Seizure stopped with an unknown error code. | navigated to the Internet and located a retail application called ABC Blackberry Convertor manufactured by ProcessText Group. This product purported to be able to decode the backup file created by the Blacknerry Desktop application, allowing the user to export items such as the contact fst, call logs, text messages, efc. | contacted SA Nelson who authorized me to purchase the software for purposes of extracting information from the phone he had provided. “The ABC Blackberry converter page indicated that the user must first download the Blackberry Desktop software and use it to make a backup of the device. | navigated to the web site for T-Mobile ‘and downloaded the appropriate Blackberry Desktop software for this model of cell phone. After doing so, | launched the application and used it to create a single data fle which was named Backup. (2009-04-03) .ipd". | closed the Blackberry application and launched the ABC Converter application. Using the ABC Blackberry Converter application, | loaded the backup file and then exported the contacts list, call logs, email and text messages contained within. These lists were exported in Excel format and subsequently burned to a single evidence CD. | also exported all digital photos stored! in ‘the backup file and burned those to the same evidence CD. | exported all files obtained in this case and bured them to a single evidence CO which | labeled as (2), A copy of this CD was delivered to SA Nelson, along with the original Blackberry Pearl on Officer Ia $299 Officer Name: WILTSE, WILLIAM DET Agency: SMP Date: 04/06/2009 Reviewed Status: APPROVED. Reviewed by: $137 - SEYFRIED, MARK CPL. ‘Date: 94/06/2009 ST Page i of 2 PRIORS: gooott me Casel®: SUPUEOI2562SALEM POLICE | SMPO9012562 arama 134457 aaa aan 03/16/2009 11:10 _| ASSIST OTHER AGENCY 555 LIBERTY ST SE sper Analysis of Blackberry Pearl 8100, (04-06-2009. DISPOSITION This case remains inactive. Officer I: $299 Officer Name: WILTSE, WILLIAM DET Agency: SMP Date: 04/06/2009 Reviewed Status: APPROVED Reviewed by: $137 - SEYFRIED, MARK CPL Date: 041062009 PRIORS: g@0811 Ine Casein: SPoo0i2882 suppl: BHT page 2 of 2