Chapter 18

The Jointly Sealed USB

The Forensic Analyst Hears What Went Unsaid · Sep 15, 2026

Views 0

The jointly sealed USB was moved the next morning to the examination room of the juvenile legal agency. Dabin had arrived before the person who came from Gray Thread. Her face looking at the sealed case was calmer than the day before, but her hand kept gripping the strap of her bag.

The examiner laid two documents side by side. One was a full examination consent form that allowed viewing the file contents themselves. The other was a restricted examination consent form that confirmed only the hash, creation time, and recent access records. He explained the difference between the two documents, then said he would not choose either one on behalf of the investigation team.

"Opening the contents could widen the scope of the charges. But it also increases the chance that the informant's name, school, and voice end up in the record. Restricted examination is the opposite. It might not immediately prove the motive for murder or ownership of the file."

Dabin did not look at Seojin. When Minwoo's face showed he wanted to ask first, Yeoreum raised a hand to stop him. The one who had to wait for the answer needed to be Dabin.

"Can the file names be masked too?" Dabin asked.

"Yes. The hash and creation time can be replaced with separate identifiers, and the original file list stays sealed."

"What about the most recent person who accessed it?"

"Only part of the account identifier can be shown. The access time and type of action have to remain."

Dabin rested a finger on the blank space of the restricted examination consent form. What her sister had left behind might be the core of the case. But calling it the core didn't give her the right to hand the contents to everyone. She asked the examiner for a piece of paper to write her questions on before signing.

'At what stage, and to whom, is the informant's original text shown.' 'Can the scope of disclosure be changed later.' 'Can records related to the murder be preserved using only the restricted examination results.'

The examiner wrote an answer to each of the three questions. Only after reading those answers did Dabin sign the restricted examination form. Seojin checked the time of the signature, but she did not record the expression on Dabin's face.

Inside the examination room, the seal line was photographed. The examiner didn't connect the USB to a dedicated device, but instead prepared equipment that could read only the hash value from outside the sealed case. A black mask was placed over the screen so the file contents wouldn't appear. The creation time and the last access time came up in two lines.

The time Han Jaehee had made the bundle was the night before the crime. The last access came after the crime, and part of the accessing account matched Baek Sangho's device identifier. But a device identifier could be duplicated. Seojin noted that possibility first on the results sheet.

Minwoo said, "Doesn't this show the USB was in Baek Sangho's hands?"

"Being in his hands and attempting access are different things. And an attempted access and a motive for murder are different too."

Dabin looked at the screen and asked, "Then this result can't tell us what my sister was hiding?"

"We can't tell that. What we can confirm is who tried to access the sealed material, and when."

Dabin nodded. It wasn't the answer she wanted, but she didn't want to erase that distinction either. The examiner added the hash of the original file to the new sealing record and issued a storage number separate from the restricted examination report.

Back at Gray Thread, the higher agency demanded a full copy. Their logic was that if the company's falsified safety inspection records were inside the USB, the original had to be seen to confirm the scale of any accomplices. Yeoreum set the demand letter in the middle of the meeting table.

"The murder charges and the scope of the organization might not be bound together in one file."

"Are we going to hide the victim's hidden material for her?" Minwoo asked.

Dabin didn't answer that question right away. Seojin thought of her own brother's case. For years she had heard people repeat that opening the original would reveal what Yun Junho had done, but the people who actually saw the original back then still couldn't explain the missing 17 seconds. She wanted to explain her own hunger to Dabin. But she kept her mouth shut, afraid the words would become a reason to push Dabin toward a choice.

Minwoo split the charges into two bundles. One held the material needed for the murder, the destruction of evidence, and the theft of the USB. The other confirmed the full scale of the falsified safety inspections. The first bundle held the physical evidence at the scene, the emergency key test, the payment, the failed remote wipe, and the restricted metadata. The second bundle still needed the original contents.

"Can we refer the case with just the first bundle?" Yeoreum asked.

Minwoo didn't answer for a while. He knew an indictment without the original could be weaker. At the same time, if opening the original cost the informant her safety, the claim that they'd secured evidence at all could become meaningless.

"The murder chain holds. The part about the organizational manipulation has to be held back or left to a separate investigation."

The higher agency's representative expressed dissatisfaction, but Minwoo drew a line at the item covering the original contents. That line looked like a retreat in the investigation, and some charges really would be delayed. But the rule that Gray Thread would not disclose anything without Dabin's consent stayed in the record.

In the afternoon Dabin called Seojin into the support room. After reading the restricted examination results, two worries overlapped on her face.

"Will this mean Baek Sangho gets punished less?"

"We have to separate the possible outcomes. The murder and destruction of evidence go into the restricted record. The full scale of the manipulation might come later."

"Which one do you prefer?"

Seojin didn't answer right away. She wanted to overturn the Yun Junho case quickly, and the clue that it might belong to the same line of editing tools was feeding that hunger. If she told Dabin her preference, the consent could become a formality.

"I won't tell you my preference. Instead I'll explain what could be lost."

She wrote down on paper what would remain and what wouldn't under the restricted examination. The original stays sealed, and the access time and part of the account stay in the official record. The scope of the manipulation and the informant's account aren't settled right away. Dabin revised the list herself. She put 'the scope of disclosure can be changed later' at the very top.

"Not even my sister's name gives her the right to decide for a child instead."

Seojin heard that sentence and wondered whether the same standard could apply to the original documents in the Yun Junho case. The hunger to know the truth and the right of the person involved to choose blended together easily inside a single sentence. In her notebook she wrote, 'Access to the original should be reviewed alongside both the necessity of the evidence and the scope of consent.'

At six in the evening, the second result came from the examination room. Baek Sangho's device identifier matched the USB's last access record, but the access had been an attempt to check the list of unopened files. No actual copying or viewing was confirmed. The hypothesis that Baek Sangho had tried to take the USB grew stronger, but the conclusion that he knew the contents of the original still hadn't been reached.

Yeoreum put that limitation in the first line of the report. Minwoo felt uncomfortable but didn't delete it. Instead of writing the culprit she wanted larger, Seojin left behind a sentence that could still be disproven.

That night Dabin signed the seal renewal confirmation form again. The original was never opened. Instead, Baek Sangho's access time, the blue payment number, the hash generated the night before the crime, and the victim's choice to protect her material remained as a single bundle of evidence.

Dabin said to Seojin,

"If I say later that I want to disclose it, please ask me again then too."

"Ask you what?"

"Whether I'm really speaking from my own choice at that point."

Instead of answering, Seojin wrote down the date of the next review on the consent form. The ending of Gray Thread's case didn't depend on the exposure gained by opening the original, but on how an unopened record could still move a case forward. The next morning, the higher agency took issue with the wording of the restricted examination report. They argued the phrase "attempted access" sounded weak in intent, and that "matches Baek Sangho's device identifier" pointed to a device, not a person. Minwoo wrote that criticism straight onto the whiteboard in the meeting room.

"So you're saying we need a stronger sentence."

"Not a stronger sentence. I think what they mean is opening more of the original," Seojin said.

"Let's start by writing down what we'd gain from opening the original," Yeoreum said, holding out a pen.

Minwoo wrote that, first, they could connect the file contents to Baek Sangho's motive. Second, they could find additional accomplices in the safety inspection manipulation. Below that, Seojin wrote what they'd lose. The chance the informant could be identified, Dabin's future right to choose, and the fact that once the original was opened, it couldn't be taken back.

Dabin came into the meeting room and read the list. She showed no admiration for either side. Instead she added a line in the middle: 'The timing and scope of disclosure are separate decisions.'

"If the material needed to catch the culprit and the material that exposes the whole organization are in the same document, they can still be split apart later."

Minwoo looked at her. "That delay could put someone else in danger."

"Then explain that danger to me. Don't just frighten me to get my consent faster."

The meeting room fell quiet for a moment. Seojin watched Minwoo rewrite the risk items instead of arguing back. The investigation slowed down the moment it gave the person involved a choice, but that slowness cut down on pressure that never got recorded.

Toward evening the examiner sent an additional confirmation that the outside hash of the sealed case matched the hash of the original in storage. The fact that the original had never been opened had become a verifiable record in itself. Yeoreum attached the result and finished a document that explained Baek Sangho's attempted access and theft using only the material secured through the restricted examination, independent of anything else.

Dabin didn't sign the last page, only the separate attachment. That attachment contained informant protection, the review date, and the procedure for changing disclosure. Han Gyeongmin also submitted his own correction not in the same file, but as a separate accountability sheet. It was so that each person's consequences wouldn't be merged into a single sentimental sentence of reconciliation.

In the archive, Seojin separated the documents by number. The USB original, the restricted metadata, the victim's consent form, the investigation evidence sheet. The four bundles pointed to the same case, but their authorization wasn't the same. While attaching the sealing label, she found a note that the customer number on the blue triangle receipt partly overlapped with an old record from the Yun Junho case.

Seojin didn't move that note straight up to the long term connection. She wrote 'possible same line' and noted two other interpretations beside it. A simple reuse of a payment number, or a shared customer identifier from an editing service. A question had come up to check in the next case, but she didn't let that question bury the crime in the first one.

Did you enjoy this chapter?

You can change your like and rating at any time.

Reader rating None yet

Comments

Please sign in to leave a comment.