‘SUPERIOR COURT OF THE DISTRICT OF COLUMBIA [Scewit ae ‘SEARCH WARRANT TO: THE CHIEF OF POLICE OR ANY OTHER LAW ENFORCEMENT OFFICER {Specie Law Enforcement Oficer or Clasiication of OFicar a the MavopoTtan Police Deparment or oer Authorized AGEN] ‘Affidavit, herewith attached, having been made before me by DETECTIVE MICHAEL FULTON OF THE MPDC HOMICIDE BRANCH ~ MAJOR CASE UNIT has probable cause to believe thaton the CIperson premises Dvehicle Llobject, known as _Year: 2013 / Color: White / Make: Chevrolet / VIN: 1G1PASSG4D7264363 / MD TAG: 15279CF in the District of Columbia, there is now being concealed certain property, _tems contained in “Atachment A” ofthe affidavit which is Evidence related to a homicide and as lam satisified (oped ronda or er) that there is probable cause to believe thatthe property so described is boing concealed on the above designated CiPerson premises EXvehicle [lobject, and that the foregoing grounds for issuance ofthe warrant exist. ‘YOU ARE HEREBY AUTHORIZED within 10 days of the date of issuance of this warrant to search inthe daytimelat any time ofthe day or night, the designated [] Person premises (Xivehicie [Jobject, forthe property specified and ifthe property be found there. ‘YOU ARE COMMANDED TO SEIZE IT, TO WRITE AND SUBSCRIBE in an inventory of the property seized, to leave a copy of this warrant and return to file, a further copy of this warrant and return with the Court on the next Court day after its execution, ee Issuedthis _22 day of MAY 120 15 Tage Sepa Coa nb RETURN — "received the above detailed warrant on » 20 15 _ and have executed it as follows: ‘On » 2 | Claw Com.! searched the the DdPerson premises [_Jvehicles [Jobject, described in the warrant and I left a copy of the warrant and return with Properly posted. ‘Wa oT paren vane or wa Sean, naan Opin eR la TAT 1 os _— 7 This inventory was made in the presence of aN = : | swear that this isa true and detailed account of al property taken by me under this warrant. os i SBS ‘Subscribed and sworn to before me this 22 dayot may omen ate Superior Cour of he ewe af Cotumbia19 wi 742 10 Attachment A ‘The following items are to be searched for: 1 o 10. 1. 12, B. 14. 15. 16. v7. 18. US. Currency, to include money wrappers. Cellular telephones and the content of any cellular telephones to include all messages, voicemails, emails, contact information, logs of incoming and outgoing phone calls, and photographs; Red Bag used to transport U.S. Currency (as further described in the affidavit); Clothing or shoes containing blood; Items, specifically clothing, that indicate the odor of gasoline or otherwise indicate the Presence of ignitable liquids (as further described in the affidavit); Container that can be used to transport or store gasoline or other accelerant; Paperwork, documents, credit cards, or any other items in the names of the four victims: Amy Savopoulos, Sawas Savopoulos, Philip Savopoulos, and Veralicia Figueroa; Digital video recorder used to capture and store surveillance video and any items relating to the capture and storing of surveillance video for 3201 Woodland Drive, N.W. Washington, D. Paperwork or photographs depic Washington, D.C.; ig oF referencing 3201 Woodland Drive, Northwest Weapons, to include knives, firearms, ammunition, or objects that could be used to inflict blunt force trauma; Gloves; Duct tape or other material that can be used to bind the hands and feet; Photographs of associates of Daron Dylon Wint; Forensic evidence to include, but not limited to, blood, hair and fibers; ‘The processing of fingerprints, and extraction of DNA evidence utilizing chemicals or any other alternative method deemed necessary; Documents which substantiate ownership of any weapons seized; Documents which substantiate occupancy of the premises; Photographs of subjects yet unknown which could help identify witnesses and or er19. 20. 21, 2. 23. 24. MW Co-conspirators in this case; Digital cameras which may contain photographs; Computer hardware, laptops, tablets, and software that can be used to store information; Mail matter; Clothing that may or may not contain forensic evidence; Shoes that contain a tread pattern similar to the picture depicted in Attachment B. Money orders and paperwork relating to money orders.Attachment BMETROPOLITAN POLICE DEPARTMENT Washington, D.C. Affidavit in Support of an Application for Search Warrant O United States a District Court District of Columbia Itis requested that a DC Superior Court search warrants be issued for the entire vehicles described as: Year: 2013 / Color: White / Make: Chevrolet / VIN: 1G1PASSG4D7264363 / MD TAG: 15279CF Year: 2013/ Color: Multi / Make: Ford/ VIN: 1FDWE3FL8DDA26628 / NC TAG: EY2006 Resume: The affiant, Detective Mike Fulton, of the Metropolitan Police Department in Washington, DC, upon being duly sworn, hereby declares under the penalty of perjury and says the following is true based upon personal knowledge and information from other |aw enforcement officers. The affiant, Detective Fulton, has been a sworn member of the Metropolitan Police Department in Washington, DC since 1990. Detective Fulton is currently assigned to the Homicide Branch of ® Criminal investigations Division. Since this affidavit is being submitted for the limited Purpose of supporting probable cause, the affiant has not included every fact known to him or conveyed to him concerning this investigation. He has set forth only those facts that he believes are necessary to establish probable cause that evidence related to the below criminal offense may be found in the location requested to be searched. BACKGROUND OF THE INVESTIGATION 1, On Thursday, May 14, 2015, at approximately 1:24 pm, members from the District of Columbia Fire Department were dispatched to the report of a house fire at 3201 Woodland Drive, Northwest, Washington, D.C. Upon the units arrival, firefighters observed smoke and fire sible from a second floor window of a three story residential home. Firefighters forced entry into the residences’ front door and began fire suppression. The fire was primarily contained to a second floor room and closet, with minor extension to an adjacent bathroom. 2. While extinguishing the fire, firefighters located three unconscious adults on the second floor of the residence in a bedroom. The three adults were ultimately identified as Mr. Sawas aa yeSavopoulos, the father, Mrs. Amy Savopoulos, the mother, and Mrs. Veralicia Figueroa, the housekeeper. All three of those adults appeared to have suffered trauma to their bodies. Mr. Savopoulos and Mrs. Savopoulos were removed from the residence by firefighters, but both were found to have no signs consistent with life and remained at the scene. Both Mr. and Mrs. Savopoulos were pronounced dead on the scene. Mrs. Figueroa was removed from the residence and transported to Georgetown University Hospital where lifesaving efforts failed and Mrs. Figueroa was pronounced dead. 3. A fourth decedent was located in an adjacent bedroom, where the fire is believed to have begun. This decedent remained on scene and was pronounced dead. This decedent is believed to be Philip Savopoulos, the 10-year-old male child of Mr. and Mrs. Savopoulos. The remains of all four decedents were transported to the Office of the Chief Medical Examiner for the ig an autopsy and a determination of a cause and manner of death. 4 On Friday, May 15, 2015, Dr. Nikki Mourtzinos of the OCMEDC conducted an autopsy on all four decedents. Dr. Mourtzinos ruled that Mr. and Mrs. Savopoulos and Mrs. Figueroa’s cause of death was blunt force and sharp force trauma, and the juvenile, believed to be Philip Savopoulos’ cause of death was thermal and sharp force injuries and the manner of all four deaths was determined to be homicide. 5. The scene of the investigation is a three story, brick residential home with a basement. (On the side of the residence is a set of French style exterior doors. The doors have a single broken window pane located next to a door latch and alarm sensor. The door is broken near the lock and a shoe or boot print is visible on the exterior, suggesting forced entry. The visible shoe or hoot print is not consistent with current issued. DCFEMS firefighting boots. Preliminary interviews of firefighters reveal that firefighters did not enter this door. A not to scale image of the shoe or boot tread print is shown in Attachment 8. It is requested to search for and seize any shoe or boot with similar tread pattern, 6. The juvenile decedent was located in a bedroom on the second floor, which sustained heavy fire damage. The decedent was located on the charred remains/mattress spring of a queen sized bed. The majority of the bed frame had been consumed by fire and the floor under the bed sustained heavy fire damage, and in some area was totally consumed by fire. 7. There was fire damage to all furniture in the room and the charred remains of some furniture features impress that some furniture was all, or nearly all, consumed by fire. A strong odor consistent with that of gasoline was present throughout the home. Several matches and a ‘matchbox were found at the top of the stairs. 8. During the course of the investigation, your affiant spoke with detectives certified in fire investigation. Those detectives have determined that the odor of gasoline was present at the Savopoulos residence. Gasoline is an ignitable liquid, and is commonly used to accelerate and ignite fires in arson cases. Additionally, an accelerant K-9 was introduced to the scene and Ser,indicated the presence of an ignitable liquid on the stairs and in the room in which the three adults were located. Detectives certified to conduct fire investigations have learned that ‘ignitable liquids may splash or otherwise transfer to clothing or shoes. As such, it is requested that an accelerant K9 dog be introduced to the above search location to provide preliminary indication of ignitable liquids on items, and to seize those items for laboratory confirmation of the presence of ignitable liquids. 9. Members of the Major Crimes/Cold Case Homicide Unit conducted an investigation into this offense, Members identified, located, and interviewed a person identified hereafter as W- 1. W-1 stated IT is an employee of Mr. Savopoulos whose job consisted of transporting Mr. Savopoulos to and from work and handling daily assignments given to him by Mr. Savopoulos. 10. W-1 stated IT received a call from Mr. Savopoulos on Thursday morning, May 14, 2015, and IT was directed to report to the main offices of American Iron Works, in Hyattsville, Maryland, to pick up a package and deliver the package to Mr. Savopoulos at his residence. W-1 stated IT responded to the Hyattsville office and met another employee. 11. W-1 and the other employee responded to the Bank of America located in Hyattsville, Md. W-1 and the other employee walked into the bank at which time W-1 watched the other employee enter into a transaction with the bank manager. At the end of the transaction W-1 witnessed the bank manager give the other employee a manila envelope which contained currency (now known to your affiant to be $40,000.00). W-1 stated the other employee gave him the envelope and W-1 drove to 3201 Woodland Drive, Northwest, Washington, D.C. 12, When W-1 was ten minutes away from Mr. Savopoulos’ residence he called Mr. Savopoulos on the phone and informed him he was nearby and had the package. W-1 stated that Mr. Savopoulos instructed him to place the money on the seat of his red car which was parked in the garage at his house. W-1 stated when he arrived at 3201Woodland Drive he went inside of the garage, located a key to unlock the door to the car in the garage, and placed the envelope on the driver's seat. After placing the envelope on the driver's seat, W-1 locked the vehicle and exited the garage and closed the door to same. 13. As detectives continued to question W-1, IT changed IT's account of the events regarding how IT received the package, where IT left the package and when IT was told to get the package. When W-1 was questioned about a text IT had received from Mr. Savopoulos on Wednesday, May 13, 2015, W-1 changed IT's statement. 14, This text was addressed to W-1 and the text directed IT to meet the other employee on Thursday morning in Hyattsville to pick up the package. After being shown the text, W-1 admitted the text was accurate and IT made a mistake about when IT was first told to get the Package. W-1 was also questioned about what the money was contained in when IT received the money from the other employee. W-1 admitted that IT had lied when IT stated the money was in a manila envelope when IT received the money from the other employee. sa nt15. W-1 stated what actually happened was the other employee took four bundles of money from the employee's pockets and placed the money in a red bag which belonged to W-1. W-1 then drove to Mr. Savopoulos’ house and called Mr. Savopoulos ten minutes before IT arrived at the home. 16. Mr. Savopoulos told W-1 to leave the money in the car inside the garage. W-1 stated, when IT arrived at Mr. Savopoulos’ garage, IT placed the money inside a manila envelope that was in IT's car. After placing the money in the envelope W-1 stated IT placed the envelope on the driver's seat of the car in the garage. 17. Furthermore, W-1 admitted that IT lied when It stated the vehicle was locked, W-1 stated the vehicle was unlocked and that IT left the envelope which contained the money in the vehicle. W-1 stated IT was told by the other employee the package contained $40,000.00 in cash. 18. During the course of the interview, MPD detectives requested that W-1 provide IT’s cellular telephone to them. During the interview, W-1 showed detectives a number of text messages and incoming and outgoing calls with Mr. Savopoulos. 19. Detectives interviewed a witness, hereafter referred to as W-2, which stated IT received a text from W-1 on Thursday, May 14, 2015, at approximately 9:00 AM. W-2 opened the text for detectives to view. The text contained dialogue and photos of a red lined bag with what appeared to be two bundles of cash, one of which had visibly displayed a white money wrap band. The other employee that provided the package to W-1 was interviewed and stated the money IT withdrew from Bank of America was wrapped in money wrappers from the bank and the money was separated in four bundles that totaled ($40,000.00) forty thousand dollars. 20. A visual inspection was conducted of the red sports car that was parked inside of the garage of 3201 Woodland Drive; there was no visible trace of a manila envelope, loose cash or any other items on the front seat or floor of the vehicle. 21. While canvassing the crime scene, two Domino's pizza boxes were recovered from the bedroom in which three of the decedents were located. During the course of this investigation, it was determined the two pizzas were ordered by a female, believed to be Mrs. Savopoulos, who requested them to be delivered to 3201 Woodland Drive, Northwest. The pizza boxes are time stamped on Wednesday, May 13, 2015, at approximately 9:14 pm. The pizzas were paid for by the Savopoulos's credit card. 22. Based on your affiant’s investigation, at the time the pizzas were ordered, each of the above decedents were being held against their will. Detectives responded to the Domino's Pizza carryout restaurant and spoke with a member of management. The order taker was identified and interviewed. The order taker remembered taking the delivery order for the Savopoulos’s residence on May 13, 2015. The order was accompanied by several out of the ordinary instructions for the delivery person. Mrs. Savopoulos provided she was nursing her sick child and > oeshe would not come to the door. She further instructed the delivery person was to place the two pizzas on the front porch, ring the doorbell, and leave. 23, The delivery person was identified and interviewed by detectives. The delivery person advised that it responded to the Savopoulos’s residence, as instructed. All of the lights in the house were out, with only the front porch light was on. IT placed the pizzas on the porch and left as instructed, 24. One of the pizzas appeared to be a whole cheese pizza with none of the pieces consumed. The second pizza was pepperoni and appeared to be % or more consumed. Additionally inside the pepperoni pizza box were several pieces of pizza, and uneaten crust from a partially eaten piece or pieces of pizza. 25. The partially eaten pizza crust was recovered by members of the Metropolitan Police Department's Mobile Crime Unit. This evidence was then examined and processed for the recovery of DNA from the partially eaten pizza. The examination was conducted at the Alcohol Tobacco, Firearms, and Explosives Forensic Laboratory, were a DNA profile was obtained. This profile was uploaded in the FBI CODIS database. A CODIS match was reported. A DNA match was made between DNA recovered from the partially eaten pizza crust and an individual identified as the defendant, Daron Dylon Wint, black male, born November 27, 1980, FBI¥:416874MC4 who was in the national CODIS database. 26. After a check of the Savopoulos's residence, it was determined that in the early afternoon of May 14, 2015, Mrs. Savopoulos’s blue, 2008, Porsche 911, bearing D.C. Registration 0K2418 was missing. An individual hereafter referred to as W-3 was identified, located and interviewed. W-3 provided that at }0 PM IT observed a blue Porsche 91.1driving ‘outbound on New York Avenue, Northeast, Washington, D.C, headed towards Maryland. The vehicle was being driven erratically by a black male, with short well groomed hair, wearing a neon lime green construction vest. 27. On Thursday, May 14, 2015, at approximately 5:30 PM, Mrs. Savopoulos’s vehicle was located in the rear of 8001Annapolis Road, New Carrolton, Maryland, on fire. Video surveillance recovered from the area near the car fire showed a black male, wearing a dark colored hoodie, blue jeans, and carrying a bucket. Inside the burned out remains of the vehicle was a neon green construction vest. It should be noted that several neon lime green construction vests were recovered from the Savopoulos's garage. 28. Your affiant has reviewed multiple cellular phone records and interviewed multiple witnesses that lead him to believe that this offense began sometime shortly after 6:00 pm on Wednesday, May 13, 2015, and continued through the afternoon hours of Thursday, May 14, 2015. The District of Columbia Fire Department was notified at 1:24 PM of the fire at the Savopoulos’s residence. Your affiant believes all four decedents were held captive by Mr. Wint and others until the $40,000.00 forty thousand was delivered to the Savopoulos’s residence by W-1, After the money was delivered the four decedents were killed. The defendant is not an om Yemployee of the Savopoulos family and there was no legitimate reason for him to be present inside their home at any time, 29. Based on your affiant’s knowledge and experience, and his observations of this crime scene, your affiant believes that the crimes described in this affidavit required the presence and assistance of more than one person. Furthermore, your affiant knows from training and experience that it is common practice for persons to utilize cellular telephones, computers, tablets, etc. to communicate with others through calling, emailing and texting others and to store information including contacts and photographs of persons with whom they associated and maintain contact with. It is also common for persons engaged in criminal activity to utilize cellular telephones, computers, tablets, etc. to communicate with others about their Participation in criminal offenses. Additionally, persons who commit crimes often maintain Photographs on their cellular telephones, computers, tablets, and on cameras, pictures of Person(s) with whom they associate, including persons with whom they commit criminal offenses with 30. Acellular telephone or mobile phone is a handheld wireless device used primarily for voice communication through radio signals. These telephones send signals through networks of transmitter/receivers called “Cells,” enabling communication with other cellular telephones or traditional “Land line” telephones. A cellular telephone usually includes a “Call log,” which records the telephone number, date and time of calls made to and from the phone. 31, _ In addition to enabling voice communications, cellular telephones now offer a broad range of capabilities. These capabilities include, but are not limited to: storing names and phone ‘numbers in electronic “Address books;” sending, receiving and storing text messages and e-mail taking, sending, receiving and staring still photographs and.moving.video;-storing and playing back audio files; storing dates, appointments and other information on personal calendars; and accessing and downloading and researching information from the internet. Similarly, computers, tablets, etc., also can be used to download and research information from the internet. For example, searching a browser history on a cellular phone, tablet, or computer, could reveal information regarding the location of the victims’ home, information regarding the disabling of a digital video recorder, etc. Cellular telephones may also include global positioning systems (GPS) technology for determining the location of the device. 32, Based on your affiant’s knowledge and training and the experience of other law enforcement officers with whom | have discussed this investigation, | know that in order to ‘completely and accurately retrieve data maintained in cellular telephone hardware or software, to ensure accuracy and completeness of such data and to prevent the loss of the data either from accidental or intentional destruction, it is often necessary that the cellular telephone related instructions in the form of manuals and notes, as well as the software utilized to operate such a device, be seized and subsequently processed by a qualified specialist in a laboratory setting. at )WoC wl 14% 33. Analyzing electronic handheld devices for criminal evidence is a highly technical process requiring expert skill and a properly controlled environment. Such devices utilize a vast array of different operating systems, software and set-ups. The variety of hardware and software available requires even experts to specialize in some systems and applications. Thus itis difficult to know prior to the search which expert possesses sufficient specialized skill to best analyze the system and its data, No matter which system is used, however, data analysis protocols are exacting scientific procedures, designed to protect the integrity of the evidence and to recover even “Hidden,” erased, compressed, password-protected, or encrypted files. Since electronic evidence is extremely vulnerable to tampering or destruction (Both from external sources or froma destructive code imbedded in the system as a “Booby-trap”), a controlled environment is. essential to its complete and accurate analysis. Furthermore, there often are no software tools designed for forensic searches of particular handheld devices. Thus, searching for and retrieving data from a cellular telephone can be even more complicated than searching a computer, even if the device has a much smaller memory capacity than a computer. For the foregoing reasons, the cellular telephone will be removed from the searched premises if the agent deems it necessary in order to conduct an efficient, complete, secure and accurate search of the device. 34, Searching the cellular telephone may require a range of data analysis techniques. In some cases, it is possible for agents to conduct carefully targeted searches that can locate evidence without requiring a time-consuming manual search through unrelated materials that may be commingled with criminal evidence. For example, agents may be able to execute a “Keyword” search that searches through the files stored in @ computer for special words that are likely to appear only in the materials covered by a warrant. Similarly, agents may be able to locate the materials covered in the warrant by looking for particular directory of file names. In other cases, however, such techniques may not yield the evidence described in the warrant. Criminals can mislabel or hide files and directories; encode communications to avoid using key words; attempt to delete files to evade detection; or take other steps designed to frustrate law enforcement searches for information. These steps may require agents to conduct more extensive searches, such as scanning areas of the device’s memory not allocated to listed files, or opening every file and scanning its contents briefly to determine whether it falls the scope of the warrant. In light of these difficulties, your affiant requests permission to use whatever data analysis techniques appear necessary to locate and retrieve the evidence described. 35. _ In addition, at least three cellular telephones belonging to the decedents in this case have not yet been located. These cellular telephones carry the following phone numbers: 202- 497-5608, 202-497-5604, and 301-395-2042. 36. On 5/21/15, Defendant Daron Wint was arrested pursuant to a D.C. Superior Court arrest warrant for committing the offenses outlined above in this affidavit. 37. Moments prior to his arrest, the defendant was observed by law enforcement to exit a nearby hotel and enter a white 2012 Chevrolet with Maryland tags of 15279CF. The defendant, oF[SCRwI94 a who was carrying a bag, sat in the rear passenger seat. The vehicle was then driven from Maryland into Washington, D.C. where it was stopped by members of the U.S. Marshals Service. ‘The defendant was subsequently removed from the vehicle and taken into custody. The vehicle, which still contains the aforementioned bag owned by the defendant, was transported to the D.C. Department of Forensics Science. An occupant of the vehicle was subsequently interviewed and admitted to purchasing money orders after the murders under the direction of an identified Person who was providing IT with money. The occupant estimated the total amount of the money orders to exceed $10,000. 38. While following the defendant’s vehicle, members of the U.S. Marshals Service discovered that the vehicle was following and acting in concert with a multi-colored € 300 box truck that displayed a North Carolina registration of EY-2006. A stop of this vehicle was also initiated by the U.S. Marshals Service at the same time the defendant's vehicle was stopped. ‘One of the occupants was subsequently identified as the person who was providing cash to the aforementioned occupant of the 2012 Chevrolet described above. In plain view, members of the U.S. Marshals Task Force observed a large stack of what appears to be $100 dollar bills. The denomination of this money is consistent with the denomination of money that was delivered to the decedent's residence prior to the homicide. in addition, several money orders were observed in plain view. This vehicle was also transported to the D.C. Department of Forensic ‘Science with the aforementioned items still in place. 39. _Itis therefore requested that DC Superior Court search warrants be issued for the entire vehicles described as being the following as well as the contents of any items located therein. —~ Year: 2013 Color: White / Make: Chevrolet / VIN: 1GIPASSG4D7264363 / MD TAG: 15279CF Year: 2013/ Color: Multi / Make: Ford/ VIN: 1FDWE3FL8DDA26628/ NC TAG: E20069 IRI 742 40. The affiant is requesting authorization to search for and seize the items listed in “Attachment A” oped A ae 9B Pate ae Mommy, Element Subscribed and swom to me this_C-L—day of. Me ,eoly _ United States District Court Superior Cour ofthe Set oF Columbia