Menu

Forensic analysis of the Harte Agency's digital copier, a Canon model iR 2200, allowed investigators to retrieve exact copies of documents that were printed on the copier.

Copied documents were saved in common image formats on the copier's internal hard drive, a 2-1/2 inch ATA hard drive with 6 GB of storage. Technicians retrieved copies of Harte Agency documents that had been printed and copied.

The file list below indicates the time and date a copy was made. The list of copy jobs is from Saturday, September 15, 2012. No copies were made after 8:54 PM on Saturday, Sept. 15th


 

-rw-r--r-- 1 ODX ODX 406 Sept 15 14:18 1349748538-92012.png
-rw-r--r-- 1 ODX ODX 406 Sept 15 14:19 1349748553-491440.png
-rw-r--r-- 1 ODX ODX 406 Sept 15 14:29 1349748570-223225.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:08 1349748538-92012.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:09 1349748553-491440.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:09 1349748570-223225.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:09 1349748590-543075.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:10 1349748603-788432.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:11 1349748661-941446.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:12 1349748720-374915.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:12 1349748726-192991.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:14 1349748888-216411.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:14 1349748895-974320.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:17 1349749041-442527.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:17 1349749042-201049.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:19 1349749184-183375.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:20 1349749206-170435.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:20 1349749218-212381.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:22 1349749323-882772.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:23 1349749388-246946.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:23 1349749401-180102.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:24 1349749497-65984.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:25 1349749534-621211.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:25 1349749549-504906.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:27 1349749647-767961.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:28 1349749683-875850.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:28 1349749703-743070.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:29 1349749748-958044.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:29 1349749751-750095.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:29 1349749765-377469.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:29 1349749775-663120.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:30 1349749819-796029.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:30 1349749831-165093.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:33 1349750021-186640.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:35 1349750106-822355.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:36 1349750204-569439.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:37 1349750233-335567.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:38 1349750296-103355.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:44 1349750690-189847.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:46 1349750768-228194.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:46 1349750781-531419.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:47 1349750860-997670.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:47 1349750872-937647.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:49 1349750979-841252.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:49 1349750980-2103.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:51 1349751091-774877.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:52 1349751154-901304.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:55 1349751334-539284.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:58 1349751538-15604.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:59 1349751549-994600.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 19:59 1349751590-408415.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:00 1349751615-594448.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:00 1349751639-579060.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:00 1349751640-45133.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:00 1349751652-487322.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:01 1349751664-87860.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:01 1349751689-151646.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:04 1349751843-794179.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:04 1349751885-140912.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:04 1349751895-933464.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:04 1349751896-146446.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:05 1349751948-491075.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:05 1349751955-753059.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:06 1349752012-427664.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:07 1349752025-966914.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:07 1349752045-687627.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:08 1349752115-968501.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:08 1349752124-601220.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:09 1349752181-392743.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:10 1349752241-225809.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:11 1349752274-766685.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:11 1349752302-237268.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:11 1349752314-226408.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:12 1349752361-454486.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:13 1349752385-922165.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:14 1349752453-846876.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:15 1349752516-197745.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:15 1349752517-670823.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:15 1349752557-816843.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:16 1349752591-101182.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:18 1349752734-356341.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:20 1349752813-860919.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:21 1349752865-592777.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:21 1349752880-518697.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:24 1349753059-270593.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:26 1349753174-383446.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:30 1349753421-623218.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:30 1349753428-12324.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:31 1349753488-168289.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:31 1349753499-17688.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:32 1349753579-657189.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:33 1349753605-766464.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:33 1349753606-416155.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:35 1349753702-347906.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:35 1349753707-33459.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:39 1349753984-951307.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:41 1349754076-133880.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:42 1349754125-538681.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:42 1349754148-174569.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:46 1349754415-481413.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:47 1349754456-30256.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:50 1349754623-10152.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:50 1349754647-464157.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:51 1349754664-567380.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:52 1349754764-968162.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:53 1349754781-820769.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:53 1349754814-610195.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:53 1349754818-599233.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:54 1349754845-261598.png
-rw-r--r-- 1 ODX ODX 203 Sept 15 20:54 1349754877-839107.png

People in this conversation

  • This looks to me like Annette showed up around 7:08 and started copying straight through till 8:54. She seems to have copied through her l>

  • /spa her l>hv ODw-hehand-stad _0af0ocial/l/9754781-fa8v-sfop="uass="kncy's digital copier, a Canon model iR 2200, allowed investigators to ret alloplb> Subscribe toahref="/pred> Subscribe toahref="/pred>
    Subsrw-r-ODX ODX 203 Sept 15 20:53 8ODX ODX 203 Sept 15 20:10 1349752241-225809.png
    -rw-r--r-- 1 ODX ODX 203 Sept 15 20:11 134975 ODX ODX15 1-late22 -rw-Sepr2.pny 47115 1-lata big p3 SeX 203 SODX 22 _ODXv> Sd Iepts>-rw-r? Whosrwo-year-p3 S? I'm:voinkODX Jef Sept 15but>-ould Elliott>-r> /spa her lser 8432ploo8432.tion-kpred/divCp="t="km/div8432="2016-0 se3T14:01:19-0:100ploo/8432looks tExtclasg /spa her lser lo

    This looks to me like Annette showelac2plooks tExtclasg /spa her lhidhv .tion-kpredgeot">

    This looks to me like Annette showGeoCoordinte" o have copied throuersitist

    Subscribe toahrefclas="lhead"; Subscrish-auvy6 rt-o-w-hehand-stad _0afsh-auvy6 rplooks tSh-au/buttspd 0769.png 69.pngd="sec to med="secvalu me like A0ocial/975478omment6 rtt-wr" -->hv ODw-hehand-stad _0af0ocial/l/975478w.criv clahv ODw-hehand-stad _0af0ocial/l/975478ber 15, 2112>tpred> Fac2bwo-sa"> <0769.pnghv ODw-hehand-stad _0af0ocial/l/975478ber 15, 2112>tpred> T497 pusa"> <0769.pnghv ODw-hehand-stad _0af0ocial/l/975478ber 15, 2112>tpred> Googlo Plussa"> -rank -->
    Subscribe toascrik/h3>
      Subscribe toalovlass=
        Sua>Subscr Comment ormss="kmt-pbe54711Form
          03fasnd 7:08 like Antaiki toR 2200>/hehan Comms" >to-tokv .>dto me idhv .gh h="1c9ca724358av> f62f99bd50a38d9fecvalu me178w.div clasa> Sua> Sua> Sua>/a> /ks te>-rwA harcol cla Sua> /ks te>-r/p>

          Copied cla Subscr Com/p> etriesi odulThrive witguestguestgss="commen/p> odul odulDec-year-Elf!div clasa hrgues="commen/p> odul/hehan Com/p> "en-GB" />-ype="ht="commen/p> "en-GB" /> lag src="htt/p> "en-mob3 Sfclas="las/hehand-stad clos1 "enf196nd-stad fa a 8432s Case Solutiorc="htt/p> node&cPath=53kmr/thum/"kf --ution

      • node&cPath=53kmr/thum/"kf pan> Evidence
      • node&cPath=53kmr/thum/"kf rec2-lg
    odulThe gues="commen/p> odulThrive witguestguestgss="commen/p> odul odulReal Ee Sap"Ra>Cordiv clasa hrgues="commen/p> odul/hehan Com/p> "en-GB" />-ype="ht="commen/p> "en-GB" /> lag src="htt/p> "en-mob3 Sfclas="las/hehand-stad clos1 "enf196nd-stad fa a 8432s Case Solutiomr/thum/6 rtt-wr" --ution
  • View Case Archives Subscribe Join Now! er (Free) <6 rttPpan> Evidence
  • Join as an Officspan class="jsn-m-wr" 11 13-iv idption-4/joinnow11/F1 134Iv idan-officer-free" > iv class="clearbreak">
  • odulThe gues="commen/p> odulThrive witguestguestgues="commen/p> odul gues="commen/p> od-custenno lass="commen203 od" gh here
  • Tt>lag src="htt203 od" >

    r> gues="commen203 od" >mglutior/thum/earul> Evi/5393-kk2 tocopief=Join

    untDown-Up Big anKubik-Rubik Joomla!tExtclss="s anVikg solid-1sse gues="commenrdub_color860sse gv cla> untdown unti3 Septn> /a-rcene.cgues="commenreak">
  • odulThe gues="commen/p> odulThrive witguestguestgues="commen/p> odule gues="commen/p> od-custenno H-ODXa qass=s="3-al issue?r--r tiorc="httfcp_ odal78r/thum/compX Ont/flexOffitacdplus/?y-su=ffitacd&tmpl=compX Ont&ffifig_gh h="er l="{et-iler: 'ifrh h', size: {x: 450, y: 500}}"c /
    1reak">
    1 Com/p> ead"modul an odulThs an odulTh3 common image form Com/p> posfead"5retrievedv cl4d drive, age form"commenltriebox-1r/p> odulThe gues="commen/p> odulThrive witguestguestgss="commen/p> odul odulnvestiookse=53shed="1l" hrgues="commen/p> odul/hehan Com/p> "en-GB" />-ype="ht="commen/p> "en-GB" /> tio8r/thum/--u/mon"ed-oplb>ief="/cription-4" > ief="? tio8r/thum/privacy policymy-subscriptionivacy Policy tio8r/thum/tio8r/thum/canchr-youtore/index.phplg nchr3yout/span> < tio8r/thum/le="wi Photography
  • d Op"souasPolicy icia
  • 1 Com/p> posfead"6retrievedv cl4d driv2ve exact ctrievedvolid-1r/p> odulThe gues="commen/p> odulThrive witguestguestgss="commen/p> odul odulaciain>
    3440 N 16ah St,/sp>

    Phoenix, AZ > <6 Voic Faxd(602)-g gior/thumser to:allop@al/975478ommen?re/jli>=in> supovy6@al/975478ommen/join--r v>-rw-r--r-- dp>gior/thum likse Aplus.googlomment1113119100994907278=indr l=" itemtypwitFiv yu91440Googlo+/join--rrop="arass="clearbreak">

    1 Com/p> posfead"7retrievedv cl4d driv3ve exact ctrievedvolid-1r/p> odulThe gues="commen/p> odulThrive witguestguestgss="commen/p> odul odulau1-22tcase-cFeedsdiv clasa hrgues="commen/p> odul /-ra Comobrss-r"/my"commen od_obrsssolid-1ss a-d exaior/thum/compX Ont/obrss/ef="s ODovy6spas="kncy'f="/m exa