SUPERIOR COURT OF ARIZONA
MARICOPA COUNTY
CR2008*031021*001 DT 01/14/2015
5.
There was a delay in providing the defendant with the mirror image of the hard drive
to the victims Compaq Presario computer created on June 11, 2008. The victims
body was discovered in his home on June 9, 2008. The victims Compaq Presario
laptop computer was found in the office of his home during the search that followed.
Detective Flores touched a key on the computer with a pen which awakened it from
sleep mode. The computer was impounded as evidence on June 10, 2008. On June
11, 2008, the Mesa Police Department made a mirror image of the Toshiba hard drive
that was on that laptop computer. The State disclosed the laptop computer to the
defense. On June 19, 2009, the laptop computer was turned on and accessed at the
Mesa Police Department during a review*of*evidence meeting attended by attorneys
representing the defendant. The case agent, prosecutor, and defense investigator were
also present during that meeting.
On January 31, 2013, Lonnie Dworkin, an expert witness for the defendant, testified
at the guilt phase trial that he had reviewed items at the Mesa Police Department,
including item #390633, the Compaq Presario laptop computer that belonged to the
victim. Mr. Dworkin testified he received a mirror image of the Toshiba hard drive
for that computer from the Mesa Police Department. According to Detective Perry
Smith, who testified at the evidentiary hearing on December 11, 2014, that mirror
image was created in December 2009. This mirror image contained changes made to
the hard drive when it was awakened from sleep mode by Detective Flores on June
10, 2008 and changes that occurred when it was turned on for review by defense
counsel on June 19, 2009. At the guilt phase trial, Mr. Dworkin explained to the jury
the procedure he followed to forensically examine the hard drive he received in the
E01 file format, including the steps he took to recover lost or deleted folders. He also
explained the method he used to retrieve the internet history. Mr. Dworkin provided
testimony regarding when the laptop computer was accessed on June 4, 2008. See
R.T. January 31, 2013. On February 4, 2013, during cross*examination at the guilt
phase trial, Mr. Dworkin testified he recalled seeing some











on the
victims computer but he was not asked to look for that type of information. See R.T.
February 4, 2013, page 52, line 3 through page 54, line 3.
During an interview with a Mesa Police Department detective on December 10, 2014,
reference was made to a mirror image of the victims hard drive made by the Mesa
Police Department on June 11, 2008. Defense counsel requested a copy of that mirror
image. The State provided a copy of that mirror image to the defendant in December
2014. According to one of the defendants expert witnesses, Bryan Neumeister, when
the victims laptop computer was awakened from sleep mode on June 10, 2008, the
computer downloaded updates that were not installed until it was turned on again.
============Docket Code 019 Form R000A Page 6==============
This did not occur until June 19, 2009. Thus, the mirror image created on June 11,
2008 should contain the changes made to the hard drive after it was awakened from
sleep mode on June 10, 2008 prior to those changes being installed. There is also an
issue regarding files being over*written. The computer experts working with the
parties are still analyzing the mirror image of the victims hard drive made in June
2008.
On January 8, 2015, John Smith, a computer forensic expert witness hired by the
defendant, testified at the penalty phase retrial. Mr. Smith examined the mirror
images of the hard drive created on June 11, 2008 and December 12, 2009 as well as
the original hard drive seized by the Mesa Police Department on June 10, 2008. He
testified he had only 3 or 4 days to conduct a review of the June 11, 2008 mirror
image of the hard drive. He testified he found data sites containing pornographic
links to websites on the Toshiba hard drive. Mr. Smith testified if he had more time
to analyze the hard drive it was possible he could have found more











links. Mr. Smith testified that none of the images he reviewed were an exact image
of the Toshiba hard drive before it was awakened from sleep mode on June 10, 2008.
However, the June 11, 2008 hard drive is the closest exact image. The source
evidence and mirror images of the hard drive created on June 11, 2008 and December
12, 2009 contained the same pornographic data sites. These data sites provide the
historical record to the pornographic sites visited or accessed by that computer. Mr.
Smith testified he found artifacts or remnants of




in the logs and history files. He
testified he found no pornographic photographs, videos or other pornographic media
on the hard drive. There was no indication data had been manipulated on that hard
drive. Mr. Smith also testified the mirror images of the hard drive he reviewed were
automatically modified or altered by the computer on June 10, 2008 and June 19,
2009 but the data files containing the pornographic links were still present after the
alterations. Mr. Smith testified that the victims laptop computer contained numerous
cleaner programs. The goal of these programs is to clean the computer and make it
run more efficiently. These programs clean the registry and internet history and can
be set to run at a regularly scheduled time or can be run manually.
On January 14, 2015, Mr. Smith testified that a modification to a hard drive does not
change the data on the registry tables. No evidence files were deleted and the history
or cookies were not affected when the hard drive was accessed on June 10, 2008 or
June 19, 2009. The files that were modified or overwritten were the operating files.
Defendant claims the failure to provide the defendant with a copy of the mirror image
created on June 11, 2008 prior to December 2014 was an intentional disclosure
violation. Further, Defendant claims that mirror image contains exculpatory
============Docket Code 019 Form R000A Page 7===============
evidence. No testimony was provided at the evidentiary hearing to explain why the
Mesa Police Department provided Mr. Dworkin with a hard drive of the victims
computer created on December 12, 2009. The Court has no basis to find the Mesa
Police Department withheld evidence or refused to provide a copy of any evidence to
Mr. Dworkin. To the contrary, a mirror image of the victims computer was given to
Mr. Dworkin. As he testified at the trial, the focus of the defense at that time was not
on the











contained on the victims computer. Rather, the focus was on the
timeline of events that occurred on June 4, 2008. Mr. Dworkin was able to testify
about those matters at the guilt phase trial. During cross*examination at the guilt
phase trial, Mr. Dworkin testified he had been interviewed by the prosecutor about
the











on the victims computer but it had been two years earlier and he
could not recall specific details or what he had stated during that interview. Exhibit
9 from the evidentiary hearing conducted on December 4, 2014, the Chain of Custody
log maintained by the Mesa Police Department, shows that Detective Melendez and
Detective Rios removed the computer from the evidence room on June 11, 2008,
stating the evidence was out for investigation. Defense counsel and their expert
witnesses received a copy of this log. Mr. Dworkin discussed protocols he followed
for examining hard drives. As a computer forensic expert, he would have been aware
that it is routine for law enforcement to make a mirror image of the hard drive.
Detective Melendez was interviewed by defense counsel prior to trial and testified at
the guilt phase trial and the penalty phase retrial. He was examined about his review
of the laptop computer hard drive. There is no evidence he intentionally hid the
existence of the June 11, 2008 mirror image or failed to provide a copy of the mirror
image created in June 2008. According to the defense expert, John Smith, the content
on the original hard drive (the source evidence) and all mirror images is the same
with regard to the pornographic data sites to which Mr. Smith testified. In fact, the
source evidence and June 11, 2008 mirror image are the same.
Defendant argues that failure to provide the June 11, 2008 mirror image could have
affected the jurys verdict in the guilt phase trial because the State argued during
closing argument that there was no corroboration for the defendants claim that she
saw the victim viewing child











on his laptop computer. That issue is not
properly before this Court. However, Mr. Dworkin testified at the guilt phase trial he
had seen











on the laptop. Thus the defendant had the opportunity to
pursue the issue during the guilt phase trial. The defendant has an expert witness who
testified at the penalty phase retrial about the











links he found on the
victims computer. The State may present evidence disputing the findings of that
expert. However, the penalty phase retrial jury will have the benefit of the testimony
about the contents found on the victims computer hard drive in evaluating the
========Docket Code 019 Form R000A Page 8===============
defendants testimony about what she says she observed the victim doing on January
21, 2008 as well as the testimony of the defendants expert witnesses.
The original laptop computer and hard drive were disclosed by the State and available
for analysis by defense expert witnesses. The evidence at issue was on the source
evidence (the original hard drive) and mirror images created from the source
evidence. The penalty phase retrial is ongoing. If the defense expert finds additional
evidence after further review of the 2008 mirror image, he can be recalled as a
witness. Dismissal of the notice of intent to seek the death penalty is not an
appropriate sanction for a discovery violation of this nature. The Court finds no
ground for dismissal of the indictment or the Notice of the Intent to Seek the Death
Penalty based upon this claim.
6.
Social media postings by the case agents wife prejudiced the defendant. Defendant
alleges the case agent, Detective Flores, provided non*public details about the case to
his wife who tweeted her opinions on social media. In addition, Detective Flores
wife supposedly posted a video on You Tube which Defendant Arias describes as a
mock movie trailer about the case. Defendant also provided copies of other social
media exchanges in which the parties discussed trial matters including a claim that
the defendant had a buddy write for her in prison to create evidence for her story.
See attachments to Motion to Dismiss States Notice of Intent to Seek the Death
Penalty Due to Continued State Misconduct, Supplement #1 filed October 24, 2014.
No testimony was provided at the evidentiary hearing regarding these claims.
Defendant relies on the attachments to her motion filed on October 1, 2014 as support
for her allegations. The Court has reviewed those attachments.
The Court finds the defendant has failed to establish that Detective Flores provided
information to his wife about the case that was not public information. The
attachments to the motion indicate Ms. Flores stated there was much condemning
evidence and situations that most ppl (sic) never heard by watching the trial,
discusses the dismissal of a juror, and discusses a court assistant who allegedly made
a derogatory statement about the prosecutor. The Court previously made a record
about the matter involving the court assistant. The statement supposedly occurred in
the courtroom, not a sealed proceeding. The court assistant denied making the
statement. Whether there is any truth to the other statements purportedly made by the
detectives wife in her posts is unclear. The Court does not take lightly the allegation
that Detective Flores provided non*public information to his wife about the case.
Detective Flores has testified numerous times about a variety of issues related to this
case. Defense counsel has not questioned him about these matters or provided any
other evidence that would permit this Court to find he violated any court orders.
=============Docket Code 019 Form R000A Page 9=============
Additionally, some of the information referenced in the attachments may have been
discussed in open court and thus there was no violation. There have been numerous
court hearings on this case, including hearings in chambers and sealed hearings. This
Court cannot recall all of the details of those hearings. Without transcripts or
testimony by individuals present at those hearings, this Court has insufficient
information to find a violation of the courts orders.
The Court is unaware of any legal reason the detectives wife should be restricted
from providing her opinion or commenting about the case on social media. Even if
the court had evidence that Detective Flores had discussed matters from a sealed
proceeding with his wife, Defendant has failed to show that it affected her case in any
way. The penalty phase retrial jurors were questioned about any prior knowledge of
the case including information obtained through the media. None of the jurors
indicated any knowledge about these social media exchanges. Defendant does not
allege how her case was prejudiced by these incidents. The Court finds no ground for
dismissal of the indictment or the Notice of the Intent to Seek the Death Penalty
based upon this claim.
7.
Detective Flores allegedly commented or provided information to the press about the
dismissal of a juror. No testimony was provided at the evidentiary hearing about this
claim. Exhibit G to the defendants motion filed on October 1, 2014 contains a social
media message allegedly from the detectives wife referencing a conversation with a
juror that occurred in chambers. It is unknown how the information was provided to
Ms. Flores. Defendant presumes the information came from the detective. Defendant
does not allege how her case was affected by the social media statement. Even if the
detective had discussed a sealed matter with his wife, Defendant has not shown that
her case was affected in any way. The jurors empanelled for the penalty phase retrial
were questioned about any knowledge about the case and none of them referenced
any knowledge of this incident. Based upon the information provided, the Court
finds no ground for dismissal of the indictment or the Notice of the Intent to Seek the
Death Penalty based upon this claim.
8.
The Maricopa County Sheriff made harassing comments about the defendant to the
media. Defendant claims the Maricopa County Sheriff responded to media inquiries
about a pleading allegedly filed by the defendant and those responses were intended
to harass the defendant. A document was filed with the federal court alleging
violations of law relating to Defendant Arias. The document, purportedly filed by or
on behalf of the defendant, alleged various ways Defendant Arias had been
improperly treated while in custody. The media apparently contacted the Maricopa
County Sheriff seeking his response to the allegations. The sheriff denied the
===========Docket Code 019 Form R000A Page 10===============