State v. Darnstaedt

2021 UT App 19, 483 P.3d 71
CourtCourt of Appeals of Utah
DecidedFebruary 19, 2021
Docket20180922-CA
StatusPublished
Cited by6 cases

This text of 2021 UT App 19 (State v. Darnstaedt) is published on Counsel Stack Legal Research, covering Court of Appeals of Utah primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
State v. Darnstaedt, 2021 UT App 19, 483 P.3d 71 (Utah Ct. App. 2021).

Opinion

2021 UT App 19

THE UTAH COURT OF APPEALS

STATE OF UTAH, Appellee, v. GEORGE DARNSTAEDT, Appellant.

Opinion No. 20180922-CA Filed February 19, 2021

Fourth District Court, Heber Department The Honorable Jennifer A. Brown No. 141500198

Emily Adams and Freyja Johnson, Attorneys for Appellant Sean D. Reyes and Jeffrey D. Mann, Attorneys for Appellee

JUDGE DIANA HAGEN authored this Opinion, in which JUDGES JILL M. POHLMAN and SENIOR JUDGE KATE APPLEBY concurred. 1

HAGEN, Judge:

¶1 A jury convicted George Darnstaedt of twelve counts of sexual exploitation of a minor for knowingly possessing child pornography discovered during a search of his home computer. He appeals those convictions, contending they were based on insufficient evidence and that his trial counsel was constitutionally ineffective for making a generic

1. Senior Judge Kate Appleby began work on this case as an active member of the Utah Court of Appeals. She completed her work as a senior judge sitting by special assignment as authorized by law. See generally Utah R. Jud. Admin. 11-201(6). State v. Darnstaedt

directed verdict motion rather than pointing to specific deficiencies in the evidence. Darnstaedt also argues his counsel was ineffective for not ensuring that the jury was properly instructed on various elements of the offense and for not objecting to alleged prosecutorial misconduct during closing arguments. We reject those arguments and affirm Darnstaedt’s convictions.

BACKGROUND

¶2 On June 17, 2013, a Utah law enforcement officer accessed Ares, a peer-to-peer file sharing network, to look for users illegally sharing child pornography. One particular IP address offered to share ninety-two files with hash values associated with known images of child exploitation. The officer downloaded one file and confirmed that it was indeed child pornography.

¶3 Through an administrative subpoena issued to the internet service provider, the officer identified the residence using the IP address at the time of the connection. Further investigation revealed that Darnstaedt lived at that address with his wife and two young daughters. Police also determined that the wireless networks at the house were locked so that no one outside the house could have gained access to the internet using that IP address without a password. Based on this information, police obtained a warrant to search Darnstaedt’s house for evidence of child pornography.

¶4 Police executed the search warrant on July 11, 2013. When an officer explained to Darnstaedt that the search was part of an investigation into child pornography being distributed from the residence, Darnstaedt appeared shocked and repeated “the word ‘distributed’ with a little exclamation on the end, meaning like a question.” During the search, the officers seized a desktop computer from a bedroom that had been converted into a home office space.

20180922-CA 2 2021 UT App 19 State v. Darnstaedt

¶5 A forensic examination of the computer revealed fifty-five items that appeared to depict “underage individuals in fully nude, nude, or explicit-type pictures.” The investigator noted it was unsurprising that the forensic team found fewer illicit files on the computer than the IP address had offered to share through the peer-to-peer network because some users “consume the pornography and then delete it immediately afterward” rather than “hoard[ing]” it.

¶6 The State ultimately charged Darnstaedt with twelve counts of sexual exploitation of a minor under Utah Code section 76-5b-201(1)(a). Each count was based on a specific file found on the computer’s hard drive. The files contained graphic photographs and videos displaying the genitalia of prepubescent females and prepubescent females being raped and sodomized by adult males.

¶7 At trial, the State presented evidence explaining where each of the twelve files was found on the hard drive. Eight of the files were in the “recycle bin,” indicating that a user purposefully downloaded then deleted them. A forensic examiner explained that when a user downloads a file, the data that makes up that file is saved on the hard drive and the operating system logs its location in a master file table. If a user later deletes the file, the file appears in the recycle bin. But the data is not erased from the hard drive, and the operating system still tracks where the data is stored. As a result, the file remains accessible to the user as “an active file,“ and the user can easily recover it from the recycle bin.

¶8 Three of the files were located in “unallocated space,” indicating that they “had to have existed as . . . active file[s] at some point in time,” after which a user had either deleted them and then removed them from the recycle bin or had used a shortcut key to bypass the recycle bin and permanently delete them directly to the unallocated space. To move a file to the unallocated space, a user would generally “drag and drop [the file] into the recycle bin and then go into the recycle bin and hit

20180922-CA 3 2021 UT App 19 State v. Darnstaedt

‘empty [recycle] bin.’” When the user empties the recycle bin, the file’s data remains on the hard drive, but the operating system no longer tracks its location, and it allows that unallocated space to be used for storing new information. The old data remains in the unallocated space until it is overwritten. Until that happens, the data can be recovered with specialized forensic software. Although a file in unallocated space is “generally inaccessible” to the user, “[i]t was once an active file that the user was able to see” and “went through the process of deletion.”

¶9 The last file of the twelve files that led to the charges was in the temporary internet cache of Darnstaedt’s computer. A defense expert explained that temporary internet files are automatically saved to the computer’s hard drive to speed up internet browsing when a user visits a website. While the “user simply sees the interface” of the web browser, the “computer’s doing all the communication” from “behind the scenes.” Although the temporary internet cache saves files automatically, they are “considered active files” accessible to the user, unlike files in unallocated space.

¶10 Temporary files in an internet cache as well as data in unallocated space can be erased using specialized software, such as CCleaner. Although legitimate users can use CCleaner “for general computer maintenance” and “to free up space” to improve computer performance, forensic examiners often see such data-erasing programs in child pornography cases.

¶11 Investigators found that CCleaner had been installed on Darnstaedt’s computer, along with Ares, the peer-to-peer network used for downloading and sharing files. To download files from other computers on the Ares network, a user would have to deliberately search for files and choose to download them to a designated folder. They would not download directly to the recycle bin.

¶12 Investigators also recovered the registry of files on Darnstaedt’s computer that were recently viewed or opened. The

20180922-CA 4 2021 UT App 19 State v. Darnstaedt

list included “a considerable amount of files” that contained “key words that are consistent with files of child pornography.” The case agent testified that people seeking child pornography use those key words—such as the acronym “PTHC” for “preteen hard core”—“as search terms when searching for files like this through the peer-to-peer network.” For a file to appear on the registry list, a user would have to open the file after it was downloaded to the computer. Alongside the file names related to child pornography, the registry listed recently opened files such as “George’s iPhone pics” and “George Darnstaedt vacation November 2011.”

Free access — add to your briefcase to read the full text and ask questions with AI

Related

State v. Rodriguez
2026 UT App 34 (Court of Appeals of Utah, 2026)
State v. Naranjo
2023 UT App 131 (Court of Appeals of Utah, 2023)
Carrell v. State
2023 UT App 93 (Court of Appeals of Utah, 2023)
State v. Eddington
2023 UT App 19 (Court of Appeals of Utah, 2023)
State v. Holsomback
2022 UT App 72 (Court of Appeals of Utah, 2022)
State v. Cabututan
2022 UT App 41 (Court of Appeals of Utah, 2022)
State v. Nunez
2021 UT App 86 (Court of Appeals of Utah, 2021)

Cite This Page — Counsel Stack

Bluebook (online)
2021 UT App 19, 483 P.3d 71, Counsel Stack Legal Research, https://law.counselstack.com/opinion/state-v-darnstaedt-utahctapp-2021.