Forensic Corpus · The Factory Watermark

168 Filings. One PNG.
Byte‑Identical.

A single 89,934‑byte Minnesota State Seal PNG appears byte‑for‑byte identical across 168 charging documents in the MCRO dataset — spanning 142 cases, 8 filing types, every suburban police department that shows up in the corpus, and 8 years of purported independent filings. Two outlier complaints render visibly darker than every other and fragment the same stamp into 15 cookie-cutter raster pieces with one SHA‑256 hash matching across both. The artifact is the byte‑level fingerprint of a single print run.

168Filings
142Cases
8Filing Types
8 yrPurported Span

Two independently-generated PNGs with the same visual content produce different SHA-256 hashes. Every time. Without exception. For 168 PNGs to all hash to the same value, they did not come from 168 independent acts of document assembly. They came from a single act of production. The 8-year span printed on these filings is not when the documents were produced. It is what the "filed" date field was set to, one by one, to make one print run look like 8 years of independent filings.

One file. 89,934 bytes. Reused 168 times.

This is the Minnesota State Seal as it appears on charging documents across Hennepin County criminal cases. Every criminal complaint, summons, detention order, and warrant in the dataset that carries this seal carries the exact same file. Not a visually-similar re-render. The same file.

Minnesota State Seal — the 492x486 PNG that appears byte-identical across 168 filings
SHA-256fbc6023a7c0c6bd25f75d346f82b389f589dd1d4d9deb85c697d51ce2edc4772
Dimensions492 × 486 px
File Size89,934 bytes
Format.png · 8-bit RGB · non-interlaced
DB LabelMinnesota State Seal Emblem
Corpus Appearances168 across 142 cases · 8 filing types · 2017–2025

One flipped bit changes the hash.

When different offices independently assemble a document, each one renders its own images. Different software, different versions, different compression settings, different color profiles, different timestamps baked into the file's internal chunks. Even when the end product looks identical to the human eye, the underlying bytes diverge on every run. A SHA-256 hash is sensitive to a single flipped bit.

Two independently-generated PNGs with the same visual content produce different SHA-256 hashes. Every time. Without exception.

For 168 PNGs to all hash to the same value, they did not come from 168 independent acts of document assembly. They came from a single act of production.

Two complaints rendered twice as dark. Same stamp, broken apart.

Two filings in the dataset render visibly darker than every other in the corpus — roughly twice the opacity. Both run the Minnesota State Seal through a compositing setting that the PDF couldn't cleanly re-merge. The result: the same stamp emitted as 15 discrete bitmap fragments instead of one 89,934-byte PNG. Paired piece-for-piece across the two documents. Identical pixel dimensions, identical file byte sizes. Both complaints shown below at page 4 — where the fragmented seal appears.

27-CR-21-9235 · Document A
State v. Grahm Mark Fletcher
Formal Complaint Filed · 2021-05-28 8:36 AM · Maple Grove PD
SHA-256: c58720349992c339… Open in Source Files →
27-CR-22-4879 · Document B
State v. Manyara Nicole Watkins
Amended Criminal Complaint · 2022-03-17 8:36 AM · Brooklyn Park PD
SHA-256: 462d583db7c0bf62… Open in Source Files →

The diagram below shows the full intact seal on the left — the one 89,934-byte PNG as it normally renders — and the 15 raw bitmap fragments extracted from the two outlier complaints on the right. Each fragment is shown at its true pixel dimensions. Arranged in approximate seal-assembly order: text pieces at the top, main body at the bottom. The 176 × 4 white strip is the one piece whose SHA-256 hash matches byte-for-byte across both documents.

Intact Minnesota State Seal — 492x486 PNG, 89,934 bytes, appears 168x byte-identical
Intact Seal
492 × 486 · 89,934 B · one PNG
Appears 168× byte-identical
Decomposed into 15 pieces
Text-letter fragments (letters of "STATE OF MINNESOTA"):
183x17 text fragment183×17
180x17 text fragment180×17
168x16 text fragment168×16
159x13 text fragment159×13
149x17 text fragment149×17
120x14 text fragment120×14
110x17 text fragment110×17
109x17 text fragment109×17
89x14 text fragment89×14
82x17 text fragment82×17
Labeled letter pieces from "OF MINNESOTA" / "SEAL":
Piece 007007 · 153×17 · "O" of OF MINNESOTA
Piece 009009 · 153×14 · sliver O/F of MINNESOTA
Piece 008008 · 54×17 · above "E" of SEAL
Horizontal dots strip under "OF THE STATE":
Piece 010010 · 494×5 · 9,942 B
★ The hash-match piece — pure-white, same SHA-256 in both docs:
006 · 176×4 · 2,878 B · feae4ae2… — BYTE-IDENTICAL BOTH DOCS
Top section (completes 002):
Piece 003003 · 494×85 · 168,023 B
Strip that sits atop piece 001:
Piece 002002 · 439×17 · 29,915 B
Main bottom — circular emblem + lower text:
Piece 001001 · 494×402 · 794,416 B
Every fragment above has a byte-size-identical counterpart in the other outlier document. 14 differ by SHA-256 (different page-background pixels composited under the stamp). The 176×4 white strip does not — it is the one region of pure white with no background to differ over.

Two suburbs. Two PDs. Two prosecutors. One output.

Field Document A Document B
Case27-CR-21-923527-CR-22-4879
Filed2021-05-28 8:36 AM2022-03-17 8:36 AM
DefendantGrahm Mark FletcherManyara Nicole Watkins
Arresting DeptMaple Grove PDBrooklyn Park PD
ComplainantDet. James KirkeyOfficer Mark Marah
Observing OfficerOfficer Alexa Nettell
ProsecutorSteven M. TallenBrian Duginske
Charges3rd‑Degree DWI (×2) + Careless Driving3rd‑Degree Assault + 5th‑Degree Assault (×2)

Two suburbs 15 miles apart. Two police departments with no shared chain of command. Two prosecutors with no shared caseload. 294 days between filings.

And yet both documents produce the same 15-fragment raster decomposition with every fragment matched by pixel dimension and byte size. Identical processes produce identical artifacts. Different processes do not.

The captions were swapped in afterward.

The one fragment that cannot differ — doesn't.

Of the 15 paired fragments, 14 have different SHA-256 hashes — the pixels differ because each fragment composited over different page-background content. The geometry is identical; the pixel values are not.

One fragment is the exception. A 176 × 4 pixel strip — pure white — hashes identically across both documents.

Piece 006 · 176 × 4 px · 2,878 bytes · raw .pam bitmap
feae4ae2e04cbfea42796a26945cf9951e06cb3e040173f3ed3f150191b43df9
File on disk: download the raw .pam

Pure white has no background to differ over. Identical white pixels produce identical bytes. The one region of the stamp that could not vary, does not.

That is the byte-level anchor that locks the geometric proof. Same stamp. Same single event. Two "independent" PDs. Same output.

What this actually proves.

What kind of "pipeline" stays byte‑identical for 8 years?

Consider the alternative the evidence forces you to hold: every suburban police department in Hennepin County — Maple Grove, Brooklyn Park, a dozen others — independently feeding their charging-document assembly through a single central rendering system. That system never receives a software update. Never rotates image assets. Never re-exports the seal at different compression. Produces byte-identical 89,934-byte PNGs every time any officer files any charge, across every filing type, for 8 years straight.

Ask the simpler question first. What would that central system be for? Charging-document assembly is not a service the state farms out to a shared vendor. Each prosecutor's office writes its own complaints. Each judicial officer signs its own warrants. There is no operational reason for a central image-embed pipeline to exist at all, let alone one that somehow binds every suburban PD in the county to the same 89,934-byte source file for almost a decade.

That is not a pipeline. That is a fairy tale.

A print shop does not fire up the press for one customer, print one document, shut down, wait three days, fire the press back up, and repeat 168 times over 8 years while guaranteeing byte-identical output on every run. A print shop runs a batch. It stamps 168 copies in one sitting. The operator decides what date to put on each copy.

Byte-identical output across 168 copies is not the fingerprint of 168 independent filings. It is the fingerprint of one print run.

The 8-year span printed on these filings is not when the documents were produced. It is what the "filed" date field was set to, one by one, to make one print run look like 8 years of independent filings.

This conclusion is not new to this record. The Aspose finding already established that 27 documents in this same database carry PDF creation timestamps predating the authoring software itself — documents produced after the software existed, stamped with dates from before it existed. Backdating. Already proven. Same corpus.

The seal evidence extends the reach of that proof from 27 documents to 168. The mechanism is the same. The software shortcut is different. The conclusion is identical.

They counted on no one computing the hash.

Every filing. Every case. Every date. One hash.

The 168 documents carrying fbc6023a7c0c6bd25f75d346f82b389f589dd1d4d9deb85c697d51ce2edc4772 are listed below. Click any row to open the document in the source-files viewer. Any reader can verify — against any single row — that the seal inside matches the hash.

Loading…

The Seal · Authenticated against the Source Files Explorer · Cross-reference: 77 Defendants · Into the Past · 27 Aspose Docs

MnCourtFraud.com · State of Minnesota v. Guertin (27-CR-23-1886) · Federal case 0:25-cv-02670-PAM-DLM