original attachment instead of the compressed copy displayed in the email.
Then he opened its metadata.
Rows of technical fields appeared.
Creation date.
Modification date.
Color profile.
Software.
Device identifier.
Rachel understood none of it until Omar highlighted the editing application.
“This photograph was processed,” he said.
“Processed how?”
“We need to inspect the original layers before I can say exactly.
But the export record identifies a licensed editing environment.”
He enlarged the account name.
DREYNOLDS_STUDIO.
Rachel felt Lena’s hand settle on the back of her chair.
Daniel owned a commercial photography business called Reynolds Studio.
He photographed interiors for builders, architects, and real-estate agencies.
He was exceptionally good at digital compositing.
Rachel had watched him replace gray skies with blue ones, remove construction equipment from parking lots, and combine multiple exposures until an ordinary hotel lobby looked impossibly perfect.
“That’s his business account,” Rachel said.
Omar said nothing for several seconds.
Then he opened the alleged audit PDF.
Its metadata contained the same username.
So did a screenshot of the fake conversation with Dr.
Patel.
The export paths were different, but they all originated from the same workstation profile.
And one contained a directory name Daniel had apparently forgotten to remove.
CLIENT_COMPOSITES\RACHEL_CASE.
Mark leaned forward.
“Preserve everything.”
Omar nodded.
Rachel stared at the folder name.
A memory surfaced.
Two nights before her confession, she had walked past Daniel’s studio after midnight.
He had been sitting in darkness except for the glow of two monitors.
When he noticed her, he minimized a window too quickly.
At the time Rachel assumed he had discovered her old messages with Aaron and was reading them.
Now the creation timestamps suggested something else.
The first fabricated screenshot was created forty-three minutes after Rachel confessed.
The second was generated shortly after one in the morning.
The false medication audit was exported at 3:18.
Daniel had barely slept.
He had spent the night manufacturing a case.
Yet one detail troubled Omar.
The fake documents included an employee name Daniel should not have known: a pharmacy technician who had recently transferred units.
Rachel had never mentioned the technician at home.
“Has Daniel ever had access to any hospital computer?” Denise asked.
Rachel instinctively said, “No.”
Then she stopped.
Three months earlier, during an ice storm, she had brought home a hospital-issued laptop to complete mandatory training.
Daniel’s own computer was supposedly installing an update.
He had asked to use hers for five minutes to send a photography file.
Rachel had pushed the laptop toward him.
Then she went upstairs to shower.
“It was unlocked,” she whispered.
Hospital counsel immediately cautioned her not to guess about what Daniel might have done.
The security department pulled the laptop’s endpoint history.
No patient records had been opened.
No protected health information had been downloaded.
But a removable USB device had been connected for seventy-four seconds.
The hospital’s security software blocked file transfers from that type of drive automatically.
It also recorded the device identifier.
Rachel knew Daniel kept dozens of portable drives in his studio.
By afternoon, the matter had moved beyond hospital discipline.
St.
Catherine notified law enforcement regarding the fabricated hospital records and attempted external-device connection.
Rachel gave investigators every message Daniel had sent since her confession.
One stood out.
You should have kept this inside the family.
