EFTA00004800 DEEP DIVE: FBI Digital Evidence Directory
"Book 17" -- Seized Digital Media Thumbnail Catalog
Document: EFTA00004800
Source PDF: datasets/dataset3/VOL00003/IMAGES/0001/EFTA00004800.pdf
Total Pages: 98 (extracted as 98 individual PNG images)
Redaction Profile: 594 total redactions (52 bad/recoverable, 542 proper)
Companion Document: EFTA00004898 (77 pages, "Book" series continuing with PB/LSJ CLOUDS, PB SUNSET, CARNIVAL, B&W, LSJ ROOMS)
1. DOCUMENT OVERVIEW
EFTA00004800 is a
physical binder photographed page-by-page containing thumbnail contact sheets and photographs of CDs/DVDs seized from Jeffrey Epstein's properties. The document is labeled
"BOOK 17" on its cover page (page 1) and serves as an FBI evidence directory cataloging the contents of seized optical media.
The cover page (page 1) reveals the binder's organizational categories:
- LSJ/BOAT (Little Saint James island / boat)
- WEDDING/TUCKER/N SALEM (North Salem, NY -- subsequently identified as the "Kidd Wedding"; see Section 3D)
- BOOK 17 (sequential evidence binder number)
This document is part of a sequential series: EFTA00004663 is "Book 16" (containing LSJ BOAT VIEWS, MALLORCA, CANCER BENEFIT, LSJ XMAS 04, JEAN LUC ZORRO) and EFTA00005091 is "Book 20" (containing LSJ WATER, 29 BDAY, LSJ XMAS05, LSJ/PUERTO RICO/GUANA, PINTO HOUSE PICS, CLOUDS, BRAZIL, MISC, LSJ AERIAL, WALTER CRONKITE, ST. BARTS, CHATEAU VILLETTE, CHATEAU GUERAMENTES, LSJ SUNSETS, PARIS 07, TAOS SKIING).
Key Abbreviations Decoded
- LSJ = Little Saint James (Epstein's private island, USVI)
- GSJ = Great Saint James (Epstein's second island)
- PB = Palm Beach (Epstein's Florida residence)
- N SALEM / North Salem = North Salem, New York (Epstein-connected property)
- LSJE, LLC = Little Saint James Enterprises, LLC (6100 Red Hook Quarters, Suite B-3, St. Thomas, VI 00802)
- SK = Likely Shuliak, Karyna (Epstein's last girlfriend, Butterfly Trust beneficiary)
- MISC LSJ = Miscellaneous Little Saint James photos
2. PAGE-BY-PAGE CATEGORIZATION (98 Pages)
2A. Statistical Summary
| ITEM WAS NOT SCANNED (non-CSAM) | 19 | 8, 11, 13, 18, 23, 30, 37, 41, 46, 53, 58, 63, 68, 73, 77, 80, 85, 93, 97 |
| CD/DVD Physical Photos | 18 | 9, 10, 12, 14, 19, 24, 25, 31, 38, 42, 47, 54, 59, 64, 69, 74, 78, 81, 86, 87, 94, 98 |
| Thumbnail Contact Sheets | ~55 | All remaining pages |
The binder documents at least 23 optical media items (CDs and DVDs) that were seized but either not scanned or flagged as containing CSAM:
CSAM-Flagged Media (2 items):
Page 20: CSAM NOT SCANNED -- "Official DocLab Instruction(s) -- Revised March 10th, 2025." Handwritten note partially legible. This is a DocLab "kicksheet" -- a blue placeholder inserted where CSAM was found during scanning.
Page 79: CSAM NOT SCANNED -- "Official DocLab Instruction(s) -- Revised March 10th, 2025." Handwritten note reads what appears to be "Pict" (possibly "Pictures" or a count). Same kicksheet format.
DocLab Protocol Confirmed: The kicksheet system is explicitly documented in
EFTA00147819 (DS9, page 3), an email from an FBI DocLab technician to SDNY prosecutors dated July 12, 2019:
"There were some pornographic images of young girls. These were not imaged per our protocols. As you review the content anywhere these images may have been you will see a DocLab kicksheet that states 'possible child pornography' DO NOT SCAN. The original documents are still in their original location -- they were just not scanned."
A follow-up in October 2020 (EFTA00101087) confirmed: "There should have been kick sheets denoting where the pornographic images were removed, but a keyword search of the scan output for the Doclab form would confirm this."
Timeline Note: The revision date of March 10, 2025 on the CSAM sheets reflects ongoing re-review. The Epstein Estate discovered "new videos and photographs" on March 14, 2023 (
EFTA00144344), leading to a court-ordered CSAM review protocol. This aligns with
EFTA00039019's finding that CSAM was discovered during the 2023 estate settlement.
Comparison with EFTA00004898 (companion binder): That document has CSAM pages at pages 22 and 73 with handwritten notes specifying
"25 Thumbnails" and
"27 Thumbnails" respectively -- indicating the exact count of CSAM images found on those media. The
EFTA00004800 CSAM pages likely have similar counts but the handwritten notes are less legible in OCR.
Items Not Scanned (19 separate media):
| 8 | 2 CDs | Preceded by CD labeled "Max Wandtke" (p9) and CD labeled "pics" (p10) |
| 11 | DVD | Preceded by Apple DVD-R 4.7GB (p12) |
| 13 | CD | Preceded by CD-RW 700MB (p14) |
| 18 | CD | Preceded by "CL DataLifePlus" CD (p19) |
| 23 | 2 CDs | Preceded by CD labeled "SKBIRCS" (p24) and CD labeled "pics" (p25) |
| 30 | DVD | Preceded by Apple DVD-R 4.7GB (p31) |
| 37 | CD | Preceded by CD labeled "LSS" (p38) -- likely "LSJ" (Little Saint James) |
| 41 | CD | Preceded by CD labeled "LS) P2S" (p42) -- OCR garbled, likely "LSJ pics" |
| 46 | DVD | Preceded by DVD-R labeled "MISCLSJ" (p47) -- "Misc LSJ" (Miscellaneous Little Saint James) |
| 53 | DVD | Preceded by DVD-R with "LSJ" visible (p54) |
| 58 | CD | Preceded by Verbatim CD (p59) with handwritten text "FD" |
| 63 | DVD | Preceded by DVD-R with handwritten "1 9/05" (September 2005) (p64) |
| 68 | DVD | Preceded by DVD-R with "2 9/05" (September 2005) (p69) |
| 73 | DVD (labeled "DVP" -- likely typo for DVD) | Preceded by DVD-R with "4/05" (April 2005) (p74) |
| 77 | CD | Preceded by CD labeled "clouds" (p78) |
| 80 | 1 DVD + 1 CD | Preceded by combined media showing Apple DVD-R + Verbatim CD (p81) |
| 85 | 2 CDs | Preceded by NASHUA CD-R 80MIN (p86) + second NASHUA disc (p87) |
| 93 | Unspecified | Preceded by SONY CD-R 700MB labeled "wedding/ N. Salem" (p94) |
| 97 | DVD | Preceded by DVD-R 4.7GB 8x speed (p98) |
3. CRITICAL CONTENT ANALYSIS
3A. The "Grapes" Files (Page 17)
Image: extracted_images/EFTA00004800_p17_i0_c037f22b888b99af.png
Page 17 shows a thumbnail contact sheet with 4 large black rectangles (redacted/suppressed images) with visible filenames:
- grapes2 copy 1.jpg (alternate OCR: "grapes? copy 1.jpe")
- grapes6 copy.jpg (alternate OCR: "grapes? copy.jpa")
OCR full text: copys rapes? copy 1.jpe rapes grapes? copy.jpa grapes? copy 1. 'grapes3 copy.jpg
Analysis: These files are entirely blacked out (replaced with solid black rectangles). The naming convention "grapes[N] copy.jpg" strongly suggests a series of related images. The images were on a CD that immediately precedes the CSAM NOT SCANNED page (p20), placing them in the same evidence section as confirmed CSAM material. The "grapes" naming convention could be:
Code/euphemistic filename for illicit content
Actual grape photographs (but the complete redaction undermines this innocent interpretation)
Part of a series that was partially or wholly classified as CSAM
Context: Pages 15-17 contain a sequential series of files named "model_1.jpg" through "model_21.jpg" (pages 15-16) followed by the "grapes" files (page 17), followed by "ITEM WAS NOT SCANNED - CD" (page 18), then a CD photo (page 19), then
CSAM NOT SCANNED (page 20). This sequence suggests these files were on the same CD or adjacent CDs in the binder, and the entire section was ultimately flagged.
3B. The "Model" Files (Pages 15-16)
Images:
extracted_images/EFTA00004800_p15_i0_a060f0f5c5b92f90.png
extracted_images/EFTA00004800_p16_i0_507fe7d693a838d8.png
Pages 15-16 display a sequential series of 21 files named:
- model_1.jpg through model_11.jpg (page 15, 12 thumbnails in grid)
- model_12.jpg through model_21.jpg (page 16, 9 thumbnails)
All thumbnails are blacked out (solid black rectangles), indicating the content was suppressed/redacted. The "model_" naming prefix is concerning given Epstein's documented use of MC2 Model Management and his pattern of recruiting young women under the guise of modeling.
Critical proximity: These "model" files appear on the
same CD as the "grapes" files and are in the section immediately preceding CSAM NOT SCANNED material.
3C. "SK Pics" (Page 22)
Image: extracted_images/EFTA00004800_p22_i0_910c719d9f231cb8.png
Page 22 is labeled "SK pics" at the top and contains a grid of thumbnail photographs (DSC00941.JPG through DSC00955.JPG). Many thumbnails show what appear to be stone or brick surfaces/walls (possibly property photos), with some showing outdoor scenes. Some thumbnails are partially obscured.
"SK" identification: Based on the broader evidence corpus, "SK" most likely refers to
Karyna Shuliak -- Epstein's last known girlfriend who was:
- Resident at 301 E 66th St APT 8H (same building as MC2, Barak apartment, and corporate entities)
- Connected to Lithuanian ballet payments via Gratitude America
3D. "North Salem / Kidd Wedding / Tucker" Content (Pages 88-96)
Images:
extracted_images/EFTA00004800_p88_i0_154639b81c3313e4.png
extracted_images/EFTA00004800_p91_i0_75b614f6437eb59a.png
extracted_images/EFTA00004800_p94_i0_10ef8bf19d467b1e.png
Pages 88-92 show extensive thumbnail contact sheets labeled "North Salem / Kidd Wedding / Tucker" (full label confirmed via OCR in EFTA00245479-EFTA00245483, DS9). The cover page could only be read as "WEDDING/TUCKER/N SALEM" -- the "Kidd" wedding family name was obscured. Photos are from what appears to be an outdoor event/wedding at a property in North Salem, New York. The camera filenames include both CIMG (Casio camera) and DSC (Sony/Nikon camera) prefixes:
- CIMG0528-CIMG0566 (pages 88-90)
- DSC01734-DSC01764 (pages 90-92)
Page 89 notably includes 3 video files (AVI format): CIMG0554.AVI, CIMG0555.AVI, CIMG0556.AVI -- indicating video was also captured at this event.
Page 94 shows the physical CD: a SONY CD-R 700MB with handwritten label "wedding/ N. Salem" -- confirming the North Salem connection.
North Salem geographic context: North Salem is a town in Westchester County, NY. DS9 email chains (48 documents) confirm the Dubin family's North Salem/South Salem residence and Epstein's direct involvement in staffing it:
- EFTA00396552 (Jan 2013): Lesley Groff staffing Eva Dubin's South Salem caretaker position
- EFTA00823233 (Jul 2016): Epstein to Eva Dubin offering his own employee Janusz Banasiak for North Salem
- EFTA01058334 (Dec 2016): Eva Dubin: "interested in exploring Janusz and Ofelia taking a couples position in North Salem"
- EFTA00784306 (Mar 2019): Epstein iMessage references being "In North Salem"
Whether the "Kidd Wedding" was a Dubin family event or a separate North Salem event remains unclear, but the geographic connection to the Dubin property is established.
3E. "Max Wandtke" CD (Page 9)
Image: extracted_images/EFTA00004800_p9_i0_5fec0e4fb2494b7b.png
Page 9 shows a CD with the handwritten name "Max Wandtke" clearly visible. This CD was part of a pair (the "2 CD'S" referenced in the NOT SCANNED notice on page 8).
Confirmed ghost: "Wandtke" returns zero results across the entire 1,380,937-document corpus (all 12 datasets). The name exists only on this physical CD label. No emails, financial records, or FBI reports reference this person. This is consistent with the ALEXANDER_WANDTKE_NSALEM_INVESTIGATION.md finding that Max Wandtke is identifiable only by this single CD label.
3F. Email Files (Page 7)
Page 7 contains thumbnail images with filenames:
These appear to be screenshots or exports of emails, suggesting the CDs also contained email correspondence in addition to photographs.
3G. "Save" Series Files (Page 6)
Page 6 contains files named:
Additional "Save" files appear on page 6 in the analysis context as "Save000" prefixed files. These appear to be digital saves/exports, possibly from a web browser or other application. The analysis notes these are in "Print File" format, part of a forensic or investigative report format, with people photographed who have their faces obscured by black bars.
- Apple DVD-R 4.7GB (multiple: pages 12, 31, 47, 54, 64, 69, 74, 81, 98)
- Philips CD-R80 48x 700MB (page 10)
- Sony CD-R 700MB (page 94)
- Verbatim CD (pages 59, 81)
- NASHUA CD-R 80MIN (pages 86-87)
- CL DataLifePlus (page 19)
- CD-RW 700MB 48x (page 14)
4B. Camera Sources Identified
From the thumbnail filenames across the binder, at least 4 different cameras were used:
DSCF prefix (Fujifilm) -- DSCF0001_1.TIF through DSCF0145+, multiple series
DSC prefix (Sony/Nikon) -- DSC00482 through DSC01764+, extensive series
CIMG prefix (Casio) -- CIMG0154 through CIMG0566+, used at North Salem
IMG prefix -- IMG_1988 through IMG_2001+ (page 2)
Several DVDs have handwritten dates:
- "4/05" (April 2005) -- page 74
- "1 9/05" (September 2005, disc 1) -- page 64
- "2 9/05" (September 2005, disc 2) -- page 69
These dates place the content creation in 2005, during the period when Palm Beach Police were beginning their investigation (which formally started in March 2005 when a woman reported that her 14-year-old stepdaughter had been taken to Epstein's home).
4D. Handwritten Labels on CDs/DVDs
| 9 | "Max Wandtke" | Person name |
| 38 | "LSS" (likely "LSJ") | Little Saint James |
| 42 | "LS) P2S" (garbled OCR) | Likely "LSJ pics" |
| 47 | "MISCLSJ" | Miscellaneous Little Saint James |
| 54 | "LSJ" | Little Saint James |
| 64 | "1 9/05" | September 2005, disc 1 |
| 69 | "2 9/05" | September 2005, disc 2 |
| 78 | "clouds" | Cloud/sky photographs |
| 94 | "wedding/ N. Salem" | Wedding at North Salem |
5. CONTENT THEMES FROM THUMBNAIL ANALYSIS
5A. Boats and Water Activities (Pages 26-29, 43-52)
Multiple pages show extensive boat photography (sailboats, jet skis, water activities) at what appears to be a Caribbean location (consistent with Little Saint James). Pages 48-51 show jet ski activity with faces obscured by black bars.
5B. People with Obscured Faces (Multiple Pages)
Pages 6, 7, 32, 35, 36, 40, 44, 48-51, 60, 82-84 show photographs of people with faces deliberately obscured (black squares/bars). This represents the FBI/DocLab redaction process for privacy/legal reasons. Analysis notes:
- People in swimsuits and casual attire (pp. 35, 48-49)
- People in hotel rooms, including with beds (pp. 60, 82)
- People on boats (pp. 26-27, 35)
- People in indoor settings, including bedrooms (pp. 7, 39-40, 60)
- People lying on beds with bodies partially covered by blankets (p. 60)
5C. Property/Interior Photographs (Pages 39-40, 55-56)
Contact sheets showing interior spaces, furniture, rooms -- consistent with property documentation of Epstein residences.
5D. Aerial/Cloud Photography (Pages 33, 75-76, 78)
Sky and cloud photographs taken from aircraft, plus a CD specifically labeled "clouds." Multiple pages of aerial/cloud photography suggest either artistic interest or documentation of travel routes.
5E. North Salem/Wedding Event (Pages 88-96)
Extensive documentation of an outdoor event at North Salem, NY, including both still photos (CIMG and DSC series) and video files (3 AVI files on page 89).
5F. Black Rectangles / Suppressed Content
Multiple pages show thumbnails replaced entirely by black rectangles, particularly:
- Pages 3-5: DSCF series (yellow sticky notes visible, all thumbnails blacked)
- Pages 15-17: model_1-21.jpg and grapes files (ALL blacked out)
- Pages 57, 61-62, 65, 67, 71-72: Various DSCF series files (many blacked)
The systematic blacking out of these specific thumbnails (while others on nearby pages show visible content) indicates targeted suppression of particular images -- likely those containing nudity, potential victims, or CSAM.
6. THE 22-BOX EVIDENCE SCANNING PROJECT
DS9 contains the complete email chain documenting the SDNY/DocLab evidence scanning operation that produced these binders (EFTA00147819 and related documents):
| June 27, 2019 | SDNY prosecutors contact DocLab: "approximately 23 boxes of papers... two boxes from FBI case file 72-MM-113327 and the remainder from FBI case file 31E-MM-108062" |
| July 2, 2019 | DocLab: "How much wiggle room can I get on the deadline... boxes going from 15 to 22" |
| July 3, 2019 | "22 boxes about 5 minutes ago. We discovered that the Miami Field Office had requested DocLab to scan a number of them back in 2013" |
| July 9, 2019 | "We finished inventorying all 22 boxes and released everything to DocLab last evening for scanning" |
| July 12, 2019 | Scanning complete. "Pornographic images of young girls" flagged with kicksheets. "Discs scattered throughout" -- copied 4x each (standard: defense, AUSA, Agent, backup). |
| July 15, 2019 | SDNY asks about locating unscanned images; confirms 55 discs will be reviewed separately |
| July 25, 2019 | SDNY follows up: "Want to very briefly check in with you before giving the 55 discs to our vendor here" |
| October 12, 2020 | Maxwell case discovery follow-up: "DocLab unit chief" contacted about kick sheets and disc labeling |
Case files identified:
- 31E-MM-108062: Main Epstein/Maxwell investigation (WSTA -- Child Prostitution, FBI Miami)
- 72-MM-113327: Alfredo Rodriguez obstruction case (2 of 22 boxes)
The discs found in the boxes "contain pdfs (searchable), jpgs, gifs, and tif files" -- these were not processed, just physically copied 4x. The Book 17 binder CDs/DVDs would be among the 55 discs referenced.
BALEEN SWEEP Connection
The same DocLab facility (170 Marcel Drive, Winchester, Virginia 22602) processed the 2010 Alfredo Rodriguez evidence via "BALEEN SWEEP" operation -- 15+ DS9 documents (EFTA00108625-EFTA00108746) document the scanning of Rodriguez address book toll records, forwarded to the Special Technologies and Applications Office (STAO). This connects the 2010 evidence processing to the same facility that later processed the 22 boxes in 2019.
7. EVIDENCE CHAIN AND CSAM FINDINGS
CSAM Item 1 (Page 20):
- Preceding content: Pages 15-17 show "model_1.jpg" through "model_21.jpg" and "grapes" series -- ALL blacked out
- Preceding CD: Page 19 shows "CL DataLifePlus" CD
- Preceding NOT SCANNED: Page 18 indicates an unscanned CD
- CSAM sheet: Blue DocLab placeholder, March 2025 revision
- Following content: Pages 21-22 show DSC00821-DSC00955 series, labeled "SK pics"
This places the "model" and "grapes" files in direct proximity to confirmed CSAM, strongly suggesting they were on the same CD or the immediately adjacent CD in the evidence sequence.
CSAM Item 2 (Page 79):
- Preceding content: Pages 75-76 show cloud photographs (DSC00482-DSC00502)
- Preceding CD: Page 78 shows CD labeled "clouds"
- Preceding NOT SCANNED: Page 77 indicates unscanned CD
- CSAM sheet: Blue DocLab placeholder, March 2025 revision, handwritten note "Pict" (possibly picture count)
- Following content: Pages 80-84 show NOT SCANNED (1 DVD + 1 CD), then photos including people at locations
EFTA00004898">7B. Cross-Reference with EFTA00004898
The companion binder EFTA00004898 (77 pages) has its own organizational categories:
- PB/LSJ CLOUDS, PB SUNSET, LSJ, MISC, CARNIVAL, B&W, LSJ ROOMS
EFTA00004898 has
2 additional CSAM pages:
- Page 22: CSAM NOT SCANNED -- handwritten "25 Thumbnails"
- Page 73: CSAM NOT SCANNED -- handwritten "27 Thumbnails"
Combined, the two binders document 4 CDs/DVDs containing confirmed CSAM with at least 52 thumbnails identified (25+27 from EFTA00004898; counts not fully legible for EFTA00004800).
7C. Alignment with Known Evidence Findings
This finding aligns with:
- EFTA00038617 (FBI CID summary, approved 7/17/2024): "small number of CSAM images found on one of Epstein's devices"
- EFTA00039019: CSAM found during 2023 estate settlement -- missed in initial 2019-2021 evidence processing
- EFTA02730741: CD labeled "girl pics nude book 4" in evidence
- EFTA00024584: "Nudes 1" and "Girl pics nude" found in locked safe, some appearing underage
- EFTA00020974: "Highly confidential responsive material" (nude/semi-nude images/videos) from 14 devices compiled Jan 2021
CSAM Legal Context: A 55-page legal filing from the Marsh Law Firm (
EFTA00144344) to the FBI Director, Inspector General, and Attorney General documents the full CSAM investigation timeline: 1996 FBI report by victim documenting CSAM concerns, 2005 child erotica found in Palm Beach home, 2008 investigation ended "prematurely" per OPR Report, and 2023 estate discovery of new videos and photographs leading to a court-ordered CSAM review protocol. A separate Notice of Claim (
EFTA00143419) references the FBI's failure to investigate Epstein's CSAM crimes and the "premature" truncation of the 2008 investigation.
The "Book 17" binder is part of the physical evidence documentation system. The CSAM designations on pages 20 and 79 were applied through the DocLab kicksheet protocol confirmed in EFTA00147819.
EFTA00004800):">Book 17 (EFTA00004800):
- 19 "ITEM NOT SCANNED" pages documenting approximately 23 individual media items:
- 8 DVDs
- 8 CDs (including 3 multi-CD sets: "2 CD'S" x2 and "1 DVD / 1 CD" x1)
- 2 CSAM items (type unspecified on placeholder sheets)
- 1 unspecified item (page 93)
EFTA00004898):">Book continuation (EFTA00004898):
- 12 "ITEM NOT SCANNED" pages plus 2 CSAM pages
- Includes sets of "5 DVD'S" (p58) and "5 CD's" (p64)
Combined across both binders: ~50+ individual optical media items were either not scanned or flagged as CSAM. This represents a significant volume of unprocessed digital evidence from Epstein's seized property.
9. THE "MISCLSJ" DVD (Page 47)
Image: extracted_images/EFTA00004800_p47_i0_90467929ed3bb30c.png
This Apple DVD-R is clearly labeled "MISCLSJ" -- "Miscellaneous Little Saint James." Its content pages (48-52) show:
- Jet ski activities with face-obscured individuals (pp. 48-49)
- Inflatable water toys, a dog on a beach (p. 50)
- Water activities with life jackets (p. 51)
- Final dog photos on sandy beach (p. 52)
This represents typical leisure photography from Epstein's private island, including unidentified individuals.
10. VIDEO FILES DOCUMENTED
Page 89 reveals 3 AVI video files in the North Salem/Wedding series:
These video files are interspersed among still photos (CIMG0546-CIMG0561), indicating they were captured by the same Casio camera during the wedding event. The CIMG prefix and AVI format are characteristic of Casio Exilim digital cameras from the 2004-2006 era.
11. KEY FINDINGS SUMMARY
CSAM protocol confirmed by direct evidence: DocLab technician email (EFTA00147819) explicitly states: "There were some pornographic images of young girls. These were not imaged per our protocols... you will see a DocLab kicksheet that states 'possible child pornography' DO NOT SCAN." The CSAM NOT SCANNED pages (20, 79) in this binder are confirmed instances of these kicksheets. Combined with EFTA00004898, at least 4 CDs/DVDs across the two binders contained CSAM.
"model_1.jpg" through "model_21.jpg" -- 21 completely blacked-out image files in immediate proximity to CSAM-flagged media, with filenames suggesting "modeling" photographs. Given Epstein's MC2 recruitment of minors ages 13-20, these files warrant particular scrutiny.
"grapes" series files -- 4+ completely blacked-out images with unusual filenames ("grapes7 copy.jpg" etc.) on the same CD section as CSAM. No document in the full 1.38M-document corpus references this naming convention; the filenames remain unexplained.
~50+ optical media items across two binders were never fully scanned during evidence processing. These were among the 55 discs found during the 22-box scanning operation that were copied 4x but not digitally processed.
"SK pics" likely documents Karyna Shuliak (Epstein's last girlfriend/Butterfly Trust beneficiary), connecting this evidence binder to the broader network.
Dates on media (April and September 2005) place content creation during the period when the Palm Beach Police investigation was beginning, meaning Epstein was still actively creating and organizing this content even as law enforcement was closing in.
Multiple LSJ (Little Saint James) labeled media confirm these are photographs from Epstein's private island, documenting activities with unidentified individuals whose faces have been systematically obscured.
Wedding identified as "Kidd Wedding" at North Salem, NY -- full CD label "North Salem/Kidd Wedding/Tucker" confirmed via DS9 OCR. North Salem is established as the area of the Dubin family property, where Epstein actively staffed positions.
Max Wandtke confirmed as total ghost across 1,380,937 documents. The name exists only on the physical CD label.
The 22-box evidence processing chain is now fully documented: 22 boxes scanned June-July 2019, 55 discs extracted, DocLab kicksheets inserted for CSAM, same DocLab facility that processed the 2010 Rodriguez evidence via BALEEN SWEEP.
APPENDIX A: Complete Image File Inventory
All 98 extracted images are stored at:
extracted image EFTA00004800_p[N]_i0_[hash].png
Key images for further review:
- p1 (cover/index):
EFTA00004800_p1_i0_ed10dd532ecd0f16.png
- p15 (model files):
EFTA00004800_p15_i0_a060f0f5c5b92f90.png
- p16 (model files cont.):
EFTA00004800_p16_i0_507fe7d693a838d8.png
- p17 (grapes files):
EFTA00004800_p17_i0_c037f22b888b99af.png
- p20 (CSAM sheet 1):
EFTA00004800_p20_i0_def6e7d6825c30b1.png
- p22 (SK pics):
EFTA00004800_p22_i0_910c719d9f231cb8.png
- p47 (MISCLSJ DVD):
EFTA00004800_p47_i0_90467929ed3bb30c.png
- p79 (CSAM sheet 2):
EFTA00004800_p79_i0_2a1db5e1f3eb1095.png
- p88 (North Salem/Wedding):
EFTA00004800_p88_i0_154639b81c3313e4.png
- p94 (wedding CD):
EFTA00004800_p94_i0_10ef8bf19d467b1e.png
APPENDIX B: Cross-Reference Documents
| ------------- | ------------- |
| EFTA00004898 | Companion binder (PB/LSJ CLOUDS, CARNIVAL, etc.) |
| EFTA00020974 | "Highly confidential responsive material" from 14 devices |
| EFTA00147819 | DocLab CSAM kicksheet protocol confirmed; 22-box scanning timeline |
| EFTA00101087 | DocLab Oct 2020 follow-up: kick sheets for Maxwell discovery |
| EFTA00143419 | Notice of Claim: FBI CSAM investigation failures |
| EFTA00144344 | 55-page legal filing: March 2023 CSAM discovery, court-ordered protocol |
| EFTA00245479 | OCR confirming "North Salem/Kidd Wedding/Tucker" CD label |
| EFTA00396552 | Groff staffing Eva Dubin's South Salem caretaker position |
| EFTA01058334 | Eva Dubin: Janusz/Ofelia couples position in North Salem |
| EFTA00108625 | BALEEN SWEEP: Rodriguez address book toll records at DocLab |
Report generated: 2026-02-08, updated 2026-02-12 with full corpus integration
Source databases: image catalog database, OCR text extraction database, primary document text database, full_text_corpus.db (1,380,937 docs across 12 datasets)
98 pages visually examined and cataloged