Most Epstein documents show emails, flight logs, or legal filings. EFTA00109086.PDF is different. It's a forensic inventory list, a technical catalogue that shows exactly how investigators processed digital evidence in July and August 2019, right after Epstein's arrest.
The document lists 27 separate image files. The descriptions are clinical and direct. Each entry includes the same data points: an image identifier (sometimes a filename, sometimes a hexadecimal hash), a brief description, a creation timestamp with UTC offset, whether EXIF data exists, and if so, what camera took the photo.
Three Categories of Unknown Women
The document identifies three separate groups of images. The first group involves someone identified only as "SH" with nine photos dated July 9-10 and July 29, 2019. Seven show this person in various states of undress. Two note the person "potentially" is SH, suggesting even investigators weren't certain of identification in all images.
The second group involves "Unknown Woman 1" with a single photo. The description notes the woman is "half-naked" and on the floor. The timestamp shows August 8, 2019, more than three weeks after Epstein's arrest.
The third group is labeled "Unknown Woman 2" with a specific location note: "Photos appear to be taken at HUTCHINSON WHITESTONE." Six images follow, all described as taken in a motel room. The EXIF data is preserved and consistent across all six: they were shot on June 8, 2019, around 8:19-8:20 PM, using a Moto E5 Play phone.
What EXIF Data Reveals
EXIF data is metadata embedded in digital photos. Modern smartphones automatically record the date, time, location, and device model when you take a picture. The presence or absence of this data tells investigators something about how images were handled.
Nine photos in this document have no EXIF data. That's marked with a simple "N" in the column. Eighteen photos preserve their EXIF information, marked with "Y" and showing the original capture timestamp and camera model.
Every photo with preserved EXIF data shows the same device: a Moto E5 Play. This is a budget Android phone released in 2018, typically sold for under $100. It was marketed as a prepaid option through carriers like Cricket and Boost Mobile.
The timestamps create a strange pattern. Photos were captured on specific dates in June and July 2019. But the "Creation Date" column shows different dates in July and August, when investigators presumably processed or copied the files. The gap between when a photo was taken and when it entered the evidence system ranges from days to weeks.
The Timing Problem
Epstein was arrested on July 6, 2019. Look at the photo timestamps again. The "Unknown Woman 2" images were taken on June 8, about a month before arrest. The explicit photos labeled "Unknown Woman 3" were taken on July 1 (five days before arrest) and July 31 (25 days after arrest).
That July 31 date appears five times. All five photos are described as close-up intimate images. All show the same EXIF timestamp of around 12:54-1:50 AM. All were taken with the same Moto E5 Play.
Photos taken after July 6 could not have been taken by Epstein. He was in federal custody. Either these images came from someone else's device, or the EXIF timestamps are incorrect. The document offers no explanation.
The Hutchinson Whitestone Reference
One detail stands out: the note that photos "appear to be taken at HUTCHINSON WHITESTONE." This likely refers to the Hutchinson Metro Center or a similar location in the Whitestone area of Queens, New York. It's a specific geographic reference in an otherwise anonymous catalogue.
Why does this matter? It suggests investigators could identify locations from background details visible in the photos. That level of analysis indicates these weren't just collected as evidence. Someone examined them carefully enough to recognize furniture, walls, or windows distinctive to a particular motel.
What We Don't Know
The document raises more questions than it answers. Who is SH? Why are investigators uncertain about identification in some SH photos but confident in others? Who are Unknown Women 1, 2, and 3? Were they victims, witnesses, or something else?
Where did these images come from? A seized phone? A computer hard drive? Cloud storage? The document doesn't say. It only shows the images existed and were processed into evidence between July 1 and August 8, 2019.
Were these women interviewed? Did investigators identify them? The clinical tone of the document provides no context about whether these individuals were located, contacted, or considered relevant to criminal charges.
The Forensic Process on Display
What this document does show is the meticulous nature of digital forensics. Each image gets a unique identifier. Hash values (those long strings of letters and numbers) create digital fingerprints that prove a file hasn't been altered. Timestamps are preserved in UTC to avoid timezone confusion. Camera models are logged to establish provenance.
This is standard procedure for any digital evidence that might be used in court. Every file must be catalogued, verified, and tracked through a documented chain of custody. EFTA00109086.PDF is one page of what was surely a massive evidence processing operation in the summer of 2019.
The document also shows the human side of investigation. Someone had to view these images, write clinical descriptions, check metadata, and assign category labels. That person used phrases like "potentially SH" when uncertain, noted specific locations when recognizable, and maintained professional distance with terms like "intimate" and "explicit."
Why This Matters
Documents like this rarely appear in public records. They're internal working papers, the unglamorous backend of criminal investigation. They don't tell dramatic stories. They catalog evidence.
But that catalogue reveals investigative priorities. Someone thought these 27 images were significant enough to process formally, assign identifiers, and preserve metadata. These weren't accidental screenshots or irrelevant photos. They were evidence someone believed mattered.
The fact that three separate women are categorized as "unknown" more than suggests the investigation extended beyond identified victims. There were other women, other photos, other potential witnesses or victims who investigators tried to identify and locate.
For researchers examining the Epstein case, documents like EFTA00109086.PDF show the scope of evidence that existed beyond what reached public charging documents. They show the volume of digital material investigators processed and the technical methods used to preserve that evidence for potential prosecution.