               Case: 16-16652       Date Filed: 04/05/2018      Page: 1 of 17


                                                                                 [PUBLISH]



                 IN THE UNITED STATES COURT OF APPEALS

                           FOR THE ELEVENTH CIRCUIT
                             ________________________

                                    No. 16-16652
                              ________________________

                     D.C. Docket No. 3:15-cr-00012-TCB-RGV-1



UNITED STATES OF AMERICA,

                                                        Plaintiff - Appellee,

versus

CHARLES CARROLL,

                                                        Defendant - Appellant.

                              ________________________

                     Appeal from the United States District Court
                        for the Northern District of Georgia
                           ________________________

                                      (April 5, 2018)

Before WILSON and DUBINA, Circuit Judges, and GOLDBERG, ∗ Judge.

WILSON, Circuit Judge:


∗
 Honorable Richard W. Goldberg, Judge for the United States Court of International Trade,
sitting by designation.
             Case: 16-16652     Date Filed: 04/05/2018   Page: 2 of 17


      This case involves the dissemination of child pornography through a peer-to-

peer file sharing program called Ares. A jury convicted appellant Charles Carroll

of knowingly possessing and distributing hundreds of images and videos depicting

the sexual exploitation of minors, 18 U.S.C. §§ 2252(a)(4)(B), (a)(2), some of

whom were less than twelve years old. The district court applied five Guidelines

enhancements and sentenced Carroll to 150 months in prison.

      This appeal requires us to determine whether a lawful warrant supported the

search of Carroll’s home, whether the government put forth sufficient evidence to

sustain his convictions, and whether the district court properly enhanced his

sentence. Upon thorough review of the record and with the benefit of oral

argument, we affirm in part, but we reverse Carroll’s distribution conviction

because the government failed to put forth any evidence that Carroll knew

downloaded files were automatically placed into a shared folder accessible to the

Ares peer-to-peer network.

                                         I.

      On October 22, 2014, the Georgia Bureau of Investigation (GBI) seized two

laptops and an external hard drive from Carroll’s Newnan, Georgia home.

Forensic analysis later revealed that one of the laptops, a Dell, held 314 images and

65 videos of child pornography in its “unallocated space”—a place where deleted

files can still be retrieved using special software. Those files were downloaded


                                          2
                Case: 16-16652        Date Filed: 04/05/2018       Page: 3 of 17


from the peer-to-peer file sharing program Ares over the course of the previous

eleven months. Some of the files had been downloaded and deleted, along with the

Ares program itself, just days before the laptop’s seizure.

       Peer-to-peer networks like Ares are “so called because users’ computers

communicate directly with each other, not through central servers.” Metro-

Goldwyn-Mayer Studios Inc. v. Grokster, Ltd., 545 U.S. 913, 919–20, 125 S. Ct.

2764, 2770 (2005). This decentralized system allows users to search for files

across the peer-to-peer network and then to download files directly from the

computers of other users. Ares, like many peer-to-peer programs before it,1 is

available for free over the internet and is commonly used to share music and

videos. When downloaded, Ares sets up a shared folder on the computer where, by

default, it automatically places all subsequent downloads. Once a file is placed in

the shared folder, it is immediately available for further dissemination.

       Unless an Ares user changes the default settings or deliberately moves files

out of the shared folder, downloaded files will remain freely accessible to anyone

else on the Ares network—including the GBI Internet Crimes Against Children


1
  Peer-to-peer file sharing programs attracted hundreds of millions of users in the early 2000s,
but have struggled to find legal footing because they often facilitate the unauthorized distribution
of copyrighted material. See Grokster, 545 U.S. at 918–20, 125 S. Ct. at 2770–71; see also
Clyde Haberman, Grappling with the ‘Culture of Free’ in Napster’s Aftermath, N.Y. TIMES
(Dec. 7, 2014), https://www.nytimes.com/2014/12/08/technology/grappling-with-the-culture-of-
free-in-napsters-aftermath.html?_r=0; Josh Halliday, LimeWire Shut Down by Federal Court,
GUARDIAN (Oct. 27, 2010), https://www.theguardian.com/technology/2010/oct/27/limewire-
shut-down.
                                                 3
               Case: 16-16652       Date Filed: 04/05/2018      Page: 4 of 17


Task Force. About a month before the GBI searched Carroll’s home, an agent

tapped into the Ares network and discovered twenty-two “files of interest”2 that

were being shared from Carroll’s IP address. Disguised as an Ares peer, the agent

downloaded two videos directly from Carroll’s computer, both of which contained

child pornography. After tracing the IP address to Carroll’s internet service

account registered to his home in Newnan, the GBI sought out and received a

warrant from the Georgia Superior Court, which it executed at Carroll’s home on

the morning of October 22.

       Eight months later, a federal grand jury charged Carroll with one count of

knowingly distributing a visual depiction of a minor engaged in sexually explicit

conduct, 18 U.S.C. § 2252(a)(2), (b)(1), and one count of knowingly possessing a

visual depiction of a minor engaged in sexually explicit conduct, 18 U.S.C.

§ 2252(a)(4)(B), (b)(2). Carroll filed a motion to suppress the evidence seized

from his home, which the district court denied. A jury found Carroll guilty on both

counts and made a special finding that Carroll possessed materials involving the

sexual exploitation of a minor under the age of twelve. At sentencing, the district

court applied five Guidelines enhancements, finding that: (1) the images depicted


2
  The GBI matched the Secure Hash Algorithm Version 1 (SHA-1) values of these files with the
SHA-1 values of files known to contain child pornography. An SHA-1 value is a digital
fingerprint unique to each file, which provides a means of identification that is extremely
accurate and difficult to alter. The GBI, in cooperation with other agencies throughout the
country, keeps a list of the SHA-1 values of known child pornography series. This allows it to
cross-check the SHA-1 values in search results with its list to identify files of interest.
                                               4
              Case: 16-16652     Date Filed: 04/05/2018    Page: 5 of 17


minors under twelve; (2) the images portrayed sadistic or masochistic conduct or

violence; (3) the offense involved 600 or more images; (4) the offense involved use

of a computer service; and (5) Carroll’s testimony at trial obstructed justice. This

produced a guideline range of 210 to 262 months; the district court sentenced

Carroll to 150 months’ imprisonment.

                                          II.

      We review de novo whether a search warrant is supported by probable

cause, accepting the factual findings of the district court unless clearly erroneous.

United States v. Brundidge, 170 F.3d 1350, 1352 (11th Cir. 1999) (per curiam).

Likewise, we review de novo whether a warrant lacked the particularity required

by the Fourth Amendment. United States v. Bradley, 644 F.3d 1213, 1258–59

(11th Cir. 2011). “We review the sufficiency of evidence to support a

conviction de novo, viewing the evidence in the light most favorable to the

government and drawing all reasonable inferences and credibility choices in favor

of the jury’s verdict.” United States v. Taylor, 480 F.3d 1025, 1026 (11th Cir.

2007).

      We review the district court’s application of the Guidelines de novo and its

findings of fact for clear error. United States v. Smith, 231 F.3d 800, 806 (11th

Cir. 2000). Because Carroll argues for the first time on appeal that the district

court erred in applying a sentencing enhancement for possession of more than 600


                                           5
              Case: 16-16652      Date Filed: 04/05/2018    Page: 6 of 17


images involving the sexual exploitation of a minor, U.S.S.G. § 2G2.2(b)(7), we

will review the application of that enhancement for plain error. United States v.

Rodriguez, 398 F.3d 1291, 1298 (11th Cir. 2005). Plain error review requires a

showing that (1) there was an error; (2) it was plain; (3) it affected substantial

rights; and (4) it seriously affected the fairness, integrity, or public reputation of

judicial proceedings. Id.

                                           III.

      Our discussion is divided into three parts. First, we address whether the

warrant authorizing the search of Carroll’s home met the requirements of the

Fourth Amendment. Next, we consider the sufficiency of the evidence to support

his possession and distribution convictions. Third, and finally, we review his

sentence.

                                           A.

      We turn first to Carroll’s claim that the district court erred in denying his

motion to suppress the evidence obtained from his home. Carroll argues both that

the warrant was unsupported by probable cause and that it abridged the Fourth

Amendment’s particularity requirement.

       “Probable cause to support a search warrant exists when the totality of the

circumstances allow[s] a conclusion that there is a fair probability of finding

contraband or evidence at a particular location.” Brundidge, 170 F.3d at 1352.


                                            6
              Case: 16-16652     Date Filed: 04/05/2018    Page: 7 of 17


“We give great deference to a lower court’s determination of probable

cause.” Bradley, 644 F.3d at 1263. The Fourth Amendment also requires a

warrant to “particularly describ[e] the place to be searched, and the persons or

things to be seized.” U.S. CONST. amend. IV. Thus, “[a] warrant which fails to

sufficiently particularize the place to be searched or the things to be seized is

unconstitutionally over broad,” and any evidence seized from the resulting search

must be excluded from trial. United States v. Travers, 233 F.3d 1327, 1329 (11th

Cir. 2000). While a search warrant must contain sufficient specificity to guard

against a general search, “the test is the reasonableness of the description.

Elaborate specificity is unnecessary.” United States v. Strauss, 678 F.2d 886, 892

(11th Cir. 1982).

      We find that the evidence contained in the affidavit supporting the warrant,

in conjunction with the testimony of the investigating agents, strongly supported a

conclusion that evidence of child pornography would be found at Carroll’s home.

The affiant, GBI Agent Sara Thomas, had seven years of experience in the GBI

and was specially trained in computer investigations involving crimes against

children. In the affidavit, she explained how the file sharing program Ares works

and detailed how the GBI used Ares to download two files of interest—identified

by their SHA-1 values as known child pornography files—from an IP address

traced to Carroll’s internet service provider. Agent Thomas then testified that she


                                           7
             Case: 16-16652     Date Filed: 04/05/2018    Page: 8 of 17


viewed the two video files, and that she “knows from training and experience both

to contain images of child pornography.” She supported this conclusion with a

description of the videos’ SHA-1 values and file names:

             1. !new pthc dark studio]227.mpg !

             2. new ! (pthc) veronika little sister bj and cum inside

             mouth.wmv

She then explained how the acronym “PTHC,” contained in both file names, stands

for “pre-teen hard core,” and is commonly used in searches to identify child

pornography files.

      Carroll contends that the Superior Court wholly abandoned its role in

accepting these allegations without further scrutiny of the content of the files. We

disagree. The Supreme Court has made it clear that an issuing magistrate is not

required to personally view obscene material in order to make a probable cause

determination. See New York v. P.J. Video, Inc., 475 U.S. 868, 874 n.5, 106 S. Ct.

1610, 1614 n.5 (1986); see also United States v. Smith, 459 F.3d 1276, 1291 n.15

(11th Cir. 2006). And Agent Thomas, who possessed advanced technical

proficiency and extensive experience investigating child exploitation, supported

her testimony about the content of the videos with evidence of the matching SHA-

1 values and graphic file names. While it may have been prudent to provide a

more specific description of the content of the videos, we find that under these


                                          8
              Case: 16-16652     Date Filed: 04/05/2018   Page: 9 of 17


circumstances the evidence and testimony contained in the affidavit supported a

finding of probable cause.

      We also conclude that the warrant satisfied the Fourth Amendment’s

particularity requirement. The warrant detailed the types of items to be seized at

Carroll’s home, all of which were reasonably tailored to the child pornography

investigation. Carroll contends that the warrant permitted a general search of his

home, but the warrant afforded the officers little latitude when it authorized the

seizure of computers, related storage devices, and other media which might contain

evidence of child pornography. The warrant was supported by probable cause, and

the warrant reasonably described the place to be searched and the items to be

seized. Accordingly, we affirm the denial of the motion to suppress the evidence

seized during its execution.

                                          B.

      Next, we address Carroll’s sufficiency of the evidence claims. Under 18

U.S.C. §§ 2552(a)(2) and 2552(a)(4)(B), it is unlawful for any person to knowingly

possess or distribute, using any means or facility of interstate commerce, a visual

depiction of a minor engaging in sexually explicit conduct. Carroll concedes that

images depicting minors engaged in sexually explicit conduct were shared from his

computer. The only issues before us are whether Carroll knowingly possessed and

knowingly distributed those images.


                                          9
             Case: 16-16652     Date Filed: 04/05/2018    Page: 10 of 17


   1. Possession

      Carroll first argues that because the child pornography files were discovered

in the unallocated space of his computer when seized by the GBI, he cannot be

held liable for knowingly possessing them without some further proof that he had

the technological savvy to access them. He likens his case to several from our

sister circuits that involved unwitting defendants whose computers automatically

cached images from websites. See United States v. Dobbs, 629 F.3d 1199 (10th

Cir. 2011); United States v. Kuchinski, 469 F.3d 853 (9th Cir. 2006). We are

unconvinced by the comparison, and find that the evidence supports a conclusion

that Carroll knowingly possessed the files found on his computer.

      Child pornography was regularly downloaded to Carroll’s Dell laptop over

an eleven-month period. Carroll was home with exclusive control of his laptop

during much of that time. Carroll lived alone. The only other people with access

to his house were his mother and, on limited occasions, a cat sitter. The record

shows that Carroll’s Dell laptop was used to download child pornography on the

same day it was used to file Carroll’s tax return, that Carroll was travelling and

without internet service during a notable gap in the sequence of child pornography

downloads, and that Carroll’s cat sitter did not know the password to the Dell

laptop.




                                          10
              Case: 16-16652   Date Filed: 04/05/2018   Page: 11 of 17


      This is not a case of errant Googling and undetectable automatic-cache

functions. Cf. Dobbs, 629 F.3d at 1204; Kuchinski, 469 F.3d at 862–63. Child

pornography files were deliberately downloaded to the computer’s hard drive.

Obtaining the files required the predicate manual acts of downloading a peer-to-

peer file sharing program, searching for files on the peer-to-peer network (using

terms like “PTHC” calculated to return child pornography results), and then

initiating—on 379 occasions—a file download. Carroll’s argument—that he

cannot be held liable for possessing the files because the files were deleted—asks

us to create a perverse safe harbor for those in possession of child pornography. It

also misses the point. The evidence proves that hundreds of images and videos of

child pornography were manually downloaded and readily accessible while Carroll

had exclusive control over his computer. Unlike in the cases on which Carroll

relies, this evidence is probative of the question of knowing possession. Cf.

Dobbs, 629 F.3d at 1205. Accordingly, we affirm his Section 2552(a)(4)(B)

conviction.

   2. Distribution

      The distribution conviction is another matter. Carroll argues that the

government failed to present any evidence that he knew he was sharing child

pornography files when they were automatically placed in a shared folder, and that




                                         11
             Case: 16-16652      Date Filed: 04/05/2018    Page: 12 of 17


he cannot be held liable for knowing distribution without some showing that he

consciously allowed others to access those files. We agree.

      Knowingly placing or leaving files in a shared folder connected to a peer-to-

peer network undoubtedly constitutes distribution under 18 U.S.C. § 2252(a)(2).

But Congress elected to proscribe only those acts of distribution that are

accomplished with the requisite state of mind, and it is the government’s burden to

prove the statute’s knowledge requirement beyond a reasonable doubt. This it did

not do.

      Nothing in the record demonstrates that Carroll intended to share files or that

he was even aware that the contents of his Ares folder were automatically

distributed to the peer-to-peer network. See United States v. Chiaradio, 684 F.3d

265, 282 (1st Cir. 2012) (“When an individual consciously makes files available

for others to take and those files are in fact taken, distribution has occurred.”).

Instead, the government argues that Carroll was guilty of knowing distribution

simply because he was using a peer-to-peer file sharing program and “that is what

it is.” But the fact that files were automatically shared from Carroll’s Ares folder,

without some evidence of his awareness of it, cannot carry the government’s

burden to prove knowing distribution beyond a reasonable doubt. And while

indicia of knowledge surely may be gleaned from the nature of a peer-to-peer

program itself, here, the government failed to put on any evidence that Ares, by


                                           12
             Case: 16-16652      Date Filed: 04/05/2018    Page: 13 of 17


design, would have required Carroll to authorize file sharing or in any way

recognize that his downloaded files were being shared. To the contrary, the

government’s own witness, former GBI agent Joel Cancilla, testified that Ares, by

default, installs a shared folder, automatically places downloaded files into that

folder, and distributes all contents of the shared folder to anyone else on the Ares

network without prompting the user—even when the user is away from his

computer.

      In spite of this, the government asks us to hold that it would be impossible

for an individual to use a peer-to-peer file sharing program and lack a full

understanding of its operations. We think it unwise to adopt such a sweeping rule

in this fact-sensitive context, where the mechanics of each peer-to-peer program

may bear on the issue of knowledge in different ways. We recognize that in

certain cases, the very design of the peer-to-peer program may foreclose any

possibility that the user unwittingly shared files. It would be difficult to claim

ignorance where, for example, the peer-to-peer program prompts the user during

installation to choose whether or not he wants to share downloaded files, see

United States v. Spriggs, 666 F.3d 1284, 1286–87 (11th Cir. 2012), requires the

user to authorize file sharing for each particular peer that requests it, see United

States v. McElmurry, 776 F.3d 1061, 1065 (9th Cir. 2015), or forces the user to

acknowledge and accede to a licensing agreement explaining the peer-to-peer


                                          13
               Case: 16-16652       Date Filed: 04/05/2018      Page: 14 of 17


process and then involves the user in setting up a shared folder, see United States v.

Shaffer, 472 F.3d 1219, 1221 (10th Cir. 2007).3 But according to this record, Ares

has none of these characteristics, Carroll took none of these actions, and the

government provided no other basis for his knowledge of distribution.4 Thus to

accept the government’s argument, under these facts, would be to hold Carroll

strictly liable. We refuse to do so. Without some proof that the defendant

consciously shared files, either by authorizing their distribution or knowingly

making them available to others, he cannot be held liable for knowing distribution

under Section 2552(a)(2). And because no such proof was offered here, we must

reverse Carroll’s Section 2552(a)(2) conviction.

                                               C.

       Finally, we review the application of two Guidelines enhancements to

Carroll’s sentence: the U.S.S.G. § 2G2.2(b)(7) enhancement for possession of

more than 600 images involving the sexual exploitation of a minor, and the

3
  While analysis of peer-to-peer file distribution under 18 U.S.C. § 2552(a)(2) and the U.S.S.G.
§ 2G2.2(b)(3)(F) sentencing enhancement is similar, the two do not completely overlap.
U.S.S.G. § 2G2.2(b)(3)(F) can be applied based on a preponderance of the evidence, is reviewed
for clear error, and, prior to a 2016 amendment, did not have a mens rea requirement. See
U.S.S.G. Suppl. To App. C, amend. 801 (2016). Thus, we refuse the government’s request to
apply the rule in United States v. Dodd, 598 F.3d 449, 451–52 (8th Cir. 2010), that “[a]bsent
concrete evidence of ignorance . . . a fact-finder may reasonably infer that the defendant
knowingly employed a file sharing program for its intended purpose,” to the substantive offense
in 18 U.S.C. § 2552(a)(2), which places the burden on the government to prove knowing
distribution beyond a reasonable doubt.
4
  We also note that the government did not put forth evidence that Carroll had some advanced
technological proficiency that might have rendered his ignorance to the file sharing process
implausible. Cf. United States v. Richardson, 713 F.3d 232, 234 (5th Cir. 2013) (defendant was
a computer technician and admitted that he knew his shared folder was available to others).
                                               14
             Case: 16-16652     Date Filed: 04/05/2018    Page: 15 of 17


U.S.S.G. § 2G2.2(b)(4) enhancement because the offense involved images

portraying sadistic or masochistic conduct or other depictions of violence.

      Carroll concedes that 314 images and 65 videos amount to 5,189 images

under the Guidelines. See U.S.S.G. § 2G2.2(b)(7). Instead of contesting this

calculation, he repeats his argument that he did not possess the images at all

because they were located in the unallocated space of his computer at the time it

was seized. We reject this theory for the same reasons that we did above. The

evidence proved that the images were manually downloaded to Carroll’s hard drive

while Carroll had exclusive control of his laptop, and that they were readily

accessible and viewable prior to being deleted. There is no question that they

involved the sexual exploitation of minors. Accordingly, the district court did not

err in applying the enhancement for possession of more than 600 such images.

      Next, Carroll argues that depictions of minors engaged in sex acts with

adults do not amount to sadistic or masochistic conduct without some additional

evidence of intentional infliction of physical abuse, and, therefore, that the

application of the Section 2G2.2(b)(4) enhancement to his offense constitutes

impermissible double counting. The videos found on Carroll’s computer depicted

vaginal and anal penetration of girls under the age of twelve, as well as one video

of a young girl tied up. We have held that both “adult men’s vaginal and anal

penetration of children [under twelve]” and “pictures of minors in bondage are


                                          15
             Case: 16-16652     Date Filed: 04/05/2018   Page: 16 of 17


sufficient to warrant the sadistic conduct enhancement.” United States v. Caro,

309 F.3d 1348, 1351–52 (11th Cir. 2002).

      This was not double counting. The base offense punishes possession of

images containing any sexual exploitation of a minor of any age, while the

enhancement applied here increased the punishment because Carroll’s images

involved particular, violent sexual acts against children less than twelve years old,

including at least one depiction of bondage. United States v. Dudley, 463 F.3d

1221, 1226–27 (11th Cir. 2006) (“Impermissible double counting occurs only

when one part of the Guidelines is applied to increase a defendant’s punishment on

account of a kind of harm that has already been fully accounted for by application

of another part of the Guidelines.”). No doubt, these harms were not fully

accounted for in the base offense. Accordingly, we affirm the application of the

Section 2G2.2(b)(4) enhancement.

                                         IV.

      In conclusion, we affirm the denial of the motion to suppress the evidence

seized from Carroll’s home, we affirm his conviction for knowingly possessing a

visual depiction of a minor engaged in sexually explicit conduct, 18 U.S.C.

§ 2252(a)(4)(B), and we affirm the application of the Guidelines enhancements for

possession of more than 600 images involving the sexual exploitation of a minor,

U.S.S.G. § 2G2.2(b)(7), some of which involved sadistic or masochistic acts and


                                          16
             Case: 16-16652    Date Filed: 04/05/2018   Page: 17 of 17


violence, U.S.S.G. § 2G2.2(b)(4). We reverse Carroll’s conviction for knowingly

distributing a visual depiction of a minor engaged in sexually explicit conduct, 18

U.S.C. § 2252(a)(2), and we remand to the district court for resentencing consistent

with this opinion.

AFFIRMED IN PART, REVERSED IN PART, AND REMANDED.




                                         17
