6
Shared Docs
6
Same-Page
6 / 6
Mentions
bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program File
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program File
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program File
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program File
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program File
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program File
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
Entities connected to both ALLUSERSPROFILE and ProgramFiles

Jeffrey Epstein
PERSONCOMPUTERNAME
ORGANIZATIONPSModulePath
ORGANIZATIONSystemDrive
ORGANIZATIONUSERDOMAIN
ORGANIZATIONUSERPROFILE
ORGANIZATIONC:\Windows\SYSTEM32\ntdll.dll
ORGANIZATIONC:\Windows\system32\USP10.d11
ORGANIZATIONC:\Windows\system32\OLEALIT32.d11
ORGANIZATIONConfiguration.ni.dll
ORGANIZATIONSMDiagnostics.ni.d11
ORGANIZATIONC:\Windows\system32\mfc140u.d11
ORGANIZATIONProcessing Engine\10.16\DALWrapper.d11
ORGANIZATIONGenuinelntel
PERSONDrawing.ni.dll
PERSONPM Tu
PERSONPostldentifyRefinement
ORGANIZATIONPhotoDna
ORGANIZATIONMem Cap
PERSONindex_args.cpp:163
LOCATION