6
Shared Docs
6
Same-Page
6 / 6
Mentions
bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program File
lbackException Modules: C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADLoader.exe day, April 18, 2017 10.16.1.9 7:12:20 PM Tues C:\Windows\SYSTEM32\ntdll.dll 6:41:18 AM Thursday, November 17, 2011 6.1.7601.17725 C:\Windows\SYSTEM32\MSCOREE.DLL 3:23:48 AM Sunday, November 21, 2010 4.0.40305.0 C:\Windo
bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program File
ckException Modules: C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADProcessor.exe 7:12:26 PM T uesday, April 18, 2017 10.16.1.9 C:\Windows\SYSTEM32\ntdll.dll 6:41:18 AM Thursday, November 17, 2011 6.1.7601.17725 C:\Windows\SYSTEM32\MSCOREE.DLL 3:23:48 AM Sunday, November 21, 2010 4.0.40305.0 C:\Windo
bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program File
backException Modules: C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADlndexer.exe sday, April 18, 2017 10.16.1.9 7:12:20 PM Tue C:\Windows\SYSTEM32\ntdll.dll 6:41:18 AM Thursday, November 17, 2011 6.1.7601.17725 C:\Windows\SYSTEM32\MSCOREE.DLL 3:23:48 AM Sunday, November 21, 2010 4.0.40305.0 C:\Windo
bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program File
ckException Modules: C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADProcessor.exe 7:12:26 PM T uesday, April 18, 2017 10.16.1.9 C:\Windows\SYSTEM32\ntdll.dll 6:41:18 AM Thursday, November 17, 2011 6.1.7601.17725 C:\Windows\SYSTEM32\MSCOREE.DLL 3:23:48 AM Sunday, November 21, 2010 4.0.40305.0 C:\Windo
bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program File
lbackException Modules: C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADLoader.exe day, April 18, 2017 10.16.1.9 7:12:20 PM Tues C:\Windows\SYSTEM32\ntdll.dll 6:41:18 AM Thursday, November 17, 2011 6.1.7601.17725 C:\Windows\SYSTEM32\MSCOREE.DLL 3:23:48 AM Sunday, November 21, 2010 4.0.40305.0 C:\Windo
bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program File
backException Modules: C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADlndexer.exe sday, April 18, 2017 10.16.1.9 7:12:20 PM Tue C:\Windows\SYSTEM32\ntdll.dll 6:41:18 AM Thursday, November 17, 2011 6.1.7601.17725 C:\Windows\SYSTEM32\MSCOREE.DLL 3:23:48 AM Sunday, November 21, 2010 4.0.40305.0 C:\Windo
Entities connected to both ALLUSERSPROFILE and C:\Windows\SYSTEM32\ntdll.dll

Jeffrey Epstein
PERSONCOMPUTERNAME
ORGANIZATIONProgramFiles
ORGANIZATIONPSModulePath
ORGANIZATIONSystemDrive
ORGANIZATIONUSERDOMAIN
ORGANIZATIONUSERPROFILE
ORGANIZATIONC:\Windows\system32\USP10.d11
ORGANIZATIONC:\Windows\system32\OLEALIT32.d11
ORGANIZATIONConfiguration.ni.dll
ORGANIZATIONSMDiagnostics.ni.d11
ORGANIZATIONC:\Windows\system32\mfc140u.d11
ORGANIZATIONProcessing Engine\10.16\DALWrapper.d11
ORGANIZATIONGenuinelntel
PERSONDrawing.ni.dll
PERSONPM Tu
PERSONPostldentifyRefinement
ORGANIZATIONPhotoDna
ORGANIZATIONMem Cap
PERSONindex_args.cpp:163
LOCATION