6
Shared Docs
6
Same-Page
6 / 6
Mentions
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
3:42:49 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Drawing\1751687825177cb487c1080d7e37401f \System.Drawing.ni.dll 4:09:48 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Windows.Forms\a359814ff0333ca2c4ab29f30f 55dd20
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
3:42:49 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Drawing\1751687825177cb487c1080d7e37401f \System.Drawing.ni.dll 4:09:48 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Windows.Forms\a359814ff0333ca2c4ab29f30f 55dd20
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
3:42:49 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Drawing\1751687825177cb487c1080d7e37401f \System.Drawing.ni.dll 4:09:48 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Windows.Forms\a359814ff0333ca2c4ab29f30f 55dd20
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
3:42:49 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Drawing\1751687825177cb487c1080d7e37401f \System.Drawing.ni.dll 4:09:48 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Windows.Forms\a359814ff0333ca2c4ab29f30f 55dd20
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
3:42:49 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Drawing\1751687825177cb487c1080d7e37401f \System.Drawing.ni.dll 4:09:48 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Windows.Forms\a359814ff0333ca2c4ab29f30f 55dd20
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
3:42:49 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Drawing\1751687825177cb487c1080d7e37401f \System.Drawing.ni.dll 4:09:48 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Windows.Forms\a359814ff0333ca2c4ab29f30f 55dd20
Entities connected to both ProgramFiles and Drawing.ni.dll

Jeffrey Epstein
PERSONALLUSERSPROFILE
ORGANIZATIONCOMPUTERNAME
ORGANIZATIONPSModulePath
ORGANIZATIONSystemDrive
ORGANIZATIONUSERDOMAIN
ORGANIZATIONUSERPROFILE
ORGANIZATIONC:\Windows\SYSTEM32\ntdll.dll
ORGANIZATIONC:\Windows\system32\USP10.d11
ORGANIZATIONC:\Windows\system32\OLEALIT32.d11
ORGANIZATIONConfiguration.ni.dll
ORGANIZATIONSMDiagnostics.ni.d11
ORGANIZATIONC:\Windows\system32\mfc140u.d11
ORGANIZATIONProcessing Engine\10.16\DALWrapper.d11
ORGANIZATIONGenuinelntel
PERSONPM Tu
PERSONPostldentifyRefinement
ORGANIZATIONPhotoDna
ORGANIZATIONMem Cap
PERSONindex_args.cpp:163
LOCATION