6
Shared Docs
6
Same-Page
6 / 6
Mentions
m Files\AccessData\Evidence Processing ay, April 18, 2017 1.0.0.0 C:\Program Files\AccessData\Evidence Processing esday, April 18, 2017 1.0.0.0 C:\Windows\system32\mfc140u.d11 4:02:10 AM C:\Program Files\AccessData\Evidence Processing 2 PM Tuesday, April 18, 2017 6.2.0.1026 C:\Program Files\AccessData\Evidence Processi
e.d11 Engine\10.16\netfslib.dll Engine\10.16\libbfio.d11 Engine\10.16\libvshadow.d11 7:11:06 PM Tuesd 7:11:30 PM Tues 7:11:22 PM Tuesd 7:11:24 PM Tu Friday, July 22, 2016 14.0.24213.1 Engine\10.16\DataAccessWrapper.d11 7:10:5 Engine\10.16\duplicate_text_analysis.d11 14.0.24215.1 6.1.7601.1751
m Files\AccessData\Evidence Processing ay, April 18, 2017 1.0.0.0 C:\Program Files\AccessData\Evidence Processing esday, April 18, 2017 1.0.0.0 C:\Windows\system32\mfc140u.d11 4:02:10 AM C:\Program Files\AccessData\Evidence Processing 2 PM Tuesday, April 18, 2017 6.2.0.1026 C:\Program Files\AccessData\Evidence Processi
e.d11 Engine\10.16\netfslib.dll Engine\10.16\libbfio.d11 Engine\10.16\libvshadow.d11 7:11:06 PM Tuesd 7:11:30 PM Tues 7:11:22 PM Tuesd 7:11:24 PM Tu Friday, July 22, 2016 14.0.24213.1 Engine\10.16\DataAccessWrapper.d11 7:10:5 Engine\10.16\duplicate_text_analysis.d11 14.0.24215.1 6.1.7601.1751
m Files\AccessData\Evidence Processing ay, April 18, 2017 1.0.0.0 C:\Program Files\AccessData\Evidence Processing esday, April 18, 2017 1.0.0.0 C:\Windows\system32\mfc140u.d11 4:02:10 AM C:\Program Files\AccessData\Evidence Processing 2 PM Tuesday, April 18, 2017 6.2.0.1026 C:\Program Files\AccessData\Evidence Processi
e.d11 Engine\10.16\netfslib.dll Engine\10.16\libbfio.d11 Engine\10.16\libvshadow.d11 7:11:06 PM Tuesd 7:11:30 PM Tues 7:11:22 PM Tuesd 7:11:24 PM Tu Friday, July 22, 2016 14.0.24213.1 Engine\10.16\DataAccessWrapper.d11 7:10:5 Engine\10.16\duplicate_text_analysis.d11 14.0.24215.1 6.1.7601.1751
m Files\AccessData\Evidence Processing ay, April 18, 2017 1.0.0.0 C:\Program Files\AccessData\Evidence Processing esday, April 18, 2017 1.0.0.0 C:\Windows\system32\mfc140u.d11 4:02:10 AM C:\Program Files\AccessData\Evidence Processing 2 PM Tuesday, April 18, 2017 6.2.0.1026 C:\Program Files\AccessData\Evidence Processi
e.d11 Engine\10.16\netfslib.dll Engine\10.16\libbfio.d11 Engine\10.16\libvshadow.d11 7:11:06 PM Tuesd 7:11:30 PM Tues 7:11:22 PM Tuesd 7:11:24 PM Tu Friday, July 22, 2016 14.0.24213.1 Engine\10.16\DataAccessWrapper.d11 7:10:5 Engine\10.16\duplicate_text_analysis.d11 14.0.24215.1 6.1.7601.1751
m Files\AccessData\Evidence Processing ay, April 18, 2017 1.0.0.0 C:\Program Files\AccessData\Evidence Processing esday, April 18, 2017 1.0.0.0 C:\Windows\system32\mfc140u.d11 4:02:10 AM C:\Program Files\AccessData\Evidence Processing 2 PM Tuesday, April 18, 2017 6.2.0.1026 C:\Program Files\AccessData\Evidence Processi
e.d11 Engine\10.16\netfslib.dll Engine\10.16\libbfio.d11 Engine\10.16\libvshadow.d11 7:11:06 PM Tuesd 7:11:30 PM Tues 7:11:22 PM Tuesd 7:11:24 PM Tu Friday, July 22, 2016 14.0.24213.1 Engine\10.16\DataAccessWrapper.d11 7:10:5 Engine\10.16\duplicate_text_analysis.d11 14.0.24215.1 6.1.7601.1751
m Files\AccessData\Evidence Processing ay, April 18, 2017 1.0.0.0 C:\Program Files\AccessData\Evidence Processing esday, April 18, 2017 1.0.0.0 C:\Windows\system32\mfc140u.d11 4:02:10 AM C:\Program Files\AccessData\Evidence Processing 2 PM Tuesday, April 18, 2017 6.2.0.1026 C:\Program Files\AccessData\Evidence Processi
e.d11 Engine\10.16\netfslib.dll Engine\10.16\libbfio.d11 Engine\10.16\libvshadow.d11 7:11:06 PM Tuesd 7:11:30 PM Tues 7:11:22 PM Tuesd 7:11:24 PM Tu Friday, July 22, 2016 14.0.24213.1 Engine\10.16\DataAccessWrapper.d11 7:10:5 Engine\10.16\duplicate_text_analysis.d11 14.0.24215.1 6.1.7601.1751
Entities connected to both C:\Windows\system32\mfc140u.d11 and PM Tu

Jeffrey Epstein
PERSONALLUSERSPROFILE
ORGANIZATIONCOMPUTERNAME
ORGANIZATIONProgramFiles
ORGANIZATIONPSModulePath
ORGANIZATIONSystemDrive
ORGANIZATIONUSERDOMAIN
ORGANIZATIONUSERPROFILE
ORGANIZATIONC:\Windows\SYSTEM32\ntdll.dll
ORGANIZATIONC:\Windows\system32\USP10.d11
ORGANIZATIONC:\Windows\system32\OLEALIT32.d11
ORGANIZATIONConfiguration.ni.dll
ORGANIZATIONSMDiagnostics.ni.d11
ORGANIZATIONProcessing Engine\10.16\DALWrapper.d11
ORGANIZATIONGenuinelntel
PERSONDrawing.ni.dll
PERSONPostldentifyRefinement
ORGANIZATIONPhotoDna
ORGANIZATIONMem Cap
PERSONindex_args.cpp:163
LOCATION