6
Shared Docs
6
Same-Page
6 / 6
Mentions
5 I [ProcessorBase.cpp:393): [3380,) CasePath: Y:\Epstein\FTK\Epstein - DVDs 20190708 153426.545 I [Proces
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
6 I (ProcessorBase.cpp:393): [6476,) CasePath: Y:\Epstein\FTK\Epstein - DVDs 20190708 153425.796 I (Proces
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
7 I [ProcessorBase.cpp:393): [8140,) CasePath: Y:\Epstein\FTK\Epstein - DVDs 20190708 153431.647 I [Proces
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
009857c4ca0b21ef84f36f691c1 [7964,) CasePath: Y:\Epstein\FTK\Epstein - DVDs [7964,) DB system: Postgres
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
5 I [ProcessorBase.cpp:393): [5540,) CasePath: Y:\Epstein\FTK\Epstein - DVDs 20190708 153424.065 I [Proces
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
5 I [ProcessorBase.cpp:393): [6592,) CasePath: Y:\Epstein\FTK\Epstein - DVDs 20190708 153430.055 I [Proces
D64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Mo
Entities connected to both Jeffrey Epstein and ProgramFiles
ALLUSERSPROFILE
ORGANIZATIONCOMPUTERNAME
ORGANIZATIONPSModulePath
ORGANIZATIONSystemDrive
ORGANIZATIONUSERDOMAIN
ORGANIZATIONUSERPROFILE
ORGANIZATIONC:\Windows\SYSTEM32\ntdll.dll
ORGANIZATIONC:\Windows\system32\USP10.d11
ORGANIZATIONC:\Windows\system32\OLEALIT32.d11
ORGANIZATIONConfiguration.ni.dll
ORGANIZATIONSMDiagnostics.ni.d11
ORGANIZATIONC:\Windows\system32\mfc140u.d11
ORGANIZATIONProcessing Engine\10.16\DALWrapper.d11
ORGANIZATIONGenuinelntel
PERSONDrawing.ni.dll
PERSONPM Tu
PERSONPostldentifyRefinement
ORGANIZATIONPhotoDna
ORGANIZATIONMem Cap
PERSONindex_args.cpp:163
LOCATION