Topline: A search of the Megan’s Law database helped police capture a Penn Hills man allegedly seeking out child pornography using Microsoft’s Bing search engine.
Published: May 19, 2023 8:00 am ET
Randy Shaw
I cut my teeth in journalism when I began looking into what I saw as abuses of power in my local government. From then on, I was hooked on the dopamine rush of uncovering information.
Must Read
Michael Lawrence Winter. Mugshot provided by the Allegheny County Jail. Background photo credit: Bruce Emmerling / Pixabay
Penn Hills, PA (PPP)— A Penn Hills man has been charged with multiple counts of child pornography following an investigation after police received a tip regarding a search using its Bing image search engine.
Police have charged 55-year-old Lawrence Michael Winter with five counts of child pornography and one count of criminal use of a communication facility.
Winter is a Megan’s Law Offender.
Name: Lawrence Michael Winter
Gender: Male
Age: 55
Agency: Allegheny County Police Department
Court: Magisterial District Court 05-2-06
Docket Number: MJ-05206-CR-0000171-2023
Date Filed: April 13, 2023
Bail: $250,000 monetary
Confinement: Allegheny County Jail
Confinement Reason: Unable to post bail. Note: bail was changed to “unsecured” on April 24, at which time the defendant was released.
Criminal Charges
- Child pornography (Felony 3)
- Child pornography (Felony 3)
- Child pornography (Felony 3)
- Child pornography (Felony 3)
- Child pornography (Felony 3)
- Criminal Use Of Communication Facility (Felony 3)
Affidavit of Probable Cause
Your affiants are Detective’s Scott Klobchar and Steven Dish of the Allegheny County Police Department currently assigned to the FBI’s Child Exploitation and Human Trafficking Task Force which is comprised of Federal and Local Law Enforcement. Your affiants are also members of the Delaware County, Pennsylvania Internet Crimes Against Children (ICAO) Taskforce. Previously your affiants have been assigned ₹o the Allegheny County Police Department Child Abuse / Sex Assault unit. Your affiants have a combined total of over 45 years of Law Enforcement experience.
Your affiants are familiar with investigations involving the exploitation of children both via the internet and in person. Your affiants are also familiar with investigations involving child pornography images. As part of our duties, we investigate violations involving online exploitation of children, violations pertaining to the illegal possession, receipt, transmission, and production of material depicting the sexual exploitation of minors. Your affiants have participated in the execution of numerous search warrants and arrests relating to sexual abuse of children.
As part of our duties, your affiants are assigned to investigate Cybertips which are reported to the National Center For Missing and Exploited Children. These Cybertips are then forwarded to the Internet Crimes Against Children (ICAO) Taskforce, with the appropriate jurisdiction.
On 02/28/2023, your affiants were assigned to investigate a report of multiple Cybertips, which were reported by Microsoft. All of the Cybertips, reported by Microsoft contained suspected child pornography being uploaded from the same IP Address, identified as: 173.████.
The first Cybertip reported by Microsoft, reflected (CYBER TIP#128299664), that the user of their Microsoft Bing image search engine, uploaded one (1) image of suspected child pornography, utilizing the IP Address: 173.████. Microsoft reported that the date and time of the incident as 07/04/2022 at 01:11:31 UTC and identified this time as when the first image/video in a series was scanned. Microsoft further reported that the date/time provided indicates the time at which the image was received and evaluated by the Bing image service.
Microsoft identified the uploaded file. containing suspected child pornography by filename: ████████████.jpg. Your affiant also viewed this file and confirmed that it depicted a prepubescent female child exposing her genitals in a sexual act and/or pose. The child depicted in the image was undoubtedly under the age of 18.
Another Cybertip was reported to the National Center for Missing and Exploited Children (NCMEC), (CYBER TIP#153488859), from Microsoft. Microsoft reported that the user of their Microsoft Bing image search engine, uploaded three (3) images of suspected child pornography on 01/23/2023 beginning at 00:24:05 UTC, utilizing the IP Address.. 173.████. Microsoft reported that the date and time of the incident as 01/23/2022 at 00:24:05 UTC and identified this time as when the first image/video in a series was scanned. Microsoft further reported that the date/time provided indicates the time at which the image was received and evaluated by the Bing image service.
Microsoft identified one of the uploaded files containing the suspected child pornography by filename: ████████████.jpg. Microsoft reported that the date and time of this uploaded file as: 01/23/2023 at 01:08:45 UTC. Microsoft also reported that the IP Address captured at the time of the upload and identified that 1P Address as: 173.████.
Your affiant also viewed this reported file and confirmed that it depicted an “collage style” photograph depicting numerous prepubescent female children exposing their genitals in a sexual act and/or pose. The photograph was labeled, “Tiny Americans”. The female children depicted in the photographs were clearly under the age of 18.
Microsoft identified another one of the uploaded files containing the suspected child pornography by filename: ████████████.jpg. Microsoft reported that the date and time of this uploaded file as: 01/23/2023 at 01:01:12 UTC. Microsoft also reported that the IP Address captured at the time of the upload and identified that 1P Address as: 173.████.
Your affiant also viewed this reported file and confirmed that it depleted a prepubescent female child exposing her genitals in a sexual act and/or pose. The female child depicted in the image was also undoubtedly under the age of 18.
Lastly on 02/23/2023 at 02:19:23 UTC the National Center for Missing and Exploited Children (NCMEC), received another CyberTip, (CYBER TIP#755897531), from Microsoft. Microsoft reported that the user of their Microsoft Bing image search engine, uploaded three (3) Images of suspected child pornography on 02/22/2023 beginning at 15:52:11 UTC, utilizing the IP Address: 173.████. Microsoft reported that the date and time of the incident as 02/22/2023 at 15:52:11 UTC and identified this time as when the first image/video in a series was scanned. Microsoft further reported that the date/time provided indicates the time at which the image was received and evaluated by the Bing image service.
Microsoft identified one of the uploaded files containing the suspected child pornography by filename: ████████████.jpg. Microsoft reported that the date and time of this uploaded file as: 02/22/2023 at 15:52:11 UTC. Microsoft also reported that the IP Address captured at the time of the upload and identified that IP Address as: 173.████.
Your affiant also viewed this file and confirmed that it depicted two prepubescent female children posing together topless. One of the children’s genitals can be seen in the photograph. The top of the photograph is labeled “Secret Place”.
Your affiant conducted a check of the IP Address: 173.████ through IP2Location.com, which yielded results for belonging to Verizon Communications.
On 03/01/2023, your affiant applied for and obtained a search warrant for subscriber information and Verizon records on the Verizon IP Address: 173.████ on 07/04/2022 at 01:11:31 UTC, 01/23/2023 at 01:08:45 UTC, 01/23/2023 at 01.01:12 UTC, and 02/22/2023 at 15:52:11 UTC. These dates and times correspond with the child pornography uploads reported by Microsoft. On 03/02/2023, Verizon responded to this legal request and identified the subscriber during the time periods requested as: ████ WINTER with a service address of ████████████, PA 15147. Verizon identified the primary telephone number as: ████ and identified the email address associated on this account as: ████████.
A check of the address ████████████ through the Allegheny County Real Estate Portal yielded results for ████████████, PA 15147, located in the municipality of Penn Hills. The owner of this address is listed as: ████ & ████.
A search of registered sex offenders through the Pennsylvania Megan’s Law Website using the search parameters of Allegheny County and Municipality of Penn Hills, yielded results for a currently registered sex offender identified as: Lawrence WINTER, (D/O/B/ ████). WINTER has his registered residential address listed as ████████████, PA 15147. According to the Pennsylvania Megan’s Law Website, WINTER is currently registered for a previous conviction of US059- Receipt of Material Depicting The Sexual Exploitation Of A Minor.
A criminal history of Lawrence WINTER, (D/O/B ████), reflects that on 07/16/2013, he plead guilty to the sexual exploitation of a minor via telecommunication and was sentenced to Federal Prison for a term of 72 months, with a period of 180 months supervised release. A further review of his criminal history reflects that on 03/21/2019, WINTER was found guilty of a probation violation and sentenced to 10 months confinement. An email listed for WINTER on his criminal history, was identified as: ████ and a home telephone number listed for WINTER was identified as ████. It should be noted that the email and telephone number listed for WINTER on his criminal history is the same email address and telephone number listed on the Verizon IP Address subscriber and customer records.
On Thursday April 12, 2023, your affiant applied for and obtained a search warrant for the residence of ████████████, PA 15147 and the person of Lawrence Michael WINTER, (D/O/B/ ████). The search warrant was issued by Allegheny County Court of Common Pleas Judge, Kelly Biglay. On April 13, 2023, the FBI Pittsburgh Child Exploitation and Human Trafficking Task Force executed the search warrant at the residence of ████████████, PA 15147. WINTER was present during the execution and multiple flash drives were recovered from a cargo pocket on the lower right leg of his pants.
One of these flash drives was identified as a SanDisk flash drive, (SDCZ60-064G, BN22070042004). FBI Computer Analysis Response Team, (CART) conducted an onsite preview of the contents of the SanDisk flash drive. As a result the following tiles were located on the flash drive:
File Name: ████████████.jpg
Description: This file contained a “collage style” photograph with the words “Lovely Nymphets” in the top right hand corner of the image. The image reflected multiple images of a prepubescent female child exposing her genitals in a sexual actor pose. The child depicted in the image was undoubtedly under the age of 18 years old.
File Name: ████████████.jpg
Description: This file contained an image of a prepubescent female child performing oral sex on an adult male. The child depicted in the image was clearly under the age of 18 years old.
File Name: ████████████.jpg
Description: This file contained an image of a prepubescent female child exposing her genitals in a sexual actor pose. The child was undoubtedly under the age of 18 years old.
File Name: ████████████.jpg
Description: This fife depicted an image of a prepubescent female child exposing her genitals in a sexual actor pose. The child depicted in this image was clearly under the age of 18 years old.
File Name: ████████████.jpg
Description: This file depicted an image of a prepubescent female child exposing her genitals in a sexual actor pose. The child depicted in the image was clearly under the age of 18 years old.
In addition to the above referenced files containing apparent child pornography, there were several additional files that also depicted images and videos of children exposing their genitals and/or engaged in sexual activity.
WINTER was advised of his Miranda Warnings, which he acknowledged. After being advised of his rights, WINTER agreed to speak with Detective Dish. As a result of his interview, WINTER provided the following information. WINTER admitted to viewing child pornography and that he found it sexually arousing. He also stated that he has been doing so for approximately the last 18 months. WINTER also admitted to saving images of child pornography on his laptop computer. WINTER also advised Detective Dish that there were flash drives on his desk inside of his bedroom and indicated that that those flash drives would also have child Pornography on them.
Based on the aforementioned information, I am respectfully requesting that WINTER be charged with:
6312(D) – Possession of Child Pornography (5cts)
7512 – Criminal Use of a Communication Facility (1ct)
Presumption of Innocence: A presumption of innocence means that any defendant in a criminal trial is presumed to be innocent until they have been proven guilty beyond a reasonable doubt in a court of law. The defendant in this case is only accused of the charges set forth in the criminal complaint. They are innocent until proven guilty.
Editor Picks
Latest Articles
Megan’s Law Offender Charged with Five Counts of Child Pornography
A search of the Megan’s Law database helped police capture a Penn Hills man allegedly seeking out child pornography using Microsoft’s Bing search engine.
By Randy Shaw
Published: May 19, 2023 8:00 am ET
Michael Lawrence Winter. Mugshot provided by the Allegheny County Jail. Background photo credit: Bruce Emmerling / Pixabay
Penn Hills, PA (PPP)— A Penn Hills man has been charged with multiple counts of child pornography following an investigation after police received a tip regarding a search using its Bing image search engine.
Police have charged 55-year-old Lawrence Michael Winter with five counts of child pornography and one count of criminal use of a communication facility.
Winter is a Megan’s Law Offender.
Name: Lawrence Michael Winter
Gender: Male
Age: 55
Agency: Allegheny County Police Department
Court: Magisterial District Court 05-2-06
Docket Number: MJ-05206-CR-0000171-2023
Date Filed: April 13, 2023
Bail: $250,000 monetary
Confinement: Allegheny County Jail
Confinement Reason: Unable to post bail. Note: bail was changed to “unsecured” on April 24, at which time the defendant was released.
Criminal Charges
- Child pornography (Felony 3)
- Child pornography (Felony 3)
- Child pornography (Felony 3)
- Child pornography (Felony 3)
- Child pornography (Felony 3)
- Criminal Use Of Communication Facility (Felony 3)
Affidavit of Probable Cause
Your affiants are Detective’s Scott Klobchar and Steven Dish of the Allegheny County Police Department currently assigned to the FBI’s Child Exploitation and Human Trafficking Task Force which is comprised of Federal and Local Law Enforcement. Your affiants are also members of the Delaware County, Pennsylvania Internet Crimes Against Children (ICAO) Taskforce. Previously your affiants have been assigned ₹o the Allegheny County Police Department Child Abuse / Sex Assault unit. Your affiants have a combined total of over 45 years of Law Enforcement experience.
Your affiants are familiar with investigations involving the exploitation of children both via the internet and in person. Your affiants are also familiar with investigations involving child pornography images. As part of our duties, we investigate violations involving online exploitation of children, violations pertaining to the illegal possession, receipt, transmission, and production of material depicting the sexual exploitation of minors. Your affiants have participated in the execution of numerous search warrants and arrests relating to sexual abuse of children.
As part of our duties, your affiants are assigned to investigate Cybertips which are reported to the National Center For Missing and Exploited Children. These Cybertips are then forwarded to the Internet Crimes Against Children (ICAO) Taskforce, with the appropriate jurisdiction.
On 02/28/2023, your affiants were assigned to investigate a report of multiple Cybertips, which were reported by Microsoft. All of the Cybertips, reported by Microsoft contained suspected child pornography being uploaded from the same IP Address, identified as: 173.████.
The first Cybertip reported by Microsoft, reflected (CYBER TIP#128299664), that the user of their Microsoft Bing image search engine, uploaded one (1) image of suspected child pornography, utilizing the IP Address: 173.████. Microsoft reported that the date and time of the incident as 07/04/2022 at 01:11:31 UTC and identified this time as when the first image/video in a series was scanned. Microsoft further reported that the date/time provided indicates the time at which the image was received and evaluated by the Bing image service.
Microsoft identified the uploaded file. containing suspected child pornography by filename: ████████████.jpg. Your affiant also viewed this file and confirmed that it depicted a prepubescent female child exposing her genitals in a sexual act and/or pose. The child depicted in the image was undoubtedly under the age of 18.
Another Cybertip was reported to the National Center for Missing and Exploited Children (NCMEC), (CYBER TIP#153488859), from Microsoft. Microsoft reported that the user of their Microsoft Bing image search engine, uploaded three (3) images of suspected child pornography on 01/23/2023 beginning at 00:24:05 UTC, utilizing the IP Address.. 173.████. Microsoft reported that the date and time of the incident as 01/23/2022 at 00:24:05 UTC and identified this time as when the first image/video in a series was scanned. Microsoft further reported that the date/time provided indicates the time at which the image was received and evaluated by the Bing image service.
Microsoft identified one of the uploaded files containing the suspected child pornography by filename: ████████████.jpg. Microsoft reported that the date and time of this uploaded file as: 01/23/2023 at 01:08:45 UTC. Microsoft also reported that the IP Address captured at the time of the upload and identified that 1P Address as: 173.████.
Your affiant also viewed this reported file and confirmed that it depicted an “collage style” photograph depicting numerous prepubescent female children exposing their genitals in a sexual act and/or pose. The photograph was labeled, “Tiny Americans”. The female children depicted in the photographs were clearly under the age of 18.
Microsoft identified another one of the uploaded files containing the suspected child pornography by filename: ████████████.jpg. Microsoft reported that the date and time of this uploaded file as: 01/23/2023 at 01:01:12 UTC. Microsoft also reported that the IP Address captured at the time of the upload and identified that 1P Address as: 173.████.
Your affiant also viewed this reported file and confirmed that it depleted a prepubescent female child exposing her genitals in a sexual act and/or pose. The female child depicted in the image was also undoubtedly under the age of 18.
Lastly on 02/23/2023 at 02:19:23 UTC the National Center for Missing and Exploited Children (NCMEC), received another CyberTip, (CYBER TIP#755897531), from Microsoft. Microsoft reported that the user of their Microsoft Bing image search engine, uploaded three (3) Images of suspected child pornography on 02/22/2023 beginning at 15:52:11 UTC, utilizing the IP Address: 173.████. Microsoft reported that the date and time of the incident as 02/22/2023 at 15:52:11 UTC and identified this time as when the first image/video in a series was scanned. Microsoft further reported that the date/time provided indicates the time at which the image was received and evaluated by the Bing image service.
Microsoft identified one of the uploaded files containing the suspected child pornography by filename: ████████████.jpg. Microsoft reported that the date and time of this uploaded file as: 02/22/2023 at 15:52:11 UTC. Microsoft also reported that the IP Address captured at the time of the upload and identified that IP Address as: 173.████.
Your affiant also viewed this file and confirmed that it depicted two prepubescent female children posing together topless. One of the children’s genitals can be seen in the photograph. The top of the photograph is labeled “Secret Place”.
Your affiant conducted a check of the IP Address: 173.████ through IP2Location.com, which yielded results for belonging to Verizon Communications.
On 03/01/2023, your affiant applied for and obtained a search warrant for subscriber information and Verizon records on the Verizon IP Address: 173.████ on 07/04/2022 at 01:11:31 UTC, 01/23/2023 at 01:08:45 UTC, 01/23/2023 at 01.01:12 UTC, and 02/22/2023 at 15:52:11 UTC. These dates and times correspond with the child pornography uploads reported by Microsoft. On 03/02/2023, Verizon responded to this legal request and identified the subscriber during the time periods requested as: ████ WINTER with a service address of ████████████, PA 15147. Verizon identified the primary telephone number as: ████ and identified the email address associated on this account as: ████████.
A check of the address ████████████ through the Allegheny County Real Estate Portal yielded results for ████████████, PA 15147, located in the municipality of Penn Hills. The owner of this address is listed as: ████ & ████.
A search of registered sex offenders through the Pennsylvania Megan’s Law Website using the search parameters of Allegheny County and Municipality of Penn Hills, yielded results for a currently registered sex offender identified as: Lawrence WINTER, (D/O/B/ ████). WINTER has his registered residential address listed as ████████████, PA 15147. According to the Pennsylvania Megan’s Law Website, WINTER is currently registered for a previous conviction of US059- Receipt of Material Depicting The Sexual Exploitation Of A Minor.
A criminal history of Lawrence WINTER, (D/O/B ████), reflects that on 07/16/2013, he plead guilty to the sexual exploitation of a minor via telecommunication and was sentenced to Federal Prison for a term of 72 months, with a period of 180 months supervised release. A further review of his criminal history reflects that on 03/21/2019, WINTER was found guilty of a probation violation and sentenced to 10 months confinement. An email listed for WINTER on his criminal history, was identified as: ████ and a home telephone number listed for WINTER was identified as ████. It should be noted that the email and telephone number listed for WINTER on his criminal history is the same email address and telephone number listed on the Verizon IP Address subscriber and customer records.
On Thursday April 12, 2023, your affiant applied for and obtained a search warrant for the residence of ████████████, PA 15147 and the person of Lawrence Michael WINTER, (D/O/B/ ████). The search warrant was issued by Allegheny County Court of Common Pleas Judge, Kelly Biglay. On April 13, 2023, the FBI Pittsburgh Child Exploitation and Human Trafficking Task Force executed the search warrant at the residence of ████████████, PA 15147. WINTER was present during the execution and multiple flash drives were recovered from a cargo pocket on the lower right leg of his pants.
One of these flash drives was identified as a SanDisk flash drive, (SDCZ60-064G, BN22070042004). FBI Computer Analysis Response Team, (CART) conducted an onsite preview of the contents of the SanDisk flash drive. As a result the following tiles were located on the flash drive:
File Name: ████████████.jpg
Description: This file contained a “collage style” photograph with the words “Lovely Nymphets” in the top right hand corner of the image. The image reflected multiple images of a prepubescent female child exposing her genitals in a sexual actor pose. The child depicted in the image was undoubtedly under the age of 18 years old.
File Name: ████████████.jpg
Description: This file contained an image of a prepubescent female child performing oral sex on an adult male. The child depicted in the image was clearly under the age of 18 years old.
File Name: ████████████.jpg
Description: This file contained an image of a prepubescent female child exposing her genitals in a sexual actor pose. The child was undoubtedly under the age of 18 years old.
File Name: ████████████.jpg
Description: This fife depicted an image of a prepubescent female child exposing her genitals in a sexual actor pose. The child depicted in this image was clearly under the age of 18 years old.
File Name: ████████████.jpg
Description: This file depicted an image of a prepubescent female child exposing her genitals in a sexual actor pose. The child depicted in the image was clearly under the age of 18 years old.
In addition to the above referenced files containing apparent child pornography, there were several additional files that also depicted images and videos of children exposing their genitals and/or engaged in sexual activity.
WINTER was advised of his Miranda Warnings, which he acknowledged. After being advised of his rights, WINTER agreed to speak with Detective Dish. As a result of his interview, WINTER provided the following information. WINTER admitted to viewing child pornography and that he found it sexually arousing. He also stated that he has been doing so for approximately the last 18 months. WINTER also admitted to saving images of child pornography on his laptop computer. WINTER also advised Detective Dish that there were flash drives on his desk inside of his bedroom and indicated that that those flash drives would also have child Pornography on them.
Based on the aforementioned information, I am respectfully requesting that WINTER be charged with:
6312(D) – Possession of Child Pornography (5cts)
7512 – Criminal Use of a Communication Facility (1ct)
Presumption of Innocence: A presumption of innocence means that any defendant in a criminal trial is presumed to be innocent until they have been proven guilty beyond a reasonable doubt in a court of law. The defendant in this case is only accused of the charges set forth in the criminal complaint. They are innocent until proven guilty.
Editor's Note: ThePo makes every effort to accurately transcribe the contents of affidavits of probable cause contained in criminal complaints. Often, the complaints themselves are copies of copies of faxed copies, and are difficult to read. To confirm the accuracy of our transcription, contact the Magisterial District Court listed above and request a copy of the criminal complaint. It's a public record to which you are entitled.
Must Read
Editor Picks
Latest Articles
Megan’s Law Offender Charged with Five Counts of Child Pornography
A search of the Megan’s Law database helped police capture a Penn Hills man allegedly seeking out child pornography using Microsoft’s Bing search engine.
By Randy Shaw
Published: May 19, 2023 8:00 am ET
Michael Lawrence Winter. Mugshot provided by the Allegheny County Jail. Background photo credit: Bruce Emmerling / Pixabay
Penn Hills, PA (PPP)— A Penn Hills man has been charged with multiple counts of child pornography following an investigation after police received a tip regarding a search using its Bing image search engine.
Police have charged 55-year-old Lawrence Michael Winter with five counts of child pornography and one count of criminal use of a communication facility.
Winter is a Megan’s Law Offender.
Name: Lawrence Michael Winter
Gender: Male
Age: 55
Agency: Allegheny County Police Department
Court: Magisterial District Court 05-2-06
Docket Number: MJ-05206-CR-0000171-2023
Date Filed: April 13, 2023
Bail: $250,000 monetary
Confinement: Allegheny County Jail
Confinement Reason: Unable to post bail. Note: bail was changed to “unsecured” on April 24, at which time the defendant was released.
Criminal Charges
- Child pornography (Felony 3)
- Child pornography (Felony 3)
- Child pornography (Felony 3)
- Child pornography (Felony 3)
- Child pornography (Felony 3)
- Criminal Use Of Communication Facility (Felony 3)
Affidavit of Probable Cause
Your affiants are Detective’s Scott Klobchar and Steven Dish of the Allegheny County Police Department currently assigned to the FBI’s Child Exploitation and Human Trafficking Task Force which is comprised of Federal and Local Law Enforcement. Your affiants are also members of the Delaware County, Pennsylvania Internet Crimes Against Children (ICAO) Taskforce. Previously your affiants have been assigned ₹o the Allegheny County Police Department Child Abuse / Sex Assault unit. Your affiants have a combined total of over 45 years of Law Enforcement experience.
Your affiants are familiar with investigations involving the exploitation of children both via the internet and in person. Your affiants are also familiar with investigations involving child pornography images. As part of our duties, we investigate violations involving online exploitation of children, violations pertaining to the illegal possession, receipt, transmission, and production of material depicting the sexual exploitation of minors. Your affiants have participated in the execution of numerous search warrants and arrests relating to sexual abuse of children.
As part of our duties, your affiants are assigned to investigate Cybertips which are reported to the National Center For Missing and Exploited Children. These Cybertips are then forwarded to the Internet Crimes Against Children (ICAO) Taskforce, with the appropriate jurisdiction.
On 02/28/2023, your affiants were assigned to investigate a report of multiple Cybertips, which were reported by Microsoft. All of the Cybertips, reported by Microsoft contained suspected child pornography being uploaded from the same IP Address, identified as: 173.████.
The first Cybertip reported by Microsoft, reflected (CYBER TIP#128299664), that the user of their Microsoft Bing image search engine, uploaded one (1) image of suspected child pornography, utilizing the IP Address: 173.████. Microsoft reported that the date and time of the incident as 07/04/2022 at 01:11:31 UTC and identified this time as when the first image/video in a series was scanned. Microsoft further reported that the date/time provided indicates the time at which the image was received and evaluated by the Bing image service.
Microsoft identified the uploaded file. containing suspected child pornography by filename: ████████████.jpg. Your affiant also viewed this file and confirmed that it depicted a prepubescent female child exposing her genitals in a sexual act and/or pose. The child depicted in the image was undoubtedly under the age of 18.
Another Cybertip was reported to the National Center for Missing and Exploited Children (NCMEC), (CYBER TIP#153488859), from Microsoft. Microsoft reported that the user of their Microsoft Bing image search engine, uploaded three (3) images of suspected child pornography on 01/23/2023 beginning at 00:24:05 UTC, utilizing the IP Address.. 173.████. Microsoft reported that the date and time of the incident as 01/23/2022 at 00:24:05 UTC and identified this time as when the first image/video in a series was scanned. Microsoft further reported that the date/time provided indicates the time at which the image was received and evaluated by the Bing image service.
Microsoft identified one of the uploaded files containing the suspected child pornography by filename: ████████████.jpg. Microsoft reported that the date and time of this uploaded file as: 01/23/2023 at 01:08:45 UTC. Microsoft also reported that the IP Address captured at the time of the upload and identified that 1P Address as: 173.████.
Your affiant also viewed this reported file and confirmed that it depicted an “collage style” photograph depicting numerous prepubescent female children exposing their genitals in a sexual act and/or pose. The photograph was labeled, “Tiny Americans”. The female children depicted in the photographs were clearly under the age of 18.
Microsoft identified another one of the uploaded files containing the suspected child pornography by filename: ████████████.jpg. Microsoft reported that the date and time of this uploaded file as: 01/23/2023 at 01:01:12 UTC. Microsoft also reported that the IP Address captured at the time of the upload and identified that 1P Address as: 173.████.
Your affiant also viewed this reported file and confirmed that it depleted a prepubescent female child exposing her genitals in a sexual act and/or pose. The female child depicted in the image was also undoubtedly under the age of 18.
Lastly on 02/23/2023 at 02:19:23 UTC the National Center for Missing and Exploited Children (NCMEC), received another CyberTip, (CYBER TIP#755897531), from Microsoft. Microsoft reported that the user of their Microsoft Bing image search engine, uploaded three (3) Images of suspected child pornography on 02/22/2023 beginning at 15:52:11 UTC, utilizing the IP Address: 173.████. Microsoft reported that the date and time of the incident as 02/22/2023 at 15:52:11 UTC and identified this time as when the first image/video in a series was scanned. Microsoft further reported that the date/time provided indicates the time at which the image was received and evaluated by the Bing image service.
Microsoft identified one of the uploaded files containing the suspected child pornography by filename: ████████████.jpg. Microsoft reported that the date and time of this uploaded file as: 02/22/2023 at 15:52:11 UTC. Microsoft also reported that the IP Address captured at the time of the upload and identified that IP Address as: 173.████.
Your affiant also viewed this file and confirmed that it depicted two prepubescent female children posing together topless. One of the children’s genitals can be seen in the photograph. The top of the photograph is labeled “Secret Place”.
Your affiant conducted a check of the IP Address: 173.████ through IP2Location.com, which yielded results for belonging to Verizon Communications.
On 03/01/2023, your affiant applied for and obtained a search warrant for subscriber information and Verizon records on the Verizon IP Address: 173.████ on 07/04/2022 at 01:11:31 UTC, 01/23/2023 at 01:08:45 UTC, 01/23/2023 at 01.01:12 UTC, and 02/22/2023 at 15:52:11 UTC. These dates and times correspond with the child pornography uploads reported by Microsoft. On 03/02/2023, Verizon responded to this legal request and identified the subscriber during the time periods requested as: ████ WINTER with a service address of ████████████, PA 15147. Verizon identified the primary telephone number as: ████ and identified the email address associated on this account as: ████████.
A check of the address ████████████ through the Allegheny County Real Estate Portal yielded results for ████████████, PA 15147, located in the municipality of Penn Hills. The owner of this address is listed as: ████ & ████.
A search of registered sex offenders through the Pennsylvania Megan’s Law Website using the search parameters of Allegheny County and Municipality of Penn Hills, yielded results for a currently registered sex offender identified as: Lawrence WINTER, (D/O/B/ ████). WINTER has his registered residential address listed as ████████████, PA 15147. According to the Pennsylvania Megan’s Law Website, WINTER is currently registered for a previous conviction of US059- Receipt of Material Depicting The Sexual Exploitation Of A Minor.
A criminal history of Lawrence WINTER, (D/O/B ████), reflects that on 07/16/2013, he plead guilty to the sexual exploitation of a minor via telecommunication and was sentenced to Federal Prison for a term of 72 months, with a period of 180 months supervised release. A further review of his criminal history reflects that on 03/21/2019, WINTER was found guilty of a probation violation and sentenced to 10 months confinement. An email listed for WINTER on his criminal history, was identified as: ████ and a home telephone number listed for WINTER was identified as ████. It should be noted that the email and telephone number listed for WINTER on his criminal history is the same email address and telephone number listed on the Verizon IP Address subscriber and customer records.
On Thursday April 12, 2023, your affiant applied for and obtained a search warrant for the residence of ████████████, PA 15147 and the person of Lawrence Michael WINTER, (D/O/B/ ████). The search warrant was issued by Allegheny County Court of Common Pleas Judge, Kelly Biglay. On April 13, 2023, the FBI Pittsburgh Child Exploitation and Human Trafficking Task Force executed the search warrant at the residence of ████████████, PA 15147. WINTER was present during the execution and multiple flash drives were recovered from a cargo pocket on the lower right leg of his pants.
One of these flash drives was identified as a SanDisk flash drive, (SDCZ60-064G, BN22070042004). FBI Computer Analysis Response Team, (CART) conducted an onsite preview of the contents of the SanDisk flash drive. As a result the following tiles were located on the flash drive:
File Name: ████████████.jpg
Description: This file contained a “collage style” photograph with the words “Lovely Nymphets” in the top right hand corner of the image. The image reflected multiple images of a prepubescent female child exposing her genitals in a sexual actor pose. The child depicted in the image was undoubtedly under the age of 18 years old.
File Name: ████████████.jpg
Description: This file contained an image of a prepubescent female child performing oral sex on an adult male. The child depicted in the image was clearly under the age of 18 years old.
File Name: ████████████.jpg
Description: This file contained an image of a prepubescent female child exposing her genitals in a sexual actor pose. The child was undoubtedly under the age of 18 years old.
File Name: ████████████.jpg
Description: This fife depicted an image of a prepubescent female child exposing her genitals in a sexual actor pose. The child depicted in this image was clearly under the age of 18 years old.
File Name: ████████████.jpg
Description: This file depicted an image of a prepubescent female child exposing her genitals in a sexual actor pose. The child depicted in the image was clearly under the age of 18 years old.
In addition to the above referenced files containing apparent child pornography, there were several additional files that also depicted images and videos of children exposing their genitals and/or engaged in sexual activity.
WINTER was advised of his Miranda Warnings, which he acknowledged. After being advised of his rights, WINTER agreed to speak with Detective Dish. As a result of his interview, WINTER provided the following information. WINTER admitted to viewing child pornography and that he found it sexually arousing. He also stated that he has been doing so for approximately the last 18 months. WINTER also admitted to saving images of child pornography on his laptop computer. WINTER also advised Detective Dish that there were flash drives on his desk inside of his bedroom and indicated that that those flash drives would also have child Pornography on them.
Based on the aforementioned information, I am respectfully requesting that WINTER be charged with:
6312(D) – Possession of Child Pornography (5cts)
7512 – Criminal Use of a Communication Facility (1ct)
Presumption of Innocence: A presumption of innocence means that any defendant in a criminal trial is presumed to be innocent until they have been proven guilty beyond a reasonable doubt in a court of law. The defendant in this case is only accused of the charges set forth in the criminal complaint. They are innocent until proven guilty.
Editor's Note: ThePo makes every effort to accurately transcribe the contents of affidavits of probable cause contained in criminal complaints. Often, the complaints themselves are copies of copies of faxed copies, and are difficult to read. To confirm the accuracy of our transcription, contact the Magisterial District Court listed above and request a copy of the criminal complaint. It's a public record to which you are entitled.
Must Read
