Last week, I spent some time tracing a lot of the larger MEM wallet transactions. Now I have time to get a little more organized and came up with this simple table of addresses, transactions, and dates. Currently, I have accounted for 281 BTC that are currently sitting in colds wallets. They have not been tampered with since the MEM incident. https://www.docdroid.net/N2n96rE/mem-btc-tracking-copy.pdf.html
The above table is valid up to 2015-11-07 12:52:13, where all of the new deposits are automatically routed to the BTC-e exchange as seen here: https://www.walletexplorer.com/wallet/MiddleEarthMarketplace
To get an even better understanding, I will try and map out the BTC locations for any coin moved before 2015-11-05 21:29:36. I will continue to perform my due diligence and post any updates and I find them. If anyone has any helpful information, please PM to me.
EDIT: Fixed the links. Sorry !!
[deleted]