20190708 153421.959 I Processing Manager Version: 10.16.1.9 Starting Job: 432£5009857c4ca0b21ef84f36f691c1 Started by Workstation-AES\aespivack on WORKSTATION-AES Processing manager: WORKSTATION-AES CaseID: 40 CasePath: Y:\Epstein\FTK\Epstein - DVDs JobType: AddEvidence DB System Postgres, Username ADG6x2, Host WORKSTATION-AES, Port 5432, SID ADG, IntSec False FTK Username: aespivack Evidence path: \\ PBB atorsepsteinvaig case\2: sn _orange case.iso Evidence type: DiskImage Evidence codepage: 1252 Processing options: <processingOptions> <evidenceProcesses> <PreProcessing> <dropIndexes /> <dematerializeViews /> </PreProcessing> <MD5 /> <SHA1 /> <FlagBadExtension /> <storeThumbnails /> <FileBoundFS> <TAR /> <ZIP /> <GZIP /> <BZIP2 /> <MSG /> <RAR /> <PST /> <DBX /> <MBOX /> <EMAIL /> <EXCHANGE /> <PKCS7? /> <SEVENZIP /> <PDF /> <MRADBS /> </FileBoundFS> <identify /> <undelete /> <indexing> <dtSearchOptions> <maxMem>250</maxMem> <maxWordLength>32</maxWordLength> <autoCommitInterval>0</autoCommit Interval> <hyphens>LQ==</hyphens> <ignores>AQIDBAUGBwgLDg8QERITFBUWFxgZ</ignores> <spaces>CQoMDSAhQCI jJCUmJygpKissLi860zw9P j 9bXF leYHt 8 f£X4=</spaces> <binaryFilteringOption> <filterBinaryUnicode /> </binaryFilteringOption> <dateRecognition> <off /> </dateRecognition> <hyphenTreatment> <hyphenSpace /> </hyphenTreatment> <letters> <letter>0 0 0 0</letter> <letter>1 1 1 1</letter> <letter>2 2 2 2</letter> EFTA00281079

--=PAGE_BREAK=--

<letter>3 <letter>4 <letter>5 <letter>6 <letter>7 <letter>8 <letter>9 <letter>A <letter>B <letter>c <letter>D <letter>E <letter>F <letter>G <letter>H <letter>I <letter>J <letter>K <letter>L <letter>M <letter>N <letter>o <letter>P <letter>9Q <letter>R <letter>s <letter>T <letter>U <letter>V <letter>wW <letter>x 3</letter> 4</letter> 5</letter> 6</letter> 7</letter> &</letter> 9</letter> A</letter> B</letter> C</letter> D</letter> E</letter> F</letter> G</letter> H</letter> I</letter> J</letter> K</letter> L</letter> M</letter> N</letter> o</letter> P</letter> Q</letter> R</letter> S</letter> T</letter> u</letter> v</letter> W</letter> x</letter> <letter>Y y¥</letter> <letter>Z z</letter> <letter>_ _</letter> <letter>a a</letter> <letter>b b</letter> <letter>c e</letter> <letter>d d</letter> <letter>e e</letter> <letter>£ f</letter> <letter>g g</letter> <letter>h h</letter> <letter>i i</letter> <letter>4 j</letter> <letter>k k</letter> <letter>1 l</letter> <letter>m m</letter> <letter>n n</letter> <letter>o o</letter> <letter>p p</letter> <letter>q q</letter> <letter>r r</letter> <letter>s s</letter> <letter>t t</letter> <letter>u u</letter> <letter>v v</letter> <letter>w w</letter> <letter>x x</letter> <letter>y y</letter> <letter>z z</letter> </letters> <noiseWords> <noiseWord>YQ==</noiseWord> <noiseWord>YWJvdxQ=</noiseWord> <noiseWord>YWZ0ZXI=</noiseWord> <noiseWord>YWxs</noiseWord> <noiseWord>YWxzbw==</noiseWord> <noiseWord>YW4=</noiseWord> <noiseWord>YW5k</noiseWord> <noiseWord>YW55</noiseWord> <noiseWord>YXJ1</noiseWord> <noiseWord>YXM=</noiseWord> <noiseWord>YXxQ=</noiseWord> <noiseWord>YmU=</noiseWord> <noiseWord>YmVlbg==</noiseWord> <noiseWord>Ynv0</noiseWord> <noiseWord>Ynk=</noiseWord> <noiseWord>Y2Fu</noiseWord> <noiseWord>Y29tzQ==</noiseWord> NXE SCCHTHHODVDOSDS reer TOMO ANT OBI HUH Sw NK KSC CHHAOVOZEOC RGN TOMAMOOWY Corgan dw aA bB ec dD eeE fF gG hH it ja kK iL mM nwN oO pP qgQ rR ss tT uvU vv ww x X y ¥ z2Z EFTA00281080

--=PAGE_BREAK=--

<noiseWord>Y291bGQ=</noiseWord> <noiseWord>ZG1lk</noiseWord> <noiseWord>ZG8=</noiseWord> <noiseWord>ZxZlbg==</noiseWord> <noiseWord>Zm9y</noiseWord> <noiseWord>ZnJvbQ==</noiseWord> <noiseWord>Z2vV0</noiseWord> <noiseWord>Z290</noiseWord> <noiseWord>aGU=</noiseWord> <noiseWord>aGVy</noiseWord> <noiseWord>aGlt</noiseWord> <noiseWord>aGlz</noiseWord> <noiseWord>aG93</noiseWord> <noiseWord>aQ==</noiseWord> <noiseWord>aWY=</noiseWord> <noiseWord>aW4=</noiseWord> <noiseWord>aW50bw==</noiseWord> <noiseWord>aXxQ=</noiseWord> <noiseWord>axXRz</noiseWord> <noiseWord>anVzdA==</noiseWord> <noiseWord>bG1rZQ==</noiseWord> <noiseWord>bWU=</noiseWord> <noiseWord>bxk=</noiseWord> <noiseWord>bm90</noiseWord> <noiseWord>bm93</noiseWord> <noiseWord>b2Y=</noiseWord> <noiseWord>b24=</noiseWord> <noiseWord>b25seQ==</noiseWord> <noiseWord>b3I=</noiseWord> <noiseWord>b3RoZXI=</noiseWord> <noiseWord>b3vy</noiseWord> <noiseWord>b3iv0</noiseWord> <noiseWord>b3Zleq==</noiseWord> <noiseWord>c2vVl</noiseWord> <noiseWord>c2hl</noiseWord> <noiseWord>c29tZQ==</noiseWord> <noiseWord>dGFrzZ </noiseWord> <noiseWord>dGhhbq==</noiseWord> <noiseWord>dGhhdA==</noiseWord> <noiseWord>dGhl</noiseWord> <noiseWord>dGhlaxI=</noiseWord> <noiseWord>dGhlbQ==</noiseWord> <noiseWord>dGhlb </noiseWord> <noiseWord>dGhlemU=</noiseWord> <noiseWord>dGhlce2U=</noiseWord> <noiseWord>dGhleQ==</noiseWord> <noiseWord>dGhpew==</noiseWord> <noiseWord>dGhvc2U=</noiseWord> <noiseWord>dG8=</noiseWord> <noiseWord>dG9v</noiseWord> <noiseWord>dW5kZXI=</noiseWord> <noiseWord>dxA=</noiseWord> <noiseWord>dmVyeQ==</noiseWord> <noiseWord>d2Fz</noiseWord> <noiseWord>d2F5</noiseWord> <noiseWord>d2U=</noiseWord> <noiseWord>d2VsbA==</noiseWord> <noiseWord>d2VyZ </noiseWord> <noiseWord>d2hhdA==</noiseWord> <noiseWord>d2hlbq==</noiseWord> <noiseWord>d2hlcmU=</noiseWord> <noiseWord>d2hpY2g=</noiseWord> <noiseWord>d2hpbGU=</noiseWord> <noiseWord>d2hv</noiseWord> <noiseWord>d21sbA==</noiseWord> <noiseWord>d210aA==</noiseWord> <noiseWord>d291bGQ=</noiseWord> <noiseWord>eW91</noiseWord> <noiseWord>eW9leq==</noiseWord> </noiseWords> </dtSearchOptions> <indexRefinement> <excludedFileCategoryList /> <conditionalAdd relationship="OR"> <fileType> <archives /> <databases /> <documents /> <emailMessages /> EFTA00281081

--=PAGE_BREAK=--

<executables /> <graphics /> <spreadsheets /> <others /> <unknown /> </fileType> <fileStatus /> </conditionalAdd> <indexDateSizeOptions /> </indexRefinement> </indexing> <evidenceRefinement> <applicationData /> <excludedFileCategoryList /> <conditionalAdd relationship="OR"> <fileStatus /> <fileType> <archives /> <databases /> <documents /> <emailMessages /> <executables /> <graphics /> <spreadsheets /> <others /> <unknown /> </fileType> </conditionalAdd> <evidenceDateSizeOptions /> </evidenceRefinement> <PostProcessing> <createMaterializedViews /> <generateDatabaseStatistics /> <createIndexes /> </PostProcessing> <ReferenceService> <HostName>http:// localhost : 9200</HostName> <Port>-1</Port> </ReferenceService> <carve> <carverList /> </carve> <MetaCarve /> <Video> <generateThumbnails mode="Percentage" interval="5" /> </Video> </evidenceProcesses> </processingOptions> RegistryKeySettings: HKEY_LOCAL_MACHINE\Software\AccessData\Products\Common TempDir = D:\adtemp HKEY_LOCAL_MACHINE\Software\AccessData\Products\Evidence Processing Engine\10.16 ExternStream = 0 AppPath = C:\Program Files\AccessData\Evidence Processing Engine\10.16\ 20190708 153423.659 432£5009857c4ca0b21lef84f£36f691c1 - Threads set to 6 20190708 153425.094 Using engine localhost 20190708 153425.110 Database preparation started 20190708 153425.531 Database preparation finished 20190708 153425.531 Processing started 20190708 153425.547 Processing started (1 of 2) 20190708 153428.979 432£5009857c4ca0b21lef84£36f691c1 - Threads set to 6 20190708 153430.695 Indexing started 20190708 153548.773 Processing finished 20190708 153548.773 Processing finished (1 of 2) 20190708 153639.083 Database optimization started 20190708 153642.609 Database optimization finished 20190708 154003.537 Indexing finished 20190708 154003.537 Job finished 20190708 154003.693 432£5009857c4ca0b2lef84£36£691c1 - AddEvidence job finished with state Finished Job had O failed items Enumerated: 36 EFTA00281082

--=PAGE_BREAK=--

Processed: 36 Indexed: 36 Job time: 00:05: 7/8/2019 3:34:25 PM to 7/8/2019 3:40:03 PM Processing: 00:01: 7/8/2019 3:34:25 PM to 7/8/2019 3:35:50 PM Postprocessing: 00:00:03 7/8/2019 3:36:39 PM to 7/8/2019 3:36:42 PM Indexing time: 00:05:32 7/8/2019 3:34:30 PM to 7/8/2019 3:40:03 PM 20190708 154004.130 I Finish job 432£5009857c4ca0b2lef84f36£691cl type:AddEvidence EFTA00281083