20190708 153431.631 I [ProcessorBase.cpp:105): System: 20190708 153431.631 I (ProcessorBase.cpp:131): CPU: AMD64 12 processors 64bit RAM: 51537072128 Granularity: 65536 Pagesize: 4096 20190708 153431.631 I [ProcessorBase.cpp:133]): Environment: Variables: AFX43_DMC_TBLPATH=C: \Program Files\AccessData\Forensic Toolkit\4.0\bin\XSL-Formatter\base2;C:\ Program Files\AccessData\Forensic Toolkit\5.3\bin\xSL-Formatter\base2;C:\Program Files\AccessData\Fo rensic Toolkit\6.2\bin\XSL-Formatter\base2 AFX43_FONT_CONFIGFILE=C:\Program Files\AccessData\Forensic Toolkit\4.0\bin\xSL-Formatter\bin\f ont.config.xml;C:\Program Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin\font.config.xm 1;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\xXSL-Formatter\bin\font.config.xml AFX43_HOME=C:\Program Files\AccessData\Forensic Toolkit\4.0\bin\xXSL-Formatter\bin;C:\Program F iles\AccessData\Forensic Toolkit\5.3\bin\xSL-Formatter\bin;C:\Program Files\AccessData\Forensic Tool kit\6.2\bin\XSL-Formatter\bin AFX43_HYPDIC_PATH=C:\Program Files\AccessData\Forensic Toolkit\4.0\bin\XSL-Formatter\hyphenati on;C:\Program Files\AccessData\Forensic Toolkit\5.3\bin\xSL-Formatter\hyphenation;C:\Program Files\A ecessData\Forensic Toolkit\6.2\bin\XSL-Formatter\hyphenation AFX43_LIC_PATH=C:\Program Files\AccessData\Forensic Toolkit\4.0\bin\xSL-Formatter\bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C: \ProgramData APPDATA=C: \Users\aespivack \AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles (x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WORKSTATION-AES ComSpec=C: \Windows\system32\cmd.exe DEFAULT_CA_NR=CA100 FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Users\aespivack LOCALAPPDATA=C: \Users \aespivack\AppData\Local LOGONSERVER=\ \WORKSTATION-AES MOZ_PLUGIN_PATH=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ NUMBER_OF_PROCESSORS=12 OPENSSL_CONF=C: \Users \AESPIV~1\AppData\Local\Temp\ {A48A84F7-BB48-4046-8BCE-40CD742C 9BB4}\\open ssl.cfg OS=Windows_NT Path=o: \oracle\product\10.2.0\client_1\bin;0: \Oracle\Product\10.2.0\AccessDataDB\bin;C: \Window s\system32; C:\Windows; C:\Windows \System32\Wbem; C: \Windows\System32\WindowsPowerShell\v1.0\;C:\Progra m Files\AccessData\Forensic Toolkit\4.0\bin\xSL-Formatter\bin;C:\Program Files\AccessData\Forensic T oolkit\5.3\bin\xSL-Formatter\bin;C:\Program Files (x86)\Common Files\Teleca Shared;C:\Program Files\ nodejs\;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin;C:\Program Files (x86 )\Common Files\Apple\Apple Application Support;C:\Program Files (x86)\Common Files\Apple\Mobile Devi ce Support;C:\Program Files\Common Files\Apple\Apple Application Support;C:\Program Files\Common Fil es\Apple\Mobile Device Support;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0\;C:\Users\aespiv ack\AppData\Roaming\npm PATHEXT=.COM; .EXE; .BAT; .CMD; .VBS; .VBE; .JS; .JSE; .WSF; .WSH; .MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 44 Stepping 2, GenuineIntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C: \ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C: \Windows\system32\WindowsPowerShell\v1.0\Modules\ PUBLIC=C: \Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C: \Windows TEMP=D: \adtemp TMP=D: \adtemp USERDOMAIN=Workstation-AES USERNAME=aespivack USERPROFILE=C: \Users\aespivack VBOX_MSI_INSTALL_PATH=C: \Program Files\Oracle\VirtualBox\ windir=C: \Windows windows_tracing_flags=3 windows_tracing_logfile=C:\BVTBin\Tests\installpackage\csilogfile.log ___COMPAT_LAYER=RunAsAdmin DisableUserCallbackException Modules: C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADIndexer.exe 7:12:20 PM Tue sday, April 18, 2017 10.16.1.9 C:\Windows\SYSTEM32\ntdll.dll 6:41:18 AM Thursday, November 17, 2011 6.1.7601.17725 C: \Windows\SYSTEM32\MSCOREE .DLL 3:23:48 AM Sunday, November 21, 2010 4.0.40305.0 C:\Windows\system32\KERNEL32.d11 5:37:12 AM Saturday, July 16, 2011 6.1.7601.17651 EFTA00281138

--=PAGE_BREAK=--

C:\Windows\system32\KERNELBASE.d1l1 5:37:12 AM Saturday, July 16, 2011 6.1.7601.17651 C:\Windows\system32\apphelp.dll 3:24:03 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\AppPatch\AppPatch64\AcGenral.DLL 1:40:00 AM Tuesday, July 14, 2009 6.1.7600 16385 C:\Windows\system32\Sspicli.dll 6:35:26 AM Thursday, November 17, 2011 6.1.7601.17725 C:\Windows\system32\msvert.dll 8:46:06 AM Friday, December 16, 2011 7.0.7601.17744 C:\Windows\system32\RPCRT4.dll 3:24:02 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\system32\SHLWAPI.d1ll 3:24:22 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\system32\GDI32.dl1l 3:24:03 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\system32\USER32.dl1 3:24:09 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\system32\LPK.d1l1 1:41:19 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\USP10.dl1l 3:24:08 AM Sunday, November 21, 2010 1.626.7601.17514 C:\Windows\system32\ole32.dll 3:23:48 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\system32\SHELL32.dll 5:43:10 AM Saturday, June 09, 2012 6.1.7601.17859 C:\Windows\system32\sfc.dll 1:33:06 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\sfc_os.DLL 1:41:54 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\USERENV.d1ll 3:24:03 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\system32\profapi.dll 1:41:53 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\dwmapi.dll 1:40:34 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\ADVAPI32.dl1l 1:40:01 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\SYSTEM32\sechost .dll 1:41:53 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\MPR.d1l1 1:41:26 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\IMM32.DLL 1:41:09 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\MSCTF.dll 1:41:28 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\Microsoft .NET\Framework64\v4.0.30319\mscoreei.dll 12:34:06 AM Friday, November 06, 2015 4.6.1055.0 C:\Windows\system32\VERSION.d1ll 1:41:56 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\Microsoft .NET\Framework64\v4.0.30319\clr.dll 12:34:06 AM Friday, November 06, 2015 4.6.1055.0 C:\Windows\system32\MSVCR120_CLRO400.d11 2:09:00 PM Thursday, October 22, 2015 12.0.52 512.0 C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ fa8eef6f6cb67c660d71lel5c5cad71b5\mscor lib.ni.dll 3:42:42 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\system32\CRYPTBASE.d1l 1:40:24 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\uxtheme.d1ll 1:41:56 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\CRYPTSP.d1ll 1:40:24 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\rsaenh.dll 1:43:15 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\RpcRtRemote.dll 3:24:01 AM Sunday, November 21, 2010 6.1.7601.1751 4 C:\Windows\Microsoft .NET\Framework64\v4.0.30319\clrjit.dll 12:34:06 AM Friday, November 0 6, 2015 4.6.1055.0 C:\Windows\system32\OLEAUT32.d11 5:37:49 AM Saturday, August 27, 2011 6.1.7601.17676 C:\Windows\assembly\NativeImages_v4.0.30319_64\System\5f£665a4076cb8d9479ca4d06e7827£b9F\System. ni.dll 3:42:49 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\1751687825177cb487cl080d7e37401£F \System.Drawing.ni.dll 4:09:48 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\a359814ff0333ca2c4ab29f30f 55dd20\System.Windows.Forms.ni.dll 4:09:57 PM Monday, July 02, 2018 4.6.1055.0 C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADLogger.dll 7:10:38 PM Tues day, April 18, 2017 6.2.0.400 C:\Program Files\AccessData\Evidence Processing Engine\10.16\ad_log.dll 7:10:36 PM Tuesda y, April 18, 2017 6.2.0.400 C:\Windows\system32\MSVCP140.d11 4:06:54 AM Friday, August 26, 2016 14.0.24215.1 C:\Windows\system32\VCRUNTIME140.d11 4:06:54 AM Friday, August 26, 2016 14.0.24215.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-runtime-11-1-0.d1l1 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\ucrtbase.DLL 4:45:24 PM Wedn esday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms—win-core-timezone-11-1-0.d ll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-core-file-12-1-0.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-core-localization-11-2 -O.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-core-synch-11-2-0.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-core-processthreads-11 -1-1.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms—win-core-file-11-2-0.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-string-1l1l-1-0.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-heap-11-1-0.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-stdio-1l1-1-0.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-convert-11-1-0.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-locale-11-1-0.dll EFTA00281139

--=PAGE_BREAK=--

4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms—-win-crt-math-11-1-0.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-multibyte-11-1-0.d 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-time-11-1-0.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-filesystem-11-1-0. dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-environment-11-1-0 .dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-utility-1l1-1-0.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\boost_date_time-vc140-mt-1_59.dl1l 7:10:52 PM Tuesday, April 18, 2017 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\boost_thread-vcel40-mt-1_59.dll 7:10:52 PM Tuesday, April 18, 2017 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\boost_system-vcl40-mt-1_59.dll 7:10:52 PM Tuesday, April 18, 2017 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\boost_chrono-vc140-mt-1_59.dll 7:10:48 PM Tuesday, April 18, 2017 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\PLIsupportManaged.dll 7:11:3 6 PM Tuesday, April 18, 2017 10.16.1.9 C:\Windows\Microsoft .NET\Framework64\v4.0.30319\nlssorting.dll 12:34:06 AM Friday, Novemb er 06, 2015 4.6.1055.0 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\5034a88e58 £966dd7d69fe9b9875832c\Sy stem.Core.ni.dll 3:51:31 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Configuration\46ec60579b59cedec8c39cabca 6d1153\System.Configuration.ni.dll 3:51:33 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\NativeImages_v4.0.30319_64\System. Xm1\c9576235d85a3db7 1la0bee45aa4155ba\Sys tem.Xml.ni.dll 3:51:23 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\system32\ws2_32.dll 3:24:28 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\system32\NSI.d1l1 1:41:53 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\mswsock.dll 3:24:00 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\System32\wshtcpip.dll 1:41:58 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\System32\wship6.dll 1:41:58 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\NLAapi.dll 3:23:54 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\system32\napinsp.dll 1:41:52 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\pnrpnsp.dll 1:41:53 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\DNSAPI.dll 6:24:15 AM Thursday, March 03, 2011 6.1.7601.17570 C:\Windows\System32\winrnr.dll 1:41:56 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\wshbth.dll 3:24:36 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\assembly\NativeImages_v4.0.30319_64\System. ServiceModel\ac14548e7a731da59e036d17baB e3c06\System.ServiceModel.ni.dll 4:11:13 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\NativeImages_v4.0.30319_64\System. Servdidec626#\7a5Sb7af88001106023a3e276d8 fbe359\System. ServiceModel.Internals.ni.dll 4:10:39 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\NativeImages_v4.0.30319_64\SMDiagnostics\c329a07 fa3cb821400eb59734c1a04d8\ SMDiagnostics.ni.dll 4:10:02 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\NativeImages_v4.0.30319_64\System. Runteb92aal2#\ec3ea73175791bd1e5d2031d28 31e641\System.Runtime.Serialization.ni.dll 4:10:38 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\system32\pcwum.DLL 1:41:53 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Program Files\AccessData\Evidence Processing Engine\10.16\PLIsupport.dll 7:11:34 PM Tu esday, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing Engine\10.16\Altova.dll 7:10:44 PM Tuesda y, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing Engine\10.16\AltovaxML.dll 7:10:46 PM Tue sday, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing Engine\10.16\processing_options.dll Till: 36 PM Tuesday, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing Engine\10.16\epshared.dll 7:11:06 PM Tues day, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing Engine\10.16\dtengine64.dll 9:58:02 PM Th ursday, August 04, 2016 7.73.8140.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\icuuc57.dll 7:11:18 PM Tuesd ay, April 18, 2017 57.1.0.0 C:\Program Files\AccessData\Evidence Processing Engine\10.16\icudt57.dll 7:11:22 PM Tuesd ay, April 18, 2017 57.1.0.0 C:\Program Files\AccessData\Evidence Processing Engine\10.16\icuin57.dll 7:11:16 PM Tuesd ay, April 18, 2017 57.1.0.0 C:\Program Files\AccessData\Evidence Processing Engine\10.16\adshattrdefs.dll 7:12:26 PM Tuesday, April 18, 2017 2.0.0.22 C:\Program Files\AccessData\Evidence Processing Engine\10.16\boost_filesystem-vcl40-mt-1_59.dl 1 7:10:52 PM Tuesday, April 18, 2017 2.0.0.22 C:\Program Files\AccessData\Evidence Processing Engine\10.16\Database.dll 7:11:00 PM Tues day, April 18, 2017 6.2.0.1026 C:\Program Files\AccessData\Evidence Processing Engine\10.16\ad_globals.dll 7:10:34 PM Tu esday, April 18, 2017 6.2.0.479 C:\Program Files\AccessData\Evidence Processing Engine\10.16\Database.Definition.Wrapper.dll 7:10:56 PM Tuesday, April 18, 2017 6.2.0.1026 EFTA00281140

--=PAGE_BREAK=--

C:\Program Files\AccessData\Evidence Processing Engine\10.16\DALWrapper.d1ll 7:10:52 PM Tu esday, April 18, 2017 6.2.0.1026 C:\Program Files\AccessData\Evidence Processing Engine\10.16\Retrieval.dll 7:11:52 PM Tue sday, April 18, 2017 6.2.0.1026 C:\Windows\system32\WININET.d1ll 8:04:24 PM Wednesday, September 26, 2012 9.0.8112.1645 0 C:\Windows\system32\Normaliz.dll 1:31:40 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\iertutil.dll 8:04:24 PM Wednesday, September 26, 2012 9.0.8112.164 50 C:\Windows\system32\urlmon.dll 8:04:24 PM Wednesday, September 26, 2012 9.0.8112.16450 C:\Program Files\AccessData\Evidence Processing Engine\10.16\LIBEAY32.d1l1 7:13:00 PM Tues day, April 18, 2017 1.0.1.16 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-conio-11-1-0.dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\v2client.dll 7:11:52 PM Tues day, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10.16\socketcomm.dll 7:11:50 PM Tu esday, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10.16\fipscomm.dll 7:11:10 PM Tues day, April 18, 2017 4.1.3.0 C:\Program Files\AccessData\Evidence Processing Engine\10.16\eshared.dll 7:11:06 PM Tuesd ay, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10.16\SSLEAY32.d11 7:13:24 PM Tues day, April 18, 2017 1.0.1.16 C:\Program Files\AccessData\Evidence Processing Engine\10.16\boost_regex-vel40-mt-1_59.dll 7:10:52 PM Tuesday, April 18, 2017 1.0.1.16 C:\Program Files\AccessData\Evidence Processing Engine\10.16\adtz_globals.dll 7:10:40 PM Tuesday, April 18, 2017 2016.4.0.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\adfs_globals.dll 7:10:40 PM Tuesday, April 18, 2017 6.2.0.479 C:\Program Files\AccessData\Evidence Processing Engine\10.16\agent_globals.dll 7:10:42 PM Tuesday, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10.16\abstractclient.dll 7:10:40 P M Tuesday, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10.16\agentfs.dll 7:10:42 PM Tuesd ay, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10.16\ProxyComm.dll 7:11:44 PM Tue sday, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10.16\filtering_lib.dll 7:11:16 PM Tuesday, April 18, 2017 6.2.0.473 C:\Windows\system32\PSAPI.DLL 1:41:53 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADIsoDLL.dll 7:12:22 PM Tues day, April 18, 2017 6.2.0.479 C:\Program Files\AccessData\Evidence Processing Engine\10.16\FTKComm.dll 7:11:08 PM Tuesd ay, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10.16\v2proxyclient.dll 7:11:52 PM Tuesday, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10.16\eremote.dll 7:11:06 PM Tuesd ay, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10.16\netfslib.dll 7:11:30 PM Tues day, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10.16\libbfio.dll 7:11:22 PM Tuesd ay, April 18, 2017 1.0.0.0 C:\Program Files\AccessData\Evidence Processing Engine\10.16\libvshadow.d1ll 7:11:24 PM Tu esday, April 18, 2017 1.0.0.0 C:\Windows\system32\mfc140u.dll 4:02:10 AM Friday, July 22, 2016 14.0.24213.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\DataAccessWrapper.dll 7:10:5 2 PM Tuesday, April 18, 2017 6.2.0.1026 C:\Program Files\AccessData\Evidence Processing Engine\10.16\duplicate_text_analysis.dll 7:11:06 PM Tuesday, April 18, 2017 2.0.0.2 C:\Windows\system32\VCOMP140.DLL 4:06:54 AM Friday, August 26, 2016 14.0.24215.1 C:\Windows\system32\ESENT.dll 3:24:00 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Program Files\AccessData\Evidence Processing Engine\10.16\summary.dll 7:11:50 PM Tuesd ay, April 18, 2017 6.1.7601.17514 C:\Program Files\AccessData\Evidence Processing Engine\10.16\Exporter.dll 7:11:12 PM Tues day, April 18, 2017 6.1.7601.17514 C:\Program Files\AccessData\Evidence Processing Engine\10.16\Indexer.dll 7:11:20 PM Tuesd ay, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing Engine\10.16\LiveSearcher.dll 7:11:26 PM Tuesday, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing Engine\10.16\Loader.d1ll 7:11:34 PM Tuesda y, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing Engine\10.16\Processor.dll 7:11:52 PM Tue sday, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing Engine\10.16\libcurl.dll 7:11:22 PM Tuesd ay, April 18, 2017 7.45.0.0 C:\Windows\system32\WLDAP32.d11 3:24:07 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Program Files\AccessData\Evidence Processing Engine\10.16\libtextcat.dll 7:11:24 PM Tu esday, April 18, 2017 10.16.1.9 EFTA00281141

--=PAGE_BREAK=--

C:\Program Files\AccessData\Evidence Processing Engine\10.16\entity_extraction.dll 7:11:0 6 PM Tuesday, April 18, 2017 2.0.0.2 C:\Program Files\AccessData\Evidence Processing Engine\10.16\dna-decryption.dll 7:11:02 P M Tuesday, April 18, 2017 2.0.0.2 C:\Program Files\AccessData\Evidence Processing Engine\10.16\dna-id.dll 7:11:06 PM Tuesda y, April 18, 2017 2.0.0.2 C:\Program Files\AccessData\Evidence Processing Engine\10.16\PhotoDNA.dll 7:11:34 PM Tues day, April 18, 2017 4.3.1.2 C:\Windows\WinSxS\amd64_microsoft .windows.gdiplus_6595b64144ccfldf_1.1.7601.17825_none_2b253c8 271ec7765\gdiplus.dll 5:16:47 AM Saturday, April 21, 2012 6.1.7601.17825 C:\Windows\system32\CONCRT140.d11 4:06:54 AM Friday, August 26, 2016 14.0.24215.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\leveldb.dll 7:11:20 PM Tuesd ay, April 18, 2017 14.0.24215.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\boost_iostreams-—vc140-mt-1_59.dll 7:10:52 PM Tuesday, April 18, 2017 14.0.24215.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\topic_model.dll 7:11:52 PM T uesday, April 18, 2017 14.0.24215.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADG.nKFFClient10.dll 7:10:40 PM Tuesday, April 18, 2017 14.0.24215.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\AgentRightsMgt .dll 7:10:44 P M Tuesday, April 18, 2017 6.2.0.1026 C:\Windows\system32\ACTIVEDS.dll 1:40:00 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\adsldpe.dll 1:40:00 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\ATL.DLL 1:40:03 AM Tuesday, July 14, 2009 3.5.2284.0 20190708 153431.647 (ProcessorBase.cpp:391): [8140,}) CaseID: 40 20190708 153431.647 (ProcessorBase.cpp:392): [8140,) JobID: 55b5alc7?3ad24fed8af8e3020a5ca5e8 20190708 153431.647 (ProcessorBase.cpp:393): [8140,) CasePath: Y¥:\Epstein\FTK\Epstein - DVDs 20190708 153431.647 (ProcessorBase.cpp:394]: [8140,) DB system: Postgres 20190708 153431.647 (ProcessorBase.cpp:395]: [8140,) DB username: ADG6x2 20190708 153431.647 (ProcessorBase.cpp:396]: [8140,}) DB integrated security: 0 20190708 153431.647 (ProcessorBase.cpp:397]: [8140,]) DB host: WORKSTATION-AES 20190708 153431.647 (ProcessorBase.cpp:398]: [8140,) DB port: 5432 20190708 153431.647 (ProcessorBase.cpp:399]: [8140,]) DB sid: ADG 20190708 153431.647 (ProcessorBase.cpp:400]: [8140,) FTK username: aespivack 20190708 153431.647 (ProcessorBase.cpp:401]: [8140,) Size limit: 0 20190708 153431.647 (ProcessorBase.cpp:402]: [8140,] Count limit: 0 20190708 153431.647 (ProcessorBase.cpp:441]: [8140,]) Working list path: D:\adtemp\55b5alc7?3ad24fed Saf8e3020a5ca5e8.0. Indexer .WORKSTATION-AES 20190708 153432.239 (index_args.cpp:163): [8140,] index_args: num_idx_threads == 20190708 153432.239 (index_args.cpp:235): [8140,] index_args: Mem Cap == 512 MB 20190708 153432.239 {index_args.cpp:250): [8140,] index_args: Set max memory to 128 MB per thread 20190708 153432.239 (index_args.cpp:275}): [8140,] Setting auto commit interval == 256 20190708 153432.239 {index_args.cpp:292): [8140,] Setting approx_max_idx_size == 500 20190708 153432.239 {Indexer.cpp:106]: [8140,] Setting number of indexing threads to 4 20190708 153432.239 {IndexerImpl.cpp:318]: [7204] Indexing has started. 20190708 153432.239 (DataProxy.cpp:272): (7204) DBThreadPool max threads: 12 20190708 153432.239 (DataProxy.cpp:275]): (7204) DBThreadCountBulkOperations max threads: 6 20190708 153432.255 (Indexer.cpp:80): Indexer::SetNumThreads: Setting # of threads to 4. Note thi s may not actually affect the # of indexer threads. 20190708 153432.754 I (7644) dtSearch index temporarily being put into ‘D:\adtemp\I_Workstation-AES_ 55b5aic7 3ad24fed8af8e3020a5ca5e8-7952\dts\40\7644-20190708T193432' 20190708 153432.754 I [972] dtSearch index temporarily being put into ‘'D:\adtemp\I_Workstation-AES_5 5b5alc73ad24 fed8af8e3020a5ca5e8-7952\dts\40\972-20190708T193432" 20190708 153432.754 I (5660) dtSearch index temporarily being put into ‘D:\adtemp\I_Workstation-AES_ 55b5aic?3ad24fed8af8e3020a5ca5e8-7952\dts\40\5660-20190708T193432" 20190708 153432.754 I (7448) dtSearch index temporarily being put into ‘D:\adtemp\I_Workstation-AES_ 55b5alc?3ad24fed8af8e3020a5ca5e8-7952\dts\40\7448-20190708T193432" 20190708 153432.832 I [ProcessorBase.cpp:787): [7748, e55bcbae789d6419d83ae215af630a63c00) _workerCou nt:1 _minQueueLen:4 _queueMultiplier:2 WorkQueueSize:0 20190708 153432.832 I [(ProcessorBase.cpp:787): [7748, e55bcbae789d6419d83ae215af630a63c00) Handles: 5 68 Threads: 30 Read operations: 94 Read bytes: 920863 Write operations: 203 Write bytes: 616710 Other operations: 6726 Other bytes: 69782 Kernel time: 312 ms User time: 1591 ms Page fault count: 205959 Peak working set: 340860928 Working set: 301170688 Peak pagefile usage: 271093760 Pagefile usage: 222822400 Private bytes: 222822400 HHHHH HHH HHH HH HHHHHHHH HH 20190708 153433.768 I (7204) The thread names: 2756 is ‘logger processor’. EFTA00281142

--=PAGE_BREAK=--

20190708 20190708 ns: 0 20190708 109,1 20190708 20190708 20190708 20190708 ns: 0 20190708 0,1 20190708 20190708 20190708 20190708 ns: 0 20190708 31,2 20190708 20190708 20190708 20190708 20190708 ns: 0 20190708 0,2 20190708 20190708 20190708 20190708 ns: 0 20190708 32,19 20190708 20190708 20190708 20190708 ns: 0 20190708 0,5 20190708 20190708 20190708 20190708 ns: 0 20190708 15,1 20190708 20190708 20190708 20190708 ns: 0 20190708 0,1 20190708 20190708 20190708 20190708 ns: 0 20190708 0,1 20190708 2756 7204 5348 7448 is 5660 is 972 is ’ 7644 is 153433. 153433. is is 153433. 153433. 153433. 153433. 153433. 153433. 153433. 153433. 153433. 153433. 153433. 153433. 153433. 153434. is is is 7204 5348 7448 is 5660 is 972 is ’ 7644 is 2580 is 7328 is 7820 is 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153435. 153635. 153635. 153635. 153635. ‘IndexerImpl::execute()’. ’ IndexesMoveThread: :operator() ()’. ‘IndexingThread: :operator()()}’. ‘IndexingThread: :operator()()’. IndexingThread: :operator() ()’. ‘ IndexingThread: :operator() ()‘. 831 I [(ProcObjectRetrieverImpl.cpp:112]: 831 I [(ProcObjectRetrieverImpl.cpp:117]: 940 I [(ProcObjectRetrieverImpl.cpp:152]: (Object QueueThread.cpp:56]: [2580] (Object QueueThread.cpp:88]: [2580] (ProcObjectRetrieverImpl.cpp:112)]: (ProcObjectRetrieverImpl.cpp:117): 940 940 940 940 940 (ProcObjectRetrieverImpl.cpp:152): 940 940 940 940 (Object QueuvueThread.cpp:56): [2580] (Object QueuvueThread.cpp:88): [2580] (ProcObjectRetrieverImpl.cpp:112): (ProcObjectRetrieverImpl.cpp:117): 971 (ProcObjectRetrieverImpl.cpp:152): 971 I [2580] (2580) (Object QueueThread.cpp: 56]: 971 I [ObjectQueueThread.cpp:88): 829 I (7204) The thread names: ‘logger processor’. ’IndexerImpl::execute()’. ’ IndexesMoveThread: :operator() ()'. ’IndexingThread: :operator()()’. ‘IndexingThread:: IndexingThread: :operator() ()’. ‘IndexingThread::operator()()’. ‘ObjectQueueThread: :operator() ()’. ‘ObjectQueueThread: :operator() ()’. ‘ObjectQueueThread: :operator() ()'. 531 I (ProcObjectRetrieverImpl.cpp:112]: 531 I (ProcObjectRetrieverImpl.cpp:117]: 531 I [ProcObjectRetrieverImpl.cpp:152): 531 531 531 531 (Object QueveThread.cpp:56): [2580] (Object QueuveThread.cpp:88): [2580] (ProcObjectRetrieverImpl.cpp:112): (ProcObjectRetrieverImpl.cpp:117): 562 (ProcObjectRetrieverImpl.cpp:152): 562 562 562 562 (Object QueuveThread.cpp:56): [2580] (Object QueueThread.cpp:88]: [2580] (ProcObjectRetrieverImpl.cpp:112]: (ProcObjectRetrieverImpl.cpp:117]: 562 (ProcObjectRetrieverImpl.cpp:152]: (Object QueueThread.cpp:56)]: [2580] (Object QueueThread.cpp:88): [2580] (ProcObjectRetrieverImpl.cpp:112]: (ProcObjectRetrieverImpl.cpp:117): 562 562 562 562 578 (ProcObjectRetrieverImpl.cpp:152): 578 578 578 578 (Object QueueThread.cpp:56]: [2580] (Object QueuvueThread.cpp:88): [2580] (ProcObjectRetrieverImpl.cpp:112): (ProcObjectRetrieverImpl.cpp:117): 578 (ProcObjectRetrieverImpl.cpp:152): 578 578 714 714 (Object QueuveThread.cpp:56): [2580] (Object QueuveThread.cpp:88): [2580] (ProcObjectRetrieverImpl.cpp:112]: (ProcObjectRetrieverImpl.cpp:117): 714 (ProcObjectRetrieverImpl.cpp:152): 714 (2580) (Object QueveThread.cpp: 56]: [2580] ProcObjectRetriever Read: 62,1 [2580] ProcObjectRetriever Read CustomColum (2580) ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 170ms Index Push Queue Mutex Lock: 170ms [2580] ProcObjectRetriever Read: 0,1 [2580] ProcObjectRetriever Read CustomColum (2580) ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 9ms Index Push Queue Mutex Lock: 9ms [2580] ProcObjectRetriever Read: 0,2 [2580] ProcObjectRetriever Read CustomColum [2580] ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 30ms Index Push Queue Mutex Lock: 30ms (2580] (2580] ProcObjectRetriever Read: 0,2 ProcObjectRetriever Read CustomColum (2580) ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 5ms Index Push Queue Mutex Lock: 5ms [2580] ProcObjectRetriever Read: 0,19 (2580) ProcObjectRetriever Read CustomColum [2580] ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 32ms Index Push Queue Mutex Lock: 32ms [2580] ProcObjectRetriever Read: 0,5 [2580] ProcObjectRetriever Read CustomColum (2580) ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 5ms Index Push Queue Mutex Lock: 5ms [2580] ProcObjectRetriever Read: 0,1 [2580] ProcObjectRetriever Read CustomColum (2580) ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 3ms Index Push Queue Mutex Lock: 3ms [2580] ProcObjectRetriever Read: 0,1 [2580] ProcObjectRetriever Read CustomColum (2580) ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 3ms Index Push Queue Mutex Lock: 3ms [2580] ProcObjectRetriever Read: 16,1 [2580] ProcObjectRetriever Read CustomColum (2580) ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 23ms EFTA00281143

--=PAGE_BREAK=--

20190708 153635.714 (ObjectQueuvueThread.cpp:88): [2580] Index Push Queue Mutex Lock: 23ms 20190708 153638.834 (ProcObjectRetrieverImpl.cpp:112]: [2580] ProcObjectRetriever Read: 0,1 20190708 153638.834 (ProcObjectRetrieverImpl.cpp:117]): [2580] ProcObjectRetriever Read CustomColum ns: 0 20190708 153638.834 (ProcObjectRetrieverImpl.cpp:152]: [2580] ProcObjectretriever GetStream/Attrs: 0,1 20190708 153638.834 (Object QueueThread.cpp:56)]: [2580] Index Get Proc Objects: 4ms 20190708 153638.834 (Object QueueThread.cpp:88]: [2580] Index Push Queue Mutex Lock: 4ms 20190708 153638.834 (ProcObjectRetrieverImpl.cpp:112]: [2580] ProcObjectRetriever Read: 0,1 20190708 153638.834 (ProcObjectRetrieverImpl.cpp:117]: [2580] ProcObjectRetriever Read CustomColum ns: 0 20190708 153638.834 (ProcObjectRetrieverImpl.cpp:152]: [2580] ProcObjectretriever GetStream/Attrs: 0,1 20190708 153638.834 (Object QueueThread.cpp:56]: [2580] Index Get Proc Objects: 4ms 20190708 153638.834 (Object QueueThread.cpp:88]: [2580] Index Push Queue Mutex Lock: 4ms 20190708 153638.834 (ProcObjectRetrieverImpl.cpp:112]: [2580] ProcObjectRetriever Read: 0,1 20190708 153638.834 (ProcObjectRetrieverImpl.cpp:117): [2580] ProcObjectRetriever Read CustomColum ns: 0 20190708 153638.834 (ProcObjectRetrieverImpl.cpp:152]: [2580] ProcObjectretriever GetStream/Attrs: 0,1 20190708 153638.834 I [ObjectQueuveThread.cpp:56): [2580] Index Get Proc Objects: 2ms 20190708 153638.834 I [ObjectQueuveThread.cpp:88)]: [2580] Index Push Queue Mutex Lock: 2ms 20190708 154018.716 I [(ProcObjectRetrieverImpl.cpp:288]: [5348] ProcObjectretriever UpdateIndexedSta tus: 94,7 20190708 154020.666 I [(ProcObjectRetrieverImpl.cpp:303): [5348] ProcObjectretriever BulkInsertOrUpda teDtSearchDocIDs: 16,54 20190708 154020.666 I (5348) The temporary index ’D:\adtemp\I_Workstation-AES_55b5alc73ad24fed8afBe3 020a5ca5e8-7952\dts\40\7644-20190708T193432' was successfully moved to ’¥:\Epstein\FTK\Epstein - DVD s\dts_idx\5’ as part of the final case index. 20190708 154030.042 I [(ProcObjectRetrieverImpl.cpp:288]: [5348] ProcObjectretriever UpdateIndexedSta tus: 16,6 20190708 154030.151 I [(ProcObjectRetrieverImpl.cpp:303]: [5348] ProcObjectretriever BulkInsertOrUpda teDtSearchDocIDs: 16,53 20190708 154030.151 I (5348) The temporary index ’D:\adtemp\I_Workstation-AES_55b5alc73ad24fed8afBe3 020a5ca5e8-7952\dts\40\972-20190708T193432’ was successfully moved to ‘Y:\Epstein\FTK\Epstein - DVDs \dts_idx\6’ as part of the final case index. 20190708 154653.537 I [(ProcObjectRetrieverImpl.cpp:288]: [5348] ProcObjectretriever UpdateIndexedSta tus: 31,2 20190708 154653.787 I (ProcObjectRetrieverImpl.cpp:303]): [5348] ProcObjectretriever BulkInsertOrUpda teDtSearchDocIDs: 31,96 20190708 154653.787 I (5348) The temporary index ’D:\adtemp\I_Workstation-AES_55b5alc73ad24fed8af8e3 020a5ca5e8-7952\dts\40\5660-20190708T193432' was successfully moved to ’¥:\Epstein\FTK\Epstein - DVD s\dts_idx\7’ as part of the final case index. 20190708 154746.125 I [ProcObjectRetrieverImpl.cpp:288]: [5348] ProcObjectretriever UpdateIndexedSta tus: 31,21 20190708 154746.265 I [(ProcObjectRetrieverImpl.cpp:303): [5348] ProcObjectretriever BulkInsertOrUpda teDtSearchDocIDs: 31,68 20190708 154746.265 I (5348) The temporary index ‘'D:\adtemp\I_Workstation-AES_55b5alc73ad24fed8af8e3 020a5ca5e8-7952\dts\40\7448-20190708T193432' was successfully moved to ’Y¥:\Epstein\FTK\Epstein - DVD s\dts_idx\8’ as part of the final case index. 20190708 154746.265 I [IndexerImpl.cpp:607): [7204] Indexing has finished. 20190708 154746.265 I logger processor (2756) thread cpu accrued time: 0:00:00.046800 (46800 microse es). Wall clock transpired time: 0:13:14.992996 (794992996 microsecs). 20190708 154746.265 I IndexerImpl::execute() (7204) thread cpu accrued time: 0:00:00.000000 (0 micro secs). Wall clock transpired time: 0:13:14.025794 (794025794 microsecs). 20190708 154746.265 I IndexesMoveThread::operator()() (5348) thread cpu accrued time: 0:00:00.717604 (717604 microsecs). Wall clock transpired time: 0:13:13.510993 (793510993 microsecs). 20190708 154746.265 I IndexingThread::operator()() (7448) thread cpu accrued time: 0:01:06.768428 (6 6768428 microsecs). Wall clock transpired time: 0:13:11.654590 (791654590 microsecs). 20190708 154746.265 I IndexingThread::operator()() (5660) thread cpu accrued time: 0:02:06.376410 (1 26376410 microsecs). Wall clock transpired time: 0:12:17.210494 (737210494 microsecs). 20190708 154746.265 I IndexingThread::operator()() (972) thread cpu accrued time: 0:01:09.217643 (69 217643 microsecs). Wall clock transpired time: 0:05:55.665024 (355665024 microsecs). 20190708 154746.265 I IndexingThread::operator()() (7644) thread cpu accrued time: 0:01:02.743602 (6 2743602 microsecs). Wall clock transpired time: 0:05:44.245804 (344245804 microsecs). 20190708 154746.265 I ObjectQueueThread::operator()() (2580) thread cpu accrued time: 0:00:00.031200 (31200 microsecs). Wall clock transpired time: 0:05:40.267797 (340267797 microsecs). 20190708 154746.265 I ObjectQueueThread::operator()() (7328) thread cpu accrued time: 0:00:00.000000 (Q microsecs). Wall clock transpired time: 0:05:40.564198 (340564198 microsecs). 20190708 154746.265 I ObjectQueueThread::operator()() (7820) thread cpu accrued time: 0:00:00.000000 (Q microsecs). Wall clock transpired time: 0:05:40.564198 (340564198 microsecs). 20190708 154746.265 I total of above threads’ cpu accrued times: 0:05:25.901689 (325901689 microsecs ). 20190708 154746.265: process 7952 cpu accrued time: 0:05:27.976502 (327976502 microsecs). Wall cloc k transpired time: 0:13:15.710597 (795710597 microsecs). EFTA00281144