EFTA00281138.pdf

20190708 153431.631 I (ProcessorBase.cpp:105]: System: 20190708 153431.631 I (ProcessorBase.cpp:131): CPU: AMD64 12 processors 64bit RAM: 51537072128 Granularity: 65536 Pagesize: 4096 20190708 153431.631 I (ProcessorBase.cpp:133]: Environment: Variables: AFX43_DMC_TBLPATH=C:\Program Files\AccessData\Forensic Toolkit\4.0\bin\XSL-Formatter\base2;C:\ Program Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\base2;C:\Program Files\AccessData\Fo rensic Toolkit\6.2\bin\XSL-Formatter\base2 AFX43_FONT_CONFIGFILE=C:\Program Files\AccessData\Forensic Toolkit\4.0\bin\XSL-Formatter\bin\f ont.config.xml;C:\Program Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin\font.config.xm 1;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin\font.config.xml AFX43_HOME=C:\Program Files\AccessData\Forensic Toolkit\4.0\bin\XSL-Formatter\bin;C:\Program F iles\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Tool kit\6.2\bin\XSL-Formatter\bin AFX43_HYPDIC_PATH=C:\Program Files\AccessData\Forensic Toolkit\4.0\bin\XSL-Formatter\hyphenati on;C:\Program Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\hyphenation;C:\Program Files\A ccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\hyphenation AFX43_LIC_PATH=C:\Program Files\AccessData\Forensic Toolkit\4.0\bin\XSL-Formatter\bin;C:\Progr am Files\AccessData\Forensic Toolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\aespivack\AppData\Roaming CommonProgramFiles=C:\Program Files\Common Files CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files CommonProgramW6432=C:\Program Files\Common Files COMPUTERNAME=WORKSTATION-AES ComSpec=C:\Windows\system32\cmd.exe DEFAULT_CA_NR=CA100 FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Users\aespivack LOCALAPPDATA=C:\Users\aespivack\AppData\Local LOGONSERVER=\\WORKSTATION-AES MOZ_PLUGIN_PATH=C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ NUMBER_OF_PROCESSORS=12 OPENSSL_CONF=C:\Users\AESPIV-1\AppData\Local\Temp\(A48A84F7-BB48-4046-8BCE-40CD742C9BB4)\\open ssl.cfg OS=Windows_NT Path=o:\oracle\product\10.2.0\client_l\bin;O:\Oracle\Product\10.2.0\AccessDataDB\bin;C:\Window s\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Progra m Files\AccessData\Forensic Toolkit\4.0\bin\XSL-Formatter\bin;C:\Program Files\AccessData\Forensic T oolkit\5.3\bin\XSL-Formatter\bin;C:\Program Files (x86)\Common Files\Teleca Shared;C:\Program Files\ nodejs\;C:\Program Files\AccessData\Forensic Toolkit\6.2\bin\XSL-Formatter\bin;C:\Program Files (x86 )\Common Files\Apple\Apple Application Support;C:\Program Files (x86)\Common Files\Apple\Mobile Devi ce Support;C:\Program Files\Common Files\Apple\Apple Application Support;C:\Program Files\Common Fil es\Apple\Mobile Device Support;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0\;C:\Users\aespiv ack\AppData\Roaming\npm PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=AMD64 PROCESSOR_IDENTIFIER=Inte164 Family 6 Model 44 Stepping 2, Genuinelntel PROCESSOR_LEVEL=6 PROCESSOR_REVISION=2c02 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files ProgramFiles(x86)=C:\Program Files (x86) ProgramW6432=C:\Program Files PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ PUBLIC=C:\Users\Public SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\Windows TEMP=D:\adtemp TMP=D:\adtemp USERDOMAIN=Workstation-AES USERNAME=aespivack USERPROFILE=C:\Users\aespivack VBOX_MSI_INSTALL_PATH=C:\Program Files\Oracle\VirtualBox\ windir=C:\Windows windows_tracing_flags=3 windows_tracing_logfile=C:\BVTBin\Tests\installpackage\csilogfile.log _COMPAT_LAYER=RunAsAdmin DisableUserCallbackException Modules: C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADlndexer.exe sday, April 18, 2017 10.16.1.9 7:12:20 PM Tue C:\Windows\SYSTEM32\ntdll.dll 6:41:18 AM Thursday, November 17, 2011 6.1.7601.17725 C:\Windows\SYSTEM32\MSCOREE.DLL 3:23:48 AM Sunday, November 21, 2010 4.0.40305.0 C:\Windows\system32\KERNEL32.d11 5:37:12 AM Saturday, July 16, 2011 6.1.7601.17651 EFTA00281138 C:\Windows\system32\KERNELBASE.dll 5:37:12 AM Saturday, July 16, 2011 6.1.7601.17651 C:\Windows\system32\apphelp.dll 3:24:03 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\AppPatch\AppPatch64\AcGenral.DLL 1:40:00 AM Tuesday, July 14, 2009 6.1.7600 .16385 C:\Windows\system32\SspiCli.d11 C:\Windows\system32\msvcrt.d11 C:\Windows\system32\RPCRT4.d11 C:\Windows\system32\SHLWAPI.d11 C:\Windows\system32\GD132.d11 C:\Windows\system32\OSER32.d11 C:\Windows\system32\LPK.d11 1: C:\Windows\system32\USP10.d11 C:\Windows\system32\ole32.d11 C:\Windows\system32\SHELL32.d11 C:\Windows\system32\sfc.d11 1: C:\Windows\system32\sfc_os.DLL C:\Windows\system32\USERENV.d11 C:\Windows\system32\profapi.d11 C:\Windows\system32\dwmapi.d11 C:\Windows\system32\ADVAP132.d11 C:\Windows\SYSTEM32\sechost.d11 C:\Windows\system32\MPR.d11 1: C:\Windows\system32\IMM32.DLL C:\Windows\system32\MSCTF.d11 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll 12:34:06 AM Friday, November 06, 2015 4.6.1055.0 C:\Windows\system32\VERSION.dll 1:41:56 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll 12:34:06 AM Friday, November 06, 2015 4.6.1055.0 C:\Windows\system32\MSVCR120_CLR0400.d11 2:09:00 PM Thursday, October 22, 2015 12.0.52 512.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\mscorlib\fa8eef6f6cb67c660d71e15c5cad71b5\mscor lib.ni.dll 3:42:42 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\system32\CRYPTBASE.d11 1:40:24 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\uxtheme.d11 1:41:56 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\CRYPTSP.dll 1:40:24 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\rsaenh.dll 1:43:15 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\RpcRtRemote.d11 3:24:01 AM Sunday, November 21, 2010 6.1.7601.1751 4 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clrjit.dll 12:34:06 AM Friday, November 0 6, 2015 4.6.1055.0 C:\Windows\system32\OLEALIT32.d11 5:37:49 AM Saturday, August 27, 2011 6.1.7601.17676 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System\5f665a4076cb8d9479ca406e7827fb9f\System. ni.dll 3:42:49 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Drawing\1751687825177cb487c1080d7e37401f \System.Drawing.ni.dll 4:09:48 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Windows.Forms\a359814ff0333ca2c4ab29f30f 55dd20\System.Windows.Forms.ni.dll 4:09:57 PM Monday, July 02, 2018 4.6.1055.0 C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADLogger.dll 7:10:38 PM Tues day, April 18, 2017 6.2.0.400 C:\Program Files\AccessData\Evidence Processing Engine\10.16\ad_log.dll 7:10:36 PM Tuesda y, April 18, 2017 6.2.0.400 C:\Windows\system32\MSVCP140.d11 4:06:54 AM Friday, August 26, 2016 14.0.24215.1 CO,Windows\system32\VCRUNTIME140.d11 4:06:54 AM Friday, August 26, 2016 14.0.24215.1 CO,Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-runtime-11-1-0.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\ucrtbase.DLL 4:45:24 PM Wedn esday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-core-timezone-11-1-0.d 11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 CO,Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-core-file-12-1-0.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 CO,Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-core-localization-11-2 -0.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-core-synch-11-2-0.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 CO,Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-core-processthreads-11 -1-1.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 CO,Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-core-file-11-2-0.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-string-11-1-0.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 CO,Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-heap-11-1-0.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 CO,Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-stdio-11-1-0.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 CO,Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-convert-11-1-0.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 CO,Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-locale-11-1-0.d11 6:35:26 AM Thursday, November 17, 2011 6.1.7601.17725 8:46:06 AM Friday, December 16, 2011 7.0.7601.17744 3:24:02 AM Sunday, November 21, 2010 6.1.7601.17514 3:24:22 AM Sunday, November 21, 2010 6.1.7601.17514 3:24:03 AM Sunday, November 21, 2010 6.1.7601.17514 3:24:09 AM Sunday, November 21, 2010 6.1.7601.17514 41:19 AM Tuesday, July 14, 2009 6.1.7600.16385 3:24:08 AM Sunday, November 21, 2010 1.626.7601.17514 3:23:48 AM Sunday, November 21, 2010 6.1.7601.17514 5:43:10 AM Saturday, June 09, 2012 6.1.7601.17859 33:06 AM Tuesday, July 14, 2009 6.1.7600.16385 1:41:54 AM Tuesday, July 14, 2009 6.1.7600.16385 3:24:03 AM Sunday, November 21, 2010 6.1.7601.17514 1:41:53 AM Tuesday, July 14, 2009 6.1.7600.16385 1:40:34 AM Tuesday, July 14, 2009 6.1.7600.16385 1:40:01 AM Tuesday, July 14, 2009 6.1.7600.16385 1:41:53 AM Tuesday, July 14, 2009 6.1.7600.16385 41:26 AM Tuesday, July 14, 2009 6.1.7600.16385 1:41:09 AM Tuesday, July 14, 2009 6.1.7600.16385 1:41:28 AM Tuesday, July 14, 2009 6.1.7600.16385 EFTA00281139 11 dll 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-math-11-1-0.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-multibyte-11-1-0.d 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-time-11-1-0.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-filesystem-11-1-0. 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-environment-11-1-0 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\api-ms-win-crt-utility-11-1-0.d11 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10 7:10:52 PM Tuesday, April 18, 2017 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10 7:10:52 PM Tuesday, April 18, 2017 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10 7:10:52 PM Tuesday, April 18, 2017 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\boost_chrono-vc140-mt-1_59.d11 7:10:48 PM Tuesday, April 18, 2017 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\PLlsupportManaged.dll 7:11:3 6 PM Tuesday, April 18, 2017 10.16.1.9 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\nlssorting.dll 12:34:06 AM Friday, Novemb er 06, 2015 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Core\5034a88e58f966dd7d69fe9b9875832c\Sy stem.Core.ni.dll 3:51:31 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Configuration\46ec60579b59cedcc8c39cabca 6d1153\System.Configuration.ni.dll 3:51:33 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Xml\c9576235d85a3db71a0bee45aa4155ba\Sys tem.Xml.ni.dll 3:51:23 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\system32\ws2_32.d11 3:24:28 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\system32\NSI.dll 1:41:53 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\mswsock.dll 3:24:00 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\System32\wshtcpip.d11 1:41:58 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\System32\wship6.d11 1:41:58 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\NLAapi.dll 3:23:54 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\system32\napinsp.dll 1:41:52 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\pnrpnsp.dll 1:41:53 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\DNSAPI.dll 6:24:15 AM Thursday, March 03, 2011 6.1.7601.17570 C:\Windows\System32\winrnr.d11 1:41:56 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Windows\system32\wshbth.dll 3:24:36 AM Sunday, November 21, 2010 6.1.7601.17514 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.ServiceModel\ac14548e7a731da59e036d17ba8 e3c06\System.ServiceModel.ni.dll 4:11:13 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\System.Servdldec6261\7a5b7af88001106023a3e276d8 fbe359\System.ServiceModel.Internals.ni.dll 4:10:39 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\Nativelmages_v4.0.30319_64\SMDiagnostics\c329a07fa3cb821400eb59734c1a04d8\ SMDiagnostics.ni.d11 4:10:02 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa121\ec3ea73175791bdle5d2031d28 31e641\System.Runtime.Serialization.ni.dll 4:10:38 PM Monday, July 02, 2018 4.6.1055.0 C:\Windows\system32\pcwum.DLL 1:41:53 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Program Files\AccessData\Evidence Processing Engine\10.16\PLlsupport.dll 7:11:34 PM Tu esday, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing Engine\10.16\Altova.dll 7:10:44 PM Tuesda y, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing Engine\10.16\AltovaXML.d11 7:10:46 PM Tue sday, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing 36 PM Tuesday, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing day, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing ursday, August 04, 2016 7.73.8140.1 C:\Program Files\AccessData\Evidence Processing ay, April 18, 2017 57.1.0.0 C:\Program Files\AccessData\Evidence Processing ay, April 18, 2017 57.1.0.0 C:\Program Files\AccessData\Evidence Processing ay, April 18, 2017 57.1.0.0 C:\Program Files\AccessData\Evidence Processing Tuesday, April 18, 2017 2.0.0.22 C:\Program Files\AccessData\Evidence Processing 1 7:10:52 PM Tuesday, April 18, 2017 2.0.0.22 C:\Program Files\AccessData\Evidence Processing day, April 18, 2017 6.2.0.1026 C:\Program Files\AccessData\Evidence Processing esday, April 18, 2017 6.2.0.479 C:\Program Files\AccessData\Evidence Processing 7:10:56 PM Tuesday, April 18, 2017 6.2.0.1026 .dll Engine\10 Engine\10 Engine\10 Engine\10 Engine\10 Engine\10 Engine\10 Engine\10 Engine\10 Engine\10 Engine\10 .16\boost_date_time-vc140-mt-1_59.d11 .16\boost_thread-vc140-mt-1_59.d11 .16\boost_system-vc140-mt-1_59.d11 .16\processing_options.d11 7:11: .16\epshared.d11 .16\dtengine64.d11 .16\icuuc57.d11 .16\icudt57.d11 .16\icuin57.d11 .16\adshattrdefs.d11 7:11:06 PM Tues 9:58:02 PM Th 7:11:18 PM Tuesd 7:11:22 PM Tuesd 7:11:16 PM Tuesd 7:12:26 PM .16\boost_filesystem-vc140-mt-1_59.d1 .16\Database.dll 7:11:00 PM Tues .16\ad_globals.dll 7:10:34 PM Tu .16\Database.Definition.Wrapper.d11 EFTA00281140 C:\Program Files\AccessData\Evidence esday, April 18, 2017 6.2.0.1026 C:\Program Files\AccessData\Evidence sday, April 18, 2017 6.2.0.1026 C:\Windows\system32\WININET.d11 C:\Windows\system32\Normaliz.d11 C:\Windows\system32\iertutil.d11 50 C:\Windows\system32\urlmon.d11 8:04:24 PM Wednesday, C:\Program Files\AccessData\Evidence Processing Engine\10 day, April 18, 2017 1.0.1.16 C:\Program Files\AccessData\Evidence Processing Engine\10 4:45:24 PM Wednesday, November 02, 2016 10.0.14393.33 C:\Program Files\AccessData\Evidence Processing Engine\10.16\v2client.d11 day, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10.16\socketcomm.d11 esday, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing day, April 18, 2017 4.1.3.0 C:\Program Files\AccessData\Evidence Processing ay, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing day, April 18, 2017 1.0.1.16 C:\Program Files\AccessData\Evidence Processing 7:10:52 PM Tuesday, April 18, 2017 1.0.1.16 C:\Program Files\AccessData\Evidence Processing Tuesday, April 18, 2017 2016.4.0.1 C:\Program Files\AccessData\Evidence Processing Tuesday, April 18, 2017 6.2.0.479 C:\Program Files\AccessData\Evidence Processing Tuesday, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing M Tuesday, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing ay, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing sday, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Tuesday, April 18, 2017 6.2.0.473 C:\Windows\system32\PSAPI.DLL 1:41:53 AM Tuesday, July 14, 2009 6.1.7600.16385 C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADIsODLL.d11 7:12:22 PM Tues day, April 18, 2017 6.2.0.479 C:\Program Files\AccessData\Evidence Processing Engine\10.16\FTEComm.d11 ay, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing Engine\10 Tuesday, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing ay, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing day, April 18, 2017 6.2.0.473 C:\Program Files\AccessData\Evidence Processing ay, April 18, 2017 1.0.0.0 C:\Program Files\AccessData\Evidence Processing esday, April 18, 2017 1.0.0.0 C:\Windows\system32\mfc140u.d11 4:02:10 AM C:\Program Files\AccessData\Evidence Processing 2 PM Tuesday, April 18, 2017 6.2.0.1026 C:\Program Files\AccessData\Evidence Processing 7:11:06 PM Tuesday, April 18, 2017 2.0.0.2 C:\Windows\system32\VCOMP140.DLL 4:06:54 AM Friday, August 26, 2016 C:\Windows\system32\ESENT.dll 3:24:00 AM Sunday, November 21, 2010 C:\Program Files\AccessData\Evidence Processing Engine\10.16\summary.d11 ay, April 18, 2017 6.1.7601.17514 C:\Program Files\AccessData\Evidence Processing day, April 18, 2017 6.1.7601.17514 C:\Program Files\AccessData\Evidence Processing ay, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing Tuesday, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing y, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing sday, April 18, 2017 10.16.1.9 C:\Program Files\AccessData\Evidence Processing ay, April 18, 2017 7.45.0.0 C:\Windows\system32\WLDAP32.d11 3:24:07 AM C:\Program Files\AccessData\Evidence Processing esday, April 18, 2017 10.16.1.9 0 Processing Engine\10.16\DALWrapper.d11 Processing Engine\10.16\Retrieval.d11 8:04:24 PM Wednesday, September 26, 2012 1:31:40 AM Tuesday, July 14, 2009 6.1. 8:04:24 PM Wednesday, September 26, 2012 7:10:52 PM Tu 7:11:52 PM Tue 9.0.8112.1645 7600.16385 9.0.8112.164 September 26, 2012 9.0.8112.16450 .16\LIBEAY32.d11 7:13:00 PM Tues .16\api-ms-win-crt-conio-11-1-0.d11 7:11:52 PM Tues 7:11:50 PM Tu Engine\10.16\fipscomm.dll 7:11:10 PM Sues Engine\10.16\eshared.dll 7:11:06 PM Tuesd Engine\10.16\SSLEAY32.d11 7:13:24 PM Tues Engine\10.16\boost_regex-vc140-mt-1_59.d11 Engine\10.16\adtz_globals.dll 7:10:40 PM Engine\10.16\adfs_globals.dll 7:10:40 PM Engine\10.16\agent_globals.dll 7:10:42 PM Engine\10.16\abstractclient.dll 7:10:40 P Engine\10.16\agentfs.dll 7:10:42 PM Tuesd Engine\10.16\ProxyComm.d11 7:11:44 PM Tue Engine\10.16\filtering_lib.d11 7:11:16 PM Engine\10.16\Exporter.d11 Engine\10.16\Indexer.d11 7:11:08 PM Tuesd .16\v2proxyclient.dll 7:11:52 PM Engine\10.16\eremote.d11 Engine\10.16\netfslib.dll Engine\10.16\libbfio.d11 Engine\10.16\libvshadow.d11 7:11:06 PM Tuesd 7:11:30 PM Tues 7:11:22 PM Tuesd 7:11:24 PM Tu Friday, July 22, 2016 14.0.24213.1 Engine\10.16\DataAccessWrapper.d11 7:10:5 Engine\10.16\duplicate_text_analysis.d11 14.0.24215.1 6.1.7601.17514 7:11:50 PM Tuesd 7:11:12 PM Tues 7:11:20 PM Tuesd Engine\10.16\LiveSearcher.dll 7:11:26 PM Engine\10.16\Loader.dll 7:11:34 PM Tuesda Engine\10.16\Processor.dll 7:11:52 PM Tue Engine\10.16\libcurl.dll 7:11:22 PM Tuesd Sunday, November 21, 2010 6.1.7601.17514 Engine\10.16\libtextcat.dll 7:11:24 PM Tu EFTA00281141 C:\Program Files\AccessData\Evidence Processing Engine\10.16\entity_extraction.dll 7:11:0 6 PM Tuesday, April 18, 2017 2.0.0.2 C:\Program Files\AccessData\Evidence Processing Engine\10.16\dna-decryption.dll 7:11:02 P M Tuesday, April 18, 2017 2.0.0.2 C:\Program Files\AccessData\Evidence Processing Engine\10.16\dna-id.dll 7:11:06 PM Tuesda y, April 18, 2017 2.0.0.2 C:\Program Files\AccessData\Evidence Processing Engine\10.16\PhotoDNA.dll 7:11:34 PM Tues day, April 18, 2017 4.3.1.2 C:Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595664144ccfldf_1.1.7601.17825_none_2b25308 271ec7765\gdiplus.dll 5:16:47 AM Saturday, April 21, 2012 6.1.7601.17825 C:Windows\system32\CONCRT140.dll 4:06:54 AM Friday, August 26, 2016 14.0.24215.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\leveldb.dll 7:11:20 PM Tuesd ay, April 18, 2017 14.0.24215.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\boost_iostreams-vc140-mt-1_59.d11 7:10:52 PM Tuesday, April 18, 2017 14.0.24215.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\topic_model.dll 7:11:52 PM T uesday, April 18, 2017 14.0.24215.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\ADG.nKFFClient10.d11 7:10:40 PM Tuesday, April 18, 2017 14.0.24215.1 C:\Program Files\AccessData\Evidence Processing Engine\10.16\AgentRightsMgt.d11 7:10:44 P M Tuesday, April 18, 2017 6.2.0.1026 C:Windows\system32\ACTIVEDS.d11 1:40:00 AM Tuesday, July 14, 2009 6.1.7600.16385 C:Windows\system32\adsldpc.d11 1:40:00 AM Tuesday, July 14, 2009 6.1.7600.16385 COMindows\system32\ATL.DLL 1:40:03 AM Tuesday, July 14, 2009 3.5.2284.0 20190708 153431.647 I (ProcessorBase.cpp:391): [8140,) CaselD: 40 20190708 153431.647 I (ProcessorBase.cpp:392): [8140,) JobiD: 55b5a1c73ad24fed8af8e3020a5ca5e8 20190708 153431.647 I [ProcessorBase.cpp:393): [8140,) CasePath: Y:\Epstein\FTK\Epstein - DVDs 20190708 153431.647 I [ProcessorBase.cpp:394): [8140,) DB system: Postgres 20190708 153431.647 I (ProcessorBase.cpp:395): [8140,) DB username: ADG6x2 20190708 153431.647 I (ProcessorBase.cpp:396): [8140,) DB integrated security: 0 20190708 153431.647 I [ProcessorBase.cpp:397): [8140,) DB host: WORKSTATION-AES 20190708 153431.647 I [ProcessorBase.cpp:398): [8140,) DB port: 5432 20190708 153431.647 I [ProcessorBase.cpp:399): [8140,) DB sid: ADG 20190708 153431.647 I [ProcessorBase.cpp:400): [8140,) FTK username: aespivack 20190708 153431.647 I [ProcessorBase.cpp:401): [8140,) Size limit: 0 20190708 153431.647 I (ProcessorBase.cpp:402): [8140,) Count limit: 0 20190708 153431.647 I (ProcessorBase.cpp:441): [8140,) Working list path: D:\adtemp\55b5a1c73ad24fed 8af8e3020a5ca5e8.0.Indexer.WORKSTATION-AES 20190708 153432.239 I (index_args.cpp:163): [8140,] index_args: num_idx_threads == 4 20190708 153432.239 I (index_args.cpp:2351: [8140,] index_args: Mem Cap == 512 MB 20190708 153432.239 I (index_args.cpp:2501: [8140,] index_args: Set max memory to 128 MB per thread 20190708 153432.239 I (index_args.cpp:2751: [8140,] Setting auto commit interval == 256 20190708 153432.239 I (index_args.cpp:292]: [8140,] Setting approx_max_idx_size == 500 20190708 153432.239 I (Indexer.cpp:106): (8140,) Setting number of indexing threads to 4 20190708 153432.239 I (IndexerImpl.cpp:318): (7204] Indexing has started. 20190708 153432.239 I (DataProxy.cpp:272): (7204) DBThreadPool max threads: 12 20190708 153432.239 I (DataProxy.cpp:275): (7204) DBThreadCountBulkOperations max threads: 6 20190708 153432.255 I (Indexer.cpp:80): Indexer::SetNumThreads: Setting ► of threads to 4. Note thi s may not actually affect the I of indexer threads. 20190708 153432.754 I (7644] dtSearch index temporarily being put into 'D:\adtemp\I_Workstation-AES_ 55b5a1c73ad24fed8af8e3020a5ca5e8-7952\dts\40\7644-20190708T193432' 20190708 153432.754 I (972] dtSearch index temporarily being put into 'D:\adtemp\I_Workstation-AES_5 5b5a1c73ad24fed8af8e3020a5ca5e8-7952\dts\40\972-20190708T193432' 20190708 153432.754 I (5660] dtSearch index temporarily being put into 'D:\adtemp\I_Workstation-AES_ 55b5a1c73ad24fed8af8e3020a5ca5e8-7952\dts\40\5660-20190708T193432' 20190708 153432.754 I (7448] dtSearch index temporarily being put into 'D:\adtemp\I_Workstation-AES_ 55b5a1c73ad24fed8af8e3020a5ca5e8-7952\dts\40\7448-20190708T193432' 20190708 153432.832 I (ProcessorBase.cpp:787): [7748,e55bcbae789d6419d83ae215af630a63c00] _workerCou nt:1 _minQueueLen:4 _queueMultiplier:2 WorkQueueSize:0 20190708 153432.832 I (ProcessorBase.cpp:787): [7748,e55bcbae789d6419d83ae215af630a63c00) Handles: 5 68 Threads: 30 Read operations: 94 Read bytes: 920863 Write operations: 203 Write bytes: 616710 Other operations: 6726 Other bytes: 69782 Kernel time: 312 ms User time: 1591 ms Page fault count: 205959 Peak working set: 340860928 Working set: 301170688 Peak pagefile usage: 271093760 Pagefile usage: 222822400 Private bytes: 222822400 20190708 153433.768 I (7204] The thread names: 2756 is 'logger processor'. EFTA00281142 7204 5348 7448 5660 972 i 7644 20190708 1534 20190708 1534 ns: 0 20190708 109,1 20190708 20190708 20190708 20190708 ns: 0 20190708 0,1 20190708 20190708 20190708 20190708 ns: 0 20190708 31,2 20190708 1534 20190708 1534 20190708 1534 2756 7204 5348 7448 5660 972 i 7644 is 2580 is 7328 is 7820 20190708 1534 20190708 1534 ns: 0 20190708 0,2 20190708 20190708 20190708 20190708 ns: 0 20190708 32,19 20190708 20190708 20190708 20190708 ns: 0 20190708 0,5 20190708 20190708 20190708 20190708 ns: 0 20190708 15,1 20190708 20190708 20190708 20190708 ns: 0 20190708 0,1 20190708 20190708 20190708 20190708 ns: 0 20190708 0,1 20190708 1534 1534 1534 1534 1534 is 'IndexerImpl::execute()'. is 'IndexesMoveThread::operator()()'. is 'IndexingThread::operator()()'• is 'IndexingThread::operator()()'. s 'IndexingThread::operator()()'. is 'IndexingThread::operator()()'. 33.831 I (ProcObjectRetrieverlmpl.cpp:112]: 33.831 I (ProcObjectRetrieverlmpl.cpp:117]: 33.940 I (ProcObjectRetrieverlmpl.cpp:152]: 33.940 I (ObjectQueueThread.cpp:56]: (2580] 33.940 I (ObjectQueueThread.cpp:88]: (2580] 33.940 I (ProcObjectRetrieverlmpl.cpp:112]: 33.940 I (ProcObjectRetrieverlmpl.cpp:117]: 153433.940 I (ProcObjectRetrieverlmpl.cpp:152]: 1534 1534 1534 1534 1534 33 33 33 33 .940 I (ObjectQueueThread.cpp:56]: (2580] .940 I (ObjectQueueThread.cpp:88]: (2580] .940 I (ProcObjectRetrieverlmpl.cpp:112]: .940 I (ProcObjectRetrieverlmpl.cpp:117]: 33.971 I (ProcObjectRetrieverlmpl.cpp:152]: 33.971 I (ObjectQueueThread.cpp:56]: (2580] 33.971 I (ObjectQueueThread.cpp:88]: (2580] 34.829 I (7204] The thread names: is 'logger processor'. is 'IndexerImpl::execute()'. is 'IndexesMoveThread::operator()()'. is 'IndexingThread::operator()()'. is 'IndexingThread::operator(1()'• s 'IndexingThread::operator()()'. 'IndexingThread::operator()()'. 'ObjectQueueThread::operator()()'. 'ObjectQueueThread::operator()()'. is 'ObjectQueueThread::operator()()'. 35.531 I (ProcObjectRetrieverlmpl.cpp:112]: 35.531 I (ProcObjectRetrieverlmpl.cpp:117]: 153435.531 I (ProcObjectRetrieverlmpl.cpp:152]: 153435.531 I (ObjectQueueThread.cpp:56]: (2580] 153435.531 I (ObjectQueueThread.cpp:88]: (2580] 153435.531 I (ProcObjectRetrieverlmpl.cpp:112]: 153435.531 I (ProcObjectRetrieverlmpl.cpp:117]: 153435.562 I (ProcObjectRetrieverlmpl.cpp:152]: 153435.562 I (ObjectQueueThread.cpp:56]: (2580] 153435.562 I (ObjectQueueThread.cpp:88]: (2580] 153435.562 I (ProcObjectRetrieverlmpl.cpp:112]: 153435.562 I (ProcObjectRetrieverlmpl.cpp:117]: 153435.562 I (ProcObjectRetrieverlmpl.cpp:152]: 153435.562 I (ObjectQueueThread.cpp:56]: (2580] 153435.562 I (ObjectQueueThread.cpp:88]: (2580] 153435.562 I (ProcObjectRetrieverlmpl.cpp:112]: 153435.562 I (ProcObjectRetrieverlmpl.cpp:117]: 153435.578 I (ProcObjectRetrieverlmpl.cpp:152]: 153435.578 I (ObjectQueueThread.cpp:56]: (2580] 153435.578 I (ObjectQueueThread.cpp:88]: (2580] 153435.578 I (ProcObjectRetrieverlmpl.cpp:112]: 153435.578 I (ProcObjectRetrieverlmpl.cpp:117]: 153435.578 I (ProcObjectRetrieverlmpl.cpp:152]: 153435.578 I (ObjectQueueThread.cpp:56]: (2580] 153435.578 I (ObjectQueueThread.cpp:88]: (2580] 153635.714 I (ProcObjectRetrieverlmpl.cpp:112]: 153635.714 I (ProcObjectRetrieverlmpl.cpp:117]: 153635.714 I (ProcObjectRetrieverlmpl.cpp:152]: 153635.714 I (ObjectQueueThread.cpp:56]: (2580] (2580] ProcObjectretriever Read: 62,1 (2580] ProcObjectretriever Read CustomColum (2580] ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 170ms Index Push Queue Mutex Lock: 170ms (2580] ProcObjectretriever Read: 0,1 (2580] ProcObjectretriever Read CustomColum (2580] ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 9ms Index Push Queue Mutex Lock: 9ms (2580] ProcObjectretriever Read: 0,2 (2580] ProcObjectretriever Read CustomColum (2580] ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 30ms Index Push Queue Mutex Lock: 30ms (2580] ProcObjectretriever Read: 0,2 (2580] ProcObjectretriever Read CustomColum (2580] ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 5ms Index Push Queue Mutex Lock: 5ms (2580] ProcObjectretriever Read: 0,19 (2580] ProcObjectretriever Read CustomColum (2580] ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 32ms Index Push Queue Mutex Lock: 32ms (2580] ProcObjectretriever Read: 0,5 (2580] ProcObjectretriever Read CustomColum (2580] ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 5ms Index Push Queue Mutex Lock: 5ms (2580] ProcObjectretriever Read: 0,1 (2580] ProcObjectretriever Read CustomColum (2580] ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 3ms Index Push Queue Mutex Lock: 3ms (2580] ProcObjectretriever Read: 0,1 (2580] ProcObjectretriever Read CustomColum (2580] ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 3ms Index Push Queue Mutex Lock: 3ms (2580] ProcObjectretriever Read: 16,1 (2580] ProcObjectretriever Read CustomColum (2580] ProcObjectretriever GetStream/Attrs: Index Get Proc Objects: 23ms EFTA00281143 20190708 153635.714 I (ObjectQueueThread.cpp:88]: (2580] Index Push Queue Mutex Lock: 23ms 20190708 153638.834 I (ProcObjectRetrieverlmpl.cpp:112]: (2580] ProcObjectretriever Read: 0,1 20190708 153638.834 I (ProcObjectRetrieverlmpl.cpp:117]: (2580] ProcObjectretriever Read CustomColum ns: 0 20190708 153638.834 I (ProcObjectRetrieverlmpl.cpp:152]: (2580] ProcObjectretriever GetStream/Attrs: 0,1 20190708 153638.834 I (0bjectQueueThread.cpp:56]: (2580] Index Get Proc Objects: 4ms 20190708 153638.834 I (0bjectQueueThread.cpp:88]: (2580] Index Push Queue Mutex Lock: 4ms 20190708 153638.834 I (ProcObjectRetrieverlmpl.cpp:112]: (2580] ProcObjectretriever Read: 0,1 20190708 153638.834 I (ProcObjectRetrieverlmpl.cpp:117]: (2580] ProcObjectretriever Read CustomColum ns: 0 20190708 153638.834 I (ProcObjectRetrieverlmpl.cpp:152]: (2580] ProcObjectretriever GetStream/Attrs: 0,1 20190708 153638.834 I (ObjectQueueThread.cpp:56]: (2580] Index Get Proc Objects: 4ms 20190708 153638.834 I (0bjectQueueThread.cpp:88]: (2580] Index Push Queue Mutex Lock: 4ms 20190708 153638.834 I (ProcObjectRetrieverlmpl.cpp:112]: (2580] ProcObjectretriever Read: 0,1 20190708 153638.834 I (ProcObjectRetrieverlmpl.cpp:117]: (2580] ProcObjectretriever Read CustomColum ns: 0 20190708 153638.834 I (ProcObjectRetrieverlmpl.cpp:152]: (2580] ProcObjectretriever GetStream/Attrs: 0,1 20190708 153638.834 I (ObjectQueueThread.cpp:56]: (2580] Index Get Proc Objects: 2ms 20190708 153638.834 I (ObjectQueueThread.cpp:88]: (2580] Index Push Queue Mutex Lock: 2ms 20190708 154018.716 I (ProcObjectRetrieverlmpl.cpp:288]: (5348] ProcObjectretriever UpdatelndexedSta tus: 94,7 20190708 154020.666 I (ProcObjectRetrieverImpl.cpp:303]: (5348] ProcObjectretriever BulklnsertOrUpda teDtSearchDoclDs: 16,54 20190708 154020.666 I (5348] The temporary index 'D:\adtemp\I_Workstation-AES_55b5a1c73ad24fed8af8e3 020a5ca5e8-7952\dts\40\7644-20190708T193432' was successfully moved to 'Y:\Epstein\FTK\Epstein - DVD s\dts_idx\5' as part of the final case index. 20190708 154030.042 I (ProcObjectRetrieverImpl.cpp:288]: (5348] ProcObjectretriever UpdatelndexedSta tus: 16,6 20190708 154030.151 I (ProcObjectRetrieverImpl.cpp:303]: (5348] ProcObjectretriever BulklnsertOrUpda teDtSearchDoclDs: 16,53 20190708 154030.151 I (5348] The temporary index 'D:\adtemp\I_Workstation-AES_55b5a1c73ad24fed8af8e3 020a5ca5e8-7952\dts\40\972-20190708T193432' was successfully moved to 'Y:\Epstein\FTK\Epstein - DVDs \dts_idx\6' as part of the final case index. 20190708 154653.537 I (ProcObjectRetrieverImpl.cpp:288]: (5348] ProcObjectretriever UpdatelndexedSta tus: 31,2 20190708 154653.787 I (ProcObjectRetrieverImpl.cpp:303]: (5348] ProcObjectretriever BulklnsertOrUpda teDtSearchDoclDs: 31,96 20190708 154653.787 I (5348] The temporary index 'D:\adtemp\I_Workstation-AES_55b5a1c73ad24fed8af8e3 020a5ca5e8-7952\dts\40\5660-20190708T193432' was successfully moved to 'Y:\Epstein\FTK\Epstein - DVD s\dts_idx\7' as part of the final case index. 20190708 154746.125 I (ProcObjectRetrieverImpl.cpp:288]: (5348] ProcObjectretriever UpdatelndexedSta tus: 31,21 20190708 154746.265 I (ProcObjectRetrieverImpl.cpp:303]: (5348] ProcObjectretriever BulklnsertOrUpda teDtSearchDoclDs: 31,68 20190708 154746.265 I (5348] The temporary index 'D:\adtemp\I_Workstation-AES_55b5a1c73ad24fed8af8e3 020a5ca5e8-7952\dts\40\7448-20190708T193432' was successfully moved to 'Y:\Epstein\FTK\Epstein - DVD s\dts_idx\8' as part of the final case index. 20190708 154746.265 I (IndexerImpl.cpp:607]: (7204] Indexing has finished. 20190708 154746.265 I logger processor (2756) thread cpu accrued time: 0:00:00.046800 (46800 microse Cs). Wall clock transpired time: 0:13:14.992996 (794992996 microsecs). 20190708 154746.265 I IndexerImpl::execute() (7204) thread cpu accrued time: secs). Wall clock transpired time: 0:13:14.025794 (794025794 microsecs). 20190708 154746.265 I IndexesMoveThread::operator()() (5348) thread cpu accrued time: 0:00:00.717604 (717604 microsecs). Wall clock transpired time: 0:13:13.510993 (793510993 microsecs). 20190708 154746.265 I IndexingThread::operator()() (7448) thread cpu accrued time: 0:01:06.768428 (6 6768428 microsecs). Wall clock transpired time: 0:13:11.654590 (791654590 microsecs). 20190708 154746.265 I IndexingThread::operator()() (5660) thread cpu accrued time: 0:02:06.376410 (1 26376410 microsecs). Wall clock transpired time: 0:12:17.210494 (737210494 microsecs). 20190708 154746.265 I IndexingThread::operator()() (972) thread cpu accrued time: 0:01:09.217643 (69 217643 microsecs). Wall clock transpired time: 0:05:55.665024 (355665024 microsecs). 20190708 154746.265 I IndexingThread::operator()() (7644) thread cpu accrued time: 0:01:02.743602 (6 2743602 microsecs). Wall clock transpired time: 0:05:44.245804 (344245804 microsecs). 20190708 154746.265 I ObjectQueueThread::operator()() (2580) thread cpu accrued time: 0:00:00.031200 (31200 microsecs). Wall clock transpired time: 0:05:40.267797 (340267797 microsecs). 20190708 154746.265 I ObjectQueueThread::operator()() (7328) thread cpu accrued time: 0:00:00.000000 (0 microsecs). Wall clock transpired time: 0:05:40.564198 (340564198 microsecs). 20190708 154746.265 I ObjectQueueThread::operator()() (7820) thread cpu accrued time: 0:00:00.000000 (0 microsecs). Wall clock transpired time: 0:05:40.564198 (340564198 microsecs). 20190708 154746.265 I total of above threads' cpu accrued times: 0:05:25.901689 (325901689 microsecs 20190708 154746.265: process 7952 cpu accrued time: 0:05:27.976502 (327976502 microsecs). k transpired time: 0:13:15.710597 (795710597 microsecs). 0:00:00.000000 (0 micro Wall cloc EFTA00281144