DATE/TIME THREAD LEVEL MESSAGE 2017-05-21 16:25:48 1 INFO Logging has been initialized. 2017-05-21 16:25:53 8 INFO Added license for AXIOM_SMS from TrialKey-Magnet 2017-05-21 16:25:53 8 INFO Added license for Process_Computer from TrialKey-Magnet 2017-05-21 16:25:53 8 INFO Added license for Process_Smartphone from TrialKey-Magnet 2017-05-21 16:25:53 8 INFO Added license for Examine_Full from TrialKey-Magnet 2017-05-21 16:25:53 8 INFO Added license for Examine_Lite from TrialKey-Magnet 2017-05-21 16:26:02 1 INFO Process Worker 1 Started 2017-05-21 16:26:02 1 INFO Process Worker 1 Finished 2017-05-21 16:26:04 1 INFO Xml Artifact Loader: Beginning parsing of file C:\Program Files\Magnet Forensics\Magnet AXIOM\AXIOM Process\Plugins\GarminConnectP3.xml 2017-05-21 16:26:05 1 INFO Xml Artifact Loader: Beginning parsing of file C:\Program Files\Magnet Forensics\Magnet AXIOM\AXIOM Process\Plugins\CMDownloads.xml 2017-05-21 16:26:05 1 ERROR Xml Artifact Parser v1 - CM Security Downloads (v1.0): Reserved column name used. Cannot use 'Source', 'Located At', or 'Evidence Number' as an alias. 2017-05-21 16:26:09 1 DEBUG Settings table already exists. Will not attempt to create. 2017-05-21 16:27:11 1 DEBUG CaseDataContext task added. Active: 1 2017-05-21 16:27:11 17 DEBUG CaseDataContext task removed. Active: 0 2017-05-21 16:27:11 1 DEBUG Updating recent cases setting 2017-05-21 16:27:11 1 DEBUG CaseDataContext task added. Active: 1 2017-05-21 16:27:11 19 DEBUG CaseDataContext task removed. Active: 0 2017-05-21 16:27:11 1 DEBUG CaseDataContext task added. Active: 1 2017-05-21 16:27:11 11 DEBUG CaseDataContext task removed. Active: 0 2017-05-21 16:27:11 1 DEBUG CaseDataContext task added. Active: 1 2017-05-21 16:27:11 18 DEBUG CaseDataContext task removed. Active: 0 2017-05-21 16:27:11 1 INFO Adding evidence to case: E:\Owl Case\AXIOM - May 19 2017 110532 2017-05-21 16:27:11 1 DEBUG CaseDataContext task added. Active: 1 2017-05-21 16:27:12 19 DEBUG CaseDataContext task removed. Active: 0 DATE/TIME THREAD LEVEL MESSAGE 2017-05-22 09:07:50 1 INFO Logging has been initialized. 2017-05-22 09:07:58 8 INFO Added license for AXIOM_SMS from TrialKey-Magnet 2017-05-22 09:07:58 8 INFO Added license for Process_Computer from TrialKey-Magnet 2017-05-22 09:07:58 8 INFO Added license for Process_Smartphone from TrialKey-Magnet 2017-05-22 09:07:58 8 INFO Added license for Examine_Full from TrialKey-Magnet 2017-05-22 09:07:58 8 INFO Added license for Examine_Lite from TrialKey-Magnet 2017-05-22 09:08:08 1 INFO Process Worker 1 Started 2017-05-22 09:08:08 1 INFO Process Worker 1 Finished 2017-05-22 09:08:12 1 INFO Xml Artifact Loader: Beginning parsing of file C:\Program Files\Magnet Forensics\Magnet AXIOM\AXIOM Process\Plugins\CMDownloads.xml 2017-05-22 09:08:14 1 ERROR Xml Artifact Parser v1 - CM Security Downloads (v1.0): Reserved column name used. Cannot use 'Source', 'Located At', or 'Evidence Number' as an alias. 2017-05-22 09:08:14 1 INFO Xml Artifact Loader: Beginning parsing of file C:\Program Files\Magnet Forensics\Magnet AXIOM\AXIOM Process\Plugins\GarminConnectP3.xml 2017-05-22 09:08:17 1 DEBUG Settings table already exists. Will not attempt to create. 2017-05-22 09:16:44 1 INFO Creating a new case. 2017-05-22 09:18:36 1 INFO Process Worker 1 StopWaitingForNewItems DATE/TIME THREAD LEVEL MESSAGE 2017-05-22 09:18:38 SearchEngine.StartSearch DEBUG Starting search with debug logging 2017-05-22 09:18:39 SearchEngine.StartSearch INFO Number Of Processors: 1 2017-05-22 09:18:39 SearchEngine.StartSearch INFO Processor 0 Name: Intel(R) Core(TM) i7-4710MQ CPU @ 2.50GHz 2017-05-22 09:18:39 SearchEngine.StartSearch INFO Processor 0 64-bit Ready: True 2017-05-22 09:18:39 SearchEngine.StartSearch INFO Processor 0 Cores: 4 2017-05-22 09:18:39 SearchEngine.StartSearch INFO Processor 0 Logical Processors: 8 2017-05-22 09:18:39 SearchEngine.StartSearch INFO Memory Available: 31.67 GB 2017-05-22 09:18:39 SearchEngine.StartSearch INFO Build Version: 1.1.1.4971 2017-05-22 09:18:39 SearchEngine.StartSearch INFO Search has started. 2017-05-22 09:18:40 SearchEngine.StartSearch INFO Preferred number of threads set to 8 threads. 2017-05-22 09:18:40 SearchEngine.StartSearch INFO Number of logical CPUs: 8 2017-05-22 09:18:40 SearchEngine.StartSearch INFO Memory available on the system: 34000187392 bytes 2017-05-22 09:18:40 SearchEngine.StartSearch INFO Spawning 8 worker threads 2017-05-22 09:18:40 SearchEngine.StartSearch INFO Setting data processor timeout to 45 minutes. 2017-05-22 09:18:40 SearchEngine.StartSearch WARN Volume () does not exist on LGE Nexus 5 Quick Image.zip 2017-05-22 09:18:40 SearchEngine.StartSearch INFO Creating Linux searcher for non-ExtX, non-FAT, and non-YAFFS filesystem (ZIP) 2017-05-22 09:18:40 SearchEngine.StartSearch INFO Starting a new search definition on LGE Nexus 5 Quick Image.zip at 5/22/2017 9:18:40 AM 2017-05-22 09:18:40 SearchEngine.StartSearch WARN Volume () does not exist on LGE Nexus 5 Quick Image.zip 2017-05-22 09:18:40 SearchEngine.StartSearch INFO Creating Linux searcher for non-ExtX, non-FAT, and non-YAFFS filesystem (ZIP) 2017-05-22 09:18:42 Worker Thread 7 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:18:42 Worker Thread 5 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:18:42 Worker Thread 1 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:18:42 Worker Thread 3 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:18:42 Worker Thread 0 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:18:42 Worker Thread 6 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:18:42 Worker Thread 4 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:18:42 Worker Thread 2 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Finishing search definition on LGE Nexus 5 Quick Image.zip at 5/22/2017 9:20:11 AM 2017-05-22 09:20:11 Worker Thread 7 INFO Worker Thread 7 has been stopped. 2017-05-22 09:20:11 Worker Thread 1 INFO Worker Thread 1 has been stopped. 2017-05-22 09:20:11 Worker Thread 3 INFO Worker Thread 3 has been stopped. 2017-05-22 09:20:11 Worker Thread 2 INFO Worker Thread 2 has been stopped. 2017-05-22 09:20:11 Worker Thread 0 INFO Worker Thread 0 has been stopped. 2017-05-22 09:20:11 Worker Thread 6 INFO Worker Thread 6 has been stopped. 2017-05-22 09:20:11 Worker Thread 4 INFO Worker Thread 4 has been stopped. 2017-05-22 09:20:11 Worker Thread 5 INFO Worker Thread 5 has been stopped. 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Preferred number of threads set to 8 threads. 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Number of logical CPUs: 8 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Memory available on the system: 34000187392 bytes 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Spawning 8 worker threads 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Setting data processor timeout to 45 minutes. 2017-05-22 09:20:11 SearchEngine.StartSearch WARN Volume () does not exist on adb-data.tar 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Creating Linux searcher for non-ExtX, non-FAT, and non-YAFFS filesystem (TAR) 2017-05-22 09:20:11 SearchEngine.StartSearch WARN Volume () does not exist on busybox-signed.zip 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Creating Linux searcher for non-ExtX, non-FAT, and non-YAFFS filesystem (ZIP) 2017-05-22 09:20:11 SearchEngine.StartSearch WARN Volume () does not exist on quick-reboot-signed.zip 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Creating Linux searcher for non-ExtX, non-FAT, and non-YAFFS filesystem (ZIP) 2017-05-22 09:20:11 SearchEngine.StartSearch WARN Volume () does not exist on SR2-SuperSU-v2.79-SR2-20170103215521.zip 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Creating Linux searcher for non-ExtX, non-FAT, and non-YAFFS filesystem (ZIP) 2017-05-22 09:20:11 SearchEngine.StartSearch WARN Volume () does not exist on voice_instructions_imperial.zip 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Creating Linux searcher for non-ExtX, non-FAT, and non-YAFFS filesystem (ZIP) 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Starting a new search definition on adb-data.tar at 5/22/2017 9:20:11 AM 2017-05-22 09:20:11 SearchEngine.StartSearch WARN Volume () does not exist on adb-data.tar 2017-05-22 09:20:11 SearchEngine.StartSearch INFO Creating Linux searcher for non-ExtX, non-FAT, and non-YAFFS filesystem (TAR) 2017-05-22 09:20:12 Worker Thread 6 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:20:12 Worker Thread 0 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:20:12 Worker Thread 5 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:20:12 Worker Thread 2 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:20:12 Worker Thread 4 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:20:12 Worker Thread 7 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:20:12 Worker Thread 3 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:20:12 Worker Thread 1 INFO ArtifactEngine created byte scanner (type=Pfac, fallback=False, allow=True always=False) 2017-05-22 09:20:30 SearchEngine.StartSearch INFO Finishing search definition on adb-data.tar at 5/22/2017 9:20:30 AM 2017-05-22 09:20:30 SearchEngine.StartSearch INFO Starting a new search definition on busybox-signed.zip at 5/22/2017 9:20:30 AM 2017-05-22 09:20:30 SearchEngine.StartSearch WARN Volume () does not exist on busybox-signed.zip 2017-05-22 09:20:30 SearchEngine.StartSearch INFO Creating Linux searcher for non-ExtX, non-FAT, and non-YAFFS filesystem (ZIP) 2017-05-22 09:20:35 SearchEngine.StartSearch INFO Finishing search definition on busybox-signed.zip at 5/22/2017 9:20:35 AM 2017-05-22 09:20:35 SearchEngine.StartSearch INFO Starting a new search definition on quick-reboot-signed.zip at 5/22/2017 9:20:35 AM 2017-05-22 09:20:35 SearchEngine.StartSearch WARN Volume () does not exist on quick-reboot-signed.zip 2017-05-22 09:20:35 SearchEngine.StartSearch INFO Creating Linux searcher for non-ExtX, non-FAT, and non-YAFFS filesystem (ZIP) 2017-05-22 09:20:37 SearchEngine.StartSearch INFO Finishing search definition on quick-reboot-signed.zip at 5/22/2017 9:20:37 AM 2017-05-22 09:20:37 SearchEngine.StartSearch INFO Starting a new search definition on SR2-SuperSU-v2.79-SR2-20170103215521.zip at 5/22/2017 9:20:37 AM 2017-05-22 09:20:37 SearchEngine.StartSearch WARN Volume () does not exist on SR2-SuperSU-v2.79-SR2-20170103215521.zip 2017-05-22 09:20:37 SearchEngine.StartSearch INFO Creating Linux searcher for non-ExtX, non-FAT, and non-YAFFS filesystem (ZIP) 2017-05-22 09:20:45 SearchEngine.StartSearch INFO Finishing search definition on SR2-SuperSU-v2.79-SR2-20170103215521.zip at 5/22/2017 9:20:45 AM 2017-05-22 09:20:45 SearchEngine.StartSearch INFO Starting a new search definition on voice_instructions_imperial.zip at 5/22/2017 9:20:45 AM 2017-05-22 09:20:45 SearchEngine.StartSearch WARN Volume () does not exist on voice_instructions_imperial.zip 2017-05-22 09:20:45 SearchEngine.StartSearch INFO Creating Linux searcher for non-ExtX, non-FAT, and non-YAFFS filesystem (ZIP) 2017-05-22 09:20:46 SearchEngine.StartSearch INFO Finishing search definition on voice_instructions_imperial.zip at 5/22/2017 9:20:46 AM 2017-05-22 09:20:46 Worker Thread 0 INFO Worker Thread 0 has been stopped. 2017-05-22 09:20:46 Worker Thread 5 INFO Worker Thread 5 has been stopped. 2017-05-22 09:20:46 Worker Thread 3 INFO Worker Thread 3 has been stopped. 2017-05-22 09:20:46 Worker Thread 2 INFO Worker Thread 2 has been stopped. 2017-05-22 09:20:46 Worker Thread 1 INFO Worker Thread 1 has been stopped. 2017-05-22 09:20:46 Worker Thread 7 INFO Worker Thread 7 has been stopped. 2017-05-22 09:20:46 Worker Thread 4 INFO Worker Thread 4 has been stopped. 2017-05-22 09:20:46 Worker Thread 6 INFO Worker Thread 6 has been stopped. 2017-05-22 09:20:46 SearchEngine.StartSearch DEBUG AddIndices() Existing indices: 17 2017-05-22 09:20:46 SearchEngine.StartSearch DEBUG AddIndices() indices changed by: 121