I found many unknown email addresses in pagefile.sys

I found many unknown email addresses through autopsy software

Sending you the screenshot link

Those are emails through out the hard drive which can be from warranty pdf’s or text documents and such. A good way to see what emails the user was communicating with more frequently would be to sort the numbers row.

Hello.

The email addresses in Autopsy are found via a pattern and it doesn’t necessarily mean what was found are actual real email addresses or even valid domains. It’ll find hits for things like ‘joe@thisisnotavaliddomain.com’ or ‘j@12566w2.com’ even though these are neither valid email addresses nor valid domains. ie. At the time of this writing the ‘khz.hz’, ‘ad.do’, and ‘kadns.net’ domains it located in your screenshot aren’t even registered domains so these are likely false positives. Also, keep in mind that information found in the pagefile.sys in itself can be random and further point you to false positives! You have to look at these pagefile.sys hits more like potential clues and not actual valid evidence until you’ve validated it elsewhere on the filesystem or in memory.

Sorting the found hits as Sam_Pep suggested is an option to sort out some of the more frequent occurrences and weed them out from the random ones. You can also do keyword searches on actual domain names you think were used (ie. gmail.com) to pull out more valid or useful hits in the filesystem.