Created By AccessData® FTK® Imager 3.1.1.8 Case Information: Acquired using: ADI3.1.1.8 Case Number: 20170301 Evidence Number: 9 Unique description: cf128mbmac Examiner: Patrick Neumann Notes: fatmapper test device (macOS) -------------------------------------------------------------- Information for C:\Users\Patrick Neumann\Desktop\cf128mbmac: Physical Evidentiary Item (Source) Information: [Device Info] Source Type: Physical [Drive Geometry] Cylinders: 15 Tracks per Cylinder: 255 Sectors per Track: 63 Bytes per Sector: 512 Sector Count: 250.368 [Physical Drive Information] Drive Model: Generic- Compact Flash USB Device Drive Serial Number: 20100818841300000 Drive Interface Type: USB Removable drive: True Source data size: 122 MB Sector count: 250368 [Computed Hashes] MD5 checksum: c337e6c43f53d5e82f81f04fec9782c1 SHA1 checksum: 1178d208d6a3beb0c14ea8e0120c314a7cf16d9e Image Information: Acquisition started: Wed Mar 01 14:54:50 2017 Acquisition finished: Wed Mar 01 14:55:26 2017 Segment list: C:\Users\Patrick Neumann\Desktop\cf128mbmac.001 Image Verification Results: Verification started: Wed Mar 01 14:55:26 2017 Verification finished: Wed Mar 01 14:55:27 2017 MD5 checksum: c337e6c43f53d5e82f81f04fec9782c1 : verified SHA1 checksum: 1178d208d6a3beb0c14ea8e0120c314a7cf16d9e : verified