46 lines
1.4 KiB
Plaintext
Executable File
46 lines
1.4 KiB
Plaintext
Executable File
Created By AccessData® FTK® Imager 3.1.1.8
|
|
|
|
Case Information:
|
|
Acquired using: ADI3.1.1.8
|
|
Case Number: 20170301
|
|
Evidence Number: 9
|
|
Unique description: cf128mbmac
|
|
Examiner: Patrick Neumann
|
|
Notes: fatmapper test device (macOS)
|
|
|
|
--------------------------------------------------------------
|
|
|
|
Information for C:\Users\Patrick Neumann\Desktop\cf128mbmac:
|
|
|
|
Physical Evidentiary Item (Source) Information:
|
|
[Device Info]
|
|
Source Type: Physical
|
|
[Drive Geometry]
|
|
Cylinders: 15
|
|
Tracks per Cylinder: 255
|
|
Sectors per Track: 63
|
|
Bytes per Sector: 512
|
|
Sector Count: 250.368
|
|
[Physical Drive Information]
|
|
Drive Model: Generic- Compact Flash USB Device
|
|
Drive Serial Number: 20100818841300000
|
|
Drive Interface Type: USB
|
|
Removable drive: True
|
|
Source data size: 122 MB
|
|
Sector count: 250368
|
|
[Computed Hashes]
|
|
MD5 checksum: c337e6c43f53d5e82f81f04fec9782c1
|
|
SHA1 checksum: 1178d208d6a3beb0c14ea8e0120c314a7cf16d9e
|
|
|
|
Image Information:
|
|
Acquisition started: Wed Mar 01 14:54:50 2017
|
|
Acquisition finished: Wed Mar 01 14:55:26 2017
|
|
Segment list:
|
|
C:\Users\Patrick Neumann\Desktop\cf128mbmac.001
|
|
|
|
Image Verification Results:
|
|
Verification started: Wed Mar 01 14:55:26 2017
|
|
Verification finished: Wed Mar 01 14:55:27 2017
|
|
MD5 checksum: c337e6c43f53d5e82f81f04fec9782c1 : verified
|
|
SHA1 checksum: 1178d208d6a3beb0c14ea8e0120c314a7cf16d9e : verified
|