46 lines
1.4 KiB
Plaintext
Executable File
46 lines
1.4 KiB
Plaintext
Executable File
Created By AccessData® FTK® Imager 3.1.1.8
|
|
|
|
Case Information:
|
|
Acquired using: ADI3.1.1.8
|
|
Case Number: 20170301
|
|
Evidence Number: 6
|
|
Unique description: cf128mb
|
|
Examiner: Patrick Neumann
|
|
Notes: fatmapper test device
|
|
|
|
--------------------------------------------------------------
|
|
|
|
Information for C:\Users\Patrick Neumann\Desktop\cf128mb:
|
|
|
|
Physical Evidentiary Item (Source) Information:
|
|
[Device Info]
|
|
Source Type: Physical
|
|
[Drive Geometry]
|
|
Cylinders: 15
|
|
Tracks per Cylinder: 255
|
|
Sectors per Track: 63
|
|
Bytes per Sector: 512
|
|
Sector Count: 250.368
|
|
[Physical Drive Information]
|
|
Drive Model: Generic- Compact Flash USB Device
|
|
Drive Serial Number: 20100818841300000
|
|
Drive Interface Type: USB
|
|
Removable drive: True
|
|
Source data size: 122 MB
|
|
Sector count: 250368
|
|
[Computed Hashes]
|
|
MD5 checksum: 6bdd6a12aedc6f2ac8d1b3aa957978c9
|
|
SHA1 checksum: cc9021f644b3ff6ff04b4cbe44c0d77e17f9bb9f
|
|
|
|
Image Information:
|
|
Acquisition started: Wed Mar 01 14:31:17 2017
|
|
Acquisition finished: Wed Mar 01 14:31:53 2017
|
|
Segment list:
|
|
C:\Users\Patrick Neumann\Desktop\cf128mb.001
|
|
|
|
Image Verification Results:
|
|
Verification started: Wed Mar 01 14:31:53 2017
|
|
Verification finished: Wed Mar 01 14:31:54 2017
|
|
MD5 checksum: 6bdd6a12aedc6f2ac8d1b3aa957978c9 : verified
|
|
SHA1 checksum: cc9021f644b3ff6ff04b4cbe44c0d77e17f9bb9f : verified
|