46 lines
1.4 KiB
Plaintext
Executable File
46 lines
1.4 KiB
Plaintext
Executable File
Created By AccessData® FTK® Imager 3.1.1.8
|
|
|
|
Case Information:
|
|
Acquired using: ADI3.1.1.8
|
|
Case Number: 20170301
|
|
Evidence Number: 7
|
|
Unique description: cf8mbmac
|
|
Examiner: Patrick Neumann
|
|
Notes: fatmapper test device (macOS)
|
|
|
|
--------------------------------------------------------------
|
|
|
|
Information for C:\Users\Patrick Neumann\Desktop\cf8mbmac:
|
|
|
|
Physical Evidentiary Item (Source) Information:
|
|
[Device Info]
|
|
Source Type: Physical
|
|
[Drive Geometry]
|
|
Cylinders: 15.744
|
|
Tracks per Cylinder: 1
|
|
Sectors per Track: 1
|
|
Bytes per Sector: 512
|
|
Sector Count: 15.744
|
|
[Physical Drive Information]
|
|
Drive Model: Generic- Compact Flash USB Device
|
|
Drive Serial Number: 20100818841300000
|
|
Drive Interface Type: USB
|
|
Removable drive: True
|
|
Source data size: 7 MB
|
|
Sector count: 15744
|
|
[Computed Hashes]
|
|
MD5 checksum: 66bed0a2807ecc7164cf16696b79873f
|
|
SHA1 checksum: 358ece8f26ae0f9d12e36f3a854a6c817fb67774
|
|
|
|
Image Information:
|
|
Acquisition started: Wed Mar 01 15:38:15 2017
|
|
Acquisition finished: Wed Mar 01 15:38:18 2017
|
|
Segment list:
|
|
C:\Users\Patrick Neumann\Desktop\cf8mbmac.001
|
|
|
|
Image Verification Results:
|
|
Verification started: Wed Mar 01 15:38:18 2017
|
|
Verification finished: Wed Mar 01 15:38:19 2017
|
|
MD5 checksum: 66bed0a2807ecc7164cf16696b79873f : verified
|
|
SHA1 checksum: 358ece8f26ae0f9d12e36f3a854a6c817fb67774 : verified
|