46 lines
1.3 KiB
Plaintext
Executable File
46 lines
1.3 KiB
Plaintext
Executable File
Created By AccessData® FTK® Imager 3.1.1.8
|
|
|
|
Case Information:
|
|
Acquired using: ADI3.1.1.8
|
|
Case Number: 20170301
|
|
Evidence Number: 4
|
|
Unique description: cf8mb
|
|
Examiner: Patrick Neumann
|
|
Notes: fatmapper test device
|
|
|
|
--------------------------------------------------------------
|
|
|
|
Information for C:\Users\Patrick Neumann\Desktop\cf8mb:
|
|
|
|
Physical Evidentiary Item (Source) Information:
|
|
[Device Info]
|
|
Source Type: Physical
|
|
[Drive Geometry]
|
|
Cylinders: 15.680
|
|
Tracks per Cylinder: 1
|
|
Sectors per Track: 1
|
|
Bytes per Sector: 512
|
|
Sector Count: 15.680
|
|
[Physical Drive Information]
|
|
Drive Model: Generic- Compact Flash USB Device
|
|
Drive Serial Number: 20100818841300000
|
|
Drive Interface Type: USB
|
|
Removable drive: True
|
|
Source data size: 7 MB
|
|
Sector count: 15680
|
|
[Computed Hashes]
|
|
MD5 checksum: abd366789ba7985fef66d5ccc1febdb3
|
|
SHA1 checksum: 11e3f780ffff697b713e479c2965963d0d960147
|
|
|
|
Image Information:
|
|
Acquisition started: Wed Mar 01 15:40:54 2017
|
|
Acquisition finished: Wed Mar 01 15:40:57 2017
|
|
Segment list:
|
|
C:\Users\Patrick Neumann\Desktop\cf8mb.001
|
|
|
|
Image Verification Results:
|
|
Verification started: Wed Mar 01 15:40:57 2017
|
|
Verification finished: Wed Mar 01 15:40:57 2017
|
|
MD5 checksum: abd366789ba7985fef66d5ccc1febdb3 : verified
|
|
SHA1 checksum: 11e3f780ffff697b713e479c2965963d0d960147 : verified
|