Created By AccessData® FTK® Imager 3.0.1.1467 110406 Case Information: Acquired using: ADI3.0.1.1467 Case Number: ntfs Evidence Number: Unique Description: Examiner: Notes: -------------------------------------------------------------- Information for E:\Courses-2011\CF_I.File_System_Forensics\red: Physical Evidentiary Item (Source) Information: [Drive Geometry] Cylinders: 243 Tracks per Cylinder: 255 Sectors per Track: 63 Bytes per Sector: 512 Sector Count: 3,907,584 [Physical Drive Information] Drive Model: Verbatim STORE N GO USB Device Drive Serial Number:  Drive Interface Type: USB Source data size: 1908 MB Sector count: 3907584 [Computed Hashes] MD5 checksum: 7b6fe9052e690e07c5eb4b57b7b97664 SHA1 checksum: 9e9e04bd71c7e58b055cfe4be181028047c41f87 Image Information: Acquisition started: Tue Nov 01 11:27:25 2011 Acquisition finished: Tue Nov 01 11:30:12 2011 Segment list: E:\Courses-2011\CF_I.File_System_Forensics\red.001 Image Verification Results: Verification started: Tue Nov 01 11:30:13 2011 Verification finished: Tue Nov 01 11:30:38 2011 MD5 checksum: 7b6fe9052e690e07c5eb4b57b7b97664 : verified SHA1 checksum: 9e9e04bd71c7e58b055cfe4be181028047c41f87 : verified