Created By AccessData® FTK® Imager 4.2.0.13 Case Information: Acquired using: ADI4.2.0.13 Case Number: Evidence Number: Unique Description: Examiner: Notes: -------------------------------------------------------------- Information for F:\Final Images RAW\Narcos-2\Memory Dump\Narcos-Mem-2: Physical Evidentiary Item (Source) Information: [Device Info] Source Type: Logical [Drive Geometry] Bytes per Sector: 512 Sector Count: 8,388,608 [Image] Image Type: Raw (dd) Source data size: 4096 MB Sector count: 8388608 [Computed Hashes] MD5 checksum: 0f7e7be4d2844457e2111eaffa1e77ec SHA1 checksum: 3d6f1ff3e3d61b42837a7ebf0ffe058433c6282f Image Information: Acquisition started: Sun Feb 17 20:29:55 2019 Acquisition finished: Sun Feb 17 20:31:10 2019 Segment list: F:\Final Images RAW\Narcos-2\Memory Dump\Narcos-Mem-2.001 F:\Final Images RAW\Narcos-2\Memory Dump\Narcos-Mem-2.002 F:\Final Images RAW\Narcos-2\Memory Dump\Narcos-Mem-2.003 Image Verification Results: Verification started: Sun Feb 17 20:31:10 2019 Verification finished: Sun Feb 17 20:32:26 2019 MD5 checksum: 0f7e7be4d2844457e2111eaffa1e77ec : verified SHA1 checksum: 3d6f1ff3e3d61b42837a7ebf0ffe058433c6282f : verified