Created By AccessData® FTK® Imager 4.2.0.13 Case Information: Acquired using: ADI4.2.0.13 Case Number: Evidence Number: Unique Description: Examiner: Notes: -------------------------------------------------------------- Information for F:\Final Images RAW\Narcos-3\Memory Dump\Narcos-Mem-3: Physical Evidentiary Item (Source) Information: [Device Info] Source Type: Logical [Drive Geometry] Bytes per Sector: 512 Sector Count: 8,388,608 [Image] Image Type: Raw (dd) Source data size: 4096 MB Sector count: 8388608 [Computed Hashes] MD5 checksum: 8e8a3a91eb89fe6c3cd10231f13141fe SHA1 checksum: 90b3d8ba9e96373c96ee9460193c1b585eadb009 Image Information: Acquisition started: Sun Feb 17 20:38:46 2019 Acquisition finished: Sun Feb 17 20:40:03 2019 Segment list: F:\Final Images RAW\Narcos-3\Memory Dump\Narcos-Mem-3.001 F:\Final Images RAW\Narcos-3\Memory Dump\Narcos-Mem-3.002 F:\Final Images RAW\Narcos-3\Memory Dump\Narcos-Mem-3.003 Image Verification Results: Verification started: Sun Feb 17 20:40:03 2019 Verification finished: Sun Feb 17 20:41:18 2019 MD5 checksum: 8e8a3a91eb89fe6c3cd10231f13141fe : verified SHA1 checksum: 90b3d8ba9e96373c96ee9460193c1b585eadb009 : verified