Created By AccessData® FTK® Imager 3.1.0.1514 Case Information: Acquired using: ADI3.1.0.1514 Case Number: Evidence Number: Unique Description: Examiner: Notes: -------------------------------------------------------------- Information for E:\Images\NGDC2012\Images\Carry-Tablet\Carry-Tablet-2012-07-12-1623: Physical Evidentiary Item (Source) Information: [Verification Hashes] MD5 verification hash: a28bcd204e954e955394dbc74794025b SHA1 verification hash: 0000000000000000000000000000000000000000 [Drive Geometry] Bytes per Sector: 512 Sector Count: 57,127,936 [Image] Image Type: E01 Case number: Evidence number: Examiner: Notes: Acquired on OS: Windows 7 Acquired using: 7.4.1.10 Acquire date: 7/12/2012 4:24:47 PM System date: 12/31/1969 8:00:00 PM Unique description: Source data size: 27894 MB Sector count: 57127936 [Computed Hashes] MD5 checksum: a28bcd204e954e955394dbc74794025b SHA1 checksum: 5f5f4ccc95d24f4fa6ef53a4e6da1cc7596a1c00 Image Information: Acquisition started: Sun Jul 15 13:19:48 2012 Acquisition finished: Sun Jul 15 13:23:21 2012 Segment list: E:\Images\NGDC2012\Images\Carry-Tablet\Carry-Tablet-2012-07-12-1623.E01 Image Verification Results: Verification started: Sun Jul 15 13:23:21 2012 Verification finished: Sun Jul 15 13:26:20 2012 MD5 checksum: a28bcd204e954e955394dbc74794025b : verified SHA1 checksum: 5f5f4ccc95d24f4fa6ef53a4e6da1cc7596a1c00 : verified