Created By AccessData® FTK® Imager 3.1.0.1514 Case Information: Acquired using: ADI3.1.0.1514 Case Number: Evidence Number: Unique Description: Examiner: Notes: -------------------------------------------------------------- Information for E:\Images\NGDC2012\Images\Carry-Tablet\Carry-Tablet-2012-07-13-0425: Physical Evidentiary Item (Source) Information: [Verification Hashes] MD5 verification hash: a082ffcedbf49035768fdd3210a241b1 SHA1 verification hash: 0000000000000000000000000000000000000000 [Drive Geometry] Bytes per Sector: 512 Sector Count: 57,127,936 [Image] Image Type: E01 Case number: Evidence number: Examiner: Notes: Acquired on OS: Windows 7 Acquired using: 7.4.1.10 Acquire date: 7/13/2012 4:26:02 AM System date: 12/31/1969 8:00:00 PM Unique description: Source data size: 27894 MB Sector count: 57127936 [Computed Hashes] MD5 checksum: a082ffcedbf49035768fdd3210a241b1 SHA1 checksum: f20fb1500cdf63d996d80b790b3660bf66ca806e Image Information: Acquisition started: Sun Jul 15 13:37:26 2012 Acquisition finished: Sun Jul 15 13:41:00 2012 Segment list: E:\Images\NGDC2012\Images\Carry-Tablet\Carry-Tablet-2012-07-13-0425.E01 Image Verification Results: Verification started: Sun Jul 15 13:41:00 2012 Verification finished: Sun Jul 15 13:43:58 2012 MD5 checksum: a082ffcedbf49035768fdd3210a241b1 : verified SHA1 checksum: f20fb1500cdf63d996d80b790b3660bf66ca806e : verified