<dfxml version="1.0"><metadata xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.forensicswiki.org/wiki/Category:Digital_Forensics_XML" xmlns:dc="http://purl.org/dc/elements/1.1/"><dc:type>Disk Image</dc:type>
  </metadata><creator version="1.0"><program>fiwalk</program><version>0.6.16</version><build_environment><compiler>GCC 4.1</compiler><library version="3.2.3" name="tsk"></library><library version="3.6.14" name="afflib"></library><library version="20111015" name="libewf"></library>
    </build_environment><execution_environment><os_sysname>Linux</os_sysname><os_release>2.6.18-194.17.1.el5</os_release><os_version>#1 SMP Wed Sep 29 12:50:31 EDT 2010</os_version><host>compute-6-9.local</host><arch>x86_64</arch><command_line>fiwalk -X /home/slgarfin/corp/drives/nus/nnn/1019.xml -IMf /home/slgarfin/corp/drives/nus/nnn/1019.aff</command_line><start_time>2012-03-04T15:22:00Z</start_time>
    </execution_environment>
  </creator><source><image_filename>/home/slgarfin/corp/drives/nus/nnn/1019.aff</image_filename>
  </source><sectorsize>512</sectorsize><pagesize>16777216</pagesize><volume offset="8257536"><partition_offset>8257536</partition_offset><block_size>4096</block_size><ftype>1</ftype><ftype_str>ntfs</ftype_str><block_count>9767512</block_count><first_block>0</first_block><last_block>9767511</last_block><fileobject><filename>P0000001/P0000002</filename><partition>1</partition><id>1</id><name_type>d</name_type><filesize>344</filesize><alloc>1</alloc><used>1</used><inode>11</inode><meta_type>2</meta_type><mode>365</mode><nlink>1</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:02:11Z</mtime><ctime>2005-01-13T07:02:11Z</ctime><atime>2005-01-13T07:02:11Z</atime><crtime>2005-01-13T07:02:11Z</crtime><seq>11</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="344" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">c5516cf18af219528d060e9e3b8fcfb5</hashdigest><hashdigest type="sha1">edbe90fb94886323565e876c3effc9fcfd6a9300</hashdigest>
    </fileobject><fileobject><filename>P0000001/P0000003</filename><partition>1</partition><id>2</id><name_type>d</name_type><filesize>56</filesize><alloc>1</alloc><used>1</used><inode>5</inode><meta_type>2</meta_type><mode>365</mode><nlink>1</nlink><uid>48</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-12-23T12:50:57Z</atime><crtime>2005-01-13T07:02:11Z</crtime><seq>5</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="56" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">e4fad940c15c288529e499797b23bdcd</hashdigest><hashdigest type="sha1">e0c07b2d5fe20071c87fe3b02820c51b5f8cc7ff</hashdigest>
    </fileobject><fileobject><filename>P0000002</filename><partition>1</partition><id>3</id><name_type>d</name_type><filesize>56</filesize><alloc>1</alloc><used>1</used><inode>5</inode><meta_type>2</meta_type><mode>365</mode><nlink>1</nlink><uid>48</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-12-23T12:50:57Z</atime><crtime>2005-01-13T07:02:11Z</crtime><seq>5</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="56" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">e4fad940c15c288529e499797b23bdcd</hashdigest><hashdigest type="sha1">e0c07b2d5fe20071c87fe3b02820c51b5f8cc7ff</hashdigest>
    </fileobject><fileobject><filename>P0000004</filename><partition>1</partition><id>4</id><name_type>d</name_type><filesize>152</filesize><alloc>1</alloc><used>1</used><inode>27</inode><meta_type>2</meta_type><mode>511</mode><nlink>1</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-12-23T12:51:12Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="152" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">e0518fe3ef09709fd53fb01782bc4e24</hashdigest><hashdigest type="sha1">2cfe87fe629e768cca4e81b3843c9d64a1fbc456</hashdigest>
    </fileobject><fileobject><filename>P0000004/P0000002</filename><partition>1</partition><id>5</id><name_type>d</name_type><filesize>152</filesize><alloc>1</alloc><used>1</used><inode>27</inode><meta_type>2</meta_type><mode>511</mode><nlink>1</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-12-23T12:51:12Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="152" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">e0518fe3ef09709fd53fb01782bc4e24</hashdigest><hashdigest type="sha1">2cfe87fe629e768cca4e81b3843c9d64a1fbc456</hashdigest>
    </fileobject><fileobject><filename>P0000004/P0000003</filename><partition>1</partition><id>6</id><name_type>d</name_type><filesize>56</filesize><alloc>1</alloc><used>1</used><inode>5</inode><meta_type>2</meta_type><mode>365</mode><nlink>1</nlink><uid>48</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-12-23T12:50:57Z</atime><crtime>2005-01-13T07:02:11Z</crtime><seq>5</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="56" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">e4fad940c15c288529e499797b23bdcd</hashdigest><hashdigest type="sha1">e0c07b2d5fe20071c87fe3b02820c51b5f8cc7ff</hashdigest>
    </fileobject><fileobject><filename>P0000004/P0000005</filename><partition>1</partition><id>7</id><name_type>d</name_type><filesize>160</filesize><alloc>1</alloc><used>1</used><inode>32</inode><meta_type>2</meta_type><mode>365</mode><nlink>1</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-01-13T07:03:18Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>58418</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="160" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">a6a5226a03fd8a6a989f1c185c3b996b</hashdigest><hashdigest type="sha1">5d07dbfbd3237e6cea4a83159e8d60759ffa4c93</hashdigest>
    </fileobject><fileobject><filename>P0000004/P0000005/P0000002</filename><partition>1</partition><id>8</id><name_type>d</name_type><filesize>160</filesize><alloc>1</alloc><used>1</used><inode>32</inode><meta_type>2</meta_type><mode>365</mode><nlink>1</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-01-13T07:03:18Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>58418</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="160" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">a6a5226a03fd8a6a989f1c185c3b996b</hashdigest><hashdigest type="sha1">5d07dbfbd3237e6cea4a83159e8d60759ffa4c93</hashdigest>
    </fileobject><fileobject><filename>P0000004/P0000005/P0000003</filename><partition>1</partition><id>9</id><name_type>d</name_type><filesize>152</filesize><alloc>1</alloc><used>1</used><inode>27</inode><meta_type>2</meta_type><mode>511</mode><nlink>1</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-12-23T12:51:12Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="152" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">e0518fe3ef09709fd53fb01782bc4e24</hashdigest><hashdigest type="sha1">2cfe87fe629e768cca4e81b3843c9d64a1fbc456</hashdigest>
    </fileobject><fileobject><filename>P0000004/P0000005/P0000005.LOG</filename><partition>1</partition><id>10</id><name_type>r</name_type><filesize>646528</filesize><alloc>1</alloc><used>1</used><inode>33</inode><meta_type>1</meta_type><mode>511</mode><nlink>1</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:04:18Z</mtime><ctime>2005-01-13T07:04:18Z</ctime><atime>2005-01-13T07:03:18Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run file_offset="0" fs_offset="2216235008" len="646528" img_offset="2224492544"></byte_run>
      </byte_runs><hashdigest type="md5">af484c4786ce9a9eb4692b550822ac88</hashdigest><hashdigest type="sha1">b1a1577a98c4d618461d6f23fcc93b98cfd3235c</hashdigest>
    </fileobject><fileobject><filename>P0000006</filename><partition>1</partition><id>11</id><name_type>d</name_type><filesize>56</filesize><alloc>1</alloc><used>1</used><inode>28</inode><meta_type>2</meta_type><mode>365</mode><nlink>2</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-17T13:41:45Z</mtime><ctime>2005-01-17T13:41:45Z</ctime><atime>2005-12-23T13:11:57Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="56" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">8e215da06984db90d45f84386e562799</hashdigest><hashdigest type="sha1">02d61a186293f7b5fc2c66b5dc3359ff6ebc683b</hashdigest>
    </fileobject><fileobject><filename>P0000006/P0000002</filename><partition>1</partition><id>12</id><name_type>d</name_type><filesize>56</filesize><alloc>1</alloc><used>1</used><inode>28</inode><meta_type>2</meta_type><mode>365</mode><nlink>2</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-17T13:41:45Z</mtime><ctime>2005-01-17T13:41:45Z</ctime><atime>2005-12-23T13:11:57Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="56" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">8e215da06984db90d45f84386e562799</hashdigest><hashdigest type="sha1">02d61a186293f7b5fc2c66b5dc3359ff6ebc683b</hashdigest>
    </fileobject><fileobject><filename>P0000006/P0000003</filename><partition>1</partition><id>13</id><name_type>d</name_type><filesize>56</filesize><alloc>1</alloc><used>1</used><inode>5</inode><meta_type>2</meta_type><mode>365</mode><nlink>1</nlink><uid>48</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-12-23T12:50:57Z</atime><crtime>2005-01-13T07:02:11Z</crtime><seq>5</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="56" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">e4fad940c15c288529e499797b23bdcd</hashdigest><hashdigest type="sha1">e0c07b2d5fe20071c87fe3b02820c51b5f8cc7ff</hashdigest>
    </fileobject><fileobject><filename>P0000006/P0000007</filename><partition>1</partition><id>14</id><name_type>r</name_type><filesize>0</filesize><alloc>1</alloc><used>1</used><inode>35</inode><meta_type>1</meta_type><mode>365</mode><nlink>2</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-17T13:41:45Z</mtime><ctime>2005-01-17T13:41:45Z</ctime><atime>2005-01-17T13:41:45Z</atime><crtime>2005-01-17T13:41:45Z</crtime><seq>1</seq><libmagic>empty</libmagic>
    </fileobject><fileobject><filename>P0000006/P0000008.log</filename><partition>1</partition><id>15</id><name_type>r</name_type><filesize>20480</filesize><alloc>1</alloc><used>1</used><inode>34</inode><meta_type>1</meta_type><mode>365</mode><nlink>1</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:03:29Z</mtime><ctime>2005-01-13T07:03:29Z</ctime><atime>2005-01-18T08:53:44Z</atime><crtime>2005-01-13T07:03:19Z</crtime><seq>2</seq><libmagic>data</libmagic><byte_runs><byte_run file_offset="0" fs_offset="2216919040" len="20480" img_offset="2225176576"></byte_run>
      </byte_runs><hashdigest type="md5">0a47641755ed090c75457d5b02661584</hashdigest><hashdigest type="sha1">6c7caf4b867a6c6988f826deb2218d6cf0a20f34</hashdigest>
    </fileobject><fileobject><filename>P0000006/P0000009</filename><partition>1</partition><id>16</id><name_type>d</name_type><filesize>144</filesize><alloc>1</alloc><used>1</used><inode>29</inode><meta_type>2</meta_type><mode>511</mode><nlink>2</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-01-13T07:03:18Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="144" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">7586e86ba83a48b6eee0ad656e3607dc</hashdigest><hashdigest type="sha1">b62148c390356295fee89eed127f5a26166d77b7</hashdigest>
    </fileobject><fileobject><filename>P0000006/P0000009/P0000002</filename><partition>1</partition><id>17</id><name_type>d</name_type><filesize>144</filesize><alloc>1</alloc><used>1</used><inode>29</inode><meta_type>2</meta_type><mode>511</mode><nlink>2</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-01-13T07:03:18Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="144" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">7586e86ba83a48b6eee0ad656e3607dc</hashdigest><hashdigest type="sha1">b62148c390356295fee89eed127f5a26166d77b7</hashdigest>
    </fileobject><fileobject><filename>P0000006/P0000009/P0000003</filename><partition>1</partition><id>18</id><name_type>d</name_type><filesize>56</filesize><alloc>1</alloc><used>1</used><inode>28</inode><meta_type>2</meta_type><mode>365</mode><nlink>2</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-17T13:41:45Z</mtime><ctime>2005-01-17T13:41:45Z</ctime><atime>2005-12-23T13:11:57Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="56" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">8e215da06984db90d45f84386e562799</hashdigest><hashdigest type="sha1">02d61a186293f7b5fc2c66b5dc3359ff6ebc683b</hashdigest>
    </fileobject><fileobject><filename>P0000006/P0000009/P0000010</filename><partition>1</partition><id>19</id><name_type>d</name_type><filesize>152</filesize><alloc>1</alloc><used>1</used><inode>30</inode><meta_type>2</meta_type><mode>511</mode><nlink>1</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-01-13T07:03:18Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="152" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">dd0b1e30d6296af6353f1e381f21db31</hashdigest><hashdigest type="sha1">eaff976e39c9af7736eabd1645cd73e949325068</hashdigest>
    </fileobject><fileobject><filename>P0000006/P0000009/P0000010/P0000002</filename><partition>1</partition><id>20</id><name_type>d</name_type><filesize>152</filesize><alloc>1</alloc><used>1</used><inode>30</inode><meta_type>2</meta_type><mode>511</mode><nlink>1</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-01-13T07:03:18Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="152" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">dd0b1e30d6296af6353f1e381f21db31</hashdigest><hashdigest type="sha1">eaff976e39c9af7736eabd1645cd73e949325068</hashdigest>
    </fileobject><fileobject><filename>P0000006/P0000009/P0000010/P0000003</filename><partition>1</partition><id>21</id><name_type>d</name_type><filesize>144</filesize><alloc>1</alloc><used>1</used><inode>29</inode><meta_type>2</meta_type><mode>511</mode><nlink>2</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:03:18Z</mtime><ctime>2005-01-13T07:03:18Z</ctime><atime>2005-01-13T07:03:18Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run type="resident" file_offset="0" fs_offset="0" len="144" img_offset="8257536"></byte_run>
      </byte_runs><hashdigest type="md5">7586e86ba83a48b6eee0ad656e3607dc</hashdigest><hashdigest type="sha1">b62148c390356295fee89eed127f5a26166d77b7</hashdigest>
    </fileobject><fileobject><filename>P0000006/P0000009/P0000010/P0000011.log</filename><partition>1</partition><id>22</id><name_type>r</name_type><filesize>578</filesize><alloc>1</alloc><used>1</used><inode>31</inode><meta_type>1</meta_type><mode>511</mode><nlink>1</nlink><uid>0</uid><gid>0</gid><mtime>2005-01-13T07:03:19Z</mtime><ctime>2005-01-13T07:03:19Z</ctime><atime>2005-01-13T07:03:19Z</atime><crtime>2005-01-13T07:03:18Z</crtime><seq>1</seq><libmagic>data</libmagic><byte_runs><byte_run file_offset="0" fs_offset="2216882176" len="578" img_offset="2225139712"></byte_run>
      </byte_runs><hashdigest type="md5">ba23d7a0be0da7a2aea53bfbc816fc21</hashdigest><hashdigest type="sha1">49e5bf6cf06de06917dc25788acbf599875e6def</hashdigest>
    </fileobject><fileobject><filename>P0000012.log</filename><partition>1</partition><id>23</id><name_type>-</name_type><filesize>2646</filesize><unalloc>1</unalloc><used>1</used><inode>17</inode><meta_type>1</meta_type><mode>511</mode><nlink>1</nlink><uid>48</uid><gid>0</gid><mtime>2005-01-13T07:03:11Z</mtime><ctime>2005-01-13T07:03:11Z</ctime><atime>2005-01-13T07:03:11Z</atime><crtime>2005-01-13T07:03:11Z</crtime><seq>18</seq><libmagic>data</libmagic><byte_runs><byte_run file_offset="0" fs_offset="12288" len="2646" img_offset="8269824"></byte_run>
      </byte_runs><hashdigest type="md5">af2868d2936104575c021fedf7b9ad4a</hashdigest><hashdigest type="sha1">888f116697c7289a4141f66440f396fae224a9e1</hashdigest>
    </fileobject>
  </volume><runstats><user_seconds>4</user_seconds><system_seconds>54</system_seconds><maxrss>0</maxrss><reclaims>24771</reclaims><faults>593</faults><swaps>0</swaps><inputs>0</inputs><outputs>0</outputs><stop_time>Sun Mar  4 14:13:27 2012</stop_time>
  </runstats></dfxml>