Record |
Tags |
Name |
Type |
File extension |
Size (bytes) |
Created |
Accessed |
Modified |
MD5 hash |
SHA1 hash |
Deleted |
File attributes |
Source |
Evidence number |
Comments |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | Bookmark | Jim's Notebook.url | File | .url | 120 | 3/27/2018 9:50:14 AM | 4/6/2018 6:14:39 AM | 4/6/2018 4:03:46 AM | 840fb715c63dc194fea68033a1c77844 | 7478674b32c991584772e4906829ae0cbae3c4f9 | Archive, ReadOnly | LoneWolf.E01 - Partition 4 (Microsoft NTFS, 476.34 GB)\Users\jcloudy\OneDrive\Documents\Jim's Notebook.url | LoneWolf.E01 | ||
2 | Bookmark | Brother Chat.gdoc | File | .gdoc | 178 | 3/31/2018 8:09:54 PM | 4/6/2018 7:20:00 AM | 4/6/2018 7:20:00 AM | 9eb42bf9159828639cc2f30214050e0f | dbd3a47b44864df4463fb98685bc844a5ebdd643 | Archive | LoneWolf.E01 - Partition 4 (Microsoft NTFS, 476.34 GB)\Users\jcloudy\Google Drive\Brother Chat.gdoc | LoneWolf.E01 | ||
3 | Of interest | rootkey.csv | File | .csv | 90 | 3/27/2018 11:59:20 PM | 3/27/2018 11:59:20 PM | 3/27/2018 11:59:20 PM | d40592417e86dbafe1a6dfbb06223966 | 05d637cdc0397caeeb234aee9ba8f2d47a1f412d | Archive | LoneWolf.E01 - Partition 4 (Microsoft NTFS, 476.34 GB)\Users\jcloudy\Downloads\rootkey.csv | LoneWolf.E01 |