Created By AccessData® FTK® Imager 4.2.0.13 Case Information: Acquired using: ADI4.2.0.13 Case Number: Evidence Number: Unique Description: Examiner: Notes: -------------------------------------------------------------- Information for F:\Final Images RAW\Narcos-1\Memory Dump\Narcos-Mem-1: Physical Evidentiary Item (Source) Information: [Device Info] Source Type: Logical [Drive Geometry] Bytes per Sector: 512 Sector Count: 8,388,608 [Image] Image Type: Raw (dd) Source data size: 4096 MB Sector count: 8388608 [Computed Hashes] MD5 checksum: 9ca08c17b4a359d61f6f8f7bb6328c1c SHA1 checksum: 191a10f54e04ad05d9d6a430e01ef6203406accb Image Information: Acquisition started: Sun Feb 17 20:20:30 2019 Acquisition finished: Sun Feb 17 20:21:46 2019 Segment list: F:\Final Images RAW\Narcos-1\Memory Dump\Narcos-Mem-1.001 F:\Final Images RAW\Narcos-1\Memory Dump\Narcos-Mem-1.002 F:\Final Images RAW\Narcos-1\Memory Dump\Narcos-Mem-1.003 Image Verification Results: Verification started: Sun Feb 17 20:21:46 2019 Verification finished: Sun Feb 17 20:23:02 2019 MD5 checksum: 9ca08c17b4a359d61f6f8f7bb6328c1c : verified SHA1 checksum: 191a10f54e04ad05d9d6a430e01ef6203406accb : verified