Created By AccessData® FTK® Imager 4.2.0.13 Case Information: Acquired using: ADI4.2.0.13 Case Number: Evidence Number: Unique Description: Examiner: Notes: -------------------------------------------------------------- Information for F:\Final Images RAW\Narcos-CCleaner\Memory Dump\Narcos-Mem-CCleaner: Physical Evidentiary Item (Source) Information: [Device Info] Source Type: Logical [Drive Geometry] Bytes per Sector: 512 Sector Count: 8,388,608 [Image] Image Type: Raw (dd) Source data size: 4096 MB Sector count: 8388608 [Computed Hashes] MD5 checksum: c61b704caa1bc677cdd6e047d412c5ae SHA1 checksum: bb6162a81bf517d4566fe5441676d30223a27874 Image Information: Acquisition started: Sun Feb 17 20:50:24 2019 Acquisition finished: Sun Feb 17 20:51:11 2019 Segment list: F:\Final Images RAW\Narcos-CCleaner\Memory Dump\Narcos-Mem-CCleaner.001 F:\Final Images RAW\Narcos-CCleaner\Memory Dump\Narcos-Mem-CCleaner.002 F:\Final Images RAW\Narcos-CCleaner\Memory Dump\Narcos-Mem-CCleaner.003 Image Verification Results: Verification started: Sun Feb 17 20:51:11 2019 Verification finished: Sun Feb 17 20:51:54 2019 MD5 checksum: c61b704caa1bc677cdd6e047d412c5ae : verified SHA1 checksum: bb6162a81bf517d4566fe5441676d30223a27874 : verified