Created By AccessData® FTK® Imager 3.1.1.8 Case Information: Acquired using: ADI3.1.1.8 Case Number: 11789 Evidence Number: 1A Unique description: Darth Vader's Home Computer Examiner: International Fraternity of Cybercrime Investigators Notes: -------------------------------------------------------------- Information for F:\Vader_Home_Computer: Physical Evidentiary Item (Source) Information: [Device Info] Source Type: Physical [Drive Geometry] Cylinders: 1,174 Tracks per Cylinder: 255 Sectors per Track: 56 Bytes per Sector: 512 Sector Count: 16,777,216 [Physical Drive Information] Drive Model: VMware, VMware Virtual S SCSI Disk Device Drive Interface Type: SCSI Removable drive: False Source data size: 8192 MB Sector count: 16777216 [Computed Hashes] MD5 checksum: 18beb64756d1a0c8d30b0693c3894f16 SHA1 checksum: 744e83e06e1cb5a8db68018744a98b749d337c52 Image Information: Acquisition started: Sun Apr 13 17:22:50 2014 Acquisition finished: Sun Apr 13 17:44:13 2014 Segment list: F:\Vader_Home_Computer.001 F:\Vader_Home_Computer.002 F:\Vader_Home_Computer.003 F:\Vader_Home_Computer.004 F:\Vader_Home_Computer.005 F:\Vader_Home_Computer.006