Normal 0 false false false EN-US X-NONE X-NONE /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes;

Created By AccessData® FTK® Imager 3.1.0.1514 Case Information:

Acquired using: ADI3.1.0.1514 Case Number: IT357 Evidence Number: GMU01 Unique description: Purple/Silver 1GB flash drive Examiner: R. Pollard Notes: No physical damage to disk -------------------------------------------------------------Information for C:\Users\rjpollard\Desktop\IT357GMU:

Physical Evidentiary Item (Source) Information:

[Drive Geometry] Bytes per Sector: 512 Sector Count: 1,966,080 Source data size: 960 MB Sector count:

1966080 [Computed Hashes] MD5 checksum:

15b1b636e3d07b5fe3c7a37dd9c127c5 SHA1 checksum:

8a48feef46e5801c50d4af254d675455d3f8eba7 Image Information:

Acquisition started:

Thu Jun 27 11:11:40 2019 Acquisition finished: Thu Jun 27 11:13:29 2019 Segment list:

C:\Users\rjpollard\Desktop\IT357GMU.E01 Image Verification Results:

Verification started: Thu Jun 27 11:13:29 2019 Verification finished: Thu Jun 27 11:13:34 2019 MD5 checksum:

15b1b636e3d07b5fe3c7a37dd9c127c5 : verified SHA1 checksum:

8a48feef46e5801c50d4af254d675455d3f8eba7 : verified