Created By AccessData® FTK® Imager 4.7.1.2 Case Information: Acquired using: ADI4.7.1.2 Case Number: Evidence Number: Unique description: APTSimulatorVM - TrendMicro Examiner: Andrew Rathbun Notes: -------------------------------------------------------------- Information for D:\VirtualMachines\APTSimulatorVM\TrendMicro\APTSimulatorVM_TrendMicro: Physical Evidentiary Item (Source) Information: [Device Info] Source Type: Logical [Drive Geometry] Bytes per Sector: 512 Sector Count: 125,153,280 [Physical Drive Information] Removable drive: False Source data size: 61110 MB Sector count: 125153280 [Computed Hashes] MD5 checksum: 94977dbb6cd9a4ef5daa10cb0a728417 SHA1 checksum: 12235236130e2c75656b774c464c95883731a0a7 Image Information: Acquisition started: Sun Apr 17 15:57:33 2022 Acquisition finished: Sun Apr 17 16:00:47 2022 Segment list: D:\VirtualMachines\APTSimulatorVM\TrendMicro\APTSimulatorVM_TrendMicro.E01 D:\VirtualMachines\APTSimulatorVM\TrendMicro\APTSimulatorVM_TrendMicro.E02 D:\VirtualMachines\APTSimulatorVM\TrendMicro\APTSimulatorVM_TrendMicro.E03 D:\VirtualMachines\APTSimulatorVM\TrendMicro\APTSimulatorVM_TrendMicro.E04 D:\VirtualMachines\APTSimulatorVM\TrendMicro\APTSimulatorVM_TrendMicro.E05 D:\VirtualMachines\APTSimulatorVM\TrendMicro\APTSimulatorVM_TrendMicro.E06 D:\VirtualMachines\APTSimulatorVM\TrendMicro\APTSimulatorVM_TrendMicro.E07 D:\VirtualMachines\APTSimulatorVM\TrendMicro\APTSimulatorVM_TrendMicro.E08 D:\VirtualMachines\APTSimulatorVM\TrendMicro\APTSimulatorVM_TrendMicro.E09 D:\VirtualMachines\APTSimulatorVM\TrendMicro\APTSimulatorVM_TrendMicro.E10 Image Verification Results: Verification started: Sun Apr 17 16:00:47 2022 Verification finished: Sun Apr 17 16:04:08 2022 MD5 checksum: 94977dbb6cd9a4ef5daa10cb0a728417 : verified SHA1 checksum: 12235236130e2c75656b774c464c95883731a0a7 : verified