Created By AccessData® FTK® Imager 3.1.1.8

Case Information:
Acquired using: ADI3.1.1.8
Case Number: 0004
Evidence Number: 01
Unique description: Stealthy ADS Case
Examiner: Ali Hadi
Notes: Running Malicious Code from Stealthy ADS

--------------------------------------------------------------

Information for \\vmware-host\Shared Folders\Image\StealthyADS:

Physical Evidentiary Item (Source) Information:
[Device Info]
Source Type: Logical
[Drive Geometry]
Bytes per Sector: 512
Sector Count: 83,881,984
[Physical Drive Information]
Removable drive: False
Source data size: 40958 MB
Sector count: 83881984
[Computed Hashes]
MD5 checksum: b2eaae1f1ce8f94306e0aa7e4bd58ced
SHA1 checksum: 54ab548ece5a92a3cde46f67fbe1c3e14f8f173d

Image Information:
Acquisition started: Sun May 26 01:53:18 2019
Acquisition finished: Sun May 26 02:13:20 2019
Segment list:
\\vmware-host\Shared Folders\Image\StealthyADS.E01

Image Verification Results:
Verification started: Sun May 26 02:13:21 2019
Verification finished: Sun May 26 02:27:59 2019
MD5 checksum: b2eaae1f1ce8f94306e0aa7e4bd58ced : verified
SHA1 checksum: 54ab548ece5a92a3cde46f67fbe1c3e14f8f173d : verified