PUBLIC REDACTED COPY Transcribed from the acquisition log supplied for this practice. Examiner, computer name, host environment details and output directory were redacted. This edited copy is not byte-identical to the original log. Created By Exterro® FTK® Imager 8.3.0.27 Case Information: Case Number: W05-20261018-01 Evidence Number: EV-001 Unique description: W05 practice VHD - PhysicalDrive2 Examiner: [REDACTED] Notes: source.vhd mouted read-only. E01 acquisition practice. Encrypted Password : N/A Computer Name: [REDACTED] Host environment details: [REDACTED] -------------------------------------------------------------- Information for [OUTPUT_DIRECTORY]\W05_Practice_20261018_01: Physical Evidentiary Item (Source) Information: [Device Info] Source Type: Physical [Drive Geometry] Cylinders: 65 Tracks per Cylinder: 255 Sectors per Track: 63 Bytes per Sector: 512 Sector Count: 1,050,624 [Physical Drive Information] Drive Model: Microsoft 가상 디스크 Drive Interface Type: SCSI Removable drive: False Source data size: 513 MB Sector count: 1050624 [Computed Hashes] MD5 Hash: 85da5552a25755fa454736dd7aa796ae SHA1 Hash: 19f03646c4e23200ee5efe3a24334aaf6c3be803 Verification Definitions: Computed hash: The hash calculated of the source media during the creation or verify process Stored verification hash: The hash calculated during image acquisition and stored inside the image Report hash: The hash calculated during image acquisition and stored in the image summary report Image Information: Acquisition started: Sun Oct 18 22:48:45 2026 (2026-10-18T13:48:45Z) Acquisition finished: Sun Oct 18 22:48:47 2026 (2026-10-18T13:48:47Z) Segment list: [OUTPUT_DIRECTORY]\W05_Practice_20261018_01.E01 Image Verification Results: Verification started: Sun Oct 18 22:48:47 2026 (2026-10-18T13:48:47Z) Verification finished: Sun Oct 18 22:48:49 2026 (2026-10-18T13:48:49Z) MD5 - Computed hash: 85da5552a25755fa454736dd7aa796ae : verified MD5 - Stored verification hash: 85da5552a25755fa454736dd7aa796ae : verified MD5 - Report hash: 85da5552a25755fa454736dd7aa796ae : verified SHA1 - Computed hash: 19f03646c4e23200ee5efe3a24334aaf6c3be803 : verified SHA1 - Stored verification hash: 19f03646c4e23200ee5efe3a24334aaf6c3be803 : verified SHA1 - Report hash: 19f03646c4e23200ee5efe3a24334aaf6c3be803 : verified