USB1.info
Zur Navigation springen
Zur Suche springen
GUYMAGER ACQUISITION INFO FILE ============================== Guymager ======== Version : 0.8.13-2 Version timestamp : 2022-12-31-11.01.22 UTC Compiled with : gcc 12.2.0 libewf version : 20140814 (not used as Guymager is configured to use its own EWF module) libguytools version: 2.1.0 Host name : kali Domain name : (none) System : Linux kali 6.5.0-kali2-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.5.3-1kali2 (2023-10-03) x86_64 Device information ================== Command executed: bash -c "search="`basename /dev/sdb`: H..t P.......d A..a de.....d" && dmesg | grep -A3 "$search" || echo "No kernel HPA messages for /dev/sdb"" Information returned: ---------------------------------------------------------------------------------------------------- No kernel HPA messages for /dev/sdb Command executed: bash -c "smartctl -s on /dev/sdb ; smartctl -a /dev/sdb" Information returned: ---------------------------------------------------------------------------------------------------- smartctl 7.3 2022-02-28 r5338 [x86_64-linux-6.5.0-kali2-amd64] (local build) Copyright (C) 2002-22, Bruce Allen, Christian Franke, www.smartmontools.org SMART support is: Unavailable - device lacks SMART capability. A mandatory SMART command failed: exiting. To continue, add one or more '-T permissive' options. smartctl 7.3 2022-02-28 r5338 [x86_64-linux-6.5.0-kali2-amd64] (local build) Copyright (C) 2002-22, Bruce Allen, Christian Franke, www.smartmontools.org === START OF INFORMATION SECTION === Device Model: VBOX HARDDISK Serial Number: VBf2289dbf-e9ad278f Firmware Version: 1.0 User Capacity: 8,589,934,592 bytes [8.58 GB] Sector Size: 512 bytes logical/physical Device is: Not in smartctl database 7.3/5319 ATA Version is: ATA/ATAPI-6 published, ANSI INCITS 361-2002 Local Time is: Tue Oct 17 20:38:49 2023 CEST SMART support is: Unavailable - device lacks SMART capability. A mandatory SMART command failed: exiting. To continue, add one or more '-T permissive' options. Command executed: bash -c "hdparm -I /dev/sdb" Information returned: ---------------------------------------------------------------------------------------------------- /dev/sdb: ATA device, with non-removable media Model Number: VBOX HARDDISK Serial Number: VBf2289dbf-e9ad278f Firmware Revision: 1.0 Standards: Used: ATA/ATAPI-6 published, ANSI INCITS 361-2002 Supported: 6 5 4 Configuration: Logical max current cylinders 16383 16383 heads 16 16 sectors/track 63 63 -- CHS current addressable sectors: 16514064 LBA user addressable sectors: 16777216 LBA48 user addressable sectors: 16777216 Logical/Physical Sector size: 512 bytes device size with M = 1024*1024: 8192 MBytes device size with M = 1000*1000: 8589 MBytes (8 GB) cache/buffer size = 256 KBytes (type=DualPortCache) Capabilities: LBA, IORDY(cannot be disabled) Queue depth: 32 Standby timer values: spec'd by Vendor, no device specific minimum R/W multiple sector transfer: Max = 128 Current = 128 DMA: mdma0 mdma1 mdma2 udma0 udma1 udma2 udma3 udma4 udma5 *udma6 Cycle time: min=120ns recommended=120ns PIO: pio0 pio1 pio2 pio3 pio4 Cycle time: no flow control=120ns IORDY flow control=120ns Commands/features: Enabled Supported: * Power Management feature set * Write cache * Look-ahead * 48-bit Address feature set * Mandatory FLUSH_CACHE * FLUSH_CACHE_EXT * Gen2 signaling speed (3.0Gb/s) * Native Command Queueing (NCQ) Checksum: correct Command executed: bash -c "CIDFILE=/sys/block/$(basename /dev/sdb)/device/cid; echo -n "CID: " ; if [ -e $CIDFILE ] ; then cat $CIDFILE ; else echo "not available" ; fi " Information returned: ---------------------------------------------------------------------------------------------------- CID: not available Hidden areas: unknown Acquisition =========== Linux device : /dev/sdb Device size : 8589934592 (8.6GB) Format : Linux dd raw image - file extension is .dd Image path and file name: /mnt/USB1.dd Info path and file name: /mnt/USB1.info Hash calculation : MD5 Source verification : off Image verification : on No bad sectors encountered during acquisition. State: Finished successfully MD5 hash : b77786864f2c1f95d82d7428a294a16a MD5 hash verified source : -- MD5 hash verified image : b77786864f2c1f95d82d7428a294a16a SHA1 hash : -- SHA1 hash verified source : -- SHA1 hash verified image : -- SHA256 hash : -- SHA256 hash verified source: -- SHA256 hash verified image : -- Image verification OK. The image contains exactly the data that was written. Acquisition started : 2023-10-17 20:38:49 (ISO format YYYY-MM-DD HH:MM:SS) Verification started: 2023-10-17 20:40:28 Ended : 2023-10-17 20:41:09 (0 hours, 2 minutes and 20 seconds) Acquisition speed : 82.75 MByte/s (0 hours, 1 minutes and 39 seconds) Verification speed : 204.80 MByte/s (0 hours, 0 minutes and 40 seconds) Generated image files and their MD5 hashes ========================================== No MD5 hashes available (configuration parameter CalcImageFileMD5 is off) MD5 Image file n/a USB1.dd