dfxml 0.2.1 → 0.2.2

Sign up to get free protection for your applications and to get access to all the features.
data/VERSION CHANGED
@@ -1 +1 @@
1
- 0.2.1
1
+ 0.2.2
@@ -5,7 +5,7 @@
5
5
 
6
6
  Gem::Specification.new do |s|
7
7
  s.name = "dfxml"
8
- s.version = "0.2.1"
8
+ s.version = "0.2.2"
9
9
 
10
10
  s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
11
11
  s.authors = ["Mark A. Matienzo"]
@@ -17,7 +17,6 @@ Gem::Specification.new do |s|
17
17
  "README.rdoc"
18
18
  ]
19
19
  s.files = [
20
- "20100408-36301.0001.dd.xml",
21
20
  "Gemfile",
22
21
  "Gemfile.lock",
23
22
  "LICENSE.txt",
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dfxml
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.2.1
4
+ version: 0.2.2
5
5
  prerelease:
6
6
  platform: ruby
7
7
  authors:
@@ -116,7 +116,6 @@ extra_rdoc_files:
116
116
  - LICENSE.txt
117
117
  - README.rdoc
118
118
  files:
119
- - 20100408-36301.0001.dd.xml
120
119
  - Gemfile
121
120
  - Gemfile.lock
122
121
  - LICENSE.txt
@@ -144,7 +143,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
144
143
  version: '0'
145
144
  segments:
146
145
  - 0
147
- hash: -2615441025238209260
146
+ hash: 2862609299156932533
148
147
  required_rubygems_version: !ruby/object:Gem::Requirement
149
148
  none: false
150
149
  requirements:
@@ -1,564 +0,0 @@
1
- <?xml version='1.0' encoding='UTF-8'?>
2
- <dfxml version='1.0'>
3
- <metadata
4
- xmlns='http://www.forensicswiki.org/wiki/Category:Digital_Forensics_XML'
5
- xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance'
6
- xmlns:dc='http://purl.org/dc/elements/1.1/'>
7
- <dc:type>Disk Image</dc:type>
8
- </metadata>
9
- <creator version='1.0'>
10
- <program>fiwalk</program>
11
- <version>4.1.0</version>
12
- <build_environment>
13
- <compiler>GCC 4.6</compiler>
14
- <library name="afflib" version="3.7.1"/>
15
- <library name="libewf" version="20130128"/>
16
- </build_environment>
17
- <execution_environment>
18
- <command_line>fiwalk -fxc /opt/fiwalk-dgi/ficonfig.txt 20100408-36301.0001.dd.001 20100408-36301.0001.dd.001.csv 20100408-36301.0001.dd.001.txt 20100408-36301.0001.dd.002 20100408-36301.0001.dd.003 20100408-36301.0001.dd.xml</command_line>
19
- <start_time>2013-07-11T16:15:57Z</start_time>
20
- </execution_environment>
21
- </creator>
22
- <!-- Reading configuration file /opt/fiwalk-dgi/ficonfig.txt -->
23
- <!-- pattern: * method: dgi path: python /opt/fiwalk-dgi/python/accession.py -->
24
- <source>
25
- <image_filename>20100408-36301.0001.dd.001</image_filename>
26
- </source>
27
- <!-- fs start: 0 -->
28
- <volume offset='0'>
29
- <partition_offset>0</partition_offset>
30
- <sector_size>512</sector_size>
31
- <block_size>4096</block_size>
32
- <ftype>8</ftype>
33
- <ftype_str>fat32</ftype_str>
34
- <block_count>7826049</block_count>
35
- <first_block>0</first_block>
36
- <last_block>7826048</last_block>
37
- <fileobject>
38
- <parent_object>
39
- <inode>2</inode>
40
- </parent_object>
41
- <filename>HP v125w (Volume Label Entry)</filename>
42
- <partition>1</partition>
43
- <id>1</id>
44
- <name_type>r</name_type>
45
- <filesize>0</filesize>
46
- <alloc>1</alloc>
47
- <used>1</used>
48
- <inode>3</inode>
49
- <meta_type>1</meta_type>
50
- <mode>511</mode>
51
- <nlink>1</nlink>
52
- <uid>0</uid>
53
- <gid>0</gid>
54
- <mtime prec="2">2009-10-22T12:55:52</mtime>
55
- <libmagic>empty </libmagic>
56
- </fileobject>
57
- <fileobject>
58
- <parent_object>
59
- <inode>2</inode>
60
- </parent_object>
61
- <filename>janephillips</filename>
62
- <partition>1</partition>
63
- <id>2</id>
64
- <name_type>d</name_type>
65
- <filesize>4096</filesize>
66
- <alloc>1</alloc>
67
- <used>1</used>
68
- <inode>5</inode>
69
- <meta_type>2</meta_type>
70
- <mode>511</mode>
71
- <nlink>1</nlink>
72
- <uid>0</uid>
73
- <gid>0</gid>
74
- <mtime prec="2">2010-03-31T01:21:42</mtime>
75
- <atime prec="86400">2010-03-30T04:00:00</atime>
76
- <crtime prec="2">2010-03-31T01:21:40</crtime>
77
- <libmagic>data </libmagic>
78
- <byte_runs>
79
- <byte_run file_offset='0' fs_offset='7831552' img_offset='7831552' len='4096'/>
80
- </byte_runs>
81
- <hashdigest type='md5'>ecec71518c56a41340f069f12166e2ab</hashdigest>
82
- <hashdigest type='sha1'>ec9130749ff5f4c1ec104c041773d96706942165</hashdigest>
83
- </fileobject>
84
- <fileobject>
85
- <parent_object>
86
- <inode>5</inode>
87
- </parent_object>
88
- <filename>janephillips/.</filename>
89
- <partition>1</partition>
90
- <id>3</id>
91
- <name_type>d</name_type>
92
- <filesize>4096</filesize>
93
- <alloc>1</alloc>
94
- <used>1</used>
95
- <inode>5</inode>
96
- <meta_type>2</meta_type>
97
- <mode>511</mode>
98
- <nlink>1</nlink>
99
- <uid>0</uid>
100
- <gid>0</gid>
101
- <mtime prec="2">2010-03-31T01:21:42</mtime>
102
- <atime prec="86400">2010-03-30T04:00:00</atime>
103
- <crtime prec="2">2010-03-31T01:21:40</crtime>
104
- <libmagic>data </libmagic>
105
- <byte_runs>
106
- <byte_run file_offset='0' fs_offset='7831552' img_offset='7831552' len='4096'/>
107
- </byte_runs>
108
- <hashdigest type='md5'>ecec71518c56a41340f069f12166e2ab</hashdigest>
109
- <hashdigest type='sha1'>ec9130749ff5f4c1ec104c041773d96706942165</hashdigest>
110
- </fileobject>
111
- <fileobject>
112
- <parent_object>
113
- <inode>5</inode>
114
- </parent_object>
115
- <filename>janephillips/..</filename>
116
- <partition>1</partition>
117
- <id>4</id>
118
- <name_type>d</name_type>
119
- <filesize>4096</filesize>
120
- <alloc>1</alloc>
121
- <used>1</used>
122
- <inode>2</inode>
123
- <meta_type>2</meta_type>
124
- <mode>0</mode>
125
- <nlink>1</nlink>
126
- <uid>0</uid>
127
- <gid>0</gid>
128
- <libmagic>data </libmagic>
129
- <byte_runs>
130
- <byte_run file_offset='0' fs_offset='7827456' img_offset='7827456' len='4096'/>
131
- </byte_runs>
132
- <hashdigest type='md5'>ae28e6cc4fde66b67b72bd8dcf21ba8e</hashdigest>
133
- <hashdigest type='sha1'>7003336d0f5d0bbea228294eafb8eee4327321f4</hashdigest>
134
- </fileobject>
135
- <fileobject>
136
- <parent_object>
137
- <inode>5</inode>
138
- </parent_object>
139
- <filename>janephillips/text</filename>
140
- <partition>1</partition>
141
- <id>5</id>
142
- <name_type>d</name_type>
143
- <filesize>4096</filesize>
144
- <alloc>1</alloc>
145
- <used>1</used>
146
- <inode>133</inode>
147
- <meta_type>2</meta_type>
148
- <mode>511</mode>
149
- <nlink>1</nlink>
150
- <uid>0</uid>
151
- <gid>0</gid>
152
- <mtime prec="2">2010-03-31T01:21:42</mtime>
153
- <atime prec="86400">2010-03-30T04:00:00</atime>
154
- <crtime prec="2">2010-03-31T01:21:40</crtime>
155
- <libmagic>data </libmagic>
156
- <byte_runs>
157
- <byte_run file_offset='0' fs_offset='7835648' img_offset='7835648' len='4096'/>
158
- </byte_runs>
159
- <hashdigest type='md5'>d51db64da0b34bf3d83dc53bd2c21f73</hashdigest>
160
- <hashdigest type='sha1'>df04cd316a689cefe8e3b354dc4fd9849dcb5426</hashdigest>
161
- </fileobject>
162
- <fileobject>
163
- <parent_object>
164
- <inode>133</inode>
165
- </parent_object>
166
- <filename>janephillips/text/.</filename>
167
- <partition>1</partition>
168
- <id>6</id>
169
- <name_type>d</name_type>
170
- <filesize>4096</filesize>
171
- <alloc>1</alloc>
172
- <used>1</used>
173
- <inode>133</inode>
174
- <meta_type>2</meta_type>
175
- <mode>511</mode>
176
- <nlink>1</nlink>
177
- <uid>0</uid>
178
- <gid>0</gid>
179
- <mtime prec="2">2010-03-31T01:21:42</mtime>
180
- <atime prec="86400">2010-03-30T04:00:00</atime>
181
- <crtime prec="2">2010-03-31T01:21:40</crtime>
182
- <libmagic>data </libmagic>
183
- <byte_runs>
184
- <byte_run file_offset='0' fs_offset='7835648' img_offset='7835648' len='4096'/>
185
- </byte_runs>
186
- <hashdigest type='md5'>d51db64da0b34bf3d83dc53bd2c21f73</hashdigest>
187
- <hashdigest type='sha1'>df04cd316a689cefe8e3b354dc4fd9849dcb5426</hashdigest>
188
- </fileobject>
189
- <fileobject>
190
- <parent_object>
191
- <inode>133</inode>
192
- </parent_object>
193
- <filename>janephillips/text/..</filename>
194
- <partition>1</partition>
195
- <id>7</id>
196
- <name_type>d</name_type>
197
- <filesize>4096</filesize>
198
- <alloc>1</alloc>
199
- <used>1</used>
200
- <inode>5</inode>
201
- <meta_type>2</meta_type>
202
- <mode>511</mode>
203
- <nlink>1</nlink>
204
- <uid>0</uid>
205
- <gid>0</gid>
206
- <mtime prec="2">2010-03-31T01:21:42</mtime>
207
- <atime prec="86400">2010-03-30T04:00:00</atime>
208
- <crtime prec="2">2010-03-31T01:21:40</crtime>
209
- <libmagic>data </libmagic>
210
- <byte_runs>
211
- <byte_run file_offset='0' fs_offset='7831552' img_offset='7831552' len='4096'/>
212
- </byte_runs>
213
- <hashdigest type='md5'>ecec71518c56a41340f069f12166e2ab</hashdigest>
214
- <hashdigest type='sha1'>ec9130749ff5f4c1ec104c041773d96706942165</hashdigest>
215
- </fileobject>
216
- <fileobject>
217
- <parent_object>
218
- <inode>133</inode>
219
- </parent_object>
220
- <filename>janephillips/text/Allison Kennedy.txt</filename>
221
- <partition>1</partition>
222
- <id>8</id>
223
- <name_type>r</name_type>
224
- <filesize>194163</filesize>
225
- <alloc>1</alloc>
226
- <used>1</used>
227
- <inode>263</inode>
228
- <meta_type>1</meta_type>
229
- <mode>511</mode>
230
- <nlink>1</nlink>
231
- <uid>0</uid>
232
- <gid>0</gid>
233
- <mtime prec="2">2010-03-31T01:02:06</mtime>
234
- <atime prec="86400">2010-03-30T04:00:00</atime>
235
- <crtime prec="2">2010-03-31T01:21:40</crtime>
236
- <libmagic>HTML document, Non-ISO extended-ASCII text, with very long lines, with CRLF, NEL line terminators </libmagic>
237
- <byte_runs>
238
- <byte_run file_offset='0' fs_offset='7839744' img_offset='7839744' len='194163'/>
239
- </byte_runs>
240
- <hashdigest type='md5'>09281847eca043af4ececcaa1f586c94</hashdigest>
241
- <hashdigest type='sha1'>5b9b5108655a63b446bd97b09db102637a719930</hashdigest>
242
- <!-- plugin_process -->
243
- <virusScannerSignatureDate>2013-07-11T10:13:45</virusScannerSignatureDate>
244
- <pronomSignatureName>HTML pre-2.0</pronomSignatureName>
245
- <pronomFormatAlias>HTML</pronomFormatAlias>
246
- <pronomTotalMatches>1</pronomTotalMatches>
247
- <pronomMatchType>signature</pronomMatchType>
248
- <pronomSoftware>fido 1.0.0</pronomSoftware>
249
- <pronomFormatName>Hypertext Markup Language</pronomFormatName>
250
- <pronomPuid>fmt/96</pronomPuid>
251
- <virusScannerSignatureVersion>17490</virusScannerSignatureVersion>
252
- <pronomFormatMimeType>text/html</pronomFormatMimeType>
253
- <virusScannerVersion>ClamAV 0.97.8</virusScannerVersion>
254
- <virusFound>false</virusFound>
255
- </fileobject>
256
- <fileobject>
257
- <parent_object>
258
- <inode>5</inode>
259
- </parent_object>
260
- <filename>janephillips/eudora7</filename>
261
- <partition>1</partition>
262
- <id>9</id>
263
- <name_type>d</name_type>
264
- <filesize>4096</filesize>
265
- <alloc>1</alloc>
266
- <used>1</used>
267
- <inode>134</inode>
268
- <meta_type>2</meta_type>
269
- <mode>511</mode>
270
- <nlink>1</nlink>
271
- <uid>0</uid>
272
- <gid>0</gid>
273
- <mtime prec="2">2010-03-31T01:21:42</mtime>
274
- <atime prec="86400">2010-03-30T04:00:00</atime>
275
- <crtime prec="2">2010-03-31T01:21:41</crtime>
276
- <libmagic>data </libmagic>
277
- <byte_runs>
278
- <byte_run file_offset='0' fs_offset='8036352' img_offset='8036352' len='4096'/>
279
- </byte_runs>
280
- <hashdigest type='md5'>50b28ede533b56bb3230662e52a5c413</hashdigest>
281
- <hashdigest type='sha1'>2ab56f7b3ff95b5678b0aeac6092525d65a933bf</hashdigest>
282
- </fileobject>
283
- <fileobject>
284
- <parent_object>
285
- <inode>134</inode>
286
- </parent_object>
287
- <filename>janephillips/eudora7/.</filename>
288
- <partition>1</partition>
289
- <id>10</id>
290
- <name_type>d</name_type>
291
- <filesize>4096</filesize>
292
- <alloc>1</alloc>
293
- <used>1</used>
294
- <inode>134</inode>
295
- <meta_type>2</meta_type>
296
- <mode>511</mode>
297
- <nlink>1</nlink>
298
- <uid>0</uid>
299
- <gid>0</gid>
300
- <mtime prec="2">2010-03-31T01:21:42</mtime>
301
- <atime prec="86400">2010-03-30T04:00:00</atime>
302
- <crtime prec="2">2010-03-31T01:21:41</crtime>
303
- <libmagic>data </libmagic>
304
- <byte_runs>
305
- <byte_run file_offset='0' fs_offset='8036352' img_offset='8036352' len='4096'/>
306
- </byte_runs>
307
- <hashdigest type='md5'>50b28ede533b56bb3230662e52a5c413</hashdigest>
308
- <hashdigest type='sha1'>2ab56f7b3ff95b5678b0aeac6092525d65a933bf</hashdigest>
309
- </fileobject>
310
- <fileobject>
311
- <parent_object>
312
- <inode>134</inode>
313
- </parent_object>
314
- <filename>janephillips/eudora7/..</filename>
315
- <partition>1</partition>
316
- <id>11</id>
317
- <name_type>d</name_type>
318
- <filesize>4096</filesize>
319
- <alloc>1</alloc>
320
- <used>1</used>
321
- <inode>5</inode>
322
- <meta_type>2</meta_type>
323
- <mode>511</mode>
324
- <nlink>1</nlink>
325
- <uid>0</uid>
326
- <gid>0</gid>
327
- <mtime prec="2">2010-03-31T01:21:42</mtime>
328
- <atime prec="86400">2010-03-30T04:00:00</atime>
329
- <crtime prec="2">2010-03-31T01:21:40</crtime>
330
- <libmagic>data </libmagic>
331
- <byte_runs>
332
- <byte_run file_offset='0' fs_offset='7831552' img_offset='7831552' len='4096'/>
333
- </byte_runs>
334
- <hashdigest type='md5'>ecec71518c56a41340f069f12166e2ab</hashdigest>
335
- <hashdigest type='sha1'>ec9130749ff5f4c1ec104c041773d96706942165</hashdigest>
336
- </fileobject>
337
- <fileobject>
338
- <parent_object>
339
- <inode>134</inode>
340
- </parent_object>
341
- <filename>janephillips/eudora7/Jane Phillips.mbx</filename>
342
- <partition>1</partition>
343
- <id>12</id>
344
- <name_type>r</name_type>
345
- <filesize>278371</filesize>
346
- <alloc>1</alloc>
347
- <used>1</used>
348
- <inode>6535</inode>
349
- <meta_type>1</meta_type>
350
- <mode>511</mode>
351
- <nlink>1</nlink>
352
- <uid>0</uid>
353
- <gid>0</gid>
354
- <mtime prec="2">2008-11-05T19:56:32</mtime>
355
- <atime prec="86400">2010-03-30T04:00:00</atime>
356
- <crtime prec="2">2010-03-31T01:21:41</crtime>
357
- <libmagic>HTML document, Non-ISO extended-ASCII text, with very long lines, with CRLF, NEL line terminators </libmagic>
358
- <byte_runs>
359
- <byte_run file_offset='0' fs_offset='8040448' img_offset='8040448' len='278371'/>
360
- </byte_runs>
361
- <hashdigest type='md5'>f0cb92f709c47f09e543615257531d08</hashdigest>
362
- <hashdigest type='sha1'>8afe5717febcb06138e70ca0a764904142db3025</hashdigest>
363
- <!-- plugin_process -->
364
- <virusScannerSignatureDate>2013-07-11T10:13:45</virusScannerSignatureDate>
365
- <pronomTotalMatches>0</pronomTotalMatches>
366
- <pronomMatchType>fail</pronomMatchType>
367
- <pronomSoftware>fido 1.0.0</pronomSoftware>
368
- <virusScannerSignatureVersion>17490</virusScannerSignatureVersion>
369
- <virusScannerVersion>ClamAV 0.97.8</virusScannerVersion>
370
- <virusFound>false</virusFound>
371
- </fileobject>
372
- <fileobject>
373
- <parent_object>
374
- <inode>134</inode>
375
- </parent_object>
376
- <filename>janephillips/eudora7/Jane Phillips.toc</filename>
377
- <partition>1</partition>
378
- <id>13</id>
379
- <name_type>r</name_type>
380
- <filesize>15800</filesize>
381
- <alloc>1</alloc>
382
- <used>1</used>
383
- <inode>6538</inode>
384
- <meta_type>1</meta_type>
385
- <mode>511</mode>
386
- <nlink>1</nlink>
387
- <uid>0</uid>
388
- <gid>0</gid>
389
- <mtime prec="2">2010-03-30T23:36:14</mtime>
390
- <atime prec="86400">2010-03-30T04:00:00</atime>
391
- <crtime prec="2">2010-03-31T01:21:41</crtime>
392
- <libmagic>data </libmagic>
393
- <byte_runs>
394
- <byte_run file_offset='0' fs_offset='8318976' img_offset='8318976' len='15800'/>
395
- </byte_runs>
396
- <hashdigest type='md5'>44892b0903732b3a9450108bd6a922dc</hashdigest>
397
- <hashdigest type='sha1'>0ed9d2a4a47af381b82ce7c7c280ab7b356712fa</hashdigest>
398
- <!-- plugin_process -->
399
- <virusScannerSignatureDate>2013-07-11T10:13:45</virusScannerSignatureDate>
400
- <pronomTotalMatches>0</pronomTotalMatches>
401
- <pronomMatchType>fail</pronomMatchType>
402
- <pronomSoftware>fido 1.0.0</pronomSoftware>
403
- <virusScannerSignatureVersion>17490</virusScannerSignatureVersion>
404
- <virusScannerVersion>ClamAV 0.97.8</virusScannerVersion>
405
- <virusFound>false</virusFound>
406
- </fileobject>
407
- <fileobject>
408
- <parent_object>
409
- <inode>5</inode>
410
- </parent_object>
411
- <filename>janephillips/janephillips.rtf</filename>
412
- <partition>1</partition>
413
- <id>14</id>
414
- <name_type>r</name_type>
415
- <filesize>0</filesize>
416
- <unalloc>1</unalloc>
417
- <used>1</used>
418
- <inode>137</inode>
419
- <meta_type>1</meta_type>
420
- <mode>511</mode>
421
- <nlink>0</nlink>
422
- <uid>0</uid>
423
- <gid>0</gid>
424
- <mtime prec="2">2010-03-31T01:24:44</mtime>
425
- <atime prec="86400">2010-03-30T04:00:00</atime>
426
- <crtime prec="2">2010-03-31T01:24:43</crtime>
427
- <libmagic>empty </libmagic>
428
- </fileobject>
429
- <fileobject>
430
- <parent_object>
431
- <inode>5</inode>
432
- </parent_object>
433
- <filename>janephillips/janephillips.rtf</filename>
434
- <partition>1</partition>
435
- <id>15</id>
436
- <name_type>r</name_type>
437
- <filesize>322</filesize>
438
- <alloc>1</alloc>
439
- <used>1</used>
440
- <inode>140</inode>
441
- <meta_type>1</meta_type>
442
- <mode>511</mode>
443
- <nlink>1</nlink>
444
- <uid>0</uid>
445
- <gid>0</gid>
446
- <mtime prec="2">2010-03-31T01:24:44</mtime>
447
- <atime prec="86400">2010-03-30T04:00:00</atime>
448
- <crtime prec="2">2010-03-31T01:24:43</crtime>
449
- <libmagic>Rich Text Format data, version 1, ANSI </libmagic>
450
- <byte_runs>
451
- <byte_run file_offset='0' fs_offset='8335360' img_offset='8335360' len='322'/>
452
- </byte_runs>
453
- <hashdigest type='md5'>7afc8eca6110dc8af40ae1d8e12fb91b</hashdigest>
454
- <hashdigest type='sha1'>8b659e428e361f5f0f31c3669bbb4049710b55f8</hashdigest>
455
- <!-- plugin_process -->
456
- <virusScannerSignatureDate>2013-07-11T10:13:45</virusScannerSignatureDate>
457
- <pronomSignatureName>RTF 1.5 - 1.6 (generic)</pronomSignatureName>
458
- <pronomFormatAlias>RTF (1.6), RTF (2000)</pronomFormatAlias>
459
- <pronomTotalMatches>2</pronomTotalMatches>
460
- <pronomFormatVersion>1.6</pronomFormatVersion>
461
- <pronomMatchType>signature</pronomMatchType>
462
- <pronomSoftware>fido 1.0.0</pronomSoftware>
463
- <pronomFormatName>Rich Text Format</pronomFormatName>
464
- <pronomPuid>fmt/51</pronomPuid>
465
- <virusScannerSignatureVersion>17490</virusScannerSignatureVersion>
466
- <pronomFormatMimeType>application/rtf</pronomFormatMimeType>
467
- <virusScannerVersion>ClamAV 0.97.8</virusScannerVersion>
468
- <virusFound>false</virusFound>
469
- </fileobject>
470
- <fileobject>
471
- <parent_object>
472
- <inode>2</inode>
473
- </parent_object>
474
- <filename>$MBR</filename>
475
- <partition>1</partition>
476
- <id>16</id>
477
- <name_type>v</name_type>
478
- <filesize>512</filesize>
479
- <alloc>1</alloc>
480
- <used>1</used>
481
- <inode>124972179</inode>
482
- <meta_type>10</meta_type>
483
- <mode>0</mode>
484
- <nlink>1</nlink>
485
- <uid>0</uid>
486
- <gid>0</gid>
487
- <libmagic>x86 boot sector, code offset 0x58, OEM-ID &quot;MSDOS5.0&quot;, sectors/cluster 8, Media descriptor 0xf8, heads 255, hidden sectors 63, sectors 7826049 (volumes &gt; 32 MB) , FAT (32 bit), sectors/FAT 7628, serial number 0x6cf84d4c, unlabeled </libmagic>
488
- <byte_runs>
489
- <byte_run file_offset='0' fs_offset='0' img_offset='0' len='512'/>
490
- </byte_runs>
491
- <hashdigest type='md5'>b7358e9e2f23bdb86eb55940b8ae1150</hashdigest>
492
- <hashdigest type='sha1'>9330ee4551746769d9309750e82a869b0a3ff245</hashdigest>
493
- </fileobject>
494
- <fileobject>
495
- <parent_object>
496
- <inode>2</inode>
497
- </parent_object>
498
- <filename>$FAT1</filename>
499
- <partition>1</partition>
500
- <id>17</id>
501
- <name_type>v</name_type>
502
- <filesize>3905536</filesize>
503
- <alloc>1</alloc>
504
- <used>1</used>
505
- <inode>124972180</inode>
506
- <meta_type>10</meta_type>
507
- <mode>0</mode>
508
- <nlink>1</nlink>
509
- <uid>0</uid>
510
- <gid>0</gid>
511
- <libmagic>data </libmagic>
512
- <byte_runs>
513
- <byte_run file_offset='0' fs_offset='16384' img_offset='16384' len='3905536'/>
514
- </byte_runs>
515
- <hashdigest type='md5'>e758c65bb431fc903a6bc97a52058aec</hashdigest>
516
- <hashdigest type='sha1'>6495a4aaf9e087446e3199835706c7cde693e499</hashdigest>
517
- </fileobject>
518
- <fileobject>
519
- <parent_object>
520
- <inode>2</inode>
521
- </parent_object>
522
- <filename>$FAT2</filename>
523
- <partition>1</partition>
524
- <id>18</id>
525
- <name_type>v</name_type>
526
- <filesize>3905536</filesize>
527
- <alloc>1</alloc>
528
- <used>1</used>
529
- <inode>124972181</inode>
530
- <meta_type>10</meta_type>
531
- <mode>0</mode>
532
- <nlink>1</nlink>
533
- <uid>0</uid>
534
- <gid>0</gid>
535
- <libmagic>data </libmagic>
536
- <byte_runs>
537
- <byte_run file_offset='0' fs_offset='3921920' img_offset='3921920' len='3905536'/>
538
- </byte_runs>
539
- <hashdigest type='md5'>e758c65bb431fc903a6bc97a52058aec</hashdigest>
540
- <hashdigest type='sha1'>6495a4aaf9e087446e3199835706c7cde693e499</hashdigest>
541
- </fileobject>
542
- <fileobject>
543
- <parent_object>
544
- <inode>2</inode>
545
- </parent_object>
546
- <filename>$OrphanFiles</filename>
547
- <partition>1</partition>
548
- <id>19</id>
549
- <name_type>d</name_type>
550
- <filesize>0</filesize>
551
- <alloc>1</alloc>
552
- <used>1</used>
553
- <inode>124972182</inode>
554
- <meta_type>2</meta_type>
555
- <mode>0</mode>
556
- <nlink>1</nlink>
557
- <uid>0</uid>
558
- <gid>0</gid>
559
- <libmagic>empty </libmagic>
560
- </fileobject>
561
- </volume>
562
- <!-- end of volume -->
563
- <!-- clock: 137 -->
564
- </dfxml>