ntfs Memory stick - aug 2009 20090807\job2731.dat - 10faad2e Start - 2009-08-07 11:24 : End - 2009-08-07 11:27 Image disk SanDisk Cruzer Micro 0.1 10faad2e 20090807\job2732.dat - 10faad2e Start - 2009-08-07 11:27 : End - 2009-08-07 11:29 Image disk SanDisk Cruzer Micro 0.1 10faad2e 20090807\job2733.dat - 10faad2e Start - 2009-08-07 11:30 : End - 2009-08-07 11:33 Disk imaging F:\test_ntfs_memory\ntfs_memory.img 10faad2e 0 - 0x0951051 - 0xe830b778D4695A7D91F57A04DB1E4F1E0A259 951040 - 0xe83001048587 - 0x10000b52061D2B5E664EDEE2FF47E3547064BB Drive capacity 1023809024 Recover from directory stubs, NTFS 0 Cluster size 8 MFT cluster 83317 MFT start sector 666781 MFT count 5712 Relative sector 245 Disk imaging 179 0 2303 16 31 12214 1002 2000 3000 4000 5000 6000 7000 accdb000 aps003 bak000 BIN004 blf000 bmp1507 c000 cab002 chm1302 cnt001 con000 cpp0058 css0022 csv000 dat019 def002 dep005 dll05190 enc015118 eng020 err006 exe4900 exp001 EX_000 fhd001 fhr019112 GID020 gif1145056 gz000 h0082 hhc051 hhk051 hhp006 hlp600 hpj000 htm047 html011410 HXX000 ico003 idb0013 idl002 ilk009 INF305 ini004 ins000 isu000 jbf000 jpg73039 js0026 ldb001 lib009 lid000 manifest001 manifest030 manifest010 map060 mdb300 mk000 mov000 msi030 mso000 ncb003 nod006 obj023277 old011 pch007 pdb0028 pdf700 php0214 png1401 PRN002 psp000 rc003 rc2003 res0014 rgs000 rr001882 rtf001 sln006 sql002 ssx003 suo060 SYS010 TAG000 thmx000 tlb002 tmp000 TTF000 txt0011 user060 vcproj300 vdproj001 wmv000 xls010 xml601 xsl1500 xslt100 103488 bmp1400 chm1300 doc0140 docx000 exe505230 gif1146330 hlp750 html020 indx010 inf300 jpg7300 mdb310 mft010 mov000 pdf700 png1300 rtf000 wmv410 xml7410 xsl1800