MD5 is a type of algorithm which is used in order to acknowledge the integrity of a given data through creation of 128-bit message digest. A data input in such a case is used in order to interpret a message of any given length using the finger-point of the activity. In case of a data which is a true image and is a bit-to-bit copy of the original, the file numbers can be hashed in order to obtain the details about the files and their extensions. A hexadecimal editor like ‘WinHex’ can be used in order to inspect and edit the images of data and can also be helpful in recovering the deleted files from a drive.
MD5 checksum: 857A3461FA5EC52903C258DF28310187 is the correct information as interpreted using the WinHex system.
Deleted Items on the Disk
There are few files which have been identified as deleted on the disk and the details of the same are mentioned below. The hash values of the disk are incorporated using the algorithm (128-Bit Based) and unique numeric identifiers are produced. There is a comparison of the hash values with the ones which are already identified by the system.
etri.gb
Access Linux Server.doc
Files with wrong extensions
etri.gb and Mmmcm2usmmcm-time1 are the two files that have wrong extensions and it can also be identified by the fact that the recovery shows that these do files have an unidentified extension. If the hash values do not have a matching counterpart, then there is a statistical uncertainty about the possible extension of the file. Once the mismatch in the hash values is confirmed, it can be deduced that the files do not have the right extension, as is in the case of the above mentioned two files.
