volume_dump.exe
Forensic Acquisition Utilities, 1. 0. 0. 1026
Volume Dump Utility, 1, 0, 0, 1035
Copyright (C) 2002 George M. Garner Jr.

Command Line: volume_dump.exe 
Microsoft Windows Microsoft Windows  5.1 (Build 2600.Professional Service Pack 2)
Current User: ODIN\dfahey

Volume Name:		\\?\Volume{0440ea20-f325-11d9-b380-806d6172696f}
Volume Label:		
Mount Points:	
			C:\
Drive Type:		Fixed
Volume Serial Number:		A018-458B
Maximum Component Length:	255
Volume Characteristics:
			File system preserves case
			File system supports case sensitive file names
			File system supports Unicode file names
			File system preserves and supports persistent ACL's
			File system supports file level compression
			File system supports named streams
			File system supports encryption
			File system supports object identifiers
			File system supports reparse points
			File system supports sparse files
			File system supports quotas
File System:		NTFS
Volume Extents:
	Disk Number:	 0
	Starting Offset: 0x0000000000007E00
	Extent Length:   0x000000061AF66A00
Volume Name:		\\?\Volume{0440ea21-f325-11d9-b380-806d6172696f}
Volume Label:		
Mount Points:	
			E:\
Drive Type:		CDROM
Volume Serial Number:		0-0
Maximum Component Length:	0
Volume Characteristics:
File System:		
Volume Name:		\\?\Volume{0440ea22-f325-11d9-b380-806d6172696f}
Volume Label:		
Mount Points:	
			D:\
Drive Type:		Removable
Volume Serial Number:		0-0
Maximum Component Length:	0
Volume Characteristics:
File System:		
Volume Extents:
	Disk Number:	 1
	Starting Offset: 0x0000000000003200
	Extent Length:   0x00000000007B4E00
Volume Name:		\\?\Volume{560365c6-0e65-11da-b3ae-080046eae865}
Volume Label:		HELIX_USB
Mount Points:	
			F:\
Drive Type:		Removable
Volume Serial Number:		11-D8B4
Maximum Component Length:	255
Volume Characteristics:
			File system preserves case
			File system supports Unicode file names
File System:		FAT32
Volume Extents:
	Disk Number:	 2
	Starting Offset: 0x0000000000004000
	Extent Length:   0x000000001EF7C000
