Photo of Conor O'Farrell from a DirecTV HR22 Receiver hard drive

58684355514a33595a35612f0d0a2f74 image fringe loggedin no-preview Part of a compressed version of the original data source that the JPG file was carved from was stored at "Volume in drive D is My Passport \ Volume Serial Number is FE5F-25CA" > "D:\wdc_wd5000avvs-63zwb0_skip35000000_count500000_bs512" These files were stored in a flash drive ("Volume in drive D has no label. \ Volume Serial Number is 98A5-A98B") not w/a liveboot of Lubuntu at * "/media/lubuntu/DE98A5D298A5A98B/_sdb2.extracted/11E000.jpg" - created with the help of a flash drive running a liveboot of Lubuntu, extracted via "lubuntu@lubuntu:/media/lubuntu/DE98A5D298A5A98B$ binwalk --dd='jpeg image:jpg:' /home/lubuntu/Downloads/sdb2 --rm" * "/media/lubuntu/DE98A5D298A5A98B/_sdb2.extracted/f11E000.jpg" - also created w/the help of said flash drive running Lubuntu, derived from file "11E000.jpg" These binary files were later moved to "Volume in drive H is My Passport \ Volume Serial Number is 1093-F3E8" > * "H:\1\2001 [...]\2\_sdb2.extracted\f11E000.jpg" - JPG image, URI: file:///G:/1/2001[...]/2/_sdb2.extracted/f11E000.jpg * "H:\1\2001[...]\wdc_wd5000avvs-63zwb0_skip35000000_count500000_bs512" - ..\..\wdc_wd5000avvs-63zwb0_skip35000000_count500000_bs512 relative to _sdb2.extracted\ This if from an XFS partition of a 500 GB internal hard drive which was probably in a DirecTV HR22 Receiver. The original binwalk-extracted JPG ("/media/lubuntu/DE98A5D298A5A98B/_sdb2.extracted/11E000.jpg") came out of "/dev/sdb2". File 11E000.jpg was deleted, and file "f11E000.jpg" (URI: file:///media/lubuntu/DE98A5D298A5A98B/_sdb2.extracted/f11E000.jpg) was derived from it via lximage-qt, which was running as root. f11E000.jpg derive log + JPG image file deletion log + hashes of binary files via 7z (incl. CRC64), crc32, sha1sum, sha224sum, sha256sum, sha384sum, sha512sum, and b2sum + properties of regular files via dir, wmic, exiftool, and stat: See plain text file "linwin.txt", <a href="https://archive.org/details/0d0a6e6d682d312e372e312f74657374" rel="nofollow">https://archive.org/details/0d0a6e6d682d312e372e312f74657374</a>, <a href="https://archive.org/details/2f746869726470617274792f6a736d6e" rel="nofollow">https://archive.org/details/2f746869726470617274792f6a736d6e</a>, <a href="https://archive.org/details/2f746d702f66697265666f785f6c7562" rel="nofollow">https://archive.org/details/2f746d702f66697265666f785f6c7562</a>, and/or <a href="https://archive.org/details/2f77686f6d0d0a6e6d682d312e372e31" rel="nofollow">https://archive.org/details/2f77686f6d0d0a6e6d682d312e372e31</a> for info on "f11E000.jpg", "11E000.jpg", etc. See also: * archive.org/details/DQncG85LDRiWQakH > links to archive.org/download/DQncG85LDRiWQakH > links to archive.org/download/DQncG85LDRiWQakH/binwalk-master.zip > links to ia803400.us.archive.org/25/items/DQncG85LDRiWQakH/binwalk-master.zip - version of binwalk that I used * image > https://tineye.com/ > redirects to https://tineye.com/search > redirects to https://tineye.com/search/210f16a48834e26313165be1ba6339817484f7a0?sort=score&order=desc&page=1 ** title: "2 TinEye search results" ** has the text: "STOCK · SPONSORED \\ depositphotos.com \\ 73449165/stock-photo-actor-conor-ofarrell.html [https://tracking.depositphotos.com/aff_c?offer_id=4&aff_id=33074&url=https%3A%2F%2Fdepositphotos.com%2F73449165%2Fstock-photo-actor-conor-ofarrell.html] - First found on Sep 15, 2018 [...] www.moviefone.com \\ celebrity/conor-ofarrell/1819495/main [http://www.moviefone.com/celebrity/conor-ofarrell/1819495/main] - First found on Mar 17, 2016 \\ Filename: 83291_v3_ba.jpg [http://aolx.tmsimg.com/celebs/v3/AllPhotos/83291/83291_v3_ba.jpg - derived link: https://tmsimg.com/celebs/v3/AllPhotos/83291/83291_v3_ba.jpg] (270 x 360, 42.7 KB)" *** 2/2 results had the text "conor-ofarrell". * https://en.wikipedia.org/wiki/Special:Search?search=conor+o+farrell&sourceid=Mozilla-search&ns0=1 > links to https://en.wikipedia.org/wiki/Children_of_the_Bride > links to https://en.wikipedia.org/w/index.php?title=Conor_O%27Farrell&action=edit&redlink=1 * https://duckduckgo.com/?t=ffab&q=Conor+O%27Farrell > redirects to https://duckduckgo.com/?t=ffab&q=Conor+O%27Farrell&ia=web > links to https://www.imdb.com/name/nm0640970 ** has the text "Actor | Director | Writer" * Previously not found at: ** https://archive.org/search.php?query=%22Conor+O%27Farrell%22 ** https://archive.org/search.php?query=%22Conor%20O%20Farrell%22 ** https://archive.org/search.php?query=%22Conor+OFarrell%22 identifier basically from stdout of "G:\[...]\tmp>dir /s/b|xxd", 00000070 Internet Archive HTML5 Uploader 1.6.4 Conor O'Farrell; DirecTV; DirecTV HR22 Receiver; DirecTV Receiver; extracted; extracted file; extracted via binwalk; low resolution; lowres; photo; human; actor; director; writer; OFarrell; O Farrell; O'Farrell; Conor; Conor OFarrell; Conor O Farrell Photo of Conor O'Farrell from a DirecTV HR22 Receiver hard drive leedusmcclein@gmail.com 2021-08-13 02:15:14 2021-08-13 02:15:14 [curator]validator@archive.org[/curator][date]20210813021531[/date][comment]checked for malware[/comment]

true

deemphasize