You used FTK Imager to create several hash list files. You view the location where the files were exported. What is the file extension type for these files?

Question

Options

• A.txt = ASCII Text File
• B.dif = Data Interchange Format
• C.prn = Formatted Text Delimited
• D.csv = Comma Separated Values

• A
  2% (1)
• B
  4% (2)
• C
  5% (3)
• D
  89% (49)

Explanation

FTK Imager exports hash list files using the .csv extension because hash lists contain structured, tabular data - typically columns for file path, file size, MD5/SHA1 hash values, etc. - which maps naturally to comma-separated format and allows easy import into spreadsheets or other forensic tools for analysis and comparison.

Why the distractors are wrong:

• .txt (A) is a generic plain text format with no defined structure - FTK Imager does not export hash lists this way.
• .dif (B) is an older Data Interchange Format associated with early spreadsheet programs; FTK Imager does not use it.
• .prn (C) is a print-formatted text file, typically used for printer output - unrelated to hash list exports.

Memory tip: Think "Checksums go in Columns, so CSV." Hash lists are essentially spreadsheets of checksums - CSV is the logical export format, and it's the only choice here that represents a structured, multi-column data format.

No community discussion yet for this question.