Format date of a pendrive with a FAT32 filesystem ?

Hi Folks

Just wanted to check if there's any way to extract out the format date of a USB Drive having FAT32 file system.

Any suggestions are appreciated.

Regards
Ayush

You mean the date in which the volume(s) was/were created?

IF there is a LABEL (and it has not been changed) that is usually the first entry in the filesystem, but of course the label might have been changed afterwards and it is also possible that the USB device have been created by dd-ing a pre-existing volume.

You want anyway to read this
http//www.digital-detective.net/documents/Volume%20Serial%20Numbers.pdf
and
http//www.forensicfocus.com/Forums/viewtopic/t=10394/
and
http//www.forensicfocus.com/Forums/viewtopic/p=6555118/

Additionally to the (HUGE) uncertainties above, a number of USB drives (both sticks and disk drives) come pre-formatted from factory, and the user does not re-format so it is highly unlikely that you can get anything more than a "before date/time of older file in the filesystem" kind of time range. (

jaclaz

I agree with jaclaz,

@Ayush volume serial number should be able to give you the format date, not sure to what extent.

Happy Digging Cheers 4n6