root@kali:~# fallocate -l 128M /tmp/image.img
root@kali:~# mkfs -t ext4 /tmp/image.img
mke2fs 1.44.5 (15-Dec-2018)
Discarding device blocks: done                            
Creating filesystem with 131072 1k blocks and 32768 inodes
Filesystem UUID: 9a611f8d-0a50-407c-b08a-9737cb3f4b50
Superblock backups stored on blocks: 
	8193, 24577, 40961, 57345, 73729

Allocating group tables: done                            
Writing inode tables: done                            
Creating journal (4096 blocks): done
Writing superblocks and filesystem accounting information: done 

root@kali:~# mkdir /media/usb
root@kali:~# mount -t auto -o loop /tmp/image.img /media/usb
root@kali:~# sha1sum /media/usb/
sha1sum: /media/usb/: Is a directory
root@kali:~# sha1sum /dev/loop0
b3e0d3417699e583801dea7b5576b691cd65b321  /dev/loop0
root@kali:~# dd if=/dev/loop0 of=/tmp/image_dd.raw
dd: writing to '/tmp/image_dd.raw': No space left on device
2999681+0 records in
2999680+0 records out
1535836160 bytes (1.5 GB, 1.4 GiB) copied, 21.7316 s, 70.7 MB/s
root@kali:~# sha1sum /tmp/image_dd.raw

dc3dd if=/dev/loop0 hash=sha256 bufsz=1M log=/tmp/dc3dd.log hlog=/tmp/dc3dd.hash hof=/tmp/image_dc3dd.raw

guymager (acquire image -> seleccioneu SHA-256 i no MD5 no SHA-1 per col lisions) 

Per a fer servir qemu-img cal haver instal lat abans:
sudo apt install qemu-tools

qemu-img convert WinXP.E01 -O vmdk WinXP.vmdk