Thomas W.

For Raspbian images created from scratch, this might be caused by the folder "System Volume Information" as we can see in the forensic tool "FTK Imager". Win32Disk Imager reported sector 8192: However, I can neither find a difference in logical sector 8192 nor physical sector 8192 with FTK Imager.

Next step I took: create another image with TFK, then compare it with HxD. I found the first difference, then took the offset of the file, applied it to FTK and reached physical sector 8193, logical sector 1. Note that FTK Imager starts counting at 0, so that's not an off-by-one mistake here. It seems more likely to me that the code in mainwindow.cpp, lines 984++ can only distinguish between every 1024 sectors (i.e. i is always +=d 1024). Maybe this could be improved for future versions, at least...