[kirokko]

But this is kernel images, how to mount it? Also I don't think that this kernels have /etc/version.txt and so on.

Also you can watch on CRC header and CRC data. This is important, not md5sum. It was created to show that forensic and mediafire kernels are the same. And you miss something. Are you sure that last access date will change md5? I tried with simple text file filled with random characters. Last access date doesn't change, but if I save file without add or remove or change something inside of it date of modification si changing but md5 are the same.

Even the date is different. In hostar files all dates are 3 Sep (for main and for diags), but for forensic main kernel date is 23 Sep and mediafire diags are 3 Sep.