MFT - ZIP Information Table - win7-32-nromanoff-memory-raw.001
| Creation Date | Creation Time | Creation TimeZone | Modified Date | Modified Time | Modified TimeZone | Altered Date | Altered Time | Altered TimeZone | Access Date | Access Time | Access TimeZone | Type/Name/Path | Entry Atrribute | Extension |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2012-03-09 | 20:56:53 | UTC+0000 | 2012-03-09 | 20:56:53 | UTC+0000 | 2012-03-09 | 20:56:53 | UTC+0000 | 2012-03-09 | 20:56:53 | UTC+0000 | Users\nromanoff\Documents\UNDERC~1\AGENTS~1.ZIP | $FILE_NAME | zip |
| 2012-03-09 | 20:56:53 | UTC+0000 | 2012-03-09 | 20:56:53 | UTC+0000 | 2012-03-09 | 20:56:53 | UTC+0000 | 2012-03-09 | 20:56:53 | UTC+0000 | Users\nromanoff\Documents\UNDERC~1\Agents-List-CLASSIFIED-TOP-SECRET.zip | $FILE_NAME | zip |
| 2012-03-16 | 20:11:00 | UTC+0000 | 2012-03-16 | 20:11:00 | UTC+0000 | 2012-03-16 | 20:11:49 | UTC+0000 | 2012-03-16 | 20:11:49 | UTC+0000 | $Recycle.Bin\S-1-5-21-2036804247-3058324640-2116585241-1109\$RSEBKEC.zip | $FILE_NAME | zip |
| 2012-03-16 | 21:31:29 | UTC+0000 | 2012-03-16 | 21:31:29 | UTC+0000 | 2012-03-16 | 21:31:29 | UTC+0000 | 2012-03-16 | 21:31:29 | UTC+0000 | Users\nromanoff\AppData\LocalLow\Adobe\Acrobat⏺.0\RDRMES~1.ZIP | $FILE_NAME | zip |
| 2012-03-16 | 20:27:20 | UTC+0000 | 2012-03-16 | 20:27:20 | UTC+0000 | 2012-03-16 | 20:27:20 | UTC+0000 | 2012-03-16 | 20:27:20 | UTC+0000 | $Recycle.Bin\S-1-5-21-2036804247-3058324640-2116585241-1109\$ISEBKEC.zip | $FILE_NAME | zip |
Xavier Memory Analysis Framework vrs2.309 by Solomon Sonya @Carpenter1010 - 2022-08-24-10:57.57