exFAT History - SANS Computer Forensics
exFAT History - SANS Computer Forensics
exFAT History - SANS Computer Forensics
SHOW LESS
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
• System Files<br />
– exfat.sys – located in %SystemRoot%\System32\Drivers\<br />
– format.com – will include “<strong>exFAT</strong>” as an option<br />
– uexfat.dll – located in %SystemRoot%\System32\<br />
• Other files modified include:<br />
– fmifs.dll<br />
– fs_rec.sys<br />
– ifsutil.dll<br />
– Shell32.dll<br />
– ulib.dll<br />
– xpsp3res.dll<br />
10<br />
10<br />
© 2009-2010 J. Hamm<br />
© 2009-2010 J. Hamm R. Shullich
Change language