4 ms·
My understanding is that they know the file hashes and path they were written to from logs of the tool he used to download them.
by ja27 9y ago
My understanding is that they know the file hashes and path they were written to from logs of the tool he used to download them.
- lafay 9y agoYes, this. Whatever was used to share or transfer the files generated a cleartext log with MD5 hashes, which was written somewhere other than the encrypted volume.