Stray 010075101ef84800v131072usnsp Page

| Type | Example value | | ----------------- | ----------------------------------------------------------------------------- | | | 0x010075101ef84800 = ~72 quadrillion μs → year > 200,000 (unlikely) | | Unix timestamp (seconds) | Drop last 6 hex digits? No clear match | | Inode number | Typical 64-bit ext4 inode | | Random / hash | 64-bit truncated MD5/SipHash | | Little-endian | 0048f81e10750100 → more plausible if memory dump |

fsutil usn queryjournal C: fsutil usn readdata C: /usn 0x010075101ef84800 stray 010075101ef84800v131072usnsp

Threat hunting note: Stray USN records can occur after file system filter driver crashes, ransomware deletion of logs, or incomplete forensic imaging. If found in live memory, it could indicate anti-forensic activity attempting to erase file creation evidence. | Type | Example value | | -----------------