This is about β¦ .
π C:\Documents and Settings\<usemame>\Recent
\ (XP)
π C:\Users\<user>\AppData\Roaming\Microsoft\Windows\Recent
\ (Win7- 10)
π C:\Users\<user>\AppData\Roaming\Microsoft\Office\Recent
(Win7- 10)
β° Timestamps
These have timestamps embedded. They are βscreenshotsβ of the host file at the time of link file creation. In the case of the Recent
folder, this is the time when the file was first accessed.
Date/Time file of that name was first opened: Creation Date of Shortcut (LNK) file β’ Date/Time file of that name was last opened: Last Modification Date of Shortcut (LNK) file β’ LNKTarget file (internal LNK file information) data: β’ Modified, Access, and Creation times of the target file β’ Volume Information (Name, Type, Serial Number) β’ Network Share Information β’ Original Location β’ Name of System