CopyRight wrote:
So Guys, 2 questions about lnk files, in the lnk file shown below, you can see the local path includes alot of Null values, why is that?
No idea.
Which tool produced that output?
CopyRight wrote:
...and it has a Network path UNC path, what does this refer to? that this folder has been accessed via another machine?
Nope, not at all. The name of the system you found this on is, "HQ-21515" isn't it?
CopyRight wrote:
General infomration about the machine, this laptop has local and domain users, when i go to the path in the lnk file, i cannot find the document, i've tried to carve but got nothing on that document.
That's not unusual at all.
↧