1

why does FTK have different MAC times than actual LNK files?

Rob Namowicz

January 16, 2016 14:38

None

Follow

When viewing LNK files FTK posts MAC times i.e.  created11/4/15 accessed 11/415 modified11/4/15 but when viewing the properties tab of the file I get

created 7/23/15 accessed 8/12/15 modified7/23/15

• Facebook
• Twitter
• LinkedIn
• Google+

2 comments

• 0
  
  Brian Wagner June 30, 2016 20:29

  I have the same situation for 6.0.1.

• 0
  
  Brian Wagner November 19, 2016 23:34

  Rob, Did you ever get an answer on this question?