0

Downloaded a .zip, via a secure app that deleted the only place it was downloaded (supposedly, who knows if defragmentation left other traces, the download happened by accident, on main OS WIN10, no containers or sandbox). Would the fact that I opened/previewed the archive leave recoverable files/folders/fullarchive somewhere?

Similar Question, but doesn't seem to address if nothing was extracted.

I think this question needs clarification in case nothing was extracted.

schroeder
  • 123,438
  • 55
  • 284
  • 319
Gary Oak
  • 1
  • The archive file name would be logged. Is that what you mean? – schroeder Jan 29 '19 at 16:59
  • The file name wouldn't actually mind as much as the actual file (and containing files, since we're talking about an archive) – Gary Oak Jan 29 '19 at 17:49
  • You could start to answer this by using Process Monitor (from Sysinternals) and running WinRar. The output will show if any files are written using standard APIs. – David Jan 29 '19 at 22:47

0 Answers0