0

Downloaded a .zip, via a secure app that deleted the only place it was downloaded (supposedly, who knows if defragmentation left other traces, the download happened by accident, on main OS WIN10, no containers or sandbox). Would the fact that I opened/previewed the archive leave recoverable files/folders/fullarchive somewhere?

Similar Question, but doesn't seem to address if nothing was extracted.

I think this question needs clarification in case nothing was extracted.

Improve this question
3
  • The archive file name would be logged. Is that what you mean?
    – schroeder ♦
    Commented Jan 29, 2019 at 16:59
  • The file name wouldn't actually mind as much as the actual file (and containing files, since we're talking about an archive)
    – Gary Oak
    Commented Jan 29, 2019 at 17:49
  • You could start to answer this by using Process Monitor (from Sysinternals) and running WinRar. The output will show if any files are written using standard APIs.
    – David
    Commented Jan 29, 2019 at 22:47

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .