The Recycle Bin exists as a metaphor for throwing files away, but it also allows user to retrieve and restore files. Once the file is moved to the recycle bin, a record is added to the log file that…

The correct answer is A. INFO2 file. The INFO2 file is a hidden binary file located in the Recycle Bin (C:\RECYCLED or C:\$Recycle.Bin depending on Windows version) that maintains a log/record for each deleted file. Each record stores the original file path, filename, file size, and deletion date/time. This file…

Submitted by anna_se· Apr 18, 2026Disk Forensics

Question

The Recycle Bin exists as a metaphor for throwing files away, but it also allows user to retrieve and restore files. Once the file is moved to the recycle bin, a record is added to the log file that exists in the Recycle Bin. Which of the following files contains records that correspond to each deleted file in the Recycle Bin?

Options

AINFO2 file
BINFO1 file
CLOGINFO2 file
DLOGINFO1 file

How the community answered

(67 responses)

A
91% (61)
B
1% (1)
C
3% (2)
D
4% (3)

Explanation

The INFO2 file is a hidden binary file located in the Recycle Bin (C:\RECYCLED or C:$Recycle.Bin depending on Windows version) that maintains a log/record for each deleted file. Each record stores the original file path, filename, file size, and deletion date/time. This file is critical in digital forensics for recovering metadata about deleted files. INFO1, LOGINFO2, and LOGINFO1 are not valid Recycle Bin system files.

Topics

#Recycle Bin#Deleted File Recovery#Windows Forensics#File System Artifacts

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice