The Recycle Bin exists as a metaphor for throwing files away, but it also allows a user to retrieve and restore files. Once the file is moved to the recycle bin, a record is added to the log file…

The correct answer is A. INFO2. INFO2 is a hidden binary file stored inside the Recycle Bin (C:\$Recycle.Bin or C:\RECYCLER) that acts as a database for deleted items. It stores metadata for each deleted file including the original full path, original filename, file size, and the date/time of deletion…

Submitted by stefanr· Apr 18, 2026Disk Forensics

Question

The Recycle Bin exists as a metaphor for throwing files away, but it also allows a user to retrieve and restore files. Once the file is moved to the recycle bin, a record is added to the log file that exists in the Recycle Bin. Which of the following files contains records that correspond to each deleted file in the Recycle Bin?

Options

AINFO2
BINFO1
CLOGINFO1
DLOGINFO2

How the community answered

(60 responses)

A
92% (55)
B
2% (1)
C
2% (1)
D
5% (3)

Explanation

INFO2 is a hidden binary file stored inside the Recycle Bin (C:$Recycle.Bin or C:\RECYCLER) that acts as a database for deleted items. It stores metadata for each deleted file including the original full path, original filename, file size, and the date/time of deletion. Forensic tools parse INFO2 to reconstruct deletion history. INFO1 was its predecessor used in Windows 95/98 and is no longer used in modern Windows. LOGINFO1 and LOGINFO2 are fictitious names.

Topics

#Recycle Bin#Deleted Files#File System Forensics

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice