"The RecentDocs key in the registry stores the most recently opened files by a user. Within the RecentDocs key is the MRUListEx value, which essentially stores the order in which the files were accessed, with the most recent file first. There are also subkeys for each file extension opened by a user. Each of these subkeys have a last write time and its own MRUListEx value. The last write time of each subkey corresponds to the time the first entry in the respective MRUListEx was opened. Using these timestamps, along with the the RecentDocs key last write time and the MRUListEx value there, we can get a better idea of when a file was opened, even if it is not the most recent file that was opened." - RaptIR
Get exclusive access to online courses and content through Patreon !