If you’re not familiar with the innards of Windows shellbags, check out my my analysis. It comes with a tool! http://www.williballenthin.com/forensics/shellbags/index.html