Why would I see different MAC dates in the link target information file for a link file and the dates generated by FTK. The information on top is from the link file and the information below that was generated by FTK. I am particularly looking at the last accessed date and times. The dates are almost a year apart.
Shortcut File
Link target file information
Local Path F\QuickBooks\XXXXX (Backup Jun 08,2009 05 27 PM).QBB
Volume Type Removable Disk
Volume Label XXXXXXXX
Volume Serial Number 8816-F96E
File size 54771712
Creation time (UTC) 6/8/2009 93147 PM
Last write time (UTC) 6/8/2009 93220 PM
Last access time (UTC) 6/8/2009 40000 AM
File attributes
Archive
Optional fields
Working directory F\QuickBooks
FTK information
File Name XXXXXX (Backup Jun 08,2009 05 27 PM).lnk
Cr Date 6/8/2009 54807 PM
Mod Date 6/8/2009 54807 PM
Acc Date 5/5/2010 70635 PM
This is the data that I am looking at.