@attrc Indeed. Filename evidence has been enough to compel decryption in some cases, however. Locatedb also contains timestamps.