You must read the SlowInfoCache. Here Windows store information about last used, startcounter, ....
You can find information here http://www.pcmag.com/article2/0,2817,1173443,00.asp
The information are written if a user start a Application from the startmenu or from the desktop.