Protected: Windows Artifacts

0 of 22 lessons complete (0%)

Jump Lists

Module 3 – Jump Lists

Module 3 – Jump Lists

Jump Lists were introduced with the release of Windows 7.
  • Automatically created by OS and allows the user to access or “jump” to recently opened items.
  • To access items, right click on the software icon from the taskbar or Start Menu and recently opened items will be listed.
  • This function can be disabled or changed by user.
Windows 11
  • Jump Lists are disabled by default
  • Can be enabled by user:
    • Settings -> Personalization -> Start -> Show recently opened items in Start, Jump Lists and File Explorer
Location for Jump Lists files: C:\Users\\AppData\Roaming\Microsoft\Windows\Recent
There are two types of Jump Lists:
  • automaticDestinations located in the AutomaticDestination folder
  • customDestinations located in the CustomDestination folder
They can be viewed using the command line interpreterLocation for Jump Lists files: C:\Users\\AppData\Roaming\Microsoft\Windows\Recent
There are two types of Jump Lists:
  • automaticDestinations located in the AutomaticDestination folder
  • customDestinations located in the CustomDestination folder
They can be viewed using the command line interpreterautomaticDestinations file:
  • Location: AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations
  • File extension: .automaticDestinations-ms
  • File name consists of unique AppID
  • Object Linking and Embedding Compound File (OLECF)
  • Contains embedded LNK file
  • appears when a user right-clicks app’s taskbar icon
Example: a7bd71699cd38d1c.automaticDestinations-ms where “a7bd71699cd38d1c” is unique AppID for Word 2010customDestinations file:
  • File extension: .customDestinations-ms
  • File name consists of unique AppID
  • Created when user pins app/item on a taskbar or Start Menu
  • Possible to carve link files data from the file
  • Contains embedded LNK file
Example: 74d743c1561c1e.customDestinations-ms where “74d743c1561c1e” is unique AppID for the Windows Media Player
module 3 image
Scroll to Top