Description: The Windows task bar is engineered to allow users to “jump” or access items have frequently or recently used quickly and easily. This functionality cannot only include recent media files; it must also include recent tasks. The data stored in the AutomaticDestinations folder will each have a unique file prepended with the AppID of the association application and embedded with .LNK files in each stream.
Location:
Notes: Using the Structured Storage Viewer, open up one of the AutomaticDestination jumplist files.
Each one of these files is a separate LNK file. They are also stored numerically in order from the earliest one (usually 1) to the most recent (Largest Integer Value).
Analysis:
Coming Soon!