JumpList Explorer

  • Description: used to analyze LNK files to identify application information related to a user's profile

  • Installation: can be downloaded from https://www.sans.org/tools/jumplist-explorer/

  • Usage: File -> Load Jump Lists

    • JumpList files are located here:

      • C:\Users\% USERNAME%\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations

      • C:\Users\%USERNAME%\AppData\ Roaming\Microsoft\Windows\Recent\CustomDestinations

  • Resources

PreviousJohn the RipperNextKAPE

Last updated