Difference between revisions of "Jump Lists"
(→AppIDs) |
|||
| Line 14: | Line 14: | ||
'''Structure'''<br> | '''Structure'''<br> | ||
The autodest files follow the [http://msdn.microsoft.com/en-us/library/dd942138%28v=prot.13%29.aspx: MS-CFB] compound file binary format specification. Each of the numbered streams within the file follows the [http://msdn.microsoft.com/en-us/library/dd871305%28v=prot.13%29.aspx: MS-SHLLINK] binary format specification. | The autodest files follow the [http://msdn.microsoft.com/en-us/library/dd942138%28v=prot.13%29.aspx: MS-CFB] compound file binary format specification. Each of the numbered streams within the file follows the [http://msdn.microsoft.com/en-us/library/dd871305%28v=prot.13%29.aspx: MS-SHLLINK] binary format specification. | ||
| + | <p> | ||
| + | '''Tools'''<br> | ||
| + | Autodest files can be opened in tools such as the [http://mitec.cz/ssv.html: MiTec Structured Storage Viewer], and each of the streams individually/manually extracted. Each of the extracted numbered streams can then be viewed via the [http://mitec.cz/wfa.html: Windows File Analyzer].<p> | ||
| + | Another approach would be to use Mark Woan's [http://www.woanware.co.uk/?p=265: JumpLister] tool to view the information within the numbered streams of each autodest file. | ||
<p> | <p> | ||
The autodest files also contain a stream named "DestList" which acts as a most recently/frequently used (MRU/MFU) list. This stream consists of a 32-byte header, followed by the various structures that correspond to each of the individual numbered streams. Each of these structures is 114 bytes in size, followed by a variable length Unicode string. The first 114 bytes of the structure contains the following information at the corresponding offsets: | The autodest files also contain a stream named "DestList" which acts as a most recently/frequently used (MRU/MFU) list. This stream consists of a 32-byte header, followed by the various structures that correspond to each of the individual numbered streams. Each of these structures is 114 bytes in size, followed by a variable length Unicode string. The first 114 bytes of the structure contains the following information at the corresponding offsets: | ||
Revision as of 09:50, 23 August 2011
|
|
Please help to improve this article by expanding it.
|
Jump Lists are a feature found in Windows 7.
Contents |
Jump Lists
Jump Lists are a new Windows 7 Taskbar feature that gives the user quick access to recently accessed application files and actions. Jump Lists come in two flavors, automatic (autodest, or *.automaticDestinations-ms) and custom (custdest, or *.customDestinations-ms) files. Autodest files are created by the operating system
Jump Lists are located in the user profile path, in the C:\Users\user\Recent folder. Autodest Jump Lists are located in the automaticDestinations subdirectory, and custdest files are located in the customDestinations subdirectory.
AutomaticDestinations
Path: C:\Users\user\Recent\AutomaticDestinations
Files: *.automaticDestinations-ms
Structure
The autodest files follow the MS-CFB compound file binary format specification. Each of the numbered streams within the file follows the MS-SHLLINK binary format specification.
Tools
Autodest files can be opened in tools such as the MiTec Structured Storage Viewer, and each of the streams individually/manually extracted. Each of the extracted numbered streams can then be viewed via the Windows File Analyzer.<p>
Another approach would be to use Mark Woan's JumpLister tool to view the information within the numbered streams of each autodest file.
<p>
The autodest files also contain a stream named "DestList" which acts as a most recently/frequently used (MRU/MFU) list. This stream consists of a 32-byte header, followed by the various structures that correspond to each of the individual numbered streams. Each of these structures is 114 bytes in size, followed by a variable length Unicode string. The first 114 bytes of the structure contains the following information at the corresponding offsets:
| Offset | Size | Description |
|---|---|---|
| 0x48 | 16 bytes | NetBIOS name of the system; padded with zeros to 16 bytes |
| 0x58 | 8 bytes | Stream number; corresponds to the numbered stream within the jump list |
| 0x64 | 8 bytes | FILETIME object |
| 0x70 | 2 bytes | Number of Unicode characters in the string that follows |
CustomDestinations
Path: C:\Users\user\Recent\CustomDestinations
Files: *.customDestinations-ms
Structure
Custdest files reportedly follow a structure of sequential MS-SHLLINK binary format segments.
AppIDs
Windows
