diff --git a/docs/anti_forensic_techniques.md b/docs/anti_forensic_techniques.md index 84f34c56c..5cdb9676c 100644 --- a/docs/anti_forensic_techniques.md +++ b/docs/anti_forensic_techniques.md @@ -24,8 +24,7 @@ like any [tool](tools.md) they can be abused. ### Secure Data Deletion -[Secure Deletion](secure_data_deletion.md) data, so that it -cannot be restored with forensic methods. +Secure Deletion data, so that it cannot be restored with forensic methods. Overwriting programs typically operate in one of three modes: @@ -75,11 +74,10 @@ could not be reliably constructed. For example, [Timestomp](timestomp.md) will overwrite [NTFS](ntfs.md) “create,” “modify,” “access,” and “change” -timestamps ([metasploit](metasploi.md). [The Defiler’s -Toolkit](the_defiler’s_toolkit.md) can overwrite inode +timestamps (metasploit). The Defiler’s Toolkit can overwrite inode timestamps and deleted directory entries on many Unix systems; timestamps on allocated files can also be modified using the Unix touch -command ([The Grugq](the_grugq.md). +command ([The Grugq](the_grugq.md)). ### Preventing Data Creation @@ -206,11 +204,11 @@ to that by destroying evidence, for example. ### Casper -![](Grml.png "Grml.png") mounted root file system on the [hard drive](hard_drive.md) +Grml mounted root file system on the [hard drive](hard_drive.md) [Casper](http://bromavilleherald.com/index.php/Casper_boot_process) is a set of scripts used to enable Linux-based distributions to boot from removable media. Casper scripts will search for the root file system -(typically [SquashFS](squashfs.md) on the local data storage +(typically SquashFS on the local data storage media during the boot, mount it, and execute */sbin/init* program on mounted root. Most forensic Linux distributions based on [Ubuntu](ubuntu.md) and Debian lack of @@ -239,10 +237,6 @@ Henrique, G. Wendel, Anti Forensics: Making computer forensics hard, Code Breakers III, São Paulo, Brazil, Setember 2006. [3](http://ws.hackaholic.org/slides/AntiForensics-CodeBreakers2006-Translation-To-English.pdf) -## See also - -- [Anti-forensics tools](antiforensics_tools.md) - ## Externals Links * [Anti-Forensics: The Next Step in Digital Forensics Tool Testing](https://www.digitrace.de/veroeffentlichung-2/fachliteratur/84-anti-forensics-the-next-step-in-digital-forensics-tool-testing), @@ -258,7 +252,7 @@ Code Breakers III, São Paulo, Brazil, Setember 2006. Little over 3hr of video on the subject of anti-forensic techniques * [Linux for computer forensic investigators: problems of booting trusted operating system](http://www.computer-forensics-lab.org/pdf/Linux_for_computer_forensic_investigators_2.pdf) * [Low Down and Dirty: Anti-forensic Rootkits](https://www.blackhat.com/presentations/bh-jp-06/BH-JP-06-Bilby-up.pdf), - by [Darren Bilby](darren_bilby.md), Blackhat Japan 2006 + by Darren Bilby, Blackhat Japan 2006 * [One-byte Modification for Breaking Memory Forensic Analysis](https://media.blackhat.com/bh-eu-12/Haruyama/bh-eu-12-Haruyama-Memory_Forensic-Slides.pdf), by Takahiro Haruyama, Hiroshi Suzuki, March 14-16, 2012 diff --git a/docs/data_storage_media.md b/docs/data_storage_media.md index 04a1147eb..b2042b461 100644 --- a/docs/data_storage_media.md +++ b/docs/data_storage_media.md @@ -7,7 +7,7 @@ different properties regarding forensic investigation. ## Media -- [Caches](cache.md) +- Caches - RAM, ROM, Flash - Floppy Disks - Optical media: CDs, DVDs, CD-RWs, ... diff --git a/docs/fat.md b/docs/fat.md index 92c2186e6..08d30d1b0 100644 --- a/docs/fat.md +++ b/docs/fat.md @@ -269,7 +269,7 @@ used in electronic devices with miniature hard drives. Examples of devices in which FAT is utilized include: * [USB](usb.md) thumb drives -* [Digital cameras](digital_camera.md) +* Digital cameras * Digital camcorders * Portable audio and video players * Multifunction [printers](printers.md) @@ -687,13 +687,13 @@ object. * [Wikipedia: ExFAT](https://en.wikipedia.org/wiki/ExFAT) * [exFAT File System](http://www.active-undelete.com/xfat_volume.htm) * [Reverse Engineering the Microsoft exFAT File System](https://www.sans.org/white-papers/33274/), - by [Robert Shullich](robert_shullich.md), December 1, 2009 + by Robert Shullich, December 1, 2009 * [Extended FAT file system](https://paradigmsolutions.files.wordpress.com/2009/12/exfat-excerpt-1-4.pdf), - by [Jeff Hamm](jeff_hamm.md), December 2009 + by Jeff Hamm, December 2009 * [Demystifying the Microsoft Extended FAT File System (exFAT)](https://www.slideshare.net/overcertified/demystifying-the-microsoft-extended-fat-file-system-exfat), - by [Robert Shullich](robert_shullich.md), September 20, 2010 + by Robert Shullich, September 20, 2010 * [Windows Phone 7 : Implications For Digital Forensic Investigators](http://aut.researchgateway.ac.nz/bitstream/handle/10292/4123/LeY.pdf), - by [Yung Anh Le](yung_anh_le.md), 2012 + by Yung Anh Le, 2012 ### textFAT diff --git a/docs/file_carving_bibliography.md b/docs/file_carving_bibliography.md index e526c8179..79d9b4300 100644 --- a/docs/file_carving_bibliography.md +++ b/docs/file_carving_bibliography.md @@ -94,7 +94,7 @@ of sector-scanning forensic tools.", ## Evaluations -* [Measuring and Improving the Quality of File Carving Methods](media:kloet_2007.pdf.md), +* [Measuring and Improving the Quality of File Carving Methods](https://github.com/libyal/documentation/blob/main/Thesis%20-%20Measuring%20and%20Improving%20the%20Quality%20of%20File%20Carving%20Methods.pdf) by S.J.J. Kloet , Master's thesis, Eindhoven University of Technology, August 2007 ## See also diff --git a/docs/list_of_jump_list_ids.md b/docs/list_of_jump_list_ids.md index 931e5535c..71dd2dd68 100644 --- a/docs/list_of_jump_list_ids.md +++ b/docs/list_of_jump_list_ids.md @@ -2,10396 +2,506 @@ tags: - No Category --- -### Application IDs - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -AppID - - - -Application Description - - - -Date Added - - - -Source - -
- -65009083bfa6a094 - - - -(app launched via XPMode) - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -469e4a7982cea4d4 - - - -? (.job) - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -b0459de4674aab56 - - - -(.vmcx) - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -89b0d939f117f75c - - - -Adobe Acrobat 9 Pro Extended (32-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -26717493b25aa6e1 - - - -Adobe Dreamweaver CS5 (32-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -e2a593822e01aed3 - - - -Adobe Flash CS5 (32-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -c765823d986857ba - - - -Adobe Illustrator CS5 (32-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -84f066768a22cc4f - - - -Adobe Photoshop CS5 (64-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -44a398496acc926d - - - -Adobe Premiere Pro CS5 (64-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -23646679aaccfae0 - - - -Adobe Reader 9. - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -23646679aaccfae0 - - - -Adobe Reader 9 x64 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -d5c3931caad5f793 - - - -Adobe Soundbooth CS5 (32-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -7e4dca80246863e3 - - - -Control Panel (?) - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -5c450709f7ae4396 - - - -Firefox 3.6.13 (32-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -bc03160ee1a59fc1 - - - -Foxit PDF Reader 5.4.5 - - - -6/7/2013 - - - -\[ChadTilbury\] - -
- -28c8b86deab549a1 - - - -Internet Explorer 8 / 9 / 10 (32-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -5da8f997fd5f9428 - - - -Internet Explorer x64 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -83b03b46dcd30a0e - - - -iTunes 10 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -271e609288e1210a - - - -Microsoft Office Access 2010 x86 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -cdf30b95c55fd785 - - - -Microsoft Office Excel 2007 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -9839aec31243a928 - - - -Microsoft Office Excel 2010 x86 - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -6e855c85de07bc6a - - - -Microsoft Office Excel 2010 x64 - - - -6/7/2013 - - - -\[ChadTilbury\] - -
- -f0275e8685d95486 - - - -Microsoft Office Excel 2013 x86 - - - -3/4/2015 - - - -[Russ Taylor](https://hatsoffsecurity.com/) - -
- -b8ab77100df80ab2 - - - -Microsoft Office Excel x64 - - - -4/25/2017 - - - -[4n6k -GitHub](https://github.com/4n6k/Jump_List_AppIDs/blob/master/4n6k_AppID_Master_List.md) - -
- -b8c29862d9f95832 - - - -Microsoft Office InfoPath 2010 x86 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -d64d36b238c843a3 - - - -Microsoft Office InfoPath 2010 x86 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -3094cdb43bf5e9c2 - - - -Microsoft Office OneNote 2010 x86 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -d38adec6953449ba - - - -Microsoft Office OneNote 2010 x64 - - - -6/7/2013 - - - -\[ChadTilbury\] - -
- -be71009ff8bb02a2 - - - -Microsoft Office Outlook x86 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -5d6f13ed567aa2da - - - -Microsoft Office Outlook 2010 x64 - - - -6/7/2013 - - - -\[ChadTilbury\] - -
- -6d2bac8f1edf6668 - - - -Microsoft Office Outlook 365 - - - -7/6/2016 - - - -\[Ovie Carroll\] - -
- -f5ac5390b9115fdb - - - -Microsoft Office PowerPoint 2007 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -9c7cc110ff56d1bd - - - -Microsoft Office PowerPoint 2010 x86 - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -5f6e7bc0fb699772 - - - -Microsoft Office PowerPoint 2010 x64 - - - -6/7/2013 - - - -\[ChadTilbury\] - -
- -d00655d2aa12ff6d - - - -Microsoft Office PowerPoint x64 - - - -4/25/2017 - - - -[4n6k -GitHub](https://github.com/4n6k/Jump_List_AppIDs/blob/master/4n6k_AppID_Master_List.md) - -
- -a8c43ef36da523b1 - - - -Microsoft Office Word 2003 Pinned and Recent. - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -adecfb853d77462a - - - -Microsoft Office Word 2007 Pinned and Recent. - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -a7bd71699cd38d1c - - - -Microsoft Office Word 2010 x86 - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -44a3621b32122d64 - - - -Microsoft Office Word 2010 x64 - - - -6/7/2013 - - - -\[ChadTilbury\] - -
- -a4a5324453625195 - - - -Microsoft Office Word 2013 x86 - - - -6/9/2014 - - - -\[BretABennett\] - -
- -fb3b0dbfee58fac8 - - - -Microsoft Office Word 365 x86 - - - -7/6/2016 - - - -\[Ovie Carroll\] - -
- -a18df73203b0340e - - - -Microsoft Word 2016 - - - -12/17/2017 - - - -\[J.N. Wilson\] - -
- -12dc1ea8e34b5a6 - - - -Microsoft Paint 6.1 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -d4a589cab4f573f7 - - - -Microsoft Project 2010 x86 - - - -10/26/2016 - - - -\[LodrinaCherne\] - -
- -40f2aca05d8a33f2 - - - -Minitab 16 - - - -10/26/2016 - - - -\[LodrinaCherne\] - -
- -18434d518c3a61eb - - - -Minitab 17 - - - -10/26/2016 - - - -\[LodrinaCherne\] - -
- -e70d383b15687e37 - - - -Notepad++ 5.6.8 (32-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -918e0ecb43d17e23 - - - -Notepad (32-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -9b9cdc69c1c24e2b - - - -Notepad (64-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -c7a4093872176c74 - - - -Paint Shop Pro Pinned and Recent. - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -c71ef2c372d322d7 - - - -PGP Desktop 10 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -590aee7bdd69b59b - - - -Powershell Windows 10 - - - -7/6/2016 - - - -[Ovie Carroll](https://cyberspeak.libsyn.com/) - -
- -431a5b43435cc60b - - - -Python (.pyc) - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -500b8c1d5302fc9c - - - -Python (.pyw) - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -1bc392b8e104a00e - - - -Remote Desktop - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -315e29a36e961336 - - - -Roboform 7.8 - - - -6/7/2013 - - - -\[ChadTilbury\] - -
- -17d3eb086439f0d7 - - - -TrueCrypt 7.0a - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -550abc1cb58eb92c - - - -VeraCrypt 1.16 / 1.19 64-bit - - - -2/29/2016 - - - -[4n6k Blog](https://dl.4n6k.com/p/jumplist/appids.html) - -
- -50620fe75ee0093 - - - -VMware Player 3.1.4 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -8eafbd04ec8631ce - - - -VMware Workstation 9 x64 - - - -6/7/2013 - - - -\[ChadTilbury\] - -
- -6728dd69a3088f97 - - - -Windows Command Processor - cmd.exe (64-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -1b4dd67f29cb1962 - - - -Windows Explorer Pinned and Recent. - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -f01b4d95cf55d32a - - - -Windows Explorer Windows 8.1. - - - -11/7/2014 - - - -[Russ Taylor](https://hatsoffsecurity.com/2014/09/06/jump-lists/) - -
- -d7528034b5bd6f28 - - - -Windows Live Mail Pinned and Recent. - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -b91050d8b077a4e8 - - - -Windows Media Center x64 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -43578521d78096c6 - - - -Windows Media Player Classic Home Cinema 1.3 (32-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -74d7f43c1561fc1e - - - -Windows Media Player 12 (32-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -954ea5f70258b502 - - - -Windows Script Host - wscript.exe (32-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -9f5c7755804b850a - - - -Windows Script Host - wscript.exe (64-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -b0459de4674aab56 - - - -Windows Virtual PC - vmwindow.exe (32- and 64-bit) - - - -8/22/2011 - - - -[Microsoft Windows 7 -Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) - -
- -469e4a7982cea4d4 - - - -Windows Wordpad - - - -6/7/2013 - - - -\[ChadTilbury\] - -
- -290532160612e071 - - - -WinRar x64 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -b74736c2bd8cc8a5 - - - -WinZip - - - -8/23/2011 - - - -Win4n6 List Serv - -
- -e36bfc8972e5ab1d - - - -XPS Viewer - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -2b53c4ddf69195fc - - - -Zune x64 - - - -8/22/2011 - - - -Win4n6 List Serv - -
- -**Image/Document Viewers (32-bit)** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -AppID - - - -Application Description - - - -Date Added - - - -Source - -
- -f0468ce1ae57883d - - - -Adobe Reader 7.1.0 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -c2d349a0e756411b - - - -Adobe Reader 8.1.2 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -23646679aaccfae0 - - - -Adobe Acrobat 9.4.0 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -ee462c3b81abb6f6 - - - -Adobe Reader X 10.1.0 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -de48a32edcbe79e4 - - - -Acrobat Reader 15.x - - - -4/25/2017 - - - -[4n6k -GitHub](https://github.com/4n6k/Jump_List_AppIDs/blob/master/4n6k_AppID_Master_List.md) - -
- -386a2f6aa7967f36 - - - -EyeBrowse 2.7 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -e31a6a8a7506f733 - - - -Image AXS Pro 4.1 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -b39c5f226977725d - - - -ACDSee Pro 8.1.99 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -59f56184c796cfd4 - - - -ACDSee Photo Manager 10 (Build 219) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -8bd5c6433ca967e9 - - - -ACDSee Photo Manager 2009 (v11.0 Build 113) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -d838aac097abece7 - - - -ACDSee Photo Manager 12 (Build 344) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -b3f13480c2785ae - - - -Paint 6.1 (build 7601: SP1) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -7cb0735d45243070 - - - -CDisplay 1.8.1.0 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -3594aab44bca414b - - - -Windows Photo Viewer - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -3edf100b207e2199 - - - -digiKam 1.7.0 (KDE 4.4.4) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -169b3be0bc43d592 - - - -FastPictureViewer Professional 1.6 (Build 211) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -e9a39dfba105ea23 - - - -FastStone Image Viewer 4.6 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -ef606b196796ebb - - - -HP MediaSmart Photo - - - -1/24/2012 - - - -\[Jimmy_Weg\] - -
- -edc786643819316c - - - -HoneyView3 \#5834 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -76689ff502a1fd9e - - - -Imagine Image and Animation Viewer 1.0.7 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -2519133d6d830f7e - - - -IMatch 3.6.0.113 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -1110d9896dceddb3 - - - -imgSeek 0.8.5 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -c634153e7f5fce9c - - - -IrfanView 3.10 / 4.30 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -ea83017cdd24374d - - - -IrfanView Thumbnails - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -3917dd550d7df9a8 - - - -Konvertor 4.06 (Build 10) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -2fa14c7753239e4c - - - -Paint.NET 2.72 / 3.5.8.4081.24580 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -d33ecf70f0b74a77 - - - -Picasa 2.2.0 (Build 28.08, 0) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -b17d3d0c9ca7e29 - - - -Picasa 3.8.0 (Build 117.43, 0) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -Embedded in IE - - - -Prizm Viewer - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -depends on Location - - - -Scientific and Technical Document Viewer 1.6.2 Portable (STDU) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -c5c24a503b1727df - - - -XnView 1.98.2 Small / 1.98.2 Standard - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -497b42680f564128 - - - -Zoner PhotoStudio 13 (Build 7) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -**Internet Browsers (32-bit)** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -AppID - - - -Application Description - - - -Date Added - - - -Source - -
- -5d696d521de238c3 - - - -Chrome 9.0.597.84 / 12.0.742.100 / 13.0.785.215 / 26 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -cfb56c56fa0f0a54 - - - -Mozilla 0.9.9 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -5c450709f7ae4396 - - - -Firefox 1.0 / 2.0 / 3.0 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -5df4765359170e26 - - - -Firefox 4.0.1 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -1eb796d87c32eff9 - - - -Firefox 5.0 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -1461132e553e2e6c - - - -Firefox 6.0 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -28c8b86deab549a1 - - - -Internet Explorer 8 / 9 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -16ec093b8f51508f - - - -Opera 8.54 build 7730 / 9.64 build 10487 / 11.50 build 1074 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -8a1c1c7c389a5320 - - - -Safari 3.2.3 (525.29) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -1da3c90a72bf5527 - - - -Safari 4.0.5 (531.22.7) / 5.1 (7534.50) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -9d1f905ce5044aee - - - -Edge Browser - - - -7/6/2016 - - - -[1](https://cyberspeak.libsyn.com/) Ovie Carroll - -
- -a0d6b1b874c6e9d2 - - - -TOR Browser 6.0.2 - - - -7/6/2016 - - - -[2](https://cyberspeak.libsyn.com/) Ovie Carroll - -
- -**File Sharing/P2P (32-bit)** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -AppID - - - -Application Description - - - -Date Added - - - -Source - -
- -e0f7a40340179171 - - - -imule 1.4.5 (rev. 749) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -installs to .exe loc - - - -AirDC++ 2.10 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -76f6f1bd18c19698 - - - -aMule 2.2.6 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -cb5250eaef7e3213 - - - -ApexDC++ 1.4.3.957 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -bfc1d76f16fa778f - - - -Ares (Galaxy) 1.8.4 / 1.9.8 / 2.1.0 / 2.1.7.3041 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -Azureus 0.9.0 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -accca100973ef8dc - - - -Azureus 2.0.8.4 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -ccb36ff8a8c03b4b - - - -Azureus 2.5.0.4 / Vuze 3.0.5.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -558c5bd9f906860a - - - -BearShare Lite 5.2.5.1 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -e1d47cb031dafb9f - - - -BearShare 6.0.0.22717 / 8.1.0.70928 / 10.0.0.112380 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -BitComet 0.39 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -a31ec95fdd5f350f - - - -BitComet 0.49 / 0.59 / 0.69 / 0.79 / 0.89 / 0.99 / 1.07 / 1.28 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -bcd7ba75303acbcf - - - -BitLord 1.1 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -1434d6d62d64857d - - - -BitLord 1.2.0-66 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -e73d9f534ed5618a - - - -BitSpirit 1.2.0.228 / 2.0 / 2.6.3.168 / 2.7.2.239 / 2.8.0.072 / -3.1.0.077 / 3.6.0.550 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c9374251edb4c1a8 - - - -BitTornado T-0.3.17 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -2d61cccb4338dfc8 - - - -BitTorrent 5.0.0 / 6.0.0 / 7.2.1 (Build 25548) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -ba3a45f7fd2583e1 - - - -Blubster 3.1.1 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -4a7e4f6a181d3d08 - - - -broolzShare - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -f001ea668c0aa916 - - - -Cabos 0.8.2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -CzDC 0.699 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -Datawire 1.3 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -DC++ 0.181 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -560d789a6a42ad5a - - - -DC++ 0.261 / 0.698 / 0.782 (r2402.1) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -4aa2a5710da3efe0 - - - -DCSharpHub 2.0.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -2db8e25112ab4453 - - - -Deluge 1.3.3 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -7b7f65aaeca20a8c - - - -Dropbox App 5.4.24 - - - -7/6/2016 - - - -[Ovie Carroll](https://cyberspeak.libsyn.com/) - -
- -5b186fc4a0b40504 - - - -Dtella 1.2.5 (Purdue network only) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -2437d4d14b056114 - - - -EiskaltDC++ 2.2.3 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -b3016b8da2077262 - - - -eMule 0.50a - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -cbbe886eca4bfc2d - - - -ExoSee 1.0.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -9ad1ec169bf2da7f - - - -FlylinkDC++ r405 (Build 7358) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -4dd48f858b1a6ba7 - - - -Free Download Manager 3.0 (Build 852) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -Freenet (default install dir is C:\Users\\\$user\\...) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -Frost 2011-03-05 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -f214ca2dd40c59c1 - - - -FrostWire 4.20.9 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -73ce3745a843c0a4 - - - -FrostWire 5.1.4 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -98b0ef1c84088 - - - -fulDC 6.78 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -e6ea77a1d4553872 - - - -Gnucleus 1.8.6.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -ed49e1e6ccdba2f5 - - - -GNUnet 0.8.1a - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -cc4b36fbfb69a757 - - - -gtk-gnutella 0.97 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -a746f9625f7695e8 - - - -HeXHub 5.07 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -223bf0f360c6fea5 - - - -I2P 0.8.8 (restartable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -2ff9dc8fb7e11f39 - - - -I2P 0.8.8 (no window) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -???????????????? - - - -\[i2p\] i2phex 3.2.0.103.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -f1a4c04eebef2906 - - - -\[i2p\] Robert 0.0.29 Preferences - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -???????????????? - - - -\[i2p\] Rufus 0.0.4 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c8e4c10e5460b00c - - - -iMesh 6.5.0.16898 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -f61b65550a84027e - - - -iMesh 11.0.0.112351 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -d460280b17628695 - - - -Java Binary - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -Jucy DC 0.85.0.201008281346 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -784182360de0c5b6 - - - -Kazaa Lite 1.7.1 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -a75b276f6e72cf2a - - - -Kazaa Lite Tools K++ 2.7.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -ba132e702c0147ef - - - -KCeasy 0.19-rc1 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -a8df13a46d66f6b5 - - - -Kommute (Calypso) 0.24 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -LamaHub 0.0.5.5 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c5ef839d8d1c76f4 - - - -LimeWire 5.2.13 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -977a5d147aa093f4 - - - -Lphant 3.51 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -96252daff039437a - - - -Lphant 7.0.0.112351 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -e76a4ef13fbf2bb1 - - - -Manolito 3.1.1 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -99c15cf3e6d52b61 - - - -mldonkey 3.1.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -ff224628f0e8103c - - - -Morpheus 3.0.3.6 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -MUTE File Sharing 0.5.1 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -See Java Binary - - - -Nodezilla Agent 0.5.15 - built in Java - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -Perfect Dark 0.883 / 0.940 / 1.06 / 1.07 (all portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -See Java Binary - - - -Phex 3.4.2 (Build 116) - built in Java - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -792699a1373f1386 - - - -Piolet 3.1.1 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -ca1eb46544793057 - - - -RetroShare 0.5.2a (Build 4550) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -3cf13d83b0bd3867 - - - -RevConnect 0.674p (based on DC++) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -PtokaX DC Hub 0.4.1.2 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -RSX++ 1.21 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -5e01ecaf82f7d8e - - - -Scour Exchange 0.0.0.228 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -StrongDC++ 2.42 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -TkDC++ 1.3 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -5d7b4175afdcc260 - - - -Shareaza 2.0.0.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -b48ce76eda60b97 - - - -Shareaza 8.0.0.112300 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -23f08dab0f6aaf30 - - - -SoMud 1.3.3 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -135df2a440abe9bb - - - -SoulSeek 156c - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -ecd21b58c2f65a2f - - - -StealthNet 0.8.7.9 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -5ea2a50c7979fbdc - - - -TrustyFiles 3.1.0.22 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -uTorrent 1.1.1-dev (Build 110) / 1.3.0 / 1.5.0 (all portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -cd8cafb0fb6afdab - - - -uTorrent 1.7.7 (Build 8179) / 1.8.5 / 2.0 / 2.21 (Build 25113) / 3.0 -(Build 25583) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -caea34d2e74f5c8 - - - -uTorrent 3.4.7 - - - -7/6/2016 - - - -[3](https://cyberspeak.libsyn.com/) Ovie Carroll - -
- -a75b276f6e72cf2a - - - -WinMX 3.53 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -490c000889535727 - - - -WinMX 4.9.3.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -Winny 2.0b7.1 - all languages (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -xHub 0.2.6.7 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -YnHub 1.036.152 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -ac3a63b839ac9d3a - - - -Vuze 4.6.0.4 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -**FTP (32-bit)** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -AppID - - - -Application Description - - - -Date Added - - - -Source - -
- -d28ee773b2cea9b2 - - - -3D-FTP 9.0 build 7 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -cd2acd4089508507 - - - -AbsoluteTelnet 9.18 Lite - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -e6ef42224b845020 - - - -ALFTP 5.20.0.4 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -9e0b3f677a26bbc4 - - - -BitKinex 3.2.3 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -4cdf7858c6673f4b - - - -Bullet Proof FTP 1.26 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -714b179e552596df - - - -Bullet Proof FTP 2.4.0 (Build 31) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -20ef367747c22564 - - - -Bullet Proof FTP 2010.75.0.75 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -44a50e6c87bc012 - - - -Classic FTP Plus 2.15 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -4fceec8e021ac978 - - - -CoffeeCup Free FTP 3.5.0.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -8deb27dfa31c5c2a - - - -CoffeeCup Free FTP 4.4 (Build 1904) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -49b5edbd92d8cd58 - - - -FTP Commander 8.02 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -6a316aa67a46820b - - - -Core FTP LE 1.3c (Build 1437) / 2.2 (Build 1689) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -be4875bb3e0c158f - - - -CrossFTP 1.75a - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c04f69101c131440 - - - -CuteFTP 5.0 (Build 50.6.10.2) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -a79a7ce3c45d781 - - - -CuteFTP 7.1 (Build 06.06.2005.1) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -59e86071b87ac1c3 - - - -CuteFTP 8.3 (Build 8.3.4.0007) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -d8081f151f4bd8a5 - - - -CuteFTP 8.3 Lite (Build 8.3.4.0007) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -3198e37206f28dc7 - - - -CuteFTP 8.3 Professional (Build 8.3.4.0007) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -f82607a219af2999 - - - -Cyberduck 4.1.2 (Build 8999) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -fa7144034d7d083d - - - -Directory Opus 10.0.2.0.4269 (JL tasks supported) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -f91fd0c57c4fe449 - - - -ExpanDrive 2.1.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -8f852307189803b8 - - - -Far Manager 2.0.1807 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -226400522157fe8b - - - -FileZilla Server 0.9.39 beta - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -a1d19afe5a80f80 - - - -FileZilla 2.2.32 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -e107946bb682ce47 - - - -FileZilla 3.5.1 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -b7cb1d1c1991accf - - - -FlashFXP 4.0.0 (Build 1548) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -8628e76fd9020e81 - - - -Fling File Transfer Plus 2.24 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -27da120d7e75cf1f - - - -pbFTPClient 6.1 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -f64de962764b9b0f - - - -FTPRush 1.1.3 / 2.15 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -10f5a20c21466e85 - - - -FTP Voyager 15.2.0.17 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -7937df3c65790919 - - - -FTP Explorer 10.5.19 (Build 001) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -9560577fd87cf573 - - - -LeechFTP 1.3 (Build 207) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -fc999f29bc5c3560 - - - -Robo-FTP 3.7.9 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c99ddde925d26df3 - - - -Robo-FTP 3.7.9 CronMaker - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -4b632cf2ceceac35 - - - -Robo-FTP Server 3.2.5 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -3a5148bf2288a434 - - - -Secure FTP 2.6.1 (Build 20101209.1254) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -435a2f986b404eb7 - - - -SmartFTP 4.0.1214.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -explorer integrated - - - -Swish - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -e42a8e0f4d9b8dcf - - - -Sysax FTP Automation 5.15 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -b8c13a5dd8c455a2 - - - -Titan FTP Server 8.40 (Build 1338) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -7904145af324576e - - - -Total Commander 7.56a (Build 16.12.2010) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -79370f660ab51725 - - - -UploadFTP 2.0.1.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -6a8b377d0f5cb666 - - - -WinSCP 2.3.0 (Build 146) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -9a3bdae86d5576ee - - - -WinSCP 3.2.1 (Build 174) / 3.8.0 (Build 312) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -6bb54d82fa42128d - - - -WinSCP 4.3.4 (Build 1428) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -b6267f3fcb700b60 - - - -WiseFTP 4.1.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -a581b8002a6eb671 - - - -WiseFTP 5.5.9 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -2544ff74641b639d - - - -WiseFTP 6.1.5 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c54b96f328bdc28d - - - -WiseFTP 7.3.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -Web-based - - - -WS_FTP - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -**IRC (32-bit)** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -AppID - - - -Application Description - - - -Date Added - - - -Source - -
- -b223c3ffbc0a7a42 - - - -Bersirc 2.2.14 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c01d68e40226892b - - - -ClicksAndWhistles 2.7.146 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -ac8920ed05001800 - - - -DMDirc 0.6.5 (Profile store: C:\Users\\\$user\AppData\Roaming\DMDirc\\) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -d3530c5294441522 - - - -HydraIRC 0.3.165 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -8904a5fd2d98b546 - - - -IceChat 7.70 20101031 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -6b3a5ce7ad4af9e4 - - - -IceChat 9 RC2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -fa496fe13dd62edf - - - -KVIrc 3.4.2.1 / 4.0.4 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -65f7dd884b016ab2 - - - -LimeChat 2.39 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -19ccee0274976da8 - - - -mIRC 4.72 / 5.61 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -ae069d21df1c57df - - - -mIRC 6.35 / 7.19 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -e30bbea3e1642660 - - - -Neebly 1.0.4 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -54c803dfc87b52ba - - - -Nettalk 6.7.12 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -dd658a07478b46c2 - - - -PIRCH98 1.0.1.1190 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -Quassel IRC 0.7.1 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -6fee01bd55a634fe - - - -Smuxi 0.8.0.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -2a5a615382a84729 - - - -X-Chat 2 2.8.6-2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -**IM/Communications (32-bit)** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -AppID - - - -Application Description - - - -Date Added - - - -Source - -
- -b3965c840bf28ef4 - - - -AIM 4.8.2616 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -1b29f0dc90366bb - - - -AIM 5.9.3857 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -27ececd8d89b6767 - - - -AIM 6.2.14.2 / 6.5.3.12 / 6.9.17.2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -6f647f9488d7a - - - -AIM 7.5.11.9 (custom AppID + JL support) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -ca942805559495e9 - - - -aMSN 0.98.4 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c6f7b5bf1b9675e4 - - - -BitWise IM 1.7.3a - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -fb1f39d1f230480a - - - -Bopup Messenger 5.6.2.9178 (all languages: en;du;fr;ger;rus;es) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -dc64de6c91c18300 - - - -Brosix Communicator 3.1.3 (Build 110719 nid 1) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -f09b920bfb781142 - - - -Camfrog 4.0.47 / 5.5.0 / 6.1 (build 146) (JL support) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -ebd8c95d87f25154 - - - -Carrier 2.5.5 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -Coccinella Messenger 0.96.20 (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -30d23723bdd5d908 - - - -Digsby (Build 30140) (JL support) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -728008617bc3e34b - - - -eM Client 3.0.10206.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -689319b6547cda85 - - - -emesene 2.11.7 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -454ef7dca3bb16b2 - - - -Exodus 0.10.0.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -cca6383a507bac64 - - - -Gadu-Gadu 10.5.2.13164 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -4278d3dc044fc88a - - - -Gaim 1.5.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -777483d3cdac1727 - - - -Gajim 0.14.4 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -6aa18a60024620ae - - - -GCN 2.9.1 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -3f2cd46691bbee90 - - - -GOIM 1.1.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -73c6a317412687c2 - - - -Google Talk 1.0.0.104 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -b0236d03c0627ac4 - - - -ICQ 5.1 / ICQLite Build 1068 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -a5db18f617e28a51 - - - -ICQ 6.5 (Build 2024) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -2417caa1f2a881d4 - - - -ICQ 7.6 (Build 5617) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -recognized VM - - - -inSpeak 7.2.0.540 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -989d7545c2b2e7b2 - - - -IMVU 465.8.0.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -a3e0d98f5653b539 - - - -Instantbird 1.0 (20110623121653) (JL support) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -bcc705f705d8132b - - - -Instan-t 5.2 (Build 2824) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -6059df4b02360af - - - -Kadu 0.10.0 / 0.6.5.5 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c312e260e424ae76 - - - -Mail.Ru Agent 5.8 (JL support) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -22cefa022402327d - - - -Meca Messenger 5.3.0.52 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -Mercury Messenger (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -86b804f7a28a3c17 - - - -Miranda IM 0.6.8 / 0.7.6 / 0.8.27 / 0.9.9 / 0.9.29 (ANSI + Unicode) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -b868d9201b866d96 - - - -Microsoft Lync 4.0.7577.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -8c816c711d66a6b5 - - - -MSN Messenger 6.2.0137 / 7.0.0820 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -(portable) - - - -MSNPSharp (portable) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -2d1658d5dc3cbe2d - - - -MySpaceIM 1.0.823.0 Beta - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -bf9ae1f46bd9c491 - - - -Nimbuzz 2.0.0 (rev 6266) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -fb7ca8059b8f2123 - - - -ooVoo 3.0.7.21 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -efb08d4e11e21ece - - - -Paltalk Messenger 10.0 (Build 409) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -4f24a7b84a7de5a6 - - - -Palringo 2.6.3 (r45983) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -e93dbdcede8623f2 - - - -Pandion 2.6.106 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -a52b0784bd667468 - - - -Photos Microsoft 16.526.11220.0 (Windows 10) - - - -9/15/2011 - - - -[Ovie Carroll](https://cyberspeak.libsyn.com/) - -
- -aedd2de3901a77f4 - - - -Pidgin 2.0.0 / 2.10.0 / 2.7.3 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c5236fd5824c9545 - - - -PLAYXPERT 1.0.140.2822 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -dee18f19c7e3a2ec - - - -PopNote 5.21 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -1a60b1067913516a - - - -Psi 0.14 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -e0532b20aa26a0c9 - - - -QQ International 1.1 (2042) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -3c0022d9de573095 - - - -QuteCom 2.2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -93b18adf1d948fa3 - - - -qutIM 0.2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -e0246018261a9ccc - - - -qutIM 0.2.80.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -2aa756186e21b320 - - - -RealTimeQuery 3.2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -521a29e5d22c13b4 - - - -Skype 1.4.0.84 / 2.5.0.154 / 3.8.0.139 / 4.2.0.187 / Skype 5.3.0.120 / -5.5.0.115 / 5.5.32.117 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -74ea779831912e30 - - - -Skype 7.24.0.104 - - - -7/6/2016 - - - -[Ovie Carroll](https://cyberspeak.libsyn.com/) - -
- -70b52cf73249257 - - - -Sococo 1.5.0.2274 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -d41746b133d17456 - - - -Tkabber 0.11.1 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c8aa3eaee3d4343d - - - -Trillian 0.74 / 3.1 / 4.2.0.25 / 5.0.0.35 (JL support) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -d7d647c92cd5d1e6 - - - -uTalk 2.6.4 r47692 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -36c36598b08891bf - - - -Vovox 2.5.3.4250 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -884fd37e05659f3a - - - -VZOchat 6.3.5 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -3461e4d1eb393c9c - - - -WTW 0.8.18.2852 / 0.8.19.2940 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -f2cb1c38ab948f58 - - - -X-Chat 1.8.10 / 2.6.9 / 2.8.9 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -4e0ac37db19cba15 - - - -Xfire 1.138 (Build 44507) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -da7e8de5b8273a0f - - - -Yahoo Messenger 5.0.0.1226 / 6.0.0.1922 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -62dba7fb39bb0adc - - - -Yahoo Messenger 7.5.0.647 / 8.1.0.421 / 9.0.0.2162 / 10.0.0.1270 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -fb230a9fe81e71a8 - - - -Yahoo Messenger 11.0.0.2014-us - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -b06a975b62567622 - - - -Windows Live Messenger 8.5.1235.0517 BETA - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -bd249197a6faeff2 - - - -Windows Live Messenger 2011 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -**Media Players (32-bit)** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -AppID - - - -Application Description - - - -Date Added - - - -Source - -
- -d22ad6d9d20e6857 - - - -ALLPlayer 4.7 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -7494a606a9eef18e - - - -Crystal Player 1.98 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -1cffbe973a437c74 - - - -DSPlayer 0.889 Lite - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -817bb211c92fd254 - - - -GOM Player 2.0.12.3375 / 2.1.28.5039 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -6bc3383cb68a3e37 - - - -iTunes 7.6.0.29 / 8.0.0.35 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -83b03b46dcd30a0e - - - -iTunes 9.0.0.70 / 9.2.1.5 / 10.4.1.10 (begin custom 'Tasks' JL -capability) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -fe5e840511621941 - - - -JetAudio 5.1.9.3018 Basic / 6.2.5.8220 Basic / 7.0.0 Basic / 8.0.16.2000 -Basic - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -a777ad264b54abab - - - -JetVideo 8.0.2.200 Basic - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -3c93a049a30e25e6 - - - -J. River Media Center 16.0.149 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -4a49906d074a3ad3 - - - -Media Go 1.8 (Build 121) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -1cf97c38a5881255 - - - -MediaPortal 1.1.3 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -Depends on location - - - -Media Player Classic 6.4.8.9 (is portable) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -Depends on location - - - -Media Player Classic - Home Cinema 1.5.2.3456 (default install is -\Users\\user\\ dir, so dynamic) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -62bff50b969c2575 - - - -Quintessential Media Player 5.0 (Build 121) - also usage stats (times -used, tracks played, total time used) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -b50ee40805bd280f - - - -QuickTime Alternative 1.9.5 (Media Player Classic 6.4.9.1) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -ae3f2acd395b622e - - - -QuickTime Player 6.5.1 / 7.0.3 / 7.5.5 (Build 249.13) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -7593af37134fd767 - - - -RealPlayer 6.0.6.99 / 7 / 8 / 10.5 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -37392221756de927 - - - -RealPlayer SP 12 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -f92e607f9de02413 - - - -RealPlayer 14.0.6.666 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -6e9d40a4c63bb562 - - - -Real Player Alternative 1.25 (Media Player Classic 6.4.8.2 / 6.4.9.0) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -c91d08dcfc39a506 - - - -SM Player 0.6.9 r3447 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -e40cb5a291ad1a5b - - - -Songbird 1.9.3 (Build 1959) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -4d8bdacf5265a04f - - - -The KMPlayer 2.9.4.1434 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -4acae695c73a28c7 - - - -VLC 0.3.0 / 0.4.6 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -9fda41b86ddcf1db - - - -VLC 0.5.3 / 0.8.6i / 0.9.7 / 1.1.11 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -e6ee34ac9913c0a9 - - - -VLC 0.6.2 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -cbeb786f0132005d - - - -VLC 0.7.2 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -f674c3a77cfe39d0 - - - -Winamp 2.95 / 5.1 / 5.621 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -90e5e8b21d7e7924 - - - -Winamp 3.0d (Build 488) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -74d7f43c1561fc1e - - - -Windows Media Player 12.0.7601.17514 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -**Media Players (64-bit)** - - - - - - - - - - - - -
- -AppID - - - -Application Description - - - -Date Added - - - -Source - -
- -faef7def55a1d4b - - - -VLC 2.2.6 - - - -19/12/2017 - - - -\[DaveS\] - -
- -**System Cleaners (32-bit)** - - - - - - - - - - - - - - - - - - -
- -AppID - - - -Application Description - - - -Date Added - - - -Source - -
- -ed7a5cc3cca8d52a - - - -CCleaner 1.32.345 / 1.41.544 / 2.36.1233 / 3.10.1525 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -eb7e629258d326a1 - - - -WindowWasher 6.6.1.18 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -**Usenet Newsreaders (32-bit)** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -AppID - - - -Application Description - - - -Date Added - - - -Source - -
- -ace8715529916d31 - - - -40tude Dialog 2.0.15.1 (Beta 38) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -cc76755e0f925ce6 - - - -AllPicturez 1.2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -36f6bc3efe1d99e0 - - - -Alt.Binz 0.25.0 (Build 27.09.2007) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -d53b52fb65bde78c - - - -Android Newsgroup Downloader 6.2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c845f3a6022d647c - - - -Another File 2.03 (Build 2/7/2004) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -780732558f827a42 - - - -AutoPix 5.3.3 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -baea31eacd87186b - - - -BinaryBoy 1.97 (Build 55) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -eab25958dbddbaa4 - - - -Binary News Reaper 2 (Beta 0.14.7.448) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -bf483b423ebbd327 - - - -Binary Vortex 5.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -36801066f71b73c5 - - - -Binbot 2.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -13eb0e5d9a49eaef - - - -Binjet 3.0.2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -8172865a9d5185cb - - - -Binreader 1.0 (Beta 1) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -6224453d9701a612 - - - -BinTube 3.7.1.0 (requires VLC 10.5!) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -cf6379a9a987366e - - - -Digibin 1.31 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -43886ba3395acdcc - - - -Easy Post 3.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -cfab0ec14b6f953 - - - -Express NewsPictures 2.41 (Build 08.05.07.0) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -7526de4a8b5914d9 - - - -Forte Agent 6.00 (Build 32.1186) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c02baf50d02056fc - - - -FotoVac 1.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -3ed70ef3495535f7 - - - -Gravity 3.0.4 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -86781fe8437db23e - - - -Messenger Pro 2.66.6.3353 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -f920768fe275f7f4 - - - -Grabit 1.5.3 Beta (Build 909) / 1.6.2 (Build 940) / 1.7.2 Beta 4 (Build -997) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -9f03ae476ad461fa - - - -GroupsAloud 1.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -d0261ed6e16b200b - - - -News File Grabber 4.6.0.4 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -8211531a7918b389 - - - -Newsbin Pro 6.00 (Build 1019) (JL support) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -d1fc019238236806 - - - -Newsgroup Commander Pro 9.05 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -186b5ccada1d986b - - - -NewsGrabber 3.0.36 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -4d72cfa1d0a67418 - - - -Newsgroup Image Collector - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -92f1d5db021cd876 - - - -NewsLeecher 4.0 / 5.0 Beta 6 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -d7666c416cba240c - - - -NewsMan Pro 3.0.5.2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -7b2b4f995b54387d - - - -News Reactor 20100224.16 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -cb984e3bc7faf234 - - - -NewsRover 17.0 (Rev.0) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -c98ab5ccf25dda79 - - - -NewsShark 2.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -dba909a61476ccec - - - -NewsWolf 1.41 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -2b164f512891ae37 - - - -NewsWolf NSListGen - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -cb1d97aca3fb7e6b - - - -Newz Crawler 1.9.0 (Build 4100) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -3be7b307dfccb58f - - - -NiouzeFire 0.8.7.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -de76415e0060ce13 - - - -Noworyta News Reader 2.9 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -cd40ead0b1eb15ab - - - -NNTPGrab 0.6.2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -d5c02fc7afbb3fd4 - - - -NNTPGrab 0.6.2 Server - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -a4def57ee99d77e9 - - - -Nomad News 1.43 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -3f97341a65bac63a - - - -Ozum 6.07 (Build 6070) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -bfe841f4d35c92b1 - - - -QuadSucker/News 5.0 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -web-based - - - -sabnzbd 0.6.8 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -d3c5cf21e86b28af - - - -SeaMonkey 2.3.3 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -7a7c60efd66817a2 - - - -Spotnet 1.7.4 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -eb3300e672136bc7 - - - -Stream Reactor 1.0 Beta 9 (uses VLC!) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -3168cc975b354a01 - - - -Slypheed 3.1.2 (Build 1120) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -776beb1fcfc6dfa5 - - - -Thunderbird 1.0.6 (20050716) / 3.0.2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -3d877ec11607fe4 - - - -Thunderbird 6.0.2 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -7192f2de78fd9e96 - - - -TIFNY 5.0.3 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -9dacebaa9ac8ca4e - - - -TLNews Newsreader 2.2.0 (Build 2430) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -7fd04185af357bd5 - - - -UltraLeeacher 1.7.0.2969 / 1.8 Beta (Build 3490) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -aa11f575087b3bdc - - - -Unzbin 2.6.8 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -pay only - - - -Usenet Explorer 3.3 (pay) - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -d7db75db9cdd7c5d - - - -Xnews 5.04.25 - - - -9/15/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) - -
- -**Utilities (32-bit)** - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- -AppID - - - -Application Description - - - -Date Added - - - -Source - -
- -3dc02b55e44d6697 - - - -7-Zip 3.13 / 4.20 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -4975d6798a8bdf66 - - - -7-Zip 4.65 / 9.20 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -4b6925efc53a3c08 - - - -BCWipe 5.02.2 Task Manager 3.02.3 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -23709f6439b9f03d - - - -Hex Editor Neo 5.14 - - - -6/7/2013 - - - -\[ChadTilbury\] - -
- -e57cfc995bdc1d98 - - - -Snagit 11 - - - -6/7/2013 - - - -\[ChadTilbury\] - -
- -337ed59af273c758 - - - -Sticky Notes - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -337ed59af273c758 - - - -Sticky Notes (Windows 10) - - - -7/6/2016 - - - -[Ovie Carroll](https://cyberspeak.libsyn.com/) - -
- -290532160612e071 - - - -WinRAR 2.90 / 3.60 / 4.01 - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -c9950c443027c765 - - - -WinZip 9.0 SR-1 (6224) / 10.0 (6667) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -b74736c2bd8cc8a5 - - - -WinZip 15.5 (9468) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
- -bc0c37e84e063727 - - - -Windows Command Processor - cmd.exe (32-bit) - - - -9/8/2011 - - - -[4n6k -Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) - -
+## Application identifiers + +AppID | Application Description | Date Added | Source +--- | --- | --- | --- +65009083bfa6a094 | (app launched via XPMode) | 2011-08-22 | Win4n6 List Serv +469e4a7982cea4d4 | ? (.job) | 2011-08-22 | Win4n6 List Serv +b0459de4674aab56 | (.vmcx) | 2011-08-22 | Win4n6 List Serv +89b0d939f117f75c | Adobe Acrobat 9 Pro Extended (32-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +26717493b25aa6e1 | Adobe Dreamweaver CS5 (32-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +e2a593822e01aed3 | Adobe Flash CS5 (32-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +c765823d986857ba | Adobe Illustrator CS5 (32-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +84f066768a22cc4f | Adobe Photoshop CS5 (64-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +44a398496acc926d | Adobe Premiere Pro CS5 (64-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +23646679aaccfae0 | Adobe Reader 9. | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +23646679aaccfae0 | Adobe Reader 9 x64 | 2011-08-22 | Win4n6 List Serv +d5c3931caad5f793 | Adobe Soundbooth CS5 (32-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +7e4dca80246863e3 | Control Panel (?) | 2011-08-22 | Win4n6 List Serv +5c450709f7ae4396 | Firefox 3.6.13 (32-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +bc03160ee1a59fc1 | Foxit PDF Reader 5.4.5 | 6/7/2013 | Chad Tilbury +28c8b86deab549a1 | Internet Explorer 8 / 9 / 10 (32-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +5da8f997fd5f9428 | Internet Explorer x64 | 2011-08-22 | Win4n6 List Serv +83b03b46dcd30a0e | iTunes 10 | 2011-08-22 | Win4n6 List Serv +271e609288e1210a | Microsoft Office Access 2010 x86 | 2011-08-22 | Win4n6 List Serv +cdf30b95c55fd785 | Microsoft Office Excel 2007 | 2011-08-22 | Win4n6 List Serv +9839aec31243a928 | Microsoft Office Excel 2010 x86 | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +6e855c85de07bc6a | Microsoft Office Excel 2010 x64 | 2013-06-07 | Chad Tilbury +f0275e8685d95486 | Microsoft Office Excel 2013 x86 | 3/4/2015 | [Russ Taylor](https://hatsoffsecurity.com/) +b8ab77100df80ab2 | Microsoft Office Excel x64 | 4/25/2017 | [4n6k GitHub](https://github.com/4n6k/Jump_List_AppIDs/blob/master/4n6k_AppID_Master_List.md) +b8c29862d9f95832 | Microsoft Office InfoPath 2010 x86 | 2011-08-22 | Win4n6 List Serv +d64d36b238c843a3 | Microsoft Office InfoPath 2010 x86 | 2011-08-22 | Win4n6 List Serv +3094cdb43bf5e9c2 | Microsoft Office OneNote 2010 x86 | 2011-08-22 | Win4n6 List Serv +d38adec6953449ba | Microsoft Office OneNote 2010 x64 | 6/7/2013 | Chad Tilbury +be71009ff8bb02a2 | Microsoft Office Outlook x86 | 2011-08-22 | Win4n6 List Serv +5d6f13ed567aa2da | Microsoft Office Outlook 2010 x64 | 6/7/2013 | Chad Tilbury +6d2bac8f1edf6668 | Microsoft Office Outlook 365 | 7/6/2016 | Ovie Carroll +f5ac5390b9115fdb | Microsoft Office PowerPoint 2007 | 2011-08-22 | Win4n6 List Serv +9c7cc110ff56d1bd | Microsoft Office PowerPoint 2010 x86 | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +5f6e7bc0fb699772 | Microsoft Office PowerPoint 2010 x64 | 6/7/2013 | Chad Tilbury +d00655d2aa12ff6d | Microsoft Office PowerPoint x64 | 4/25/2017 | [4n6k GitHub](https://github.com/4n6k/Jump_List_AppIDs/blob/master/4n6k_AppID_Master_List.md) +a8c43ef36da523b1 | Microsoft Office Word 2003 Pinned and Recent | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +adecfb853d77462a | Microsoft Office Word 2007 Pinned and Recent | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +a7bd71699cd38d1c | Microsoft Office Word 2010 x86 | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +44a3621b32122d64 | Microsoft Office Word 2010 x64 | 6/7/2013 | Chad Tilbury +a4a5324453625195 | Microsoft Office Word 2013 x86 | 6/9/2014 | Bret A. Bennett +fb3b0dbfee58fac8 | Microsoft Office Word 365 x86 | 7/6/2016 | Ovie Carroll +a18df73203b0340e | Microsoft Word 2016 | 12/17/2017 | J.N. Wilson +12dc1ea8e34b5a6 | Microsoft Paint 6.1 | 2011-08-22 | Win4n6 List Serv +d4a589cab4f573f7 | Microsoft Project 2010 x86 | 10/26/2016 | Lodrina Cherne +40f2aca05d8a33f2 | Minitab 16 | 10/26/2016 | Lodrina Cherne +18434d518c3a61eb | Minitab 17 | 10/26/2016 | Lodrina Cherne +e70d383b15687e37 | Notepad++ 5.6.8 (32-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +918e0ecb43d17e23 | Notepad (32-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +9b9cdc69c1c24e2b | Notepad (64-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +c7a4093872176c74 | Paint Shop Pro Pinned and Recent | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +c71ef2c372d322d7 | PGP Desktop 10 | 2011-08-22 | Win4n6 List Serv +590aee7bdd69b59b | Powershell Windows 10 | 7/6/2016 | [Ovie Carroll](https://cyberspeak.libsyn.com/) +431a5b43435cc60b | Python (.pyc) | 2011-08-22 | Win4n6 List Serv +500b8c1d5302fc9c | Python (.pyw) | 2011-08-22 | Win4n6 List Serv +1bc392b8e104a00e | Remote Desktop | 2011-08-22 | Win4n6 List Serv +315e29a36e961336 | Roboform 7.8 | 6/7/2013 | Chad Tilbury +17d3eb086439f0d7 | TrueCrypt 7.0a | 2011-08-22 | Win4n6 List Serv +550abc1cb58eb92c | VeraCrypt 1.16 / 1.19 64-bit | 2/29/2016 | 4n6k Blog +50620fe75ee0093 | VMware Player 3.1.4 | 2011-08-22 | Win4n6 List Serv +8eafbd04ec8631ce | VMware Workstation 9 x64 | 6/7/2013 | Chad Tilbury +6728dd69a3088f97 | Windows Command Processor - cmd.exe (64-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +1b4dd67f29cb1962 | Windows Explorer Pinned and Recent | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +f01b4d95cf55d32a | Windows Explorer Windows 8.1. | 11/7/2014 | [Russ Taylor](https://hatsoffsecurity.com/2014/09/06/jump-lists/) +d7528034b5bd6f28 | Windows Live Mail Pinned and Recent | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +b91050d8b077a4e8 | Windows Media Center x64 | 2011-08-22 | Win4n6 List Serv +43578521d78096c6 | Windows Media Player Classic Home Cinema 1.3 (32-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +74d7f43c1561fc1e | Windows Media Player 12 (32-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +954ea5f70258b502 | Windows Script Host - wscript.exe (32-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +9f5c7755804b850a | Windows Script Host - wscript.exe (64-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +b0459de4674aab56 | Windows Virtual PC - vmwindow.exe (32- and 64-bit) | 2011-08-22 | [Microsoft Windows 7 Forum](https://social.technet.microsoft.com/Forums/en-US/92b90228-2f08-4558-9c4d-6e66e103a5cf/jump-list-history-location?forum=w7itprogeneral) +469e4a7982cea4d4 | Windows Wordpad | 6/7/2013 | Chad Tilbury +290532160612e071 | WinRar x64 | 2011-08-22 | Win4n6 List Serv +b74736c2bd8cc8a5 | WinZip | 8/23/2011 | Win4n6 List Serv +e36bfc8972e5ab1d | XPS Viewer | 2011-08-22 | Win4n6 List Serv +2b53c4ddf69195fc | Zune x64 | 2011-08-22 | Win4n6 List Serv + +### Image/Document Viewers (32-bit) + +AppID | Application Description | Date Added | Source +--- | --- | --- | --- +f0468ce1ae57883d | Adobe Reader 7.1.0 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +c2d349a0e756411b | Adobe Reader 8.1.2 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +23646679aaccfae0 | Adobe Acrobat 9.4.0 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +ee462c3b81abb6f6 | Adobe Reader X 10.1.0 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +de48a32edcbe79e4 | Acrobat Reader 15.x | 4/25/2017 | [4n6k GitHub](https://github.com/4n6k/Jump_List_AppIDs/blob/master/4n6k_AppID_Master_List.md) +386a2f6aa7967f36 | EyeBrowse 2.7 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +e31a6a8a7506f733 | Image AXS Pro 4.1 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +b39c5f226977725d | ACDSee Pro 8.1.99 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +59f56184c796cfd4 | ACDSee Photo Manager 10 (Build 219) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +8bd5c6433ca967e9 | ACDSee Photo Manager 2009 (v11.0 Build 113) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +d838aac097abece7 | ACDSee Photo Manager 12 (Build 344) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +b3f13480c2785ae | Paint 6.1 (build 7601: SP1) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +7cb0735d45243070 | CDisplay 1.8.1.0 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +3594aab44bca414b | Windows Photo Viewer | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +3edf100b207e2199 | digiKam 1.7.0 (KDE 4.4.4) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +169b3be0bc43d592 | FastPictureViewer Professional 1.6 (Build 211) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +e9a39dfba105ea23 | FastStone Image Viewer 4.6 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +ef606b196796ebb | HP MediaSmart Photo | 2012-01-24 | Jimmy Weg +edc786643819316c | HoneyView3 \#5834 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +76689ff502a1fd9e | Imagine Image and Animation Viewer 1.0.7 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +2519133d6d830f7e | IMatch 3.6.0.113 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +1110d9896dceddb3 | imgSeek 0.8.5 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +c634153e7f5fce9c | IrfanView 3.10 / 4.30 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +ea83017cdd24374d | IrfanView Thumbnails | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +3917dd550d7df9a8 | Konvertor 4.06 (Build 10) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +2fa14c7753239e4c | Paint.NET 2.72 / 3.5.8.4081.24580 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +d33ecf70f0b74a77 | Picasa 2.2.0 (Build 28.08, 0) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +b17d3d0c9ca7e29 | Picasa 3.8.0 (Build 117.43, 0) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +Embedded in IE | Prizm Viewer | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +depends on Location | Scientific and Technical Document Viewer 1.6.2 Portable (STDU) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +c5c24a503b1727df | XnView 1.98.2 Small / 1.98.2 Standard | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +497b42680f564128 | Zoner PhotoStudio 13 (Build 7) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) + +### Internet Browsers (32-bit) + +AppID | Application Description | Date Added | Source +--- | --- | --- | --- +5d696d521de238c3 | Chrome 9.0.597.84 / 12.0.742.100 / 13.0.785.215 / 26 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +cfb56c56fa0f0a54 | Mozilla 0.9.9 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +5c450709f7ae4396 | Firefox 1.0 / 2.0 / 3.0 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +5df4765359170e26 | Firefox 4.0.1 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +1eb796d87c32eff9 | Firefox 5.0 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +1461132e553e2e6c | Firefox 6.0 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +28c8b86deab549a1 | Internet Explorer 8 / 9 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +16ec093b8f51508f | Opera 8.54 build 7730 / 9.64 build 10487 / 11.50 build 1074 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +8a1c1c7c389a5320 | Safari 3.2.3 (525.29) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +1da3c90a72bf5527 | Safari 4.0.5 (531.22.7) / 5.1 (7534.50) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +9d1f905ce5044aee | Edge Browser | 7/6/2016 | [Ovie Carroll](https://cyberspeak.libsyn.com/) +a0d6b1b874c6e9d2 | TOR Browser 6.0.2 | 7/6/2016 | [Ovie Carroll](https://cyberspeak.libsyn.com/) + +### File Sharing/P2P (32-bit) + +AppID | Application Description | Date Added | Source +--- | --- | --- | --- +e0f7a40340179171 | imule 1.4.5 (rev. 749) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +installs to .exe loc | AirDC++ 2.10 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +76f6f1bd18c19698 | aMule 2.2.6 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +cb5250eaef7e3213 | ApexDC++ 1.4.3.957 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +bfc1d76f16fa778f | Ares (Galaxy) 1.8.4 / 1.9.8 / 2.1.0 / 2.1.7.3041 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | Azureus 0.9.0 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +accca100973ef8dc | Azureus 2.0.8.4 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +ccb36ff8a8c03b4b | Azureus 2.5.0.4 / Vuze 3.0.5.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +558c5bd9f906860a | BearShare Lite 5.2.5.1 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +e1d47cb031dafb9f | BearShare 6.0.0.22717 / 8.1.0.70928 / 10.0.0.112380 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | BitComet 0.39 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +a31ec95fdd5f350f | BitComet 0.49 / 0.59 / 0.69 / 0.79 / 0.89 / 0.99 / 1.07 / 1.28 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +bcd7ba75303acbcf | BitLord 1.1 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +1434d6d62d64857d | BitLord 1.2.0-66 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +e73d9f534ed5618a | BitSpirit 1.2.0.228 / 2.0 / 2.6.3.168 / 2.7.2.239 / 2.8.0.072 / 3.1.0.077 / 3.6.0.550 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c9374251edb4c1a8 | BitTornado T-0.3.17 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +2d61cccb4338dfc8 | BitTorrent 5.0.0 / 6.0.0 / 7.2.1 (Build 25548) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +ba3a45f7fd2583e1 | Blubster 3.1.1 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +4a7e4f6a181d3d08 | broolzShare | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +f001ea668c0aa916 | Cabos 0.8.2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | CzDC 0.699 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | Datawire 1.3 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | DC++ 0.181 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +560d789a6a42ad5a | DC++ 0.261 / 0.698 / 0.782 (r2402.1) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +4aa2a5710da3efe0 | DCSharpHub 2.0.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +2db8e25112ab4453 | Deluge 1.3.3 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +7b7f65aaeca20a8c | Dropbox App 5.4.24 | 7/6/2016 | [Ovie Carroll](https://cyberspeak.libsyn.com/) +5b186fc4a0b40504 | Dtella 1.2.5 (Purdue network only) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +2437d4d14b056114 | EiskaltDC++ 2.2.3 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +b3016b8da2077262 | eMule 0.50a | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +cbbe886eca4bfc2d | ExoSee 1.0.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +9ad1ec169bf2da7f | FlylinkDC++ r405 (Build 7358) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +4dd48f858b1a6ba7 | Free Download Manager 3.0 (Build 852) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | Freenet (default install dir is C:\Users\\\$user\\...) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | Frost 2011-03-05 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +f214ca2dd40c59c1 | FrostWire 4.20.9 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +73ce3745a843c0a4 | FrostWire 5.1.4 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +98b0ef1c84088 | fulDC 6.78 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +e6ea77a1d4553872 | Gnucleus 1.8.6.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +ed49e1e6ccdba2f5 | GNUnet 0.8.1a | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +cc4b36fbfb69a757 | gtk-gnutella 0.97 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +a746f9625f7695e8 | HeXHub 5.07 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +223bf0f360c6fea5 | I2P 0.8.8 (restartable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +2ff9dc8fb7e11f39 | I2P 0.8.8 (no window) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +???????????????? | \[i2p\] i2phex 3.2.0.103.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +f1a4c04eebef2906 | \[i2p\] Robert 0.0.29 Preferences | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +???????????????? | \[i2p\] Rufus 0.0.4 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c8e4c10e5460b00c | iMesh 6.5.0.16898 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +f61b65550a84027e | iMesh 11.0.0.112351 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +d460280b17628695 | Java Binary | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | Jucy DC 0.85.0.201008281346 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +784182360de0c5b6 | Kazaa Lite 1.7.1 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +a75b276f6e72cf2a | Kazaa Lite Tools K++ 2.7.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +ba132e702c0147ef | KCeasy 0.19-rc1 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +a8df13a46d66f6b5 | Kommute (Calypso) 0.24 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | LamaHub 0.0.5.5 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c5ef839d8d1c76f4 | LimeWire 5.2.13 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +977a5d147aa093f4 | Lphant 3.51 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +96252daff039437a | Lphant 7.0.0.112351 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +e76a4ef13fbf2bb1 | Manolito 3.1.1 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +99c15cf3e6d52b61 | mldonkey 3.1.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +ff224628f0e8103c | Morpheus 3.0.3.6 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | MUTE File Sharing 0.5.1 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +See Java Binary | Nodezilla Agent 0.5.15 - built in Java | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | Perfect Dark 0.883 / 0.940 / 1.06 / 1.07 (all portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +See Java Binary | Phex 3.4.2 (Build 116) - built in Java | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +792699a1373f1386 | Piolet 3.1.1 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +ca1eb46544793057 | RetroShare 0.5.2a (Build 4550) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +3cf13d83b0bd3867 | RevConnect 0.674p (based on DC++) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | PtokaX DC Hub 0.4.1.2 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | RSX++ 1.21 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +5e01ecaf82f7d8e | Scour Exchange 0.0.0.228 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | StrongDC++ 2.42 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | TkDC++ 1.3 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +5d7b4175afdcc260 | Shareaza 2.0.0.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +b48ce76eda60b97 | Shareaza 8.0.0.112300 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +23f08dab0f6aaf30 | SoMud 1.3.3 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +135df2a440abe9bb | SoulSeek 156c | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +ecd21b58c2f65a2f | StealthNet 0.8.7.9 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +5ea2a50c7979fbdc | TrustyFiles 3.1.0.22 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | uTorrent 1.1.1-dev (Build 110) / 1.3.0 / 1.5.0 (all portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +cd8cafb0fb6afdab | uTorrent 1.7.7 (Build 8179) / 1.8.5 / 2.0 / 2.21 (Build 25113) / 3.0 (Build 25583) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +caea34d2e74f5c8 | uTorrent 3.4.7 | 7/6/2016 | [Ovie Carroll](https://cyberspeak.libsyn.com/) +a75b276f6e72cf2a | WinMX 3.53 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +490c000889535727 | WinMX 4.9.3.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | Winny 2.0b7.1 - all languages (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | xHub 0.2.6.7 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | YnHub 1.036.152 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +ac3a63b839ac9d3a | Vuze 4.6.0.4 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) + +### FTP (32-bit) + +AppID | Application Description | Date Added | Source +--- | --- | --- | --- +d28ee773b2cea9b2 | 3D-FTP 9.0 build 7 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +cd2acd4089508507 | AbsoluteTelnet 9.18 Lite | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +e6ef42224b845020 | ALFTP 5.20.0.4 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +9e0b3f677a26bbc4 | BitKinex 3.2.3 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +4cdf7858c6673f4b | Bullet Proof FTP 1.26 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +714b179e552596df | Bullet Proof FTP 2.4.0 (Build 31) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +20ef367747c22564 | Bullet Proof FTP 2010.75.0.75 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +44a50e6c87bc012 | Classic FTP Plus 2.15 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +4fceec8e021ac978 | CoffeeCup Free FTP 3.5.0.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +8deb27dfa31c5c2a | CoffeeCup Free FTP 4.4 (Build 1904) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +49b5edbd92d8cd58 | FTP Commander 8.02 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +6a316aa67a46820b | Core FTP LE 1.3c (Build 1437) / 2.2 (Build 1689) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +be4875bb3e0c158f | CrossFTP 1.75a | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c04f69101c131440 | CuteFTP 5.0 (Build 50.6.10.2) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +a79a7ce3c45d781 | CuteFTP 7.1 (Build 06.06.2005.1) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +59e86071b87ac1c3 | CuteFTP 8.3 (Build 8.3.4.0007) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +d8081f151f4bd8a5 | CuteFTP 8.3 Lite (Build 8.3.4.0007) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +3198e37206f28dc7 | CuteFTP 8.3 Professional (Build 8.3.4.0007) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +f82607a219af2999 | Cyberduck 4.1.2 (Build 8999) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +fa7144034d7d083d | Directory Opus 10.0.2.0.4269 (JL tasks supported) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +f91fd0c57c4fe449 | ExpanDrive 2.1.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +8f852307189803b8 | Far Manager 2.0.1807 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +226400522157fe8b | FileZilla Server 0.9.39 beta | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +a1d19afe5a80f80 | FileZilla 2.2.32 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +e107946bb682ce47 | FileZilla 3.5.1 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +b7cb1d1c1991accf | FlashFXP 4.0.0 (Build 1548) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +8628e76fd9020e81 | Fling File Transfer Plus 2.24 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +27da120d7e75cf1f | pbFTPClient 6.1 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +f64de962764b9b0f | FTPRush 1.1.3 / 2.15 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +10f5a20c21466e85 | FTP Voyager 15.2.0.17 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +7937df3c65790919 | FTP Explorer 10.5.19 (Build 001) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +9560577fd87cf573 | LeechFTP 1.3 (Build 207) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +fc999f29bc5c3560 | Robo-FTP 3.7.9 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c99ddde925d26df3 | Robo-FTP 3.7.9 CronMaker | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +4b632cf2ceceac35 | Robo-FTP Server 3.2.5 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +3a5148bf2288a434 | Secure FTP 2.6.1 (Build 20101209.1254) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +435a2f986b404eb7 | SmartFTP 4.0.1214.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +explorer integrated +Swish +2011-09-15 +[4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +e42a8e0f4d9b8dcf | Sysax FTP Automation 5.15 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +b8c13a5dd8c455a2 | Titan FTP Server 8.40 (Build 1338) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +7904145af324576e | Total Commander 7.56a (Build 16.12.2010) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +79370f660ab51725 | UploadFTP 2.0.1.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +6a8b377d0f5cb666 | WinSCP 2.3.0 (Build 146) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +9a3bdae86d5576ee | WinSCP 3.2.1 (Build 174) / 3.8.0 (Build 312) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +6bb54d82fa42128d | WinSCP 4.3.4 (Build 1428) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +b6267f3fcb700b60 | WiseFTP 4.1.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +a581b8002a6eb671 | WiseFTP 5.5.9 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +2544ff74641b639d | WiseFTP 6.1.5 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c54b96f328bdc28d | WiseFTP 7.3.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +Web-based | WS_FTP | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) + +### IRC (32-bit) + +AppID | Application Description | Date Added | Source +--- | --- | --- | --- +b223c3ffbc0a7a42 | Bersirc 2.2.14 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c01d68e40226892b | ClicksAndWhistles 2.7.146 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +ac8920ed05001800 | DMDirc 0.6.5 (Profile store: C:\Users\\\$user\AppData\Roaming\DMDirc\\) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +d3530c5294441522 | HydraIRC 0.3.165 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +8904a5fd2d98b546 | IceChat 7.70 20101031 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +6b3a5ce7ad4af9e4 | IceChat 9 RC2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +fa496fe13dd62edf | KVIrc 3.4.2.1 / 4.0.4 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +65f7dd884b016ab2 | LimeChat 2.39 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +19ccee0274976da8 | mIRC 4.72 / 5.61 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +ae069d21df1c57df | mIRC 6.35 / 7.19 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +e30bbea3e1642660 | Neebly 1.0.4 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +54c803dfc87b52ba | Nettalk 6.7.12 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +dd658a07478b46c2 | PIRCH98 1.0.1.1190 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | Quassel IRC 0.7.1 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +6fee01bd55a634fe | Smuxi 0.8.0.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +2a5a615382a84729 | X-Chat 2 2.8.6-2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) + +### IM/Communications (32-bit) + +AppID | Application Description | Date Added | Source +--- | --- | --- | --- +b3965c840bf28ef4 | AIM 4.8.2616 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +1b29f0dc90366bb | AIM 5.9.3857 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +27ececd8d89b6767 | AIM 6.2.14.2 / 6.5.3.12 / 6.9.17.2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +6f647f9488d7a | AIM 7.5.11.9 (custom AppID + JL support) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +ca942805559495e9 | aMSN 0.98.4 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c6f7b5bf1b9675e4 | BitWise IM 1.7.3a | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +fb1f39d1f230480a | Bopup Messenger 5.6.2.9178 (all languages: en;du;fr;ger;rus;es) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +dc64de6c91c18300 | Brosix Communicator 3.1.3 (Build 110719 nid 1) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +f09b920bfb781142 | Camfrog 4.0.47 / 5.5.0 / 6.1 (build 146) (JL support) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +ebd8c95d87f25154 | Carrier 2.5.5 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | Coccinella Messenger 0.96.20 (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +30d23723bdd5d908 | Digsby (Build 30140) (JL support) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +728008617bc3e34b | eM Client 3.0.10206.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +689319b6547cda85 | emesene 2.11.7 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +454ef7dca3bb16b2 | Exodus 0.10.0.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +cca6383a507bac64 | Gadu-Gadu 10.5.2.13164 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +4278d3dc044fc88a | Gaim 1.5.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +777483d3cdac1727 | Gajim 0.14.4 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +6aa18a60024620ae | GCN 2.9.1 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +3f2cd46691bbee90 | GOIM 1.1.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +73c6a317412687c2 | Google Talk 1.0.0.104 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +b0236d03c0627ac4 | ICQ 5.1 / ICQLite Build 1068 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +a5db18f617e28a51 | ICQ 6.5 (Build 2024) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +2417caa1f2a881d4 | ICQ 7.6 (Build 5617) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +recognized VM | inSpeak 7.2.0.540 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +989d7545c2b2e7b2 | IMVU 465.8.0.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +a3e0d98f5653b539 | Instantbird 1.0 (20110623121653) (JL support) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +bcc705f705d8132b | Instan-t 5.2 (Build 2824) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +6059df4b02360af | Kadu 0.10.0 / 0.6.5.5 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c312e260e424ae76 | Mail.Ru Agent 5.8 (JL support) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +22cefa022402327d | Meca Messenger 5.3.0.52 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | Mercury Messenger (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +86b804f7a28a3c17 | Miranda IM 0.6.8 / 0.7.6 / 0.8.27 / 0.9.9 / 0.9.29 (ANSI + Unicode) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +b868d9201b866d96 | Microsoft Lync 4.0.7577.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +8c816c711d66a6b5 | MSN Messenger 6.2.0137 / 7.0.0820 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +(portable) | MSNPSharp (portable) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +2d1658d5dc3cbe2d | MySpaceIM 1.0.823.0 Beta | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +bf9ae1f46bd9c491 | Nimbuzz 2.0.0 (rev 6266) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +fb7ca8059b8f2123 | ooVoo 3.0.7.21 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +efb08d4e11e21ece | Paltalk Messenger 10.0 (Build 409) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +4f24a7b84a7de5a6 | Palringo 2.6.3 (r45983) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +e93dbdcede8623f2 | Pandion 2.6.106 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +a52b0784bd667468 | Photos Microsoft 16.526.11220.0 (Windows 10) | 2011-09-15 | [Ovie Carroll](https://cyberspeak.libsyn.com/) +aedd2de3901a77f4 | Pidgin 2.0.0 / 2.10.0 / 2.7.3 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c5236fd5824c9545 | PLAYXPERT 1.0.140.2822 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +dee18f19c7e3a2ec | PopNote 5.21 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +1a60b1067913516a | Psi 0.14 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +e0532b20aa26a0c9 | QQ International 1.1 (2042) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +3c0022d9de573095 | QuteCom 2.2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +93b18adf1d948fa3 | qutIM 0.2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +e0246018261a9ccc | qutIM 0.2.80.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +2aa756186e21b320 | RealTimeQuery 3.2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +521a29e5d22c13b4 | Skype 1.4.0.84 / 2.5.0.154 / 3.8.0.139 / 4.2.0.187 / Skype 5.3.0.120 / 5.5.0.115 / 5.5.32.117 | 2011-09-15 [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +74ea779831912e30 | Skype 7.24.0.104 | 7/6/2016 | [Ovie Carroll](https://cyberspeak.libsyn.com/) +70b52cf73249257 | Sococo 1.5.0.2274 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +d41746b133d17456 | Tkabber 0.11.1 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c8aa3eaee3d4343d | Trillian 0.74 / 3.1 / 4.2.0.25 / 5.0.0.35 (JL support) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +d7d647c92cd5d1e6 | uTalk 2.6.4 r47692 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +36c36598b08891bf | Vovox 2.5.3.4250 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +884fd37e05659f3a | VZOchat 6.3.5 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +3461e4d1eb393c9c | WTW 0.8.18.2852 / 0.8.19.2940 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +f2cb1c38ab948f58 | X-Chat 1.8.10 / 2.6.9 / 2.8.9 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +4e0ac37db19cba15 | Xfire 1.138 (Build 44507) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +da7e8de5b8273a0f | Yahoo Messenger 5.0.0.1226 / 6.0.0.1922 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +62dba7fb39bb0adc | Yahoo Messenger 7.5.0.647 / 8.1.0.421 / 9.0.0.2162 / 10.0.0.1270 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +fb230a9fe81e71a8 | Yahoo Messenger 11.0.0.2014-us | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +b06a975b62567622 | Windows Live Messenger 8.5.1235.0517 BETA | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +bd249197a6faeff2 | Windows Live Messenger 2011 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) + +### Media Players (32-bit) + +AppID | Application Description | Date Added | Source +--- | --- | --- | --- +d22ad6d9d20e6857 | ALLPlayer 4.7 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +7494a606a9eef18e | Crystal Player 1.98 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +1cffbe973a437c74 | DSPlayer 0.889 Lite | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +817bb211c92fd254 | GOM Player 2.0.12.3375 / 2.1.28.5039 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +6bc3383cb68a3e37 | iTunes 7.6.0.29 / 8.0.0.35 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +83b03b46dcd30a0e | iTunes 9.0.0.70 / 9.2.1.5 / 10.4.1.10 (begin custom 'Tasks' JL capability) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +fe5e840511621941 | JetAudio 5.1.9.3018 Basic / 6.2.5.8220 Basic / 7.0.0 Basic / 8.0.16.2000 | Basic | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +a777ad264b54abab | JetVideo 8.0.2.200 Basic | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +3c93a049a30e25e6 | J. River Media Center 16.0.149 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +4a49906d074a3ad3 | Media Go 1.8 (Build 121) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +1cf97c38a5881255 | MediaPortal 1.1.3 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +Depends on location | Media Player Classic 6.4.8.9 (is portable) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +Depends on location | Media Player Classic - Home Cinema 1.5.2.3456 (default install is \Users\\user\\ dir, so dynamic) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +62bff50b969c2575 | Quintessential Media Player 5.0 (Build 121) - also usage stats (times used, tracks played, total time used) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +b50ee40805bd280f | QuickTime Alternative 1.9.5 (Media Player Classic 6.4.9.1) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +ae3f2acd395b622e | QuickTime Player 6.5.1 / 7.0.3 / 7.5.5 (Build 249.13) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +7593af37134fd767 | RealPlayer 6.0.6.99 / 7 / 8 / 10.5 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +37392221756de927 | RealPlayer SP 12 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +f92e607f9de02413 | RealPlayer 14.0.6.666 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +6e9d40a4c63bb562 | Real Player Alternative 1.25 (Media Player Classic 6.4.8.2 / 6.4.9.0) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +c91d08dcfc39a506 | SM Player 0.6.9 r3447 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +e40cb5a291ad1a5b | Songbird 1.9.3 (Build 1959) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +4d8bdacf5265a04f | The KMPlayer 2.9.4.1434 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +4acae695c73a28c7 | VLC 0.3.0 / 0.4.6 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +9fda41b86ddcf1db | VLC 0.5.3 / 0.8.6i / 0.9.7 / 1.1.11 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +e6ee34ac9913c0a9 | VLC 0.6.2 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +cbeb786f0132005d | VLC 0.7.2 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +f674c3a77cfe39d0 | Winamp 2.95 / 5.1 / 5.621 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +90e5e8b21d7e7924 | Winamp 3.0d (Build 488) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +74d7f43c1561fc1e | Windows Media Player 12.0.7601.17514 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) + +### Media Players (64-bit) + +AppID | Application Description | Date Added | Source +--- | --- | --- | --- +faef7def55a1d4b | VLC 2.2.6 | 19/12/2017 | DaveS + +### System Cleaners (32-bit) + +AppID | Application Description | Date Added | Source +--- | --- | --- | --- +ed7a5cc3cca8d52a | CCleaner 1.32.345 / 1.41.544 / 2.36.1233 / 3.10.1525 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +eb7e629258d326a1 | WindowWasher 6.6.1.18 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) + +### Usenet Newsreaders (32-bit) + +AppID | Application Description | Date Added | Source +--- | --- | --- | --- +ace8715529916d31 | 40tude Dialog 2.0.15.1 (Beta 38) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +cc76755e0f925ce6 | AllPicturez 1.2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +36f6bc3efe1d99e0 | Alt.Binz 0.25.0 (Build 27.09.2007) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +d53b52fb65bde78c | Android Newsgroup Downloader 6.2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c845f3a6022d647c | Another File 2.03 (Build 2/7/2004) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +780732558f827a42 | AutoPix 5.3.3 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +baea31eacd87186b | BinaryBoy 1.97 (Build 55) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +eab25958dbddbaa4 | Binary News Reaper 2 (Beta 0.14.7.448) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +bf483b423ebbd327 | Binary Vortex 5.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +36801066f71b73c5 | Binbot 2.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +13eb0e5d9a49eaef | Binjet 3.0.2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +8172865a9d5185cb | Binreader 1.0 (Beta 1) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +6224453d9701a612 | BinTube 3.7.1.0 (requires VLC 10.5!) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +cf6379a9a987366e | Digibin 1.31 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +43886ba3395acdcc | Easy Post 3.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +cfab0ec14b6f953 | Express NewsPictures 2.41 (Build 08.05.07.0) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +7526de4a8b5914d9 | Forte Agent 6.00 (Build 32.1186) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c02baf50d02056fc | FotoVac 1.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +3ed70ef3495535f7 | Gravity 3.0.4 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +86781fe8437db23e | Messenger Pro 2.66.6.3353 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +f920768fe275f7f4 | Grabit 1.5.3 Beta (Build 909) / 1.6.2 (Build 940) / 1.7.2 Beta 4 (Build 997) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +9f03ae476ad461fa | GroupsAloud 1.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +d0261ed6e16b200b | News File Grabber 4.6.0.4 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +8211531a7918b389 | Newsbin Pro 6.00 (Build 1019) (JL support) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +d1fc019238236806 | Newsgroup Commander Pro 9.05 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +186b5ccada1d986b | NewsGrabber 3.0.36 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +4d72cfa1d0a67418 | Newsgroup Image Collector | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +92f1d5db021cd876 | NewsLeecher 4.0 / 5.0 Beta 6 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +d7666c416cba240c | NewsMan Pro 3.0.5.2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +7b2b4f995b54387d | News Reactor 20100224.16 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +cb984e3bc7faf234 | NewsRover 17.0 (Rev.0) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +c98ab5ccf25dda79 | NewsShark 2.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +dba909a61476ccec | NewsWolf 1.41 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +2b164f512891ae37 | NewsWolf NSListGen | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +cb1d97aca3fb7e6b | Newz Crawler 1.9.0 (Build 4100) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +3be7b307dfccb58f | NiouzeFire 0.8.7.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +de76415e0060ce13 | Noworyta News Reader 2.9 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +cd40ead0b1eb15ab | NNTPGrab 0.6.2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +d5c02fc7afbb3fd4 | NNTPGrab 0.6.2 Server | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +a4def57ee99d77e9 | Nomad News 1.43 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +3f97341a65bac63a | Ozum 6.07 (Build 6070) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +bfe841f4d35c92b1 | QuadSucker/News 5.0 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +web-based | sabnzbd 0.6.8 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +d3c5cf21e86b28af | SeaMonkey 2.3.3 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +7a7c60efd66817a2 | Spotnet 1.7.4 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +eb3300e672136bc7 | Stream Reactor 1.0 Beta 9 (uses VLC!) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +3168cc975b354a01 | Slypheed 3.1.2 (Build 1120) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +776beb1fcfc6dfa5 | Thunderbird 1.0.6 (20050716) / 3.0.2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +3d877ec11607fe4 | Thunderbird 6.0.2 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +7192f2de78fd9e96 | TIFNY 5.0.3 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +9dacebaa9ac8ca4e | TLNews Newsreader 2.2.0 (Build 2430) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +7fd04185af357bd5 | UltraLeeacher 1.7.0.2969 / 1.8 Beta (Build 3490) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +aa11f575087b3bdc | Unzbin 2.6.8 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +pay only | Usenet Explorer 3.3 (pay) | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) +d7db75db9cdd7c5d | Xnews 5.04.25 | 2011-09-15 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-2.html) + +### Utilities (32-bit) + +AppID | Application Description | Date Added | Source +--- | --- | --- | --- +3dc02b55e44d6697 | 7-Zip 3.13 / 4.20 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +4975d6798a8bdf66 | 7-Zip 4.65 / 9.20 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +4b6925efc53a3c08 | BCWipe 5.02.2 Task Manager 3.02.3 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +23709f6439b9f03d | Hex Editor Neo 5.14 | 6/7/2013 | Chad Tilbury +e57cfc995bdc1d98 | Snagit 11 | 6/7/2013 | Chad Tilbury +337ed59af273c758 | Sticky Notes | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +337ed59af273c758 | Sticky Notes (Windows 10) | 7/6/2016 | [Ovie Carroll](https://cyberspeak.libsyn.com/) +290532160612e071 | WinRAR 2.90 / 3.60 / 4.01 | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +c9950c443027c765 | WinZip 9.0 SR-1 (6224) / 10.0 (6667) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +b74736c2bd8cc8a5 | WinZip 15.5 (9468) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) +bc0c37e84e063727 | Windows Command Processor - cmd.exe (32-bit) | 2011-09-08 | [4n6k Blog](https://www.4n6k.com/2011/09/jump-list-forensics-appids-part-1.html) diff --git a/docs/lnk.md b/docs/lnk.md index af0efe3b6..5942f3ed5 100644 --- a/docs/lnk.md +++ b/docs/lnk.md @@ -69,7 +69,7 @@ Windows Shell commands: ## External Links - [The Meaning of Linkfiles In Forensic Examinations](http://computerforensics.parsonage.co.uk/downloads/TheMeaningofLIFE.pdf), - by [Harry Parsonage](harry_parsonage.md), September 2008 + by Harry Parsonage, September 2008 - [MS-SHLLINK](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-shllink/16cb4ca1-9339-4d0c-a68d-bf1d6cc0f943) - [Windows Shortcut File (LNK) format](https://github.com/libyal/liblnk/blob/master/documentation/Windows%20Shortcut%20File%20(LNK)%20format.asciidoc), by the [liblnk project](liblnk.md) diff --git a/docs/scalpel.md b/docs/scalpel.md index 35ed3b0fa..c8f558ad1 100644 --- a/docs/scalpel.md +++ b/docs/scalpel.md @@ -1,28 +1,24 @@ --- tags: - - Linux - - Windows - - MacOS - - Tools - - Open Source Software - - Data Recovery + - Data Recovery + - Linux + - MacOS + - Open Source Software + - Tools + - Windows --- -**Scalpel** is an [open source](open_source.md) program for -[recovering deleted data](recovering_deleted_data.md) originally -based on [foremost](foremost.md), although significantly more -efficient. Originally developed by [Golden G. Richard -III](golden_g_richard_iii.md) and presented at the -[DFRWS](digital_forensic_research_workshop.md) conference in -2005, it allows an examiner to specify a number of headers and footers -to recover filetypes from a piece of media. Scalpel is maintained by -[Golden G. Richard III](golden_g_richard_iii.md) and [Lodovico -Marziale](lodovico_marziale.md). Currently, Scalpel is being -incorporated into the [The Sleuth Kit](the_sleuth_kit.md) and is now -hosted on GitHub. +**Scalpel** is an open source program for [recovering deleted data](recovering_deleted_data.md) +originally based on [foremost](foremost.md), although significantly more +efficient. Originally developed by [Golden G. Richard III](golden_g_richard_iii.md) +and presented at the [DFRWS](digital_forensic_research_workshop.md) conference +in 2005, it allows an examiner to specify a number of headers and footers to +recover filetypes from a piece of media. Scalpel is maintained by [Golden G. Richard III](golden_g_richard_iii.md) +and Lodovico Marziale. + +Currently, Scalpel is being incorporated into the [The Sleuth Kit](the_sleuth_kit.md) +and is now hosted on GitHub. ## External Links -- [Scalpel: A frugal, high-performance file - carver](http://dfrws.org/2005/proceedings/richard_scalpel.pdf) from - the Proceedings of the 2005 [Digital Forensic Research - Workshop](digital_forensic_research_workshop.md) +- [Scalpel: A frugal, high-performance file carver](http://dfrws.org/2005/proceedings/richard_scalpel.pdf) + from the Proceedings of the 2005 [Digital Forensic Research Workshop](digital_forensic_research_workshop.md) diff --git a/docs/simson_l._garfinkel.md b/docs/simson_l._garfinkel.md deleted file mode 100644 index e5bc0a79d..000000000 --- a/docs/simson_l._garfinkel.md +++ /dev/null @@ -1,56 +0,0 @@ ---- -tags: - - People ---- -**Simson L. Garfinkel** joined the [National Institute of Standards and -Technology](national_institute_of_standards_and_technology.md) -in Gaithersberg, Maryland, in January 2015 as Senior Advisor, -Information Access Division. His current research includes privacy and -data de-identification.Garfinkel was formerly an Associate Professor at -the Naval Postgraduate School in Monterey, California from 2006 to -January 2015. He lives in Arlington, VA - -Dr. Garfinkel has research interests in computer forensics, the emerging -field of usability and security, and in personal information management. -He is also interested in information policy and terrorism, and has -published in these areas since the late 1980s. - -In addition to his work as an academic, Garfinkel is a contributing -editor at Technology Review Magazine, where he writes a weekly blog on -emerging technology, and an editor-at-large at CSO Magazine, where he -writes the award-winning monthly column "Machine Shop." In the past -Garfinkel was a weekly contributor to The Boston Globe, The San Jose -Mercury News and The Christian Science Monitor He was a founding -contributor of Wired Magazine. Overall, Garfinkel's popular articles -have appeared in more than 70 publications around the world. - -Garfinkel is the author or co-author of fourteen books on computing. He -is perhaps best known for his book Database Nation: The Death of Privacy -in the 21st Century. Garfinkel's most successful book, Practical UNIX -and Internet Security (co-authored with Gene Spafford), has sold more -than 250,000 copies in more than a dozen languages since the first -edition was published in 1991. - -Garfinkel received three Bachelor of Science degrees from MIT in 1987, a -Master's of Science in Journalism from Columbia University in 1988, and -a Ph.D. in Computer Science from MIT in 2005. - -Garfinkel's home page is . His CV is located on -the Internet at . - -# Forensics - -**Simson L. Garfinkel** is the author of the following forensic tools: - -* [AFFLIB](aff.md) -* [Bulk Extractor](bulk_extractor.md) -* [fiwalk](fiwalk.md) -* [frag_find](frag_find.md) - -On the MediaWiki version of Forensics Wiki, Garfinkel was known as simsong. - -## See Also - -* [Simson Garfinkel's home page](http://simson.net/) -* [Simson Garfinkel on Wikipedia](https://en.wikipedia.org/wiki/Simson_Garfinkel) - diff --git a/docs/simson_l_garfinkel.md b/docs/simson_l_garfinkel.md index 6247fa3c7..860f8e795 100644 --- a/docs/simson_l_garfinkel.md +++ b/docs/simson_l_garfinkel.md @@ -7,8 +7,7 @@ Technology](national_institute_of_standards_and_technology.md) in Gaithersberg, Maryland, in January 2015 as Senior Advisor, Information Access Division. His current research includes privacy and data de-identification.Garfinkel was formerly an Associate Professor at -the [Naval Postgraduate School](naval_postgraduate_school.md) in -[Monterey, California](monterey,_california.md) from 2006 to +the Naval Postgraduate School in Monterey, California from 2006 to January 2015. He lives in Arlington, VA Dr. Garfinkel has research interests in computer forensics, the emerging @@ -36,8 +35,8 @@ Garfinkel received three Bachelor of Science degrees from MIT in 1987, a Master's of Science in Journalism from Columbia University in 1988, and a Ph.D. in Computer Science from MIT in 2005. -Garfinkel's home page is . His CV is located on -the Internet at . +Garfinkel's home page is . His CV is located on +the Internet at . # Forensics diff --git a/docs/tools_memory_imaging.md b/docs/tools_memory_imaging.md index fd59cd7cd..7479eae73 100644 --- a/docs/tools_memory_imaging.md +++ b/docs/tools_memory_imaging.md @@ -1,7 +1,7 @@ --- tags: - - Tools - Memory Imaging + - Tools --- ## Memory Imaging Tools @@ -12,8 +12,6 @@ Publicly available, supports all Windows OS; windd and other formats. CaptureGUARD Gateway performs DRAM acquisition even on locked computers -Inquire at . - [WindowsSCOPE](http://www.windowsscope.com) CaptureGUARD ExpressCard (commercial) - laptop applications @@ -21,17 +19,9 @@ Publicly available, supports all Windows OS; windd and other formats. CaptureGUARD Gateway performs DRAM acquisition even on locked computers -Inquire at . - - - -Tribble PCI Card (research project) - - -Forensic RAM Extraction Device (FRED) by BBN -Not publicly available. +[Tribble PCI Card](https://digital-evidence.org/papers/tribble-preprint.pdf) (research project) ### [Windows](windows.md) Software @@ -52,7 +42,6 @@ tools. - Designed specifically for computer forensics. Fully portable, runs off a flash drive, produces uncompressed raw binary output of the computer’s volatile memory. Includes kernel-mode drivers for all Windows OS’es @@ -61,19 +50,19 @@ are included. - - +[Belkasoft Live RAM Capturer](https://belkasoft.com/ram-capturer) -WindowsSCOPE Pro and Ultimate, available at +[WindowsSCOPE Pro and Ultimate](http://www.windowsscope.com) + Can capture, analyze, graph in depth physical and virtual memory codes and structures Proprietary and standard formats (windd), snapshot repository, snapshot comparison -All Windows OSs (Xp, Vista, 7), 32 and 64 bit supported +All Windows OSs (Xp, Vista, 7), 32-bit and 64-bit supported Phantom Probe USB based fetch @@ -83,18 +72,13 @@ acquisition CaptureGUARD Gateway for hardware-assisted DRAM acquisition of locked computers -launched in 2011 - -WindowsSCOPE Live -available at and Android market +[WindowsSCOPE Live](http://www.windowsscope.com) allows live memory analysis of Windows computers from Android phones and tablets -launched in 2011International Organisations - winen.exe (Guidance Software - included with Encase 6.11 and higher) @@ -117,7 +101,7 @@ from other tools. Moonsols: [DumpIt](https://www.moonsols.com/wp-content/plugins/download-monitor/download.php?id=7) This utility is used to generate a physical memory dump of Windows -machines. It works with both x86 (32-bits) and x64 (64-bits) machines. +machines. It works with both x86 (32-bit) and x64 (64-bit) machines. The raw memory dump is generated in the current directory, only a confirmation question is prompted before starting. @@ -126,17 +110,16 @@ Perfect to deploy the executable on USB keys, for quick incident responses needs. -[FTK Imager](ftk_imager.md): FTK Imager - +[FTK Imager](ftk_imager.md) -FTK Imager can acquire live memory and paging file on 32bit and 64bit +FTK Imager can acquire live memory and paging file on 32-bit and 64-bit systems. [OSForensics](https://www.osforensics.com/) -OSForensics can acquire live memory on 32bit and 64bit systems. A dump +OSForensics can acquire live memory on 32-bit and 64-bit systems. A dump of an individual process's memory space or physical memory dump can be done. Output can be a straight dump or a Microsoft crash dump file, for use with Micrsoft's WinDbg debugger. @@ -185,8 +168,7 @@ provides access only to a restricted range of addresses, rather than the full physical memory of a system. On other systems it may not be available at all. Throughout the 2.6 series of the Linux kernel, the trend was to reduce direct access to memory via pseudo-device files. -See, for example, the message accompanying this patch: -. +See, for example, the message accompanying this [patch](https://lwn.net/Articles/267427/). [Second Look: Linux Memory Forensics](https://secondlookforensics.com/) This commercial memory forensics product ships with a modified version diff --git a/docs/training_courses_and_providers.md b/docs/training_courses_and_providers.md index d59a25804..7c328cacd 100644 --- a/docs/training_courses_and_providers.md +++ b/docs/training_courses_and_providers.md @@ -6,9 +6,9 @@ tags: This is the list of Training Providers, who offer training courses of interest to practitioners and researchers in the field of Digital Forensics. Conferences which may include training are located on the -[Upcoming_events](upcoming_events.md) page. +[upcoming events](upcoming_events.md) page. -PLEASE READ BEFORE YOU EDIT THE LIST BELOW +**PLEASE READ BEFORE YOU EDIT THE LIST BELOW** Some training providers offer on-going training courses that are available in an on-line "any time" format. Others have regularly scheduled training that is the same time each month. Others have @@ -23,176 +23,82 @@ Commercial Training is training offered by commercial companies which may or may not be oriented to a specific tool/tool suite, but is offered by a company other than a tool vendor. -Some training opportunities may be limited to Law -Enforcement Only or to a specific audience. Such restrictions should -be noted when known. +*Some training opportunities may be limited to **Law +Enforcement Only** or to a specific audience. Such restrictions should +be noted when known.* ## On-going / Continuous Training - ----- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Title

Date/Location

Website

DISTANCE LEARNING

Basic Computer Examiner Course - Computer Forensic Training -Online

Distance Learning Format

http://www.cftco.com

SANS On-Demand Training

Distance Learning Format

http://www.sans.org/ondemand/?portal=69456f95660ade45be29c00b0c14aea1

Champlain College - CCE Course

Online / Distance Learning Format

http://online.champlain.edu/computer-forensics-digital-investigation/CFDI_440

Cybrary - Free and Open Source Learning for Cyber Security, IT -and more

Online / Distance Learning Format

https://www.cybrary.it/catalog/

National Center for Media Forensics

Distance and Concentrated Audio/Video/Image Forensics

http://cam.ucdenver.edu/ncmf

University College Dublin - MSc Digital Investigation & -Forensic Computing (for computer science graduates)

Online / Distance Learning Format with annual exams in -Ireland

http://www.ucd.ie/cci/education/prospective_students/msc_difc.html

University College Dublin - Forensic Computing and Cybercrime -Investigation programme (law enforcement only)

Online / Distance Learning Format with annual exams in USA, -Ireland or Netherlands

http://www.ucd.ie/cci/education/prospective_students/fcci_programmes.html

RECURRING TRAINING

Evidence Recovery for Windows 7® operating system;

First full week every month
-Brunswick, GA

http://www.internetcrimes.net

Evidence Recovery for Windows 8®

Second full week every month
-Brunswick, GA

http://www.internetcrimes.net

Evidence Recovery for Windows Server® 2008 and 2012

Third full week every month
-Brunswick, GA

http://www.internetcrimes.net

+Title | Date/Location | Website +--- | --- | --- +DISTANCE LEARNING | | +Basic Computer Examiner Course - Computer Forensic Training Online | Distance Learning Format | http://www.cftco.com +SANS On-Demand Training | Distance Learning Format | http://www.sans.org/ondemand/?portal=69456f95660ade45be29c00b0c14aea1 +Cybrary - Free and Open Source Learning for Cyber Security, IT and more | Online / Distance Learning Format | https://www.cybrary.it/catalog/ +National Center for Media Forensics | Distance and Concentrated Audio/Video/Image Forensics | http://cam.ucdenver.edu/ncmf +University College Dublin - MSc Digital Investigation & Forensic Computing (for computer science graduates) | Online / Distance Learning Format with annual exams in Ireland | http://www.ucd.ie/cci/education/prospective_students/msc_difc.html +University College Dublin - Forensic Computing and Cybercrime Investigation programme (law enforcement only) | Online / Distance Learning Format with annual exams in USA, Ireland or Netherlands | http://www.ucd.ie/cci/education/prospective_students/fcci_programmes.html +RECURRING TRAINING | | +Evidence Recovery for Windows 7® operating system | First full week every month, Brunswick, GA | http://www.internetcrimes.net +Evidence Recovery for Windows 8® | Second full week every month, Brunswick, GA | http://www.internetcrimes.net +Evidence Recovery for Windows Server® 2008 and 2012 | Third full week every month, Brunswick, GA | http://www.internetcrimes.net ## Non-Commercial Training -| Title | Website | Limitation | -|-------------------------------------------------------|---------------------------------------------------------------------------------------|------------------------------------------------------------| -| Defense Cyber Investigations Training Academy (DCITA) | | Limited To Certain Roles within US Government Agencies | -| Federal Law Enforcement Training Center | | Limited To Law Enforcement | -| IACIS | | Limited To Law Enforcement and Affiliate Members of IACIS | -| SEARCH | | Limited To Law Enforcement | -| National White Collar Crime Center | | Limited To Law Enforcement | -| | | | +Title | Website | Limitation +--- | --- | --- +Defense Cyber Investigations Training Academy (DCITA) | https://www.dc3.mil/Missions/Cyber-Training/DC3-Cyber-Training-Academy-CTA/ | Limited To Certain Roles within US Government Agencies | +Federal Law Enforcement Training Center | https://www.fletc.gov/seized-computer-evidence-recovery-specialist | Limited To Law Enforcement +IACIS | https://www.iacis.com/ | Limited To Law Enforcement and Affiliate Members of IACIS +SEARCH | https://www.search.org/resources/cybercrime-investigative-resources/ | Limited To Law Enforcement +National White Collar Crime Center | https://www.nw3c.org/ | Limited To Law Enforcement ## Tool Vendor Training -| Title | Website | Limitation | -|--------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------|------------| -| AccessData (Forensic Tool Kit FTK) | | | -| Amped Software (Image & Video forensics - FIVE; Authenticate) | | | -| ASR Data (SMART) | | | -| Cellebrite (UFED) | | | -| CPR Tools (Data Recovery) | | | -| Digital Intelligence (FRED Forensics Platform) | | | -| e-fense, Inc. (Helix3 Pro) | | | -| ElcomSoft Co.Ltd. (desktop, mobile and cloud forensics) | | | -| OpenText (Guidance Software) (EnCase) | | | -| Micro Systemation (XRY) | | | -| Nuix (eDiscovery) | | | -| MailXaminer (Email Forensics Tool) | | | -| Paraben (Paraben Suite) | | | -| Software Analysis & Forensic Engineering (CodeSuite) | | | -| Sumuri, LLC. (Recon for MAC OS X) | | | -| Volatility Labs (Volatility Framework) | | | -| X-Ways Forensics (X-Ways Forensics) | | | -| | | | +Title | Website | Limitation +--- | --- | --- +AccessData (Forensic Tool Kit FTK) | | +Amped Software (Image & Video forensics - FIVE; Authenticate) | | +ASR Data (SMART) | | +Cellebrite (UFED) | | +CPR Tools (Data Recovery) | | +Digital Intelligence (FRED Forensics Platform) | | +e-fense, Inc. (Helix3 Pro) | | +ElcomSoft Co.Ltd. (desktop, mobile and cloud forensics) | | +OpenText (Guidance Software) (EnCase) | | +Micro Systemation (XRY) | | +Nuix (eDiscovery) | | +MailXaminer (Email Forensics Tool) | | +Paraben (Paraben Suite) | | +Software Analysis & Forensic Engineering (CodeSuite) | | +Sumuri, LLC. (Recon for MAC OS X) | | +Volatility Labs (Volatility Framework) | | +X-Ways Forensics (X-Ways Forensics) | | ## Commercial Training (Non-Tool Vendor) -| Title | Website | Limitation | -|----------------------------------------------------------------------------------------------|--------------------------------------------------------------------------|------------| -| BerlaCorp Vehicle System Forensics Training Program | | | -| Computer Forensic Training Center Online (CFTCO) | | | -| CCE Bootcamp | | | -| Cyber Security Academy | | | -| Dera Forensics Group | | | -| e-fense Training | | | -| eForensics Magazine | | | -| Elvidence (Computer Forensics & Decryption - Law Enforcement Only) | | | -| High Tech Crime Institute | | | -| Infosec Institute | | | -| Intense School (a subsidiary of Infosec Institute) | | | -| MD5 Group (Computer Forensics and E-Discovery courses)(Dallas, TX) | | | -| Mile 2 (Security and Forensics Certification Training) | | | -| Mobile Forensics, Inc | | | -| NetSecurity | | | -| NTI (an Armor Forensics Company) APPEARS DEFUNCT | | | -| Security University | | | -| Sumuri, LLC - Mac, Digital Forensics, Encryption, Mobile Forensics, Recon, Passware, Paladin | | | -| SysAdmin, Audit, Network, Security Institute (SANS) | | | -| SysTools, INC. (Digital Forensics Training) | | | -| Teel Technologies Canada/Europe Mobile/Comp/Video Forensics Training | | | -| Teel Technologies Mobile Device Forensics Training | | | -| Zeidman Consulting (MCLE) | | | -| | | | +Title | Website | Limitation +--- | --- | --- +BerlaCorp Vehicle System Forensics Training Program | | +Computer Forensic Training Center Online (CFTCO) | | +CCE Bootcamp | | +Cyber Security Academy | | +Dera Forensics Group | | +e-fense Training | | +eForensics Magazine | | +Elvidence (Computer Forensics & Decryption - Law Enforcement Only) | | +High Tech Crime Institute | | +Infosec Institute | | +Intense School (a subsidiary of Infosec Institute) | | +MD5 Group (Computer Forensics and E-Discovery courses)(Dallas, TX) | | +Mile 2 (Security and Forensics Certification Training) | | +Mobile Forensics, Inc | | +NetSecurity | | +NTI (an Armor Forensics Company) APPEARS DEFUNCT | | +Security University | | +Sumuri, LLC - Mac, Digital Forensics, Encryption, Mobile Forensics, Recon, Passware, Paladin | | +SysAdmin, Audit, Network, Security Institute (SANS) | | +SysTools, INC. (Digital Forensics Training) | | +Teel Technologies Canada/Europe Mobile/Comp/Video Forensics Training | | +Teel Technologies Mobile Device Forensics Training | | +Zeidman Consulting (MCLE) | | diff --git a/docs/windows_8.md b/docs/windows_8.md index 06ba62c58..e17e7b103 100644 --- a/docs/windows_8.md +++ b/docs/windows_8.md @@ -58,9 +58,6 @@ A common location for Amcache.hve is: ## External Links - [Features new to Windows 8](https://en.wikipedia.org/wiki/Features_new_to_Windows_8), Wikipedia -- [Windows 8 Forensics - part 1](http://computerforensics.champlain.edu/blog/windows-8-forensics) -- [Windows 8 Forensics - part 2](http://computerforensics.champlain.edu/blog/windows-8-forensics-part-2) -- [Windows 8 Forensics - part 3](http://computerforensics.champlain.edu/blog/windows-8-forensics-part-3) - [Windows 8 Registry Forensics](https://www.dataforensics.org/windows-8-file-history-forensics/) - [Windows 8 Forensic Guide](http://propellerheadforensics.files.wordpress.com/2012/05/thomson_windows-8-forensic-guide2.pdf), by Amanda C. F. Thomson, 2012 diff --git a/docs/windows_application_compatibility.md b/docs/windows_application_compatibility.md index b5a2621c9..08579a902 100644 --- a/docs/windows_application_compatibility.md +++ b/docs/windows_application_compatibility.md @@ -33,17 +33,17 @@ In Windows 2003 and later: * [Application Compatibility Database](https://learn.microsoft.com/en-us/windows/win32/devnotes/application-compatibility-database), by [Microsoft](microsoft.md) * [Secrets of the Application Compatilibity Database (SDB) – Part 1](http://www.alex-ionescu.com/?p=39), - by [Alex Ionescu](alex_ionescu.md), May 20, 2007 + by Alex Ionescu, May 20, 2007 * [Secrets of the Application Compatilibity Database (SDB) – Part 2](http://www.alex-ionescu.com/?p=40), - by [Alex Ionescu](alex_ionescu.md), May 21, 2007 + by Alex Ionescu, May 21, 2007 * [Secrets of the Application Compatilibity Database (SDB) – Part 3](http://www.alex-ionescu.com/?p=41), - by [Alex Ionescu](alex_ionescu.md), May 26, 2007 + by Alex Ionescu, May 26, 2007 * [Windows AppCompat Research Notes - Part 1](http://recxltd.blogspot.com/2012/04/windows-appcompat-research-notes-part-1.html), by Ollie, 28 April 2012 * [Windows AppCompat Research Notes - Part 2](http://recxltd.blogspot.com/2012/05/windows-appcompat-research-notes-part-2.html), by Ollie, 4 May 2012 * [Leveraging the Application Compatibility Cache in Forensic Investigations](https://dl.mandiant.com/EE/library/Whitepaper_ShimCacheParser.pdf), - by [Andrew Davis](andrew_davis.md), May 4, 2012 + by Andrew Davis, May 4, 2012 * [Revealing Program Compatibility Assistant HKCU AppCompatFlags Registry Keys](http://journeyintoir.blogspot.ch/2013/12/revealing-program-compatibility.html), by Corey Harrell, December 17, 2013 * [Persist It Using and Abusing Microsoft’s Fix It Patches](https://www.blackhat.com/docs/asia-14/materials/Erickson/WP-Asia-14-Erickson-Persist-It-Using-And-Abusing-Microsofts-Fix-It-Patches.pdf), diff --git a/docs/windows_memory_analysis.md b/docs/windows_memory_analysis.md index 1c1e458ee..ed7d22572 100644 --- a/docs/windows_memory_analysis.md +++ b/docs/windows_memory_analysis.md @@ -30,9 +30,8 @@ images to practice with. -* The [CFReDS Project](cfreds_project.md) has created some - [downloadable memory - images](https://cfreds.nist.gov/mem/memory-images.rar). +* The CFReDS Project has created some + [downloadable memory images](https://cfreds.nist.gov/mem/memory-images.rar). @@ -46,13 +45,12 @@ images to practice with. * [Memory analysis](memory_analysis.md) * [Tools:Memory Imaging](tools_memory_imaging.md) * [Pagefile.sys](pagefile.sys.md) -* [Memory Limits for Windows - Releases](https://learn.microsoft.com/en-us/windows/win32/memory/memory-limits-for-windows-releases), +* [Memory Limits for Windows Releases](https://learn.microsoft.com/en-us/windows/win32/memory/memory-limits-for-windows-releases), Microsoft MSDN. ## History -During the 1990s, it became a [best practice](best_practice.md) +During the 1990s, it became a best practice to capture a [memory image](tools_memory_imaging.md) during [incident response](incident_response.md). At the time, the only way to analyze such memory images was using @@ -63,15 +61,15 @@ associate what data came from what program, let alone what user. In the summer 2005 the [Digital Forensic Research Workshop](digital_forensic_research_workshop.md) published a *Memory Analysis Challenge*. They distributed two memory images and asked researchers to answer a number of questions about a security incident. -The challenge produced two seminal works. The first, by [Chris Betz](chris_betz.md), -introduced a tool called [memparser](memparser.md). The second, by [George Garner](george_garner.md) -and [Robert-Jan Mora](robert-jan_mora.md) produced KnTList. +The challenge produced two seminal works. The first, by Chris Betz, +introduced a tool called memparser. The second, by [George Garner](george_garner.md) +and Robert-Jan Mora produced KnTList. At the [Blackhat Federal](blackhat_(conference).md) conference in March 2007, [AAron Walters](aaron_walters.md) and [Nick Petroni](nick_petroni.md) released a suite called Volatools. Although it only worked on Windows XP Service Pack 2 images, it was able to produce a number of useful data. Volatools was updated -and re-released as [Volatility](docs/windows_memory_analysis.md) in August +and re-released as Volatility in August 2007, and is now maintained and distributed by [Volatile Systems](https://www.volatilesystems.com/). ## Bibliography @@ -190,15 +188,15 @@ and re-released as [Volatility](docs/windows_memory_analysis.md) in August ### WinDBG * [Getting Started with WinDBG - Part 1](http://blog.opensecurityresearch.com/2013/12/getting-started-with-windbg-part-1.html), - by [Brad Antoniewicz](brad_antoniewicz.md), December 17, 2013 + by Brad Antoniewicz, December 17, 2013 * [Getting Started with WinDBG - Part 2](http://blog.opensecurityresearch.com/2013/12/getting-started-with-windbg-part-2.html), - by [Brad Antoniewicz](brad_antoniewicz.md), December 24, 2013 + by Brad Antoniewicz, December 24, 2013 * [Getting Started with WinDBG - Part 3](http://blog.opensecurityresearch.com/2013/12/getting-started-with-windbg-part-3.html), - by [Brad Antoniewicz](brad_antoniewicz.md), December 31, 2013 + by Brad Antoniewicz, December 31, 2013 * [Developing WinDbg ExtEngCpp Extension in C++ – Introduction – Part 1](http://www.msuiche.net/2014/01/12/extengcpp-part-1/), - by [Matt Suiche](matt_suiche.md), January 12, 2014 + by Matt Suiche, January 12, 2014 * [Developing WinDbg ExtEngCpp Extension in C++ – COM Interface – Part 2](http://www.msuiche.net/2014/01/15/developing-windbg-extengcpp-extension-in-c-com-interface/), - by [Matt Suiche](matt_suiche.md), January 15, 2014 + by Matt Suiche, January 15, 2014 * [Developing WinDbg ExtEngCpp Extension in C++ – Memory & Debugger Markup Language (DML) – Part 3](http://www.msuiche.net/2014/01/20/developing-windbg-extengcpp-extension-in-c-memory-debugger-markup-language-dml-part-3/), - by [Matt Suiche](matt_suiche.md), January 20, 2014 + by Matt Suiche, January 20, 2014 * [SwishDbgExt - Incident Response & Digital Forensics Debugging Extension](https://github.com/comaeio/SwishDbgExt) diff --git a/docs/windows_shadow_volumes.md b/docs/windows_shadow_volumes.md index 46016cddb..f82ea6792 100644 --- a/docs/windows_shadow_volumes.md +++ b/docs/windows_shadow_volumes.md @@ -149,7 +149,7 @@ information. * [VSC Toolset: A GUI Tool for Shadow Copies](https://dfstream.blogspot.com/2012/03/vsc-toolset-gui-tool-for-shadow-copies.html), by Jason Hale, March 2012 * [Examining Volume Shadow Copies – The Easy Way!](http://encase-forensic-blog.guidancesoftware.com/2012/06/examining-volume-shadow-copies-easy-way.html), - by [Simon Key](simon_key.md), June 2012 + by Simon Key, June 2012 * [Getting Ready for a Shadow Volume Exam](http://justaskweg.com/?p=351), by Jimmy Weg, June 2012 * [Mounting Shadow Volumes](http://justaskweg.com/?p=466), @@ -166,7 +166,7 @@ information. ### Shadow Volumes in depth * [Reliably recovering evidential data from Volume Shadow Copies in Windows Vista and Windows 7](http://www.qccis.com/docs/publications/WP-VSS.pdf), - by [James Crabtree](james_crabtree.md) and [Gary Evans](gary_evans.md), 2010 + by James Crabtree and Gary Evans, 2010 * [Into The Shadows](https://forensic4cast.com/2010/04/into-the-shadows/) and [Presentation](https://forensic4cast.com/2010/04/presentation-into-the-shadows/), by [Lee Whitfield](lee_whitfield.md), April 2010 @@ -180,7 +180,7 @@ information. * [Lurking in the Shadows – Hack3rcon II](http://lanmaster53.com/talks/#hack3rcon2) * [Volume Shadow Copies - The Lost Post](http://pauldotcom.com/2012/10/volume-shadow-copies---the-los.html), - by [Mark Baggett](mark_baggett.md), October 2012 + by Mark Baggett, October 2012 ## Tools