digital-forensics-labs/digital-forensics-lab
1
0
Fork 0
mirror of https://github.com/frankwxu/digital-forensics-lab.git synced 2026-04-10 12:13:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

add Jumplist csv

Browse Source
This commit is contained in:
Frank Xu
2022-04-19 11:00:28 -04:00
parent ed4496484a
commit 3b938f49dc
1 changed files with 32 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
NIST_Data_Leakage_Case/NIST_Answers/lab_generated_file/JumpList/20220419105824_AutomaticDestinations.csv Normal file
View File

@@ -0,0 +1,32 @@
SourceFile,SourceCreated,SourceModified,SourceAccessed,AppId,AppIdDescription,DestListVersion,LastUsedEntryNumber,MRU,EntryNumber,CreationTime,LastModified,Hostname,MacAddress,Path,InteractionCount,PinStatus,FileBirthDroid,FileDroid,VolumeBirthDroid,VolumeDroid,TargetCreated,TargetModified,TargetAccessed,FileSize,RelativePath,WorkingDirectory,FileAttributes,HeaderFlags,DriveType,VolumeSerialNumber,VolumeLabel,LocalPath,CommonPath,TargetIDAbsolutePath,TargetMFTEntryNumber,TargetMFTSequenceNumber,MachineID,MachineMACAddress,TrackerCreatedOn,ExtraBlocksPresent,Arguments,Notes
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,0,C,2015-03-25 10:18:51,2015-03-25 15:28:47,informant-pc,00:0c:29:ff:24:29,C:\Users\informant\Desktop,0,False,559dd00e-d2d8-11e4-a640-000c29ff2429,559dd00e-d2d8-11e4-a640-000c29ff2429,2e651ec6-993a-4e70-9087-52185bc0a486,2e651ec6-993a-4e70-9087-52185bc0a486,2015-03-22 14:34:41,2015-03-24 18:48:40,2015-03-24 18:48:40,4096,,,"FileAttributeReadonly, FileAttributeDirectory","HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),CA0C7A48,,C:\Users\informant\Desktop,,C:\Users\informant\Desktop\,,,informant-pc,00:0c:29:ff:24:29,2015-03-25 10:18:51,"PropertyStoreDataBlock, TrackerDataBaseBlock",,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,1,11,,2015-03-24 21:01:10,,,D:\,0,False,,,,,2015-03-24 20:53:17,2015-03-24 20:58:06,2015-03-24 20:58:06,668,,,"FileAttributeReadonly, FileAttributeDirectory","HasTargetIdList, HasLinkInfo, IsUnicode","Optical disc (CD-ROM, DVD, BD)",AE88F176,IAMAN CD,D:\,,My Computer\D:,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,2,10,,2015-03-24 20:44:18,,,D:\de\winter_whether_advisory.zip\ppt\slideMasters,0,False,,,,,,,,0,,,0,"HasTargetIdList, IsUnicode",(None),,,,,My Computer\D:\de\winter_whether_advisory.zip\ppt\slideMasters,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,3,F,,2015-03-24 20:44:16,,,D:\de\winter_whether_advisory.zip\ppt\slides,0,False,,,,,,,,0,,,0,"HasTargetIdList, IsUnicode",(None),,,,,My Computer\D:\de\winter_whether_advisory.zip\ppt\slides,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,4,E,,2015-03-24 20:44:14,,,D:\de\winter_whether_advisory.zip\ppt,0,False,,,,,,,,0,,,0,"HasTargetIdList, IsUnicode",(None),,,,,My Computer\D:\de\winter_whether_advisory.zip\ppt,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,5,D,,2015-03-24 20:44:13,,,D:\de\winter_whether_advisory.zip,0,False,,,,,2014-12-16 16:10:26,2014-12-16 16:10:26,2015-03-24 20:40:55,16381123,,,FileAttributeReadonly,"HasTargetIdList, HasLinkInfo, IsUnicode","Optical disc (CD-ROM, DVD, BD)",E297F1A5,IAMAN CD,D:\de\winter_whether_advisory.zip,,My Computer\D:\de\winter_whether_advisory.zip,0xF,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,6,B,,2015-03-24 14:01:29,,,E:\Secret Project Data\design\winter_whether_advisory.zip\ppt,0,False,,,,,,,,0,,,0,"HasTargetIdList, IsUnicode",(None),,,,,My Computer\E:\Secret Project Data\design\winter_whether_advisory.zip\ppt,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,7,A,,2015-03-24 14:01:23,,,E:\Secret Project Data\design\winter_whether_advisory.zip,0,False,,,,,2015-03-24 13:59:37,2014-12-16 16:10:26,2015-03-24 04:00:00,16381123,,,FileAttributeArchive,"HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),9E6A5B82,IAMAN $_@,E:\Secret Project Data\design\winter_whether_advisory.zip,,My Computer\E:\Secret Project Data\design\winter_whether_advisory.zip,0x402100,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,8,9,2015-03-22 14:49:08,2015-03-23 20:27:33,,00:0c:29:cc:00:8c,V:\Secret Project Data\final,0,False,97f0d7af-d0a2-11e4-9804-000c29cc008c,97f0d7af-d0a2-11e4-9804-000c29cc008c,df81a59c-ffc2-47b4-a00c-576d63471689,df81a59c-ffc2-47b4-a00c-576d63471689,2015-03-22 14:52:21,2015-03-22 14:52:21,2015-03-22 14:52:21,0,,,FileAttributeDirectory,"HasTargetIdList, HasLinkInfo, IsUnicode",(None),,,,Secret Project Data\final,My Computer\V:\Secret Project Data\final,0xA828,0x1,,00:0c:29:cc:00:8c,2015-03-22 14:49:08,"PropertyStoreDataBlock, TrackerDataBaseBlock",,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,9,8,2015-03-22 14:49:08,2015-03-23 20:26:53,,00:0c:29:cc:00:8c,\\10.11.11.128\secured_drive\Secret Project Data\pricing decision,0,False,97f0d791-d0a2-11e4-9804-000c29cc008c,97f0d791-d0a2-11e4-9804-000c29cc008c,df81a59c-ffc2-47b4-a00c-576d63471689,df81a59c-ffc2-47b4-a00c-576d63471689,2015-03-22 14:52:21,2015-03-22 14:52:21,2015-03-22 14:52:21,4096,,,FileAttributeDirectory,"HasLinkInfo, IsUnicode, HasExpString",(None),,,,Secret Project Data\pricing decision,\\10.11.11.128\SECURED_DRIVE\Secret Project Data\pricing decision,,,,00:0c:29:cc:00:8c,2015-03-22 14:49:08,"PropertyStoreDataBlock, VistaAndAboveIdListDataBlock, EnvironmentVariableDataBlock, TrackerDataBaseBlock",,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,10,7,,2015-03-23 18:38:23,,,E:\RM#1\Secret Project Data\design,0,False,,,,,2015-02-15 21:52:08,2015-02-15 21:51:38,2015-02-15 21:52:08,0,,,FileAttributeDirectory,"HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),5C754D3E,Authorized USB,E:\RM#1\Secret Project Data\design,,My Computer\E:\RM#1\Secret Project Data\design,0xB0000,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,11,5,,2015-03-23 18:38:21,,,E:\,0,False,,,,,1980-01-01 04:00:00,1980-01-01 04:00:00,1980-01-01 04:00:00,0,,,FileAttributeDirectory,"HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),5C754D3E,Authorized USB,E:\,,My Computer\E:,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,12,6,,2015-03-23 18:37:54,,,E:\RM#1\Secret Project Data\proposal,0,False,,,,,2015-02-15 21:52:12,2015-02-15 21:51:38,2015-02-15 21:52:12,0,,,FileAttributeDirectory,"HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),5C754D3E,Authorized USB,E:\RM#1\Secret Project Data\proposal,,My Computer\E:\RM#1\Secret Project Data\proposal,0xB0060,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,13,4,2015-03-25 10:18:51,2015-03-22 14:35:02,informant-pc,00:0c:29:ff:24:29,::{031E4825-7B94-4DC3-B131-E946B44C8DD5}\Videos.library-ms ==> User Libraries\Videos.library-ms,0,False,559dd01f-d2d8-11e4-a640-000c29ff2429,559dd01f-d2d8-11e4-a640-000c29ff2429,2e651ec6-993a-4e70-9087-52185bc0a486,2e651ec6-993a-4e70-9087-52185bc0a486,2015-03-22 14:34:55,2015-03-22 14:34:59,2015-03-22 14:34:59,3538,,,"FileAttributeArchive, FileAttributeNotContentIndexed","HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),CA0C7A48,,C:\Users\informant\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms,,User Libraries\Videos,,,informant-pc,00:0c:29:ff:24:29,2015-03-25 10:18:51,"PropertyStoreDataBlock, TrackerDataBaseBlock",,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,14,3,2015-03-25 10:18:51,2015-03-22 14:35:02,informant-pc,00:0c:29:ff:24:29,::{031E4825-7B94-4DC3-B131-E946B44C8DD5}\Music.library-ms ==> User Libraries\Music.library-ms,0,False,559dd01e-d2d8-11e4-a640-000c29ff2429,559dd01e-d2d8-11e4-a640-000c29ff2429,2e651ec6-993a-4e70-9087-52185bc0a486,2e651ec6-993a-4e70-9087-52185bc0a486,2015-03-22 14:34:55,2015-03-22 14:34:59,2015-03-22 14:34:59,3524,,,"FileAttributeArchive, FileAttributeNotContentIndexed","HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),CA0C7A48,,C:\Users\informant\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms,,User Libraries\Music,,,informant-pc,00:0c:29:ff:24:29,2015-03-25 10:18:51,"PropertyStoreDataBlock, TrackerDataBaseBlock",,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,15,2,2015-03-25 10:18:51,2015-03-22 14:35:02,informant-pc,00:0c:29:ff:24:29,::{031E4825-7B94-4DC3-B131-E946B44C8DD5}\Pictures.library-ms ==> User Libraries\Pictures.library-ms,0,False,559dd01d-d2d8-11e4-a640-000c29ff2429,559dd01d-d2d8-11e4-a640-000c29ff2429,2e651ec6-993a-4e70-9087-52185bc0a486,2e651ec6-993a-4e70-9087-52185bc0a486,2015-03-22 14:34:55,2015-03-22 14:34:59,2015-03-22 14:34:59,3559,,,"FileAttributeArchive, FileAttributeNotContentIndexed","HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),CA0C7A48,,C:\Users\informant\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms,,User Libraries\Pictures,,,informant-pc,00:0c:29:ff:24:29,2015-03-25 10:18:51,"PropertyStoreDataBlock, TrackerDataBaseBlock",,
E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,1b4dd67f29cb1962,Windows Explorer Pinned and Recent.,1,17,16,1,2015-03-25 10:18:51,2015-03-22 14:35:02,informant-pc,00:0c:29:ff:24:29,::{031E4825-7B94-4DC3-B131-E946B44C8DD5}\Documents.library-ms ==> User Libraries\Documents.library-ms,0,False,559dd01c-d2d8-11e4-a640-000c29ff2429,559dd01c-d2d8-11e4-a640-000c29ff2429,2e651ec6-993a-4e70-9087-52185bc0a486,2e651ec6-993a-4e70-9087-52185bc0a486,2015-03-22 14:34:55,2015-03-22 14:34:59,2015-03-22 14:34:59,3567,,,"FileAttributeArchive, FileAttributeNotContentIndexed","HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),CA0C7A48,,C:\Users\informant\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms,,User Libraries\Documents,,,informant-pc,00:0c:29:ff:24:29,2015-03-25 10:18:51,"PropertyStoreDataBlock, TrackerDataBaseBlock",,
E:\download\202204\JLECmd\AutomaticDestinations\47bb2136fda3f1ed.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:29:08,2022-04-19 14:58:24,47bb2136fda3f1ed,Unknown AppId,1,2,0,2,2015-03-24 13:21:10,2015-03-25 15:29:08,informant-pc,00:0c:29:ff:24:29,C:\Users\informant\Desktop\Resignation_Letter_(Iaman_Informant).docx,0,False,a2f20551-d228-11e4-b630-000c29ff2429,a2f20551-d228-11e4-b630-000c29ff2429,2e651ec6-993a-4e70-9087-52185bc0a486,2e651ec6-993a-4e70-9087-52185bc0a486,2015-03-24 18:48:40,2015-03-24 18:48:41,2015-03-24 18:48:41,11302,,,FileAttributeArchive,"HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),CA0C7A48,,C:\Users\informant\Desktop\Resignation_Letter_(Iaman_Informant).docx,,Resignation_Letter_(Iaman_Informant).docx,0x58EE,0x7,informant-pc,00:0c:29:ff:24:29,2015-03-24 13:21:10,"PropertyStoreDataBlock, TrackerDataBaseBlock",,
E:\download\202204\JLECmd\AutomaticDestinations\47bb2136fda3f1ed.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:29:08,2022-04-19 14:58:24,47bb2136fda3f1ed,Unknown AppId,1,2,1,1,,2015-03-23 18:37:54,,,E:\RM#1\Secret Project Data\proposal\[secret_project]_proposal.docx,0,False,,,,,2015-02-15 21:52:20,2014-12-19 19:53:46,2015-02-15 21:52:20,6484502,,,FileAttributeArchive,"HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),5C754D3E,Authorized USB,E:\RM#1\Secret Project Data\proposal\[secret_project]_proposal.docx,,My Computer\E:\RM#1\Secret Project Data\proposal\[secret_project]_proposal.docx,0x20000A0,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\4cc9bcff1a772a63.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-23 20:27:33,2022-04-19 14:58:24,4cc9bcff1a772a63,Unknown AppId,1,2,0,2,2015-03-22 14:49:08,2015-03-23 20:27:33,,00:0c:29:cc:00:8c,V:\Secret Project Data\final\[secret_project]_final_meeting.pptx,0,False,97f0d7ae-d0a2-11e4-9804-000c29cc008c,97f0d7ae-d0a2-11e4-9804-000c29cc008c,df81a59c-ffc2-47b4-a00c-576d63471689,df81a59c-ffc2-47b4-a00c-576d63471689,2015-03-22 14:52:21,2015-01-30 16:49:20,2015-03-22 14:52:21,6844294,,,FileAttributeArchive,"HasTargetIdList, HasLinkInfo, IsUnicode",(None),,,,Secret Project Data\final\[secret_project]_final_meeting.pptx,My Computer\V:\Secret Project Data\final\[secret_project]_final_meeting.pptx,0xA829,0x1,,00:0c:29:cc:00:8c,2015-03-22 14:49:08,"PropertyStoreDataBlock, TrackerDataBaseBlock",,
E:\download\202204\JLECmd\AutomaticDestinations\4cc9bcff1a772a63.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-23 20:27:33,2022-04-19 14:58:24,4cc9bcff1a772a63,Unknown AppId,1,2,1,1,,2015-03-23 18:38:21,,,E:\RM#1\Secret Project Data\design\[secret_project]_design_concept.ppt,0,False,,,,,2015-02-15 21:52:08,2014-12-04 15:24:50,2015-02-15 21:52:08,1810432,,,FileAttributeArchive,"HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),5C754D3E,Authorized USB,E:\RM#1\Secret Project Data\design\[secret_project]_design_concept.ppt,,My Computer\E:\RM#1\Secret Project Data\design\[secret_project]_design_concept.ppt,0xB8000,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\69bacc0499d41c4.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-23 20:26:53,2022-04-19 14:58:24,69bacc0499d41c4,Unknown AppId,1,1,0,1,2015-03-22 14:49:08,2015-03-23 20:26:53,,00:0c:29:cc:00:8c,\\10.11.11.128\secured_drive\Secret Project Data\pricing decision\(secret_project)_pricing_decision.xlsx,0,False,97f0d78e-d0a2-11e4-9804-000c29cc008c,97f0d78e-d0a2-11e4-9804-000c29cc008c,df81a59c-ffc2-47b4-a00c-576d63471689,df81a59c-ffc2-47b4-a00c-576d63471689,2015-03-22 14:52:21,2015-01-29 20:35:14,2015-03-22 14:52:21,440517,,,FileAttributeArchive,"HasLinkInfo, IsUnicode, HasExpString",(None),,,,Secret Project Data\pricing decision\(secret_project)_pricing_decision.xlsx,\\10.11.11.128\SECURED_DRIVE\Secret Project Data\pricing decision\(secret_project)_pricing_decision.xlsx,,,,00:0c:29:cc:00:8c,2015-03-22 14:49:08,"PropertyStoreDataBlock, VistaAndAboveIdListDataBlock, EnvironmentVariableDataBlock, TrackerDataBaseBlock",,
E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:18:13,2022-04-19 14:58:24,7e4dca80246863e3,Control Panel - Settings,1,8,0,8,,2015-03-25 15:18:13,,,::{26EE0668-A00A-44D7-9371-BEB064C98683}\8\::{7B81BE6A-CE2B-4676-A29E-EB907A5126C5} ==> Control Panel\8\Programs and Features,0,False,,,,,,,,0,,,0,"HasTargetIdList, IsUnicode",(None),,,,,Control Panel\Programs\Programs and Features,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:18:13,2022-04-19 14:58:24,7e4dca80246863e3,Control Panel - Settings,1,8,1,7,,2015-03-24 14:16:25,,,::{26EE0668-A00A-44D7-9371-BEB064C98683}\2\::{025A5937-A6BE-4686-A844-36FE4BEC8B6D} ==> Control Panel\2\Power Options,0,False,,,,,,,,0,,,0,"HasTargetIdList, IsUnicode",(None),,,,,Control Panel\Hardware and Sound\Power Options,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:18:13,2022-04-19 14:58:24,7e4dca80246863e3,Control Panel - Settings,1,8,2,2,,2015-03-24 14:16:16,,,::{26EE0668-A00A-44D7-9371-BEB064C98683}\1\::{ED834ED6-4B5A-4BFE-8F11-A626DCB6A921} ==> Control Panel\1\Personalization Control Panel,0,False,,,,,,,,0,,,0,"HasTargetIdList, IsUnicode",(None),,,,,Control Panel\Appearance and Personalization\Personalization Control Panel,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:18:13,2022-04-19 14:58:24,7e4dca80246863e3,Control Panel - Settings,1,8,3,5,,2015-03-23 20:47:36,,,::{26EE0668-A00A-44D7-9371-BEB064C98683}\0\::{05D7B0F4-2121-4EFF-BF6B-ED3F69B894D9} ==> Control Panel\0\Taskbar (NotificationAreaIcons),0,False,,,,,,,,0,,,0,"HasTargetIdList, IsUnicode",(None),,,,,Control Panel\All Control Panel Items\Taskbar (NotificationAreaIcons),,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:18:13,2022-04-19 14:58:24,7e4dca80246863e3,Control Panel - Settings,1,8,4,6,,2015-03-22 15:51:28,,,::{26EE0668-A00A-44D7-9371-BEB064C98683}\9\::{60632754-C523-4B62-B45C-4172DA012619} ==> Control Panel\9\User Accounts,0,False,,,,,,,,0,,,0,"HasTargetIdList, IsUnicode",(None),,,,,Control Panel\User Accounts\User Accounts,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:18:13,2022-04-19 14:58:24,7e4dca80246863e3,Control Panel - Settings,1,8,5,4,,2015-03-22 15:45:51,,,::{26EE0668-A00A-44D7-9371-BEB064C98683}\5\::{BB06C0E4-D293-4F75-8A90-CB05B6477EEE} ==> Control Panel\5\System,0,False,,,,,,,,0,,,0,"HasTargetIdList, IsUnicode",(None),,,,,Control Panel\System and Security\System,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:18:13,2022-04-19 14:58:24,7e4dca80246863e3,Control Panel - Settings,1,8,6,3,,2015-03-22 15:24:28,,,::{26EE0668-A00A-44D7-9371-BEB064C98683}\1\::{C555438B-3C23-4769-A71F-B6D3D9B6053A}\Settings ==> Control Panel\1\Display\Settings,0,False,,,,,,,,0,,,0,"HasTargetIdList, IsUnicode",(None),,,,,Control Panel\Appearance and Personalization\Display\Screen Resolution,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:18:13,2022-04-19 14:58:24,7e4dca80246863e3,Control Panel - Settings,1,8,7,1,,2015-03-22 14:37:23,,,::{26EE0668-A00A-44D7-9371-BEB064C98683}\5\::{36EEF7DB-88AD-4E81-AD49-0E313F0C35F8} ==> Control Panel\5\Windows Update,0,False,,,,,,,,0,,,0,"HasTargetIdList, IsUnicode",(None),,,,,Control Panel\System and Security\Windows Update,,,,,,PropertyStoreDataBlock,,
E:\download\202204\JLECmd\AutomaticDestinations\e36bfc8972e5ab1d.automaticDestinations-ms,2022-04-19 14:57:15,2015-03-25 15:28:47,2022-04-19 14:58:24,e36bfc8972e5ab1d,XPS Viewer,1,1,0,1,2015-03-25 13:05:27,2015-03-25 15:28:47,informant-pc,00:0c:29:ff:24:29,C:\Users\informant\Desktop\Resignation_Letter_(Iaman_Informant).xps,0,False,9b365852-d2ef-11e4-b734-000c29ff2429,9b365852-d2ef-11e4-b734-000c29ff2429,2e651ec6-993a-4e70-9087-52185bc0a486,2e651ec6-993a-4e70-9087-52185bc0a486,2015-03-25 15:28:33,2015-03-25 15:28:34,2015-03-25 15:28:33,178139,,,FileAttributeArchive,"HasTargetIdList, HasLinkInfo, IsUnicode",Fixed storage media (Hard drive),CA0C7A48,,C:\Users\informant\Desktop\Resignation_Letter_(Iaman_Informant).xps,,Resignation_Letter_(Iaman_Informant).xps,0x11948,0xB,informant-pc,00:0c:29:ff:24:29,2015-03-25 13:05:27,"PropertyStoreDataBlock, TrackerDataBaseBlock",,
1 SourceFile SourceCreated SourceModified SourceAccessed AppId AppIdDescription DestListVersion LastUsedEntryNumber MRU EntryNumber CreationTime LastModified Hostname MacAddress Path InteractionCount PinStatus FileBirthDroid FileDroid VolumeBirthDroid VolumeDroid TargetCreated TargetModified TargetAccessed FileSize RelativePath WorkingDirectory FileAttributes HeaderFlags DriveType VolumeSerialNumber VolumeLabel LocalPath CommonPath TargetIDAbsolutePath TargetMFTEntryNumber TargetMFTSequenceNumber MachineID MachineMACAddress TrackerCreatedOn ExtraBlocksPresent Arguments Notes
2 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 0 C 2015-03-25 10:18:51 2015-03-25 15:28:47 informant-pc 00:0c:29:ff:24:29 C:\Users\informant\Desktop 0 False 559dd00e-d2d8-11e4-a640-000c29ff2429 559dd00e-d2d8-11e4-a640-000c29ff2429 2e651ec6-993a-4e70-9087-52185bc0a486 2e651ec6-993a-4e70-9087-52185bc0a486 2015-03-22 14:34:41 2015-03-24 18:48:40 2015-03-24 18:48:40 4096 FileAttributeReadonly, FileAttributeDirectory HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) CA0C7A48 C:\Users\informant\Desktop C:\Users\informant\Desktop\ informant-pc 00:0c:29:ff:24:29 2015-03-25 10:18:51 PropertyStoreDataBlock, TrackerDataBaseBlock
3 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 1 11 2015-03-24 21:01:10 D:\ 0 False 2015-03-24 20:53:17 2015-03-24 20:58:06 2015-03-24 20:58:06 668 FileAttributeReadonly, FileAttributeDirectory HasTargetIdList, HasLinkInfo, IsUnicode Optical disc (CD-ROM, DVD, BD) AE88F176 IAMAN CD D:\ My Computer\D: PropertyStoreDataBlock
4 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 2 10 2015-03-24 20:44:18 D:\de\winter_whether_advisory.zip\ppt\slideMasters 0 False 0 0 HasTargetIdList, IsUnicode (None) My Computer\D:\de\winter_whether_advisory.zip\ppt\slideMasters PropertyStoreDataBlock
5 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 3 F 2015-03-24 20:44:16 D:\de\winter_whether_advisory.zip\ppt\slides 0 False 0 0 HasTargetIdList, IsUnicode (None) My Computer\D:\de\winter_whether_advisory.zip\ppt\slides PropertyStoreDataBlock
6 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 4 E 2015-03-24 20:44:14 D:\de\winter_whether_advisory.zip\ppt 0 False 0 0 HasTargetIdList, IsUnicode (None) My Computer\D:\de\winter_whether_advisory.zip\ppt PropertyStoreDataBlock
7 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 5 D 2015-03-24 20:44:13 D:\de\winter_whether_advisory.zip 0 False 2014-12-16 16:10:26 2014-12-16 16:10:26 2015-03-24 20:40:55 16381123 FileAttributeReadonly HasTargetIdList, HasLinkInfo, IsUnicode Optical disc (CD-ROM, DVD, BD) E297F1A5 IAMAN CD D:\de\winter_whether_advisory.zip My Computer\D:\de\winter_whether_advisory.zip 0xF PropertyStoreDataBlock
8 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 6 B 2015-03-24 14:01:29 E:\Secret Project Data\design\winter_whether_advisory.zip\ppt 0 False 0 0 HasTargetIdList, IsUnicode (None) My Computer\E:\Secret Project Data\design\winter_whether_advisory.zip\ppt PropertyStoreDataBlock
9 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 7 A 2015-03-24 14:01:23 E:\Secret Project Data\design\winter_whether_advisory.zip 0 False 2015-03-24 13:59:37 2014-12-16 16:10:26 2015-03-24 04:00:00 16381123 FileAttributeArchive HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) 9E6A5B82 IAMAN $_@ E:\Secret Project Data\design\winter_whether_advisory.zip My Computer\E:\Secret Project Data\design\winter_whether_advisory.zip 0x402100 PropertyStoreDataBlock
10 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 8 9 2015-03-22 14:49:08 2015-03-23 20:27:33 00:0c:29:cc:00:8c V:\Secret Project Data\final 0 False 97f0d7af-d0a2-11e4-9804-000c29cc008c 97f0d7af-d0a2-11e4-9804-000c29cc008c df81a59c-ffc2-47b4-a00c-576d63471689 df81a59c-ffc2-47b4-a00c-576d63471689 2015-03-22 14:52:21 2015-03-22 14:52:21 2015-03-22 14:52:21 0 FileAttributeDirectory HasTargetIdList, HasLinkInfo, IsUnicode (None) Secret Project Data\final My Computer\V:\Secret Project Data\final 0xA828 0x1 00:0c:29:cc:00:8c 2015-03-22 14:49:08 PropertyStoreDataBlock, TrackerDataBaseBlock
11 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 9 8 2015-03-22 14:49:08 2015-03-23 20:26:53 00:0c:29:cc:00:8c \\10.11.11.128\secured_drive\Secret Project Data\pricing decision 0 False 97f0d791-d0a2-11e4-9804-000c29cc008c 97f0d791-d0a2-11e4-9804-000c29cc008c df81a59c-ffc2-47b4-a00c-576d63471689 df81a59c-ffc2-47b4-a00c-576d63471689 2015-03-22 14:52:21 2015-03-22 14:52:21 2015-03-22 14:52:21 4096 FileAttributeDirectory HasLinkInfo, IsUnicode, HasExpString (None) Secret Project Data\pricing decision \\10.11.11.128\SECURED_DRIVE\Secret Project Data\pricing decision 00:0c:29:cc:00:8c 2015-03-22 14:49:08 PropertyStoreDataBlock, VistaAndAboveIdListDataBlock, EnvironmentVariableDataBlock, TrackerDataBaseBlock
12 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 10 7 2015-03-23 18:38:23 E:\RM#1\Secret Project Data\design 0 False 2015-02-15 21:52:08 2015-02-15 21:51:38 2015-02-15 21:52:08 0 FileAttributeDirectory HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) 5C754D3E Authorized USB E:\RM#1\Secret Project Data\design My Computer\E:\RM#1\Secret Project Data\design 0xB0000 PropertyStoreDataBlock
13 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 11 5 2015-03-23 18:38:21 E:\ 0 False 1980-01-01 04:00:00 1980-01-01 04:00:00 1980-01-01 04:00:00 0 FileAttributeDirectory HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) 5C754D3E Authorized USB E:\ My Computer\E: PropertyStoreDataBlock
14 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 12 6 2015-03-23 18:37:54 E:\RM#1\Secret Project Data\proposal 0 False 2015-02-15 21:52:12 2015-02-15 21:51:38 2015-02-15 21:52:12 0 FileAttributeDirectory HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) 5C754D3E Authorized USB E:\RM#1\Secret Project Data\proposal My Computer\E:\RM#1\Secret Project Data\proposal 0xB0060 PropertyStoreDataBlock
15 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 13 4 2015-03-25 10:18:51 2015-03-22 14:35:02 informant-pc 00:0c:29:ff:24:29 ::{031E4825-7B94-4DC3-B131-E946B44C8DD5}\Videos.library-ms ==> User Libraries\Videos.library-ms 0 False 559dd01f-d2d8-11e4-a640-000c29ff2429 559dd01f-d2d8-11e4-a640-000c29ff2429 2e651ec6-993a-4e70-9087-52185bc0a486 2e651ec6-993a-4e70-9087-52185bc0a486 2015-03-22 14:34:55 2015-03-22 14:34:59 2015-03-22 14:34:59 3538 FileAttributeArchive, FileAttributeNotContentIndexed HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) CA0C7A48 C:\Users\informant\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms User Libraries\Videos informant-pc 00:0c:29:ff:24:29 2015-03-25 10:18:51 PropertyStoreDataBlock, TrackerDataBaseBlock
16 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 14 3 2015-03-25 10:18:51 2015-03-22 14:35:02 informant-pc 00:0c:29:ff:24:29 ::{031E4825-7B94-4DC3-B131-E946B44C8DD5}\Music.library-ms ==> User Libraries\Music.library-ms 0 False 559dd01e-d2d8-11e4-a640-000c29ff2429 559dd01e-d2d8-11e4-a640-000c29ff2429 2e651ec6-993a-4e70-9087-52185bc0a486 2e651ec6-993a-4e70-9087-52185bc0a486 2015-03-22 14:34:55 2015-03-22 14:34:59 2015-03-22 14:34:59 3524 FileAttributeArchive, FileAttributeNotContentIndexed HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) CA0C7A48 C:\Users\informant\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms User Libraries\Music informant-pc 00:0c:29:ff:24:29 2015-03-25 10:18:51 PropertyStoreDataBlock, TrackerDataBaseBlock
17 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 15 2 2015-03-25 10:18:51 2015-03-22 14:35:02 informant-pc 00:0c:29:ff:24:29 ::{031E4825-7B94-4DC3-B131-E946B44C8DD5}\Pictures.library-ms ==> User Libraries\Pictures.library-ms 0 False 559dd01d-d2d8-11e4-a640-000c29ff2429 559dd01d-d2d8-11e4-a640-000c29ff2429 2e651ec6-993a-4e70-9087-52185bc0a486 2e651ec6-993a-4e70-9087-52185bc0a486 2015-03-22 14:34:55 2015-03-22 14:34:59 2015-03-22 14:34:59 3559 FileAttributeArchive, FileAttributeNotContentIndexed HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) CA0C7A48 C:\Users\informant\AppData\Roaming\Microsoft\Windows\Libraries\Pictures.library-ms User Libraries\Pictures informant-pc 00:0c:29:ff:24:29 2015-03-25 10:18:51 PropertyStoreDataBlock, TrackerDataBaseBlock
18 E:\download\202204\JLECmd\AutomaticDestinations\1b4dd67f29cb1962.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 1b4dd67f29cb1962 Windows Explorer Pinned and Recent. 1 17 16 1 2015-03-25 10:18:51 2015-03-22 14:35:02 informant-pc 00:0c:29:ff:24:29 ::{031E4825-7B94-4DC3-B131-E946B44C8DD5}\Documents.library-ms ==> User Libraries\Documents.library-ms 0 False 559dd01c-d2d8-11e4-a640-000c29ff2429 559dd01c-d2d8-11e4-a640-000c29ff2429 2e651ec6-993a-4e70-9087-52185bc0a486 2e651ec6-993a-4e70-9087-52185bc0a486 2015-03-22 14:34:55 2015-03-22 14:34:59 2015-03-22 14:34:59 3567 FileAttributeArchive, FileAttributeNotContentIndexed HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) CA0C7A48 C:\Users\informant\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms User Libraries\Documents informant-pc 00:0c:29:ff:24:29 2015-03-25 10:18:51 PropertyStoreDataBlock, TrackerDataBaseBlock
19 E:\download\202204\JLECmd\AutomaticDestinations\47bb2136fda3f1ed.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:29:08 2022-04-19 14:58:24 47bb2136fda3f1ed Unknown AppId 1 2 0 2 2015-03-24 13:21:10 2015-03-25 15:29:08 informant-pc 00:0c:29:ff:24:29 C:\Users\informant\Desktop\Resignation_Letter_(Iaman_Informant).docx 0 False a2f20551-d228-11e4-b630-000c29ff2429 a2f20551-d228-11e4-b630-000c29ff2429 2e651ec6-993a-4e70-9087-52185bc0a486 2e651ec6-993a-4e70-9087-52185bc0a486 2015-03-24 18:48:40 2015-03-24 18:48:41 2015-03-24 18:48:41 11302 FileAttributeArchive HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) CA0C7A48 C:\Users\informant\Desktop\Resignation_Letter_(Iaman_Informant).docx Resignation_Letter_(Iaman_Informant).docx 0x58EE 0x7 informant-pc 00:0c:29:ff:24:29 2015-03-24 13:21:10 PropertyStoreDataBlock, TrackerDataBaseBlock
20 E:\download\202204\JLECmd\AutomaticDestinations\47bb2136fda3f1ed.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:29:08 2022-04-19 14:58:24 47bb2136fda3f1ed Unknown AppId 1 2 1 1 2015-03-23 18:37:54 E:\RM#1\Secret Project Data\proposal\[secret_project]_proposal.docx 0 False 2015-02-15 21:52:20 2014-12-19 19:53:46 2015-02-15 21:52:20 6484502 FileAttributeArchive HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) 5C754D3E Authorized USB E:\RM#1\Secret Project Data\proposal\[secret_project]_proposal.docx My Computer\E:\RM#1\Secret Project Data\proposal\[secret_project]_proposal.docx 0x20000A0 PropertyStoreDataBlock
21 E:\download\202204\JLECmd\AutomaticDestinations\4cc9bcff1a772a63.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-23 20:27:33 2022-04-19 14:58:24 4cc9bcff1a772a63 Unknown AppId 1 2 0 2 2015-03-22 14:49:08 2015-03-23 20:27:33 00:0c:29:cc:00:8c V:\Secret Project Data\final\[secret_project]_final_meeting.pptx 0 False 97f0d7ae-d0a2-11e4-9804-000c29cc008c 97f0d7ae-d0a2-11e4-9804-000c29cc008c df81a59c-ffc2-47b4-a00c-576d63471689 df81a59c-ffc2-47b4-a00c-576d63471689 2015-03-22 14:52:21 2015-01-30 16:49:20 2015-03-22 14:52:21 6844294 FileAttributeArchive HasTargetIdList, HasLinkInfo, IsUnicode (None) Secret Project Data\final\[secret_project]_final_meeting.pptx My Computer\V:\Secret Project Data\final\[secret_project]_final_meeting.pptx 0xA829 0x1 00:0c:29:cc:00:8c 2015-03-22 14:49:08 PropertyStoreDataBlock, TrackerDataBaseBlock
22 E:\download\202204\JLECmd\AutomaticDestinations\4cc9bcff1a772a63.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-23 20:27:33 2022-04-19 14:58:24 4cc9bcff1a772a63 Unknown AppId 1 2 1 1 2015-03-23 18:38:21 E:\RM#1\Secret Project Data\design\[secret_project]_design_concept.ppt 0 False 2015-02-15 21:52:08 2014-12-04 15:24:50 2015-02-15 21:52:08 1810432 FileAttributeArchive HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) 5C754D3E Authorized USB E:\RM#1\Secret Project Data\design\[secret_project]_design_concept.ppt My Computer\E:\RM#1\Secret Project Data\design\[secret_project]_design_concept.ppt 0xB8000 PropertyStoreDataBlock
23 E:\download\202204\JLECmd\AutomaticDestinations\69bacc0499d41c4.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-23 20:26:53 2022-04-19 14:58:24 69bacc0499d41c4 Unknown AppId 1 1 0 1 2015-03-22 14:49:08 2015-03-23 20:26:53 00:0c:29:cc:00:8c \\10.11.11.128\secured_drive\Secret Project Data\pricing decision\(secret_project)_pricing_decision.xlsx 0 False 97f0d78e-d0a2-11e4-9804-000c29cc008c 97f0d78e-d0a2-11e4-9804-000c29cc008c df81a59c-ffc2-47b4-a00c-576d63471689 df81a59c-ffc2-47b4-a00c-576d63471689 2015-03-22 14:52:21 2015-01-29 20:35:14 2015-03-22 14:52:21 440517 FileAttributeArchive HasLinkInfo, IsUnicode, HasExpString (None) Secret Project Data\pricing decision\(secret_project)_pricing_decision.xlsx \\10.11.11.128\SECURED_DRIVE\Secret Project Data\pricing decision\(secret_project)_pricing_decision.xlsx 00:0c:29:cc:00:8c 2015-03-22 14:49:08 PropertyStoreDataBlock, VistaAndAboveIdListDataBlock, EnvironmentVariableDataBlock, TrackerDataBaseBlock
24 E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:18:13 2022-04-19 14:58:24 7e4dca80246863e3 Control Panel - Settings 1 8 0 8 2015-03-25 15:18:13 ::{26EE0668-A00A-44D7-9371-BEB064C98683}\8\::{7B81BE6A-CE2B-4676-A29E-EB907A5126C5} ==> Control Panel\8\Programs and Features 0 False 0 0 HasTargetIdList, IsUnicode (None) Control Panel\Programs\Programs and Features PropertyStoreDataBlock
25 E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:18:13 2022-04-19 14:58:24 7e4dca80246863e3 Control Panel - Settings 1 8 1 7 2015-03-24 14:16:25 ::{26EE0668-A00A-44D7-9371-BEB064C98683}\2\::{025A5937-A6BE-4686-A844-36FE4BEC8B6D} ==> Control Panel\2\Power Options 0 False 0 0 HasTargetIdList, IsUnicode (None) Control Panel\Hardware and Sound\Power Options PropertyStoreDataBlock
26 E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:18:13 2022-04-19 14:58:24 7e4dca80246863e3 Control Panel - Settings 1 8 2 2 2015-03-24 14:16:16 ::{26EE0668-A00A-44D7-9371-BEB064C98683}\1\::{ED834ED6-4B5A-4BFE-8F11-A626DCB6A921} ==> Control Panel\1\Personalization Control Panel 0 False 0 0 HasTargetIdList, IsUnicode (None) Control Panel\Appearance and Personalization\Personalization Control Panel PropertyStoreDataBlock
27 E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:18:13 2022-04-19 14:58:24 7e4dca80246863e3 Control Panel - Settings 1 8 3 5 2015-03-23 20:47:36 ::{26EE0668-A00A-44D7-9371-BEB064C98683}\0\::{05D7B0F4-2121-4EFF-BF6B-ED3F69B894D9} ==> Control Panel\0\Taskbar (NotificationAreaIcons) 0 False 0 0 HasTargetIdList, IsUnicode (None) Control Panel\All Control Panel Items\Taskbar (NotificationAreaIcons) PropertyStoreDataBlock
28 E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:18:13 2022-04-19 14:58:24 7e4dca80246863e3 Control Panel - Settings 1 8 4 6 2015-03-22 15:51:28 ::{26EE0668-A00A-44D7-9371-BEB064C98683}\9\::{60632754-C523-4B62-B45C-4172DA012619} ==> Control Panel\9\User Accounts 0 False 0 0 HasTargetIdList, IsUnicode (None) Control Panel\User Accounts\User Accounts PropertyStoreDataBlock
29 E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:18:13 2022-04-19 14:58:24 7e4dca80246863e3 Control Panel - Settings 1 8 5 4 2015-03-22 15:45:51 ::{26EE0668-A00A-44D7-9371-BEB064C98683}\5\::{BB06C0E4-D293-4F75-8A90-CB05B6477EEE} ==> Control Panel\5\System 0 False 0 0 HasTargetIdList, IsUnicode (None) Control Panel\System and Security\System PropertyStoreDataBlock
30 E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:18:13 2022-04-19 14:58:24 7e4dca80246863e3 Control Panel - Settings 1 8 6 3 2015-03-22 15:24:28 ::{26EE0668-A00A-44D7-9371-BEB064C98683}\1\::{C555438B-3C23-4769-A71F-B6D3D9B6053A}\Settings ==> Control Panel\1\Display\Settings 0 False 0 0 HasTargetIdList, IsUnicode (None) Control Panel\Appearance and Personalization\Display\Screen Resolution PropertyStoreDataBlock
31 E:\download\202204\JLECmd\AutomaticDestinations\7e4dca80246863e3.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:18:13 2022-04-19 14:58:24 7e4dca80246863e3 Control Panel - Settings 1 8 7 1 2015-03-22 14:37:23 ::{26EE0668-A00A-44D7-9371-BEB064C98683}\5\::{36EEF7DB-88AD-4E81-AD49-0E313F0C35F8} ==> Control Panel\5\Windows Update 0 False 0 0 HasTargetIdList, IsUnicode (None) Control Panel\System and Security\Windows Update PropertyStoreDataBlock
32 E:\download\202204\JLECmd\AutomaticDestinations\e36bfc8972e5ab1d.automaticDestinations-ms 2022-04-19 14:57:15 2015-03-25 15:28:47 2022-04-19 14:58:24 e36bfc8972e5ab1d XPS Viewer 1 1 0 1 2015-03-25 13:05:27 2015-03-25 15:28:47 informant-pc 00:0c:29:ff:24:29 C:\Users\informant\Desktop\Resignation_Letter_(Iaman_Informant).xps 0 False 9b365852-d2ef-11e4-b734-000c29ff2429 9b365852-d2ef-11e4-b734-000c29ff2429 2e651ec6-993a-4e70-9087-52185bc0a486 2e651ec6-993a-4e70-9087-52185bc0a486 2015-03-25 15:28:33 2015-03-25 15:28:34 2015-03-25 15:28:33 178139 FileAttributeArchive HasTargetIdList, HasLinkInfo, IsUnicode Fixed storage media (Hard drive) CA0C7A48 C:\Users\informant\Desktop\Resignation_Letter_(Iaman_Informant).xps Resignation_Letter_(Iaman_Informant).xps 0x11948 0xB informant-pc 00:0c:29:ff:24:29 2015-03-25 13:05:27 PropertyStoreDataBlock, TrackerDataBaseBlock