LNK & Jumplist Browser
[Updates]
-
Corrected the GUID/Droid Labels as per [MS-DLTW] and [MS-SHLLINK] to VolumeID & File ObjectID
(for both LNK TrackerDataBlock & automaticDestinations-ms DestList stream entries):Example MFT record - LNK:
*`MAC address Manufacturer info is sourced from 'maclookup.app'
MD5: 440AEABF6D67FFD34342565A4037F1A7
SHA256: AD894B4073636381E8E58F47227AF03251073B3C7C44B62786C491363B2D7731