parse .automaticDestinations-ms · recently accessed files per app · timestamps · suspicious argument detection
drop jump list files
Drop .automaticDestinations-ms or .customDestinations-ms files
located at %APPDATA%\Microsoft\Windows\Recent\AutomaticDestinations\
status
drop .automaticDestinations-ms or .customDestinations-ms files