C# Code for Parsing Windows Jump List Files

Here's an example of C# code that uses the Windows API to parse Jump List files:

using System;
using System.IO;
using System.Runtime.InteropServices;


class Program
{
    // Define the structure for the Jump List file header
    [StructLayout(LayoutKind.Sequential, Pack = 1)]
    struct JumpListHeader
    {
        public UInt32 Signature;
        public UInt32 HeaderSize;
        public UInt32 EntryListSize;
        public UInt32 NumEntries;
    }

    // Define the structure for each Jump List entry
    [StructLayout(LayoutKind.Sequential, Pack = 1)]
    struct JumpListItem
    {
        public UInt32 EntryID;
        public UInt32 LocationFlags;
        public UInt32 FileAttributes;
        public UInt32 FileSize;
        public FILETIME CreationTime;
        public FILETIME ModifiedTime;
        public FILETIME AccessTime;
        public UInt32 FileAttributesEx;
    }

    // Struct for FILETIME
    [StructLayout(LayoutKind.Sequential)]
    struct FILETIME
    {
        public uint dwLowDateTime;
        public uint dwHighDateTime;
    }

    // Constants for Jump List signature and entry size
    const UInt32 JUMP_LIST_SIGNATURE = 0xA0D0D0A;
    const UInt32 JUMP_LIST_ENTRY_SIZE = 0x58;

    static void Main(string[] args)
    {
        string jumpListFilePath = @"C:\Path\To\JumpList.automaticDestinations-ms";

        // Read the Jump List file into a byte array
        byte[] jumpListBytes = File.ReadAllBytes(jumpListFilePath);

        // Parse the Jump List file
        ParseJumpList(jumpListBytes);
    }

    static void ParseJumpList(byte[] jumpListBytes)
    {
        // Read the Jump List header
        JumpListHeader header = ByteArrayToStructure<JumpListHeader>(jumpListBytes);

        // Check the Jump List signature
        if (header.Signature != JUMP_LIST_SIGNATURE)
        {
            Console.WriteLine("Invalid Jump List file.");
            return;
        }

        // Get the offset to the start of the Jump List entries
        int offset = (int)header.HeaderSize;

        // Read each Jump List entry
        for (int i = 0; i < header.NumEntries; i++)
        {
            // Calculate the offset to the current Jump List entry
            int entryOffset = offset + (i * (int)JUMP_LIST_ENTRY_SIZE);

            // Read the Jump List entry at the current offset
            JumpListItem item = ByteArrayToStructure<JumpListItem>(jumpListBytes, entryOffset);

            // Print the details of the Jump List entry
            Console.WriteLine($"Entry ID: {item.EntryID}");
            Console.WriteLine($"Location Flags: {item.LocationFlags}");
            Console.WriteLine($"File Size: {item.FileSize}");
            // ... add more properties as needed
            Console.WriteLine();
        }
    }

    static T ByteArrayToStructure<T>(byte[] bytes, int offset = 0)
    {
        GCHandle handle = GCHandle.Alloc(bytes, GCHandleType.Pinned);
        try
        {
            IntPtr ptr = handle.AddrOfPinnedObject();
            ptr += offset;
            return (T)Marshal.PtrToStructure(ptr, typeof(T));
        }
        finally
        {
            handle.Free();
        }
    }
}

This code assumes that you have the 'JumpList.automaticDestinations-ms' file available at the specified 'jumpListFilePath'. The code reads the file into a byte array and then uses the 'ParseJumpList' method to parse the contents of the Jump List file.

Keep in mind that parsing the Jump List file format may vary depending on the Windows version and the specific Jump List file you are working with.