Windows Media Player Playlist

I listened to the 29 July CyberSpeak podcast on my system just this morning, and found the following file within my profile

00F2FAD1.wpl

That file contains XML with the name and path of the file.

You might also want to check the Registry
HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\RecentFileList

One question for you…why is the method of generating the file name important? Is something others should be looking at, as well?

Harlan

Thanks for the registry pointer Harlan.

I only started looking into the wpl file a few hours ago and it seems to me that the file and its name are created when Windows Media Player is first used to play a media file. The file's contents are updated to show the last file played and its full path, as well as the version number of WMP. It only seems to keep one entry though; the last one.

As the name of the file seems to be different on every computer I've tested it on I was wondering whether this could be of evidential value at all?

For those that are interested, the WPL file exists at C\Documents and Settings\user\Application Data\Microsoft\Media Player and can be viewed and Notepad.

Jonathan,

I'm not sure where the name of the file would be of evidentary value, although the contents of the file and the Registry key would.

H