Releases: kacos2000/MFT_Browser
MFT Browser
MFTBrowser
[Minor Update]
MD5: DD2A6ACC51C9B5BBE271029A2CE4416F
SHA256: 51DE50EE7DB7E1F70AD94F464AF599E3655A034D4D383B532E1BF39CB0944170
MFTBrowser
[Updates]
-
TreeView node name correction
(it was preventing index's '$MFT Record Modified ' nodes getting selected in Hex-View)Just an FYI !!:
Apparently, the ObjectID MAC address is not necessarily from an Ethernet NIC :
In this case it is from a TP-Link UB500 Bluetooth 5.0 Nano USB Adapter, even though there are 2 active Ethernet NICs as well ;-)
MD5: 3AB019297777FEA870B1C188DDACDB5E
SHA256: 2015A6A13C8D1106C56C610DBCB64588160FC4850D393445117E2080699E0B88
MFTBrowser
[Updates]
-
Corrected the index key labels in resident content $Quota & $ObjectID stream entries eg:
-
Changed the (Actual/Logical) Data Run labels in order to show correctly when the record is saved in a JSON file
MD5: 6DBE2579ED8C7436AB42A51741E77C43
SHA256: 7F90DF98082B4F1181752AFE31EE72B7CA5929A5F8D0C93D9A51345BE9F5F574
MFTBrowser
[Updates]
-
Corrected the GUID/Droid Labels as per [MS-DLTW] and [MS-SHLLINK] to VolumeID & File ObjectID
-
Added support for resident content of 'ms-properties' Data streams eg:
-
Small correction in the 'Get-ObjectIdFromHex' function & added MAC address Manufacturer info eg:
*`MAC address Manufacturer info is sourced from 'maclookup.app'
- Added option to save a record to JSON file
MD5: BAF5E5D41BBB761319742FC0A35FC9D6
SHA256: A1D7B98D63386C8A6C49B1F8807A11B715ED886ED7EAECD2349117A439F4B4AC
MFTBrowser.exe
[Updates]
- Changed timestamp color & format eg:
NOTE: All Timestamps are in UTC - Other minor changes
MD5: AABA54C9AA1519C6B013789618736584
SHA256: 4AF1CB079FF06A45399A085B3F30AED4DC07CCE8884AF3D0C7F4A0BB44A70345
MFTBrowser.exe
[Updates]
- Small correction
MD5: B1FE02A98BF1024283127B7F62E4BE5B
SHA256: 65C36420E2DB2F3D4A068BC905F6B788C9376736B183C94E9893CB00A5D53119
MFTBrowser.exe
[Updates]
-
a couple tree-view node color changes
MD5: 94C5AF5C09B9E17B88739502EC9B0396
SHA256: 1E6EAACA75DB6E9D8DA2F17250FA9638CB9C69F0A525ABA4EABD7A43B560697E
MFTBrowser.exe
[Updates]
- New Dark Interface
- other minor updates
MD5: 5052B1AE9DA875FB978BA616B9477BC2
SHA256: 030B32C8E1680DA1BFDEDAE5BC50FBC1B116A50431FD9883D768F76346D6521E
MFTBrowser.exe (x64)
[Updates]
-
Updated the resident content LNK parser:
MD5: E1A19C1B45B042E6FD7038317E06D675
SHA256: 443D8B87CE28F5F1666282C069EDA6C2A3A14BABF27BC1DBE3DD8A22BC2B11E7