Add new comment

fte(FILETIME Extractor) is a tool which gets accurate timestamps of specified files/folders based on filesystem.

[Version]
fte v1.6

[Requirement]
Windows XP/2003/Vista/2008/7 (x86/x64) & .NET Framework 2.0 or above

Additionally the following runtime is needed.
# I think you don't need to install if your OS is Windows 7

Microsoft Visual C++ 2008 Redistributable Package (x86)
http://www.microsoft.com/downloads/en/details.aspx?familyid=9b2da534-3e03-4391-8a4d-074b9f2bc1bf&displaylang=en

Please install x86 runtime even if your OS edition is x64.

[Usage]
New form for parsing NTFS is added. You can invoke from "Window - NTFS" menu.

(NTFS)

Each columns are as follows:

• name (Filename)
• id, pid (MFT ID, MFT ID of parent)
• flag (Combination of file, folder, deleted)
• nspace (Namespace of filename, POSIX, Win32, DOS or Win32&DOS)
• links (Number of links)
• crtime, mtime, ctime, atime (Created, Modified, Entry Modified, Last Accessed timestamp)
• crtime(FN), mtime(FN), ctime(FN), atime(FN) (Timestamp of $FILE_NAME attribute)

Default window is not changed from v.1.5.1.

(Default)

Each columns are as follows:

• name (Fullpath)
• id (File ID)
• type (Timestamp format)
• crtime, mtime, ctime, atime (Created, Modified, Entry Modified, Last Accessed timestamp)
• otime, botime (Object ID、BirthObject ID timestamp)

Check "Recursive" if you want to process recursively and "UTC" if you want to display UTC timezone. (By default, timestamp is based on your local machine's timezone)

[Feature]
Main purpose of fte is calculation of less than a second. Additionally,

• fte gets the value of possible accuracy.
• fte estimates original data type based on combination of timestamps value.
• If file has Object ID, fte parses and shows the timestamps.
• fte parse timestamp of $FILE_NAME attribute in NTFS.

[Limitation]
It may take a long time if fte processed a lot of objects. The window may get no answer, but you hold the line then it will finish. For reference, it takes 3 minutes to process 300,000 objects in my PC.

[Download]
fte_1.6.zip (MD5: 709e4172189cf24f557f65c40b63bfa6)

You can get previous version from link at the bottom.

[License]
You may use the SOFTWARE freely for personal or commercial and NO WARRANTIES.

[Note]
2011/07/10: Addition to parse NTFS (1.6)
2011/05/15: Fix bugs, change layout, drag&drop compatibility (1.5.1)
2011/05/10: First GUI version (1.5)