7zip

$ target-query <path/to/target> -f 7zip
Details

Module

dissect.target.plugins.apps.productivity.sevenzip.SevenZipPlugin

Output

records

Module documentation

Windows 7-Zip GUI plugin.

Function documentation

Return 7-Zip GUI history information from the registry.

7-Zip is an open source file archiver. If the HKCUSoftware7-Zip registry key exists, it checks for additional registry keys, such as ArcHistory and FolderHistory. This might provide insight in which files have been archived by the 7-Zip GUI.

References: