Ffile2fix
Sign in Get started
← All tools

Suspicious File Timeline

List file modification timestamps from a bounded ZIP; archive timestamps are clues and cannot prove when an attack occurred.

⚡ 199 points per successful run · Balance: 0 · Buy points

Inspect archive timestamps

Read the timestamps stored in a ZIP central directory without extracting files. These metadata values are clues only and cannot prove when a file changed or when an attack occurred.

  • ZIP input up to 50 MiB
  • Up to 3,000 entries and 100 MiB declared expanded content
  • Unsafe paths and symbolic links are rejected
📅

Choose a project ZIP

Select project ZIP…

Stored timestamp order

Results will appear here.

About Suspicious File Timeline

List file modification timestamps from a bounded ZIP; archive timestamps are clues and cannot prove when an attack occurred.

How to use this tool

  1. Enter the requested data or choose an upload.
  2. Check the file type and size limit before submitting.
  3. Review the result, then download or copy it.
  4. Keep the original and use the actions above to continue safely.

Read the full Suspicious File Timeline guide →