6 extensions supported
Read-only, without installing the original software.
| Format | Extensions | What you see |
|---|---|---|
| Windows shortcuts | .lnk | Target and arguments; booby-trapped shortcuts flagged; never followed |
| Internet shortcuts | .url .website | Address shown, never opened; suspicious addresses flagged |
| Remote Desktop | .rdp | Computer, shared resources; saved password flagged; no connection made |
| Explorer thumbnail caches | .thumbs.db .ehthumbs.db | Thumbnail gallery with their original names |
Frequently asked questions
Is a booby-trapped shortcut detected?
Yes. A suspicious target (command interpreter, encoded command, hidden window…) is flagged, and the shortcut is never followed.