Passware Recovery FileTypes

passware_file_types_banner

The following table summarizes the items that can be unprotected by Passware Kit Forensic

 

Protected Item File type Recovery Option
Acrobat 3.0 PDF Instant Recovery / Brute-force – Fast
Acrobat 4.0 PDF Instant Recovery / Brute-force – Fast/Medium
Acrobat 5.0 PDF Instant Recovery / Brute-force – Medium
Acrobat 6.0 PDF Instant Recovery / Brute-force – Medium
Acrobat 7.0 PDF Instant Recovery / Brute-force – Medium
Acrobat 8.0 PDF Instant Recovery / Brute-force – Medium
Acrobat 9.0 PDF Instant Recovery / Brute-force – Fast/Medium
Acrobat 10.0 PDF Instant Recovery / Brute-force – Slow
Acrobat 11.0 PDF Instant Recovery / Brute-force – Slow
Symantec ACT! 2.0 BLB Instant Recovery
Symantec ACT! 3.0 BLB Instant Recovery
Symantec ACT! 4.0 BLB Instant Recovery
Symantec ACT! 2000 BLB Instant Recovery
ACT! by Sage 2005 ADF Instant Recovery
ACT! by Sage 2006 ADF Instant Recovery
ACT! by Sage 2007 ADF Instant Recovery
ACT! by Sage 2008 ADF Instant Recovery
ACT! by Sage 2009 ADF Instant Recovery
Android Backup 4.4 or earlier AB Brute-force – Slow
Android Image 4.4 or earlier BIN Brute-force – Slow
Apple Disk Image DMG, DD Brute-force – Slow
Apple iCloud Token Instant Recovery (Memory Analysis)
Apple iTunes Backup / iOS 4.x – 9.x PLIST Brute-force – Slow
BestCrypt 6.0 JBC Brute-force – Slow
BestCrypt 7.0 JBC Brute-force – Slow
BestCrypt 8.0 JBC Brute-force – Slow
FileMaker Pro 3.x FP3 Instant Recovery
FileMaker Pro 4.x FP3 Instant Recovery
FileMaker Pro 5.x FP5 Instant Recovery
FileMaker Pro 6.x FP5 Instant Recovery
FileMaker Pro 7.x FP7 Instant Removal
FileMaker Pro 8.x FP7 Instant Removal
FileMaker Pro 9.x FP7 Instant Removal
FileMaker Pro 10.x FP7 Instant Removal
FileMaker Pro 11.x FP7 Instant Removal
FileMaker Pro 12.x FP7, FMP12 Instant Removal
FileMaker Pro 13.x FMP12 Instant Removal
FileMaker Pro 14.x FMP12 Instant Removal
Google Chrome Website Instant Recovery
ICQ 2000 – 2003 DAT Instant Recovery
ICQ 99a DAT Instant Recovery
ICQ Lite FB Instant Recovery
KeePass KDB, KDBX Brute-force – Slow
Lotus 1-2-3 1.1+ WK!, WK1, WK4, WRC, WR1, WR9, 123 Instant Recovery
Lotus Notes 4.x ID Brute-force – Medium
Lotus Notes 6.x ID Brute-force – Medium
Lotus Notes 7.x ID Brute-force – Medium
Lotus Notes 8.x
(RC2, AES encryption)		 ID Brute-force – Medium/Slow
Lotus Organizer 1.0 ORG Instant Recovery
Lotus Organizer 2.0 OR2 Instant Recovery
Lotus Organizer 3.0 OR3 Instant Recovery
Lotus Organizer 4.0 OR4 Instant Recovery
Lotus Organizer 5.0 OR5 Instant Recovery
Lotus Organizer 6.0 OR6 Instant Recovery
Lotus Word Pro 96 – 99 LWP Instant Recovery
LUKS Disk Image DD, IMG, BIN, E01 Brute-force recovery – Slow
Mac OS / FileVault2 DMG, DD, IMG, BIN, E01 Instant Removal (Memory Analysis) / Brute-force – Slow
Mac OS X Keychain Brute-force – Slow
Mac OS X User / Hash PLIST Instant Recovery (Memory Analysis) / Brute-force – Fast  
Mac OS X 10.8 – 10.10 User / Hash PLIST Instant Recovery (Memory Analysis) / Brute-force – Slow
Mozilla Firefox Website Instant Recovery
MS Access 2.0 MDB Instant Recovery
MS Access 95 MDB Instant Recovery
MS Access 97 MDB Instant Recovery
MS Access 2000 MDB Instant Recovery
MS Access 2002 MDB Instant Recovery
MS Access 2003 MDB Instant Recovery
MS Access 2007 ACCDB Brute-force – Slow
MS Access 2010 ACCDB Brute-force – Slow
MS Access 2013 ACCDB Brute-force – Slow
MS Access 2.0 System Database MDA Instant Recovery
MS Access 97 System Database MDW Instant Recovery
MS Access 2000 System Database MDW Instant Recovery
MS Access VBA MDA Instant Recovery or Reset
MS Backup QIC Instant Recovery
MS Excel 4.0 XLS Instant Recovery
MS Excel 5.0 XLS Instant Recovery
MS Excel 95 XLS Instant Recovery
MS Excel 97 XLS Instant Recovery or Removal / Brute-force – Fast
MS Excel 2000 XLS Instant Recovery or Removal / Brute-force – Fast
MS Excel 2002 XLS Instant Recovery or Removal / Brute-force – Medium
MS Excel 2003 XLS Instant Recovery or Removal / Brute-force – Medium
MS Excel 2007 XLSX, XLSM Instant Recovery or Removal (Memory Analysis) / Brute-force – Slow
MS Excel 2010 XLSX, XLSM Instant Recovery or Removal (Memory Analysis) / Brute-force – Slow
MS Excel 2013 XLSX, XLSM Instant Recovery or Removal (Memory Analysis) / Brute-force – Slow
MS Pocket Excel PXL Instant Recovery
MS Excel VBA XLA, XLSM Instant Recovery or Reset
MS Internet Explorer Website Instant Recovery
MS Internet Explorer Webform Instant Recovery
MS Internet Explorer Content Advisor Instant Removal
MS Mail MMF Instant Recovery
MS Money 99 or earlier MNY Instant Recovery
MS Money 2000 – 2001 MNY Instant Recovery
MS Money 2002 MNY Brute-force – Medium
MS Money 2003 – 2004 MNY Brute-force – Medium
MS Money 2005 – 2007 MNY Brute-force – Medium
MS OneDrive Instant Acquisition (Memory Analysis)
MS OneNote 2003 Section ONE Brute-force – Medium
MS OneNote 2007 Section ONE Brute-force – Slow
MS OneNote 2010 Section ONE Brute-force – Slow
MS OneNote 2013 Section ONE Brute-force – Slow
MS Outlook 2000/2003/2007/2010/2013 Email Accounts   Instant Recovery
MS Outlook 2000/2003/2007/2010/2013 Form Template OFT Instant Recovery
MS Outlook 2000/2003/2007/2010/2013 Personal Storage PST Instant Recovery
MS Outlook Express Accounts Instant Recovery
MS Outlook Express Identities Instant Recovery
MS PowerPoint 2002 PPT Instant Recovery or Removal / Brute-force – Medium
MS PowerPoint 2003 PPT Instant Recovery or Removal / Brute-force – Medium
MS PowerPoint 2007 PPTX, PPTM Instant Recovery or Removal / Brute-force – Slow
MS PowerPoint 2010 PPTX, PPTM Instant Recovery or Removal / Brute-force – Slow
MS PowerPoint 2013 PPTX, PPTM Instant Recovery or Removal / Brute-force – Slow
MS PowerPoint VBA PPT, PPTM Instant Recovery or Reset
MS Project 95 MPP Instant Recovery
MS Project 98 MPP Instant Recovery
MS Project 2000 MPP Instant Recovery
MS Project 2002 MPP Instant Recovery
MS Project 2003 MPP Instant Recovery
MS SQL 2000 MDF Instant Reset
MS SQL 2005 MDF Instant Reset
MS SQL 2008 MDF Instant Reset
MS Windows NT User / Secure Boot Option Instant Recovery (Memory Analysis) or Removal
MS Windows 2000 User / Secure Boot Option Instant Recovery (Memory Analysis) or Removal
MS Windows 2000 Server User / Secure Boot Option Instant Recovery (Memory Analysis) or Removal
MS Windows 2000 Server Active Directory Administrator Instant Recovery (Memory Analysis) or Removal
MS Windows XP User / Secure Boot Option Instant Recovery (Memory Analysis) or Removal
MS Windows 2003 Server User / Secure Boot Option Instant Recovery (Memory Analysis) or Removal
MS Windows 2003 Server Active Directory Administrator Instant Recovery (Memory Analysis) or Removal
MS Windows 2003 SBS User / Secure Boot Option Instant Recovery (Memory Analysis) or Removal
MS Windows 2003 SBS Active Directory Administrator Instant Recovery (Memory Analysis) or Removal
MS Windows Vista User / Secure Boot Option Instant Recovery (Memory Analysis) or Removal
MS Windows Vista / BitLocker DD, IMG, BIN, VHD, E01 Instant Removal (Memory Analysis) / Brute-force – Slow
MS Windows 2008 Server User / Secure Boot Option Instant Recovery (Memory Analysis) or Removal
MS Windows 2008 Server Active Directory Administrator Instant Recovery (Memory Analysis) or Removal
MS Windows 2008 Server / BitLocker DD, IMG, BIN, VHD, E01 Instant Removal (Memory Analysis) / Brute-force – Slow
MS Windows 7 User / Secure Boot Option Instant Recovery (Memory Analysis) or Removal
MS Windows 7 / BitLocker DD, IMG, BIN, VHD, E01 Instant Removal (Memory Analysis) / Brute-force – Slow
MS Windows 2012 Server User / Secure Boot Option Instant Recovery (Memory Analysis) or Removal
MS Windows 2012 Server Active Directory Administrator Instant Recovery (Memory Analysis) or Removal
MS Windows 2012 Server / BitLocker DD, IMG, BIN, VHD, E01 Instant Removal (Memory Analysis) / Brute-force – Slow
MS Windows 8 – 8.1 User / Secure Boot Option Instant Recovery (Memory Analysis) or Removal
MS Windows 8 – 8.1 / BitLocker DD, IMG, BIN, VHD, E01 Instant Removal (Memory Analysis) / Brute-force – Slow
MS Windows 10 User / Secure Boot Option Instant Recovery (Memory Analysis) or Removal
MS Windows 10 / BitLocker DD, IMG, BIN, VHD, E01 Instant Removal (Memory Analysis) / Brute-force – Slow
MS Windows Domain Administrator Instant Reset
MS Windows Live ID Account Instant Reset
MS Windows NTLM/LANMAN Hash Instant Recovery / Brute-force – Fast
MS Windows Phone Instant Extraction
MS Windows User / UPEK Instant Recovery
MS Word 1.0 DOC, DOT Instant Recovery
MS Word 2.0 DOC, DOT Instant Recovery
MS Word 3.0 DOC, DOT Instant Recovery
MS Word 4.0 DOC, DOT Instant Recovery
MS Word 5.0 DOC, DOT Instant Recovery
MS Word 6.0 DOC, DOT Instant Recovery
MS Word 95 DOC, DOT Instant Recovery
MS Word 97 DOC, DOT Instant Recovery or Removal / Brute-force – Fast
MS Word 2000 DOC, DOT Instant Recovery or Removal / Brute-force – Fast
MS Word 2002 DOC, DOT Instant Recovery or Removal / Brute-force – Medium
MS Word 2003 DOC, DOT Instant Recovery or Removal / Brute-force – Medium
MS Word 2007 DOCX, DOTX, DOCM Instant Recovery or Removal (Memory Analysis) / Brute-force – Slow
MS Word 2010 DOCX, DOTX, DOCM Instant Recovery or Removal (Memory Analysis) / Brute-force – Slow
MS Word 2013 DOCX, DOTX, DOCM Instant Recovery or Removal (Memory Analysis) / Brute-force – Slow
MS Word VBA DOC, DOT, DOCM, DOTM Instant Recovery or Reset
MYOB earlier than 2004 PLS, PRM Instant Recovery
MYOB 2004 DAT Instant Reset
MYOB 2005 MYO Instant Reset
MYOB 2006 MYO Instant Reset
MYOB 2007 MYO Instant Reset
MYOB 2008 MYO Instant Reset
MYOB 2009 MYO Instant Reset
MYOB 2010 MYO Instant Reset
Network Connection Instant Recovery
Norton Backup SET Instant Recovery
OpenDocument ODT, ODS, ODP, ODB Brute-force – Slow
Paradox Database DB Instant Recovery
Peachtree 2002 – 2006 DAT Instant Recovery
Peachtree 2007 DAT Instant Recovery
Peachtree 2008 DAT Instant Recovery
Peachtree 2010 DAT Instant Recovery
Peachtree 2013 DAT Instant Reset
PGP Desktop 9.x – 10.x Zip PGP Brute-force – Slow
PGP Desktop 9.x – 10.x Private Keyring SKR Brute-force – Slow/Medium
PGP Desktop 9.x – 10.x Virtual Disk PGD Brute-force – Slow
PGP Desktop 9.x – 10.x Self-Decrypting Archive EXE Brute-force – Slow
PGP WDE DD, IMG, BIN, E01 Instant Removal (Memory Analysis) / Brute-force – Slow
GnuPG Private Keyring GPG Brute-force – Slow
Quattro Pro 5 – 6 QPW, WB1, WB2, WB3 Instant Recovery
Quattro Pro 7 – 8 QPW, WB1, WB2, WB3 Instant Recovery
Quattro Pro 9 – 12, X3, X4 QPW Instant Recovery
QuickBooks 3.x – 4.x QBW, QBA Instant Recovery
QuickBooks 5.x QBW, QBA Instant Recovery
QuickBooks 6.x – 8.x QBW, QBA Instant Recovery
QuickBooks 99 QBW, QBA Instant Recovery
QuickBooks 2000 QBW, QBA Instant Recovery
QuickBooks 2001 QBW, QBA Instant Recovery
QuickBooks 2002 QBW, QBA Instant Recovery
QuickBooks 2003 QBW, QBA Instant Removal
QuickBooks 2004 QBW, QBA Instant Removal
QuickBooks 2005 QBW, QBA Instant Removal
QuickBooks 2006 QBW, QBA Instant Removal
QuickBooks 2007 QBW, QBA Instant Removal
QuickBooks 2008 QBW, QBA Instant Removal
QuickBooks 2009 QBW, QBA Instant Removal
QuickBooks 2010 QBW, QBA Instant Removal
QuickBooks 2011 QBW, QBA Instant Removal
QuickBooks 2012 QBW, QBA Instant Removal
QuickBooks 2013 QBW, QBA Instant Removal
QuickBooks 2014 QBW, QBA Instant Removal
QuickBooks for Mac 2013 QB2013 Instant Removal
QuickBooks for Mac 2014 QB2014 Instant Removal
QuickBooks Backup QBB Instant Removal
Quicken 95/6.0 QDF Instant Recovery
Quicken 98 QDF Instant Recovery
Quicken 99 QDF Instant Recovery
Quicken 2000 QDF Instant Recovery
Quicken 2001 QDF Instant Recovery
Quicken 2002 QDF Instant Recovery
Quicken 2003 QDF Instant Removal
Quicken 2004 QDF Instant Removal
Quicken 2005 QDF Instant Removal
Quicken 2006 QDF Instant Removal
Quicken 2007 QDF Instant Removal
Quicken 2008 QDF Brute-force – Slow
Quicken 2009 QDF Brute-force – Slow
Quicken 2010 QDF Brute-force – Slow
Quicken 2011 QDF Brute-force – Slow
Quicken 2012 QDF Brute-force – Slow
Quicken 2013 QDF Brute-force – Slow
Quicken 2014 QDF Brute-force – Slow
RAR 2.0 Archive RAR Brute-force – Slow
RAR 2.9 – 4.x (AES Encryption) Archive RAR Brute-force – Slow
RAR 5.x Archive RAR Brute-force – Slow
Remote Desktop Connection RDP Instant Recovery
Safari 5.0 – 5.1 Website Instant Recovery
Schedule+ 1.0 CAL Instant Recovery
Schedule+ 7.x SCD Instant Recovery
TrueCrypt Non-System Partition/Volume 5.0 or later DD, IMG, BIN, TC, E01 Instant Removal (Memory Analysis) / Brute-force – Slow
TrueCrypt System Partition/Volume 5.0 or later DD, IMG, BIN, TC, E01 Instant Removal (Memory Analysis) / Brute-force – Slow
TrueCrypt Whole Disk 5.0 or later DD, IMG, BIN, TC, E01 Instant Removal (Memory Analysis) / Brute-force – Slow
TrueCrypt Hidden Partition 6.0 or later DD, IMG, BIN, TC, E01 Brute-force – Slow
TrueCrypt Hidden OS 6.0 or later DD, IMG, BIN, TC, E01 Brute-force – Slow
Unix OS User Hash Brute-force – Fast/Slow
WordPerfect 5.x WPD Instant Recovery
WordPerfect 6.0 WPD Instant Recovery
WordPerfect 6.1 WPD Instant Recovery
WordPerfect 7 – 12, X3, X4 WPD Instant Recovery
WinZip 8.0 or earlier ZIP Instant Removal / Brute-force – Fast
Yandex Browser Website Instant Recovery
Zip Archive ZIP Brute-force – Fast/Slow
7-Zip Archive 7Z Brute-force – Slow