Hcb2-vhs-07.7z.001 -

The suffix confirms this is a split 7-Zip archive . To analyze the contents, you must have all subsequent parts (e.g., .001 , .002 , .003 ) in the same folder. General Forensic Analysis Steps

: Use Autopsy or FTK Imager to browse the file system. HCB2-vhs-07.7z.001

: Use the file command (on Linux) or a hex editor to check the file headers if the extension is missing or ambiguous. Forensic Tooling : The suffix confirms this is a split 7-Zip archive