analyzeMFT is no longer maintained https://github.com/dkovar/analyzeMFT/blob/master/README.txt and has several known short comings https://github.com/dkovar/analyzeMFT/issues/56 I strongly recommend to stop using it