Description

This application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis.
Every analysis results can be printed in user-friendly form.
It's designed in Multiple Document Interface.

Here are described individual analyzers:

• Windows XP Thumbnail Database Analyzer
  This analyzer reads Thumbs.db file and displays its content with stored data include image preview.
  
• ACDSee Thumbnail Database Analyzer
  This analyzer reads ACDSee *.fpt file and displays its content with stored data include image preview.
  
• Google Picasa Thumbnail Database Analyzer
  This analyzer reads Picasa *.db file and displays its content with stored data include image preview.
  
• FastStone Viewer Thumbnail Database Analyzer
  This analyzer reads fsviewer.db file and displays its content with stored data include image preview.
  
• HP Digital Imaging Thumbnail Database Analyzer
  This analyzer reads *.db or *.dat file and displays its content with stored data include image preview.
  
• Prefetch Analyzer
  It reads files stored usually in Prefetch folder and diggs out stored informaton.
  
• Shortcut Analyzer
  This tool reads all shortcut files in specified folder and displays data stored in them.
  
• Index.DAT Analyzer
  This analyzer reads specified Index.Dat file and displays its content. Index.Dat files store usually data of Internet Explorer cookies, temporary files or history.
  
• Recycle Bin Analyzer
  This analyzer decodes and displays Info2 files that hold WinXP recycle bin content information or $I files holding Vista and above recycle bin information.
  

 WFA Guidance by Allan S. Hay