Windows File Analyzer
Tool for forensic file analysis
Overview
Donation
Please help to keep improving and developing of this freeware tool and consider Your donation. Thank You.

Description

This application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis.
Every analysis results can be printed in user-friendly form.
It's designed in Multiple Document Interface.

Here are described individual analyzers:

  • Windows XP Thumbnail Database Analyzer
    This analyzer reads Thumbs.db file and displays its content with stored data include image preview.
  • ACDSee Thumbnail Database Analyzer
    This analyzer reads ACDSee *.fpt file and displays its content with stored data include image preview.
  • Google Picasa Thumbnail Database Analyzer
    This analyzer reads Picasa *.db file and displays its content with stored data include image preview.
  • FastStone Viewer Thumbnail Database Analyzer
    This analyzer reads fsviewer.db file and displays its content with stored data include image preview.
  • HP Digital Imaging Thumbnail Database Analyzer
    This analyzer reads *.db or *.dat file and displays its content with stored data include image preview.
  • Prefetch Analyzer
    It reads files stored usually in Prefetch folder and diggs out stored informaton.
  • Shortcut Analyzer
    This tool reads all shortcut files in specified folder and displays data stored in them.
  • Index.DAT Analyzer
    This analyzer reads specified Index.Dat file and displays its content. Index.Dat files store usually data of Internet Explorer cookies, temporary files or history.
  • Recycle Bin Analyzer
    This analyzer decodes and displays Info2 files that hold WinXP recycle bin content information or $I files holding Vista and above recycle bin information.
Here you can download  WFA Guidance by Allan S. Hay
Screenshots
Target platforms
Windows XP
Windows 2003
Windows Vista
Windows 7
Windows Server 2008
Windows 8
Windows 8.1
Windows Server 2012
Windows Server 2012 R2
Windows 10
Windows Server 2016
Licence
Free to use for both private and commercial users.