Windows File Analyzer
Tool for forensic file analysis
Overview  
Donation
Please help to keep improving and developing of this freeware tool and consider Your donation. Thank You.

Description

This application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis.
Every analysis results can be printed in user-friendly form.
It's designed in Multiple Document Interface.

Here are described individual analyzers:

  • Windows XP Thumbnail Database Analyzer
    This analyzer reads Thumbs.db file and displays its content with stored data include image preview.
  • ACDSee Thumbnail Database Analyzer
    This analyzer reads ACDSee *.fpt file and displays its content with stored data include image preview.
  • Google Picasa Thumbnail Database Analyzer
    This analyzer reads Picasa *.db file and displays its content with stored data include image preview.
  • FastStone Viewer Thumbnail Database Analyzer
    This analyzer reads fsviewer.db file and displays its content with stored data include image preview.
  • HP Digital Imaging Thumbnail Database Analyzer
    This analyzer reads *.db or *.dat file and displays its content with stored data include image preview.
  • Prefetch Analyzer
    It reads files stored usually in Prefetch folder and diggs out stored informaton.
  • Shortcut Analyzer
    This tool reads all shortcut files in specified folder and displays data stored in them.
  • Index.DAT Analyzer
    This analyzer reads specified Index.Dat file and displays its content. Index.Dat files store usually data of Internet Explorer cookies, temporary files or history.
  • Recycle Bin Analyzer
    This analyzer decodes and displays Info2 files that hold recycle bin content information.
Here you can download  WFA Guidance by Allan S. Hay
Screenshots
Target platforms
Windows 2000
Windows XP
Windows 2003
Windows Vista
Windows 7
Windows Server 2008
Windows Server 2008 R2
Licence
Free to use for both private and commercial users.