Windows File Analyzer
Tool for forensic file analysis
Overview
Description

This application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis.
Every analysis results can be printed in user-friendly form.
It's designed in Multiple Document Interface.

Here are described individual analyzers:

  • Windows XP Thumbnail Database Analyzer
    This analyzer reads Thumbs.db file and displays its content with stored data include image preview.
  • ACDSee Thumbnail Database Analyzer
    This analyzer reads ACDSee *.fpt file and displays its content with stored data include image preview.
  • Google Picasa Thumbnail Database Analyzer
    This analyzer reads Picasa *.db file and displays its content with stored data include image preview.
  • FastStone Viewer Thumbnail Database Analyzer
    This analyzer reads fsviewer.db file and displays its content with stored data include image preview.
  • HP Digital Imaging Thumbnail Database Analyzer
    This analyzer reads *.db or *.dat file and displays its content with stored data include image preview.
  • Prefetch Analyzer
    It reads files stored usually in Prefetch folder and diggs out stored informaton.
  • Shortcut Analyzer
    This tool reads all shortcut files in specified folder and displays data stored in them.
  • Index.DAT Analyzer
    This analyzer reads specified Index.Dat file and displays its content. Index.Dat files store usually data of Internet Explorer cookies, temporary files or history.
  • Recycle Bin Analyzer
    This analyzer decodes and displays Info2 files that hold WinXP recycle bin content information or $I files holding Vista and above recycle bin information.
Here you can download  WFA Guidance by Allan S. Hay

Screenshots

OS compatibility
Windows XP
Windows 2003
Windows Vista
Windows 7
Windows Server 2008
Windows 8
Windows 8.1
Windows Server 2012
Windows Server 2012 R2
Windows 10
Windows Server 2016
Windows Server 2019
Pricing

ALL LICENSES ARE LIFETIME. REGISTERED USERS WILL RECEIVE ALL FUTURE UPDATES FOR FREE.

License
Free to use for private, educational and non-commercial purposes.
For other usage you should buy commercial license.
Version History