Windows File Analyzer

This application decodes and analyzes some special files used in Windows OS. These files contain interesting information for forensic analysis. All the analysis result can be easily printed on a form.

Here are the descriptions of each analyzer:

• analyzer for reading Thumbs.db files and displaying their contents with stored data and image preview
• reading files usually stored in the Prefetch and Digg folders
• read files in specific folders with their contents
• analyzer to read the specified index.dat files and display their contents
• another parser to decode and display info2 files that contain information about the contents of the recycle bin