MiTeC Windows File Analayzer MiTeC
winget install --id=MiTeC.WindowsFileAnalyzer -e
This application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis. Every analysis results can be printed in user-friendly form. It's designed in Multiple Document Interface. Here are described individual analyzers: - This analyzer reads Thumbs.db file and displays its content with stored data include image preview. - This analyzer reads ACDSee *.fpt file and displays its content with stored data include image preview. - This analyzer reads Picasa *.db file and displays its content with stored data include image preview. - This analyzer reads fsviewer.db file and displays its content with stored data include image preview. - This analyzer reads *.db or *.dat file and displays its content with stored data include image preview. - It reads files stored usually in Prefetch folder and diggs out stored informaton. - This tool reads all shortcut files in specified folder and displays data stored in them. - This analyzer reads specified Index.Dat file and displays its content. Index.Dat files store usually data of Internet Explorer cookies, temporary files or history. - This analyzer decodes and displays Info2 files that hold WinXP recycle bin content information or $I files holding Vista and above recycle bin information. Free to use for private, educational and non-commercial purposes. For other usage you should buy commercial license.