MiTeC Windows File Analayzer MiTeC
winget install --id=MiTeC.WindowsFileAnalyzer -e
This application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis. Every analysis results can be printed in user-friendly form. It's designed in Multiple Document Interface. Here are described individual analyzers: - This analyzer reads Thumbs.db file and displays its content with stored data include image preview. - This analyzer reads ACDSee *.fpt file and displays its content with stored data include image preview. - This analyzer reads Picasa *.db file and displays its content with stored data include image preview. - This analyzer reads fsviewer.db file and displays its content with stored data include image preview. - This analyzer reads *.db or *.dat file and displays its content with stored data include image preview. - It reads files stored usually in Prefetch folder and diggs out stored informaton. - This tool reads all shortcut files in specified folder and displays data stored in them. - This analyzer reads specified Index.Dat file and displays its content. Index.Dat files store usually data of Internet Explorer cookies, temporary files or history. - This analyzer decodes and displays Info2 files that hold WinXP recycle bin content information or $I files holding Vista and above recycle bin information. Free to use for private, educational and non-commercial purposes. For other usage you should buy commercial license.
MiTeC Windows File Analyzer is a forensic file analysis tool designed to decode and analyze special files used by the Windows operating system, revealing valuable information for investigative purposes.
Key Features:
- Analyzes Thumbs.db files to extract image previews and stored data.
- Decodes ACDSee .fpt, Picasa .db, and FastStone Viewer .db files to display thumbnails and metadata.
- Examines Prefetch files to uncover system activity history.
- Reads shortcut files in specified folders to reveal stored information.
- Analyzes Index.Dat files to extract details about Internet Explorer cookies, temporary files, or browsing history.
- Decodes Info2 files from Windows XP recycle bins and $I files from Vista and later systems to retrieve deleted file information.