Windows System File Analysis
Windows File Analyzer is a file analysis software that can be used to analyze various system specific files. The portable software can be executed from any location on the hard drive and is compatible with all Windows operating systems from Windows 95 to Windows Vista. It requires knowledge of the location of those system files to perform the file analysis and display the results for forensic analysis.
The main interface of Windows File Analyzer is driven by five buttons on the top toolbar that each open up a file browser window. The software can be used to analyze the following five files: index.dat, prefetch, thumbs.db , shortcuts and recycle bins. Not every Windows system makes use of all of those files as some features like the thumbnail generation can be deactivated which in turn means that the files holding the data are not generated at all or filled with data.
Windows File Analyzer will analyze the contents of the selected file and display the results in a table. The table will contain various information depending on the file that has been analyzed. Analyzing a thumbs.db file will for example display all the thumbnails that it contains while the analysis of the prefetch data will display information about the applications that are prefetched, the time the entry has been created and last used on the computer system.
Windows File Analyzer combines various tools that can be used to analyse a computer system and reveal information about its users. Multiple file analysis' can be open at the same time. Each report can be printed in user friendly form for further analysis. Some knowledge is required to start a file analysis which might require research on the Internet to find out where the files that can be analyses are located on the computer system.
Update: The program is also compatible with recent versions of Windows including Windows 7, Windows 8 and the server versions of the operating system.Advertisement