Windows File Analyzer will help you decode & analyze the Thumbnail Database, Prefetch folder, Shortcuts, Index.DAT, and Recycle Bin for forensic analysis. We took it for a spin and can say for certain that it is indeed worth your time, so let’s explain. According to the developers,
“This application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis. Every analysis results can be printed in a user-friendly form.”
We like the fact that once the forensic analysis is done, the user can print the results. The good news is the results are shown in a user-friendly from where printers are concerned. Therefore, when it comes out on paper, everything should look just fine.
Windows File Analyzer
The data collected after an analysis is very useful, so let’s talk about how to use Windows File Analyzer, shall we? It will help you-
- Analyze Thumbnail Database
- Analyze Prefetch
- Analyze Shortcuts
- Analyze Index.DAT
- Analyze Recycle Bin.
1] Analyze Thumbnail Database
When it comes down to collecting data on the Thumbnail database files, the user only needs to click on File, then hover the mouse cursor over Analyze Thumbnail Database. From there, folks can choose the operating system or the supported apps to get the data required.
Now, you’ll have to know the location of the thumbnail database to get the information you need. Once that is sorted out, everything will show up on screen.
2] Analyze Prefetch
What we have here is a feature that reads all the files stored in the Prefetch folder. Simply click on File, then select Analyze Prefetch to get the job done and you’re good to go. It will dig out all the store information there for your viewing pleasure.
Bear in mind that for some machine, prefetch is disabled, so you’ll have to enable it to gain anything from the service.
3] Analyze Shortcuts
Selecting this service will open a window with a folder known as Recent Items. Select it, then hit the OK button, and from there, choose the operating system of choice and hit the OK button to get all that sweet and juicy info.
Depending on the number of shortcuts on your computer, you’ll be subjected to a long list of information. There’s no way to search through them automatically, so as it stands, you’ll have no choice but to scroll through and use your eyes.
4] Analyze Index.DAT
For those who might be unaware of what’s inside of the Index.DAT file, well, it usually stores data from Internet Explorer cookies, temporary files or history. Data from Microsoft Edge is here as well, and that’s great.
Follow the same step as above, then click on Analyze Index.DAT, and hit Open. Finally, follow these steps from us to locate Index.dat, then add it to Windows File Analyzer to gain the data you need.
5] Analyze Recycle Bin
Yes, the Recycle Bin is where all the garbage we’ve deleted is located. If you want, these garbage files can be restored to their former destinations, or be 100% removed from the system.
Again, follow the steps from above, then select Analyze Recycle Bin, and hit Open. Find the Recycle Bin file and add it to the app, for that’s the only way the data will make itself available.
It is quite a useful tool, and you can download Windows File Analyzer via the official website. It is free to use for private, educational and non-commercial purposes.
