MiTeC.WindowsFileAnalyzerThis application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis.
$ winget install --id MiTeC.WindowsFileAnalyzer --exact --version 2.10.0Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
For Intune admins
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph — no manual repackaging, no chasing vendor sites.
See Pckgr's app libraryThis application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis.
Every analysis results can be printed in user-friendly form.
It's designed in Multiple Document Interface.
Here are described individual analyzers:
- This analyzer reads Thumbs.db file and displays its content with stored data include image preview.
- This analyzer reads ACDSee *.fpt file and displays its content with stored data include image preview.
- This analyzer reads Picasa *.db file and displays its content with stored data include image preview.
- This analyzer reads fsviewer.db file and displays its content with stored data include image preview.
- This analyzer reads *.db or *.dat file and displays its content with stored data include image preview.
- It reads files stored usually in Prefetch folder and diggs out stored informaton.
- This tool reads all shortcut files in specified folder and displays data stored in them.
- This analyzer reads specified Index.Dat file and displays its content. Index.Dat files store usually data of Internet Explorer cookies, temporary files or history.
- This analyzer decodes and displays Info2 files that hold WinXP recycle bin content information or $I files holding Vista and above recycle bin information.
Free to use for private, educational and non-commercial purposes. For other usage you should buy commercial license.
| Architecture | Type | Scope | Install | Download |
|---|---|---|---|---|
| x86 | zip | - | Direct |
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.