Ace Your Exams with Our Notes and Mock Tests!

EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)
Module 6 : Windows Forensics
Questions available : 94		You are not logged in. Please Login for track your learning progress

Q. No: 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 |
		Go to Question No.

Question No 41

---

If you want to share the link of this question, please click here to "Copy Question Link" and share that generated link. Link from URL may change in future.

 

---

Bookmark this Question		QID: 394
Which of the following tools can be used to parse the contents of .lnk files to reveal information embedded within the files?
A:    Windows File Analyzer
B:    ProDiscover
C:    Exiv2
D:    IrfanView
Explanation: This application decodes and analyzes some special files used by Windows OS. In these files is interesting information for forensic analysis. Here are described individual analyzers: Windows XP Thumbnail Database Analyzer: This analyzer reads Thumbs.db file and displays its content with stored data include image preview. ACDSee Thumbnail Database Analyzer: This analyzer reads ACDSee *.fpt file and displays its content with stored data include image preview. Google Picasa Thumbnail Database Analyzer: This analyzer reads Picasa *.db file and displays its content with stored data include image preview. FastStone Viewer Thumbnail Database Analyzer: This analyzer reads fsviewer.db file and displays its content with stored data include image preview. HP Digital Imaging Thumbnail Database Analyzer: This analyzer reads *.db or *.dat file and displays its content with stored data include image preview. Prefetch Analyzer: It reads files stored usually in Prefetch folder and diggs out stored informaton. Shortcut Analyzer: This tool reads all shortcut files in specified folder and displays data stored in them. Index.DAT Analyzer : This analyzer reads specified Index.Dat file and displays its content. Index.Dat files store usually data of Internet Explorer cookies, temporary files or history. Recycle Bin Analyzer : This analyzer decodes and displays Info2 files that hold WinXP recycle bin content information or $I files holding Vista and above recycle bin information.

Diffence opinion in Correct Answer or any comment?
Vote / Comment for correct Answer

Voting and comment option is available only for Logged in Users.
Please Login

Chosen Answer: A    B    C    D

Comment on this Answer:

Nickname to be shown:

Comunity Comments:

Banwari on 16/05/2025
Opted Answer: A

Windows File Analyzer is a forensic tool designed to decode and analyze special files used by Windows OS.

Thumbnail Database Analysis: Reads and displays stored image previews from databases like Thumbs.db, ACDSee *.fpt, and Picasa *.db.

Prefetch File Analysis: Extracts execution history from Windows Prefetch files.

Shortcut File Analysis: Parses .lnk files to reveal embedded metadata.

Index.dat Analysis: Retrieves browsing history and temporary file records from Internet Explorer.

Recycle Bin Analysis: Decodes Info2 and $I files to recover deleted file details.

0	0			Reply / response option is available only for Logged in Users. Please Login.    Registration is free!!
Your Comment / Reply Nickname to be shown
Reason for Report

Go to Modules