Windows Forensics

Shortcuts, deleted-file metadata, and thumbnail caches — artifacts Windows leaves behind without you asking it to.

Windows Shortcut (.lnk) Viewer

See a shortcut's target, arguments and icon.

Recycle Bin $I Viewer

See a deleted file's original path and deletion time.

Thumbs.db Viewer

Extract cached thumbnail images and their filenames.

Sponsored — professional tools Ad space reserved — no network connected yet

← Back to File Tools