FileAlyzer is a free forensic file analysis tool developed by Safer-Networking to help users understand the inner workings of files. It provides detailed insights into file structures, aiding in the identification of potential threats and the analysis of file contents.
Key Features:
- Anomalies Detection: Identifies unusual patterns or behaviors within files that may indicate malicious activity.
- External Classification Sources: Integrates with external databases to provide additional context and classification information about files.
- File Bitmaps: Offers visual content comparison to detect differences and similarities between files.
- General File Properties: Displays essential file information such as names, attributes, hashes, and creation dates.
- Hashes Generation: Calculates a wide range of standard and rare file checksums and hashes for verification purposes.
- Hex Viewer: Includes a standard hex viewer with string search and markup features for in-depth analysis.
- OpenSBI Support: Supports the generation of OpenSBI advanced file parameters, assisting in the creation of optimized malware file signatures.
- VirusTotal Lookup: Allows users to check files against the VirusTotal database to identify known threats.
Supported Formats:
FileAlyzer can analyze a variety of file types, including:
- Android Apps: APK files
- iOS Apps: IPA files
- Archives: ZIP, RAR, and other compressed formats
- Databases: Various database file formats
- Delphi Code Map: Delphi source code files
- EXIF: Exchangeable image file format metadata
- HTML: HyperText Markup Language files
- Images: Various image file formats
- InCtrl5 Logs: Logs from the InCtrl5 system monitoring tool
- INI Files: Initialization files
- Media Tags: Metadata in media files
- Text Files: Plain text files
- ELF Header and Sections: Executable and Linkable Format files for Unix/Linux
- Alternate Data Streams: Hidden data streams in NTFS file systems
- Authenticode Signatures: Digital signatures in files
- MZ Header and Sections: Headers and sections in Windows executable files
- OS Compatibility: Information about compatibility with various Windows versions
- PE Disassembler: Disassembly of Portable Executable files
- PE Exports and Imports: Analysis of exports and imports in PE files
- PE Resources and Sections: Examination of resources and sections in PE files
- PEiD (Packers, Cryptors, and Compilers): Identification of packers, cryptors, and compilers used in PE files
- Prefetch Files: Analysis of Windows prefetch files
- Scheduled Tasks: Examination of scheduled tasks in Windows
- Security Attributes: Displays security attributes of files
- Spybot File Scan: Integration with Spybot’s file scanning capabilities
- UPX Details: Information about UPX-packed files
By utilizing FileAlyzer, users can gain a deeper understanding of file structures and contents, facilitating the detection of anomalies and potential threats. This tool is particularly useful for cybersecurity professionals and enthusiasts interested in forensic file analysis.
