±Forensic Focus Partners

±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 0
New Yesterday: 6
Overall: 27213
Visitors: 61

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

PCM.db

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

PCM.db

Post Posted: Mon Nov 23, 2009 10:03 am

Somebody knows what application creates PCM.db files?  

DecAnisimov
Member
 
 
  

Re: PCM.db

Post Posted: Mon Nov 23, 2009 10:07 am

Which OS are you working with?  

keydet89
Senior Member
 
 
  

Re: PCM.db

Post Posted: Mon Nov 23, 2009 10:35 am

I develop the program for forencis experts. One of users of this program has send to me PCM.db file that I would add decoding of this type of files in the program. This file is thumbnail cache. I have found many PCM.db files in the Internet. On the basis of them I have made the decoding of format, but I do not know till now what program creates these files. I think that it is the Windows-application.  

DecAnisimov
Member
 
 
  

Re: PCM.db

Post Posted: Mon Nov 23, 2009 10:40 am

if they are .db files then they are normally cached thumbnails of images from within a folder - created when a specific windows view is used (i.e. image view).  

fuzed
Senior Member
 
 
  

Re: PCM.db

Post Posted: Mon Nov 23, 2009 10:50 am

- DecAnisimov
On the basis of them I have made the decoding of format, but I do not know till now what program creates these files. I think that it is the Windows-application.


Go to an image you're analyzing and look at the file associations in the Registry. Also check the user profile RecentDocs key to see if any users have specifically opened these files...these may tell you which application is associated with the file type.  

keydet89
Senior Member
 
 
  

Re: PCM.db

Post Posted: Mon Nov 23, 2009 10:55 am

- keydet89
Go to an image you're analyzing and look at the file associations in the Registry. Also check the user profile RecentDocs key to see if any users have specifically opened these files...these may tell you which application is associated with the file type.
Unfortunately, I do not have access to a hard disk on which there was this file.  

DecAnisimov
Member
 
 
  

Re: PCM.db

Post Posted: Mon Nov 23, 2009 10:58 am

- DecAnisimov
Unfortunately, I do not have access to a hard disk on which there was this file.


Can you go back and ask the user?  

keydet89
Senior Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 1 of 2
Go to page 1, 2  Next