Blackberry Thumbs.d...
 
Notifications
Clear all

Blackberry Thumbs.dat file?

7 Posts
2 Users
0 Reactions
2,893 Views
(@forensicakb)
Reputable Member
Joined: 16 years ago
Posts: 316
Topic starter  

Has anyone come up with a way to parse the blackberry thumbs.dat file for .PNG files?

Maybe a small executable, or a stand alone piece which helps the process

Header 89 50 4E 47 0D 0A 1A 0A

I am not a scalpel user.

Appreciate everyone's help.


   
Quote
 ixam
(@ixam)
Eminent Member
Joined: 15 years ago
Posts: 21
 

Its fairly straight forward, I have something but its built into a larger application which I cant give you I'm afraid…. (well not for free anyway ) )

PNG files have the header you mentioned, and footer of 49 45 4E 44 AE 42 60 82
so if you have a hex viewer (like winhex) open the thumbs file, and you can manually find headers and footers and copy out the bytes into a new file.

There are lots of free apps out there that will do this as well, try this free command line tool
http//mark0.net/soft-bitmaprip-e.html

You will have to check the files though, as not all blackberry thumbs files contain png. For example the thumbs file in a music directory will contain a list of file names and some basic details…


   
ReplyQuote
(@forensicakb)
Reputable Member
Joined: 16 years ago
Posts: 316
Topic starter  

Thanks for your reply, but as I stated I'm not really a scalpel user, so a command line tool would not help me much in this situation.

As far as free tools, I have not been able to find any. I try to look first before bothering other members. All I found was the header and footer information and then off I went to manually cut out.


   
ReplyQuote
 ixam
(@ixam)
Eminent Member
Joined: 15 years ago
Posts: 21
 

No scalpel knowledge is required for the application I posted, just some command line knowledge.

To use the tool, you just open the command line prompt and type the command "bitmaprip" (with no quotes)
followed by the thumbs.dat file you want to process.
Example

bitmaprip c\casedata\bbthhumbs.dat

bitmaprip then processes the file you have typed in and outputs all the png files within it (I tested it before posting my previous comment and it worked fine for me)

If you decide to give it a go and want any help setting the program up feel free to ask me further questions via pm or by replying to this post.
Please note I have nothing to do with bitmaprip, I just came across it today and it seems like it does what you require….


   
ReplyQuote
(@forensicakb)
Reputable Member
Joined: 16 years ago
Posts: 316
Topic starter  

-) I am pleased, thank you for your help.

Will give it a go and see what happens.

No scalpel knowledge is required for the application I posted, just some command line knowledge.

To use the tool, you just open the command line prompt and type the command "bitmaprip" (with no quotes)
followed by the thumbs.dat file you want to process.
Example

bitmaprip c\casedata\bbthhumbs.dat

bitmaprip then processes the file you have typed in and outputs all the png files within it (I tested it before posting my previous comment and it worked fine for me)

If you decide to give it a go and want any help setting the program up feel free to ask me further questions via pm or by replying to this post.
Please note I have nothing to do with bitmaprip, I just came across it today and it seems like it does what you require….


   
ReplyQuote
(@forensicakb)
Reputable Member
Joined: 16 years ago
Posts: 316
Topic starter  

BTW nice example of what to do. I think more would be learned on the site if people didn't just say it would be really easy to do something, but rather do what you did and show what the example is.

A few small modifications and it worked just fine.

Thanks.

No scalpel knowledge is required for the application I posted, just some command line knowledge.

To use the tool, you just open the command line prompt and type the command "bitmaprip" (with no quotes)
followed by the thumbs.dat file you want to process.
Example

bitmaprip c\casedata\bbthhumbs.dat

bitmaprip then processes the file you have typed in and outputs all the png files within it (I tested it before posting my previous comment and it worked fine for me)

If you decide to give it a go and want any help setting the program up feel free to ask me further questions via pm or by replying to this post.
Please note I have nothing to do with bitmaprip, I just came across it today and it seems like it does what you require….


   
ReplyQuote
 ixam
(@ixam)
Eminent Member
Joined: 15 years ago
Posts: 21
 

Glad you got it working, and happy to help


   
ReplyQuote
Share: