Thumbs.db and thumbcache_*.db extration/parsing

http//www.thumbnailexpert.com/binary/ThumbnailExpertEn.zip

Igor,

Does anyone know of an

open source tool

for extracting and/or parsing either of these database files? It would be especially great if it worked with unallocated space, also. We've been able to extract the images using other proprietary tools, but we're hoping to find something open source for use with a SANS SIFT VM.

Any information would be helpful, thanks in advance!

http//www.thumbnailexpert.com/binary/ThumbnailExpertEn.zip

And please link to the webpage, not the file. For those who did not scrutinize the link close enough, they hate having software automatically download. Others want information first, then they decide if they want the file.

For thumbcache files

http//code.google.com/p/thumbcache-viewer/

Works really well for me in a Windows environment.

For Thumbs.db try

http//vinetto.sourceforge.net/

I don't know if that will compile for Windows though. The output is better than a lot of proprietry tools.

Paul

Have you looked at vinetto on Sourceforge?

Just for the record
http//opensourcepack.blogspot.com/2010/05/7-zip-reveals-thumbsdb-content-for-you.html

This one is Freeware, but there is source for an earlier version
http//www.itsamples.com/thumbnail-database-viewer.html

jaclaz

Another free tool http//code.google.com/p/thumbcache-viewer/