Jump to content











Submitter

SUPPORT TOPIC File Information

  • Submitted: May 26 2013 02:31 PM
  • Last Updated: Dec 04 2015 08:19 PM
  • File Size: 297.82KB
  • Views: 4717
  • Downloads: 4005

Download Extents 1.0.0.2

- - - - -
file copy in use



Screenshots
This is a simple GUI to FSCTL_GET_RETRIEVAL_POINTERS .

The idea is to read all clusters belonging to file, then map these clusters on the logical drive where this file is located, and from there re assemble all clusters and save them to a new destination file.

Thanks to this method, one can save/copy a file which is in use since we "raw" read clusters from a logical drive.

This has been tested with success on \boot\bcd and \windows\system32\config\sam .
Files which you cannot copy in a normal mode.

zip file contains source file next to the binary.

Regards,
Erwan

What's New in Version 1.0.0.2 (See full changelog)

  • 1.0.0.1 : display location of file clusters
  • 1.0.0.2 : add command line
  • extents -details x:\any.file
  • extents -backup x:\source.file x:\destination.file






  • 374 Total Files
  • 13 Total Categories
  • 89 Total Authors
  • 5095160 Total Downloads
  • Discalot Latest File
  • ReTokener Latest Submitter

26 user(s) are online (in the past 3000 minutes)

0 members, 24 guests, 0 anonymous users


Google (2)