Jump to content











Submitter

SUPPORT TOPIC File Information

  • Submitted: May 26 2013 02:31 PM
  • Last Updated: Dec 04 2015 08:19 PM
  • File Size: 297.82KB
  • Views: 4903
  • Downloads: 4406

Download Extents 1.0.0.2

- - - - -
file copy in use



Screenshots
This is a simple GUI to FSCTL_GET_RETRIEVAL_POINTERS .

The idea is to read all clusters belonging to file, then map these clusters on the logical drive where this file is located, and from there re assemble all clusters and save them to a new destination file.

Thanks to this method, one can save/copy a file which is in use since we "raw" read clusters from a logical drive.

This has been tested with success on \boot\bcd and \windows\system32\config\sam .
Files which you cannot copy in a normal mode.

zip file contains source file next to the binary.

Regards,
Erwan

What's New in Version 1.0.0.2 (See full changelog)

  • 1.0.0.1 : display location of file clusters
  • 1.0.0.2 : add command line
  • extents -details x:\any.file
  • extents -backup x:\source.file x:\destination.file






  • 379 Total Files
  • 13 Total Categories
  • 90 Total Authors
  • 5198673 Total Downloads
  • MistyPE Latest File
  • misty Latest Submitter

45 user(s) are online (in the past 3000 minutes)

1 members, 44 guests, 0 anonymous users


Elliot Labs