Jump to content











Submitter

SUPPORT TOPIC File Information

  • Submitted: May 26 2013 02:31 PM
  • Last Updated: Mar 24 2019 02:41 PM
  • File Size: 588.66KB
  • Views: 10318
  • Downloads: 9838

Download Extents 1.0.0.2

- - - - -
file copy in use



Screenshots
This is a simple GUI to FSCTL_GET_RETRIEVAL_POINTERS .

The idea is to read all clusters belonging to file, then map these clusters on the logical drive where this file is located, and from there re assemble all clusters and save them to a new destination file.

Thanks to this method, one can save/copy a file which is in use since we "raw" read clusters from a logical drive.

This has been tested with success on \boot\bcd and \windows\system32\config\sam .
Files which you cannot copy in a normal mode.

zip file contains source file next to the binary.

Regards,
Erwan

What's New in Version 1.0.0.2 (See full changelog)

  • 1.0.0.1 : display location of file clusters
  • 1.0.0.2 : add command line
  • extents -details x:\any.file
  • extents -backup x:\source.file x:\destination.file






  • 430 Total Files
  • 13 Total Categories
  • 92 Total Authors
  • 6808080 Total Downloads
  • Shell Latest File
  • Mahmoud Latest Submitter

109 user(s) are online (in the past 3000 minutes)

0 members, 109 guests, 0 anonymous users