msiecfexport1

Usage

Overview

msiecfexport is a utility to export items stored in a MSIE Cache File (index.dat)

msiecfexport is part of the libmsiecf package. libmsiecf is a library to access the MSIE Cache File (index.dat) format

source is the source file.

The options are as follows:

-c codepage

specify the codepage of ASCII strings, options: ascii, windows-874, windows-932, windows-936, windows-949, windows-950, windows-1250, windows-1251, windows-1252 (default), windows-1253, windows-1254, windows-1255, windows-1256, windows-1257 or windows-1258

-h

shows this help

-l logfile

specify the file in which to log information about the exported items

-m mode

specify the export mode, option: all, items (default), recovered 'all' exports the (allocated) items and recovered items, 'items' exports the (allocated) items and 'recovered' exports the recovered items

-t target

specify the target directory to export to (default is the source filename followed by .export)

-v

verbose output to stderr

-V

print version

Environment

None

Files

None

Examples

# msiecfexport index.dat
msiecfexport 20111030
Opening file.
Exporting items.
Number of items: 42.
Record type		: URL
Offset range		: 20480 - 20736 (256)
Location		: Cookie:[email protected]/
Primary time		: Mar 23, 2009 17:23:01.515000
Secondary time		: Nov 29, 2007 11:23:44.906000
Filename		: username@domain[1].txt
Cache directory index	: -2 (0xfe)
...

Exporting recovered items. Number of recovered items: 0.

Export completed.

Diagnostics

Errors, verbose and debug output are printed to stderr when verbose output -v is enabled. Verbose and debug output are only printed when enabled at compilation.