---
name: "vinetto"
section: "1"
platform: "linux"
package: "vinetto"
version: "1:0.8.0-5"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/vinetto"
---

# vinetto(1)

extract thumbnails and associated metadata from Thumbs.db files

## NAME

**vinetto** - extract thumbnails and associated metadata from Thumbs.db files

## SYNOPSIS

```
     vinetto [OPTION] [-o DIR] file
```

## DESCRIPTION

**vinetto extracts the thumbnails and associated metadata from the Thumbs.db files.**

**The MS Windows systems (98, ME, 2000, XP and 2003 Server) can store thumbnails and metadata of the picture files** **contained in directories. The thumbnails and associated metadata are stored in Thumbs.db files (that are undocumented** **OLE structured files). Once a picture** *file* **has been deleted from the filesystem, the related thumbnail and associated** **metadata remain stored in the Thumbs.db file. So, the data contained in Thumbs.db files are a helpful source of** **information for the forensics investigators.**

**vinetto will help \*nix-based forensics investigators to:**

- •

  **easily preview thumbnails of deleted pictures on Windows systems;**

- •

  **obtain information (dates, path, ...) about these deleted pictures.**

## OPTIONS

- **--version**

  **Show program's version number and exit.**

- **-h, --help**

  **Show help message and exit.**

- **-o *DIR***

  **Write thumbnails to** *DIR*

- **-H**

  **Write html report to** *DIR* **(requires option -o)**

- **-U**

  **Use utf8 encodings.**

- **-s**

  **Create symlink of the picture realname to the numbered name in** *DIR***/.thumbs. (requires option -o)** **NOTE: A Catalog containing the realname must exist for this** **option to produce results**

## EXAMPLES

**Display metadata contained within a Thumbs.db** *file***:**

```
    $ vinetto /path/to/Thumbs.db
```

**Extract the related thumbnails to a directory:**

```
    $ vinetto -o /tmp/vinetto_output /path/to/Thumbs.db
```

**Extract the related thumbnails to a directory and produce a HTML report to preview these thumbnails through your favorite browser:**

```
    $ vinetto -Ho /tmp/vinetto_output /path/to/Thumbs.db
```

**Get a metadata report on all non deleted Thumbs.db files contained within a partition:**

```
    $ find /mnt/sda2 -iname thumbs.db -printf "\n==\n %p \n\n" -exec vinetto {} \; 2>/tmp/vinetto_err.log >/tmp/vinetto_sda2.txt
```

## TIP

**vinetto can generate its results in hidden directories, as .thumbs.**

## BUGS

**MS Windows stores thumbnails in its Thumbs.db files, according to various formats. At present, vinetto does not produce an** **excellent reconstruction of Type 1a thumbnails. See more details and examples here\[1\].**

**\[1\] http://vinetto.sf.net/docs.html**

**In 0.07 version, vinetto can crash when used without '-o' option. If this command crashes:**

```
    $ vinetto /path/to/Thumbs.db
```

**Please, try this:**

```
    $ vinetto -o . /path/to/Thumbs.db
```

**It will show metadata and extract the thumbs (maybe an undesirable result). But it won't crash.**

## AUTHOR

**vinetto was written by Michel Roukine \<rukin@users.sf.net\>.**

**This manual page was written by Danny van der Meeren \<danny@illogic.nl\> and updated by Joao Eriberto Mota Filho \<eriberto@debian.org\>** **and Giovani Augusto Ferreira \<giovani@debian.org\> for Debian project (but may be used by others).**