SLAMorris Final Thesis After Corrections.pdf - Cranfield University

Figure 5-4: A figure showing the thumbnail cache subrecords which make up the
complete record for the file z2nxaujt.jpg
The thumbnail cache stores records; a record can be defined as a complete set
of data relating to an original file. In the case of Ubuntu and Kubuntu, a
thumbnail cache record can be defined as the set of files located in .thumbnails
or any of its subdirectories which have the same filename and extension as
each other. A subrecord for these thumbnail caches can be defined as a single
file stored in the thumbnail cache. These files are stored in PNG format and can
contain metadata about an original file and a visual thumbnail.
If a file existed at the path “file:///home/slam/Pictures/z2nxaujt.png”, and had a
visual thumbnail stored in both the large and normal sub-directories, the record
for the original file would look like Figure 5.4.In the example the record consists
of two subrecords; the subrecords form a complete record of thumbnail cache
information about the source file.
The following piece of hexadecimal is taken from offset 0x08219C020; it is part
of a directory listing for the normal sub-directory. The directory contains both
standard and incomplete subrecords. An incomplete subrecord is one which is
in the process of being completed and therefore information may be missing;
Page 70