Alternate Data Stream Gibberish Topic is solved
Posted: 11 Jun 2018, 10:06
Hi!
I started scripting in PowerShell to handle Alternate Data Streams (ADS) natively. Using the Cmdlets to add, get and clear the streams works nicely. What not works very well is to read the NTFS file property streams who previously was written by the IPropertyStorage.WriteMultiple COM interface with PowerShell cmdlets. For example I get gibberish when reading this:
I do wonder if anyone might have any ideas on how to get readable results? Applying PS output encoding does not work. The IPropertyStorage interface cannot be scrapped before its possible to read the NTSF file property it has written on thousands of recordings.
I started scripting in PowerShell to handle Alternate Data Streams (ADS) natively. Using the Cmdlets to add, get and clear the streams works nicely. What not works very well is to read the NTFS file property streams who previously was written by the IPropertyStorage.WriteMultiple COM interface with PowerShell cmdlets. For example I get gibberish when reading this:
Code: Select all
PS C:\Users> $file = 'F:\Ny mapp\20180116_20-59-02_Discovery Channel_Gold Rush Alaska - S08E03 - “Busted And Bushfixed”.ts'
Get-Content -Path $file -Stream SummaryInformation
Ȁ鿲累栐ꮑࠀ⬧동Ā 鿲累栐ꮑࠀ⬧동 ࠃ ࠀ Ā 䠀 倀 ̀ 堀 ꀀ Ȁ Ⰲ Ѐ 堂 Ԁ 簂 ऀ Ȁ 뀄 ጀ ᴄ ἀ 匀 㠀䔀 ㌀ ⴀ ᰠ䈀甀猀琀攀搀 䄀渀搀 䈀甀猀栀昀椀砀攀搀ᴠ ἀ 숀 䘀爀 愀琀琀 欀甀渀渀愀 氀攀瘀攀爀攀爀愀 猀琀漀爀愀 琀爀愀渀猀瀀漀爀琀攀爀 最甀氀搀 戀攀栀瘀攀爀ꀀ最爀瘀愀爀渀愀 栀氀氀愀 椀最渀最
猀椀渀 甀琀爀甀猀琀渀椀渀最⸀ 伀挀栀 猀 猀攀爀 最甀氀搀最爀瘀愀爀渀愀 琀椀氀氀戀愀欀愀 瀀 猀椀渀愀 瘀爀猀琀愀ꀀ洀椀猀猀搀攀渀 漀挀栀 洀攀猀琀 栀攀爀漀椀猀欀愀 椀渀猀愀琀猀攀爀⠀渀⤀ഀ䜀攀渀爀攀㨀 猀攀爀椀攀ഀ ἀ ሀ 䜀漀氀搀 刀甀猀栀㨀 䄀氀愀猀欀愀 ἀ 䐀嘀䈀嘀椀攀眀攀爀 倀爀漀 ἀ ⼀ 䐀愀琀攀㨀 㘀⸀ ⸀㈀ 㠀
㈀㨀 㨀 ⴀ 䐀甀爀愀琀椀漀渀㨀 㨀 㨀 ἀ ഀ 䌀漀渀琀攀渀琀䤀䐀㨀