How to analyse bitm...
 
Notifications
Clear all

How to analyse bitmap files on HxD Editor?

9 Posts
4 Users
0 Likes
2,162 Views
(@dougie1809)
Posts: 17
Active Member
Topic starter
 

I created a .bmp image file on MSPaint and saved the image file to my pen drive. Then on the HxD Editor, I can then navigate to my pen drive, but the problem is, I can not find any contents of the .bmp image file?
I can view any of the contents of text files, but not image files.
Thanks

 
Posted : 02/04/2011 4:32 pm
(@miket065)
Posts: 187
Estimable Member
 

Does the file show up in Window's explorer?

 
Posted : 02/04/2011 5:17 pm
(@dougie1809)
Posts: 17
Active Member
Topic starter
 

Yes its on my pen drive. I havn't deleted the file or anything, I just want to view it's contents on Hex editor

 
Posted : 02/04/2011 5:25 pm
(@athulin)
Posts: 1156
Noble Member
 

Then on the HxD Editor, I can then navigate to my pen drive, but the problem is, I can not find any contents of the .bmp image file?
I can view any of the contents of text files, but not image files.

Let me see you start HxD, open the file that you created on the pen drive, but you don't find any contents? Is that right?

How did you create the .BMP file? What size is it? can you copy the file off the pen drive, and look at it with HxD?

What version HxD? MSPaint? What operating system are you using?

 
Posted : 02/04/2011 5:31 pm
(@mscotgrove)
Posts: 938
Prominent Member
 

It sounds as if the file is zero length.

A BMP file starts with 0x36 byte header, and then is just bit map of each pixel - starting at the bottom of the picture.

http//en.wikipedia.org/wiki/BMP_file_format

Pixels are often 3 bytes long for a colour image.

Any hex editor will show data if the file is longer than 0 bytes

 
Posted : 02/04/2011 5:39 pm
(@dougie1809)
Posts: 17
Active Member
Topic starter
 

Sorry, my apologies, let me re-phrase. I can view the contents of the .bmp file itself on Hex edit, but when I try view the contents of the file on my pen drive in Hex edit, I cant. Plus in only new on analysing boot sectors of hard disk etc.
So im really looking on what offset and sector the file os located, thanks.

I created the file with Paint, and saved it as file type (.bmp)
Size of .bmp file is 130kb
OS Windows 7

 
Posted : 02/04/2011 5:48 pm
(@miket065)
Posts: 187
Estimable Member
 

I can view the contents of the .bmp file itself on Hex edit, but when I try view the contents of the file on my pen drive in Hex edit, I cant.

I'm not sure what you are saying here. I think you are saying that you can load the file in HxD and see it fine, but when you "open disk" in HxD you can't find the file. Is that correct?

If so, when you "open disk", search for the bitmap file signature (hx 42 4D). Assuming you had a clean pendrive, the signature will be the start of the bmp file data.

The other problem may be Win 7. I don't think HxD will let you open a disk in Win7 unless you right click on the executable and select "Run as Administrator" (Even if you are logged in under an admin account).

Hope that helps…

 
Posted : 02/04/2011 6:23 pm
(@dougie1809)
Posts: 17
Active Member
Topic starter
 

Yes that is correct.
See I think thats the problem. I only have that one .bmp file on the pen drive, but god know how many image files I ever had on the pen drive, (I had this pen drive over a year now). So would that be one of the problems on trying to view a specific .bmp file?

In general how does any image file contents look like?

 
Posted : 02/04/2011 6:38 pm
(@mscotgrove)
Posts: 938
Prominent Member
 

In general how does any image file contents look like?

1) Look at the link I gave you for BMP files

2) Discover how to use disk analysis tools to locate your file

 
Posted : 02/04/2011 8:19 pm
Share: