Perhaps this helps.
https://
I have created an ISO file of the DVD, because it's not possible to open the disk as a "file" with HxD.
Well, whatever works for you. Next time, check up the menu Extras, particularly the 'Open disk …' entry.
I haven't found the burning date in the offset you said nor anywhere…
1. If you *are* looking at an ISO image, sector 16 is where the first Volume Descriptor appears. It may or may not be a Primary Volume Descriptor … though it very often is. The offset relates to Primary Volume Descriptor or a Supplementary Volume Descriptor, so you need to ensure that you are looking at one. Again, refer to the appropriate standards for that. (Hint, check chapter 8 in the relevant standard.)
It's usually best to do the field extraction by hand, just to ensure that you're not making any simple mistakes.
You also need to take into account that it is perfectly legitimate to leave the Volume Creation Date and Time empty. If what you have found is not all zero bytes, you are most probably looking in the wrong place,
The ISO tells me the burning program was NERO. Another person has another copy of that DVD and it has obtained more metadata from the files burned (video files, using MediaInfo). Could a copy burned using NERO lose metadata of some files?
That should appear at byte offset 9–40 in either a Primary Volume Descriptor (remember, count start at byte 1) or a Supplementary Volume Descriptor. And both of those descriptors have Volume Creation Date and Time at the already specified offset.
It depends. Is the 'copy' you refer to a forensic copy or is it just a common or garden variety? In the first case, there is no difference. In the second, anything can have happened.
Without knowing what the actual metadata *is*, there's no way of knowing. But it seems likely that it may be associated with the files rather than the ISO-9660 file system in which they are stored.
I get a very strong impression that you are a beginner at this, and possibly even a student. If you are a student, go chat with your teacher. You're likely to have missed some important lectures. If you are not, but this is an actual investigation, have a chat with your supervisor and explain that you're in over your head.
Just in case, this might be of use (even if a bit dated, it contains info in a clear, succinct way)
http//
jaclaz