i all,
I have a MAC image and its hdd is only 8 MB so its very old.
I haven't seen the features of mac os with encase.
There are files that are non-extention and their signature is "AB CD 00 54 00 00". When i view that files in Hex view it is impossible to see anything which is significant.
Also i couldn't view them by any viewer. But there are some files in the same folder which are non-extention and it's signiture is "FE 37 00 23 00" can be viewed by notePad.
I suppose that as i mentioned before too kind of files have same structures. But one can be viewed the other can not.
Million dolar ($$) question is
Does anyone know that the difference between these files and how to view the first one.
FE 37 (from memory) is an old Word document.
Macs do no use file extensions in the way PCs do. instead they have a 8 character key as part of the directory metadata. This will give file type and the application to read the file (4 characters each)
There are files that are non-extention and their signature is "AB CD 00 54 00 00". When i view that files in Hex view it is impossible to see anything which is significant.
Does anyone know that the difference between these files and how to view the first one.
VERY basically
http//
http//
http//
There should be tools to view the APP/type associated.
That "few first bytes", not necessarily "signature" is seemingly associated to text like a "MOR3MOR2" ?
http//
Is your file the same?
jaclaz
Hi;
mscotgrove;
thank for your helpful post. You are right as i wrote ""FE 37 00 23 00" can be viewed by notePad."
jaclaz;
thanks you too. i solved my problem. i can view that "AB CD" files with The unarchiver program in MAC OS.
Thanks for all….