How to find where data is stored?

Announcements, advice, random banter, unrelated discussion, et cetera.

How to find where data is stored?

Postby Zup » 2018-7-12 @ 18:18

I've got a disk that holds some data used by a program. It has a partition table and a FAT16 partition that seems empty (no files, even hidden).

I've made a disk image (using dd) before and after using that program, so I know what bytes were altered between runs. How can I know where are those bytes stored (i.e.: MBR, boot sector, between MBR and the first partition, at unused data blocks)? Is there a program that can help me find it out?

Thanks.
I have traveled across the universe and through the years to find Her.
Sometimes going all the way is just a start...

I'm selling some stuff!
User avatar
Zup
Oldbie
 
Posts: 1086
Joined: 2003-10-04 @ 12:16

Re: How to find where data is stored?

Postby tegrady » 2018-7-13 @ 20:38

Possibly ISO Buster.
User avatar
tegrady
Member
 
Posts: 102
Joined: 2017-11-24 @ 23:52

Re: How to find where data is stored?

Postby vladstamate » 2018-7-13 @ 23:42

If you are on Linux you can hexdump the files you obtained with dd and then use any diff tool you want. If the diff is in the first 512 bytes then it updated the MBR for example.

In Windows a good free visual diff tool is WinMerge.
User avatar
vladstamate
Oldbie
 
Posts: 826
Joined: 2015-8-23 @ 01:43

Re: How to find where data is stored?

Postby oeuvre » 2018-7-17 @ 03:41

data is stored in the balls
IBM Aptiva 2176-C73 Pentium 200, 64MB, Matrox Millennium II, IBM HD, AWE64, DOS/95
i7 6700K, 32GB, EVGA GTX970, 256GB M.2 SSD + HD, Windows 10
Image
User avatar
oeuvre
Oldbie
 
Posts: 1512
Joined: 2015-3-31 @ 13:31
Location: USA


Return to Milliways

Who is online

Users browsing this forum: No registered users and 1 guest