Not yet. <img src="images/smiles/icon_wink.gif" alt="Wink" title="Wink" />
Please understand how the actual NTFS volume serial is8 bytes long.
Vol, or Dir will ONLY show 4.
http://thestarman.pcministry.com/asm/mbr/NTFSbrHexEd.htm
http://thestarman.pcministry.com/asm/mbr/NTFSBR.htm
http://www.forensicfocus.com/Forums/viewtopic/t=2134/
As a side note, consider how hex numbers, hex numbers as seen in a hex editor or "bytes sequence" should always be described accurately:
http://thestarman.pcministry.com/asm/mbr/AA55H.html
jaclaz
↧
