File exists on drive, but contents doesn't show up hex editor

Help on how to use HxD.
Post Reply
TaupeRanger
Posts: 1
Joined: 25 Sep 2019 19:55

File exists on drive, but contents doesn't show up hex editor

Post by TaupeRanger » 25 Sep 2019 20:03

I have a hard drive which I'm trying to manually recover some data from using HxD. I opened the drive, and then saved the entire thing to a separate file (it's about 80GB, and the drive itself is old and slow). It's an old Windows install. In one of the folders, I find a .dat file which contains a specific string I'm looking for. I see this file when using Windows Explorer, and when I open it in HxD, I see the string. But when searching the entire 80GB file of the entire drive for that same string, it does not appear. What would cause this? I am using the same encoding when opening the file from Explorer, and when searching the saved drive.

Maël
Site Admin
Posts: 1138
Joined: 12 Mar 2005 14:15

Re: File exists on drive, but contents doesn't show up hex editor

Post by Maël » 26 Sep 2019 05:51

If you created the disk image using HxD and it has the right size (same as your imaged hard disk), then it should contain the string.

It might be that the file was compressed or encrypted, though, so the raw disk dump and the file would not contain the same raw data.

Post Reply