Anda di halaman 1dari 6

TITLE : FILE SIGNATURE REPORT

LECTURER NAME : ROSLAN ISMAIL, ASSOC. PROF. DR.

GROUP NAME : 1) NURATHIRAH BINTI MOHAMED RASHID SN0100827

2) MUHAMMAD HAFIS BIN EZANI IS091029


1.First Extension is PowerPoint

1.1 The result found for PowerPoint extension PPTX is 50 4B 03 04 which is Microsoft Office Open XML

Figure 1.1.1

Before pptx extension number is 50 4B 03 04 like the figure shows and we change it to 50 4B 03 05 and
its turns the color red after we change the extension number .

Figure 1.1.2 PPTX Extension Before

Figure 1.1.3 PPTX Extension After


2. Second extension is Microsoft Excel File

2.1 The results show for Excel file extension is 50 4B 03 04. It use the same extension number like PPTX
because it from Microsoft Office XML Document

Figure 2.1.1

In the Hex Workshop also shows the same extension number like in file signature . We change the
extension number in phase 2 which is the true one is 03 but we change it to 02.

Figure 2.1.2 XLSX Extension Before

Figure 2.1.3 XLSX Extension After


3. The third File extension is MP3

3.1 Its only shows only one result mp3 audio file extension number which is 49 44 33

Figure 3.1.1

In the Hex Workshop show the same extension number like in file signature which is 49 44 33 and we
change the extension number to 49 44 45 .

Figure 3.1.2 MP3 Extension Before

Figure 3.1.3 MP3 Extension After


4. The fourth file extension is JPG which is image extension number

4.1 In the file signature is shows 3 result of JPG fike extension number but we use the first one which is

FF D8 FF E0

Figure 4.1.2

In the Hex Workshop with the three result found in File Extension Signature but the our image is same
with the first one . Futhermore we change it from FF D8 FF E0 to FF D8 FF 11.

Figure 4.1.3 JPG Extension Before

Figure 4.1.4 JPG Extension After


5. The fifth File extension is DOCX

5.1 It show 2 results from the DOCX extension.

Figure 5.1.2

In the Hex Workshop show the same file extension with the first one which is 50 4B 03 04 . And we
change it from 50 4B 03 04 to 50 4B 03 02

Figure 5.1.3 Docx Extension Before

Figure 5.1.4 Docx Extension After

Anda mungkin juga menyukai