recycle bin $I file header 0xff

64 views Asked by At

I was curious about the $I file while creating the 'Recycle Bin' viewer for a university project.

I understand that the first four digits of the $I file represent operating system information.

When I looked up my file, almost all the files were 0x02.

However, the header of one file is 0xff. What does this 0xff mean?

And if possible, I would also like to know the appropriate operating system list for the information in each header.

I apologize for my poor English.

I use window 11

in python

with open('C:/$Recycle.Bin/S-1-5-21-....-XXXX/$I24JSBG.pdf', mode='rb') as file:
    binaryData = file.read()

print(binaryData[28:].decode(encoding='utf-16', errors='strict')[:-1])

The other file outputs '02 00 00 00', but for this file outputs 'ff 00 00 00'.

0

There are 0 answers