Difference between revisions of "Webloc"

From Forensics Wiki
Jump to: navigation, search
(New page: This is Mac OS X's internet shortcut file, similar to the Microsoft Windows .URL file. However, due to the heavy usage of AppleDouble resources, the expect...)
 
m (forgot the main reason why I created this page, DeRez)
Line 2: Line 2:
  
 
On the file system itself, the shortcut file named <code>News.webloc</code> pointing to <code>http://news.google.com</code> is actually a zero byte file.  The URL is instead stored in the <code>._News.webloc</code> file in a field with resource type '<code>url </code>'.
 
On the file system itself, the shortcut file named <code>News.webloc</code> pointing to <code>http://news.google.com</code> is actually a zero byte file.  The URL is instead stored in the <code>._News.webloc</code> file in a field with resource type '<code>url </code>'.
 +
 +
The contents of this resource file are visible with the Apple Developer Tool [http://developer.apple.com/documentation/Darwin/Reference/ManPages/man1/DeRez.1.html DeRez]
  
 
[[Category:File Formats]]
 
[[Category:File Formats]]

Revision as of 03:27, 4 September 2008

This is Mac OS X's internet shortcut file, similar to the Microsoft Windows .URL file. However, due to the heavy usage of AppleDouble resources, the expected data is actually stored as metadata and not in the the expected data file location.

On the file system itself, the shortcut file named News.webloc pointing to http://news.google.com is actually a zero byte file. The URL is instead stored in the ._News.webloc file in a field with resource type 'url '.

The contents of this resource file are visible with the Apple Developer Tool DeRez