Notifications
Clear all

Encrypted files or?

Hsandeberg
(@hsandeberg)
New Member

Hi, im investigating a comouter that has a lot of containers in different sizes, all from 5 MB to 40 GB, when you try to open them with 7zip, the file wants a password, but we dont know what the files are. They are in a folder called safedisk, maybe this foldername is just rubbish but we dont knoiw what they are, the Files looks like

001TL.a________001tl9372352.a________
005BN.a________005bn9751300.a________
015NK.a________015nk7875211.a________
017FK.a________017Fk3188652.a________

FTK identifes them as a rar file, but we dont really know, anyone who has seen anything like this?

?

Quote
Topic starter Posted : 06/10/2017 1:56 pm
bntrotter
(@bntrotter)
Member

OS make and version? File location?

ReplyQuote
Posted : 06/10/2017 2:01 pm
Hsandeberg
(@hsandeberg)
New Member

Hi
Its Windows 10 and the folder is on a nas share, the folder is called safebit.

ReplyQuote
Topic starter Posted : 06/10/2017 2:32 pm
JerryW
(@jerryw)
Junior Member

It may be connected but if you put the words 'safebit' and 'folder' into Google it takes you to the 'east-tec' website

"Encrypt a folder with east-tec SafeBit using on-the-fly disk encryption".

ReplyQuote
Posted : 06/10/2017 4:23 pm
Hsandeberg
(@hsandeberg)
New Member

Tried that already and safebit cant recognize the files. Says its not a container for that orogram

ReplyQuote
Topic starter Posted : 06/10/2017 4:27 pm
wotsits
(@wotsits)
Active Member

If it's the SafeBit I'm aware of then it's a type of proprietary encryption. It's not a 7zip or rar file. They offer various options such as encrypting individual files, or encrypting emails, or full disk encryption.

ReplyQuote
Posted : 06/10/2017 4:28 pm
Hsandeberg
(@hsandeberg)
New Member

I will try to open them again in safebit, it said that it was wrong format

ReplyQuote
Topic starter Posted : 06/10/2017 6:34 pm
jblakley
(@jblakley)
Active Member

Is the file signature in the header recognizable as anything?

ReplyQuote
Posted : 09/10/2017 7:01 pm
jaclaz
(@jaclaz)
Community Legend

when you try to open them with 7zip, the file wants a password, but we dont know what the files are.

If 7-zip recognizes them (and asks for a password), then they should be a "known" format.
As jblakely suggested, check manually the first few bytes or try using on them Trid

http//mark0.net/soft-trid-e.html

jaclaz

ReplyQuote
Posted : 09/10/2017 7:21 pm
Share: