Hi All,
Im new to file carving and to introduce us to the topic, are university gave us some files to try and create some usable files from them.
One of them was in the form of an .exe. So far, I have been able to get a photo out of the exe. After looking through the exe in Frhed, its look to me that there is also an excel spreadsheet- but I'm struggling to make this into a document.
The file can be found here
This file is on my Google Drive.
If there are any tools out there which anyone can recommend to use which would solve this (and help me further down the road, please share!)
Thanks
Connor
you might wanna try foremost or photorec.
You could do a full format of a small memory card to make sure it's completely empty. Then save this file onto the card, and use any carving tool (such as made by our company) to see what's available. I think this is the easiest way to do it.
This file has damaged header.
replace string "7A 7A 7A 7A" of file broken2.exe to string "FF D8 FF E0"
and rename "broken2.exe" to "broken2.jpg"
The .XLS document does exist
Nothing complex except that the carving program has to determine that it is a .xls rather than a .doc
The header for the photo has been corrupted
Nevertheless, it is good exercise. D
Nothing complex except that the carving program has to determine that it is a .xls rather than a .doc
Quick test.
Mount the .exe "as is" with IMDISK.
Run Photorec on the drive letter assigned to the mounted "disk image".
Result is f167.xls (perfectly fine when opened in Excel).
jaclaz
Quick test.
Mount the .exe "as is" with IMDISK.
Run Photorec on the drive letter assigned to the mounted "disk image".
Result is f167.xls (perfectly fine when opened in Excel).jaclaz
Thanks jaclaz )