Join Us!

Notifications
Clear all

file headers  

  RSS
 Anonymous

hi all,

i've got a question for anyone out there who may have encountered something similar. i am looking at some files which i believe could either possibly be encrypted or renamed. the files currently have .txt extentions however the content is not plaintext. my other theroy is that it is another file type which has just been renamed. i am trying to restore these files for a friends drive but he said his brother didn't have a clue what they were created in but that the file names were important to him.. anyhow anyone have any ideas? i was wondering if anyone could share some good url's for searching in hex file headers or possibly win32 file identification software? again, there is no obvious tagging in the files just that they all start with MWCR.

thx!

Quote
Posted : 07/12/2004 8:28 pm
Andy
 Andy
(@andy)
Active Member

Can you copy and paste some of the data into a post, the first few lines of code will do.

Andy

ReplyQuote
Posted : 07/12/2004 8:35 pm
 Anonymous

MWCR·····ÖÕw0E··¦·······································································································································································································································································listing_of_a.txt···èÐÕwþ·2·
···!···@µä·········
···Ðä··ë··s_ÔwèÐÕwþ·2·
···!···@µä·····„ì··¿hJ·èÐÕwþ·2·
···!···@µä·„ì··$í··Ð䷐췷‚eG·ì··Ðä·$=J·$í··ì··Ðä·çgJ·$í··Ðä·Ð䷘‚ä·˜‚ä·X˜ä·························Të··Ï·6·äë··
9×wh›Ùwÿÿÿÿ3;ÔwõDÔ

Can you copy and paste some of the data into a post, the first few lines of code will do.

Andy

ReplyQuote
Posted : 07/12/2004 8:40 pm
Andy
 Andy
(@andy)
Active Member

I don't know what this is. It doesn't look like a file header. "ÐÕwþ·2· " seems to feature in the text and so does "···!···@µä" - try downloading WinHEx and taking a look at it in hex. It's possibly encryption but I don't know for sure.

A good site for searching file extensions: -

http://filext.com/

ReplyQuote
Posted : 07/12/2004 9:23 pm
 Anonymous

merci 😀

ReplyQuote
Posted : 08/12/2004 4:36 am
gmarshall139
(@gmarshall139)
Active Member

.txt files wont have a specific header, it's just starts with the text of the file. I can't say that I've seen the header you posted. It may be some type of image format.

ReplyQuote
Posted : 08/12/2004 2:39 pm
gmarshall139
(@gmarshall139)
Active Member

.txt files wont have a specific header, it's just starts with the text of the file. I can't say that I've seen the header you posted. It may be some type of image format.

ReplyQuote
Posted : 08/12/2004 3:03 pm
 Anonymous

cool thanks! that's what I was thinking as well, it could possibly be an Image file of some sort. Oh well - back to ye ole drawing board.

ReplyQuote
Posted : 08/12/2004 5:08 pm
keydet89
(@keydet89)
Community Legend

flytnx,

Do all of the files have the same or similar headings?

I have a Windows CLI-based tool that does file signature analysis, and I don't recognize that format…though, it may be a proprietary binary format of some kind.

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

ReplyQuote
Posted : 08/12/2004 7:12 pm
Share: