Notifications
Clear all

file headers

9 Posts
4 Users
0 Likes
1,115 Views
(@Anonymous)
Posts: 0
Guest
Topic starter
 

hi all,

i've got a question for anyone out there who may have encountered something similar. i am looking at some files which i believe could either possibly be encrypted or renamed. the files currently have .txt extentions however the content is not plaintext. my other theroy is that it is another file type which has just been renamed. i am trying to restore these files for a friends drive but he said his brother didn't have a clue what they were created in but that the file names were important to him.. anyhow anyone have any ideas? i was wondering if anyone could share some good url's for searching in hex file headers or possibly win32 file identification software? again, there is no obvious tagging in the files just that they all start with MWCR.

thx!

 
Posted : 07/12/2004 8:28 pm
 Andy
(@andy)
Posts: 357
Reputable Member
 

Can you copy and paste some of the data into a post, the first few lines of code will do.

Andy

 
Posted : 07/12/2004 8:35 pm
(@Anonymous)
Posts: 0
Guest
Topic starter
 

MWCR·····ÖÕw0E··¦·······································································································································································································································································listing_of_a.txt···èÐÕwþ·2·
···!···@µä·········
···Ðä··ë··s_ÔwèÐÕwþ·2·
···!···@µä·····„ì··¿hJ·èÐÕwþ·2·
···!···@µä·„ì··$í··Ð䷐췷‚eG·ì··Ðä·$=J·$í··ì··Ðä·çgJ·$í··Ðä·Ð䷘‚ä·˜‚ä·X˜ä·························Të··Ï·6·äë··
9×wh›Ùwÿÿÿÿ3;ÔwõDÔ

Can you copy and paste some of the data into a post, the first few lines of code will do.

Andy

 
Posted : 07/12/2004 8:40 pm
 Andy
(@andy)
Posts: 357
Reputable Member
 

I don't know what this is. It doesn't look like a file header. "ÐÕwþ·2· " seems to feature in the text and so does "···!···@µä" - try downloading WinHEx and taking a look at it in hex. It's possibly encryption but I don't know for sure.

A good site for searching file extensions: -

http://filext.com/

 
Posted : 07/12/2004 9:23 pm
(@Anonymous)
Posts: 0
Guest
Topic starter
 

merci 😀

 
Posted : 08/12/2004 4:36 am
(@gmarshall139)
Posts: 378
Reputable Member
 

.txt files wont have a specific header, it's just starts with the text of the file. I can't say that I've seen the header you posted. It may be some type of image format.

 
Posted : 08/12/2004 2:39 pm
(@gmarshall139)
Posts: 378
Reputable Member
 

.txt files wont have a specific header, it's just starts with the text of the file. I can't say that I've seen the header you posted. It may be some type of image format.

 
Posted : 08/12/2004 3:03 pm
(@Anonymous)
Posts: 0
Guest
Topic starter
 

cool thanks! that's what I was thinking as well, it could possibly be an Image file of some sort. Oh well - back to ye ole drawing board.

 
Posted : 08/12/2004 5:08 pm
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

flytnx,

Do all of the files have the same or similar headings?

I have a Windows CLI-based tool that does file signature analysis, and I don't recognize that format…though, it may be a proprietary binary format of some kind.

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

 
Posted : 08/12/2004 7:12 pm
Share: