Hello everyone, it's always me bugging this forum with such questions.. don't hate me ^^
looking at a file i've found, wich by the size (about 1gb on a pendrive) looked to me as some sort of encrypted file.
the question is, wich kind of program was used for the encryption?
i don't think it's truecrypt, couse it's more random also on initial bytes.
this one instead looks pretty strange, i searched around for similar stuff on google but nothing came out.
here is an abstract of the first portion of the file
00000000 4143 4C35 000B 0000 0000 0000 0000 0000 ACL5............
00000010 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000020 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000030 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000040 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000050 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000060 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000070 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000080 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000090 0000 0000 0000 0000 0000 0000 0000 0000 ................
000000A0 0000 0000 0000 0000 0000 0000 0000 0000 ................
000000B0 0000 0000 0000 0000 0000 0000 0000 0000 ................
000000C0 0000 0000 0000 0000 0000 0000 0000 0000 ................
000000D0 0000 0000 0000 0000 0000 0000 0000 0000 ................
000000E0 0000 0000 0000 0000 0000 0000 0000 0000 ................
000000F0 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000100 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000110 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000120 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000130 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000140 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000150 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000160 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000170 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000180 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000190 0000 0000 0000 0000 0000 0000 0000 0000 ................
000001A0 0000 0000 0000 0000 0000 0000 0000 0000 ................
000001B0 0000 0000 0000 0000 0000 0000 0000 0000 ................
000001C0 0000 0000 0000 0000 0000 0000 0000 0000 ................
000001D0 0000 0000 0000 0000 0000 0000 0000 0000 ................
000001E0 0000 0000 0000 0000 0000 0000 0000 0000 ................
000001F0 0000 0000 0000 0000 0000 0000 0000 0000 ................
00000200 0048 000D 5061 7373 776F 7264 5F54 7970 .H..Password_Typ
00000210 6500 0454 4558 5400 0B50 6173 7377 6F72 e..TEXT..Passwor
00000220 645F 4944 0024 3330 3839 6266 6464 2D34 d_ID.$3089bfdd-4
00000230 3064 632D 3465 3263 2D61 3163 302D 3232 0dc-4e2c-a1c0-22
00000240 6164 6130 6366 3235 6661 0000 0000 0000 ada0cf25fa...
i hope someone can help me out
I've seen something similar with ArchiCrypt Live.
Thnx a lot for your reply, i'll check this out
mhh.. sounds logical.. ACL5 maybe Archicrypt live 5?
mhhh
do you also know if there are some vulnerabilities to attack such archive?
or you suggest to make a dictionary attack? maybe i have some good chances if i create a dictionary from an indexed wordlist on the image….