Notifications
Clear all

Encrypted files or?

9 Posts
6 Users
0 Likes
511 Views
(@hsandeberg)
Posts: 4
New Member
Topic starter
 

Hi, im investigating a comouter that has a lot of containers in different sizes, all from 5 MB to 40 GB, when you try to open them with 7zip, the file wants a password, but we dont know what the files are. They are in a folder called safedisk, maybe this foldername is just rubbish but we dont knoiw what they are, the Files looks like

001TL.a________001tl9372352.a________
005BN.a________005bn9751300.a________
015NK.a________015nk7875211.a________
017FK.a________017Fk3188652.a________

FTK identifes them as a rar file, but we dont really know, anyone who has seen anything like this?

?

 
Posted : 06/10/2017 12:56 pm
(@bntrotter)
Posts: 63
Trusted Member
 

OS make and version? File location?

 
Posted : 06/10/2017 1:01 pm
(@hsandeberg)
Posts: 4
New Member
Topic starter
 

Hi
Its Windows 10 and the folder is on a nas share, the folder is called safebit.

 
Posted : 06/10/2017 1:32 pm
(@jerryw)
Posts: 56
Trusted Member
 

It may be connected but if you put the words 'safebit' and 'folder' into Google it takes you to the 'east-tec' website

"Encrypt a folder with east-tec SafeBit using on-the-fly disk encryption".

 
Posted : 06/10/2017 3:23 pm
(@hsandeberg)
Posts: 4
New Member
Topic starter
 

Tried that already and safebit cant recognize the files. Says its not a container for that orogram

 
Posted : 06/10/2017 3:27 pm
(@wotsits)
Posts: 253
Reputable Member
 

If it's the SafeBit I'm aware of then it's a type of proprietary encryption. It's not a 7zip or rar file. They offer various options such as encrypting individual files, or encrypting emails, or full disk encryption.

 
Posted : 06/10/2017 3:28 pm
(@hsandeberg)
Posts: 4
New Member
Topic starter
 

I will try to open them again in safebit, it said that it was wrong format

 
Posted : 06/10/2017 5:34 pm
jblakley
(@jblakley)
Posts: 110
Estimable Member
 

Is the file signature in the header recognizable as anything?

 
Posted : 09/10/2017 6:01 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

when you try to open them with 7zip, the file wants a password, but we dont know what the files are.

If 7-zip recognizes them (and asks for a password), then they should be a "known" format.
As jblakely suggested, check manually the first few bytes or try using on them Trid

http//mark0.net/soft-trid-e.html

jaclaz

 
Posted : 09/10/2017 6:21 pm
Share: