1

I have lost some Axcrypt files on my hard drive, as I have changed the extension. Is there a way to detect those files (via header, size, etc.)

If not, are there some tools to detect discordance between a file's header and filetype?

Improve this question

1 Answer 1

Reset to default
4

The encrypted files have a common header. The first 4 bytes of AXX files are C0 B9 07 2E. The static header is actually longer than this, but 4 bytes should be enough to rule out false positives.

Improve this answer
2
  • Do you know a tool who scan for files with this header ?
    – hotips
    May 22, 2012 at 19:21
  • 3
    use the command "find" with: test "$(head -c 4 $file)" = "$(echo -e '\xc0\xb9\x07\x2e')"
    – didest
    May 23, 2012 at 22:23

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .