I have lost some Axcrypt files on my hard drive, as I have changed the extension. Is there a way to detect those files (via header, size, etc.)
If not, are there some tools to detect discordance between a file's header and filetype?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this communityThe encrypted files have a common header. The first 4 bytes of AXX files are C0 B9 07 2E
. The static header is actually longer than this, but 4 bytes should be enough to rule out false positives.