Custom File Type Set Size
Posted: Wed Mar 17, 2021 5:27 pm
Hi Everyone,
I am attempting a recovery for a video files from a security camera NVR. I have read all the documentation on creating a custom file type but I am having issues with the end file signature. The last few sectors of the files are always 0's and then the last line is random. I've tried setting a few sectors of 0's as the end of the signature with the proper offset but it doesn't work. So It is finding the correct files with just the beginning signature but the files do not stop at the apporpirate spot. I have to go into the hex editor and manually save them from 0 to offset 0x3ffffff and the files come out perfectly.
The thing is the video files are always exactly the same size and end at offset 0x3ffffff . Is there a way to make a known file type that and say here is the beginning signature and for the end just cut off the file at 0x3ffffff ?
Thanks in advance for any advice or suggestions you have!
I am attempting a recovery for a video files from a security camera NVR. I have read all the documentation on creating a custom file type but I am having issues with the end file signature. The last few sectors of the files are always 0's and then the last line is random. I've tried setting a few sectors of 0's as the end of the signature with the proper offset but it doesn't work. So It is finding the correct files with just the beginning signature but the files do not stop at the apporpirate spot. I have to go into the hex editor and manually save them from 0 to offset 0x3ffffff and the files come out perfectly.
The thing is the video files are always exactly the same size and end at offset 0x3ffffff . Is there a way to make a known file type that and say here is the beginning signature and for the end just cut off the file at 0x3ffffff ?
Thanks in advance for any advice or suggestions you have!