cgsecurity.org

As opposed to your initial postings I had to read the last one three times.
Could you specify exactly what you mean by "this behaviour"?



What was strange: The image of my data is on a 5TB drive and in the PhotoRec options, I chose to search the whole partition. The search ends at ~1 hour or ...

So this worked...sort of :)

What worked: I was able to get the jex files and none of them were not Joplin Export files

What was strange: The image of my data is on a 5TB drive and in the PhotoRec options, I chose to search the whole partition. The search ends at ~1 hour or so mark, alerting me ...

The traps that are likely:


Warning: If you are using a .photorec.sig in your HOME directory, be warned that when running photorec as
root (ie. via the sudo command), photorec will search in /root/.photorec.sig, not in your user home directory.
So you may have to copy the .photorec.sig file first ...

So I've understood the formula correctly, the signature file would end up looking something like
where 32 is the offset and the rest of the line stays as is since it is already in hexadecimal format.

Correct me if I got it wrong

Can you see something that is common for all three files? I do!
Where is that something, at which position from the beginning of the file do you find it?


The second line seems be held in common for all three files

00000020 2e 6d 64 00 00 00 00 00 00 00 00 00 00 00 00 00 |.md ...

Hello

I have a disk image I made using `ddrescue` that is on an external hard drive.
I would like assistance in adding a custom signature to PhotoRec and then use PhotoRec to retrieve the file.

The file type in question is JEX (.jex extension) which stands for "Joplin Export File" https ...