Page 1 of 1

Custom Extension pwk

Posted: 07 Jan 2014, 18:11
by james055
I'm trying to recover .pwk Password Keeper file. I ran a hexdump on a sample, which returns image visiable in the attachment.

What should be photorec file? Would following work? If yes, why do I ignore first line which has some strange

pwk 0 "Password Keeper"

Re: Recovering PWK file  Topic is solved

Posted: 12 Jan 2014, 11:37
by cgrenier
The offset of this text is 16, not 0.
Create a photorec.sig file with

Code: Select all

pwk 16 "Password Keeper"
.
If you need a better signature, please send me a zip archive with 3 pwk file samples of various size.

Re: Recovering PWK file

Posted: 12 Jan 2014, 17:53
by james055
Thanks cgrenier, this worked and I was able to recover my file.