cgsecurity.org

I've tried... I just.. Can't seem to find the start of the file... It's for an image program called Paint Tool SAI..

I dunno if the code is obsfucated... I can't.. Seem to find the start of the file ID thingy.... Could anyone lend a hand..? xux

Can you send me an archive with a least 3 file samples ? I will see whar I can do.

cgrenier wrote:Can you send me an archive with a least 3 file samples ? I will see whar I can do.

Yees sir! I can! Uhm...
https://www.dropbox.com/s/d8f50dwledv8n ... Canvas.sai
https://www.dropbox.com/s/hwghy60ogc0ed ... ommish.sai
https://www.dropbox.com/s/9tykkj0o6ol2s ... %20maw.sai

The first one is an empty project. The other two are actually finished projects.

P.S: Sorry for the late reply.. Bad internet here home.. >w<

The .sai file content looks like compressed or encrypted data. It's not possible to create a signature for those files.
Try to contact the Easy Paint Tool SAI developpers and ask for a method to identify the beginning of the .sai files...

cgrenier wrote:The .sai file content looks like compressed or encrypted data. It's not possible to create a signature for those files.
Try to contact the Easy Paint Tool SAI developpers and ask for a method to identify the beginning of the .sai files...

-Siiiigh...-

I kind of figured as much.. Don't worry.. ^^; That's about as much as as to my research has led me to.

I'll look into contacting the developers.. xux Let's see if they're nice enough to reply...

Edit: Oh almost forgot, regardless though, worry comfirmed. Thank you SOO much... <3

Oh and.. By the way? Wouldn't it be possible to check how PaintTool SAI calls the .sai files, maybe? I don't know.. A DLL or.. Something in the SAI directory that has the instructions on how to decompress/call these files?