Recovering PWK file Topic is solved

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
james055
Posts: 2
Joined: 07 Jan 2014, 17:56

Custom Extension pwk

#1 Post by james055 »

I'm trying to recover .pwk Password Keeper file. I ran a hexdump on a sample, which returns image visiable in the attachment.

What should be photorec file? Would following work? If yes, why do I ignore first line which has some strange

pwk 0 "Password Keeper"
Attachments
pwk_header.png
pwk_header.png (7.24 KiB) Viewed 3510 times

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Recovering PWK file

#2 Post by cgrenier »

The offset of this text is 16, not 0.
Create a photorec.sig file with

Code: Select all

pwk 16 "Password Keeper"
.
If you need a better signature, please send me a zip archive with 3 pwk file samples of various size.

james055
Posts: 2
Joined: 07 Jan 2014, 17:56

Re: Recovering PWK file

#3 Post by james055 »

Thanks cgrenier, this worked and I was able to recover my file.

Locked