Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- # File
- Length | Description
- -----------------------------
- ? | AES(FileKey, FileIV, FileContents)
- MetadataSize | Metadata
- ? | OriginalFilename (UTF-16)
- 0x06 | FileMarker
- 0x14 | SHA1(RSAModulus)
- 0x10 | FileIV
- 0x04 | PaddingCount
- 0x80 | RSA1024(PublicKey, FileKey|ComputerID)
- 0x04 | MetadataSize
- # Metadata
- Length | Description
- ---------------------
- 0x04 | 0x00
- 0x04 | EncryptionType (1=partial, 2=full)
- 0x04 | Magic (0C FE 7A 41 - supposedly different partial vs full)
- 0x04 | Size of header - original filename size
- 0x04 | Number of encrypted regions (partial only)
- 0x04 | Size of encrypted region (partial only)
- 0x04 | CRC32(EncryptedRegions)
- 0x04 | Offset to encrypted data (partial only)
Add Comment
Please, Sign In to add comment
