|
It could be a false positive. I'm not overly familiar with the recovery of flash files, but the header is only 3 bytes long (FWS or CWS in ASCII) followed by a single byte for the version number and then 4 bytes that give the file size. Your recovery tool may have found those first 4 bytes that matched (that is, FWSn or CWSn where n is probably anything), thought it was a Flash file and took the next 4 bytes and copied out that much data. By chance you ended up with that 1.2GB dump of data, which is probably just old deleted jpegs and partially overwritten junk.
|
# ¿ Apr 28, 2017 12:55 |
|
|
# ¿ May 15, 2024 11:13 |
|
I doubt there is anything too easy to do to be certain that it is a false positive. Looking at 3 different SWF files on my PC they all share that 3-byte header and then things change. But seeing as you got it off a camera SD card, I'd scan that file for jpeg headers (FF D8 FF E0). If you find that in there it's very likely it's just junk data. To be extra sure, take a look at the header of some of the real jpeg files from that camera so you know exactly what they look like. The first dozen or so bytes should all be very similar. Obviously you'll need a hex editor/viewer to do that. This looks suitable, but I've never tried it.
|
# ¿ Apr 28, 2017 23:21 |