Hello
Im using Ontrack Easyrecovery to recover some files ive overwritten on my hdd.
but the files filetyp is .mddata and .mdinfo and is not listed in the RawRecovery File Types. And such i need to add it manually.
To do that i need to find out the Filetype signature and offset in hex. This is the info in the program:
The following information is needed for custom file signatures. Enter the signature in hexadecimal format with a maximum of 8 bytes (i.e. 1A 00 00 03 00 00 14 00). The Signature offset should be zero relative ánd less than 512 bytes.
Hope someone can help me with this.
Just tell me if you want a MDDATA or a MDINFO file to look at and ill upload one to the web.
Here is some info on the files
http://www.docstoc.com/docs/34916610/iPhone-Forensics
The files are basiclly my backup of my phone that i have lost
/Johan Lindström