|
Yes, just looking at the number of bytes with the high bits set. It appears to have been compressed as well. Near the end of the header info is the string LZMA but the data following it do not match any LZMA start bytes I have ever seen. So some encryption (AES CBC) was probably done after the LZMA compression stage.
but if it is encrypted it must not be tied to the device given the test results.
|