System and method for decrypting files

A system for decrypting a file, comprising:

• an interface configured to intercept a first communication comprising a first message and an associated first encrypted file, wherein the first encrypted file is configured to be decrypted using a password;
• a processor coupled to the interface and configured to:
• parse the first message to identify one or more words from within the first message;
• create a dictionary for words to use to decrypt the first encrypted file;
• store in the dictionary the one or more identified words parsed from within the first message of the first communication, the dictionary comprising a plurality of words from a plurality of intercepted communications;
• and
• store in the dictionary meta data associated with parameters associated with the first communication from which the one or more words identified by parsing the first message and stored in the dictionary;
• use the meta data to prioritize the words stored in the dictionary;
• identify one or more of the prioritized words from the dictionary to be used to attempt to the first encrypted file;
• and
• applying the one or more of the prioritized words identified from the dictionary to decrypt the first encrypted file using at least a portion of the one or more prioritized words identified from the dictionary as the password for decrypting the first encrypted file.

A non-transitory computer-readable storage media comprising instructions that when executed by a processor cause the processor to perform operations for decrypting a file, the operations being arranged to:

• intercept a first communication comprising a first message and an associated first encrypted file, wherein the first encrypted file is configured to be decrypted using a password;
• parse the first message to identify one or more words from within the first message;
• create a dictionary for words to use to decrypt the first encrypted file;
• store in the dictionary the one or more identified words from within the first message of the first communication, the dictionary comprising a plurality of words from a plurality of intercepted communications;
• store in the dictionary meta data associated with parameters associated with the first communication from which the one or more words identified by parsing the first message and stored in the dictionary;
• identify one or more of the prioritized words from the dictionary to be used to attempt to the first encrypted file;
• and
• applying the one or more of the prioritized words identified from the dictionary to decrypt the first encrypted file using at least a portion of the one or more prioritized words identified from the dictionary as the password for decrypting the first encrypted file.