Questions tagged [file-format]
File format refers to the way information and data is encoded and stored in a computer file.
248 questions
0
votes
0
answers
42
views
I am looking to decrypt this file type (.hds), and import it into a custom code, but I need help
The vendor is charging thousands for a software that can do much more than I need... I need the following:
Take the .hds file, and import it into a python program in a pandas dataframe or numpy array. ...
2
votes
1
answer
97
views
What happens to the remaining virtual address space after loading the VirtualSize of a section into the memory?
So I saw in the Microsoft docs the following stated regarding the PE section header:
VirtualSize: The total size of the section when loaded into memory. If this value is greater than SizeOfRawData, ...
- 23
2
votes
1
answer
161
views
Interpreting binary data with repeating xxxx xx40 structure
I am trying to interpret the data from a Foodscan instrument. The data file contains a number of different scans, each of which has the following kind of pattern:
00000470: 0000 0000 0000 0000 0000 ...
1
vote
1
answer
128
views
What tool is this text file formatted by?
I'm trying to gather data for a data science project. The target is info on rock climbing routes, and there is a certain site that hosts a ton of crowd-sourced data, however they removed their api ...
- 113
2
votes
1
answer
206
views
How to decode this zip data
I have a commercial MS Excel add-in which generates this type of binary data:
UEsDBBQACAgIANF2Y1oAAAAAAAAAAAAAAAABAAAAMGVSTW8TMRDNmV9RWeKWSNl80GZvbdKKqClFNEWqqgrN2rMbK157sWdRoyp3DhyQ4AZ/AXHl0n9D+...
- 123
1
vote
2
answers
95
views
What is this file format? First byte 0x04, found in Macintosh environment circa 2001
Example file: https://imagej.net/nih-image/download/user-macros/Inclusion%20Counter/Inclusion%20Counter%20Manual%20v1.0.html
Needless to say, it is not an HTML file.
First byte is 0x04, which it ...
- 123
0
votes
0
answers
112
views
What is this 2D vector image (file) format?
Context: I'm currently re-engineering an old (2015) E-paper display tag just for the fun of it. For the curious ones, I'm using Ghidra to disassemble and decompile, and trying to make up some sense of ...
- 270
0
votes
0
answers
125
views
Extracting / converting an unknown 1990s graphics file format (.ATR)
For about a month I've been working towards trying to crack the file structure on the graphical assets from the old JumpStart CD-ROM games. A large percentage of these games do not have their sprites ...
0
votes
1
answer
91
views
How to manual copy mp4 file?
I have tried using some popular editors like: sublime text, notepad++ to open mp4 file and after copy content of it. After copy, I added the mp4 extension to the newly copied file. As a result, the ...
- 333
1
vote
0
answers
64
views
How to determine if an ntfs partition (inside VHDX) is dirty?
I have a VHDX file containing a single NTFS partition, when I mount this VHDX using Disk Management it's determined to be "dirty":
I do indeed have some issues reading this disk until I run ...
- 3,293
0
votes
0
answers
87
views
Trying to decode a data structure from a COM structured storage stream
I have a CAD file that is a COM structured storage file. One of the streams in this file contains some configuration data. I can see the ASCII strings that have the descriptions of the data I'm ...
- 1
2
votes
1
answer
196
views
Firmware extraction of U-boot : No filesystem found via binwalk + relation between MTD partitionning and NAND subsystem
I recently extracted the firmware (u-boot system) from an old Sagemcom router and analyzed it using the binwalk utility for a personal reverse engineering project.
Despite identifying a root ...
- 41
1
vote
1
answer
161
views
binwalk guess wrong LZ4 compressed data format
I have a stock Netgear switch firmware file:
https://www.downloads.netgear.com/files/GDC/GS316EP/GS316EP_GS316EPP_V1.0.3.7.zip
When I do binwalk, it gives me at position 0x769BDC a description as &...
- 35
1
vote
1
answer
307
views
VxWorks flat binary file
VxWorks has a "flat binary file" format in which the initial 8 byte values are 45 53 54 46 42 49 4E 52 (ESTFBINR if interpreted as ASCII).
I know very little about their content except:
...
- 31
0
votes
0
answers
57
views
Arrays of ascending/descending/repeating integers in proprietary file formats
When looking at a file in a hex editor/viewer in an attempt to "figure it out", I often come across these blocks that are extremely repetitive. They tend to be int8, int16, or int32 (signed ...
- 179