Questions tagged [file-format]

File format refers to the way information and data is encoded and stored in a computer file.

Filter by
Sorted by
Tagged with
0
votes
0answers
24 views

Decoding an .iwa file

I am looking to view the contents of an .iwa file in my Apple Numbers project. It seems like the format is a protobuf wrapped in snappy. I was wondering if there was a relatively simple/crude way to ...
0
votes
0answers
18 views

View Apple Numbers file format

I have a very tiny Apply Numbers file: And I have saved it here: https://drive.google.com/file/d/1nyGJan-D9Jn0mddjAZQikFmUHi5ceIya/view?usp=sharing. Is there a way in which I can view the file in a ...
0
votes
1answer
54 views

determine proprietary 16-bit floating-point format

Background / Introducion CAN message Mercedes-Benz, cannot determine 16-bit data type for temperature. 7E 00 32 01 37 00 According to @rnd-ash (who has reverse engineered ACTIA Basic XS Monitor ...
2
votes
1answer
131 views

Proprietary 3D Format Reverse Engineering: What Could These Numbers And Matrices Represent?

I'm trying to reverse engineer a model format from an older Russian game (Pathologic) with limited success. It is a proprietary model format not recognized by any converters/editing tools (believe me, ...
0
votes
1answer
17 views

Issue in opening a file type after unzipping

I downloaded a file from this link https://storage.cloud.google.com/gresearch/smallcnnzoo-dataset/cifar10.tar.xz, and I successfully downloaded the archive file.I unzipped it using 7-Zip. After ...
2
votes
1answer
115 views

Reverse engineering Roland TR-8S kit file format .t8k

I'm trying to figure out the file format that the Roland TR-8S drum machine uses for importing/exporting drum kits. My goal is to replace the sample (PCM) data within a kit. It's a proprietary binary ...
0
votes
2answers
126 views

Open unknown image format (probably a RAW image)

I copy image files here from a linux based system which ends with .bin. Unfortunately I don't know how to open it. The goal is to convert images to this format later. What I have already tried: Open ...
1
vote
0answers
70 views

reversing an HDL file [closed]

I was given an HDL file with the following content: i was asked to reverse it and retrieve the value of in , how can i do it please knowing that i have the value of out? thanks
0
votes
0answers
56 views

Can I reverse engineer original file names?

I'm new to IT and I turned my external hard-drive into a windows boot disc. I managed to recover files with testdisc & photorec_win. The downside is I got more than I bargened for and I have twice ...
0
votes
0answers
28 views

Cannot find audio file type

I'm trying to find the audio file type of this file (extension wtj) around 8 minutes). I extracted it from a music box. I've tried many things: Open in Winamp and VLC => no luck Open with ...
1
vote
0answers
79 views

What type of file has the file signature 'BOOT'?

I have a .bin file which I am trying to disassemble into something that I can edit. Given that binary files can contain just about any binary data, I found it difficult to assess what file data is ...
0
votes
2answers
47 views

how do i use the text like in pe files?

I extracted pe file from another pe file and I saved it. I want it execute but when I saved file computer sees it like text file. Altough my actual file starting with "4d 5a" computer sees ...
2
votes
1answer
248 views

Reverse engineering a .byte file format

I've dug into files of a game that was made in Unity (which uses C# language)... and i was interested in extracting 3D models and textures etc. I understand that data and obb are separate, BUT! In my ...
0
votes
0answers
87 views

Need help learning to extract and modify PS1 ISO files

I was wanting to make a randomizer for a playstation game, Parasite Eve 2. I've spent a ton of time trying to figure this out just googling around and eventually wound up here. Does anyone have an ...
0
votes
1answer
60 views

Detecting and reading embedded filesystems on desktop Linux

I have some data from a NAND chip, dumped using the built in nanddump utility on the embedded device. This is the device information: https://openwrt.org/toh/bt/homehub_v5a The NAND chip is 128MiB ...
1
vote
2answers
227 views

Opening an undocumented 90s graphics format

I've managed to extract some graphics files from an archive of an old game. Haven't found anything about it online, so I'm trying my luck here, prehaps someone knows a similar format that can help me. ...
4
votes
1answer
155 views

Reverse engineer compressed iOS app file

I want to find out the compression method used by an iOS app used for music notation to store its files. The files of its OSX counterpart are zipped files. You cannot create files in the iOS app, but ...
2
votes
1answer
253 views

Extracting the contents of an unknown file format

I need some help and advice here. I'm self-learning how to reverse engineer a file content of an unknown format. Here's the content of two files: E5 44 2A F9 1C 72 96 B9 CA B2 40 33 DA 19 B9 56 C4 5F ...
0
votes
1answer
64 views

I'm trying to decode this file that supposed to encode an imaged obtained by a laser system

This file suppose to have an image obtained from a Laser system. Since it needs a propietary software for the decoder I have been slowed in order to get the data. I wonder if you guys know any way of ...
0
votes
0answers
227 views

Binwalk on flash dump yielding useless files and empty file systems

I have been investigating some routers by desoldering their nand flash and dumping them using a flash programmer. However when I use binwalk on these dumps I end up with fragments of files mixed in ...
2
votes
3answers
379 views

Reverse engineering a partially known binary format

I have files with binary data, the format description of them is very vague and incomplete. E.g., it states that records start with header byte, like (hex) FA, followed by datetime (accurate down to ...
1
vote
0answers
116 views

Decode bitmaps from Director .dxr files

I'm trying to extract bitmaps from an old Macromedia Director protected .dxr file. I was able to find some information about the file structure from here (it turns out to be a XFIR container, the ...
-1
votes
2answers
117 views

How would I start to decode this? Asking for help from a friend (Alien Hominid Invasion)

I have literally no idea how to start to decode this kind of a file, but I really want these fonts and a decoder would be huge for the community, so any help would be great. Linked below is a google ...
1
vote
0answers
188 views

How are strokes stored in the Goodnotes file format?

I have been trying to reverse engineer the .goodnotes file format (a note taking app for iOS devices) and so far have discovered this: A .goodnotes file is simply a zip archive, an example file ...
0
votes
0answers
85 views

What kind of integer obfuscation is this?

I'm looking at the network traffic of a game submitting the user's score to the high-score server. The score value seems to be obfuscated in some way. The score is a non-negative integer, and not more ...
2
votes
1answer
328 views

Reverse engineer a proprietary audio file

This is my first time posting here and also my first time attempting to do reverse engineering of this kind. Let´s get to the point: I have to find a way of reading some phone call audio files. The ...
0
votes
1answer
71 views

Algorithm for decoding database like file structure

I am working on an automatic decode tool for a database like file structure. The file consists of a header and a body. Information that is known before trying to decode the file: Number of rows and ...
1
vote
1answer
80 views

Identifying the nature and contents of a file

As a preface, I do not have any experience in reverse engineering. I am an application developer, so this field is way out of my area of expertise. My end goal is to create a web page out of this ...
0
votes
1answer
155 views

What image format is this?

I am trying to reverse engineer an image file generated by my microscope. It is supposed to be an HDR image. The file has very distinct pattern in HEX editor but I am unable to recognise it: First 16 ...
1
vote
1answer
104 views

Why doesn't binwalk see the filesystems in this Eufy Home Base 2 flash dump?

This teardown: https://electronics-teardowns.blogspot.com/2020/07/eufy-homebase2-teardown.html Gives a flash dump for the Eufy Home Base 2 here: https://anonymousfiles.io/Ve9y3cL4/ With this partition ...
0
votes
1answer
154 views

Reverse Engineer Unknown File Format

I have thousands of old backup files from EaseUs Todo Backup. They are incremental backups saved inside a ".pbd" file (EaseUs's proprietary backup format). I've tried to get my files out ...
2
votes
2answers
396 views

Attempting to reverse engineer an iOS OTA payload-like archival format

Apple's announcement of macOS Big Sur had meant the release of the developer beta. In an attempt to create the appbundle from Apple's softwarecatalog, I attempted to study the contents of ...
1
vote
2answers
111 views

Wave File obfuscation

I have this file here, that is supposed to be a wave audio file, but seems to have some obfuscation applied to it. The file header is here: https://pastebin.com/LD5aA1EG Any suggestions where else ...
2
votes
0answers
127 views

Writing a Ghidra FileSystem Module for 8-bit era disk images in which files have no header, format, or magic bytes

I've given myself a project of writing Ghidra Loaders and FileSystems for an 8-bit retrocomputing platform, namely the Sinclair ZX Spectrum. But I'm new to Ghidra, Java, and Eclipse. When developing ...
1
vote
1answer
67 views

advapi32.dll changes name of function during forwarding of exports

Im trying myself at writing a manual mapper, for injection of DLLs into other processes. Ive come to the point, where I've written a simple "Hello World" dll, that im trying to inject into another ...
-1
votes
1answer
108 views

How to decode a .plr file

I have a .plr file that contains all of the player information for the game Terarria. I would like to decode it to have a look at what data is stored on this file so that I can play around with making ...
0
votes
1answer
86 views

Decoding unknown logfile format

I have logfiles in the following format without any documentation: to 12.03.2020 08:04:15 < '7"\05\04\02\16\F6\C6\D6"'#0D to 12.03.2020 08:04:15 > '7S"\05\04\00\02\00\01\91\8E"'#0D to 12.03....
0
votes
2answers
101 views

Convert series of hex digits represented as ASCII-characters stored in a .txt file to raw bytes

I recently extracted a bunch of raw bytes (from wireshark) into a regular .txt file. Because these raw bytes are stored in a text file, all those hex-digits are actually written as ASCII characters ...
0
votes
1answer
89 views

Is there a image format that starts with 0x4E 0x58 0x50 (ASCII 'NXP')?

I'm looking at a binary file whose starting bytes are 0x4E 0x58 0x50. Is this an established magic number for a file format? If so, what format is it? My google-fu has proven too weak to find an ...
0
votes
1answer
2k views

Can "missing section headers" ELF files still be executed/dangerous?

On VirusTotal, there are lots of ELF samples are missing section headers when using file command to see the info. Also, when using the Python elftools library to parse them, exceptions will be thrown....
0
votes
1answer
77 views

Encrypted image format

I am trying to reverse a simple image format for bitmap data with an indexed colour palette. The structure of the file is generally clear and I am able to extract the size of the picture and the ...
1
vote
0answers
29 views

Format of Alcatel_Lucent I-240W-A backup file

I am trying to modify the backup file of this router in order to change some configurations. Here is the structure I have until now: 16 bytes of the header, zlib compressed xml with the ...
1
vote
0answers
543 views

Analyzing firmware image (eCos with YAFFS)

I'm trying to apply some of the practices I learn in class and online and reverse engineer the firmware of a Chinese dash camera. I've downloaded the firmware from their website (Smart dash camera: ...
1
vote
1answer
785 views

How to make sense of RTOS in firmware?

I am reverse engineering a firmware which has a Linux and an RTOS component. I used binwalk to easily locate the Linux filesystems, extract them, mount them, and now I have binaries which I can open ...
2
votes
1answer
74 views

How to “unprotect” malicious workbook without knowing password

Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
-1
votes
1answer
585 views

De-obfuscate JS code [closed]

I came across a script that converts font files from one type to another (i.e. WOFF to TTF, etc). I would like to understand it and incorporate some of the code into a personal project. The script ...
1
vote
0answers
111 views

Reproducing video format

I received a promotional video screen with a USB interface. It comes with a couple example videos, one of which is here: https://drive.google.com/file/d/1B-wSURAgK-ePrfpKFM5nYbNhQ5mD-Ii2/view?usp=...
5
votes
2answers
543 views

Is there a way to confirm and decompress files that I suspect are compressed with a very early format of PKZIP?

I have a very large number of files (tens of thousands) who's binary all begins with 0x00 0x06. They do not open with 7-ZIP. I notice also that all Office files seem to share the same next 32 bytes. ...
1
vote
1answer
38 views

Finding examples of file with particular extentions

I'm trying to start a filetype identification project for certain groups of files based on their file extension (.exe, .pdf, etc), using yara as the identification engine, but I've run into a problem. ...
0
votes
0answers
34 views

Is there a list/property of the vulnerabilities so that, if pentested for, can read but not overwrite the system?

The question is a bit hard to explain, so I go with an example. Suppose the UFO crashed on Earth. The aliens are dead, but their on-board computer is intact. You were tasked to dump the computer's ...

1
2 3 4 5