how to identify unknown file

[vinifera]

i have a specific file (size is over 100 MB)

but i can't figure out from header what it is since it was dumped as just file w/o extension

the first line among alot of gibberish produce this:
 

XFIRÂ'N	LPPApami      }!" @              pamm¨          ˙˙˙˙˙˙˙˙˙˙˙˙XFIRÂ'N

 

and few liines below it gives these references:
 

C:\Program Files\Macromedia\Director 8\xtras\Net Support\INetURL.x32D
C:\Program Files\Macromedia\Director 8\xtras\Net Support\NetFile.x32E
C:\Program Files\Macromedia\Director 8\xtras\Net Support\NetLingo.x32
C:\Program Files\Macromedia\Director 8\xtras\Media Support\SWADCmpr.x32
C:\Program Files\Macromedia\Director 8\xtras\Devices\MacroMix.x32
C:\Program Files\Macromedia\Director 8\xtras\Devices\DirectSound.x32
C:\Program Files\Macromedia\Director 8\xtras\Media Support\Sound Control.x32
C:\Program Files\Macromedia\Director 8\xtras\Media Support\Text Asset.x32
C:\Program Files\Macromedia\Director 8\xtras\Media Support\TextXtra.x32

 

i did try to rename file and add extension of .x32 and .dir
then i tried to open these files in Macromedia Director 8.5 , but it doesnt accept it/them

and if it's .RIFF file, i dont know how to even open it, because for a fact i know it contains VIDEO file
and "internet" only reffers RIFF to be corel image

 

any ideas ?

[NotHereToPlayGames]

If you know it to be video, I would try any video converter and see if it will convert it.

Or rename it as .avi or .mp4 and see if a "universal" video player will then play it.

[vinifera]

its not solely a video, but it contains a video too

 

[NotHereToPlayGames]

Have you tried renaming to .zip or .7z and then extracting it?

Or trying Universal Extractor or UniExtract2?

[jaclaz]

Try TriD before anything else.

https://mark0.net/soft-trid-e.html

Anyway, likely it is a RIFX file:

http://fileformats.archiveteam.org/wiki/RIFX

Possibly you can use QuickBMS:

http://aluigi.altervista.org/quickbms.htm

jaclaz

Edited June 11, 2021 by jaclaz

[Tripredacus]

It is a little-endian RIFF (RIFX) file from Macromedia Director.

Quote

Director Movie Files use a RIFX container. The file consists of Chunks, each beginning with a ChunkID (taking the form of a FourCC.) It’s similar to a RIFF container, like what WAV uses, except that RIFX containers can either be little or big endian. If the file is big-endian, it will begin with the ID RIFX. If it’s little-endian, it will begin with the ID XFIR. Whether the file is little or big endian depends on the processor of the computer that saved the file, but Director is always capable of opening files of either endianness.

https://nosamu.medium.com/a-tour-of-the-adobe-director-file-format-e375d1e063c0

[vinifera]

well as i said, macromedia director fails to open it in any form
trid just gives generic "its a riff"
and quickbms spews out errors and nothing extracted or given
 

 

[jaclaz]

Quickbms is a tool that needs a sort of plugin/script for each file type.

It simply makes no sense whatever to say "quickbms spews out errors and nothing extracted or given".

There is a RIff parser on its page, that may (or may not) work "as is".

Very likely what you have in your hands is a corrupted file (hence the Macromedia cannot open it) and it is possible that the Riff plugin may need some tweaks/changes.

jaclaz

[vinifera]

since it belongs to MS internals id recon it was crypted with key