file format recognizing

[zeytunak]

hi

I have a file that kmplayer cant play and show below data

--------------------
BINARY INFO
--------------------
FileName : fat01860.dat
Data :
51 46 41 54 01 00 00 00 3C 00 00 00 00 00 00 00 QFAT <
00 00 00 00 00 00 00 00 D0 02 00 00 40 02 00 00 @
00 00 19 00 00 00 00 00 00 00 00 00 00 00 00 00 
00 00 00 00 00 00 00 00 00 00 00 00 11 00 01 00
40 1F 00 00 D7 0F 00 00 00 01 04 00 02 00 00 00 @
51 46 41 54 04 04 00 00 C4 14 00 00 ED 24 88 BA QFAT  $
4D 01 00 00 00 00 00 01 61 E2 00 FD F5 6E FD 57 M a n W
BE 08 60 9B 66 E7 1F FA 5E BD F7 02 11 F8 0D 72 ` f  ^ r
9F F7 CF 7E C2 FB E0 86 FE 52 71 7E A9 01 13 DA ~ Rq~
1F 90 25 6A 7B 91 F5 E7 93 E2 F3 33 33 6A 81 25  %j{ 33j %
6F B0 50 4B 80 D6 2F E2 3C 3A 8B ED AC 12 5F 8C o PK / <: _
9D E0 CD 67 34 0E 7B 51 F6 52 7E 26 10 DA 44 4D g4 {Q R~& DM
E3 F6 64 AE 5B 8C 87 84 25 DD 7F 89 0C 35 91 C0 d [ %  5
B1 FD 3A BF 19 8C D2 03 7A 71 88 B5 85 75 7D EC :  zq u}
30 AC 2E A0 1C 64 97 45 82 3D 21 B3 DC 31 63 06 0 . d E =! 1c
B7 4C FD 29 68 E8 2F 19 38 40 40 97 DD 06 D7 D5 L )h /8@@
3E 29 E5 F0 84 6A 99 F0 9F 48 FA BE EC F3 A1 F2 >) j H
8C FC 64 92 A9 81 89 47 B0 88 6F 36 54 20 31 DA d G o6T 1
75 DD E0 66 50 2E 11 E9 AB EA 40 2F 19 02 05 AC u fP. @/
77 DE 3F B3 1C D0 45 26 07 B5 6D 02 75 A3 3F 9B w ?  E& m u ?
2E F4 32 88 B2 90 7B 14 BB 3D 50 3D 01 13 75 FF . 2 { =P= u
33 45 26 ED 78 FE 5C D6 8D C2 D1 DD FB 2C B7 93 3E& x \ ,
8A 8D 41 2F 5D 5A 57 A0 4F 88 DA 84 CC DB 60 6B A/]ZW O `k
6B 8D F0 FE 3F 2D AE 4E BD 5D 62 93 AF 4A 29 EB k ?- N ]b J)
AF 49 CF 56 17 F3 77 7E B8 BA 03 A2 40 B0 18 C6 I V w~ @ 
20 2D 48 7B 36 EC F0 8D 2F B0 1E 13 E2 BB F7 08 -H{6 / 
17 F2 F4 7F 27 A7 F1 FB 34 A6 07 C0 FC 70 71 FC  ' 4 pq
21 C9 D0 2A EB D3 0B 53 E3 42 1C 23 C8 BF C5 3A ! * S B# :
2B FC 1B FC 07 57 E3 47 A7 C0 FA 08 A4 3E 33 EB +  W G >3
62 5C 81 C3 E2 CC 79 A0 F6 99 9C 3E 65 8E 71 FD b\ y >e q
1E CC 06 BD 01 58 3D BF 1C 87 E4 FF A4 E5 34 3C  X=  4<
97 82 AA 64 F2 3E C3 56 48 F1 22 18 87 3D EB 86 d > VH " =
A2 2A E9 E9 A5 D7 C4 D5 04 0B A3 B8 53 F4 C8 34 * S 4
0A 3B C0 AD FF C9 E8 03 EA F5 C5 ED 78 41 C2 9A ; xA
67 99 78 4F CE 43 80 47 EB 8F DE 6F F0 8E 9C 12 g xO C G o
7D B7 E9 6D 20 FE 33 81 83 CF 40 24 E9 6D 6E A7 } m 3 @$ mn
E0 F9 68 97 E1 1F 4C 09 5A C7 E6 63 11 BB E0 71 h L Z c q
DD C2 F1 9B 3F 81 1E E7 E7 6E 9F 8D 06 0F B3 CD ?  n
E1 FD 1E 32 1D 86 C1 A3 58 A0 59 72 A8 1E CC 38 2 X Yr  8
FA 99 DB 01 F5 92 67 19 74 B6 3F FC 27 DA F6 25 gt ? ' %
D5 AB AF 44 77 EE 7E B1 4A 29 7C 92 71 9D 1A E9 Dw ~ J)| q 
4C 6D 86 C2 1A FD E8 77 F7 C0 7F 29 7F 98 DE 1A Lm  w ) 
5C DF 82 4F 97 EC 58 27 F8 8C 67 A4 13 C1 02 F8 \ O X' g
62 D4 07 C7 D1 AE E9 00 C0 BE 32 3A 04 8A E4 F1 b 2:
13 50 1F B7 8F 10 43 4B 95 EC 27 A2 E5 63 78 15 P CK ' cx
EE 96 07 FF C4 F8 6C B8 A9 1B 49 83 0D D9 FF EB l I
E2 6C 7D 1F F3 60 97 46 CF 47 00 C6 DA 63 E3 AC l} ` F G c
86 C1 19 3A 07 2B F7 3B 9D 89 FC 07 FE 23 37 7F : + ; #7
3C 57 65 07 FB DF F2 7B F8 CC A2 06 34 0F 6B 02 <We { 4 k
01 D5 6F B0 60 F4 17 F1 16 18 49 CB FD 48 18 1F o `  I H
32 71 79 D5 55 8F FE 3E 41 D0 1B 6C 40 CD 7C 02 2qy U >A l@ |
55 05 D5 FC F6 33 DF F1 95 85 3D A4 F8 D1 39 B8 U 3 = 9
63 1E 3A F0 C5 C0 FC 1F C5 CD 06 87 5E C3 89 F7 c:  ^
6A 4B 87 F2 50 3F E0 8B 96 96 F8 BB 4D FD 0B BF jK P? M
BB 7F DF 97 0D C9 E1 94 1C 74 2B 9F AD 4D CD AF  t+ M
E1 39 81 01 FA 1F C4 79 48 28 1A 38 B8 64 6D A1 9  yH(8 dm
80 3F C4 48 3F 62 37 B0 2B 04 89 17 8C F1 96 2D ? H?b7 +  -
71 A0 78 59 40 3F 14 08 9B 43 FC 7F 7F 1E 63 E0 q xY@? C c
8F 7E 5F 15 D9 20 A3 28 7F CB 78 BF 5C B4 36 7F ~_ ( x \ 6
84 37 D2 D9 67 08 FC 46 81 EC 1F F1 FE 9E 81 68 7 g F  h
FF 05 5E C0 78 D1 27 80 87 59 7A FA D7 C1 77 41 ^ x ' Yz wA
53 EC BE BD F5 6F 84 AE FE 87 F5 AA E6 EF D7 3A S o :
DF 04 37 EF F7 DE 85 71 9C DE 8F C7 77 73 1B 2C 7 q ws,
7D C0 4D EF 03 69 FA 8B A6 D2 22 90 43 4C B4 50 } M i " CL P

what is this file format and what player can play it ?
maybe this is not video file but i extract this file from DVR box .

thanks a lot

[an0rma1]

as you can see in the file header, the tag is QFAT
first i thought this could a hd image file (indicating the hd was in FAT format not NTFS), but i don't know any hd image formats that uses this (at least qemu,bosch,vmware,etc)
AFAIK, i don't think is a video file, at least the main formats. You could try TRID tool (http://mark0.net/soft-trid-e.html) to see it the tool could recognice the file.

good luck!

Edit:
you could rename it to .mp4 or .avi and try to open it with Videolan, also try opening it with winrar, or with 7zip, if it fails you could even try to repair it with winrar, the tool will look for valid zips or rar inside the container. Sometimes it works.

[LaDidi]

@zeytunak:
Hi,

Bizarre...
QFAT doesn't look like a HD header. FAT16, FAT32, exFAT, ... exists but no QFAT.
There's a "PK" signature => maybe it's a zip file with an erroneous header.
Try to delete the bytes before "PK" signature and check if it's a zip.

Where does this file come from ?

Regards.

[N0P]

maybe ? https://github.com/openstreetmap/merkaartor/tree/master/src/Tools/QFatFs

[zeytunak]

thanks friends

problem solved , this is video file , and come from DVR ( digital video recording ) .
i test other valid file with same header that played

[LaDidi]

@N0P:
Hi,

Thanks for the link.
No sure it was implemented in an hdd partition. because it doesn' respect sector partition format...

Regards.

[maktm]

I don't know if any programs currently exist but you could use something like HexEdit to compare the first n bytes and see the type of header. What would be easier is writing a small script/executable that can compare across a large collection of file formats, I think I'll write it soon

[maktm]

I built a pretty boring solution, all you have to do is download the repo and add more file formats in the std::map using the [] operator. Hope this helps someone (despite it sucking)


https://github.com/Maktm/FHeader/tree/master/src/FHeader