I have come across a file with the signature of a Windows 3.xx cardfile but the header within the file of a 3gp file.
Header of file
ftyp3gp4….3gp4isom….mdat
I realise the reason forensic software sees this as a card file is because of the file suffix, .crd, but am slightly confused that the header in the file actually indicates it to be a 3gp file.
Any help on how to open or view this file would be greatly appreciated.
What does TriD say? ?
http//
Check these also
http//
http//
http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&p=6513849
It seems to me like a MP4 or quicktime file.
jaclaz
Good tip, examined with trid and found 74.9% is mp4 and 25.0% is adobe photoshop.
Any tips on a good mp4 player? The one i am using is refusing to open it even after renaming the suffix to mp4.
Media Player Classic and VLC are both good general purpose media players
Agreed, normally they are, sadly i think i am dealing with something a little bit special as the usual suspects aint helping.
What is still bothering me is the fact the file was suffixed .crd and not a media suffix.
This does not sit right at all. This data was extracted from a crude cctv system using what appears to be a mobile phone camera connected to a 1gb micro sd card via a circuit board.
The file itself was deleted but I was able to retrieve it to examine and get the header info from, maybe the body of data is corrupted.
MP4 are "tough" as they may be encoded/compressed/whatever with different codecs/algorithms.
Something you may want to try
XviD
http//
3ivx
http//
ffdshow
http//
etc.
jaclaz
When you say crude do you mean home made? If it is a mobile phone camera maybe you could try the Nokia media player or something similar?
A lot of commercial CCTV systems use proprietary formats, where they basically take a normal video format and tweak it slightly to only play in their own players. This might be why the results were 75% mp4 and 25% Photoshop. If it is a commercial product try contacting the manufacturer to find out what their player is.
There is also a research paper recently done by Coventry University that outlines the format and structure of a popular CCTV system. It does cost a little to download the paper, but it might be of use http//
yes home made, downed and tried the Nokia media player on friday funnily enough.
Still looking around for other players.
Thanks to the advice i have received so far i have got some things to work on.
Thanks all for your input, i really appreciate it.
Another one to try, VLC
http//
It should be one of the most "open minded" tools.
jaclaz