I am examining, or at least attempting to examine a Hitachi DZHS300A camcorder/camera. From my research this unit should have a UDF file system on the internal HDD.
I have a couple of programs that are supposed to mount UDF but all I get is "unrecognized."
When looking at the disk in a hex editor I see
*UDF LV Info
OSTA Compressed Unicode
HDD_CAMERA
No Owner Name
No Organization Name
No Contact Information
*HITACHI DVD UDF_FS
repeats several times
*UDF DVD CGMS Info
H4
*UDF FreeEASpace
RTR_EXTN
DVD_RTAV
repeats several times
All of this is padded with 00
Then what I believe is the suspect file (maybe 1 file with three "sections" or three files, I have not resolved that yet)
R_MANGR.IFO
VR_MANGR.BUP
VR_MOVIE.VRO
more 00 padding, then
45545765555456433455 and the rest of the file.
What I don't have or cannot seem to Google is what the header and footer for the three files or sections would be so I can manually carve the file(s). There is however a lot of info on how to play, convert edit, so once I get a file I think I am good to go.
Does anyone have a file like this? My guesses at what to carve have not resulted in a usable file.
TIA for any help.
All UDF systems I have seen use a 2K sector size. I would expect to see sector 0x10 (or maybe 0x11) to have the letters BEA at the start.
I am not sure what type of file the .VRO is, but if an MPEG each sector will start with 0x00 0x00 0x01 0xb?
VRO should be a RAW file.
This may (or completely fail to ? ) help
http//
http//
jaclaz
jaclaz -
cdroller was definitely a point in the right direction. Although it did not recognize the camera it did help me pull some files from another source.
I will post some results when I figure out or decipher what I am looking at.
Thanks