I am working on a new case and have found some potentially useful HTML fragments inside a file with a DCTMP extension. I've found this to be an incomplete download of an AVI file. The header is that of an AVI file, and somewhere in the middle (not slack space) are parts of HTML pages. Can anyone help me explain how they got there?
My current theory is that DC++ (the program used) will save an incomplete file the same size as if it was completed, and would fill in the empty parts with data from either pagefile or RAM, or another location. Can anyone confirm this or offer an alternative theory?
"alternative theory"
You can layer html-xml in some avi and Quicktime movies as hot spots or interactive clickables
http//
What codecs (how old) and what creation dates will help id the authoring.