Skip to main content ↑ ↓

Notice

Please note that most of the software linked on this forum is likely to be safe to use. If you are unsure, feel free to ask in the relevant topics, or send a private message to an administrator or moderator. To help curb the problems of false positives, or in the event that you do find actual malware, you can contribute through the article linked here.
Topic: unknown format mp_ (Read 4504 times) previous topic - next topic
0 Members and 1 Guest are viewing this topic.

unknown format mp_

Hi all!
One friend give me a CD from a "cool wear" shop, this kind of media usually sounds in shops for two weeks and after this time it ends in the trash, so he take a pair of them and give to me to see if I can play in my pc.
The thing is that I can´t open it in anyway, I´ve tried to rename, open as and so on... nothing work!
In the CD you also can find two whatever.inf, so I suspect that it´s a private codec or system to play that files. Anyway I let you the link to the file, for if you want to see and test it...

http://rapidshare.de/files/30454576/00264406.mp_.html

Any help is really well apreciated.

backfolder.-

unknown format mp_

Reply #1 –
TrID says it's an MP3 file:
Code: [Select]
C:\Documents and Settings\**********\My Documents\trid_w32>trid 00264406.mp_

TrID/32 - File Identifier v2.00 - (C) 2003-06 By M.Pontello
Definitions found:  2137
Analyzing...

Collecting data from file: 00264406.mp_
 71.4% (.MP3) MP3 audio (ID3 v1.x tag) (2500/1/1)
 28.5% (.MP3) MP3 audio (1000/1)
But neither Mr QuestionMan nor MeadiaInfo recongnize it as such...
WavPack 5.7.0 -b384hx6cmv / qaac64 2.80 -V 100

unknown format mp_

Reply #2 –
Any brave have test it?

backfolder.-

unknown format mp_

Reply #3 –
I did, and I guess that others too, but hell knows what it is, there's nothing sensible in it, except repeating patterns of nulls. It looks like some raw data, maybe compressed and/or encrypted because it doesn't compress very well.

unknown format mp_

Reply #5 –
First of all thanks for your attention.
Now the *.inf files...

_http://rapidshare.de/files/31613841/BETTO.rar.html

You better see editing them, but nothing to see, at least for me...

TIA.

backfolder.-

unknown format mp_

Reply #6 –
It'd have been a lot easier if you'd just posted them in the way that Egor described!

unknown format mp_

Reply #7 –
By the way, the .mp_ file can be compressed very well (81% of the original size). The file starts with FF FD 90 C0 and then there is some repeating pattern.

The .inf files:

Betho.inf
Code: [Select]
979
"4/04/2000"
"246"
"C-11 (10/99)"
"00000000"
"00007001"
"00007002"
"00007003"
"00007004"
"00007005"
"00007006"
"00007007"
"00007008"
"00007009"
"00007010"
"00007011"
"00007012"
"00007013"
"00007014"
"00007015"
"00007016"
"00007018"
"00007017"
"00007019"
"00007020"
"00007021"
"00007022"
"00007023"
"00007024"
"00007025"
"00007026"
"00007027"
"00007028"
"00007029"
"00007030"
"00007031"
"00007032"
"00007033"
"00007034"
"00007035"
"00007036"
"00007037"
"00007038"
"00007039"
"00007040"
"00007041"
"00007042"
"00007043"
"00007044"
"00007045"
"00007046"
"00007047"
"00007048"
"00007049"
"00007050"
"00007051"
"00007052"
"00007053"
"00007054"
"00007055"
"00007056"
"00007057"
"00007058"
"00007059"
"00007060"
"00007061"
"00007062"
"00007063"
"00007064"
"00007065"
"00007066"
"00007067"
"00007068"
"00007069"
"00007070"
"00007071"
"00007072"
"00007073"
"00007074"
"00007075"
"00007076"
"00007077"
"00007078"
"00007079"
"00007080"
"00007081"
"00007082"
"00007083"
"00007084"
"00007085"
"00007086"
"00007087"
"00007088"
"00007089"
"00007090"
"00007092"
"00007091"
"00007093"
"00007094"
"00007095"
"00007096"
"00007097"
"00007098"
"00007099"
"00007100"
"00007101"
"00007102"
"00007103"
"00007104"
"00007105"
"00007106"
"00007107"
"00007108"
"00007109"
"00007110"
"00007111"
"00007112"
"00007113"
"00007114"
"00007115"
"00007116"
"00007117"
"00007119"
"00007118"
"00007120"
"00007121"
"00007122"
"00007123"
"00007124"
"00007125"
"00007126"
"00007127"
"00007128"
"00007129"
"00007130"
"00007131"
"00007132"
"00007133"
"00007134"
"00007135"
"00007136"
"00007137"
"00007138"
"00007139"
"00007140"
"00007141"
"00007142"
"00007143"
"00007144"
"00007145"
"00007146"
"00007147"
"00007148"
"00007149"
"00007150"
"00007151"
"00007152"
"00007153"
"00007154"
"00007155"
"00007156"
"00007157"
"00007158"
"00007159"
"00007160"
"00007161"
"00007162"
"00007163"
"00007164"
"00007165"
"00007166"
"00007167"
"00007168"
"00007169"
"00007170"
"00007171"
"00007172"
"00007173"
"00007174"
"00007175"
"00007176"
"00007177"
"00007178"
"00007179"
"00007180"
"00007181"
"00007182"
"00007183"
"00007184"
"00007185"
"00007186"
"00007187"
"00007188"
"00007189"
"00007190"
"00007191"
"00007192"
"00007193"
"00007194"
"00007195"
"00007196"
"00007197"
"00007198"
"00007199"
"00007200"

Betto.inf
Code: [Select]
 979 
 246 
"C-11 (10/99)"
00000000
00007001
00007002
00007003
00007004
00007005
00007006
00007007
00007008
00007009
00007010
00007011
00007012
00007013
00007014
00007015
00007016
00007018
00007017
00007019
00007020
00007021
00007022
00007023
00007024
00007025
00007026
00007027
00007028
00007029
00007030
00007031
00007032
00007033
00007034
00007035
00007036
00007037
00007038
00007039
00007040
00007041
00007042
00007043
00007044
00007045
00007046
00007047
00007048
00007049
00007050
00007051
00007052
00007053
00007054
00007055
00007056
00007057
00007058
00007059
00007060
00007061
00007062
00007063
00007064
00007065
00007066
00007067
00007068
00007069
00007070
00007071
00007072
00007073
00007074
00007075
00007076
00007077
00007078
00007079
00007080
00007081
00007082
00007083
00007084
00007085
00007086
00007087
00007088
00007089
00007090
00007092
00007091
00007093
00007094
00007095
00007096
00007097
00007098
00007099
00007100
00007101
00007102
00007103
00007104
00007105
00007106
00007107
00007108
00007109
00007110
00007111
00007112
00007113
00007114
00007115
00007116
00007117
00007119
00007118
00007120
00007121
00007122
00007123
00007124
00007125
00007126
00007127
00007128
00007129
00007130
00007131
00007132
00007133
00007134
00007135
00007136
00007137
00007138
00007139
00007140
00007141
00007142
00007143
00007144
00007145
00007146
00007147
00007148
00007149
00007150
00007151
00007152
00007153
00007154
00007155
00007156
00007157
00007158
00007159
00007160
00007161
00007162
00007163
00007164
00007165
00007166
00007167
00007168
00007169
00007170
00007171
00007172
00007173
00007174
00007175
00007176
00007177
00007178
00007179
00007180
00007181
00007182
00007183
00007184
00007185
00007186
00007187
00007188
00007189
00007190
00007191
00007192
00007193
00007194
00007195
00007196
00007197
00007198
00007199
00007200
Edit: the FF FD 90 C0 sequence is a mpeg audio frame header "MPEG Version 1 Layer II,
160kbps 44100 Hz, Single channel".
 

unknown format mp_

Reply #8 –
The repeating pattern doesn't contain the FF FD 90 C0 header and starts with 9 bytes followed by 00 00. At the end of pattern it is padded with more than 90 zero bytes.

So, the file seems to be a modified MP2 audio (with stripped frame header and padded with zeroes).