Sup Cred Forums. I found this USB stick that was seemingly empty so I ran recuva on it and I found pic related...

Sup Cred Forums. I found this USB stick that was seemingly empty so I ran recuva on it and I found pic related. Any suggestions as to what I can do to see what that file may be?

It is from a relative that has passed away so I'm hoping for some sweet sweet wincest. Will post any progress.

Attached: whatisthis.png (473x552, 21K)

Other urls found in this thread:

checkfiletype.com/
dell.com/community/Systems-Management-General/OMSA-8-1-could-not-install-the-HAPI-driver-W2K8R2/td-p/4572806
twitter.com/NSFWRedditVideo

fuck yea

wat

open it with a text editor and post a paste or pic of the outcome

It's 83MB. It crashes when I try to open it in notepad.

Based on the size of that file it looks like a video file.
Make a copy in your video folder & change the extension to all common video formats till one works.
Post results

you could try a hex inspector to see if there are any signs of specific filetypes

> usb stick
> location C

I noticed that too, plus the creation time?

>Created: Friday, January 25, 2075

o yea thats kinda fuked

Maybe he transferred the file from the drive to a new folder?

> accessed 1980

Read the OP post, I ran recuva and recovered this file. The drive appears empty so it was wiped clean.

Trying now. Every file type so far opens but it's just a blank screen and some random time and it plays and nothing happens. VLC says it doesn't recognize and can't find the codec.

Downloading one now will post in a minute

pic related

Attached: recovering.png (1039x552, 35K)

could you share the file?

Simple case of time traveller finding time traveller's usb stick
On a bright side the USB format has at least 55 more years in it

Attached: 1567912655734.jpg (800x476, 408K)

wtf does this mean

Attached: hexedit.png (1829x964, 200K)

post mega

very little (to me at least) are there any readable strings?

several million lines but I don't see anything while scrolling fast. Here it is in notepad++

Attached: textedit.png (1914x974, 233K)

i cant tell from screenshots rly, an upload of the file would be helpful

looks encrypted or incompatible with notepad

maybe binary file?

it may be, just dont run it outside of a sandbox or a non networked vm

Already tried to put .exe on it and it wouldn't run. How fucked am I?

If it has some sweet sweet wincest I want to block out faces before posting it lol

try this

checkfiletype.com/

youre probably fine
and i think were all pretty doubtful that thats what it is
that looks promising

don't think it is an executable.

Did you try zip rar and similar packed file extensions already?

Yes, the hero has arrived

Trying now.

Good to hear.

Haven't but I'm trying now.

Could you export it to dropbox? It could just be an OS like Ubuntu in a Japanese font that makes the extension look weird. If you have Linux, type "file " to see what the header of the binary is

Yes, the hero has arrived**

Try Stellar Phoenix Data Recovery, maybe it will work

Scratch that. file wouldn't work on an ecrypted file and this really looks like an ecrypted backup of some phone dump or what not. But uploading to dropbox would be nice ya know, so I could try a bunch of shit on it, be a fun type for me.

The soft will see what kind of extension it is based on what's the file contain and will repair it. If it doesn't work I think you're pretty fucked OP

i think we'd all enjoy the challenge

Tried this site and it just keeps getting "Problem loading page" after I upload the file. Maybe it is too big?

there really isnt much more suggestible without being able to take a look ourselves

okay but if you find something add me on kik first jjhhardy69 I'll pay you if you get something and don't post it.

mega
/#!6LoFEaCI!W7hNw-fp6VySSrd_XqKGSslbB13JjDtiVoFM5ighUks

thanks ill let ya know if i find anything

Yea but could we still be shown the solved file, im pretty intrigued now and im really not some computer genius lmao

how much?

Sweet, I'll look into it. I don't have kik and don't want money. I just wanted to play around with it.

Yea but could we still get updated on the file if it gets solved. Im pretty intrigued now but im not some computer genius lol

Sorry for the double replies, thought internet wasn't working

>821273479

You can open the file in 7zip as an archive ... seems to be some kind of driver ... no win in it.

Bout three fiddy

depends what you find.

Attached: 1.png (477x149, 8K)

Attached: 2.png (492x756, 55K)

The linux utility 'file' will tell you what kind of file it is.

seems to be some kind of dell driver/utility

im at the same results as below
the `file` command returns it as `data`

So it's just a fucking driver? Damn. I was really hoping for titties.

How did you guys get to this point? You used the linux command? I'm a windows normie.

sorry OP no win

i unzipped it with p7zip

Just use 7zip ... and open the file with it (it will open almost any type of archive).

Thats windows btw

thanks for the intrigue OP
gn yalls

The .inf files will have human readable driver names in them.

>seems to be some kind of dell driver/utility

Some readable segments within the file do confirm this.
OP should forget about it.

ah okay, I use winrar, but I'll get 7zip.

Sorry for the lack of win. Here is a present for you Cred Forumsros for helping me out.

/#F!mO4XjIIZ!oBtFS0lmzqpWcXqtfDix3g

[Strings]
DELL = "DELL INC"
StdMfg = "(Standard system devices)"
ClassName = "System"
dcdbasDevice.DeviceDesc = "System Management Device"
dcdbas.SVCDESC = "System Management Driver"
DiskId1 = "Disk 1"

I'm still running this software btw. It's taking forever but maybe that's a good thing?

ditch winrar ... 7zip is far superior ... opens basically everything and is free.

OP, if you want, past line 1500 gets to human readable text, but it's just the dll/executable strings inside them, like error messages. Following the strings and what the other person said about the config file, sounds like someone working at Dell really. I see:
SOFTWARE\Dell Computer Corporation\DellHAPI\CurrentVersion

so I ran the stellar software and I found more files. But it wants an activation key to get the files. Anyone have a crack?

Attached: morerecovered.png (872x1676, 79K)

>finds random USB drive
>plugs it in
You're a lucky fuck, it's most likely a video file.

makes my cry that they still using this legacy shit in 55 years. Why. Fat 32 is garbage

THIS
GIB FILE

Attached: 1565216470290.jpg (700x680, 105K)

looks like when you open an image in notepad
search for readable strings. Most image file types have their extension in clear text somewhere in this mess

The bat file inside the binary installs hapi whatever hapi could possibly be. I'm gonna install it, let's see how it goes.

better open the bat in an editor first
this is how viruses spread

>>>>>It crashes when I try to open it in notepad

With 4GB of RAM I was openning files weighing in hundreds of megs on my old laptop with Vista on it. The fuck are you on about you dumb cuck.

Stop trying to get attention. Sage in all fields.

you need to read the whole thread you turbo nigger.

I should have checked which files it opened. I assumed it'd open an install wizard, but it just installed HAPI, whatever that is. I'm looking around at the other executables, but they really don't explain what HAPI is.

On the topic of wins...

A mate of mine uses rclone encrypt to back stuff up to our Google drive.

I can see the files but they have messed up names.

Anything I can do to decrypt them?

just open the bat file in notepad and send the screenshot, Bat are clear text code, then we can tell what it dose / did when you already executed that

on the note of security, if you see all these exe it would be better if you puled that thing into a Linux box, or a vm if you don't want to fry your main Windows install

Ah, that's why nothing happened. I needed to run the bash script as administrator! I backed up my files just in case, but I don't know exactly where they're putting their installed files:

Installing Components
*********************

HAPI version being installed: 8.1
HAPI version being installed: 8.1
Removing current HAPI base driver, if installed.
Installing HAPI libraries based on supported system type(s).
Installing driver: dcdbas
WARNING: The supported system type(s) is UNKNOWN. Continuing anyway.
Not copying HAPI symbol files because symbol files were not selected.
Installing HAPI files.
Not copying HAPI test tool file because it was not selected.
Updating the registry.
Updating the registry.


Install Summary
***************
Install Complete: No errors encountered.

there is nothing interesting in that bat

@SETLOCAL
@echo off

::make sure the start dir is the same as where the batch file locates
SET batchDir=%~dp0
CD /D %batchDir%

@IF "%1" == "" GOTO usage
@IF "%1" == "install" GOTO in
@IF "%1" == "uninstall" GOTO unin

:in
CD hapi
hapint64 -k SPHAPIDA5 -p %SystemRoot%\hapint64.exe -q
goto end

:unin
CD hapi
hapint64 -k SPHAPIDA5 -r -q
goto end


@GOTO end

:usage
@ECHO Usage:
@ECHO To Install hapinst install
@ECHO To Uninstall hapinst uninstall


:end
@POPD

@ENDLOCAL

just an basic installer
it copies some files

>registry
so if your unlucky you may be fucked
but still basic installer stuff, can you run this HAPI thing?

HAPI seems to be the installer to this OMSA which is the omsacntl.exe file that is the largest file and starts up an OMSA service manager, which I've found some forum issues about it here:
dell.com/community/Systems-Management-General/OMSA-8-1-could-not-install-the-HAPI-driver-W2K8R2/td-p/4572806

Sadly, I wasn't able to get the service manager to open:

ERROR: Could not open handle to service - dcesm
Removal of DCESM Shell Service failed.


Starting: Drivers
ROOT\SYSTEM\0003 :
Server Agent is not installed.

>6
reading the code, if you want to uninstall this thing:
make a new bat file and paste this into it

-----------------------------------------------
@SETLOCAL
SET batchDir=%~dp0
CD /D %batchDir%
CD hapi
hapint64 -k SPHAPIDA5 -r -q
@POPD
@ENDLOCAL
-----------------------------------------------
and then run

some history on the usb?

looks like some IT guys maintenance USB with some diagnostic tools on.

I'm not OP, just an idiot who downloaded a binary from Cred Forums and decided to install it on his home computer

if she has died, you could always go visit (I'm assuming your aunt or something) and while people are cleaning house, raid her panty drawer. Take a bunch of her clothes too so as not to arouse too much suspicion.

Also, look everywhere for cds, microusbs, any electronics.

Give us details OP, who was she? How recent was this? Do you have access to her belongings?

>cont.
I'm done playing with it. Running an anti-virus just in case, then going off to the bar. I don't believe the binaries are malicious in any way if anyone else wants to play with it. You need to use admin command prompt (or powershell but I'm an oldfag who still uses command prompt) and I believe you need a Dell machine. I have an Acer so I think that's why I think I'm getting UNKNOWN system that I show in

link doesn't work anymore breh

you didnt do shit, why would you get it

because this is Cred Forums and half of what we do is post these links

Based user. Monitoring this thread

worked 20 min ago faggot