fhuseynli
fhuseynli

Reputation: 660

How to identify the binary compression type from the content?

I am trying to restore files which are stored in MS SQL database (used by third party application which has stopped their support) as an image data type(byte arrays). So what I do is to write those rows of byte arrays to file to convert for know file extensions. However some of them are not known which I believe they are compressed. Since I get "CC_Compress" string and random characters in the file after conversion. I was wondering if it is possible to find out which compression method were used and how can I decompress it before I convert them.

Following is first bytes from the byte array: 0x43435F434F4D50524553530000000000000000000000010004F60000E4780000EC7C075C54C7F3F85CA10A8A204544796001519A0D4569414414011115238A079C80C21D5204224D632C51C19268628FC6A851638B9A88882D9604C5D83BB688A002564085FBCFBEBDC71DCD16623EFFEF2FA373B33B5B667676B6BC7DCB3B9DDFF2E677DB8D6F411D70060154CB34401514C043D4E5223A00AD80F2AA65321961B54494FD07FF5FC1C3750741304E430850A19B0B2CE8B0BFD8F16DD5019A43C88490097FC4FD1107F5404368003D740036B6E6B1D816DE0C32598BB78639F89EFDDD20801AAA1C6E8CB60205E

and 43435F434F4D5052455353 is the part that converts to CC_Compress

Thanks in advance,

Upvotes: 0

Views: 3207

Answers (1)

Mark Adler
Mark Adler

Reputation: 112502

Raw deflate-compressed data begins 32 bytes in (starting with the ec 7c). You can use zlib to decompress it.

Upvotes: 4

Related Questions