On Tue, 2008-05-06 at 08:38 -0500, Usurp wrote: > There is a msi installer inside that file at offset 249586. > Hint : > $ dd if=MTSDK_v3.0.2.exe of=MTSDK_v3.0.2.msi bs=512 skip=488 > 464190+1 records in > 464190+1 records out > 237665656 bytes (238 MB) copied, 19.703 s, 12.1 MB/s Thanks a lot. That worked and the msi file seems to install ok with 'msiexec /i file.msi'. I wouldn't have found that on my own but I think I can "reverse engineer" your solution :-) 1) Grep for "Microsoft Installer" in /usr/share/file/magic. Find \xD0\xCF\x11\xE0\xA1\xB1\x1A\xE1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x3E\x00\x03\x00\xFE\xFF Microsoft Installer 2) hexedit MTSDK_v3.0.2.exe Search for D0CF11... Found at 0x3D000 (249856) just after a load of PADDING bytes. Block size is 512 so 249856/512 = 488 blocks. 3) Use dd to extract the msi file. Did you do something like that? All I did previously was run cabextract but that extracts the contents of the msi file too instead of just removing the extra header. Anyway thanks for your help, I've learnt something today. -- Carl
