xref: /illumos-gate/usr/src/cmd/file/magic (revision 61de0de2)
1#
2# Copyright (c) 1988, 2010, Oracle and/or its affiliates. All rights reserved.
3# Copyright 2020 OmniOS Community Edition (OmniOSce) Association.
4#
5# CDDL HEADER START
6#
7# The contents of this file are subject to the terms of the
8# Common Development and Distribution License (the "License").
9# You may not use this file except in compliance with the License.
10#
11# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
12# or http://www.opensolaris.org/os/licensing.
13# See the License for the specific language governing permissions
14# and limitations under the License.
15#
16# When distributing Covered Code, include this CDDL HEADER in each
17# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
18# If applicable, add the following below this CDDL HEADER, with the
19# fields enclosed by brackets "[]" replaced with your own identifying
20# information: Portions Copyright [yyyy] [name of copyright owner]
21#
22# CDDL HEADER END
23#
24# This file contains the dictionary of file format identifiers (magic strings)
25# used by file(1).  The fields of this file are as follows:
26#
27# (1) byte offset
28# (2) value type
29# (3) optional operator (= by default)
30# (4) value to match (numeric or string)
31# (5) string to be printed
32#
33# Numeric values may be decimal, octal, or hex.  Also note that the last string
34# may have one printf format specifier.  The '>' in occassional column 1's is
35# magic: it forces file(1) to continue scanning and matching additional lines.
36# The first line afterwards not so marked terminates the search.
37#
38# The entries for ELF are not needed anymore, as file(1) now uses the elf(3ELF)
39# routines to look at ELF files.  They remain, commented out, for reference.
40#
41#0	string		\177ELF		ELF
42#>4	byte		1		32-bit
43#>5	byte		1		LSB
44#>5	byte		2		MSB
45#>16	short		0		unknown type
46#>16	short		1		relocatable
47#>16	short		2		executable
48#>16	short		3		dynamic lib
49#>16	short		4		core file
50#>18	short		0		unknown machine
51#>18	short		1		WE32100
52#>18	short		2		SPARC
53#>18	short		3		80386
54#>18	short		4		M68000
55#>18	short		5		M88000
56#>18	short		6		i80486
57#>18	short		7		i860
58#>18	short		8		RS3000_BE
59#>18	short		9		UNKNOWN
60#>18	short		10		RS3000_LE
61#>18	short		11		RS6000
62#>18	short		12		UNKNOWN
63#>18	short		13		UNKNOWN
64#>18	short		14		UNKNOWN
65#>18	short		15		PA_RISC
66#>18	short		16		nCUBE
67#>18	short		17		VPP500
68#>18	short		18		SPARC32PLUS
69#>18	short		19		UNKNOWN
70#>18	short		20		PowerPC
71#>20	long		1		Version 1
72#>36	long		1		MAU Required
73257	string		ustar		USTAR tar archive
74>156	byte		88		extended format
750	short		070701		cpio archive
760	string		070701		ASCII cpio archive
770	short		070702		cpio archive - CRC header
780	string		070702		ASCII cpio archive - CRC header
790	short		070707		cpio archive - CHR (-c) header
800	string		070707		ASCII cpio archive - CHR (-c) header
810	long		0177555		obsolete ar archive
820	short		0177545		pdp11/pre System V ar archive
830	long		0100554		apl workspace
840	short		017037		packed data
850	string		<ar>		System V Release 1 ar archive
860	string		!<arch>		current ar archive
870	short		0407		pdp11/pre System V vax executable
88>8	ushort		>0		not stripped
89>15	ubyte		>0		- version %ld
900	short		0401		unix-rt ldp
910	short		0405		pdp11 overlay
920	short		0410		pdp11/pre System V vax pure executable
93>8	ushort		>0		not stripped
94>15	ubyte		>0		- version %ld
950	short		0411		pdp11 separate I&D
96>8	ushort		>0		not stripped
97>15	ubyte		>0		- version %ld
980	short		015001		Compiled Terminfo Entry
99# little-endian entry
1000	short		0432		Compiled Terminfo Entry
1010	short		0433		Curses screen image
1020	short		0434		Curses screen image
1030	short		0437		pdp11 kernel overlay
1040	short		0570		vax executable
105>12	long		>0		not stripped
106>22	ushort		>0		- version %ld
1070	short		0575		vax pure executable
108>12	long		>0		not stripped
109>22	ushort		>0		- version %ld
1100	short		0502		basic-16 executable
111>12	long		>0		not stripped
112>22	ushort		>0		- version %ld
1130	short		0503		basic-16 executable (TV)
114>12	long		>0		not stripped
115>22	ushort		>0		- version %ld
1160	short		0510		x86 executable
117>12	long		>0		not stripped
1180	short		0511		x86 executable (TV)
119>12	long		>0		not stripped
1200	short		0550		3b20 executable
121>12	long		>0		not stripped
122>22	ushort		>0		- version %ld
1230	short		0551		3b20 executable (TV)
124>12	long		>0		not stripped
125>22	ushort		>0		- version %ld
1260	short		0560		WE32000 executable
127>12	long		>0		not stripped
128>18	short		^00010000	- N/A on 3b2/300 w/paging
129>18	short		&00020000	- 32100 required
130>18	short		&00040000	and mau hardware required
131>20	short		0443		(target shared library)
132>20	short		0410		(swapped)
133>20	short		0413		(paged)
134>22	ushort		>0		- version %ld
1350	short		0561		WE32000 executable (TV)
136>12	long		>0		not stripped
137>18	short		&00020000	- 32100 required
138>18	short		&00040000	and mau hardware required
139>22	ushort		>0		- version %ld
1400	short		=0512		iAPX 286 executable small model (COFF)
141>12	long		>0		not stripped
142>22	ushort		>0		- version %ld
1430	short		=0522		iAPX 286 executable large model (COFF)
144>12	long		>0		not stripped
145>22	ushort		>0		- version %ld
1460	short		0514		iAPX 386 executable (COFF) (deprecated)
147>12	long		>0		not stripped
148>22	ushort		>0		- version %ld
1490	short		0520		mc68k executable
150>12	long		>0		not stripped
1510	short		0521		mc68k executable (shared)
152>12	long		>0		not stripped
1530	short		0522		mc68k executable (shared demand paged)
154>12	long		>0		not stripped
155# big-endian entries for pure executables
1562	short		0410		pure
157>1	byte		0		sun2 executable
158>1	byte		1		mc68010 executable
159>1	byte		2		mc68020 executable
160>1	byte		3		SPARC executable
161>0	ubyte		>077		dynamically linked
162# little-endian entries for pure executables
1632	short		04001		pure
164>1	byte		0		sun2 executable
165>1	byte		1		mc68010 executable
166>1	byte		2		mc68020 executable
167>1	byte		3		SPARC executable
168>0	ubyte		>077		dynamically linked
169# big-endian entries for impure executables
1702	short		0407		impure
171>1	byte		0		sun2 executable
172>1	byte		1		mc68010 executable
173>1	byte		2		mc68020 executable
174>1	byte		3		SPARC executable
175>0	ubyte		>077		dynamically linked
176# little-endian entries for impure executables
1772	short		03401		impure
178>1	byte		0		sun2 executable
179>1	byte		1		mc68010 executable
180>1	byte		2		mc68020 executable
181>1	byte		3		SPARC executable
182>0	ubyte		>077		dynamically linked
183# big-endian entries for Sun demand paged executables
1842	short		0413		Sun demand paged
185>1	byte		0		sun2 executable
186>1	byte		1		mc68010 executable
187>1	byte		2		mc68020 executable
188>1	byte		3		SPARC executable
189>0	ubyte		>077		dynamically linked
190# little-endian entries for Sun demand paged executables
1912	short		05401		Sun demand paged
192>1	byte		0		sun2 executable
193>1	byte		1		mc68010 executable
194>1	byte		2		mc68020 executable
195>1	byte		3		SPARC executable
196>0	ubyte		>077		dynamically linked
1970	short		0x8001		Adobe PostScript Type 1 binary font (PFB)
1980	short		0x0180		Adobe PostScript Type 1 binary font (PFB)
1990	long		0x00010000	TrueType font file version 1.0 (TTF)
2000	long		0x00000100	TrueType font file version 1.0 (TTF)
2010	long		0xf00000ff	extended accounting file
202# little-endian entry
2030	long		0xff0000f0	extended accounting file
2040	byte		0x80		8086 relocatable (Microsoft)
2050	byte		0xf0		MS-DOS library
2060	short		0xff65		x.out
207>2	string		__.SYMDEF	randomized
208>0	byte		x		archive
2090	short		0x206		Microsoft a.out
210>0x1e	short		&0x10		overlay
211>0x1e	short		&0x2		separate
212>0x1e	short		&0x4		pure
213>0x1e	short		&0x800		segmented
214>0x1e	short		&0x400		standalone
215>0x1e	short		&0x8		fixed-stack
216>0x1c	byte		&0x80		byte-swapped
217>0x1c	byte		&0x40		word-swapped
218>0x10	long		>0		not-stripped
219>0x1e	short		^0xc000		pre-SysV
220>0x1c	byte		&0x4		86
221>0x1c	byte		&0x9		286
222>0x1c	byte		&0xa		386
223>0x1e	short		&0x1		executable
224>0x1e	short		^0x1		object file
225>0x1e	short		&0x40		Large Text
226>0x1e	short		&0x20		Large Data
227>0x1e	short		&0x120		Huge Objects Enabled
2280	short		0x10b		VAX demand load format a.out object file
229>0x10	long		>0		not stripped
2300	short		0x140		old Microsoft 8086 x.out
231>0x3	byte		&0x4		separate
232>0x3	byte		&0x2		pure
233>0	byte		&0x1		executable
234>0	byte		^0x1		relocatable
235>0x14	long		>0		not stripped
2360	long		0x10b		VAX demand load format a.out object file
237>0x10	long		>0		not stripped
2380	long		0x140		old Microsoft 8086 x.out
239>0x3	byte		&0x4		separate
240>0x3	byte		&0x2		pure
241>0	byte		&0x1		executable
242>0	byte		^0x1		relocatable
243>0x14	long		>0		not stripped
2440	long		0xe807		object file (z8000 a.out)
2450	long		0xe808		pure object file (z8000 a.out)
2460	long		0xe809		separate object file (z8000 a.out)
2470	long		0xe805		overlay object file (z8000 a.out)
2480	long		0x178		Bell 5.0 executable
2492	short		0410		Sun read-only text executable
250>2	short		0407		Sun old executable
251>1	byte		3		(SPARC)
252>1	byte		2		(68020)
253>1	byte		1		(68010)
254>1	byte		0		(Sun2)
2550	short		0143561		byte-swapped cpio archive
2560	long		0101555		PDP-11 single precision APL workspace
2570	long		0101554		PDP-11 double precision APL workspace
2580	long		0101557		VAX single precision APL workspace
2590	long		0101556		VAX double precision APL workspace
2600	short		017437		old packed data
2610	string		\037\036	packed data
2620	string		\377\037	compacted data
2630	string		\037\235	compressed data
264>2	byte&0x80	>0		block compressed
265>2	byte&0x1f	x		%d bits
2660	string		\037\213	gzip compressed data
267>2	byte		8		- deflate method
268>3	byte		&0x1		, ascii
269>3	byte		&0x2		, continuation
270>3	byte		&0x4		, extra field
271>3	byte		&0x8		, original file name
272>3	byte		&0x10		, comment
273>3	byte		&0x20		, encrypted
274>8	byte		2		, max compression
275>8	byte		4		, max speed
2760	string		!<arch>\n__.SYMDEF	archive random library
2770	long		0x1010101	MMDF mailbox
2780	string		<!OPS		Interleaf ASCII document
27924	string		SunGKS		SunGKS
280# version number follows, in the form m.n
281>0	string		GKSM		Metafile
2820	string		GKSM		GKS Metafile
283# version number follows, in the form <!OPS, Version n.n>
2840	string		%!PS-AdobeFont	Adobe PostScript ASCII font (PFA)
2850	string		%!		PostScript document
286>2	string		PS-Adobe	 conforming to level
287>10	string		-1.0		 1.0
288>10	string		-2.0		 2.0
289>10	string		-3.0		 3.0
290# Handle Microsoft PostScript files (CTRL-D%!)
2910	string		\004%!		PostScript document text
292# version ID follows, in the form PS-Adobe-nn
2930	string		Interpress/Xerox	Interpress document
294# version ID follows, in the form /n.n
2950	string		StartFontMetrics	Adobe font metrics
2960	string		StartFont	Adobe font bits
2970	long		0x137A2944	NeWS bitmap font
2980	long		0x137A2947	NeWS font family
2998	long		0x137A2B45	X11/NeWS bitmap font
3008	long		0x137A2B48	X11/NeWS font family
301# snoop files are always big-endian
302# big-endian entries, with ullong equivalent of string "snoop"
3030	ullong		0x736e6f6f70000000	Snoop capture file
304>8	long		>0		- version %ld
305# little-endian entries, with ullong equivalent of string "snoop"
3060	ullong		0x000000706f6f6e73	Snoop capture file
307>11	long		>0		- version %ld
3080	short		0436		vfont definition
3090	string		<MakerFile	Frame Maker document
3100	string		<MIFFile	Frame Maker MIF file
3110	string		<MML		Frame Maker MML file
3120	string		<BookFile	Frame Maker book file
313# Audio files are always big-endian so there are two sets of tables here.
314# The CPU endian architecture is determined via the ordering of the first 4 bytes
315# (the string ".snd"). The tables below have this value represented as a single
316# 4 byte long. If the architecture is big-endian the %d token can be used for
317# interpreting the sampling rate.
318# Since %d can't be done on the data for little endian machines the limitation
319# is that sampling rates not included in the x86 entries will not be recognized.
320#
321# big-endian entries
322#
3230	long		0x2e736e64	audio data:
324>12	long		1		8-bit u-law,
325>12	long		2		8-bit linear PCM,
326>12	long		3		16-bit linear PCM,
327>12	long		4		24-bit linear PCM,
328>12	long		5		32-bit linear PCM,
329>12	long		6		32-bit floating point,
330>12	long		7		64-bit floating point,
331>12	long		23		compressed (4-bit G.721 ADPCM),
332>12	long		24		compressed (8-bit G.722 ADPCM),
333>12	long		25		compressed (3-bit G.723 ADPCM),
334>12	long		26		compressed (5-bit G.723 ADPCM),
335>12	long		27		8-bit A-law,
336>20	long		1		mono,
337>20	long		2		stereo,
338>20	long		4		quad,
339>16	long		x		%d Hz
340#
341# little-endian entries
342#
3430	long		0x646e732e	audio data:
344>12	long		0x01000000	8-bit u-law,
345>12	long		0x02000000	8-bit linear PCM,
346>12	long		0x03000000	16-bit linear PCM,
347>12	long		0x04000000	24-bit linear PCM,
348>12	long		0x05000000	32-bit linear PCM,
349>12	long		0x06000000	32-bit floating point,
350>12	long		0x07000000	64-bit floating point,
351>12	long		0x17000000	compressed (4-bit G.721 ADPCM),
352>12	long		0x18000000	compressed (8-bit G.722 ADPCM),
353>12	long		0x19000000	compressed (3-bit G.723 ADPCM),
354>12	long		0x1a000000	compressed (5-bit G.723 ADPCM),
355>12	long		0x1b000000	8-bit A-law,
356>20	long		0x01000000	mono,
357>20	long		0x02000000	stereo,
358>20	long		0x04000000	quad,
359>16	long		0x401f0000	8000 Hz
360>16	long		0x80250000	9600 Hz
361>16	long		0x112b0000	11025 Hz
362>16	long		0x803e0000	16000 Hz
363>16	long		0xd4490000	18900 Hz
364>16	long		0x22560000	22050 Hz
365>16	long		0x007d0000	32000 Hz
366>16	long		0xa8930000	37800 Hz
367>16	long		0x44ac0000	44100 Hz
368>16	long		0x80bb0000	48000 Hz
369# .wav files are always little-endian
370# .wav big-endian entries, starting with long value for the string "RIFF"
3710	long		0x52494646	audio data:
372>34	short		0x0800		8-bit
373>34	short		0x1000		16-bit
374>20	short		0x0100		linear PCM,
375>20	short		0x0200		MS ADPCM,
376>20	short		0x0600		A-law,
377>20	short		0x0700		u-law,
378>20	short		0x1100		DVI ADPCM,
379>22	short		0x0100		mono
380>22	short		0x0200		stereo
381# .wav little-endian entries, starting with long value for the string "RIFF"
3820	long		0x46464952	audio data:
383>34	short		0x0008		8-bit
384>34	short		0x0010		16-bit
385>20	short		0x0001		linear PCM,
386>20	short		0x0002		MS ADPCM,
387>20	short		0x0006		A-law,
388>20	short		0x0007		u-law,
389>20	short		0x0011		DVI ADPCM,
390>22	short		0x0001		mono
391>22	short		0x0002		stereo
392# .aiff files are always big-endian
393# .aiff big-endian entries, starting with long value for the string "FORM"
3940	long		0x464f524d	audio data:
395>26	short		0x0008		8-bit linear PCM,
396>26	short		0x0010		16-bit linear PCM,
397>20	short		0x0001		mono
398>20	short		0x0002		stereo
399# .aiff little-endian entries, starting with long value for the string "FORM"
4000	long		0x4d524f46	audio data:
401>26	short		0x0800		8-bit linear PCM,
402>26	short		0x1000		16-bit linear PCM,
403>20	short		0x0100		mono
404>20	short		0x0200		stereo
405# .mid files are always big-endian
406# .mid big-endian entries, starting with long value for the string "MThd"
4070	long		0x4d546864	MIDI data:
408>8	short		x		type %u,
409>10	short		x		%u track(s)
410# .mid little-endian entry (the string "MThd")
411# can't translate big-endian type and track information
4120	long		0x6468544d	MIDI data
413#
4140	short		0x1010		PEX Binary Archive
415# rasterfiles are big-endian
416# big-endian rasterfile entries
4170	long		0x59a66a95	rasterfile,
418>4	long		>0		%ld x
419>8	long		>0		%ld x
420>12	long		>0		%ld
421>20	long		0		old format image
422>20	long		1		standard format image
423>20	long		2		run-length byte encoded image
424>20	long		3		XRGB or RGB format image
425>20	long		4		tiff format image
426>20	long		5		iff (TAAC format) image
427>20	long		0xffff		experimental format image
428# little-endian rasterfile entries
429# cannot translate resolution stored as big-endian longs
4300	long		0x956aa659	rasterfile,
431>23	long		0		old format image
432>23	long		1		standard format image
433>23	long		2		run-length byte encoded image
434>23	long		3		XRGB or RGB format image
435>23	long		4		tiff format image
436>23	long		5		iff (TAAC format) image
437>20	long		0xffff		experimental format image
4380	long		0x884f5053	Interleaf fast-saved document
4390	long		0x2a535441	Aster*x
440>7	long		0x574f5244		Words Document
441>7	long		0x47524150		Graphic
442>7	long		0x53505245		Spreadsheet
443>7	long		0x4d414352		Macro
4440	long		0x32323738	Aster*x Version 2
445>29	byte		0x36			Words Document
446>29	byte		0x35			Graphic
447>29	byte		0x32			Spreadsheet
448>29	byte		0x38			Macro
4494	string		pgscriptver	IslandWrite document
45013	string		DrawFile	IslandDraw document
4510	string		P1		PBM ascii file
4520	string		P2		PGM ascii file
4530	string		P3		PPM ascii file
4540	string		P4		PBM raw file
4550	string		P5		PGM raw file
4560	string		P6		PPM raw file
4570	string		\115\115	TIFF file, big-endian
4580	string		\111\111	TIFF file, little-endian
4590	string		GIF87a		GIF file, v87
4600	string		GIF89a		GIF file, v89
4610	string		\377\330\377\340	JPEG file
4620	string		\377\330\377\341	JPEG file
4630	string		\377\330\377\356	JPG file
4648	string		ILBM		IFF ILBM file
4650	string		\312\376\272\276	java class file
46636	string		acsp	Kodak Color Management System, ICC Profile
4670	string		%PDF		Adobe Portable Document Format (PDF)
468>4	string		-1.0		v1.0
469>4	string		-1.1		v1.1
470>4	string		-1.2		v1.2
471>4	string		-1.3		v1.3
472>4	string		-1.4		v1.4
473>4	string		-1.5		v1.5
4740	string		<html		html document
4750	string		<HTML		html document
4760	string		<Html		html document
4770	string		<!doctype HTML	html document
4780	string		<!doctype Html	html document
4790	string		<!doctype html	html document
4800	string		<!DOCTYPE HTML	html document
4810	string		<!DOCTYPE Html	html document
4820	string		<!DOCTYPE html	html document
4830	string		<!Doctype HTML	html document
4840	string		<!Doctype Html	html document
4850	string		<!Doctype html	html document
4860	string		<head		html document
4870	string		<HEAD		html document
4880	string		<Head		html document
4890	string		<title		html document
4900	string		<TITLE		html document
4910	string		<Title		html document
4920	string		<?xml		XML document
4930	string		<?XML		XML document
4940	string		<?Xml		XML document
4950	string		\0211PNG	PNG image data
4960	string		.RMF		RealMedia file
4970	string		FlAsH-aRcHiVe	Flash Archive
498>13	string		-1.0		 1.0
499>13	string		-2.0		 2.0
50038	string		application/vnd.sun.xml.writer	StarOffice 7 Text Document
50138	string		application/vnd.sun.xml.calc	StarOffice 7 Spreadsheet
50238	string		application/vnd.sun.xml.draw	StarOffice 7 Drawing
50338	string		application/vnd.sun.xml.impress	StarOffice 7 Presentation
50438	string		application/vnd.sun.xml.math	StarOffice 7 Formula
50538	string		application/vnd.oasis.opendocument.chart	OpenDocument Chart
50638	string		application/vnd.oasis.opendocument.database	OpenDocument Database
50738	string		application/vnd.sun.xml.base			OpenDocument Database
50838	string		application/vnd.oasis.opendocument.formula	OpenDocument Formula
50938	string		application/vnd.oasis.opendocument.image	OpenDocument Image
51038	string		application/vnd.oasis.opendocument.text-web	HTML Document Template
51138	string		application/vnd.oasis.opendocument.text-	OpenDocument
512>78	string		template						Text Template
513>78	string		master							Master Document
51438	string		application/vnd.oasis.opendocument.text		OpenDocument Text
51538	string		application/vnd.oasis.opendocument.graphics	OpenDocument Drawing
516>81	string		-template						Template
51738	string		application/vnd.oasis.opendocument.presentation	OpenDocument Presentation
518>85	string		-template						Template
51938	string		application/vnd.oasis.opendocument.spreadsheet	OpenDocument Spreadsheet
520>84	string		-template						Template
5210	string		PK\003\004	ZIP archive
5220	string		MZ		DOS executable (EXE)
5230	string		LZ		DOS built-in
5240	byte		0xe9		DOS executable (COM)
5250	byte		0xeb		DOS executable (COM)
5260	string		\013\023\010\000	ksh compiled shell script executable
52724	long		60012		ufsdump archive file
5280	string		TZif		zoneinfo timezone data file
5290	string		BZh		bzip2 compressed data
530>3	byte		>47		, block size = %c00k
5310	ulong		0xfd2fb528	Zstandard compressed file
5320	string		SUNWcpch	Sun C compiler precompiled header
5330	string		SUNWCpch	Sun C++ compiler precompiled header
5340	string		\043\040PaCkAgE\040DaTaStReAm	package datastream
5350	short		0xcff1		CTF data file
5360	string		\177DOF		DTrace DOF data file
5370	string		\177FCF		fmd(1M) checkpoint file
5380	string		EFT\0		Fault tree file,
539>4	ushort		x		v%u
540>6	ushort		x		rev %u,
541>8	ushort		x		from esc v%u
542>10	ushort		x		rev %u
5430	string		_SM_		DMTF SMBIOS image
544>6	byte		x		version %u
545>7	byte		x		.%u
5460	byte		0x11		Solaris Audit File
5470	byte		0x78		Solaris Audit File
548# ZFS send stream entries
5498	ullong		0x00000002f5bacbac	ZFS snapshot stream
550# little endian stream
5518	ullong		0xaccbbaf502000000	ZFS snapshot stream
552
553
554# Video files
5552	string		\001\272\041	MPEG Movie file
5560	string		\377\375	MPEG-1 Audio Layer 2
5570	string		\377\373	MPEG-1 Audio Layer 3
5580	string		\377\372	MPEG-1 Audio Layer 3
5590	string		\111\104\063	MPEG-1 Layer 3 with ID3v2
560
561# AVI and GVI files
56220	string	hdrlavih	RIFF Avi Video
563>36	ulong	>0		%u Max Bps,
564>64	ushort	x		%u X
565>68	ushort	x		%u,
566>48	ulong	x		%u frames
567
56820	string	goog		RIFF gvi
569>88	ulong	>0		%u Max Bps
570>116	ushort	x		%u X
571>120	ushort	x		%u,
572>100	ulong	x		%u frames
573
574# JPEG 2000 - jp2 image file.
5753	string		\014\152\120\040\040	JPEG 2000 Image file
576
577# iso 9660 CD-ROM image and El Torito Bootable standard
57832769	string		CD\0		ISO 9660 filesystem image
579>34823	string		EL\040TORITO	- El Torito
580
581# Palm Pilot files .pdb and .prc of some type.
5820x3c	string	TEXtREAd		Palm DOC file
5830x3c	string	SDocSilX		iSilo 3 Doc file for PalmPilot
5840x3c	string	applSil			iSilo Application file
5850x3c	string	appl			Palm Pilot Application
5860x3c	string	ToGoToGo		iSilo Doc file for Palm Pilot
587
588#SGI files with .rgb extention
5890	string	\001\332			SGI Image data,
590>2	byte	1			RLE,
591>2	byte	0			Verbatim,
592>5	ubyte	x			%u-D
593>7	ubyte	x			%u x
594>9	ubyte	x			%u,
595>11	ubyte	x			%u channel(s)
596
5972048	string		PCD_IPI		Kodak Photo CD image pack file
598>0xe02	byte&0x03	0x00		, landscape mode
599>0xe02	byte&0x03	0x01		, portrait mode
600>0xe02	byte&0x03	0x02		, landscape mode
601>0xe02	byte&0x03	0x03		, portrait mode
6020	string		PCD_OPA		Kodak Photo CD overview pack file
603
604# MS Documents. Not much info available.
6050	string	\320\317\021\340\241\261\032\341	Microsoft
606>546	string	bjbj					Word
607>0	byte	<0					Document
6080	string	{\\rtf		Microsoft Rich Text Format Document
609
610# mp4 media format with different media files embedded in it
6114	string	ftyp		MPEG-4
612>8	string	isom		Base Media v1 [IS0 14496-12:2003]
613>8	string	iso2		Base Media v2 [ISO 14496-12:2005]
614>8	string	m4a\040		Apple iTunes AAC-LC (.M4A) Audio
615>8	string	m4v\040		Apple iTunes (.M4V) Video
616>8	string	qt		Apple QuickTime (.MOV/QT)
617>8	string	jp2		JPEG 2000 Image
618>8	string	jpm		JPEG 2000 Compound Image (.JPM) [ISO 15444-6]
619>8	string	jpx		JPEG 2000 w/ extensions (.JPX) [ISO 15444-2]
620>8	string	mp42		v2 [ISO 14496-14]
6214	string	moov		QuickTime MOV file
622
6230	string		\375\067\172\130\132\000	xz compressed data
624