1# 2# @(#)magic (AT&T Research) 2012-05-11 3# 4# magic number database for file(1) and magic(3) 5# 6# the tab separated fields are: 7# 8# [op]offset type [mask]operator description mime 9# 10# + previous fields must match, current optional 11# & previous and current fields must match 12# { start nesting block 13# } end nesting block 14# s{ function declaration and call 15# } function return 16# s() function call 17# 18# offset byte offset for magic number test or (@offset) expr 19# or file meta-data from { atime blocks ctime fstype 20# gid mode mtime name nlink size uid } 21# type { byte short long quad date edit match } 22# mask optional &number before operator 23# operator comparison operator { < <= > >= != == (default) } 24# description file description for magic number match 25# mime optional mime type 26# 27# numeric values may be decimal, octal, or hex 28# the description string may have one printf format spec for the 29# matched magic number 30# 31 320 short 070707 binary cpio archive application/pax 330 string 070707 cpio archive application/pax 34+76 edit %!PAX!C!\([^!]*\).*%\1% , compressed, version %s 35+76 edit %!PAX!D!\([^!]*\).*%\1% , delta, version %s 36+76 string DELTA!!! , delta, version 88 37+76 match !(*!*) , [ %s ... ] 380 string 070701 System V asc cpio archive application/pax 39+110 string * , [ %s ... ] 400 string 070702 System V aschk cpio archive application/pax 41+110 string * , [ %s ... ] 420 long 0177555 System III ar archive application/x-ar 430 short 0177545 pdp11 ar archive application/x-ar 440 long 0x04034b50 zip archive application/zip 45+2 byte >0 , version %d 46&3 byte * .%d 470 long 0x223e9f78 ms outlook tnef archive application/pax 480 string MSCF ms cabinet archive application/pax 49&4 long 0 50+25 byte * , version %d 51+24 byte * .%d 520 string \x52\x61\x72\x21\x1a\x07 rar archive application/pax 530 long 0x0d010b05 make object application/x-nmake 54o{ 55+4 byte <037 (version %ld) 56+4 edit %.*\(..\)/\(..\)/\(..\).*%19\3-\1-\2% , version %s 57+4 edit %.*\(....-..-..\).*%\1% , version %s 58} 590 long 0177535 make object, old magic application/x-nmake 60o() 610 long 0x090f0301 jmake project db application/x-jmake 62+4 string * , version %s 630 long 0x0b130800 ksh binary script application/ksh 64+4 byte * , version %ld 650 string vkda delta application/x-vdelta 66+4 byte >0 (version %ld) 670 long 0x03040200 cql db application/x-cql 68+4 byte * , version %d 69+5 byte * .%d 70+6 string * , %s 710 string !<cdb- 72+6 edit %\([^-]*\)-\([0-9.]*\)>.*%cql db, \1 format, version \2% %s application/x-cql 730 long 0x08091800 74+32 string * %s application/x-cql 75+0 byte * hashed index 76+4 long >0 , %d record%s 77+8 long >0 , %d max 78+12 date >0 , stamp %s 790 string \1S\1B\1C\1S sbcs delta application/x-sbcs 800 long 0100554 apl workspace application/x-apl 810 short 017037 packed data application/zip 820 string <ar> System V 1.0 ar archive application/x-ar 830 string !<arch>\n/ ar library application/x-ar 84+68 long 0x020b0619 , hp s800 relocatable 85+68 long 0x02100619 , hp pa-risc 1.1 relocatable 86+68 long 0x02110619 , hp pa-risc 1.2 relocatable 87+68 long 0x02140619 , hp pa-risc 2.0 relocatable 880 string !<arch>\n__.SYMDEF ar library, ranlib application/x-ar 890 string !<arch>\n__________E ar library, hybrid application/x-ar 900 string !<arch>\n_______[0-9_][0-9_][0-9_]E[BL]E[BL]_ ar library, hybrid application/x-ar 91o{ 92+22 byte 'X' , out of date 93+20 byte 'U' , ucode members 94+21 byte >='A' , %c-endian members 95+19 byte >='A' , %c-endian hash 96} 970 string !<arch>\n________64E ar library, 64 bit hybrid application/x-ar 98o() 990 string !<arch> ar archive application/x-ar 1000 string <aiaff>\n aix ar library application/x-ar 1010 string <bigaf>\n aix ar library, big application/x-ar 10220 short 0xa7dc zoo archive application/x-zoo 103&22 short 0xfdc4 104+32 byte * , version %ld 105+33 byte * .%ld 106 1070 string \326\303\304\330 vcodex data application/x-vczip 108+5 void vcodex() 109 1100 long 0x080456 111{ 11285 byte <10 sun 113+85 byte <3 m680%d0 114+85 byte 3 sparc 115+85 byte >3 *unknown* 116} 117+85 byte * core dump x-system/core 118+128 string * from `%s' 119+132 string * from `%s' 1200 long 050632 core dump x-system/core 1210 long &0xfff00000==0xe8c00000 Alliant core dump 122+160 string * from `%s' 123 1240 long 0x02100106 hp pa-risc 1.1 object x-system/obj 1250 long 0x02100107 hp pa-risc 1.1 executable x-system/exe 126o{ 127+(@144) long 0x054ef630 , dynamically linked 128+96 long >0 , not stripped 129} 1300 long 0x02100108 hp pa-risc 1.1 executable, shared x-system/exe 131o() 1320 long 0x0210010b hp pa-risc 1.1 executable, demand-load x-system/exe 133o() 1340 long 0x0210010e hp pa-risc 1.1 shared library x-system/dll 135o() 1360 long 0x0210010d hp pa-risc 1.1 shared library x-system/dll 137s{ 138+96 long >0 , not stripped 139} 140 1410 long 0x02140106 hp pa-risc 2.0 object x-system/obj 1420 long 0x02140107 hp pa-risc 2.0 executable x-system/exe 143o() 1440 long 0x02140108 hp pa-risc 2.0 executable, shared x-system/exe 145o() 1460 long 0x0214010b hp pa-risc 2.0 executable, demand-load x-system/exe 147o() 1480 long 0x0214010e hp pa-risc 2.0 shared library x-system/dll 149o() 1500 long 0x0214010d hp pa-risc 2.0 shared library x-system/dll 151s() 152 1530 long 0x020b0106 hp s800 object x-system/obj 1540 long 0x020b0107 hp s800 executable x-system/exe 155o() 1560 long 0x020b0108 hp s800 executable, shared x-system/exe 157o() 1580 long 0x020b010b hp s800 executable, demand-load x-system/exe 159o() 1600 long 0x020b010d hp s800 shared library x-system/dll 161s() 1620 long 0x020b010e hp s800 shared library x-system/dll 163s() 164 1650 long 0x02080108 hp s500 executable, pure x-system/exe 166o{ 167+16 long >0 , version %ld 168} 1690 long 0x02080107 hp s500 executable x-system/exe 170o() 1710 long 0x02080106 hp s500 executable, relocatable x-system/obj 172o() 1730 long 0x020c0108 hp s200 executable, pure x-system/exe 174o{ 175+36 long >0 , not stripped 176+4 short >0 , version %ld 177} 1780 long 0x020c0107 hp s200 executable x-system/exe 179o() 1800 long 0x020c010b hp s200 executable, demand-load x-system/exe 181o() 1820 long 0x020a0108 hp s200 2.x executable, pure x-system/exe 183o() 1840 long 0x020a0107 hp s200 2.x executable x-system/exe 185o() 1860 long 0x020c0106 hp s200 executable, relocatable x-system/exe 187+4 short >0 , version %ld 1880 long 0x0208ff65 hp s500 old archive application/x-ar 1890 long 0x020cff65 hp s200 old archive application/x-ar 1900 long 0x020aff65 hp s200 old archive application/x-ar 1910 short 0x8000 hp lif file 1920 long 0x020c010c hp compiled Lisp 1930 long 0x4da7eee8 hp windows font 194+8 byte >0 , version %ld 195 1960 string Joy!peffpwpc PowerPC executable 1970 short 0x01df PowerPC object x-system/obj 198&3 byte 3 199 2000 long 0x50900107 pyramid 90x executable x-system/exe 201o{ 202+0 long &0x7=0x3 , paged 203+0 long &0x8 , pure 204+16 long >0 , not stripped 205} 2060 long 0x50900108 pyramid 90x object x-system/obj 2070 long 0x5090010b pyramid 90x executable x-system/exe 208o() 209 2100 long 0x000001EB plan9 386 executable x-system/exe 2110 long 0x00000107 plan9 68020 executable x-system/exe 212&mode long &0111!=0 2130 long 0x00000197 plan9 hobbit executable x-system/exe 2140 long 0x00000407 plan9 mips executable x-system/exe 2150 long 0x000002AB plan9 sparc executable x-system/exe 216 2170 long 0x7E004501 plan9 386 object x-system/obj 2180 long 0x4D013201 plan9 68020 object x-system/obj 2190 long 0x430D013C plan9 hobbit object x-system/obj 2200 long 0x3A11013C plan9 mips object x-system/obj 2210 long 0x7410013C plan9 sparc object x-system/obj 222 2230 long &0x0030FFFF==0x00000064 linux 386 224&0 long &0x000F0000>0 225+20 long &0xEFDFFFFF==0 executable x-system/exe 226+20 long &0xEFDFFFFF!=0 shared library x-system/dll 227+0 long 0x01080064 , pure 228+0 long 0x010B0064 , paged 229+0 long 0x00CC0064 , paged, no page 0 230{ 23120 long &0xEFDFFFFF==0 232&16 long >0 , not stripped 233} 234216 long 0421 linux core dump x-system/core 235 2360 long 0x00cc0064 linux 386 kernel code x-system/exe 237+size long <600000 , compressed 238510 short 0xaa55 linux 386 kernel image x-system/exe 239+size long <600000 , compressed 2400 long 0x03010410 minix 386 executable x-system/exe 2410 long 0x000186a3 minix 386 object x-system/obj 242 2430 long 0314 bsd 386 executable, paged, no page 0 x-system/exe 244+16 long >0 , not stripped 2450 long 0407 bsd 386 executable x-system/exe 246&mode long &0111!=0 247+16 long >0 , not stripped 2480 long 0407 bsd-or-linux 386 object x-system/obj 2490 long 0410 bsd 386 executable, pure x-system/exe 250+16 long >0 , not stripped 2510 long 0413 bsd 386 executable, paged x-system/exe 252+16 long >0 , not stripped 253 2540 belong 0xcafebabe java object x-java/obj 255&4 belong >30 256+6 beshort * version %d 257+6 beshort * .%d 258 259a{ 260+4 long &0x00ffffff=1 vax 261+4 long &0x00ffffff=2 romp 262+4 long &0x00ffffff=3 architecture=%ld 263+4 long &0x00ffffff=4 ns32032 264+4 long &0x00ffffff=5 ns32332 265+4 long &0x00ffffff=6 m68k 266+4 long &0x00ffffff=7 i386 267+4 long &0x00ffffff=8 mips 268+4 long &0x00ffffff=9 ns32532 269+4 long &0x00ffffff=10 architecture=%ld 270+4 long &0x00ffffff=11 hp pa-risc 271+4 long &0x00ffffff=12 acorn 272+4 long &0x00ffffff=13 m88k 273+4 long &0x00ffffff=14 sparc 274+4 long &0x00ffffff=15 i860-big 275+4 long &0x00ffffff=16 i860 276+4 long &0x00ffffff=17 rs6000 277+4 long &0x00ffffff=18 powerpc 278+4 long &0x00ffffff>=19 architecture=%ld 279+4 long &0x01000000!=0 \b-64 280} 281 2820 belong 0xcafebabe universal binary [ 283+4 belong loop(a,4,20) 284+4 belong * ] 285+010000 void magic() 286+0 void * ... 287 2880 long &0xfffffffe=0xfeedface mach-o 289+0 long &0x00000001!=0 64-bit 290a() 291+12 long <=0 filetype=%ld 292{ 29312 long 1 relocatable x-system/obj 294&mode long &0111!=0 295} 296{ 29712 long 1 object x-system/obj 298&mode long &0111==0 299} 300+12 long 2 executable x-system/exe 301+12 long 3 fixed vm shared library x-system/dll 302+12 long 4 core x-system/core 303+12 long 5 preload executable x-system/exe 304+12 long 6 shared library x-system/dll 305+12 long 7 dynamic link editor x-system/exe 306+12 long 8 bundle x-system/dll 307+12 long >=9 filetype=%ld 308 3092 short 0407 310m{ 3111 byte <10 sun 312+1 byte <3 m680%d0 313+1 byte 3 sparc 314+1 byte >3 *unknown* 315} 316+0 byte !=0xffffffff object x-system/obj 3172 short 0410 318m() 319+0 byte !=0xffffffff executable, pure x-system/exe 320o{ 321{ 3220 byte &0200 323&20 long >=0x2000 , dynamically linked 324} 325+16 long >0 , not stripped 326} 3272 short 0413 328m() 329{ 3300 byte &0200 331&20 long <0x2000 shared library x-system/dll 332} 333+0 byte !=0xffffffff executable, paged x-system/exe 334o() 335 3360 short 0420 Alliant virtual executable x-system/exe 337+16 long >0 , not stripped 338o{ 339+2 short &0x0001 , 68020 only 340+2 short &0x0002 , vector instructions 341+2 short &0x0008 , IP only 342+2 short &0x0010 , CE only 343+2 short &0x0020 , common library 344+2 short &0x0200 , no complex 345} 3460 short 0421 Alliant object x-system/obj 347+16 long 0 , no symbols 348o() 349 3500 short 0x01df aix RISC 351{ 35218 short &0x2002==0x0002 executable x-system/exe 353+18 short &0x1000 , dynamically linked 354+12 long >0 , not stripped 355} 356+18 short &0x2002==0 object x-system/obj 357+18 short &0x2000 shared library x-system/dll 3580 short 0x0103 aix RT executable x-system/exe 359+2 byte 0x50 , pure 360+28 long >0 , not stripped 361+6 short >0 , version %ld 3620 short 0x0104 aix shared library x-system/dll 3630 short 0x0105 aix ctab data 3640 short 0xfe04 aix structured file 365 3660 short 0401 unix-rt ldp 3670 short 0405 old overlay 3680 short 0437 pdp11 kernel overlay 369 3700 short 0407 System III executable x-system/exe 371o{ 372+16 long >0 , not stripped 373+2 short >0 , version %ld 374} 3750 short 0410 System III executable, pure x-system/exe 376o() 3770 short 0411 System III executable, separate I&D x-system/exe 378o() 379 3800 long 0407 vax object x-system/obj 3810 long 0410 vax executable, pure x-system/exe 382o{ 383+16 long >0 , not stripped 384} 3850 long 0413 vax executable, paged x-system/exe 386o() 387 3880 short 0413 vax executable, pure x-system/exe 389+8 short >0 , not stripped 390+15 byte >0 , version %ld 391 3920 short 0570 vax 393o{ 394{ 39516 short >0 executable x-system/exe 396+12 long >0 , not stripped 397+22 short >0 , version %ld 398} 399+16 short 0 object x-system/obj 400} 4010 short 0575 vax 402o() 4030 short 0502 basic-16 404o() 4050 short 0503 basic-16 (TV) 406o() 4070 short 0510 x86 408o() 4090 short 0511 x86 (TV) 410o() 4110 short 0550 3b20 412o() 4130 short 0551 3b20d (TV) 414o() 415 4160 long 0x464c457f elf 417&4 byte <2 418&5 byte 1 419o{ 420{ 421+18 short 0 machine=UNKNOWN 422+18 short 1 3b 423+18 short 2 sparc 424+18 short 3 i386 425+18 short 4 m68k 426+18 short 5 m88k 427+18 short 6 i486 428+18 short 7 i860 429{ 43018 short 8 431{ 43236 long &0xf00000f0==0x00000000 433+4 byte 1 mips2 434+4 byte 2 mips4 435} 436+36 long &0xf0000000==0x10000000 mips2 437+36 long &0xf0000000==0x20000000 mips3 438+36 long &0xf0000000==0x30000000 mips4 439+36 long &0xf00000f0==0x00000040 mips4 440+36 long &0xf0000000==0x40000000 mips5 441+36 long &0xf0000000==0x50000000 mips6 442+36 long &0xf0000000==0x60000000 mips7 443+36 long &0xf0000000==0x70000000 mips8 444+36 long &0xf0000000==0x80000000 mips9 445} 446+18 short 9 amdahl 447+18 short 10 mips_le 448+18 short 11 rs6000 449+18 short 15 pa 450+18 short 16 n-cube 451+18 short 17 fujitsu500 452+18 short 18 sparc32+ 453+18 short 20 powerpc 454+18 short 21 powerpc-64 455+18 short 22 s390 456+18 short 23 cell-BE 457+18 short 36 nec-v800 458+18 short 37 fujitsu-fr20 459+18 short 38 trw-rh32 460+18 short 39 fujitsu-mma 461+18 short 40 arm 462+18 short 41 alpha 463+18 short 42 hitachi-sh 464+18 short 43 sparc64-v9 465+18 short 44 siemens-tricore 466+18 short 45 argonaut 467+18 short 46 hitachi-h8/300 468+18 short 47 hitachi-h8/300h 469+18 short 48 hitachi-h8s 470+18 short 49 hitachi-h8/500 471+18 short 50 itanium 472+18 short 51 mips-x 473+18 short 52 motorola-coldfire 474+18 short 53 motorola-m68hc12 475+18 short 54 fujutsu-mma 476+18 short 55 siemens-pcp 477+18 short 56 sony-ncpu 478+18 short 57 denso-ndr1 479+18 short 58 motorola-startcore 480+18 short 59 toyota-me16 481+18 short 60 stm-st100 482+18 short 61 alc-tinyj 483+18 short 62 x86-64 484+18 short 63 sony-dsp 485+18 short 66 siemens-fx66 486+18 short 67 stm-st9-16 487+18 short 68 stm-st7-8 488+18 short 69 motorola-mc68hc16 489+18 short 70 motorola-mc68hc11 490+18 short 71 motorola-mc68hc08 491+18 short 72 motorola-mc68hc05 492+18 short 73 sgi-svx 493+18 short 74 stm-st19-8 494+18 short 75 vax 495+18 short 76 axis, 32-bit 496+18 short 77 infineon-javelin-32 497+18 short 78 element-14-firepath-64 498+18 short 79 lsi-zsp-16 499+18 short 80 knuth-mmix-64 500+18 short 81 harvard-huany 501+18 short 82 sitera-prism 502+18 short 83 amtel-avr-8 503+18 short 84 fujitsu-fr30 504+18 short 85 mitsubishi-d10v 505+18 short 86 mitsubishi-d30v 506+18 short 87 nec-v850 507+18 short 88 matsushita-m32r 508+18 short 89 matsushita-mn10300 509+18 short 90 matsushita-mn10200 510+18 short 91 picojava 511+18 short 92 openrisc-32 512+18 short 93 arc-tangent-a5 513+18 short 94 tensilica-xtensa 514+18 short 0x9026 alpha 515+18 short 0xa390 s390 516|18 short * machine=0x%04lX 517} 518+16 short 0 type=UNKNOWN 519+16 short 1 object x-system/obj 520+16 short 2 executable x-system/exe 521+16 short 3 shared library x-system/dll 522{ 52316 short 4 core dump x-system/core 524+(@28+@42H*@44H+104) string * from `%s' 525} 526+16 short >4 type=%d 527+4 byte 0 , 16-bit 528+4 byte 1 , 32-bit 529+5 byte 1 , little-endian 530{ 53118 short ==8 532&36 long &0x000000f0==0x00000000 533&4 byte 1 , old 534} 535{ 53618 short 1 537+36 long 1 , mau 538} 539+20 long >1 , version %ld 540{ 54116 short 2 542&(@28+4*32) long 2 , dynamically linked 543} 544} 545 5460 long 0x7f454c46 elf 547&4 byte 1 548&5 byte 2 549o() 550 5510 long 0x464c457f elf 552&4 byte 2 553&5 byte 1 554o{ 555{ 556+18 short 0 machine=UNKNOWN 557+18 short 1 3b 558+18 short 2 sparc 559+18 short 3 i386 560+18 short 4 m68k 561+18 short 5 m88k 562+18 short 6 i486 563+18 short 7 i860 564{ 56518 short 8 566{ 56748 long &0xf00000f0==0x00000000 568+4 byte 1 mips2 569+4 byte 2 mips4 570} 571+48 long &0xf0000000==0x10000000 mips2 572+48 long &0xf0000000==0x20000000 mips3 573+48 long &0xf0000000==0x30000000 mips4 574+48 long &0xf00000f0==0x00000040 mips4 575+48 long &0xf0000000==0x40000000 mips5 576+48 long &0xf0000000==0x50000000 mips6 577+48 long &0xf0000000==0x60000000 mips7 578+48 long &0xf0000000==0x70000000 mips8 579+48 long &0xf0000000==0x80000000 mips9 580} 581+18 short 9 amdahl 582+18 short 10 mips_le 583+18 short 11 rs6000 584+18 short 15 pa 585+18 short 16 n-cube 586+18 short 17 fujitsu500 587+18 short 18 sparc32+ 588+18 short 20 powerpc 589+18 short 21 powerpc-64 590+18 short 22 s390 591+18 short 23 cell-BE 592+18 short 36 nec-v800 593+18 short 37 fujitsu-fr20 594+18 short 38 trw-rh32 595+18 short 39 fujitsu-mma 596+18 short 40 arm 597+18 short 41 alpha 598+18 short 42 hitachi-sh 599+18 short 43 sparc64-v9 600+18 short 44 siemens-tricore 601+18 short 45 argonaut 602+18 short 46 hitachi-h8/300 603+18 short 47 hitachi-h8/300h 604+18 short 48 hitachi-h8s 605+18 short 49 hitachi-h8/500 606+18 short 50 itanium 607+18 short 51 mips-x 608+18 short 52 motorola-coldfire 609+18 short 53 motorola-m68hc12 610+18 short 54 fujutsu-mma 611+18 short 55 siemens-pcp 612+18 short 56 sony-ncpu 613+18 short 57 denso-ndr1 614+18 short 58 motorola-startcore 615+18 short 59 toyota-me16 616+18 short 60 stm-st100 617+18 short 61 alc-tinyj 618+18 short 62 x86-64 619+18 short 63 sony-dsp 620+18 short 66 siemens-fx66 621+18 short 67 stm-st9-16 622+18 short 68 stm-st7-8 623+18 short 69 motorola-mc68hc16 624+18 short 70 motorola-mc68hc11 625+18 short 71 motorola-mc68hc08 626+18 short 72 motorola-mc68hc05 627+18 short 73 sgi-svx 628+18 short 74 stm-st19-8 629+18 short 75 vax 630+18 short 76 axis-32 631+18 short 77 infineon-javelin-32 632+18 short 78 element-14-firepath-64 633+18 short 79 lsi-zsp-16 634+18 short 80 knuth-mmix-64 635+18 short 81 harvard-huany 636+18 short 82 sitera-prism 637+18 short 83 amtel-avr-8 638+18 short 84 fujitsu-fr30 639+18 short 85 mitsubishi-d10v 640+18 short 86 mitsubishi-d30v 641+18 short 87 nec-v850 642+18 short 88 matsushita-m32r 643+18 short 89 matsushita-mn10300 644+18 short 90 matsushita-mn10200 645+18 short 91 picojava 646+18 short 92 openrisc-32 647+18 short 93 arc-tangent-a5 648+18 short 94 tensilica-xtensa 649+18 short 0x9026 alpha 650+18 short 0xa390 s390 651|18 short * machine=0x%04lX 652} 653+16 short 0 type=UNKNOWN 654+16 short 1 object x-system/obj 655+16 short 2 executable x-system/exe 656+16 short 3 shared library x-system/dll 657{ 65816 short 4 core dump x-system/core 659+(@28+@42H*@44H+104) string * from `%s' 660} 661+16 short >4 type=%ld 662+4 byte 2 , 64-bit 663+5 byte 1 , little-endian 664+20 long >1 , version %ld 665{ 66616 short 2 667+(@32Q+3*56) long 2 , dynamically linked 668+(@32Q+4*56) long 2 , dynamically linked 669} 670} 671 6720 long 0x7f454c46 elf 673&4 byte 2 674&5 byte 2 675o() 676 6770 lelong 000000407 netbsd little-endian object x-system/obj 678+16 lelong 0 , stripped 6790 belong 000000407 netbsd big-endian object x-system/obj 680+16 belong 0 , stripped 681 6820 belong&0377777777 041400413 netbsd i386 683d{ 6840 byte &0x80 685+20 lelong <4096 shared library x-system/dll 686+20 lelong >=4096 executable, dynamically linked x-system/exe 687} 688+0 byte ^0x80 executable x-system/exe 689+16 lelong 0 , stripped 6900 belong&0377777777 041400410 netbsd i386 pure 691p{ 692+0 byte &0x80 executable, dynamically linked x-system/exe 693+0 byte ^0x80 executable x-system/exe 694+16 lelong 0 , stripped 695} 6960 belong&0377777777 041400407 netbsd i386 697n{ 698+0 byte &0x80 executable, dynamically linked, impure x-system/exe 699{ 7000 byte ^0x80 701+0 byte &0x40 position independent 702+20 lelong !0 executable x-system/exe 703+20 lelong =0 object x-system/obj 704} 705+16 lelong 0 , stripped 706} 7070 belong&0377777777 041400507 netbsd i386 core 708c{ 709+12 string * from '%s' x-system/core 710} 711 7120 belong&0377777777 042000413 netbsd m68k4k 713d() 7140 belong&0377777777 042000410 netbsd m68k4k pure 715p() 7160 belong&0377777777 042000407 netbsd m68k4k 717n() 7180 belong&0377777777 042000507 netbsd m68k4k core 719c() 720 7210 belong&0377777777 042200413 netbsd ns32532 722d() 7230 belong&0377777777 042200410 netbsd ns32532 pure 724p() 7250 belong&0377777777 042200407 netbsd ns32532 726n() 7270 belong&0377777777 042200507 netbsd ns32532 core 728c() 729 7300 belong&0377777777 042600413 netbsd pmax 731d() 7320 belong&0377777777 042600410 netbsd pmax pure 733p() 7340 belong&0377777777 042600407 netbsd pmax 735n() 7360 belong&0377777777 042600507 netbsd pmax core 737c() 738 7390 belong&0377777777 043000413 netbsd vax 1k 740d() 7410 belong&0377777777 043000410 netbsd vax 1k pure 742p() 7430 belong&0377777777 043000407 netbsd vax 1k 744n() 7450 belong&0377777777 043000507 netbsd vax 1k core 746c() 747 7480 belong&0377777777 045400413 netbsd vax 4k 749d() 7500 belong&0377777777 045400410 netbsd vax 4k pure 751p() 7520 belong&0377777777 045400407 netbsd vax 4k 753n() 7540 belong&0377777777 045400507 netbsd vax 4k core 755c() 756 7570 belong&0377777777 041600413 netbsd m68k 758d{ 7590 byte &0x80 760+20 belong <8192 shared library x-system/dll 761+20 belong >=8192 executable, dynamically linked x-system/exe 762} 763+0 byte ^0x80 executable x-system/exe 764+16 belong 0 , stripped 7650 belong&0377777777 041600410 netbsd m68k pure 766p() 7670 belong&0377777777 041600407 netbsd m68k 768n() 7690 belong&0377777777 041600507 netbsd m68k core 770c() 7710 belong&0377777777 042400413 netbsd sparc 772d() 773 7740 belong&0377777777 042400410 netbsd sparc pure 775p() 7760 belong&0377777777 042400407 netbsd sparc 777n() 7780 belong&0377777777 042400507 netbsd sparc core 779c() 780 7810 belong&0377777777 043400413 netbsd mips 782d() 7830 belong&0377777777 043400410 netbsd mips pure 784p() 7850 belong&0377777777 043400407 netbsd mips 786n() 7870 belong&0377777777 043400507 netbsd mips core 788c() 789 7900 belong&0377777777 043600413 netbsd arm32 791d() 7920 belong&0377777777 043600410 netbsd arm32 pure 793p() 7940 belong&0377777777 043600407 netbsd arm32 795n() 7960 belong&0377777777 043600507 netbsd arm32 core 797c() 798 7990 lelong 0x00070185 ECOFF netbsd alpha binary 800+10 leshort 0x0000 , stripped x-system/obj 8010 belong&0377777777 043200507 netbsd alpha core 802c() 803 8040 short 0560 3b 805{ 80616 short >0 executable x-system/exe 807+12 long >0 , not stripped 808} 809+16 short 0 object x-system/obj 810+18 short &010000 , paging 3b2/300 811+18 short &020000 , 32100 812+18 short &040000 , mau 813{ 81416 short >0 815+20 short 0443 , shared library x-system/dll 816+20 short 0410 , swapped 817+20 short 0413 , paged 818+22 short >0 , version %ld 819} 8200 short 0561 3b (TV) 821{ 82216 short >0 executable x-system/exe 823+12 long >0 , not stripped 824} 825+16 short 0 object x-system/obj 826+18 short &020000 , 32100 required 827+18 short &040000 , mau hardware required 828 8290 short 0512 pc 286 small model (COFF) 830o{ 831{ 83216 short >0 executable x-system/exe 833+12 long >0 , not stripped 834} 835+16 short 0 object x-system/obj 836{ 83716 short >0 838&22 short >0 , version %ld 839} 840} 8410 short 0522 pc 286 large model (COFF) 842o() 843 8440 short 0514 pc 386 845o{ 846{ 84716 short >0 executable x-system/exe 848+12 long >0 , not stripped 849} 850+16 short 0 object x-system/obj 851{ 85216 short >0 853&22 short >0 , version %ld 854} 855+0 short !=0x8664 , 32 bit 856+0 short 0x8664 , 64 bit 857} 8580 short 0x8664 pc 386 859o() 8600 short 0524 pc 386 861o() 8620 short 0604 pc alpha 863o() 864 8650 short 0520 m68k 866{ 86716 short >0 executable x-system/exe 868+12 long >0 , not stripped 869} 870+16 short 0 object x-system/obj 871{ 87216 short >0 873+20 short 0410 , pure 874+20 short 0413 , paged 875+22 short >0 , version %ld 876} 877 8780 short 0521 m68k executable, shared x-system/exe 879o{ 880+12 long >0 , not stripped 881} 8820 short 0522 m68k executable, shared, paged x-system/exe 883o() 884 8850 long 0x02c5e2c4 mvs OpenEdition object x-system/obj 886&4 long 0x40404040 8870 long 0xc9c5e6d7 mvs OpenEdition executable x-system/exe 888&4 long 0xd3d4c840 889 8900 short 0530 u370 5.2/5.0 891o{ 892{ 89320 long !=0440 894&18 short &01 executable x-system/exe 895+0 short &01==0 , pure 896+12 long >0 , not stripped 897} 898+20 long 0440 shared library x-system/dll 899+18 short &01==0 object x-system/obj 900+18 byte &0x40 , BIG 901+49 byte &0xf!=0 , pre-XA 902{ 90318 short &01 904+24 long >0 , version %ld 905} 906} 9070 short 0531 amdahl 5.2 908o() 9090 short 0534 amdahl 5.2 910o() 9110 short 0535 u370 5.2 912o() 913 9140 short 0700 ncr tower32 915o{ 916+18 short &0040000 68000 917+18 short &0040000==0 68020 918+18 short &0020000 \b+68881 919{ 92018 short &0000001==0 object x-system/obj 921+22 short >0 , version %ld 922} 923{ 92418 short &0001 executable x-system/exe 925+20 short 0413 , paged 926+20 short 0443 shared library x-system/dll 927+20 short 0410 , pure, swapped 928+20 short 0407 , swapped 929+12 long >0 , not stripped 930} 931} 9320 short 0720 ncr towe32r/600 933o() 9340 short 0740 ncr tower32/800 935o() 9360 short 0610 ncr tower/XP rel 2 937o() 9380 short 0615 ncr tower/XP rel 2 939o() 9400 short 0620 ncr tower/XP rel 3 941o() 9420 short 0625 ncr tower/XP rel 3 943o() 9440 short 0630 ncr tower32/600/400 945o() 9460 short 0640 ncr tower32/800 947+18 short &00040000 compatible 948o() 9490 short 0645 ncr tower32/800 68010 950o() 951 9520 short 0457 DG MV pure executable x-system/exe 953+40 long >0 , not stripped 954+2 short >0 , version %ld 9550 short 0460 DG MV object x-system/obj 956+2 short >0 , version %ld 9570 short 0541 m88k pure executable x-system/exe 958+12 long >0 , not stripped 959+22 short >0 , version %ld 9600 short 0555 m88k object x-system/obj 961+22 short >0 , version %ld 962 9630 short &0xfffd==0x0160 mips 964{ 96518 short &02 executable x-system/exe 966+20 short 0410 , pure 967+20 short 0413 , paged 968+20 short 0443 , shared library x-system/dll 969+8 long !=0 , not stripped 970} 971+18 short &02==0 object x-system/obj 972o{ 973+0 short &0x2 , little-endian 974+22 byte * , version %ld 975+23 byte * .%ld 976} 9770 short &0xfffd==0x180 mips ucode x-system/obj 978o() 9790 long 0xdeadadb0 mips core dump x-system/core 980f{ 981+4 long 1 982&16 string * from `%s' 983+0 long &0xff==0xb0 , 32-bit, old 984+0 long &0xff==0xbb , 32-bit 985+0 long &0xff==0x40 , 64-bit 986} 9870 long 0xbabec0bb mips core dump x-system/core 988f() 9890 long 0xdeadad40 mips core dump x-system/core 990f() 991 9920 short 0603 alpha 993{ 99422 short &02 995&22 short &030000!=020000 executable x-system/exe 996+24 short 0410 , pure 997+24 short 0413 , paged 998+22 short &020000 , dynamically linked 999+16 long !=0 , not stripped 1000} 1001+22 short &030000==020000 shared library x-system/dll 1002{ 100322 short &030002==0 1004+24 short 0407 object x-system/obj 1005} 1006+27 byte * , version %ld 1007+26 byte * .%ld 1008 10090 short 0432 compiled terminfo entry 10100 short 0433 curses screen image 10110 short 0434 curses screen image 1012 10130 long 0x14031008 tcpdump cons headers application/x-tcpdump 1014v{ 1015+4 long >0 , version %d 1016&8 long * .%d 1017} 10180 long 0x14031004 tcpdump cons data application/x-tcpdump 1019v() 1020 1021257 string ustar pax archive application/pax 1022&156 match [gx] 1023o{ 1024&99 byte 0 1025&100 match +([ 0-7])? 1026} 1027 1028257 string ustar\ \ gnu tar archive application/pax 1029o{ 1030&99 byte 0 1031&100 match +([ 0-7])? 1032+0 match ???* , [ %s ... ] 1033} 1034 1035257 string ustar tar archive application/pax 1036o() 1037 103899 byte 0 old tar archive application/pax 1039o() 1040 10410 string \301\304\331\100\323\311\302\331\306 ca librarian archive application/pax 1042 10430 match <[hH][tT][mM][lL]> html input text/html 10440 match <!?(--)[Dd][Oo][Cc][Tt][Yy][Pp][Ee] [Hh][Tt][Mm][Ll] html input text/html 1045 10460 long 0x02f78301 1047+16 string TeX TeX dvi output application/x-dvi 1048 10490 byte 0201 shell history application/sh 1050&1 byte <07 version %d 1051 10520 byte 1 1053&1 byte 0150 1054&2 match [0-9][0-9][0-9][0-9][0-9] sccs application/x-sccs 1055 10560 short 0x5a4d 1057o{ 1058&24 short 0x0040 1059{ 1060+(@60H) short 0x454c os/2 linear 1061+(@60H) short 0x454e os/2 1062+(@60H) short 0x4550 win32 1063+(@60H+4) short 0x014c 386 1064+(@60H+4) short 0x0150 powerpc 1065+(@60H+4) short 0x0162 mips 1066+(@60H+4) short 0x0166 mips, big endian? 1067+(@60H+4) short 0x0184 alpha 1068+(@60H+4) short 0x8664 386 1069|(@60H+4) short * machine=0x%04lX 1070} 1071+(@60H+22) short &0x2002==0x0002 executable x-system/exe 1072+(@60H+22) short &0x2000 shared library x-system/dll 1073+(@60H+22) short &0x0120==0 , 16 bit 1074+(@60H+22) short &0x0120==0x0100 , 32 bit 1075+(@60H+22) short &0x0120==0x0020 , 64 bit 1076+(@60H+92) short 0 , unknown subsystem 1077+(@60H+92) short 1 , native 1078+(@60H+92) short 2 , windows gui 1079+(@60H+92) short 5 , os2 1080+(@60H+92) short 7 , posix 1081+(@60H+92) short >7 , subsystem %d 1082+50 string PKWARE , self extracting zip 1083+36 string LHA's , self extracting lha 1084+233 string PKSFX2 , self extracting zip 1085} 1086 10870 short 0x5a4c 1088o() 1089 10900 long 0x4c000000 1091&4 long 0x01140200 windows shortcut application/x-windows-lnk 1092 10930 string PMCC windows GRP application/dos-grp 1094369 string MICROSOFT windows PIF application/dos-pif 10950 long 0xffffffff dos device driver application/dos-drv 1096&name match *.(SYS|sys) 10970 string LZ dos builtin 10980 byte 0xe9 dos executable, COM application/x-dos 10990 byte 0xeb dos executable, COM application/x-dos 11000 byte 0xf0 dos library application/x-ar 11010 byte 0x80 dos object, OMF application/dos-omf 1102 11030 match x[ ]T[ ] ditroff application/x-ditroff 1104&4 string * for %s 11050 string %! postscript input application/postscript 1106{ 11072 string PS-Adobe- , conforming 1108+11 match +([0-9]).+([0-9]) , version %s 1109} 11100 string %PDF adobe acrobat file application/x-pdf 1111+5 match +([0-9]).+([0-9]) , version %s 11120 string @document( imagen input 1113 11140 long 0x2e736e64 audio data audio/basic 1115o{ 1116+12 long 1 , 8-bit u-law 1117+12 long 2 , 8-bit linear pcm 1118+12 long 3 , 16-bit linear pcm 1119+12 long 4 , 24-bit linear pcm 1120+12 long 5 , 32-bit linear pcm 1121+12 long 6 , 32-bit floating point 1122+12 long 7 , 64-bit floating point 1123+12 long 23 , compressed (G.721 ADPCM) 1124+20 long =1 , mono 1125+20 long =2 , stereo 1126+20 short =3 , 3 channels 1127+20 short =4 , quad 1128+20 short >4 , %d channel%s 1129+16 long * , %d hz 1130} 11310 long 0x0064732E dec audio data audio/x-dec 1132o() 1133 11340 string Creative\ Voice\ File soundblaster audio data audio/x-soundblaster 11350 long 0x4e54524b multitrack audio data file audio/x-multitrack 1136+4 long * , version %ld 1137 11380 string MThd standard midi data audio/midi 1139+9 byte >0 , format %d 1140+11 byte >1 , %d channel%s 11410 string CTMF creative music data 11420 string SBI soundblaster instrument data 11430 string Creative\ Voice\ File creative labs voice data 1144&19 byte 0x1A 1145+23 byte >0 , version %d 1146+22 byte >0 \b.%d 1147 11480 string RIFF riff audio data audio/riff 1149+8 string AIFF aiff format 1150+8 string AIFC aiff-c format 1151+8 string WAVE , wave format 1152+8 string 8SVX 8svx format 1153+34 leshort >0 , %d bit 1154+22 leshort =1 , mono 1155+22 leshort =2 , stereo 1156+22 leshort =3 , 3 channels 1157+22 leshort =4 , quad 1158+22 leshort >4 , %d channel%s 1159+24 lelong >0 , %d hz 1160 11618 long 0x41494646 aiff audio data audio/aiff 11628 long 0x41494643 aiff-C audio data audio/aiff 11630 long 0x4e54524b multitrack audio data audio/multitrack 1164 11650 string ;vdb;ciao ciao virtual database application/x-ciao 11660 string ;vdb; vdb archive application/pax 1167+5 string * , %s 1168 11690 string #pragma pp:checkpoint preprocessor checkpoint application/x-libpp 1170+22 edit %"\([^"]*\)".*%\1% , version %s 1171 1172# 1173# pc application files 1174# 1175 11760 string HDR*PowerBuilder power builder library application/x-powerbuilder 1177+18 edit %\([0-9][0-9]\)\([0-9][0-9]\).*%\1.\2% , version %s 1178 1179# 1180# database files 1181# 1182 11830 long 0x13579ace dbm 1.x database application/x-dbm 11840 string GDBM gnu dbm 2.x database application/x-gdbm 1185 118612 long 0x00042253 bsd db queue 1187+16 long >0 version %d 1188+12 belong 0x00042253 , big-endian 1189+12 lelong 0x00042253 , little-endian 1190 11910 long 0x00053162 bsd db btree application/x-bsd-db 1192+4 long >2 1.86 1193+4 long <3 1.85 1194+4 long >0 , version %d 1195+0 belong 0x00053162 , big-endian 1196+0 lelong 0x00053162 , little-endian 1197+16 long * , %d record%s 1198+20 long * , flags 0x%x 1199 120012 long 0x00053162 bsd db btree 1201+16 long >0 version %d 1202+12 belong 0x00053162 , big-endian 1203+12 lelong 0x00053162 , little-endian 1204 12050 long 0x00061561 bsd db hash application/x-bsd-db 1206+4 long >2 1.86 1207+4 long <3 1.85 1208+4 long >0 version %d 1209+8 long 4321 , big-endian 1210+8 long 1234 , little-endian 1211+56 long * , %d key%s 1212 121312 long 0x00061561 bsd db hash 1214+16 long >0 version %d 1215+12 belong 0x00061561 , big-endian 1216+12 lelong 0x00061561 , little-endian 1217 12180 long 0x950412de gnu message catalog application/x-locale 1219+4 long * , revision %d 1220+8 long * , %d message%s 1221 1222# 1223# from the net 1224# 1225 12261 string # This is a shell archive. shar archive application/x-shar 122781 string # This is a shell archive. shar archive application/x-shar 1228 12290 short 0x1f9d compressed data application/zip 1230{ 12312 byte &0200 1232&2 byte &037>0 , %d bit%s 1233} 12340 short 017436 packed data application/zip 12350 short 0x9d1f compressed data application/zip 1236+2 byte &0200 , blocked 1237+2 byte &037>0 , with %d bit%s 1238 12390 short 0x1f10 pzip compressed data application/pzip 1240&2 byte >0 , version %d 1241&3 byte <10 .%d 1242 12430 short 0x1f8b pzip compressed data application/pzip 1244&10 short 0x9217 1245 12460 short 0x1f8b gzip compressed data application/gzip 1247+9 byte 0 , dos 1248+9 byte 1 , amiga 1249+9 byte 2 , vms 1250+9 byte 3 , unix 1251+9 byte 5 , atari 1252+9 byte 6 , os/2 1253+9 byte 7 , mac 1254+9 byte 10 , tops/20 1255+9 byte 11 , win/32 1256+2 byte <8 , reserved 1257+2 byte 8 , deflate 1258+3 byte &0x1 , ascii 1259+3 byte &0x2 , continuation 1260+3 byte &0x4 , extra field 1261+3 byte &0x8 , original name 1262+3 byte &0x10 , comment 1263+3 byte &0x20 , encrypted 1264+8 byte 2 , max compression 1265+8 byte 4 , max speed 1266+4 ledate >0 , %s 1267 12680 string BZh bzip compressed data application/zip 1269+3 byte >='0'&<='9' , %c00k blocks 12700 long 0x0000abcd NOC newbridge raw stats 1271v{ 1272+4 short * , version %d 1273+6 short * .%d 1274} 12750 long 0x0e130414 NOC switch stats 1276v() 12770 long 0x0e13130d NOC switch summary stats 1278v() 1279 12800 string \x{FD}7zXZ xz compressed data application/xz 1281 12820 leshort 0 windows icon resource application/x-ms-icon 1283&2 leshort 1 1284+4 leshort x , %d icon%s 1285 12860 string begin 0 uuencoded data application/x-uuencode 12870 string \x89PNG PNG image data image/png 1288&4 belong 0x0d0a1a0a 1289+16 belong x , %ld x 1290+20 belong x %ld 1291+24 byte x , %d-bit 1292+25 byte 0 , grayscale 1293+25 byte 2 , color RGB 1294+25 byte 3 , colormap 1295+25 byte 4 , gray+alpha 1296+25 byte 6 , color RGBA 1297#+26 byte 0 , deflate/32K 1298+28 byte 0 , non-interlaced 1299+28 byte 1 , interlaced 13000 string \377\330\377 JPEG image image/jpeg 13010 string GIF GIF image image/gif 1302+3 string * , version %-.3s 1303{ 13046 leshort >0 , %d 1305&8 leshort >0 x %d 1306} 1307+10 byte &0x40 , interlaced 1308+10 byte &0x03==0x00 , 2 colors 1309+10 byte &0x03==0x01 , 4 colors 1310+10 byte &0x03==0x02 , 8 colors 1311+10 byte &0x03==0x03 , 16 colors 1312+10 byte &0x03==0x04 , 32 colors 1313+10 byte &0x03==0x05 , 64 colors 1314+10 byte &0x03==0x06 , 128 colors 1315+10 byte &0x03==0x07 , 256 colors 13160 short 0x4d4d TIFF image, big-endian image/tiff 1317+2 short >0 , version %d 13180 short 0x4949 TIFF image, little-endian image/tiff 1319+2 short >0 , version %d 13200 short 000732 sgi imagelib image image/x-imagelib 1321+6 short * , %d 1322+8 short * x %d 1323 13240 string gimp xcf gimp XCF image image/x-gimp 1325+9 string file , version 0 1326{ 13279 string v , version 1328&10 string * %s 1329} 1330+14 belong x , %lu x 1331+18 belong x %lu 1332+22 belong 0 , rgb color 1333+22 belong 1 , greyscale 1334+22 belong 2 , indexed color 1335 13360 string MOVI sgi movie video/x-sgi 1337 13380 byte 0 1339&4 string moov quicktime movie video/quicktime 13400 byte 0 1341&4 string mdat quicktime movie video/quicktime 13428 string AVI avi movie video/avi 13430 long 0x000001BA mpeg movie video/mpeg 13440 long 0x000001B3 mpeg movie video/mpeg 1345 13460 string <MakerFile frame maker file application/framemaker 13470 string {\\rtf rich text application/rtf 1348 13490 long 0xd0cf11e0 ms powerpoint document application/x-powerpoint 1350 13510 string ms C/C++ program database ms program database application/x-dbx 1352+33 string * , version %s 1353 13540 string \377WPC corel wordperfect document application/x-wordperfect 1355 13560 beshort 0xedab 1357&2 beshort 0xeedb red hat package manager 1358+4 byte * v%d 1359+8 beshort 1 i386 1360+8 beshort 2 alpha 1361+8 beshort 3 sparc 1362+8 beshort 4 mips 1363+8 beshort 5 powerpc 1364+8 beshort 6 68k 1365+8 beshort 7 sgi 1366+8 beshort >7 unknown 1367+6 beshort 0 binary 1368+6 beshort 1 source 1369+10 string * , %s 1370 13710 short 0x9900 pgp key public ring application/pgp 13720 short 0x9501 pgp key security ring application/pgp 13730 short 0x9500 pgp key security ring application/pgp 13740 string -----BEGIN\040PGP pgp armored data application/pgp 1375+15 string PUBLIC\040KEY\040BLOCK- , public key block 1376+15 string MESSAGE- , message 1377+15 string SIGNED\040MESSAGE- , signed message 1378+15 string PGP\040SIGNATURE- , signature 1379 13800 string Core osf unknown core dump x-system/core 1381&name match core* 1382+24 string * from `%s' 1383 13840 match From[ ] mail message message/rfc822 13850 match (BABYL|From|Received|Return-Path|To)?(:)[ ] mail message message/partial 1386 13870 string \001fcp X11 portable compiled font x-X11/font 1388 13890 string \357\273\277 utf-8 encoded text application/x-iconv 13900 string \376\377 utf-16 encoded text application/x-iconv 13910 string \377\376 utf-16 encoded text, little-endian application/x-iconv 1392 139332769 string CD001 ISO 9660 CD-ROM filesystem image data/x-filesystem 1394+32808 string * , '%s' 1395+34816 string \000CD001\001EL\ TORITO\ SPECIFICATION , bootable 139637633 string CD001 ISO 9660 CD-ROM filesystem image, raw 2352 byte sectors data/x-filesystem 139732776 string CDROM High Sierra CD-ROM filesystem image data/x-filesystem 1398 1399# 1400# front compression data 1401# 1402 14030 byte 0 1404&1 edit %^\([A-Z_][A-Z_]*\)-\([^0-9]*\)-\([0-9][0-9]\)%\1 data, with \2, version \3%l %s application/x-%s 14050 byte 0 1406&1 edit %^\([A-Z_][A-Z_]*\)\([0-9][0-9]\)%\1 data, version \2%l %s application/x-%s 1407 1408# 1409# generic binary magic 1410# 1411 14120 long 0x00010203 1413&4 string * %s application/x-%s 1414&12 string * %s data 1415&24 version * , version %s 1416+28 long >0 , size %u 1417{ 1418&28 long >=4 1419&32 long >0 , %u 1420} 1421{ 1422&28 long >=8 1423&36 long >0 , %u 1424} 1425 1426# 1427# local additions 1428# 1429 14300 match info mam mam program application/x-mam 14310 edit %^!<\([^>]*\)>.*%\1%l %s data application/x-%s 14320 string \015\023\007\000 ast message catalog application/x-locale 1433+4 string * , %s 1434 1435# 1436# last chance 1437# 1438 1439name match *.(o|obj) unknown object x-system/obj 1440name match core unknown core dump x-system/core 1441name match core.* unknown core dump x-system/core 1442 1443# 1444# we resisted til now 1445# 1446 14470 void registry() 1448|name match *.acp Office.ActorPreview application/x-ms-office 1449|name match *.act Office.Actor application/x-ms-office 1450|name match *.ade Microsoft Access project extension application/x-ms 1451|name match *.adp Microsoft Access project application/x-ms 1452|name match *.aif AIFF Audio audio/x-aiff 1453|name match *.aifc AIFF Audio audio/aiff 1454|name match *.aiff AIFF Audio audio/aiff 1455|name match *.aim AOL Instant Messenger Launch application/x-aim 1456|name match *.ani Animated Cursor application/x-ms-anifile 1457|name match *.app Application file application/x-ms 1458|name match *.arc WinZip File application/x-ms-winzip 1459|name match *.arj WinZip File application/x-ms-winzip 1460|name match *.art ART Image image/x-jg 1461|name match *.asp Active Server Page application/x-ms 1462|name match *.asx Windows Media Audio / Video application/x-ms 1463|name match *.au Sound Clip audio/basic 1464|name match *.avi Video Clip video/avi 1465|name match *.awx Custom AppWizard application/x-ms-awxfile 1466|name match *.b64 WinZip File application/x-ms-winzip 1467|name match *.bas Microsoft Visual Basic class module application/x-ms 1468|name match *.bat MS-DOS Batch File application/x-ms-batfile 1469|name match *.bfc Briefcase application/x-ms-briefcase 1470|name match *.bhx WinZip File application/x-ms-winzip 1471|name match *.bmp Bitmap Image image/bmp 1472|name match *.bpg Borland Project Group application/x-ms-borlandprojectgroup 1473|name match *.bpk C++Builder Package application/x-ms-bcbpackage 1474|name match *.bpr C++Builder Project application/x-ms-bcbproject 1475|name match *.bsc Browser Information application/x-ms-bscfile 1476|name match *.cda CD Audio Track application/x-ms-cdafile 1477|name match *.cdf Channel File application/x-netcdf 1478|name match *.cer Internet Security Certificate application/x-x509-ca-cert 1479|name match *.cfg CFG File application/x-ms-cfg_auto_file 1480|name match *.chm Compiled HTML Help file application/x-ms-help 1481|name match *.cil Clip Gallery Download Package application/x-ms-clipgallerydownloadpackage 1482|name match *.class Java class file application/x-java 1483|name match *.clp Clipboard Clip application/x-ms-clpfile 1484|name match *.cmd Windows Command Script application/x-ms-cmdfile 1485|name match *.com MS-DOS Application application/x-ms-comfile 1486|name match *.cpl Control Panel extension application/x-ms-cplfile 1487|name match *.cpp C++ Source File application/x-c++ 1488|name match *.crt Internet Security Certificate application/x-x509-ca-cert 1489|name match *.css HyperText Style Sheet text/css 1490|name match *.csv Microsoft Excel Comma Separated Values File application/x-ms-excel 1491|name match *.cur Cursor application/x-ms-curfile 1492|name match *.cxx C++ Source File application/x-c++ 1493|name match *.dcx DCX Image Document application/x-ms-dcximage 1494|name match *.der Internet Security Certificate application/x-x509-ca-cert 1495|name match *.dfm C++Builder Form application/x-ms-bcbform 1496|name match *.dic Text Document application/x-ms-txtfile 1497|name match *.dif DV video/x-dv 1498|name match *.dll Windows dynamic link library application/x-ms-dll 1499|name match *.doc Microsoft Word Document application/x-ms-word 1500|name match *.dot Microsoft Word Template application/x-ms-word 1501|name match *.drv Device driver application/x-ms-drvfile 1502|name match *.dsm Developer Studio Macro File application/x-ms-dsmfile 1503|name match *.dsn Microsoft OLE DB Provider for ODBC Drivers application/x-ms-msdasql 1504|name match *.dsp Project File application/x-ms-dspfile 1505|name match *.dsw Project Workspace application/x-ms-dswfile 1506|name match *.dv DV video/x-dv 1507|name match *.ebh Ebasic Files application/x-ms-hclebasich 1508|name match *.ebx Ebrun Files application/x-ms-hclebrun 1509|name match *.exc Text Document application/x-ms-txtfile 1510|name match *.exe Application application/x-msdownload 1511|name match *.fav Outlook Bar Shortcuts application/x-ms-outlook 1512|name match *.fdf Adobe Acrobat Forms Document application/x-ms-acroexch 1513|name match *.fnd Saved Search application/x-ms-fndfile 1514|name match *.fon Font file application/x-ms-fonfile 1515|name match *.fs Ftp Files application/x-ms-hclftp 1516|name match *.fxp Microsoft Visual FoxPro compiled program application/x-ms-foxpro 1517|name match *.gfi Genigraphics GraphicsLink application/x-ms-graphicslink 1518|name match *.gfx Genigraphics GraphicsLink application/x-ms-graphicslink 1519|name match *.gif GIF Image image/gif 1520|name match *.gim Genigraphics GraphicsLink application/x-ms-graphicslink 1521|name match *.gix Genigraphics GraphicsLink application/x-ms-graphicslink 1522|name match *.gna Genigraphics GraphicsLink application/x-ms-graphicslink 1523|name match *.gnx Genigraphics GraphicsLink application/x-ms-graphicslink 1524|name match *.gra Microsoft Graph 97 Chart application/x-ms-msgraph 1525|name match *.grp Microsoft Program Group application/x-ms-msprogramgroup 1526|name match *.gst MSMap.Datainst.8 application/x-ms-msmap 1527|name match *.gwx Genigraphics GraphicsLink application/x-ms-graphicslink 1528|name match *.gwz Genigraphics GraphicsLink application/x-ms-graphicslink 1529|name match *.gz WinZip File application/gzip 1530|name match *.hep HostExplorer Session Profile application/x-ms-hostexplorer 1531|name match *.hlp Help File application/x-ms-help 1532|name match *.hpp C++ Header File application/x-c++ 1533|name match *.hqx WinZip File application/mac-binhex40 1534|name match *.hs3 HostExplorer Hotspot Definition application/x-ms-hostexplorer 1535|name match *.hs5 HostExplorer Hotspot Definition application/x-ms-hostexplorer 1536|name match *.hsv HostExplorer Hotspot Definition application/x-ms-hostexplorer 1537|name match *.ht HyperTerminal File application/x-ms-htfile 1538|name match *.hta HTML program application/x-ms 1539|name match *.htm html source text/html 1540|name match *.hts Hummingbird Telnet Program v6.0.0.0 application/x-ms-hummingbird 1541|name match *.htt HyperText Template text/webviewhtml 1542|name match *.htw HTML Document application/x-ms-htmlfile 1543|name match *.htx HTML Document text/html 1544|name match *.hxx C++ Header File application/x-c++ 1545|name match *.ico Icon application/x-ms-icon 1546|name match *.idb Intermediate File application/x-ms-mdpxfile 1547|name match *.ilk Intermediate File application/x-ms-mdpxfile 1548|name match *.inf Setup Information application/x-ms-setup 1549|name match *.ini Configuration Settings application/x-ms-config 1550|name match *.ins Internet Communication Settings application/x-internet-signup 1551|name match *.iqy Microsoft Excel Web Query File application/x-ms-iqyfile 1552|name match *.isp Internet Communication Settings application/x-internet-signup 1553|name match *.its Internet Document Set application/x-ms-its 1554|name match *.ivt InfoViewer Title application/x-ms-ivt 1555|name match *.jfif JPEG Image image/jpeg 1556|name match *.job Scheduler Job Object application/x-ms-jobobject 1557|name match *.jod Microsoft.Jet.OLEDB.3.51 application/x-ms-microsoft 1558|name match *.jpe JPEG Image image/jpeg 1559|name match *.jpeg JPEG Image image/jpeg 1560|name match *.jpg JPEG Image image/jpeg 1561|name match *.js JavaScript file application/x-java 1562|name match *.jse JavaScript Encoded Script file application/x-ms 1563|name match *.jsp JavaScript Page application/x-ms 1564|name match *.km3 HostExplorer KeyMap Definition application/x-ms-hostexplorer 1565|name match *.km5 HostExplorer KeyMap Definition application/x-ms-hostexplorer 1566|name match *.kmv HostExplorer KeyMap Definition application/x-ms-hostexplorer 1567|name match *.lam LAMDocument application/x-ms-lamdocument 1568|name match *.ldb Microsoft Access Record-Locking Information application/x-ms-access 1569|name match *.lnk Shortcut application/x-ms 1570|name match *.log Text Document application/x-text 1571|name match *.lzh WinZip File application/x-ms-winzip 1572|name match *.m1v Movie Clip video/mpeg 1573|name match *.mac MacPaint Image image/x-macpaint 1574|name match *.mad Microsoft Access Module Shortcut application/x-ms-access 1575|name match *.maf Microsoft Access Form Shortcut application/x-ms-access 1576|name match *.mam Microsoft Access Macro Shortcut application/x-ms-access 1577|name match *.maq Microsoft Access Query Shortcut application/x-ms-access 1578|name match *.mar Microsoft Access Report Shortcut application/x-ms-access 1579|name match *.mat Microsoft Access Table Shortcut application/x-ms-access 1580|name match *.mda Microsoft Access Add-in application/x-ms-access 1581|name match *.mdb Microsoft Access Database application/x-ms-access 1582|name match *.mdb Microsoft Access program application/x-ms 1583|name match *.mde Microsoft Access MDE Database application/x-ms-access 1584|name match *.mdn Microsoft Access Blank Database Template application/x-ms-access 1585|name match *.mdp Project Workspace application/x-ms-mdpfile 1586|name match *.mdt Microsoft Access Add-in Data application/x-ms-access 1587|name match *.mdw Microsoft Access Workgroup Information application/x-ms-access 1588|name match *.mdz Microsoft Access Database Wizard Template application/x-ms-access 1589|name match *.mht Microsoft MHTML Document 4.0 message/rfc822 1590|name match *.mhtml Microsoft MHTML Document 4.0 message/rfc822 1591|name match *.mid MIDI Sequence audio/mid 1592|name match *.mmm Media Clip application/x-ms-mplayer 1593|name match *.mov QuickTime Movie video/quicktime 1594|name match *.mp2 Movie Clip video/mpeg 1595|name match *.mpa Movie Clip video/mpeg 1596|name match *.mpe Movie Clip video/mpeg 1597|name match *.mpeg Movie Clip video/mpeg 1598|name match *.mpg Movie Clip video/mpeg 1599|name match *.msc Microsoft Common Console Document application/x-ms-mmc 1600|name match *.msg Outlook Item application/x-ms-msgfile 1601|name match *.msi Microsoft Windows Installer package application/x-ms 1602|name match *.msp Windows Installer patch application/x-ms 1603|name match *.mst Visual Test source files application/x-ms 1604|name match *.nsc Netscape Conference Call File application/x-conference 1605|name match *.obd Microsoft Office Binder application/x-ms-office 1606|name match *.obt Microsoft Office Binder Template application/x-ms-office 1607|name match *.obz Microsoft Office Binder Wizard application/x-ms-office 1608|name match *.odl Object Definition Language File application/x-ms-odlfile 1609|name match *.ofn Other Office Documents... application/x-ms-office 1610|name match *.oft Outlook Item Template application/x-ms-outlook 1611|name match *.ops Microsoft Office profile settings file application/x-ms 1612|name match *.opx MS Organization Chart 2.0 application/x-ms-orgpluswopx 1613|name match *.oss Office Search application/x-ms-ossfile 1614|name match *.pcd Photo CD Image application/x-ms-pcdfile 1615|name match *.pch Intermediate File application/x-ms-mdpxfile 1616|name match *.pct PICT Image image/pict 1617|name match *.pcx PCX Image application/x-ms-pcxfile 1618|name match *.pdb Intermediate File application/x-ms-mdpxfile 1619|name match *.pdf Adobe Acrobat Document application/pdf 1620|name match *.pfm Type 1 Font file application/x-ms-pfmfile 1621|name match *.php Perl CGI Script File application/x-perl 1622|name match *.pic PICT Image image/pict 1623|name match *.pict PICT Image image/pict 1624|name match *.pif Shortcut to MS-DOS Program application/x-ms-piffile 1625|name match *.pif Shortcut to MS-DOS program application/x-ms 1626|name match *.pkg Microsoft Developer Extension application/x-ms-pkgfile 1627|name match *.pma Performance Monitor File application/x-ms-perffile 1628|name match *.pmc Performance Monitor File application/x-ms-perffile 1629|name match *.pml Performance Monitor File application/x-ms-perffile 1630|name match *.pmr Performance Monitor File application/x-ms-perffile 1631|name match *.pmw Performance Monitor File application/x-ms-perffile 1632|name match *.pnf Precompiled Setup Information application/x-ms-pnffile 1633|name match *.png PNG Image application/x-ms-pngfile 1634|name match *.pntg MacPaint Image image/x-macpaint 1635|name match *.pop HostExplorer Poppad Definition application/x-ms-hostexplorer 1636|name match *.pot Microsoft PowerPoint Template application/vnd.ms-powerpoint 1637|name match *.ppa Microsoft PowerPoint Addin application/vnd.ms-powerpoint 1638|name match *.pps Microsoft PowerPoint SlideShow application/vnd.ms-powerpoint 1639|name match *.ppt Microsoft PowerPoint Presentation application/vnd.ms-powerpoint 1640|name match *.prf System file application/x-ms 1641|name match *.prg Program source file application/x-ms 1642|name match *.psd Photoshop Image image/x-photoshop 1643|name match *.pwz Microsoft PowerPoint Wizard application/vnd.ms-powerpoint 1644|name match *.qif QuickTime Image image/x-quicktime 1645|name match *.qk3 HostExplorer QuickKeys application/x-ms-hostexplorer 1646|name match *.qk5 HostExplorer QuickKeys application/x-ms-hostexplorer 1647|name match *.qkv HostExplorer QuickKeys application/x-ms-hostexplorer 1648|name match *.qt QuickTime Movie video/quicktime 1649|name match *.qti QuickTime Image image/x-quicktime 1650|name match *.qtif QuickTime Image image/x-quicktime 1651|name match *.qtp QuickTime Preferences application/x-ms-quicktimepreferences 1652|name match *.qts QuickTime application/x-ms-quicktimesystem 1653|name match *.qtx QuickTime Extension application/x-ms-quicktimeextension 1654|name match *.que Scheduler Queue Object application/x-ms-queueobject 1655|name match *.rc Resource Template application/x-ms-rcfile 1656|name match *.rct Resource Template application/x-ms-rcfile 1657|name match *.reg Registration Entries application/x-ms-regfile 1658|name match *.res Intermediate File application/x-ms-mdpxfile 1659|name match *.rmi MIDI Sequence audio/mid 1660|name match *.rnk Dial-Up Shortcut application/x-ms-rnkfile 1661|name match *.rtf Rich Text Format application/x-ms-word 1662|name match *.rx XRX Files application/x-ms-hclbroadway 1663|name match *.sbr Intermediate File application/x-ms-mdpxfile 1664|name match *.sc2 Microsoft Schedule+ 7.0 Application application/x-ms-scheduleplus 1665|name match *.scd Microsoft Schedule+ 7.0 Application application/x-ms-scheduleplus 1666|name match *.scf Windows Explorer Command application/x-ms-explorer 1667|name match *.sch Microsoft Schedule+ 7.0 Application application/x-ms-scheduleplus 1668|name match *.scp Text Document application/x-ms-txtfile 1669|name match *.scr Screen Saver application/x-ms-scrfile 1670|name match *.sct Windows Script Component application/x-ms 1671|name match *.sd2 Sound Designer 2 audio/x-sd2 1672|name match *.ses Xsession Files application/x-ms-hclxsession 1673|name match *.shb Shortcut into a document application/x-ms-docshortcut 1674|name match *.shs Scrap object application/x-ms-shellscrap 1675|name match *.shtml Netscape Hypertext Document application/x-ms-netscapemarkup 1676|name match *.slk Microsoft Excel SLK Data Import Format application/x-ms-excel 1677|name match *.snd Sound Clip audio/basic 1678|name match *.stm HTML Document text/html 1679|name match *.sys System file application/x-ms-sysfile 1680|name match *.taz WinZip File application/x-ms-winzip 1681|name match *.tga TGA Image application/x-ms-tgafile 1682|name match *.tif TIF Image Document image/tiff 1683|name match *.tlb Type Library application/x-ms-tlbfile 1684|name match *.ttf TrueType Font file application/x-ms-ttffile 1685|name match *.txt Text Document text/plain 1686|name match *.tz WinZip File application/x-ms-winzip 1687|name match *.udl Microsoft Data Link application/x-ms-msdasc 1688|name match *.url Internet Shortcut application/x-ms-internetshortcut 1689|name match *.uue WinZip File application/x-ms-winzip 1690|name match *.vb Microsoft Visual Basic Scripting Edition (VBScript) file application/x-ms 1691|name match *.vbe VBScript Encoded Script file application/x-ms 1692|name match *.vbs VBScript file application/x-ms 1693|name match *.vir Virus Infected File application/x-ms-virus 1694|name match *.wav Wave Sound audio/x-wav 1695|name match *.wbk Microsoft Word Backup Document application/x-ms-word 1696|name match *.wiz Microsoft Word Wizard application/x-ms-word 1697|name match *.wll Microsoft Word Addin application/x-ms-word 1698|name match *.wpd corel wordperfect document application/x-wordperfect 1699|name match *.wri Write Document application/x-ms-wrifile 1700|name match *.wrl SGI.CosmoPlayer.1 application/x-ms-sgi 1701|name match *.wrz SGI.CosmoPlayer.1 application/x-ms-sgi 1702|name match *.ws Wstart Files application/x-ms-hclwstart 1703|name match *.wsc Windows Script Component application/x-ms 1704|name match *.wsf Windows Script file application/x-ms 1705|name match *.wsh Windows Script Host Settings file application/x-ms 1706|name match *.wtx Text Document application/x-ms-txtfile 1707|name match *.xbm Netscape Hypertext Document image/x-xbitmap 1708|name match *.xif XIF Image Document application/x-ms-xifimage 1709|name match *.xla Microsoft Excel Add-In application/x-ms-excel 1710|name match *.xlb Microsoft Excel Worksheet application/x-ms-excel 1711|name match *.xlc Microsoft Excel Chart application/x-ms-excel 1712|name match *.xld Microsoft Excel 5.0 DialogSheet application/x-ms-excel 1713|name match *.xlk Microsoft Excel Backup File application/x-ms-excel 1714|name match *.xll Microsoft Excel XLL Add-In application/x-ms-excel 1715|name match *.xlm Microsoft Excel 4.0 Macro application/x-ms-excel 1716|name match *.xls Microsoft Excel Worksheet application/vnd.ms-excel 1717|name match *.xlt Microsoft Excel Template application/x-ms-excel 1718|name match *.xlv Microsoft Excel VBA Module application/x-ms-excel 1719|name match *.xlw Microsoft Excel Workspace application/x-ms-excel 1720|name match *.xnk Microsoft Exchange Shortcut application/x-ms-exchange 1721|name match *.xs Microsoft Exchange start Files application/x-ms-exchange 1722|name match *.xxe WinZip File application/x-ms-winzip 1723|name match *.zip WinZip File application/x-zip-compressed 1724