1
2#------------------------------------------------------------
| 1
2#------------------------------------------------------------
|
3# $File: java,v 1.16 2013/09/24 20:22:03 christos Exp $
| 3# $File: java,v 1.18 2015/11/29 22:08:14 christos Exp $
|
4# Java ByteCode and Mach-O binaries (e.g., Mac OS X) use the
5# same magic number, 0xcafebabe, so they are both handled
6# in the entry called "cafebabe".
7#------------------------------------------------------------
8# Java serialization
9# From Martin Pool (m.pool@pharos.com.au)
100 beshort 0xaced Java serialization data
11>2 beshort >0x0004 \b, version %d
12
130 belong 0xfeedfeed Java KeyStore
14!:mime application/x-java-keystore
150 belong 0xcececece Java JCE KeyStore
16!:mime application/x-java-jce-keystore
17
18# Java source
| 4# Java ByteCode and Mach-O binaries (e.g., Mac OS X) use the
5# same magic number, 0xcafebabe, so they are both handled
6# in the entry called "cafebabe".
7#------------------------------------------------------------
8# Java serialization
9# From Martin Pool (m.pool@pharos.com.au)
100 beshort 0xaced Java serialization data
11>2 beshort >0x0004 \b, version %d
12
130 belong 0xfeedfeed Java KeyStore
14!:mime application/x-java-keystore
150 belong 0xcececece Java JCE KeyStore
16!:mime application/x-java-jce-keystore
17
18# Java source
|
190 regex ^import.*;$ Java source
| 190 regex \^import.*;$ Java source
|
20!:mime text/x-java
| 20!:mime text/x-java
|
| 21
22# Java HPROF dumps
23# https://java.net/downloads/heap-snapshot/hprof-binary-format.html
240 string JAVA\x20PROFILE\x201.0.
25>0x12 short 0
26>>0x11 ushort-0x31 <2 Java HPROF dump,
27>>0x17 beqdate/1000 x created %s
|
| |