1# 2# @(#)magic (AT&T Research) 2010-10-10 3# 4# magic number database for file(1) and magic(3) 5# 6# the tab separated fields are: 7# 8# [op]offset type [mask]operator description mime 9# 10# + previous fields must match, current optional 11# & previous and current fields must match 12# { start nesting block 13# } end nesting block 14# s{ function declaration and call 15# } function return 16# s() function call 17# 18# offset byte offset for magic number test or (@offset) expr 19# or file meta-data from { atime blocks ctime fstype 20# gid mode mtime name nlink size uid } 21# type { byte short long quad date edit match } 22# mask optional &number before operator 23# operator comparison operator { < <= > >= != == (default) } 24# description file description for magic number match 25# mime optional mime type 26# 27# numeric values may be decimal, octal, or hex 28# the description string may have one printf format spec for the 29# matched magic number 30# 31 320 short 070707 binary cpio archive application/pax 330 string 070707 cpio archive application/pax 34+76 edit %!PAX!C!\([^!]*\).*%\1% , compressed, version %s 35+76 edit %!PAX!D!\([^!]*\).*%\1% , delta, version %s 36+76 string DELTA!!! , delta, version 88 37+76 match !(*!*) , [ %s ... ] 380 string 070701 System V asc cpio archive application/pax 39+110 string * , [ %s ... ] 400 string 070702 System V aschk cpio archive application/pax 41+110 string * , [ %s ... ] 420 long 0177555 System III ar archive application/x-ar 430 short 0177545 pdp11 ar archive application/x-ar 440 long 0x04034b50 zip archive application/zip 45+2 byte >0 , version %d 46&3 byte * .%d 470 long 0x223e9f78 ms outlook tnef archive application/pax 480 string MSCF ms cabinet archive application/pax 49&4 long 0 50+25 byte * , version %d 51+24 byte * .%d 520 string \x52\x61\x72\x21\x1a\x07 rar archive application/pax 530 long 0x0d010b05 make object application/x-nmake 54o{ 55+4 byte <037 (version %ld) 56+4 edit %.*\(..\)/\(..\)/\(..\).*%19\3-\1-\2% , version %s 57+4 edit %.*\(....-..-..\).*%\1% , version %s 58} 590 long 0177535 make object, old magic application/x-nmake 60o() 610 long 0x0b130800 ksh binary script application/ksh 62+4 byte * , version %ld 630 string vkda delta application/x-vdelta 64+4 byte >0 (version %ld) 650 long 0x03040200 cql db application/x-cql 66+4 byte * , version %d 67+5 byte * .%d 68+6 string * , %s 690 string !<cdb- 70+6 edit %\([^-]*\)-\([0-9.]*\)>.*%cql db, \1 format, version \2% %s application/x-cql 710 long 0x08091800 72+32 string * %s application/x-cql 73+0 byte * hashed index 74+4 long >0 , %d records 75+8 long >0 , %d max 76+12 date >0 , stamp %s 770 string \1S\1B\1C\1S sbcs delta application/x-sbcs 780 long 0100554 apl workspace application/x-apl 790 short 017037 packed data application/zip 800 string <ar> System V 1.0 ar archive application/x-ar 810 string !<arch>\n/ ar library application/x-ar 82+68 long 0x020b0619 , hp s800 relocatable 83+68 long 0x02100619 , hp pa-risc 1.1 relocatable 84+68 long 0x02110619 , hp pa-risc 1.2 relocatable 85+68 long 0x02140619 , hp pa-risc 2.0 relocatable 860 string !<arch>\n__.SYMDEF ar library, ranlib application/x-ar 870 string !<arch>\n__________E ar library, hybrid application/x-ar 880 string !<arch>\n_______[0-9_][0-9_][0-9_]E[BL]E[BL]_ ar library, hybrid application/x-ar 89o{ 90+22 byte 'X' , out of date 91+20 byte 'U' , ucode members 92+21 byte >='A' , %c-endian members 93+19 byte >='A' , %c-endian hash 94} 950 string !<arch>\n________64E ar library, 64 bit hybrid application/x-ar 96o() 970 string !<arch> ar archive application/x-ar 980 string <aiaff>\n aix ar library application/x-ar 990 string <bigaf>\n aix ar library, big application/x-ar 10020 short 0xa7dc zoo archive application/x-zoo 101&22 short 0xfdc4 102+32 byte * , version %ld 103+33 byte * .%ld 104 1050 string \326\303\304\330 vcodex data application/x-vczip 106+5 void vcodex() 107 1080 long 0x080456 109{ 11085 byte <10 sun 111+85 byte <3 m680%d0 112+85 byte 3 sparc 113+85 byte >3 *unknown* 114} 115+85 byte * core dump x-system/core 116+128 string * from `%s' 117+132 string * from `%s' 1180 long 050632 core dump x-system/core 1190 long &0xfff00000==0xe8c00000 Alliant core dump 120+160 string * from `%s' 121 1220 long 0x02100106 hp pa-risc 1.1 object x-system/obj 1230 long 0x02100107 hp pa-risc 1.1 executable x-system/exe 124o{ 125+(@144) long 0x054ef630 , dynamically linked 126+96 long >0 , not stripped 127} 1280 long 0x02100108 hp pa-risc 1.1 executable, shared x-system/exe 129o() 1300 long 0x0210010b hp pa-risc 1.1 executable, demand-load x-system/exe 131o() 1320 long 0x0210010e hp pa-risc 1.1 shared library x-system/dll 133o() 1340 long 0x0210010d hp pa-risc 1.1 shared library x-system/dll 135s{ 136+96 long >0 , not stripped 137} 138 1390 long 0x02140106 hp pa-risc 2.0 object x-system/obj 1400 long 0x02140107 hp pa-risc 2.0 executable x-system/exe 141o() 1420 long 0x02140108 hp pa-risc 2.0 executable, shared x-system/exe 143o() 1440 long 0x0214010b hp pa-risc 2.0 executable, demand-load x-system/exe 145o() 1460 long 0x0214010e hp pa-risc 2.0 shared library x-system/dll 147o() 1480 long 0x0214010d hp pa-risc 2.0 shared library x-system/dll 149s() 150 1510 long 0x020b0106 hp s800 object x-system/obj 1520 long 0x020b0107 hp s800 executable x-system/exe 153o() 1540 long 0x020b0108 hp s800 executable, shared x-system/exe 155o() 1560 long 0x020b010b hp s800 executable, demand-load x-system/exe 157o() 1580 long 0x020b010d hp s800 shared library x-system/dll 159s() 1600 long 0x020b010e hp s800 shared library x-system/dll 161s() 162 1630 long 0x02080108 hp s500 executable, pure x-system/exe 164o{ 165+16 long >0 , version %ld 166} 1670 long 0x02080107 hp s500 executable x-system/exe 168o() 1690 long 0x02080106 hp s500 executable, relocatable x-system/obj 170o() 1710 long 0x020c0108 hp s200 executable, pure x-system/exe 172o{ 173+36 long >0 , not stripped 174+4 short >0 , version %ld 175} 1760 long 0x020c0107 hp s200 executable x-system/exe 177o() 1780 long 0x020c010b hp s200 executable, demand-load x-system/exe 179o() 1800 long 0x020a0108 hp s200 2.x executable, pure x-system/exe 181o() 1820 long 0x020a0107 hp s200 2.x executable x-system/exe 183o() 1840 long 0x020c0106 hp s200 executable, relocatable x-system/exe 185+4 short >0 , version %ld 1860 long 0x0208ff65 hp s500 old archive application/x-ar 1870 long 0x020cff65 hp s200 old archive application/x-ar 1880 long 0x020aff65 hp s200 old archive application/x-ar 1890 short 0x8000 hp lif file 1900 long 0x020c010c hp compiled Lisp 1910 long 0x4da7eee8 hp windows font 192+8 byte >0 , version %ld 193 1940 string Joy!peffpwpc PowerPC executable 1950 short 0x01df PowerPC object x-system/obj 196&3 byte 3 197 1980 long 0x50900107 pyramid 90x executable x-system/exe 199o{ 200+0 long &0x7=0x3 , paged 201+0 long &0x8 , pure 202+16 long >0 , not stripped 203} 2040 long 0x50900108 pyramid 90x object x-system/obj 2050 long 0x5090010b pyramid 90x executable x-system/exe 206o() 207 2080 long 0x000001EB plan9 386 executable x-system/exe 2090 long 0x00000107 plan9 68020 executable x-system/exe 210&mode long &0111!=0 2110 long 0x00000197 plan9 hobbit executable x-system/exe 2120 long 0x00000407 plan9 mips executable x-system/exe 2130 long 0x000002AB plan9 sparc executable x-system/exe 214 2150 long 0x7E004501 plan9 386 object x-system/obj 2160 long 0x4D013201 plan9 68020 object x-system/obj 2170 long 0x430D013C plan9 hobbit object x-system/obj 2180 long 0x3A11013C plan9 mips object x-system/obj 2190 long 0x7410013C plan9 sparc object x-system/obj 220 2210 long &0x0030FFFF==0x00000064 linux 386 222&0 long &0x000F0000>0 223+20 long &0xEFDFFFFF==0 executable x-system/exe 224+20 long &0xEFDFFFFF!=0 shared library x-system/dll 225+0 long 0x01080064 , pure 226+0 long 0x010B0064 , paged 227+0 long 0x00CC0064 , paged, no page 0 228{ 22920 long &0xEFDFFFFF==0 230&16 long >0 , not stripped 231} 232216 long 0421 linux core dump x-system/core 233 2340 long 0x00cc0064 linux 386 kernel code x-system/exe 235+size long <600000 , compressed 236510 short 0xaa55 linux 386 kernel image x-system/exe 237+size long <600000 , compressed 2380 long 0x03010410 minix 386 executable x-system/exe 2390 long 0x000186a3 minix 386 object x-system/obj 240 2410 long 0314 bsd 386 executable, paged, no page 0 x-system/exe 242+16 long >0 , not stripped 2430 long 0407 bsd 386 executable x-system/exe 244&mode long &0111!=0 245+16 long >0 , not stripped 2460 long 0407 bsd-or-linux 386 object x-system/obj 2470 long 0410 bsd 386 executable, pure x-system/exe 248+16 long >0 , not stripped 2490 long 0413 bsd 386 executable, paged x-system/exe 250+16 long >0 , not stripped 251 2520 belong 0xcafebabe java object x-java/obj 253&4 belong >30 254+6 beshort * version %d 255+6 beshort * .%d 256 257a{ 258+4 long &0x00ffffff=1 vax 259+4 long &0x00ffffff=2 romp 260+4 long &0x00ffffff=3 architecture=%ld 261+4 long &0x00ffffff=4 ns32032 262+4 long &0x00ffffff=5 ns32332 263+4 long &0x00ffffff=6 m68k 264+4 long &0x00ffffff=7 i386 265+4 long &0x00ffffff=8 mips 266+4 long &0x00ffffff=9 ns32532 267+4 long &0x00ffffff=10 architecture=%ld 268+4 long &0x00ffffff=11 hp pa-risc 269+4 long &0x00ffffff=12 acorn 270+4 long &0x00ffffff=13 m88k 271+4 long &0x00ffffff=14 sparc 272+4 long &0x00ffffff=15 i860-big 273+4 long &0x00ffffff=16 i860 274+4 long &0x00ffffff=17 rs6000 275+4 long &0x00ffffff=18 powerpc 276+4 long &0x00ffffff>=19 architecture=%ld 277+4 long &0x01000000!=0 \b-64 278} 279 2800 belong 0xcafebabe universal binary [ 281+4 belong loop(a,4,20) 282+4 belong * ] 283+010000 void magic() 284+0 void * ... 285 2860 long &0xfffffffe=0xfeedface mach-o 287+0 long &0x00000001!=0 64-bit 288a() 289+12 long <=0 filetype=%ld 290{ 29112 long 1 relocatable x-system/obj 292&mode long &0111!=0 293} 294{ 29512 long 1 object x-system/obj 296&mode long &0111==0 297} 298+12 long 2 executable x-system/exe 299+12 long 3 fixed vm shared library x-system/dll 300+12 long 4 core x-system/core 301+12 long 5 preload executable x-system/exe 302+12 long 6 shared library x-system/dll 303+12 long 7 dynamic link editor x-system/exe 304+12 long 8 bundle x-system/dll 305+12 long >=9 filetype=%ld 306 3072 short 0407 308m{ 3091 byte <10 sun 310+1 byte <3 m680%d0 311+1 byte 3 sparc 312+1 byte >3 *unknown* 313} 314+0 byte !=0xffffffff object x-system/obj 3152 short 0410 316m() 317+0 byte !=0xffffffff executable, pure x-system/exe 318o{ 319{ 3200 byte &0200 321&20 long >=0x2000 , dynamically linked 322} 323+16 long >0 , not stripped 324} 3252 short 0413 326m() 327{ 3280 byte &0200 329&20 long <0x2000 shared library x-system/dll 330} 331+0 byte !=0xffffffff executable, paged x-system/exe 332o() 333 3340 short 0420 Alliant virtual executable x-system/exe 335+16 long >0 , not stripped 336o{ 337+2 short &0x0001 , 68020 only 338+2 short &0x0002 , vector instructions 339+2 short &0x0008 , IP only 340+2 short &0x0010 , CE only 341+2 short &0x0020 , common library 342+2 short &0x0200 , no complex 343} 3440 short 0421 Alliant object x-system/obj 345+16 long 0 , no symbols 346o() 347 3480 short 0x01df aix RISC 349{ 35018 short &0x2002==0x0002 executable x-system/exe 351+18 short &0x1000 , dynamically linked 352+12 long >0 , not stripped 353} 354+18 short &0x2002==0 object x-system/obj 355+18 short &0x2000 shared library x-system/dll 3560 short 0x0103 aix RT executable x-system/exe 357+2 byte 0x50 , pure 358+28 long >0 , not stripped 359+6 short >0 , version %ld 3600 short 0x0104 aix shared library x-system/dll 3610 short 0x0105 aix ctab data 3620 short 0xfe04 aix structured file 363 3640 short 0401 unix-rt ldp 3650 short 0405 old overlay 3660 short 0437 pdp11 kernel overlay 367 3680 short 0407 System III executable x-system/exe 369o{ 370+16 long >0 , not stripped 371+2 short >0 , version %ld 372} 3730 short 0410 System III executable, pure x-system/exe 374o() 3750 short 0411 System III executable, separate I&D x-system/exe 376o() 377 3780 long 0407 vax object x-system/obj 3790 long 0410 vax executable, pure x-system/exe 380o{ 381+16 long >0 , not stripped 382} 3830 long 0413 vax executable, paged x-system/exe 384o() 385 3860 short 0413 vax executable, pure x-system/exe 387+8 short >0 , not stripped 388+15 byte >0 , version %ld 389 3900 short 0570 vax 391o{ 392{ 39316 short >0 executable x-system/exe 394+12 long >0 , not stripped 395+22 short >0 , version %ld 396} 397+16 short 0 object x-system/obj 398} 3990 short 0575 vax 400o() 4010 short 0502 basic-16 402o() 4030 short 0503 basic-16 (TV) 404o() 4050 short 0510 x86 406o() 4070 short 0511 x86 (TV) 408o() 4090 short 0550 3b20 410o() 4110 short 0551 3b20d (TV) 412o() 413 4140 long 0x464c457f elf 415&4 byte <2 416&5 byte 1 417o{ 418{ 419+18 short 0 machine=UNKNOWN 420+18 short 1 3b 421+18 short 2 sparc 422+18 short 3 i386 423+18 short 4 m68k 424+18 short 5 m88k 425+18 short 6 i486 426+18 short 7 i860 427{ 42818 short 8 429{ 43036 long &0xf00000f0==0x00000000 431+4 byte 1 mips2 432+4 byte 2 mips4 433} 434+36 long &0xf0000000==0x10000000 mips2 435+36 long &0xf0000000==0x20000000 mips3 436+36 long &0xf0000000==0x30000000 mips4 437+36 long &0xf00000f0==0x00000040 mips4 438+36 long &0xf0000000==0x40000000 mips5 439+36 long &0xf0000000==0x50000000 mips6 440+36 long &0xf0000000==0x60000000 mips7 441+36 long &0xf0000000==0x70000000 mips8 442+36 long &0xf0000000==0x80000000 mips9 443} 444+18 short 9 amdahl 445+18 short 10 mips_le 446+18 short 11 rs6000 447+18 short 15 pa 448+18 short 16 n-cube 449+18 short 17 fujitsu500 450+18 short 18 sparc32+ 451+18 short 20 powerpc 452+18 short 21 powerpc-64 453+18 short 22 s390 454+18 short 23 cell-BE 455+18 short 36 nec-v800 456+18 short 37 fujitsu-fr20 457+18 short 38 trw-rh32 458+18 short 39 fujitsu-mma 459+18 short 40 arm 460+18 short 41 alpha 461+18 short 42 hitachi-sh 462+18 short 43 sparc64-v9 463+18 short 44 siemens-tricore 464+18 short 45 argonaut 465+18 short 46 hitachi-h8/300 466+18 short 47 hitachi-h8/300h 467+18 short 48 hitachi-h8s 468+18 short 49 hitachi-h8/500 469+18 short 50 itanium 470+18 short 51 mips-x 471+18 short 52 motorola-coldfire 472+18 short 53 motorola-m68hc12 473+18 short 54 fujutsu-mma 474+18 short 55 siemens-pcp 475+18 short 56 sony-ncpu 476+18 short 57 denso-ndr1 477+18 short 58 motorola-startcore 478+18 short 59 toyota-me16 479+18 short 60 stm-st100 480+18 short 61 alc-tinyj 481+18 short 62 x86-64 482+18 short 63 sony-dsp 483+18 short 66 siemens-fx66 484+18 short 67 stm-st9-16 485+18 short 68 stm-st7-8 486+18 short 69 motorola-mc68hc16 487+18 short 70 motorola-mc68hc11 488+18 short 71 motorola-mc68hc08 489+18 short 72 motorola-mc68hc05 490+18 short 73 sgi-svx 491+18 short 74 stm-st19-8 492+18 short 75 vax 493+18 short 76 axis, 32-bit 494+18 short 77 infineon-javelin-32 495+18 short 78 element-14-firepath-64 496+18 short 79 lsi-zsp-16 497+18 short 80 knuth-mmix-64 498+18 short 81 harvard-huany 499+18 short 82 sitera-prism 500+18 short 83 amtel-avr-8 501+18 short 84 fujitsu-fr30 502+18 short 85 mitsubishi-d10v 503+18 short 86 mitsubishi-d30v 504+18 short 87 nec-v850 505+18 short 88 matsushita-m32r 506+18 short 89 matsushita-mn10300 507+18 short 90 matsushita-mn10200 508+18 short 91 picojava 509+18 short 92 openrisc-32 510+18 short 93 arc-tangent-a5 511+18 short 94 tensilica-xtensa 512+18 short 0x9026 alpha 513+18 short 0xa390 s390 514|18 short * machine=0x%04lX 515} 516+16 short 0 type=UNKNOWN 517+16 short 1 object x-system/obj 518+16 short 2 executable x-system/exe 519+16 short 3 shared library x-system/dll 520{ 52116 short 4 core dump x-system/core 522+(@28+@42H*@44H+104) string * from `%s' 523} 524+16 short >4 type=%d 525+4 byte 0 , 16-bit 526+4 byte 1 , 32-bit 527+5 byte 1 , little-endian 528{ 52918 short ==8 530&36 long &0x000000f0==0x00000000 531&4 byte 1 , old 532} 533{ 53418 short 1 535+36 long 1 , mau 536} 537+20 long >1 , version %ld 538{ 53916 short 2 540&(@28+4*32) long 2 , dynamically linked 541} 542} 543 5440 long 0x7f454c46 elf 545&4 byte 1 546&5 byte 2 547o() 548 5490 long 0x464c457f elf 550&4 byte 2 551&5 byte 1 552o{ 553{ 554+18 short 0 machine=UNKNOWN 555+18 short 1 3b 556+18 short 2 sparc 557+18 short 3 i386 558+18 short 4 m68k 559+18 short 5 m88k 560+18 short 6 i486 561+18 short 7 i860 562{ 56318 short 8 564{ 56548 long &0xf00000f0==0x00000000 566+4 byte 1 mips2 567+4 byte 2 mips4 568} 569+48 long &0xf0000000==0x10000000 mips2 570+48 long &0xf0000000==0x20000000 mips3 571+48 long &0xf0000000==0x30000000 mips4 572+48 long &0xf00000f0==0x00000040 mips4 573+48 long &0xf0000000==0x40000000 mips5 574+48 long &0xf0000000==0x50000000 mips6 575+48 long &0xf0000000==0x60000000 mips7 576+48 long &0xf0000000==0x70000000 mips8 577+48 long &0xf0000000==0x80000000 mips9 578} 579+18 short 9 amdahl 580+18 short 10 mips_le 581+18 short 11 rs6000 582+18 short 15 pa 583+18 short 16 n-cube 584+18 short 17 fujitsu500 585+18 short 18 sparc32+ 586+18 short 20 powerpc 587+18 short 21 powerpc-64 588+18 short 22 s390 589+18 short 23 cell-BE 590+18 short 36 nec-v800 591+18 short 37 fujitsu-fr20 592+18 short 38 trw-rh32 593+18 short 39 fujitsu-mma 594+18 short 40 arm 595+18 short 41 alpha 596+18 short 42 hitachi-sh 597+18 short 43 sparc64-v9 598+18 short 44 siemens-tricore 599+18 short 45 argonaut 600+18 short 46 hitachi-h8/300 601+18 short 47 hitachi-h8/300h 602+18 short 48 hitachi-h8s 603+18 short 49 hitachi-h8/500 604+18 short 50 itanium 605+18 short 51 mips-x 606+18 short 52 motorola-coldfire 607+18 short 53 motorola-m68hc12 608+18 short 54 fujutsu-mma 609+18 short 55 siemens-pcp 610+18 short 56 sony-ncpu 611+18 short 57 denso-ndr1 612+18 short 58 motorola-startcore 613+18 short 59 toyota-me16 614+18 short 60 stm-st100 615+18 short 61 alc-tinyj 616+18 short 62 x86-64 617+18 short 63 sony-dsp 618+18 short 66 siemens-fx66 619+18 short 67 stm-st9-16 620+18 short 68 stm-st7-8 621+18 short 69 motorola-mc68hc16 622+18 short 70 motorola-mc68hc11 623+18 short 71 motorola-mc68hc08 624+18 short 72 motorola-mc68hc05 625+18 short 73 sgi-svx 626+18 short 74 stm-st19-8 627+18 short 75 vax 628+18 short 76 axis-32 629+18 short 77 infineon-javelin-32 630+18 short 78 element-14-firepath-64 631+18 short 79 lsi-zsp-16 632+18 short 80 knuth-mmix-64 633+18 short 81 harvard-huany 634+18 short 82 sitera-prism 635+18 short 83 amtel-avr-8 636+18 short 84 fujitsu-fr30 637+18 short 85 mitsubishi-d10v 638+18 short 86 mitsubishi-d30v 639+18 short 87 nec-v850 640+18 short 88 matsushita-m32r 641+18 short 89 matsushita-mn10300 642+18 short 90 matsushita-mn10200 643+18 short 91 picojava 644+18 short 92 openrisc-32 645+18 short 93 arc-tangent-a5 646+18 short 94 tensilica-xtensa 647+18 short 0x9026 alpha 648+18 short 0xa390 s390 649|18 short * machine=0x%04lX 650} 651+16 short 0 type=UNKNOWN 652+16 short 1 object x-system/obj 653+16 short 2 executable x-system/exe 654+16 short 3 shared library x-system/dll 655{ 65616 short 4 core dump x-system/core 657+(@28+@42H*@44H+104) string * from `%s' 658} 659+16 short >4 type=%ld 660+4 byte 2 , 64-bit 661+5 byte 1 , little-endian 662+20 long >1 , version %ld 663{ 66416 short 2 665+(@32Q+3*56) long 2 , dynamically linked 666+(@32Q+4*56) long 2 , dynamically linked 667} 668} 669 6700 long 0x7f454c46 elf 671&4 byte 2 672&5 byte 2 673o() 674 6750 lelong 000000407 netbsd little-endian object x-system/obj 676+16 lelong 0 , stripped 6770 belong 000000407 netbsd big-endian object x-system/obj 678+16 belong 0 , stripped 679 6800 belong&0377777777 041400413 netbsd i386 681d{ 6820 byte &0x80 683+20 lelong <4096 shared library x-system/dll 684+20 lelong >=4096 executable, dynamically linked x-system/exe 685} 686+0 byte ^0x80 executable x-system/exe 687+16 lelong 0 , stripped 6880 belong&0377777777 041400410 netbsd i386 pure 689p{ 690+0 byte &0x80 executable, dynamically linked x-system/exe 691+0 byte ^0x80 executable x-system/exe 692+16 lelong 0 , stripped 693} 6940 belong&0377777777 041400407 netbsd i386 695n{ 696+0 byte &0x80 executable, dynamically linked, impure x-system/exe 697{ 6980 byte ^0x80 699+0 byte &0x40 position independent 700+20 lelong !0 executable x-system/exe 701+20 lelong =0 object x-system/obj 702} 703+16 lelong 0 , stripped 704} 7050 belong&0377777777 041400507 netbsd i386 core 706c{ 707+12 string * from '%s' x-system/core 708} 709 7100 belong&0377777777 042000413 netbsd m68k4k 711d() 7120 belong&0377777777 042000410 netbsd m68k4k pure 713p() 7140 belong&0377777777 042000407 netbsd m68k4k 715n() 7160 belong&0377777777 042000507 netbsd m68k4k core 717c() 718 7190 belong&0377777777 042200413 netbsd ns32532 720d() 7210 belong&0377777777 042200410 netbsd ns32532 pure 722p() 7230 belong&0377777777 042200407 netbsd ns32532 724n() 7250 belong&0377777777 042200507 netbsd ns32532 core 726c() 727 7280 belong&0377777777 042600413 netbsd pmax 729d() 7300 belong&0377777777 042600410 netbsd pmax pure 731p() 7320 belong&0377777777 042600407 netbsd pmax 733n() 7340 belong&0377777777 042600507 netbsd pmax core 735c() 736 7370 belong&0377777777 043000413 netbsd vax 1k 738d() 7390 belong&0377777777 043000410 netbsd vax 1k pure 740p() 7410 belong&0377777777 043000407 netbsd vax 1k 742n() 7430 belong&0377777777 043000507 netbsd vax 1k core 744c() 745 7460 belong&0377777777 045400413 netbsd vax 4k 747d() 7480 belong&0377777777 045400410 netbsd vax 4k pure 749p() 7500 belong&0377777777 045400407 netbsd vax 4k 751n() 7520 belong&0377777777 045400507 netbsd vax 4k core 753c() 754 7550 belong&0377777777 041600413 netbsd m68k 756d{ 7570 byte &0x80 758+20 belong <8192 shared library x-system/dll 759+20 belong >=8192 executable, dynamically linked x-system/exe 760} 761+0 byte ^0x80 executable x-system/exe 762+16 belong 0 , stripped 7630 belong&0377777777 041600410 netbsd m68k pure 764p() 7650 belong&0377777777 041600407 netbsd m68k 766n() 7670 belong&0377777777 041600507 netbsd m68k core 768c() 7690 belong&0377777777 042400413 netbsd sparc 770d() 771 7720 belong&0377777777 042400410 netbsd sparc pure 773p() 7740 belong&0377777777 042400407 netbsd sparc 775n() 7760 belong&0377777777 042400507 netbsd sparc core 777c() 778 7790 belong&0377777777 043400413 netbsd mips 780d() 7810 belong&0377777777 043400410 netbsd mips pure 782p() 7830 belong&0377777777 043400407 netbsd mips 784n() 7850 belong&0377777777 043400507 netbsd mips core 786c() 787 7880 belong&0377777777 043600413 netbsd arm32 789d() 7900 belong&0377777777 043600410 netbsd arm32 pure 791p() 7920 belong&0377777777 043600407 netbsd arm32 793n() 7940 belong&0377777777 043600507 netbsd arm32 core 795c() 796 7970 lelong 0x00070185 ECOFF netbsd alpha binary 798+10 leshort 0x0000 , stripped x-system/obj 7990 belong&0377777777 043200507 netbsd alpha core 800c() 801 8020 short 0560 3b 803{ 80416 short >0 executable x-system/exe 805+12 long >0 , not stripped 806} 807+16 short 0 object x-system/obj 808+18 short &010000 , paging 3b2/300 809+18 short &020000 , 32100 810+18 short &040000 , mau 811{ 81216 short >0 813+20 short 0443 , shared library x-system/dll 814+20 short 0410 , swapped 815+20 short 0413 , paged 816+22 short >0 , version %ld 817} 8180 short 0561 3b (TV) 819{ 82016 short >0 executable x-system/exe 821+12 long >0 , not stripped 822} 823+16 short 0 object x-system/obj 824+18 short &020000 , 32100 required 825+18 short &040000 , mau hardware required 826 8270 short 0512 pc 286 small model (COFF) 828o{ 829{ 83016 short >0 executable x-system/exe 831+12 long >0 , not stripped 832} 833+16 short 0 object x-system/obj 834{ 83516 short >0 836&22 short >0 , version %ld 837} 838} 8390 short 0522 pc 286 large model (COFF) 840o() 841 8420 short 0514 pc 386 843o{ 844{ 84516 short >0 executable x-system/exe 846+12 long >0 , not stripped 847} 848+16 short 0 object x-system/obj 849{ 85016 short >0 851&22 short >0 , version %ld 852} 853+0 short !=0x8664 , 32 bit 854+0 short 0x8664 , 64 bit 855} 8560 short 0x8664 pc 386 857o() 8580 short 0524 pc 386 859o() 8600 short 0604 pc alpha 861o() 862 8630 short 0520 m68k 864{ 86516 short >0 executable x-system/exe 866+12 long >0 , not stripped 867} 868+16 short 0 object x-system/obj 869{ 87016 short >0 871+20 short 0410 , pure 872+20 short 0413 , paged 873+22 short >0 , version %ld 874} 875 8760 short 0521 m68k executable, shared x-system/exe 877o{ 878+12 long >0 , not stripped 879} 8800 short 0522 m68k executable, shared, paged x-system/exe 881o() 882 8830 long 0x02c5e2c4 mvs OpenEdition object x-system/obj 884&4 long 0x40404040 8850 long 0xc9c5e6d7 mvs OpenEdition executable x-system/exe 886&4 long 0xd3d4c840 887 8880 short 0530 u370 5.2/5.0 889o{ 890{ 89120 long !=0440 892&18 short &01 executable x-system/exe 893+0 short &01==0 , pure 894+12 long >0 , not stripped 895} 896+20 long 0440 shared library x-system/dll 897+18 short &01==0 object x-system/obj 898+18 byte &0x40 , BIG 899+49 byte &0xf!=0 , pre-XA 900{ 90118 short &01 902+24 long >0 , version %ld 903} 904} 9050 short 0531 amdahl 5.2 906o() 9070 short 0534 amdahl 5.2 908o() 9090 short 0535 u370 5.2 910o() 911 9120 short 0700 ncr tower32 913o{ 914+18 short &0040000 68000 915+18 short &0040000==0 68020 916+18 short &0020000 \b+68881 917{ 91818 short &0000001==0 object x-system/obj 919+22 short >0 , version %ld 920} 921{ 92218 short &0001 executable x-system/exe 923+20 short 0413 , paged 924+20 short 0443 shared library x-system/dll 925+20 short 0410 , pure, swapped 926+20 short 0407 , swapped 927+12 long >0 , not stripped 928} 929} 9300 short 0720 ncr towe32r/600 931o() 9320 short 0740 ncr tower32/800 933o() 9340 short 0610 ncr tower/XP rel 2 935o() 9360 short 0615 ncr tower/XP rel 2 937o() 9380 short 0620 ncr tower/XP rel 3 939o() 9400 short 0625 ncr tower/XP rel 3 941o() 9420 short 0630 ncr tower32/600/400 943o() 9440 short 0640 ncr tower32/800 945+18 short &00040000 compatible 946o() 9470 short 0645 ncr tower32/800 68010 948o() 949 9500 short 0457 DG MV pure executable x-system/exe 951+40 long >0 , not stripped 952+2 short >0 , version %ld 9530 short 0460 DG MV object x-system/obj 954+2 short >0 , version %ld 9550 short 0541 m88k pure executable x-system/exe 956+12 long >0 , not stripped 957+22 short >0 , version %ld 9580 short 0555 m88k object x-system/obj 959+22 short >0 , version %ld 960 9610 short &0xfffd==0x0160 mips 962{ 96318 short &02 executable x-system/exe 964+20 short 0410 , pure 965+20 short 0413 , paged 966+20 short 0443 , shared library x-system/dll 967+8 long !=0 , not stripped 968} 969+18 short &02==0 object x-system/obj 970o{ 971+0 short &0x2 , little-endian 972+22 byte * , version %ld 973+23 byte * .%ld 974} 9750 short &0xfffd==0x180 mips ucode x-system/obj 976o() 9770 long 0xdeadadb0 mips core dump x-system/core 978f{ 979+4 long 1 980&16 string * from `%s' 981+0 long &0xff==0xb0 , 32-bit, old 982+0 long &0xff==0xbb , 32-bit 983+0 long &0xff==0x40 , 64-bit 984} 9850 long 0xbabec0bb mips core dump x-system/core 986f() 9870 long 0xdeadad40 mips core dump x-system/core 988f() 989 9900 short 0603 alpha 991{ 99222 short &02 993&22 short &030000!=020000 executable x-system/exe 994+24 short 0410 , pure 995+24 short 0413 , paged 996+22 short &020000 , dynamically linked 997+16 long !=0 , not stripped 998} 999+22 short &030000==020000 shared library x-system/dll 1000{ 100122 short &030002==0 1002+24 short 0407 object x-system/obj 1003} 1004+27 byte * , version %ld 1005+26 byte * .%ld 1006 10070 short 0432 compiled terminfo entry 10080 short 0433 curses screen image 10090 short 0434 curses screen image 1010 10110 long 0x14031008 tcpdump cons headers application/x-tcpdump 1012v{ 1013+4 long >0 , version %d 1014&8 long * .%d 1015} 10160 long 0x14031004 tcpdump cons data application/x-tcpdump 1017v() 1018 1019257 string ustar pax archive application/pax 1020&156 match [gx] 1021o{ 1022&99 byte 0 1023&100 match +([ 0-7])? 1024} 1025 1026257 string ustar\ \ gnu tar archive application/pax 1027o{ 1028&99 byte 0 1029&100 match +([ 0-7])? 1030+0 match ???* , [ %s ... ] 1031} 1032 1033257 string ustar tar archive application/pax 1034o() 1035 103699 byte 0 old tar archive application/pax 1037o() 1038 10390 string \301\304\331\100\323\311\302\331\306 ca librarian archive application/pax 1040 10410 match <[hH][tT][mM][lL]> html input text/html 10420 match <!?(--)[Dd][Oo][Cc][Tt][Yy][Pp][Ee] [Hh][Tt][Mm][Ll] html input text/html 1043 10440 long 0x02f78301 1045+16 string TeX TeX dvi output application/x-dvi 1046 10470 byte 0201 shell history application/sh 1048&1 byte <07 version %d 1049 10500 byte 1 1051&1 byte 0150 1052&2 match [0-9][0-9][0-9][0-9][0-9] sccs application/x-sccs 1053 10540 short 0x5a4d 1055o{ 1056&24 short 0x0040 1057{ 1058+(@60H) short 0x454c os/2 linear 1059+(@60H) short 0x454e os/2 1060+(@60H) short 0x4550 win32 1061+(@60H+4) short 0x014c 386 1062+(@60H+4) short 0x0150 powerpc 1063+(@60H+4) short 0x0162 mips 1064+(@60H+4) short 0x0166 mips, big endian? 1065+(@60H+4) short 0x0184 alpha 1066+(@60H+4) short 0x8664 386 1067|(@60H+4) short * machine=0x%04lX 1068} 1069+(@60H+22) short &0x2002==0x0002 executable x-system/exe 1070+(@60H+22) short &0x2000 shared library x-system/dll 1071+(@60H+22) short &0x0120==0 , 16 bit 1072+(@60H+22) short &0x0120==0x0100 , 32 bit 1073+(@60H+22) short &0x0120==0x0020 , 64 bit 1074+(@60H+92) short 0 , unknown subsystem 1075+(@60H+92) short 1 , native 1076+(@60H+92) short 2 , windows gui 1077+(@60H+92) short 5 , os2 1078+(@60H+92) short 7 , posix 1079+(@60H+92) short >7 , subsystem %d 1080+50 string PKWARE , self extracting zip 1081+36 string LHA's , self extracting lha 1082+233 string PKSFX2 , self extracting zip 1083} 1084 10850 short 0x5a4c 1086o() 1087 10880 long 0x4c000000 1089&4 long 0x01140200 windows shortcut application/x-windows-lnk 1090 10910 string PMCC windows GRP application/dos-grp 1092369 string MICROSOFT windows PIF application/dos-pif 10930 long 0xffffffff dos device driver application/dos-drv 1094&name match *.(SYS|sys) 10950 string LZ dos builtin 10960 byte 0xe9 dos executable, COM application/x-dos 10970 byte 0xeb dos executable, COM application/x-dos 10980 byte 0xf0 dos library application/x-ar 10990 byte 0x80 dos object, OMF application/dos-omf 1100 11010 match x[ ]T[ ] ditroff application/x-ditroff 1102&4 string * for %s 11030 string %! postscript input application/postscript 1104{ 11052 string PS-Adobe- , conforming 1106+11 match +([0-9]).+([0-9]) , version %s 1107} 11080 string %PDF adobe acrobat file application/x-pdf 1109+5 match +([0-9]).+([0-9]) , version %s 11100 string @document( imagen input 1111 11120 long 0x2e736e64 audio data audio/basic 1113o{ 1114+12 long 1 , 8-bit u-law 1115+12 long 2 , 8-bit linear pcm 1116+12 long 3 , 16-bit linear pcm 1117+12 long 4 , 24-bit linear pcm 1118+12 long 5 , 32-bit linear pcm 1119+12 long 6 , 32-bit floating point 1120+12 long 7 , 64-bit floating point 1121+12 long 23 , compressed (G.721 ADPCM) 1122+20 long =1 , mono 1123+20 long =2 , stereo 1124+20 short =3 , 3 channels 1125+20 short =4 , quad 1126+20 short >4 , %d channels 1127+16 long * , %d hz 1128} 11290 long 0x0064732E dec audio data audio/x-dec 1130o() 1131 11320 string Creative\ Voice\ File soundblaster audio data audio/x-soundblaster 11330 long 0x4e54524b multitrack audio data file audio/x-multitrack 1134+4 long * , version %ld 1135 11360 string MThd standard midi data audio/midi 1137+9 byte >0 , format %d 1138+11 byte >1 , %d channels 11390 string CTMF creative music data 11400 string SBI soundblaster instrument data 11410 string Creative\ Voice\ File creative labs voice data 1142&19 byte 0x1A 1143+23 byte >0 , version %d 1144+22 byte >0 \b.%d 1145 11460 string RIFF riff audio data audio/riff 1147+8 string AIFF aiff format 1148+8 string AIFC aiff-c format 1149+8 string WAVE , wave format 1150+8 string 8SVX 8svx format 1151+34 leshort >0 , %d bit 1152+22 leshort =1 , mono 1153+22 leshort =2 , stereo 1154+22 leshort =3 , 3 channels 1155+22 leshort =4 , quad 1156+22 leshort >4 , %d channels 1157+24 lelong >0 , %d hz 1158 11598 long 0x41494646 aiff audio data audio/aiff 11608 long 0x41494643 aiff-C audio data audio/aiff 11610 long 0x4e54524b multitrack audio data audio/multitrack 1162 11630 string ;vdb;ciao ciao virtual database application/x-ciao 11640 string ;vdb; vdb archive application/pax 1165+5 string * , %s 1166 11670 string #pragma pp:checkpoint preprocessor checkpoint application/x-libpp 1168+22 edit %"\([^"]*\)".*%\1% , version %s 1169 1170# 1171# pc application files 1172# 1173 11740 string HDR*PowerBuilder power builder library application/x-powerbuilder 1175+18 edit %\([0-9][0-9]\)\([0-9][0-9]\).*%\1.\2% , version %s 1176 1177# 1178# database files 1179# 1180 11810 long 0x13579ace dbm 1.x database application/x-dbm 11820 string GDBM gnu dbm 2.x database application/x-gdbm 1183 118412 long 0x00042253 bsd db queue 1185+16 long >0 version %d 1186+12 belong 0x00042253 , big-endian 1187+12 lelong 0x00042253 , little-endian 1188 11890 long 0x00053162 bsd db btree application/x-bsd-db 1190+4 long >2 1.86 1191+4 long <3 1.85 1192+4 long >0 , version %d 1193+0 belong 0x00053162 , big-endian 1194+0 lelong 0x00053162 , little-endian 1195+16 long * , %d records 1196+20 long * , flags 0x%x 1197 119812 long 0x00053162 bsd db btree 1199+16 long >0 version %d 1200+12 belong 0x00053162 , big-endian 1201+12 lelong 0x00053162 , little-endian 1202 12030 long 0x00061561 bsd db hash application/x-bsd-db 1204+4 long >2 1.86 1205+4 long <3 1.85 1206+4 long >0 version %d 1207+8 long 4321 , big-endian 1208+8 long 1234 , little-endian 1209+56 long * , %d keys 1210 121112 long 0x00061561 bsd db hash 1212+16 long >0 version %d 1213+12 belong 0x00061561 , big-endian 1214+12 lelong 0x00061561 , little-endian 1215 12160 long 0x950412de gnu message catalog application/x-locale 1217+4 long * , revision %d 1218+8 long * , %d messages 1219 1220# 1221# from the net 1222# 1223 12241 string # This is a shell archive. shar archive application/x-shar 122581 string # This is a shell archive. shar archive application/x-shar 1226 12270 short 0x1f9d compressed data application/zip 1228{ 12292 byte &0200 1230&2 byte &037>0 , %d bits 1231} 12320 short 017436 packed data application/zip 12330 short 0x9d1f compressed data application/zip 1234+2 byte &0200 , blocked 1235+2 byte &037>0 , with %d bits 1236 12370 short 0x1f10 pzip compressed data application/pzip 1238&2 byte >0 , version %d 1239&3 byte <10 .%d 1240 12410 short 0x1f8b pzip compressed data application/pzip 1242&10 short 0x9217 1243 12440 short 0x1f8b gzip compressed data application/gzip 1245+9 byte 0 , dos 1246+9 byte 1 , amiga 1247+9 byte 2 , vms 1248+9 byte 3 , unix 1249+9 byte 5 , atari 1250+9 byte 6 , os/2 1251+9 byte 7 , mac 1252+9 byte 10 , tops/20 1253+9 byte 11 , win/32 1254+2 byte <8 , reserved 1255+2 byte 8 , deflate 1256+3 byte &0x1 , ascii 1257+3 byte &0x2 , continuation 1258+3 byte &0x4 , extra field 1259+3 byte &0x8 , original name 1260+3 byte &0x10 , comment 1261+3 byte &0x20 , encrypted 1262+8 byte 2 , max compression 1263+8 byte 4 , max speed 1264+4 ledate >0 , %s 1265 12660 string BZh bzip compressed data application/zip 1267+3 byte >='0'&<='9' , %c00k blocks 12680 long 0x0000abcd NOC newbridge raw stats 1269v{ 1270+4 short * , version %d 1271+6 short * .%d 1272} 12730 long 0x0e130414 NOC switch stats 1274v() 12750 long 0x0e13130d NOC switch summary stats 1276v() 1277 12780 string begin 0 uuencoded data application/x-uuencode 12790 string \x89PNG PNG image data image/png 1280&4 belong 0x0d0a1a0a 1281+16 belong x , %ld x 1282+20 belong x %ld 1283+24 byte x , %d-bit 1284+25 byte 0 , grayscale 1285+25 byte 2 , color RGB 1286+25 byte 3 , colormap 1287+25 byte 4 , gray+alpha 1288+25 byte 6 , color RGBA 1289#+26 byte 0 , deflate/32K 1290+28 byte 0 , non-interlaced 1291+28 byte 1 , interlaced 12920 string \377\330\377 JPEG image image/jpeg 12930 string GIF GIF image image/gif 1294+3 string * , version %-.3s 1295{ 12966 leshort >0 , %d 1297&8 leshort >0 x %d 1298} 1299+10 byte &0x40 , interlaced 1300+10 byte &0x03==0x00 , 2 colors 1301+10 byte &0x03==0x01 , 4 colors 1302+10 byte &0x03==0x02 , 8 colors 1303+10 byte &0x03==0x03 , 16 colors 1304+10 byte &0x03==0x04 , 32 colors 1305+10 byte &0x03==0x05 , 64 colors 1306+10 byte &0x03==0x06 , 128 colors 1307+10 byte &0x03==0x07 , 256 colors 13080 short 0x4d4d TIFF image, big-endian image/tiff 1309+2 short >0 , version %d 13100 short 0x4949 TIFF image, little-endian image/tiff 1311+2 short >0 , version %d 13120 short 000732 sgi imagelib image image/x-imagelib 1313+6 short * , %d 1314+8 short * x %d 1315 13160 string gimp xcf gimp XCF image image/x-gimp 1317+9 string file , version 0 1318{ 13199 string v , version 1320&10 string * %s 1321} 1322+14 belong x , %lu x 1323+18 belong x %lu 1324+22 belong 0 , rgb color 1325+22 belong 1 , greyscale 1326+22 belong 2 , indexed color 1327 13280 string MOVI sgi movie video/x-sgi 1329 13300 byte 0 1331&4 string moov quicktime movie video/quicktime 13320 byte 0 1333&4 string mdat quicktime movie video/quicktime 13348 string AVI avi movie video/avi 13350 long 0x000001BA mpeg movie video/mpeg 13360 long 0x000001B3 mpeg movie video/mpeg 1337 13380 string <MakerFile frame maker file application/framemaker 13390 string {\\rtf rich text application/rtf 1340 13410 long 0xd0cf11e0 ms powerpoint document application/x-powerpoint 1342 13430 string ms C/C++ program database ms program database application/x-dbx 1344+33 string * , version %s 1345 13460 string \377WPC corel wordperfect document application/x-wordperfect 1347 13480 beshort 0xedab 1349&2 beshort 0xeedb red hat package manager 1350+4 byte * v%d 1351+8 beshort 1 i386 1352+8 beshort 2 alpha 1353+8 beshort 3 sparc 1354+8 beshort 4 mips 1355+8 beshort 5 powerpc 1356+8 beshort 6 68k 1357+8 beshort 7 sgi 1358+8 beshort >7 unknown 1359+6 beshort 0 binary 1360+6 beshort 1 source 1361+10 string * , %s 1362 13630 short 0x9900 pgp key public ring application/pgp 13640 short 0x9501 pgp key security ring application/pgp 13650 short 0x9500 pgp key security ring application/pgp 13660 string -----BEGIN\040PGP pgp armored data application/pgp 1367+15 string PUBLIC\040KEY\040BLOCK- , public key block 1368+15 string MESSAGE- , message 1369+15 string SIGNED\040MESSAGE- , signed message 1370+15 string PGP\040SIGNATURE- , signature 1371 13720 string Core osf unknown core dump x-system/core 1373&name match core* 1374+24 string * from `%s' 1375 13760 match From[ ] mail message message/rfc822 13770 match (BABYL|From|Received|Return-Path|To)?(:)[ ] mail message message/partial 1378 13790 string \001fcp X11 portable compiled font x-X11/font 1380 13810 string \357\273\277 utf-8 encoded text application/x-iconv 13820 string \376\377 utf-16 encoded text application/x-iconv 13830 string \377\376 utf-16 encoded text, little-endian application/x-iconv 1384 138532769 string CD001 ISO 9660 CD-ROM filesystem image data/x-filesystem 1386+32808 string * , '%s' 1387+34816 string \000CD001\001EL\ TORITO\ SPECIFICATION , bootable 138837633 string CD001 ISO 9660 CD-ROM filesystem image, raw 2352 byte sectors data/x-filesystem 138932776 string CDROM High Sierra CD-ROM filesystem image data/x-filesystem 1390 1391# 1392# front compression data 1393# 1394 13950 byte 0 1396&1 edit %^\([A-Z_][A-Z_]*\)-\([^0-9]*\)-\([0-9][0-9]\)%\1 data, with \2, version \3%l %s application/x-%s 13970 byte 0 1398&1 edit %^\([A-Z_][A-Z_]*\)\([0-9][0-9]\)%\1 data, version \2%l %s application/x-%s 1399 1400# 1401# generic binary magic 1402# 1403 14040 long 0x00010203 1405&4 string * %s application/x-%s 1406&12 string * %s data 1407&24 version * , version %s 1408+28 long >0 , size %u 1409{ 1410&28 long >=4 1411&32 long >0 , %u 1412} 1413{ 1414&28 long >=8 1415&36 long >0 , %u 1416} 1417 1418# 1419# local additions 1420# 1421 14220 match info mam mam program application/x-mam 14230 edit %^!<\([^>]*\)>.*%\1%l %s data application/x-%s 14240 string \015\023\007\000 ast message catalog application/x-locale 1425+4 string * , %s 1426 1427# 1428# last chance 1429# 1430 1431name match *.(o|obj) unknown object x-system/obj 1432name match core unknown core dump x-system/core 1433name match core.* unknown core dump x-system/core 1434 1435# 1436# we resisted til now 1437# 1438 14390 void registry() 1440|name match *.acp Office.ActorPreview application/x-ms-office 1441|name match *.act Office.Actor application/x-ms-office 1442|name match *.ade Microsoft Access project extension application/x-ms 1443|name match *.adp Microsoft Access project application/x-ms 1444|name match *.aif AIFF Audio audio/x-aiff 1445|name match *.aifc AIFF Audio audio/aiff 1446|name match *.aiff AIFF Audio audio/aiff 1447|name match *.aim AOL Instant Messenger Launch application/x-aim 1448|name match *.ani Animated Cursor application/x-ms-anifile 1449|name match *.app Application file application/x-ms 1450|name match *.arc WinZip File application/x-ms-winzip 1451|name match *.arj WinZip File application/x-ms-winzip 1452|name match *.art ART Image image/x-jg 1453|name match *.asp Active Server Page application/x-ms 1454|name match *.asx Windows Media Audio / Video application/x-ms 1455|name match *.au Sound Clip audio/basic 1456|name match *.avi Video Clip video/avi 1457|name match *.awx Custom AppWizard application/x-ms-awxfile 1458|name match *.b64 WinZip File application/x-ms-winzip 1459|name match *.bas Microsoft Visual Basic class module application/x-ms 1460|name match *.bat MS-DOS Batch File application/x-ms-batfile 1461|name match *.bfc Briefcase application/x-ms-briefcase 1462|name match *.bhx WinZip File application/x-ms-winzip 1463|name match *.bmp Bitmap Image image/bmp 1464|name match *.bpg Borland Project Group application/x-ms-borlandprojectgroup 1465|name match *.bpk C++Builder Package application/x-ms-bcbpackage 1466|name match *.bpr C++Builder Project application/x-ms-bcbproject 1467|name match *.bsc Browser Information application/x-ms-bscfile 1468|name match *.cda CD Audio Track application/x-ms-cdafile 1469|name match *.cdf Channel File application/x-netcdf 1470|name match *.cer Internet Security Certificate application/x-x509-ca-cert 1471|name match *.cfg CFG File application/x-ms-cfg_auto_file 1472|name match *.chm Compiled HTML Help file application/x-ms-help 1473|name match *.cil Clip Gallery Download Package application/x-ms-clipgallerydownloadpackage 1474|name match *.class Java class file application/x-java 1475|name match *.clp Clipboard Clip application/x-ms-clpfile 1476|name match *.cmd Windows Command Script application/x-ms-cmdfile 1477|name match *.com MS-DOS Application application/x-ms-comfile 1478|name match *.cpl Control Panel extension application/x-ms-cplfile 1479|name match *.cpp C++ Source File application/x-c++ 1480|name match *.crt Internet Security Certificate application/x-x509-ca-cert 1481|name match *.css HyperText Style Sheet text/css 1482|name match *.csv Microsoft Excel Comma Separated Values File application/x-ms-excel 1483|name match *.cur Cursor application/x-ms-curfile 1484|name match *.cxx C++ Source File application/x-c++ 1485|name match *.dcx DCX Image Document application/x-ms-dcximage 1486|name match *.der Internet Security Certificate application/x-x509-ca-cert 1487|name match *.dfm C++Builder Form application/x-ms-bcbform 1488|name match *.dic Text Document application/x-ms-txtfile 1489|name match *.dif DV video/x-dv 1490|name match *.dll Windows dynamic link library application/x-ms-dll 1491|name match *.doc Microsoft Word Document application/x-ms-word 1492|name match *.dot Microsoft Word Template application/x-ms-word 1493|name match *.drv Device driver application/x-ms-drvfile 1494|name match *.dsm Developer Studio Macro File application/x-ms-dsmfile 1495|name match *.dsn Microsoft OLE DB Provider for ODBC Drivers application/x-ms-msdasql 1496|name match *.dsp Project File application/x-ms-dspfile 1497|name match *.dsw Project Workspace application/x-ms-dswfile 1498|name match *.dv DV video/x-dv 1499|name match *.ebh Ebasic Files application/x-ms-hclebasich 1500|name match *.ebx Ebrun Files application/x-ms-hclebrun 1501|name match *.exc Text Document application/x-ms-txtfile 1502|name match *.exe Application application/x-msdownload 1503|name match *.fav Outlook Bar Shortcuts application/x-ms-outlook 1504|name match *.fdf Adobe Acrobat Forms Document application/x-ms-acroexch 1505|name match *.fnd Saved Search application/x-ms-fndfile 1506|name match *.fon Font file application/x-ms-fonfile 1507|name match *.fs Ftp Files application/x-ms-hclftp 1508|name match *.fxp Microsoft Visual FoxPro compiled program application/x-ms-foxpro 1509|name match *.gfi Genigraphics GraphicsLink application/x-ms-graphicslink 1510|name match *.gfx Genigraphics GraphicsLink application/x-ms-graphicslink 1511|name match *.gif GIF Image image/gif 1512|name match *.gim Genigraphics GraphicsLink application/x-ms-graphicslink 1513|name match *.gix Genigraphics GraphicsLink application/x-ms-graphicslink 1514|name match *.gna Genigraphics GraphicsLink application/x-ms-graphicslink 1515|name match *.gnx Genigraphics GraphicsLink application/x-ms-graphicslink 1516|name match *.gra Microsoft Graph 97 Chart application/x-ms-msgraph 1517|name match *.grp Microsoft Program Group application/x-ms-msprogramgroup 1518|name match *.gst MSMap.Datainst.8 application/x-ms-msmap 1519|name match *.gwx Genigraphics GraphicsLink application/x-ms-graphicslink 1520|name match *.gwz Genigraphics GraphicsLink application/x-ms-graphicslink 1521|name match *.gz WinZip File application/gzip 1522|name match *.hep HostExplorer Session Profile application/x-ms-hostexplorer 1523|name match *.hlp Help File application/x-ms-help 1524|name match *.hpp C++ Header File application/x-c++ 1525|name match *.hqx WinZip File application/mac-binhex40 1526|name match *.hs3 HostExplorer Hotspot Definition application/x-ms-hostexplorer 1527|name match *.hs5 HostExplorer Hotspot Definition application/x-ms-hostexplorer 1528|name match *.hsv HostExplorer Hotspot Definition application/x-ms-hostexplorer 1529|name match *.ht HyperTerminal File application/x-ms-htfile 1530|name match *.hta HTML program application/x-ms 1531|name match *.htm html source text/html 1532|name match *.hts Hummingbird Telnet Program v6.0.0.0 application/x-ms-hummingbird 1533|name match *.htt HyperText Template text/webviewhtml 1534|name match *.htw HTML Document application/x-ms-htmlfile 1535|name match *.htx HTML Document text/html 1536|name match *.hxx C++ Header File application/x-c++ 1537|name match *.ico Icon application/x-ms-icon 1538|name match *.idb Intermediate File application/x-ms-mdpxfile 1539|name match *.ilk Intermediate File application/x-ms-mdpxfile 1540|name match *.inf Setup Information application/x-ms-setup 1541|name match *.ini Configuration Settings application/x-ms-config 1542|name match *.ins Internet Communication Settings application/x-internet-signup 1543|name match *.iqy Microsoft Excel Web Query File application/x-ms-iqyfile 1544|name match *.isp Internet Communication Settings application/x-internet-signup 1545|name match *.its Internet Document Set application/x-ms-its 1546|name match *.ivt InfoViewer Title application/x-ms-ivt 1547|name match *.jfif JPEG Image image/jpeg 1548|name match *.job Scheduler Job Object application/x-ms-jobobject 1549|name match *.jod Microsoft.Jet.OLEDB.3.51 application/x-ms-microsoft 1550|name match *.jpe JPEG Image image/jpeg 1551|name match *.jpeg JPEG Image image/jpeg 1552|name match *.jpg JPEG Image image/jpeg 1553|name match *.js JavaScript file application/x-java 1554|name match *.jse JavaScript Encoded Script file application/x-ms 1555|name match *.jsp JavaScript Page application/x-ms 1556|name match *.km3 HostExplorer KeyMap Definition application/x-ms-hostexplorer 1557|name match *.km5 HostExplorer KeyMap Definition application/x-ms-hostexplorer 1558|name match *.kmv HostExplorer KeyMap Definition application/x-ms-hostexplorer 1559|name match *.lam LAMDocument application/x-ms-lamdocument 1560|name match *.ldb Microsoft Access Record-Locking Information application/x-ms-access 1561|name match *.lnk Shortcut application/x-ms 1562|name match *.log Text Document application/x-text 1563|name match *.lzh WinZip File application/x-ms-winzip 1564|name match *.m1v Movie Clip video/mpeg 1565|name match *.mac MacPaint Image image/x-macpaint 1566|name match *.mad Microsoft Access Module Shortcut application/x-ms-access 1567|name match *.maf Microsoft Access Form Shortcut application/x-ms-access 1568|name match *.mam Microsoft Access Macro Shortcut application/x-ms-access 1569|name match *.maq Microsoft Access Query Shortcut application/x-ms-access 1570|name match *.mar Microsoft Access Report Shortcut application/x-ms-access 1571|name match *.mat Microsoft Access Table Shortcut application/x-ms-access 1572|name match *.mda Microsoft Access Add-in application/x-ms-access 1573|name match *.mdb Microsoft Access Database application/x-ms-access 1574|name match *.mdb Microsoft Access program application/x-ms 1575|name match *.mde Microsoft Access MDE Database application/x-ms-access 1576|name match *.mdn Microsoft Access Blank Database Template application/x-ms-access 1577|name match *.mdp Project Workspace application/x-ms-mdpfile 1578|name match *.mdt Microsoft Access Add-in Data application/x-ms-access 1579|name match *.mdw Microsoft Access Workgroup Information application/x-ms-access 1580|name match *.mdz Microsoft Access Database Wizard Template application/x-ms-access 1581|name match *.mht Microsoft MHTML Document 4.0 message/rfc822 1582|name match *.mhtml Microsoft MHTML Document 4.0 message/rfc822 1583|name match *.mid MIDI Sequence audio/mid 1584|name match *.mmm Media Clip application/x-ms-mplayer 1585|name match *.mov QuickTime Movie video/quicktime 1586|name match *.mp2 Movie Clip video/mpeg 1587|name match *.mpa Movie Clip video/mpeg 1588|name match *.mpe Movie Clip video/mpeg 1589|name match *.mpeg Movie Clip video/mpeg 1590|name match *.mpg Movie Clip video/mpeg 1591|name match *.msc Microsoft Common Console Document application/x-ms-mmc 1592|name match *.msg Outlook Item application/x-ms-msgfile 1593|name match *.msi Microsoft Windows Installer package application/x-ms 1594|name match *.msp Windows Installer patch application/x-ms 1595|name match *.mst Visual Test source files application/x-ms 1596|name match *.nsc Netscape Conference Call File application/x-conference 1597|name match *.obd Microsoft Office Binder application/x-ms-office 1598|name match *.obt Microsoft Office Binder Template application/x-ms-office 1599|name match *.obz Microsoft Office Binder Wizard application/x-ms-office 1600|name match *.odl Object Definition Language File application/x-ms-odlfile 1601|name match *.ofn Other Office Documents... application/x-ms-office 1602|name match *.oft Outlook Item Template application/x-ms-outlook 1603|name match *.ops Microsoft Office profile settings file application/x-ms 1604|name match *.opx MS Organization Chart 2.0 application/x-ms-orgpluswopx 1605|name match *.oss Office Search application/x-ms-ossfile 1606|name match *.pcd Photo CD Image application/x-ms-pcdfile 1607|name match *.pch Intermediate File application/x-ms-mdpxfile 1608|name match *.pct PICT Image image/pict 1609|name match *.pcx PCX Image application/x-ms-pcxfile 1610|name match *.pdb Intermediate File application/x-ms-mdpxfile 1611|name match *.pdf Adobe Acrobat Document application/pdf 1612|name match *.pfm Type 1 Font file application/x-ms-pfmfile 1613|name match *.php Perl CGI Script File application/x-perl 1614|name match *.pic PICT Image image/pict 1615|name match *.pict PICT Image image/pict 1616|name match *.pif Shortcut to MS-DOS Program application/x-ms-piffile 1617|name match *.pif Shortcut to MS-DOS program application/x-ms 1618|name match *.pkg Microsoft Developer Extension application/x-ms-pkgfile 1619|name match *.pma Performance Monitor File application/x-ms-perffile 1620|name match *.pmc Performance Monitor File application/x-ms-perffile 1621|name match *.pml Performance Monitor File application/x-ms-perffile 1622|name match *.pmr Performance Monitor File application/x-ms-perffile 1623|name match *.pmw Performance Monitor File application/x-ms-perffile 1624|name match *.pnf Precompiled Setup Information application/x-ms-pnffile 1625|name match *.png PNG Image application/x-ms-pngfile 1626|name match *.pntg MacPaint Image image/x-macpaint 1627|name match *.pop HostExplorer Poppad Definition application/x-ms-hostexplorer 1628|name match *.pot Microsoft PowerPoint Template application/vnd.ms-powerpoint 1629|name match *.ppa Microsoft PowerPoint Addin application/vnd.ms-powerpoint 1630|name match *.pps Microsoft PowerPoint SlideShow application/vnd.ms-powerpoint 1631|name match *.ppt Microsoft PowerPoint Presentation application/vnd.ms-powerpoint 1632|name match *.prf System file application/x-ms 1633|name match *.prg Program source file application/x-ms 1634|name match *.psd Photoshop Image image/x-photoshop 1635|name match *.pwz Microsoft PowerPoint Wizard application/vnd.ms-powerpoint 1636|name match *.qif QuickTime Image image/x-quicktime 1637|name match *.qk3 HostExplorer QuickKeys application/x-ms-hostexplorer 1638|name match *.qk5 HostExplorer QuickKeys application/x-ms-hostexplorer 1639|name match *.qkv HostExplorer QuickKeys application/x-ms-hostexplorer 1640|name match *.qt QuickTime Movie video/quicktime 1641|name match *.qti QuickTime Image image/x-quicktime 1642|name match *.qtif QuickTime Image image/x-quicktime 1643|name match *.qtp QuickTime Preferences application/x-ms-quicktimepreferences 1644|name match *.qts QuickTime application/x-ms-quicktimesystem 1645|name match *.qtx QuickTime Extension application/x-ms-quicktimeextension 1646|name match *.que Scheduler Queue Object application/x-ms-queueobject 1647|name match *.rc Resource Template application/x-ms-rcfile 1648|name match *.rct Resource Template application/x-ms-rcfile 1649|name match *.reg Registration Entries application/x-ms-regfile 1650|name match *.res Intermediate File application/x-ms-mdpxfile 1651|name match *.rmi MIDI Sequence audio/mid 1652|name match *.rnk Dial-Up Shortcut application/x-ms-rnkfile 1653|name match *.rtf Rich Text Format application/x-ms-word 1654|name match *.rx XRX Files application/x-ms-hclbroadway 1655|name match *.sbr Intermediate File application/x-ms-mdpxfile 1656|name match *.sc2 Microsoft Schedule+ 7.0 Application application/x-ms-scheduleplus 1657|name match *.scd Microsoft Schedule+ 7.0 Application application/x-ms-scheduleplus 1658|name match *.scf Windows Explorer Command application/x-ms-explorer 1659|name match *.sch Microsoft Schedule+ 7.0 Application application/x-ms-scheduleplus 1660|name match *.scp Text Document application/x-ms-txtfile 1661|name match *.scr Screen Saver application/x-ms-scrfile 1662|name match *.sct Windows Script Component application/x-ms 1663|name match *.sd2 Sound Designer 2 audio/x-sd2 1664|name match *.ses Xsession Files application/x-ms-hclxsession 1665|name match *.shb Shortcut into a document application/x-ms-docshortcut 1666|name match *.shs Scrap object application/x-ms-shellscrap 1667|name match *.shtml Netscape Hypertext Document application/x-ms-netscapemarkup 1668|name match *.slk Microsoft Excel SLK Data Import Format application/x-ms-excel 1669|name match *.snd Sound Clip audio/basic 1670|name match *.stm HTML Document text/html 1671|name match *.sys System file application/x-ms-sysfile 1672|name match *.taz WinZip File application/x-ms-winzip 1673|name match *.tga TGA Image application/x-ms-tgafile 1674|name match *.tif TIF Image Document image/tiff 1675|name match *.tlb Type Library application/x-ms-tlbfile 1676|name match *.ttf TrueType Font file application/x-ms-ttffile 1677|name match *.txt Text Document text/plain 1678|name match *.tz WinZip File application/x-ms-winzip 1679|name match *.udl Microsoft Data Link application/x-ms-msdasc 1680|name match *.url Internet Shortcut application/x-ms-internetshortcut 1681|name match *.uue WinZip File application/x-ms-winzip 1682|name match *.vb Microsoft Visual Basic Scripting Edition (VBScript) file application/x-ms 1683|name match *.vbe VBScript Encoded Script file application/x-ms 1684|name match *.vbs VBScript file application/x-ms 1685|name match *.vir Virus Infected File application/x-ms-virus 1686|name match *.wav Wave Sound audio/x-wav 1687|name match *.wbk Microsoft Word Backup Document application/x-ms-word 1688|name match *.wiz Microsoft Word Wizard application/x-ms-word 1689|name match *.wll Microsoft Word Addin application/x-ms-word 1690|name match *.wpd corel wordperfect document application/x-wordperfect 1691|name match *.wri Write Document application/x-ms-wrifile 1692|name match *.wrl SGI.CosmoPlayer.1 application/x-ms-sgi 1693|name match *.wrz SGI.CosmoPlayer.1 application/x-ms-sgi 1694|name match *.ws Wstart Files application/x-ms-hclwstart 1695|name match *.wsc Windows Script Component application/x-ms 1696|name match *.wsf Windows Script file application/x-ms 1697|name match *.wsh Windows Script Host Settings file application/x-ms 1698|name match *.wtx Text Document application/x-ms-txtfile 1699|name match *.xbm Netscape Hypertext Document image/x-xbitmap 1700|name match *.xif XIF Image Document application/x-ms-xifimage 1701|name match *.xla Microsoft Excel Add-In application/x-ms-excel 1702|name match *.xlb Microsoft Excel Worksheet application/x-ms-excel 1703|name match *.xlc Microsoft Excel Chart application/x-ms-excel 1704|name match *.xld Microsoft Excel 5.0 DialogSheet application/x-ms-excel 1705|name match *.xlk Microsoft Excel Backup File application/x-ms-excel 1706|name match *.xll Microsoft Excel XLL Add-In application/x-ms-excel 1707|name match *.xlm Microsoft Excel 4.0 Macro application/x-ms-excel 1708|name match *.xls Microsoft Excel Worksheet application/vnd.ms-excel 1709|name match *.xlt Microsoft Excel Template application/x-ms-excel 1710|name match *.xlv Microsoft Excel VBA Module application/x-ms-excel 1711|name match *.xlw Microsoft Excel Workspace application/x-ms-excel 1712|name match *.xnk Microsoft Exchange Shortcut application/x-ms-exchange 1713|name match *.xs Microsoft Exchange start Files application/x-ms-exchange 1714|name match *.xxe WinZip File application/x-ms-winzip 1715|name match *.zip WinZip File application/x-zip-compressed 1716