Lines Matching refs:file
1 # Magic data for file(1) command.
4 # Don't edit this file, edit /etc/magic or send your magic improvements
5 # to the maintainers, at file@astron.com
8 # Localstuff: file(1) magic for locally observed files
16 # acorn: file(1) magic for files found on Acorn systems
21 # We guess the file type from the type of the first chunk.
31 0 string Draw RISC OS Draw file data
44 0 string Maestro\r RISC OS music file
118 # adi: file(1) magic for ADi's objects
131 # adventure: file(1) magic for Adventure game files
146 # Z-machine: file(1) magic for Z-machine binaries.
155 # well as an occasional MP3 file), so we sanity-check the version number.
176 # Glulx: file(1) magic for Glulx binaries.
208 # 2-byte length N, the N-char name of the game file *without* a NUL (darn!),
243 >4 belong 0x6A87C2CF Adrift game file version
253 # algol68: file(1) magic for Algol 68 source
272 # allegro: file(1) magic for Allegro datafiles
281 # alliant: file(1) magic for Alliant FX series a.out files
299 # amanda: file(1) magic for amanda file format
302 >8 string TAPESTART\ DATE tape header file,
306 >8 string FILE\ dump file,
311 # amigaos: file(1) magic for AmigaOS binary formats:
335 0 string FC14 Future Composer 1.4 Module sound file
336 0 string SMOD Future Composer 1.3 Module sound file
337 0 string AON4artofnoise Art Of Noise Module sound file
338 1 string MUGICIAN/SOFTEYES Mugician Module sound file
339 58 string SIDMON\ II\ -\ THE Sidmon 2.0 Module sound file
340 0 string Synth4.0 Synthesis Module sound file
341 0 string ARP. The Holy Noise Module sound file
342 0 string BeEp\0 JamCracker Module sound file
343 0 string COSO\0 Hippel-COSO Module sound file
345 #26 string V.3 Brian Postma's Soundmon Module sound file v3
346 #26 string BPSM Brian Postma's Soundmon Module sound file v3
347 #26 string V.2 Brian Postma's Soundmon Module sound file v2
356 0 string/c @database AmigaGuide file
377 # AMOS Basic file formats
406 >0 regex dex\n[0-9]{2}\0 Dalvik dex file
409 >0 regex dey\n[0-9]{2}\0 Dalvik dex file (optimized for host)
436 # After the header comes a tar file
437 # If compressed, the entire tar file is compressed with JAVA deflate
463 >>>31 use tar-file
470 # (but they are part of the header - the tar file comes after them):
578 # animation: file(1) magic for animation/movie formats
585 0 string MOVI Silicon Graphics movie file
674 !:mime video/vnd.dvb.file
676 !:mime video/vnd.dvb.file
1434 # DIF digital video file format <mpruett@sgi.com>
1436 >4 byte &0x01 (DVCPRO) movie file
1437 >4 byte ^0x01 (DV) movie file
1465 0 string/w #VRML\ V1.0\ ascii VRML 1 file
1467 0 string/w #VRML\ V2.0\ utf8 ISO/IEC 14772 VRML 97 file
1520 # MPEG file
1522 # FIXME: This section is from the old magic.mime file and needs
1652 # aout: file(1) magic for a.out executable/object/etc entries that
1698 # apache: file(1) magic for Apache Big Data formats
1705 # Important information is in file footer, which we can't index to :(
1712 0 string RCF Apache Hive RC file
1715 # Sequence files (and the careless first version of RC file)
1718 >3 byte <6 Apache Hadoop Sequence file version %d
1719 >3 byte >6 Apache Hadoop Sequence file version %d
1721 >>5 string org.apache.hadoop.hive.ql.io.RCFile$KeyBuffer Apache Hive RC file version 0
1722 >>3 default x Apache Hadoop Sequence file version 6
1726 # apl: file(1) magic for APL (see also "pdp" and "vax" for other APL
1733 # apple: file(1) magic for Apple file formats
1740 0 belong 0x00051600 AppleSingle encoded Macintosh file
1741 0 belong 0x00051607 AppleDouble encoded Macintosh file
1865 # and especially Apple ProDOS have strong typing in the file system and
1997 # The intended meaning of these tests is, that the file is only of the
2057 0 string caff CoreAudio Format audio file
2067 # Code Signing related file types
2165 # for apple partition map stored as a single file
2171 # file: could not find any valid magic files!
2209 # no extension, or a filename corresponding to another file, with
2257 # application: file(1) magic for applications on small devices
2264 # applix: file(1) magic for Applixware
2277 # apt: file(1) magic for APT Cache files
2328 # archive: file(1) magic for archive formats (see also "msdos" for self-
2353 >>>>>>>>0 use tar-file
2356 0 name tar-file
2406 >>156 ubyte 0 \b, file
2407 >>156 ubyte 0x30 \b, file
2484 # byte order as the machine running "file" with "cpio archive", and
2486 # from the machine running "file" with "byte-swapped cpio archive".
2560 # udeb is used for stripped down deb file
2576 # the above line only works if FILE_BYTES_MAX in ../../src/file.h is raised
2633 # "archive file" entry moved from ./hp
2655 # the first file (0x01 through 0x09), and bytes 3 to 15 are the MS-DOS
2656 # filename of the first file (null terminated). Since some types collide
2794 # file: line 284: Bad magic entry ' ??_'
2804 # 4 bytes: decompressed length of file
2809 # 1-9 bytes: null-terminated file name
2810 # 1-4 bytes: null-terminated file extension
2974 # so TODO: get real 4dos batcomp file and find sig
3042 # WWPack data file
3083 # TODO: missing due to unknown magic/magic at end of file:
3143 # This is a really bad format. A file containing HAWAII will match this...
3145 #>2 leshort =1 1 file,
3154 >2 leshort =1 1 file,
3178 # check and display information of lharc (LHa,PMarc) file
3179 0 name lharc-file
3220 # lha archives with standard file name extensions ".lha" ".lzh"
3237 # compressed data size != compressed file size
3266 >0 use lharc-file
3270 >0 use lharc-file
3273 >0 use lharc-file
3275 >0 use lharc-file
3277 >0 use lharc-file
3279 >0 use lharc-file
3281 >0 use lharc-file
3283 >0 use lharc-file
3287 >0 use lharc-file
3292 >0 use lharc-file
3295 >0 use lharc-file
3298 >0 use lharc-file
3301 >0 use lharc-file
3304 >0 use lharc-file
3307 >0 use lharc-file
3312 >0 use lharc-file
3315 >0 use lharc-file
3317 >0 use lharc-file
3319 >0 use lharc-file
3321 >0 use lharc-file
3323 >0 use lharc-file
3325 >0 use lharc-file
3327 >0 use lharc-file
3335 0 name rar-file-header
3362 # file header
3364 >>(0xc.l+7) use rar-file-header
3365 # subblock seems to share information with file header
3367 >>(0xc.l+7) use rar-file-header
3402 # (stored uncompressed, with no 'extra field') containing the file's MIME type.
3439 >>>62 string base Database file
3497 # In a ZIP file, the bytes immediately after a member's contents are
3570 >0 use lharc-file
3573 >0 use lharc-file
3576 >0 use lharc-file
3587 # file which is recognized by the following entry:
3592 #0 string MSCF\0\0\0\0 Microsoft cabinet file data,
3607 # Parity archive reconstruction file, the 'par' file format now used on Usenet.
3609 >48 leshort =0 - Index file
3610 >48 leshort >0 - file number %d
3612 # Felix von Leitner <felix-file@fefe.de>
3613 0 string d8:announce BitTorrent file
3616 0 string d13:announce-list BitTorrent file
3686 # URL: https://help.foxitsoftware.com/kb/install-fzip-file.php
3707 8 lelong 0x10000419 Symbian installation file
3711 0 lelong 0x10201A7A Symbian installation file (Symbian OS 9.x)
3719 0 string KGB_arch KGB Archiver file
3796 # archive must be an uncompressed file called 'mimetype' with contents
3806 0 string 7kSt ZPAQ file
3823 >2 ubyte&0x08 0x00 \b, first file
3825 >2 ubyte&0x08 0x08 \b, split file
3912 >>5 ulelong x \b, %u file
3920 # make: file(1) magic for assembler source
3932 0 regex \^[\040\t]{0,50}\\.file assembler source text
3939 # asterix: file(1) magic for Aster*x; SunOS 5.5.1 gave the 4-character
3957 # att3b: file(1) magic for AT&T 3B machines
3992 # core file for 3b2
3993 0 string \000\004\036\212\200 3b2 core file
3998 # audio: file(1) magic for sound formats (see also "iff")
4113 0 belong 0x2e7261fd RealAudio sound file
4115 0 string .RMF\0\0\0 RealMedia file
4126 #0 string MTM MultiTracker Module sound file
4225 0 string TOC TOC sound file
4229 0 string SIDPLAY\ INFOFILE Sidplay info file
4251 0 belong 0x64a30100 IRCAM file (VAX little-endian)
4252 0 belong 0x0001a364 IRCAM file (VAX big-endian)
4253 0 belong 0x64a30200 IRCAM file (Sun big-endian)
4254 0 belong 0x0002a364 IRCAM file (Sun little-endian)
4255 0 belong 0x64a30300 IRCAM file (MIPS little-endian)
4256 0 belong 0x0003a364 IRCAM file (MIPS big-endian)
4257 0 belong 0x64a30400 IRCAM file (NeXT big-endian)
4258 0 belong 0x64a30400 IRCAM file (NeXT big-endian)
4259 0 belong 0x0004a364 IRCAM file (NeXT little-endian)
4262 0 string NIST_1A\n\ \ \ 1024\n NIST SPHERE file
4265 0 string SOUND\ SAMPLE\ DATA\ Sample Vision file
4268 0 string 2BIT Audio Visual Research file,
4288 0 string _SGI_SoundTrack SGI SoundTrack project file
4290 0 string ID3 Audio file with ID3 version 2
4299 # NSF (NES sound file) magic
4310 # NSFE (Extended NES sound file) magic
4327 0 string SNES-SPC700\ Sound\ File\ Data\ v SNES SPC700 sound file
4358 # Yamaha TX Wave: file(1) magic for Yamaha TX Wave audio files
4367 # scream tracker: file(1) magic for Scream Tracker sample files
4383 0 string MMD0 MED music file, version 0
4384 0 string MMD1 OctaMED Pro music file, version 1
4385 0 string MMD3 OctaMED Soundstudio music file, version 3
4386 0 string OctaMEDCmpr OctaMED Soundstudio compressed file
4388 0 string SymM Symphonie SymMOD music file
4441 # NOA Nancy Codec file
4442 0 string \210NOA\015\012\032 NOA Nancy Codec Movie file
4444 0 string MMMD Yamaha SMAF file
4495 # (ISDN) VBOX voice message file (Wolfram Kleff)
4500 8 string RB40 RBS Song file
4504 # Synthesizer Generator and Kimwitu share their file format
4584 384 string LockStream LockStream Embedded file (mostly MP3 on old Nokia phones)
4587 # some infos on the header file available at :
4597 0 string Winamp\ EQ\ library\ file %s
4608 1 string [licq] LICQ configuration file
4612 0 string SC68\ Music-file\ /\ (c)\ (BeN)jami sc68 Atari ST music
4660 # guitar pro v3,4,5 from http://filext.com/file-extension/gp3
4664 60 string SONG SoundFX Module sound file
4675 0 string SCgf SuperCollider3 Synth Definition file,
4689 # VGM music file
4789 # GVOX Encore file format
4790 # Since this is a proprietary file format and there is no publicly available
5005 0 string SAP\r\n Atari 8-bit SAP audio file
5034 0 string RSTM Nintendo Wii BRSTM audio file
5062 0 string CSTM Nintendo 3DS BCSTM audio file
5075 0 string FSTM Nintendo Wii U BFSTM audio file
5100 0 string CWAV Nintendo 3DS BCWAV audio file
5111 # basis: file(1) magic for BBx/Pro5-files
5116 >7 string \000 indexed file
5117 >7 string \001 serial file
5118 >7 string \002 keyed file
5123 >7 string \006 mkeyed file
5128 # beetle: file(1) magic for Beetle VM object files
5132 0 string BEETLE\000 Beetle VM object file
5136 # ber: file(1) magic for several BER formats used in the mobile
5139 # The file formats are standardized by the GSMA (GSM association).
5145 # The magic file covers:
5201 # bFLT: file(1) magic for BFLT uclinux binary files
5225 # bioinfomatics: file(1) magic for Bioinfomatics file formats
5240 # Tabix index file
5262 # data is normally present only within compressed BGZF blocks (CDATA), so use file -z to examine it
5291 # data is normally present only within compressed BGZF blocks (CDATA), so use file -z to examine it
5308 # data is normally present only within compressed BGZF blocks (CDATA), so use file -z to examine it
5321 # data is normally present only within compressed BGZF blocks (CDATA), so use file -z to examine it
5403 # Magic ids for biomedical signal file formats
5424 0 string ADU1 Biosig/Axona file format
5426 0 string ADU2 Biosig/Axona file format
5444 0 string Brain\x20Vision\x20Data\x20Exchange\x20Header\x20File Biosig/Brainvision data file
5445 …tring Brain\x20Vision\x20V-Amp\x20Data\x20Header\x20File\x20Version Biosig/Brainvision V-Amp file
5446 …g Brain\x20Vision\x20Data\x20Exchange\x20Marker\x20File,\x20Version Biosig/Brainvision Marker file
5486 0 string IGOR Biosig/IgorPro ITX file
5557 # blackberry: file(1) magic for BlackBerry file formats
5560 >8 belong 010010010 BlackBerry RIM ETP file
5570 # Uncomment the following only of your "file" program supports "search"
5582 # Uncomment the following only of your "file" program supports "search"
5590 # blender: file(1) magic for Blender 3D related files
5629 # blit: file(1) magic for 68K Blit stuff as seen from 680x0 machine
5660 # bsdi: file(1) magic for BSD/OS (from BSDI) objects
5702 # BTSnoop: file(1) magic for BTSnoop files
5715 # c64: file(1) magic for various commodore 64 related files
5732 0 string C64File PC64 Emulator file
5756 # Raw tape file format (.tap files)
5773 # autocad: file(1) magic for cad files
5778 # DGN is the default file extension of Microstation/Intergraph CAD files.
5908 # CAD: file(1) magic for computer aided design files
5968 # architectures; the short at offset 4 in a Java bytecode file is the JVM minor
6035 # cbor: file(1) magic for CBOR files as defined in RFC 7049
6056 # CDDB: file(1) magic for CDDB(tm) format CD text data files
6068 # chord: file(1) magic for Chord music sheet typesetting utility input files
6073 0 string {title Chord text file
6075 # Type: PowerTab file format
6083 # cisco: file(1) magic for cisco Systems routers
6085 # Most cisco file-formats are covered by the generic elf code
6102 # c-lang: file(1) magic for C and related languages programs
6200 # We skip the path here, because it is often long (so file will
6210 # clarion: file(1) magic for # Clarion Personal/Professional Developer
6216 0 leshort 0x3343 Clarion Developer (v2 and above) data file
6220 >2 leshort &0x0008 \b, memo file exists
6237 # claris: file(1) magic for claris
6259 # .msp a dictionary file I am not sure about this I have only one .msp file
6272 # .chy Hyphenation file
6285 # clipper: file(1) magic for Intergraph (formerly Fairchild) Clipper.
6304 # as SVR3.1's "file" doesn't support anything of the "!074000,000000"
6348 # file: file(1) magic for Clojure
6380 # coff: file(1) magic for Common Object Files not specific to known cpu types or manufactures
6397 # DJGPP, 80386 COFF executable, MS Windows COFF Intel 80386 object file (./intel)
6415 >>18 leshort ^0x0002 object file
6439 # f_timdat - file time & date stamp only for little endian
6461 # commands: file(1) magic for various shells and interpreters
6566 0 string/t $! DCL command file
6571 0 string #!/usr/bin/pdmenu Pdmenu configuration file text
6600 # compress: file(1) magic for pure-compression formats (no archives)
6634 # no FNAME and FCOMMENT bit implies no file name/comment. That means only binary
6673 # FNAME/FCOMMENT bit implies file name/comment as iso-8859-1 text
6734 # in the Ultrix (LE) magic file.
6745 # bzip a block-sorting file compressor
6766 0 string \037\237 frozen file 2.1
6767 0 string \037\236 frozen file 1.0 (or gzip 0.5)
6859 # http://tukaani.org/xz/xz-file-format.txt
6930 2 string -afx- AFX compressed file data
6932 # Supplementary magic data for the file(1) command to support
6936 # this file.
6954 0 lelong 0x55aa1234 Valve Pak file
6998 # ines: file(1) magic for Marat's iNES Nintendo Entertainment System ROM dump format
7050 # unif: file(1) magic for UNIF-format Nintendo Entertainment System ROM images
7062 # fds: file(1) magic for Famciom Disk System disk images
7089 # tnes: file(1) magic for TNES-format Nintendo Entertainment System ROM images
7106 # gameboy: file(1) magic for the Nintendo (Color) Gameboy raw ROM format
7177 # genesis: file(1) magic for various Sega Mega Drive / Genesis ROM image and disc formats
7236 # genesis: file(1) magic for the Super MegaDrive ROM dump format
7259 # smsgg: file(1) magic for Sega Master System and Game Gear ROM images
7326 # saturn: file(1) magic for the Sega Saturn disc image format.
7351 # dreamcast: file(1) magic for the Sega Dreamcast disc image format.
7377 # dreamcast: file(1) uncertain magic for the Sega Dreamcast VMU image format
7380 0 string LCDi Dream Animator file
7383 # z64: file(1) magic for the Z64 format N64 ROM dumps
7394 # v64: file(1) magic for the V64 format N64 ROM dumps
7401 # n64-swap2: file(1) magic for the swap2 format N64 ROM dumps
7408 # n64-le32: file(1) magic for the 32-bit byteswapped format N64 ROM dumps
7415 # gba: file(1) magic for the Nintendo Game Boy Advance raw ROM format
7428 # nds: file(1) magic for the Nintendo DS(i) raw ROM format
7452 # nds_passme: file(1) magic for Nintendo DS ROM images for GBA cartridge boot.
7459 # ngp: file(1) magic for the Neo Geo Pocket (Color) raw ROM format.
7473 # msx: file(1) magic for MSX game cartridge dumps
7525 # Microsoft Xbox data file formats
7564 # 8 character OMF-86 object file headers.
7573 # Opera file system that is used on the 3DO console
7575 0 string \x01ZZZZZ\x01 3DO "Opera" file system
7593 0 string PATCH IPS patch file
7611 >>56 lelong >0 \b, size of file to patch %d
7619 # SNES9x .smv "movie" file format.
7678 # Nintendo GameCube / Wii file formats.
7795 # Nintendo 3DS file formats.
7883 # Type: Nintendo 3DS "SMDH" file. (application description)
7886 0 string SMDH Nintendo 3DS SMDH file
7903 # a7800: file(1) magic for the Atari 7800 raw ROM format.
7918 # vectrex: file(1) magic for the GCE Vectrex raw ROM format.
7930 # amiibo: file(1) magic for Nintendo amiibo NFC dumps.
7945 # convex: file(1) magic for Convex boxes
7961 0 belong 0x011257 Core file
7965 # the original dump format on a 4.1 BSD or earlier file system. The
7966 # second marks the change between the 4.1 file system and the 4.2 file
7968 # to 2K to be compatible with an IDC file system. The fourth indicates
8014 # xoverage: file(1) magic for test coverage data
8032 # .gcno file are created during compile time,
8105 # cracklib: file (1) magic for cracklib v2.7
8119 # ctags: file (1) magic for Exuberant Ctags files
8121 0 search/1 =!_TAG Exuberant Ctags tag file text
8124 # ctf: file(1) magic for CTF (Common Trace Format) trace files
8148 # file(1) magic(5) data for cubemaps Martin Erik Werner <martinerikwerner@gmail.com>
8150 0 string ACMP Map file for the AssaultCube FPS game
8151 0 string CUBE Map file for cube and cube2 engine games
8152 0 string MAPZ) Map file for the Blood Frontier/Red Eclipse FPS games
8156 # Cups: file(1) magic for the cups raster file format
8212 # dact: file(1) magic for DACT compressed files
8223 # database: file(1) magic for various databases
8248 # Ian Darwin's file /etc/magic files: big/little-endian version.
8341 # ROOT: file(1) magic for ROOT databases
8343 0 string root\0 ROOT file
8349 ## Paradox file formats
8357 #>>0x04 byte 0 indexed .DB data file
8358 #>>0x04 byte 1 primary index .PX file
8359 #>>0x04 byte 2 non-indexed .DB data file
8360 #>>0x04 byte 3 non-incrementing secondary index .Xnn file
8361 #>>0x04 byte 4 secondary index .Ynn file
8362 #>>0x04 byte 5 incrementing secondary index .Xnn file
8363 #>>0x04 byte 6 non-incrementing secondary index .XGn file
8364 #>>0x04 byte 7 secondary index .YGn file
8365 #>>>0x04 byte 8 incrementing secondary index .XGn file
8389 # for Xbase Database file (*.DBF) reserved (NULL) for multi-user
8403 # database file
8412 # file size = records * record size + header size
8419 #>>>>>>>>>>>>28 ubyte&0x01 0 \b, no index file
8420 >>>>>>>>>>>>28 ubyte&0x01 1 \b, with index file .MDX
8467 # dBASE IV no memo file
8470 # dBASE V no memo file
8495 # VISUAL OBJECTS (first 1.0 versions) for the Dbase III files (NTX clipper driver); memo file
8496 >>0 ubyte 0x87 VISUAL OBJECTS, with memo file
8515 # HiPer-Six format;Clipper SIX, with SMT memo file
8604 # Print the information of dBase III DBT memo file
8617 # Print the information of dBase IV DBT memo file
8622 # 8 character shorted main name of coresponding dBASE IV DBF file
8655 # Print the information of FoxPro FPT memo file
8671 # DBASE index file *.NDX
8672 # DBASE Compound Index file *.CDX
8729 0 string TDB\ file TDB database
8740 # ICE authority file data (Wolfram Kleff)
8743 # X11 Xauthority file (Wolfram Kleff)
8805 # Database file for Zope (done by FileStorage)
8809 # Cache file for the database of Zope (done by ClientStorage)
8857 0 string REDIS Redis RDB file,
8873 # file formats: https://cn.dataone.org/cn/v2/formats
8916 # dppf: Maxis Database Packed Files, the stored data file format used by all
8930 # der: file(1) magic for DER encoded files
9047 # diamond: file(1) magic for Diamond system
9059 # diff: file(1) magic for diff(1) output
9073 # bsdiff: file(1) magic for bsdiff(1) output
9074 0 string/b BSDIFF40 bsdiff(1) patch file
9089 # this file.
9124 # number; however, treating any file that begins with "Core" as a Digital
9125 # UNIX core dump file may produce too many false hits, so we include one
9147 0 string =!<PDF>!\n profiling data file
9226 # dump: file(1) magic for dump file format--for new and old dump filesystems
9237 >0 belong 2 beginning of file record,
9239 >0 belong 4 continuation of file record,
9256 >0 belong 2 beginning of file record,
9258 >0 belong 4 continuation of file record,
9275 >0 belong 2 beginning of file record,
9277 >0 belong 4 continuation of file record,
9287 24 belong 60012 new-fs dump file (big endian),
9290 24 belong 60011 old-fs dump file (big endian),
9293 24 lelong 60012 new-fs dump file (little endian),
9298 24 lelong 60011 old-fs dump file (little endian),
9302 24 belong 0x19540119 new-fs dump file (ufs2, big endian),
9305 24 lelong 0x19540119 new-fs dump file (ufs2, little endian),
9308 18 leshort 60011 old-fs dump file (16-bit, assuming PDP-11 endianness),
9313 >0 leshort 2 beginning of file record.
9315 >0 leshort 4 continuation of file record.
9322 # Dyadic: file(1) magic for Dyalog APL.
9339 >>>1 byte 0x01 component file 32-bit non-journaled non-checksummed
9340 #>>>1 byte 0x01 component file
9354 >>>1 byte 0x08 mapped file 32-bit
9355 >>>1 byte 0x09 component file 64-bit non-journaled non-checksummed
9356 >>>1 byte 0x0a mapped file 64-bit
9357 >>>1 byte 0x0b component file 32-bit level 1 journaled non-checksummed
9358 >>>1 byte 0x0c component file 64-bit level 1 journaled non-checksummed
9359 >>>1 byte 0x0d component file 32-bit level 1 journaled checksummed
9360 >>>1 byte 0x0e component file 64-bit level 1 journaled checksummed
9361 >>>1 byte 0x0f component file 32-bit level 2 journaled checksummed
9362 >>>1 byte 0x10 component file 64-bit level 2 journaled checksummed
9363 >>>1 byte 0x11 component file 32-bit level 3 journaled checksummed
9364 >>>1 byte 0x12 component file 64-bit level 3 journaled checksummed
9365 >>>1 byte 0x13 component file 32-bit non-journaled checksummed
9366 >>>1 byte 0x14 component file 64-bit non-journaled checksummed
9367 >>>1 byte 0x15 component file under construction
9368 >>>1 byte 0x16 DFS component file 64-bit level 1 journaled checksummed
9369 >>>1 byte 0x17 DFS component file 64-bit level 2 journaled checksummed
9370 >>>1 byte 0x18 DFS component file 64-bit level 3 journaled checksummed
9383 # ebml: file(1) magic for various Extensible Binary Meta Language
9385 0 belong 0x1a45dfa3 EBML file
9391 # edid: file(1) magic for EDID dump files
9410 # Vi IMproved Encrypted file
9412 0 string VimCrypt~ Vim encrypted file data
9417 #>>>2 string x %s swap file
9421 >>>108 string >\0 \b, file %s
9424 # Vi IMproved Swap file
9426 0 string b0VIM\ Vim swap file
9431 # Lock/swap file for several editors, at least
9433 0 string b0nano Nano swap file
9437 0 string \x00\x00\x00\x12Kate\ Swap\ File\ 2.0\x00 Kate swap file
9441 # efi: file(1) magic for Universal EFI binaries
9456 # elf: file(1) magic for ELF executables
9499 >16 leshort 0 no file type,
9508 >16 leshort 4 core file,
9514 # Core file detection is not reliable.
9789 # encore: file(1) magic for Encore machines
9811 # EPOC : file(1) magic for EPOC documents [Psion Series 5/Osaris/Geofox 1]
9813 # Useful information for improving this file can be found at:
9817 >4 lelong 0x10000039 font file
9822 >4 lelong 0x1000006A application information file
9827 >>8 lelong 0x1000007F Word file
9832 >>8 lelong 0x10000088 Sheet file
9834 >>8 lelong 0x100001C4 EasyFax initialisation file
9847 >>8 lelong 0x10000084 Agenda file
9849 >>8 lelong 0x10000086 Data file
9851 >>8 lelong 0x10000CEA Jotter file
9853 >4 lelong 0x100000E4 ini file
9864 >4 lelong 0x100000E5 file transfer protocol
9865 >4 lelong 0x100000E5 file transfer protocol
9873 # erlang: file(1) magic for Erlang JAM and BEAM files
9877 0 string \0177BEAM! Old Erlang BEAM file
9882 >8 string BEAM Erlang BEAM file
9885 4 string Tue\ Jan\ 22\ 14:32:44\ MET\ 1991 Erlang JAM file - version 4.2
9886 79 string Tue\ Jan\ 22\ 14:32:44\ MET\ 1991 Erlang JAM file - version 4.2
9888 4 string 1.0\ Fri\ Feb\ 3\ 09:55:56\ MET\ 1995 Erlang JAM file - version 4.3
9890 0 bequad 0x0000000000ABCDEF Erlang DETS file
9979 # fcs: file(1) magic for FCS (Flow Cytometry Standard) data files
9987 # filesystems: file(1) magic for different filesystems
10196 # Joerg Jenderek: Smart Boot Manager backup file is 25 (MSDOS) or 41 (LINUX) byte header + first se…
10198 0 string SBMBAKUP_ Smart Boot Manager backup file
10227 # Symantec (Peter Norton) Image.dat file consists of variable header, bootrecord, part of FAT and r…
10232 # http://file-extension.net/seeker/file_extension_dat
10233 0 string PNCIUNDO Norton Disk Doctor UnDo file
10240 # DOS BPB information (70) and after DOS floppy (120) like in previous file version
10252 …y information (50) before DOS BPB (strength=70) and after DOS floppy (120) like in old file version
10732 >>345 string A\ kernel\ file\ is\ missing\040
10895 >>120 string Cannot\ find\ file\ \0\r
10995 # It just looks for a program file name at the root directory
10996 # and loads corresponding file with following execution.
11312 >>>>>>>0x219 string >\0 \b, configuration file %-s
11314 >>>>>>>0x215 string >\0 \b, configuration file %-s
11330 >>>>>>0x21b string >\0 \b, configuration file %-s
11332 >>>>>>0x217 string >\0 \b, configuration file %-s
11598 >&-180 lelong x average file size %d,
11618 >&-180 lelong x average file size %d,
11658 >&-180 belong x average file size %d,
11678 >&-180 belong x average file size %d,
12129 # JFFS2 file system
12251 >1017 string A RSX-11, VAX/VMS or OpenVMS VAX file system;
12253 >>525 byte 2 VAX/VMS or OpenVMS file system;
12254 >>525 byte 5 OpenVMS Alpha or Itanium file system;
12258 # https://filext.com/file-extension/DAA
12259 # describes the daa file format. The magic would be:
12295 0 string *dvdisaster* dvdisaster error correction file
12360 >52 lelong x \b inode file disk address 0x%x,
12361 >56 lelong x \b inode file inode number %u,
12385 # EFW encase image file format:
12388 0 string EVF\x09\x0d\x0a\xff\x00 EWF/Expert Witness/EnCase image file format
12421 # HDD Raw Copy Tool disk image, file extension: .imgc
12433 # fingerprint: file(1) magic for fingerprint data
12449 # flash: file(1) magic for Macromedia Flash file format
12455 # en/devnet/swf/pdf/swf-file-format-spec.pdf page 27
12511 # flif: Magic data for file(1) command.
12547 # fonts: file(1) magic for font data
12617 # GRR: line below too general as it catches also Xbase index file t3-CHAR.NDX
12685 # skip DOS 2.0 backup id file ./msdos by looking for face size lower/equal 48
12753 # file 5.30 version assumes 00FFh as maximal number of tables
12796 # GRR: pointer to name table only works if offset ~< FILE_BYTES_MAX = 100000h defined in src\file.h
12837 # GRR: instead 806 only first MAXstring = 96 characters are displayed as defined in src\file.h
12938 # frame: file(1) magic for FrameMaker files
12941 # copyright, but this file is "published" as witness the following:
12955 0 string \<MIFFile FrameMaker MIF (ASCII) file
12966 0 string \<MakerScreenFont FrameMaker Font file
12969 0 string \<MML FrameMaker MML file
12971 0 string \<BookFile FrameMaker Book file
12978 #0 string \<Book\040 FrameMaker Book (ASCII) file
12983 0 string \<Maker\040Intermediate\040Print\040File FrameMaker IPL file
12988 # freebsd: file(1) magic for FreeBSD objects
12993 # XXX - this comes from the file "freebsd" in a recent FreeBSD version of
12994 # "file"; it, and the NetBSD stuff in "netbsd", appear to use different
13025 # it's an object file.
13058 # NetBSD-style). (The old "netbsd" file analyzed FreeBSD demand paged
13109 7 string \357\020\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0 FreeBSD/i386 a.out core file
13114 0 lelong 011421044151 ld.so hints file (Little Endian
13117 0 belong 011421044151 ld.so hints file (Big Endian
13132 # fsav: file(1) magic for datafellows fsav virus definition files
13187 # file: could not find any valid magic files! (No error)
13193 >511 default x file
13223 >>>512 use tar-file
13232 0 string AVG7_ANTIVIRUS_VAULT_FILE AVG 7 Antivirus vault file data
13246 # file path of suspicious file
13249 # file path of virus file
13260 # fusecompress: file(1) magic for fusecompress
13272 # games: file(1) for games
13276 0 string IDP2 Quake II 3D Model file,
13287 >4 long 0x26 II Map file (BSP)
13288 >4 long 0x2E III Map file (BSP)
13290 0 string IDS2 Quake II SP2 sprite file
13314 # in file version 5.32 test for null terminator is only true for
13315 # offset ~< FILE_BYTES_MAX = 1 MB defined in ../../src/file.h
13323 # offset to the beginning of the file table
13325 # 1st file entry
13327 # 2nd file entry
13331 # display file table entry of Quake PAK archive
13335 # the offset from the beginning of pak to beginning of this entry file contents
13337 # the size of file for this entry
13465 0 string KenSilverman Build engine group file
13477 0 string HM3W Warcraft III map file
13532 # Summary: Gamebryo game engine file
13535 0 string Gamebryo\ File\ Format,\ Version\ Gamebryo game engine file
13538 # Summary: Gamebryo game engine file
13544 # Summary: NetImmerse game engine file
13548 >&0 string n\ NetImmerse game engine file
13573 # gcc: file(1) magic for GCC special files
13590 # gconv: file(1) magic for iconv/gconv module configuration cache
13637 # Caris LIDAR format for LADS comes as two parts... ascii location file and binary waveform data
13654 0 string Start:- GeoSwatch auf text file
13688 0 string %%\ TDR\ 2.0 IVS Fledermaus TDR file
13704 0 string DSBB Surfer 6 binary grid file
13750 # GIMP Gradient: file(1) magic for the GIMP's gradient data files (.ggr)
13760 # XCF: file(1) magic for the XCF image format used in the GIMP (.xcf) developed
13766 >9 string file version 0,
13777 # XCF: file(1) magic for the patterns used in the GIMP (.pat), developed
13785 # XCF: file(1) magic for the brushes used in the GIMP (.gbr), developed
13793 0 string #\040GIMP\040Curves\040File GIMP curve file
13801 0 belong 0x20070920 glibc locale file LC_CTYPE
13802 0 belong 0x14110320 glibc locale file LC_NUMERIC
13803 0 belong 0x17110320 glibc locale file LC_TIME
13804 0 belong 0x17100520 glibc locale file LC_COLLATE
13805 0 belong 0x11110320 glibc locale file LC_MONETARY
13806 0 belong 0x10110320 glibc locale file LC_MESSAGES
13807 0 belong 0x13110320 glibc locale file LC_ALL
13808 0 belong 0x12110320 glibc locale file LC_PAPER
13809 0 belong 0x1d110320 glibc locale file LC_NAME
13810 0 belong 0x1c110320 glibc locale file LC_ADDRESS
13811 0 belong 0x1f110320 glibc locale file LC_TELEPHONE
13812 0 belong 0x1e110320 glibc locale file LC_MEASUREMENT
13813 0 belong 0x19110320 glibc locale file LC_IDENTIFICATION
13831 >>>>&-4 ubelong >255 \b, name too long for file's pstring type
13853 # GVariant Database file
13860 0 string GVariant GVariant Database file,
13877 # gnu: file(1) magic for various GNU tools
13879 # GNU nlsutils message catalog file format
14023 # GnuPG Keybox file
14055 # gnumeric: file(1) magic for Gnumeric spreadsheet
14213 # (i.e. not called using 'use') must print *something* for file
14215 # not counted, and causes file to continue, and try and match
14303 # gpu: file(1) magic for GPU input files
14307 # Typical file extension: .spv
14317 # Vulkan Trace file
14321 # Typical file extension: .vktrace
14323 8 lequad 0xABADD068ADEAFD0C Vulkan trace file, little-endian
14326 8 bequad 0xABADD068ADEAFD0C Vulkan trace file, big-endian
14334 …0\000\0000\000\000\0000\000\000\0002\000\000\0000\000\000\0000\000\000\0003 old ACE/gr binary file
14337 0 string #\ xvgr\ parameter\ file ACE/gr ascii file
14338 0 string #\ xmgr\ parameter\ file ACE/gr ascii file
14339 0 string #\ ACE/gr\ parameter\ file ACE/gr ascii file
14341 0 string #\ Grace\ project\ file Grace project file
14347 0 string #\ ACE/gr\ fit\ description\ ACE/gr fit description file
14352 # graphviz: file(1) magic for https://www.graphviz.org/
14355 # line matches a LaTeX file containing the word "graph" (with a {
14356 # following later) and the second line matches this file.
14364 # gringotts: file(1) magic for Gringotts
14368 0 string GRG Gringotts data file
14369 #file format 1
14371 #file format 2
14389 #file format 3
14407 #file format >3
14412 # Guile file magic from <dalepsmith@gmail.com>
14437 # hitach-sh: file(1) magic for Hitachi Super-H
14467 # hp: file(1) magic for Hewlett Packard machines (see also "printer")
14485 # "/etc/magic", though, except for the "archive file relocatable library"
14649 0 long 0x015821a6 HP core file
14657 #0 short 0x8000 lif file
14757 # HP-UX 10.20 core file format from /usr/include/sys/core.h
14763 # CORE_FORMAT, which contains the version of the core file format (== 1)
14776 >>>>>>>>0xB4 belong 4 core file
14795 >>>>>>>>0xB4 belong 4 core file
14817 >>>>>>>>0xB4 belong 4 core file
14839 >>>>>>>>0xB4 belong 4 core file
14861 >>>>>>>>0xB4 belong 4 core file
14882 >>>>>>>>0xB4 belong 4 core file
14900 # human68k: file(1) magic for Human68k (X680x0 DOS) binary formats
14915 #0 beshort 0x6000 Human68k object file
14926 # ibm370: file(1) magic for IBM 370 and compatibles.
14974 # ibm6000: file(1) magic for RS/6000 and the RT PC.
14985 0 beshort 0xfe04 structured file
14990 0 belong 0x09006bea AIX backup/restore format file
14991 0 belong 0x09006fea AIX backup/restore format file
14998 >7 byte&0x03 !3 AIX core file
15007 # icc: file(1) magic for International Color Consortium file formats
15021 # Bytes 36 to 39 contain a generic profile file signature of "acsp";
15046 # XXX - is this what's used for the Sun KCMS or not? The standard file
15047 # uses just "acsp" for that, but Apple's file uses it for "ColorSync",
15062 # file.exe: could not find any valid magic files!
15221 # iff: file(1) magic for Interchange File Format (see also "audio" & "images")
15224 # Arts for file interchange. It has also been used by Apple, SGI, and
15289 >8 string IFZS \b, Z-machine or Glulx saved game file (Quetzal)
15294 # images: file(1) magic for image formats (see also "iff", and "c-lang" for
15395 # last 18 bytes of newer tga file footer signature
15508 0 string P7 Netpbm PAM image file
15528 # (CIFF) file. These are apparently all little-endian.
15833 0 string Sfff structured fax file
15920 # image file format (Robert Potter, potter@cs.rochester.edu)
15943 # SGI image file format, from Daniel Quinlan (quinlan@yggdrasil.com)
15970 2048 string PCD_IPI Kodak Photo CD image pack file
15975 0 string PCD_OPA Kodak Photo CD overview pack file
15991 0 string This\ is\ a\ BitMap\ file Lisp Machine bit-array-file
16000 # Note: "dcm" is the official file name extension
16001 # XnView mention also "dc3" and "acr" as file name extension
16006 # XWD - X Window Dump file.
16059 # SGI RICE image file <mpruett@sgi.com>
16219 # file is encountered the output should still be reasonable.
16242 # "thumbnail file" (icon)
16244 0 string P7\ 332 XV "thumbnail file" (icon) data
16260 0 string C\253\221g\230\0\0\0 Webshots Desktop .wbz file
16264 0 string CKD_P370 Hercules CKD DASD image file
16269 0 string CKD_C370 Hercules compressed CKD DASD image file
16274 0 string CKD_S370 Hercules CKD DASD shadow file
16283 # partimage: file(1) magic for PartImage files (experimental, incomplete)
16286 >0x0020 string 0.6.1 file version %s
16298 >0x0020 string >0.6.1 file version %s
16299 >0x0020 string <0.6.1 file version %s
16325 >>>4 leshort =1 1 image in file
16326 >>>4 leshort >1 %d images in file
16437 0 string XARA\243\243 Xara graphics file
16457 0 string \xce\xda\xde\xfa Cytovision Metaphases file
16458 0 string \xed\xad\xef\xac Cytovision Karyotype file
16459 0 string \x0b\x00\x03\x00 Cytovision FISH Probe file
16460 0 string \xed\xfe\xda\xbe Cytovision FLEX file
16461 0 string \xed\xab\xed\xfe Cytovision FLEX file
16462 0 string \xad\xfd\xea\xad Cytovision RATS file
16504 0 string GARMIN\ BITMAP\ 01 Garmin Bitmap file
16509 # FileLocator Pro search criteria file (https://www.mythicsoft.com/filelocatorpro)
16572 # Paint.NET file
16647 # file size
16890 # Typical file extensions: .lfp .lfr .lfx
17092 # reMarkable tablet internal file format (https://www.remarkable.com/)
17095 # reMarkable-lines-file-format.html#what-to-do-next
17108 >>18 string file,
17256 # inform: file(1) magic for Inform interactive fiction language
17265 # intel: file(1) magic for x86 Unix
17297 # ./msdos (version 5.25) labeled the next entry as "MS Windows COFF Intel 80386 object file"
17311 # rom: file(1) magic for BIOS ROM Extensions found in intel machines
17334 # interleaf: file(1) magic for InterLeaf TPS:
17343 # island: file(1) magic for IslandWite/IslandDraw, from SunOS 5.5.1
17353 # ispell: file(1) magic for ispell
17362 >0 byte 0 hash file (?),
17363 >0 byte 1 3.0 hash file,
17364 >0 byte 2 3.1 hash file,
17365 >0 byte 3 hash file (?),
17384 >1 byte 0 hash file (?),
17385 >1 byte 1 3.0 hash file,
17386 >1 byte 2 3.1 hash file,
17387 >1 byte 3 hash file (?),
17408 >4 long x hash file version %d,
17416 # ISO Zipped file format
17418 0 string IsZ! ISO Zipped file
17457 # See https://hg.openjdk.java.net/jdk9/jdk9/jdk/file/tip/src/java.base/share/classes/jdk/internal/j…
17463 # See https://hg.openjdk.java.net/jdk9/jdk9/jdk/file/tip/src/java.base/share/native/libjimage/image…
17496 # 0 string \377\330\377\340 JPEG file
17497 # 0 string \377\330\377\356 JPG file
17619 # karma: file(1) magic for Karma data files
17628 # kde: file(1) magic for KDE
17632 0 string/t #\ KDE\ Config\ File KDE config file
17634 0 string/t #\ xmcd xmcd database file for kscd
17639 # keepass: file(1) magic for KeePass file
17659 # kerberos: MIT kerberos file binary formats
17663 # if the following features were implemented in file:
17678 # printed and a subsequent entry in the same magic file
17699 0 belong 0x05020000 Kerberos Keytab file
17704 # kicad: file(1) magic for KiCad files
17809 0 string lect DEC SRC Virtual Paper Lectern file
17813 # lex: file(1) magic for lex
17820 # lex description file, from Daniel Quinlan <quinlan@yggdrasil.com>
17825 # lif: file(1) magic for lif
17829 0 beshort 0x8000 lif file
17833 # linux: file(1) magic for Linux files
17854 0 string \007\001\000 Linux/i386 object file
17862 0 string \243\206\001\0 Linux-8086 object file
17870 # core dump file, from Bill Reynolds <bill@goshawk.lanl.gov>
17871 216 lelong 0421 Linux/i386 core file
17880 # Linux make config build file, from Ole Aamot <oka@oka.no>
17882 28 string make\ config Linux make config build file (old)
17883 49 search/70 Kernel\ Configuration Linux make config build file
17902 # Linux swap file, from Daniel Quinlan <quinlan@yggdrasil.com>
17903 4086 string SWAP-SPACE Linux/i386 swap file
17905 # Linux swap file with swsusp1 image, from Jeff Bailey <jbailey@ubuntu.com>
17906 4076 string SWAPSPACE2S1SUSPEND Linux/i386 swap file (new style) with SWSUSP1 image
17908 4076 string SWAPSPACE2LINHIB0001 Linux/i386 swap file (new style) (compressed hibern…
17912 4086 string SWAPSPACE2 Linux/i386 swap file (new style),
17924 # swap file for PowerPC
17925 65526 string SWAPSPACE2 Linux/ppc swap file
17936 16374 string SWAPSPACE2 Linux/ia64 swap file
17978 0 belong 0x4f4f4f4d User-mode Linux COW file
17980 >>8 string >\0 \b, backing file %s
17982 >>32 string >\0 \b, backing file %s
18073 # file extension .lss .16
18179 0 string LUKS\xba\xbe LUKS encrypted file,
18187 # Summary: Xen saved domain file
18214 >>>>>>>64 ubequad >0 Journal file
18286 # Summary: Database file for mlocate
18287 # Description: A database file as used by mlocate, a fast implementation
18294 # Type: mlocate database file
18311 0 lelong 0x54564319 CRIU image file v1.1
18312 0 lelong 0x55105940 CRIU service file
18329 # lisp: file(1) magic for lisp programs
18339 #>2 search/4096 \r Windows INF file
18404 # llvm: file(1) magic for LLVM byte-codes
18425 # lua: file(1) magic for Lua scripting language
18447 # luks: file(1) magic for Linux Unified Key Setup
18451 0 string LUKS\xba\xbe LUKS encrypted file,
18459 # make: file(1) magic for M4 scripts
18473 # Java ByteCode, so they are both handled in the file "cafebabe".
18676 >12 belong 10 dSYM companion file
18724 # BinHex is the Macintosh ASCII-encoded file format (see also "apple")
18796 # by looking for printable characters at beginning of file name
18816 # display information of MacBinary file
18827 # THIS SHOULD NEVER HAPPEN! Maybe another file type is misidetified as MacBinary
18857 # char. code of file name
18869 # THIS SHOULD NEVER HAPPEN! Maybe another file type is misidetified or time overflow
18875 # file creator (normally expressed as four characters)
18879 # file type (normally expressed as four characters)
18949 >0 string ZSYS Pre-System 7 system file
18960 >0 string zsys system file
18963 >0 string BINA binary file
19023 >0 string dosa Macintosh MS-DOS file system
19026 >0 string pdos Apple ProDOS file system
19053 >24 string DATA data file
19055 >24 string INDEX data file index
19060 >0x9C string DATA data file
19062 >0x9C string INDEX data file index
19176 0 string BOMStore Mac OS X bill of materials (BOM) file
19195 0 string book\0\0\0\0mark\0\0\0\0 MacOS Alias file
19199 # magic: file(1) magic for magic files
19201 0 string/t #\ Magic magic text file for file(1) cmd
19202 0 lelong 0xF11E041C magic binary file for file(1) cmd
19204 0 belong 0xF11E041C magic binary file for file(1) cmd
19208 # mail.news: file(1) magic for mail and news
19248 0 string \241\002\213\015skiplist\ file\0\0\0 Cyrus skiplist DB
19249 0 string \241\002\213\015twoskip\ file\0\0\0\0 Cyrus twoskip DB
19252 # JHR file
19253 0 string JAM\0 JAM message area header file
19257 # SQD file (requires at least one message in the area)
19259 #256 leshort 0xAFAE4453 Squish message area data file
19264 # Cyrus: file(1) magic for compiled Cyrus sieve scripts
19276 # make: file(1) magic for makefiles
19297 # exclude MS Windows help file CoNtenT with ":include FOOBAR.CNT"
19314 # map: file(1) magic for Map data
19351 # If non-zero, every byte of the entire .img file is to be XORed with this value
19385 # Mapsource flag, 1 - file created by Mapsource, 0 - Garmin map visible in Basecamp and Homeport
19393 # Map file identifier like GARMIN\0
19397 # Block size exponent, E2 ; file blocksize=2**(E1+E2)
19412 # First sub-file offset (absolute); sometimes NO/UNKNOWN sub file!
19414 # sub-file Header length
19417 # sub-file Type[10] like "GARMIN RGN" "GARMIN TRE", "GARMIN TYP", etc.
19463 # sub file part; 0x0003 seems to be garbage
19466 # fat flag 0~dummy block 1~true sub file
19469 # sub-file name like MAKEGMAP 12345678
19471 # sub-file typ like RGN TRE MDR LBL
19473 # size of sub file
19634 >>>0x77 leshort 0x0075 TomTom activity file, v7
19644 # maple: file(1) magic for maple files
19661 0 string \<PACKAGE= Maple help file
19662 0 string \<HELP\ NAME= Maple help file
19663 0 string \n\<HELP\ NAME= Maple help file with extra carriage return at start (yuck)
19664 #0 string #\ Newton Maple help file, old style
19665 0 string #\ daub Maple help file, old style
19666 #0 string #=========== Maple help file, old style
19681 # I think 'nul E' means a file that was saved as a different name
19699 # marc21: file(1) magic for MARC 21 Format
19731 # mathcad: file(1) magic for Mathcad documents
19739 # mathematica: file(1) magic for mathematica files
19785 …g (*This\ is\ a\ Mathematica\ binary\ dump\ file.\ It\ can\ be\ loaded\ with\ Get.*) Mathematica b…
19786 0 string (*This\ is\ a\ Mathematica\ binary\ Mathematica binary file
19799 4 string \ A~ MAthematica .ml file
19811 0 string MATLAB Matlab v5 mat-file
19820 # matroska: file(1) magic for Matroska files
19838 # mcrypt: file(1) magic for mcrypt 2.2.x;
19875 # measure: file(1) magic for measurement data
19914 # mercurial: file(1) magic for Mercurial changeset bundles
19927 # metastore: file(1) magic for metastore files
19930 0 string MeTaSt00r3 Metastore data file,
19935 # rinex: file(1) magic for RINEX files
20005 # mime: file(1) magic for MIME encoded files
20014 # mips: file(1) magic for MIPS ECOFF and Ucode, as used in SGI IRIX
20134 # mirage: file(1) magic for Mirage executables
20142 # misctools: file(1) magic for miscellaneous UNIX tools.
20145 0 string/c BEGIN:VCALENDAR vCalendar calendar file
20159 # Summary: Libtool library file
20162 0 search/80 .la\ -\ a\ libtool\ library\ file libtool library file
20164 # Summary: Libtool object file
20167 0 search/80 .lo\ -\ a\ libtool\ object\ file libtool object file
20177 # https://filext.com/file-extension/DMP
20200 # Summary: abook addressbook file
20207 # mkid: file(1) magic for mkid(1) databases
20218 # mlssa: file(1) magic for MLSSA datafiles
20226 # mmdf: file(1) magic for MMDF mail files
20232 # modem: file(1) magic for modem programs
20249 # skip IRCAM file (VAX big-endian) ./audio
20260 # skip MouseTrap/Mt.Defaults with file size 16 found on Golden Orchard Apple II CD Rom
20318 # motorola: file(1) magic for Motorola 68K and 88K binaries
20384 0 beshort 0x0064 Atari 68xxx CPX file
20389 # mozilla: file(1) magic for Mozilla XUL fastload files
20426 # msdos: file(1) magic for MS-DOS files
20432 >1 string/cW \ echo\ off DOS batch file text
20435 >1 string/cW echo\ off DOS batch file text
20438 >1 string/cW rem DOS batch file text
20441 >1 string/cW set\ DOS batch file text
20449 >100 regex/c =^[\ \t]{0,10}call[\ \t]{1,10}rxfunc OS/2 REXX batch file text
20451 >100 regex/c =^[\ \t]{0,10}say\ ['"] OS/2 REXX batch file text
20457 #0 leshort 0x14c MS Windows COFF Intel 80386 object file
20459 0 leshort 0x166 MS Windows COFF MIPS R4000 object file
20461 0 leshort 0x184 MS Windows COFF Alpha object file
20463 0 leshort 0x268 MS Windows COFF Motorola 68000 object file
20465 0 leshort 0x1f0 MS Windows COFF PowerPC object file
20467 0 leshort 0x290 MS Windows COFF PA-RISC object file
20475 # All non-DOS EXE extensions have the relocation table more than 0x40 bytes into the file.
20486 # If the relocation table is 0x40 or more bytes into the file, it's definitely
20558 >>>(0x3c.l+22) leshort&0x1000 >0 system file
20613 # FOT: Font resource file
20638 # MS Windows system file, supposedly a collection of LE executables
20772 >>49824 leshort =1 \b, 1 file
20789 0 string/b KLF FreeDOS KEYBoard Layout file
20796 >12 string \0\0\0\0`\004\360 MS-DOS KEYBoard Layout file
21064 …41\261\032\341AAFB\015\000OM\006\016\053\064\001\001\001\377 AAF legacy file using MS Structured…
21067 …341\001\002\001\015\000\002\000\000\006\016\053\064\003\002\001\001 AAF file using MS Structured…
21168 # file revision sub code 0004h for worksheets
21199 # Reference: http://www.schnarff.com/file-formats/lotus-1-2-3/WSFF2.TXT
21310 0 string/b \003\001\001\004\070\001\000\000 tz3 ms-works file
21311 0 string/b \003\002\001\004\070\001\000\000 tz3 ms-works file
21312 0 string/b \003\003\001\004\070\001\000\000 tz3 ms-works file
21324 …MDIF\032\000\010\000\000\000\372\046\100\175\001\000\001\036\001\000 MS Windows special zipped file
21426 # Windows Recycle Bin record file (named INFO2)
21433 >12 lelong 0x00000118 Windows Recycle Bin INFO2 file (Win98 or below)
21436 >12 lelong 0x00000320 Windows Recycle Bin INFO2 file (Win2k - WinXP)
21442 0 string GERBIL First Choice device file
21443 9 string RABBITGRAPH RabbitGraph file
21444 0 string DCU1 Borland Delphi .DCU file
21448 #0 string AH Halo(TM) bitmapped font file
21449 0 lelong 0x08086b70 TurboC BGI file
21450 0 lelong 0x08084b50 TurboC Font file
21460 0 string PMCC Windows 3.x .GRP file
21463 >9 byte >0x2F \b.%c file
21465 >4 lelong 0x00021401 Windows shortcut file
21533 0 ulelong 0x48443408 4DOS help file
21536 # old binary Microsoft (.HLP) files added by Joerg Jenderek from http://file-extension.net/seeker/f…
21537 0 ulequad 0x3a000000024e4c MS Advisor help file
21574 # IncrediMail CAB contains an initialisation file "content.ini" like in im2.ims
21590 # http://file-extension.net/seeker/file_extension_ime
21608 # All inspected MSU contain a file with name WSUSSCAN.cab
21614 # look at point charcter of 1st archive member name for file name extension
21644 # archive with more then one file need some output in version 5.32 to avoid error message like
21647 # file: could not find any valid magic files!
21651 # remaining archives with just one file
21668 >28 uleshort 1 \b, 1 file
21675 >(16.l) use cab-file
21681 >>>>&0 use cab-file
21683 # Cabinet file format version. Currently, versionMajor = 1 and versionMinor = 3
21687 # cabinet file option indicators 1~PREVIOUS, 2~NEXT, 4~reserved fields
21693 # iCabinet is number of this cabinet file in a set, where 0 for the first cabinet
21733 # optional name of previous/next cabinet file szCabinet*[255]
21750 0 name cab-file
21751 # cbFile is uncompressed size of file in bytes
21753 # uoffFolderStart is uncompressed offset of file in folder
21760 # date stamp for file
21762 # time stamp for file
21764 # attribs is attribute flags for file
21765 # define _A_RDONLY (0x01) file is read-only
21766 # define _A_HIDDEN (0x02) file is hidden
21767 # define _A_SYSTEM (0x04) file is a system file
21768 # define _A_ARCH (0x20) file modified since last backup
21805 >52 leshort 1 \b, 1 file
21852 # The second byte of these signatures is a file version; I don't know what,
21873 >>>>0x1 ubyte x DOS 2.0 backup id file, sequence %d
21877 # backed up file
21880 # by looking for trailing nul of maximal file name string
21882 # test for flag byte: FFh~complete file, 00h~split file
21886 # plausibility check for file name length
21888 # looking for terminating nul of file name string
21890 # looking if last char of string is valid DOS file name
21895 # first char of full file name is DOS (5Ch) or UNIX (2Fh) path separator
21899 # "DOS 2.0 backed up file %s, split file, sequence %d" or
21900 # "DOS 2.0 backed up file %s, complete file"
21905 # full file name with path but without drive letter and colon stored from 0x05 til 0x52
21906 >>>>>>0x5 string x file %s
21910 # file: line 1169: Bad magic entry ' *'
21911 # after header original file content
21921 >>0x9 ubyte x DOS 3.3 backup control file, sequence %d
21929 # msooxml: file(1) magic for Microsoft Office XML
21933 # archive. The first member file is normally "[Content_Types].xml".
21937 # file of ePub or OpenDocument, we'll have to scan for a filename
21948 # start by checking for ZIP local file header signature
21951 # make sure the first file is correct
21954 # skip to the second local file header
21955 # since some documents include a 520-byte extra field following the file
21958 # now skip to the *third* local file header; again, we need to scan due to a
21959 # 520-byte extra field following the file header
21962 # file we have. Correct the mimetype with the registered ones:
21966 # OpenOffice/Libreoffice orders ZIP entry differently, so check the 4th file
21974 # msvc: file(1) magic for msvc
21981 0 string HWB\000\377\001\000\000\000 Microsoft Visual C .APS file
22042 # msx: file(1) magic for the MSX Home Computer
22046 ############## MSX Music file formats ##############
22048 # Gigamix MGSDRV music file
22049 0 string/b MGS MSX Gigamix MGSDRV3 music file,
22056 1 string/b mgs2\ MSX Gigamix MGSDRV2 music file
22061 # KSS music file
22062 0 string/b KSCC KSS music file v1.03
22070 0 string/b KSSX KSS music file v1.20
22096 #>0 search/0xFFFF \r\n#FORMAT MSX Music Player K-kaz source MML file
22099 #>>0 search/0xFFFF \r\nSCC1\= MSX MuSiCa MML source file
22101 # OPX Music file
22105 >>>0x87 uleshort 0 MSX OPX Music file
22111 # SCMD music file
22113 >0xCE uleshort 0 MSX SCMD Music file
22114 #>>-2 uleshort 0x6a71 ; The file must end with this value. How to code this here?
22118 >&0 search/0xFFFF \r\n@m=[ MSX SCMD source MML file
22121 ############## MSX image file formats ##############
22141 # MSX G9B image file
22158 ############## Other MSX file formats ##############
22308 # MSX BIN file
22312 #>>>5 uleshort >0x8000 MSX BIN file
22314 # MSX-BASIC file
22319 # MSX .CAS file
22322 # Mega-Assembler file
22334 # Konami's King's Valley-2 custom stage (ELG file)
22352 # mup: file(1) magic for Mup (Music Publisher) input file.
22357 # and is not a mandatory header because of old mup input file
22375 # music: file (1) magic for music formats
22392 # nasa: file(1) magic
22395 0 string DAF/SPK NASA SPICE file (binary format)
22396 0 string DAFETF\ NAIF\ DAF\ ENCODED NASA SPICE file (transfer format)
22400 # natinst: file(1) magic for National Instruments Code Files
22406 # We guess VXI format file. VISA, LabWindowsCVI, BridgeVIEW, etc, are missing
22411 # Check which kind of file it is
22424 # ncr: file(1) magic for NCR Tower objects
22485 # netbsd: file(1) magic for NetBSD objects
22524 >>20 lelong =0 object file
22669 # NetBSD/arm26 has always used ELF objects, but it shares a core file
22675 0 belong&0x0000ffff 0x00008fca NetBSD kernel core file
22720 >>6 leshort <3 NetBSD ktrace file version %d
22736 # netscape: file(1) magic for Netscape files
22762 # netware: file(1) magic for NetWare Loadable Modules (NLMs)
22769 # news: file(1) magic for SunOS NeWS fonts (not "news" as in "netnews")
22782 # nitpicker: file(1) magic for Flowfiles.
22796 # numpy: file(1) magic for NumPy array binary serialization format
22806 # Summary: OASIS stream file
22813 0 string %SEMI-OASIS\r\n OASIS Stream file
22817 # ocaml: file(1) magic for Objective Caml files.
22819 >8 string X exec file
22820 >8 string I interface file (.cmi)
22821 >8 string O object file (.cmo)
22822 >8 string A library file (.cma)
22823 >8 string Y native object file (.cmx)
22824 >8 string Z native library file (.cmxa)
22825 >8 string M abstract syntax tree implementation file
22826 >8 string N abstract syntax tree interface file
22831 # octave binary data file(1) magic, from Dirk Eddelbuettel <edd@debian.org>
22837 # Microsoft OLE 2 Compound Documents : file(1) magic for Microsoft Structured
22870 # olf: file(1) magic for OLF executables
22899 >>16 leshort 0 no file type,
22905 >>16 leshort 4 core file
22932 >>16 beshort 0 no file type,
22936 >>16 beshort 4 core file,
22968 # os2: file(1) magic for OS/2 files
22988 #0 string file: OS/2 URL object text
22989 #>5 string >\ (Local file) <%s>
22999 # // bit 0: set if INF style file
23000 # // bit 4: set if HLP style file
23017 # os400: file(1) magic for IBM OS/400 files
23019 # IBM OS/400 (i5/OS) Save file (SAVF) - gerardo.cacciari@gmail.com
23028 1090 search/7393 \x19\xDB\xD8\xE2\xD9\xC4\xE2\xE2\xD7\xC3 IBM OS/400 save file data
23099 >6 byte&0xf0 0xD0 file manager
23130 >0x12 byte 13 file manager
23146 # palm: file(1) magic for PalmOS {.prc,.pdb}: applications, docfiles, and hacks
23285 # Palm OS .prc file types
23313 # parrot: file(1) magic for Parrot Virtual Machine
23335 # pascal: file(1) magic for Pascal source
23346 # file(1) magic(5) data for OpenStreetMap
23357 # pbm: file(1) magic for Portable Bitmap files
23363 # pc88: file(1) magic for the NEC Home Computer
23387 # pc98: file(1) magic for the MSX Home Computer
23427 …h 19268 YJK colors. The usual resolution and color information fields from the file must be ignored
23466 # pdf: file(1) magic for Portable Document Format
23497 # pdp: file(1) magic for PDP-11 executable/object and APL workspace
23527 # These last three are derived from 2.11BSD file(1)
23538 # perl: file(1) magic for Larry Wall's perl language.
23609 # <https://metacpan.org/release/Hash-SharedMem> defines a file format
23610 # for a key/value store. Details of the file format are in the "DESIGN"
23611 # file in the module distribution. Magic:
23612 0 bequad =0xa58afd185cbf5af7 Hash::SharedMem master file, big-endian
23618 0 lequad =0xa58afd185cbf5af7 Hash::SharedMem master file, little-endian
23624 0 bequad =0xc693dac5ed5e47c2 Hash::SharedMem data file, big-endian
23630 0 lequad =0xc693dac5ed5e47c2 Hash::SharedMem data file, little-endian
23639 # pgf: file(1) magic for Progressive Graphics File (PGF)
23691 # pgp: file(1) magic for Pretty Good Privacy
24223 # sub-key are normally part of secret key. So it does not occur as standalone file
24252 # pkgadd: file(1) magic for SysV R4 PKG Datastreams
24259 # plan9: file(1) magic for AT&T Bell Labs' Plan 9 executables
24277 # plus5: file(1) magic for Plus Five's UNIX MUMPS
24295 # polyml: file(1) magic for PolyML
24318 # printer: file(1) magic for printer-formatted files
24360 0 string *PPD-Adobe:\x20 PPD file
24425 # to keep the word `text' if the file is human-readable.
24440 # zenographics: file(1) magic for Zenographics ZjStream printer data
24459 # HP LaserJet 1000 series downloadable firmware file
24468 # project: file(1) magic for Project management
24471 0 string FTNCHEK_\ P project file for ftnchek
24478 # psdbms: file(1) magic for psdatabase
24492 # psl: file(1) magic for Public Suffix List representations
24506 # pulsar: file(1) magic for Pulsar POP3 daemon binary files
24512 0 belong 0x1ee7f11e Pulsar POP3 daemon mailbox cache file.
24519 # pwsafe: file(1) magic for passwordsafe file
24523 # file format specs
24533 # pyramid: file(1) magic for Pyramids
24545 # python: file(1) magic for python
24646 # qt: file(1) magic for Qt
24649 0 string \<!DOCTYPE\040RCC\> Qt Resource Collection file
24654 0 string qres\0\0 Qt Binary Resource file
24655 0 search/1024 The\040Resource\040Compiler\040for\040Qt Qt C-code resource file
24661 >8 string \xcd\x21\x1c\xbf\x60\xa1\xbd\xdd Qt Translation file
24665 # file(1) magic for revision control files
24667 0 string/t /1\ :pserver: cvs password text file
24706 # Type: Git index file
24731 # riff: file(1) magic for RIFF format
24797 # AVI section extended by Patrik Radman <patrik+file-magic@iki.fi>
24808 # file size = chunk size + 8 in most cases
24822 # jump relative 22 ( 8 + 16) bytes forward points after end of file or to
24979 >8 string 4XMV \b, 4X Movie file
24980 # AMV-type AVI file: https://wiki.multimedia.cx/index.php?title=AMV
25039 # 128 bit + total file size (64 bits) so 24 bytes
25063 # rpi: file(1) magic for Raspberry Pi images
25079 # RPM: file(1) magic for Red Hat Packages Erik Troan (ewt@redhat.com)
25124 # rpmsg: file(1) magic for restricted-permission messages (or "rights-protected" messages)
25131 # rtf: file(1) magic for Rich Text Format (RTF)
25147 # ruby: file(1) magic for Ruby scripting language
25202 # sc: file(1) magic for "sc" spreadsheet
25204 38 string Spreadsheet sc spreadsheet file
25209 # sccs: file(1) magic for SCCS archives
25231 # scientific: file(1) magic for scientific formats
25237 0 string MTZ\040 MTZ reflection file
25239 92 string PLOT%%84 Plot84 plotting file
25308 # The PDB file format is fixed-field, 80 columns. From the spec:
25328 # Type: GDSII Stream file
25329 0 belong 0x00060002 GDSII Stream file
25337 0 beshort 0x0138 interLaced eXtensible Trace (LXT) file
25368 #0 search gen_context( SE Linux policy file contexts
25374 # sendmail: file(1) magic for sendmail config files
25386 # freezed configuration file (dbm format?) created from sendmal.cf with -bz
25401 # sendmail: file(1) magic for sendmail m4(1) files
25406 0 string divert(-1)\n sendmail m4 text file
25411 # sequent: file(1) magic for Sequent machines
25453 # sereal: file(1) magic the Sereal binary serialization format
25488 # sgi: file(1) magic for Silicon Graphics operating systems and applications
25495 # kbd file definitions
25496 0 string kbd!map kbd map file
25500 0 beshort 0x8765 disk quotas file
25502 0 beshort 0x0506 IRIS Showcase file
25508 0 belong 0x5343464d IRIS Showcase file
25517 # 32bit core file
25521 # 64bit core file
25525 # N32bit core file
25529 # New style crash dump file
25534 0 string SGIAUDIT SGI Audit file
25540 0 string WNGZWZHP Wingz help file
25542 0 string #Inventor\040V IRIS Inventor 1.0 file
25543 0 string #Inventor\040V2 Open Inventor 2.0 file
25557 # Performance Co-Pilot file types
25603 0 lelong 0x13130303 SpeedShop data file
25606 0 lelong 0x01023962 mdbm file, version 0 (obsolete)
25607 0 string mdbm mdbm file,
25632 >>19 search/4096 \<gnc-v2 GnuCash file
25637 # Sitemap file
25665 # sgml: file(1) magic for Standard Generalized Markup Language
25770 # file(1) magic for sharc files
25783 #0 string Analog ADi asm listing file
25784 0 string .SYSTEM SHARC architecture file
25785 0 string .system SHARC architecture file
25793 # sinclair: file(1) sinclair QL
25880 # smile: file(1) magic for Smile serialization
25914 # sniffer: file(1) magic for packet capture files
25922 0 string RTSS NetMon capture file
25935 0 string GMBU NetMon capture file
25955 0 string TRSNIFF\040data\040\040\040\040\032 Sniffer capture file
25979 0 string XCP\0 NetXRay capture file
25991 # (We call them "tcpdump capture file(s)" for now, as "tcpdump" is
25993 # that use "libpcap", or that use the same capture file format.)
26181 0 ubelong 0xa1b2c3d4 pcap capture file, microseconds ts (big-endian)
26184 0 ulelong 0xa1b2c3d4 pcap capture file, microsecond ts (little-endian)
26189 0 ubelong 0xa1b23c4d pcap capture file, nanosecond ts (big-endian)
26192 0 ulelong 0xa1b23c4d pcap capture file, nanosecond ts (little-endian)
26199 0 ubelong 0xa1b2cd34 pcap capture file, microsecond ts, extensions (big-endian)
26201 0 ulelong 0xa1b2cd34 pcap capture file, microsecond ts, extensions (little-endian)
26211 >8 ubelong 0x1a2b3c4d pcapng capture file
26215 >8 ulelong 0x1a2b3c4d pcapng capture file
26222 0 string iptrace\0401.0 AIX iptrace capture file
26223 0 string iptrace\0402.0 AIX iptrace capture file
26228 0 leshort 0x1001 Novell LANalyzer capture file
26229 0 leshort 0x1007 Novell LANalyzer capture file
26234 0 string \x54\x52\x00\x64\x00 HP/UX nettl capture file
26239 0 string \x42\xd2\x00\x34\x12\x66\x22\x88 RADCOM WAN/LAN Analyzer capture file
26246 0 string NetS NetStumbler log file
26252 0 string \177ver EtherPeek/AiroPeek/OmniPeek capture file
26257 0 string \x05VNF Visual Networks traffic capture file
26262 0 string ObserverPktBuffe Network Instruments Observer capture file
26267 0 string \xaa\xaa\xaa\xaa 5View capture file
26271 # softquad: file(1) magic for SoftQuad Publishing Software
26277 0 string \<!SQ\ DTD> Compiled SGML rules file
26281 0 string \<!SQ\ STS> A/E SGML binary styles file
26287 0 short 0125252 SoftQuad DESC or font file binary
26308 # spec: file(1) magic for SPEC raw results (*.raw, *.rsf)
26329 # spectrum: file(1) magic for Spectrum emulator files.
26345 # Tape file. This assumes the .TAP starts with a Spectrum-format header,
26409 # sql: file(1) magic for SQL files
26416 0 beshort 0xfe01 MySQL table definition file
26448 0 belong&0xffffff00 0xfefe0500 MySQL ISAM index file
26450 0 belong&0xffffff00 0xfefe0600 MySQL ISAM compressed data file
26452 0 belong&0xffffff00 0xfefe0700 MySQL MyISAM index file
26459 0 belong&0xffffff00 0xfefe0800 MySQL MyISAM compressed data file
26461 0 belong&0xffffff00 0xfefe0900 MySQL Maria index file
26463 0 belong&0xffffff00 0xfefe0a00 MySQL Maria compressed data file
26466 >4 string MACF MySQL Maria control file
26477 >4 string MARIALOG MySQL Maria transaction log file
26481 # iRiver H Series database file
26485 0 string iRivDB iRiver Database file
26497 0 string **\ This\ file\ contains\ an\ SQLite SQLite 2.x database
26519 >68 belong =0x47504b47 (OGC GeoPackage file)
26546 0 string --\ H2\ 0.5/B\ --\ \n H2 Database file
26563 # ssl: file(1) magic for SSL file formats
26576 # OpenSSL enc file (recognized by a magic string preceding the password's salt)
26583 # sun: file(1) magic for Sun machines
26646 # Core files. "SPARC 4.x BCP" means "core file from a SunOS 4.x SPARC
26649 0 belong 0x080456 SunOS core file
26673 # Sun snoop (see RFC 1761, which describes the capture file format,
26678 0 string snoop Snoop capture file
26719 # at the very end where file(1) can't get it.
26720 0 string CRfs COBALT boot rom data (Flat boot rom or file system)
26723 # msx: file(1) magic for the SymbOS operating system
26727 # SymbOS EXE file
26766 # sysex: file(1) magic for MIDI sysex files
27084 # file: file(1) magic for Tcl scripting language
27115 # teapot: file(1) magic for "teapot" spreadsheet
27121 # terminfo: file(1) magic for terminfo
27183 # tex: file(1) magic for TeX files
27192 0 string \367\002 TeX DVI file
27215 0 search/1 This\ is\ Info\ file GNU Info text
27240 0 search/4096 \\relax LaTeX auxiliary file
27253 0 search/4096 \\indexentry LaTeX raw index file
27257 0 search/4096 This\ is\ makeindex Makeindex log file
27262 # file(1) magic for BibTex text files
27265 0 search/1/c @article{ BibTeX text file
27266 0 search/1/c @book{ BibTeX text file
27267 0 search/1/c @inbook{ BibTeX text file
27268 0 search/1/c @incollection{ BibTeX text file
27269 0 search/1/c @inproceedings{ BibTeX text file
27270 0 search/1/c @manual{ BibTeX text file
27271 0 search/1/c @misc{ BibTeX text file
27272 0 search/1/c @preamble{ BibTeX text file
27273 0 search/1/c @phdthesis{ BibTeX text file
27274 0 search/1/c @techreport{ BibTeX text file
27275 0 search/1/c @unpublished{ BibTeX text file
27277 73 search/1 %%%\ \ BibTeX-file{ BibTex text file (with full header)
27279 73 search/1 %%%\ \ @BibTeX-style-file{ BibTeX style text file (with full header)
27281 0 search/1 %\ BibTeX\ standard\ bibliography\ BibTeX standard bibliography style text file
27283 0 search/1 %\ BibTeX\ ` BibTeX custom bibliography style text file
27285 0 search/1 @c\ @mapfile{ TeX font aliases text file
27322 # file(1) magic for tgif(1) files
27324 0 string %TGIF\ Tgif file version
27329 # ti-8x: file(1) magic for the TI-8x and TI-9x Graphing Calculators.
27568 # timezone: file(1) magic for timezone data
27663 # root file system data offset
27668 # in 5.32 only true for offset ~< FILE_BYTES_MAX=9 MB defined in ../../src/file.h
27671 #>(0x88.L) string x \b, file system '%.4s'
27672 #>(0x88.L) ubequad x \b, file system 0x%llx
27686 # troff: file(1) magic for *roff
27724 # tuxedo: file(1) magic for BEA TUXEDO data files
27732 # typeset: file(1) magic for other typesetting
27755 # unknown: file(1) magic for unknown machines
27765 # binaries, so the first 16 bits of the file would contain 0x10B.
27789 # file(1) magic for uterus files
27792 0 string UTE+ uterus file
27805 # uuencode: file(1) magic for ASCII-encoded files
27827 # BinHex is the Macintosh ASCII-encoded file format (see also "apple")
27839 # file: MAPDATAyyyymmddhhmmss_xxxxxx_cc.blk
27890 # varied.out: file(1) magic for various USG systems
27892 # Herewith many of the object file formats used by USG systems.
27904 596 string \130\337\377\377 Ultrix core file
27918 0 string \xc0HRB Harbour HRB file
27921 0 string \xc0HBV Harbour variable dump file
27935 # varied.script: file(1) magic for various interpreter scripts
27987 # vax: file(1) magic for VAX executable/object and APL workspace
28014 # vicar: file(1) magic for VICAR files.
28026 # VICAR label file
28027 43 string SFDU_LABEL VICAR label file
28122 #>>0x10010 ubequad x \b, file id 0x%llx
28177 # Length. Specifies the length of the object within the file
28262 >>12 belong >0 \b, has backing file (
28270 # file is still usable together with this image
28284 >>8 bequad >0 \b, has backing file
28289 # the file is over 4G, and the backing file path is stored after the first 4G,
28299 >>8 bequad >0 \b, has backing file
28304 # the file is over 4G, and the backing file path is stored after the first 4G,
28350 # visx: file(1) magic for Visx format files
28352 0 short 0x5555 VISX image file
28382 # vms: file(1) magic for VMS executables (experimental)
28412 # VMware specific files (deducted from version 1.1 and log file entries)
28418 # vorbis: file(1) magic for Ogg/Vorbis files
28431 # won't work for detecting other properties of the file (they all need
28432 # to be made relative to the search). In any case, if the file has ID3
28505 # zero-terminated one, so file(1) can't read it in a generic way.
28573 # VXL: file(1) magic for VXL binary IO data files
28582 2 lelong 0x472b2c4e VXL data file,
28587 # warc: file(1) magic for WARC files
28602 # weak: file(1) magic for very weak magic entries, disabled by default
28618 # webassembly: file(1) magic for WebAssembly modules
28621 # Group at https://webassembly.org/. The file extension is .wasm, and
28634 # windows: file(1) magic for Microsoft Windows
28636 # This file is mainly reserved for files where programs
28643 # format, please specify under "msdos" file.
28647 # Summary: Outlook Express DBX file
28650 0 string \xCF\xAD\x12\xFE MS Outlook Express DBX file
28776 # check and then display version and date inside MS Windows HeLP file fragment
28780 # version Major 1 for right file fragment
28786 # version Minor of help file format is hint for windows version
28794 # to complete message string like "MS Windows 3.x help file"
28796 # GenDate often older than file creation date
28801 # ./windows (version 5.25) labeled the entry as "MS Windows 3.x help file"
28802 # file header magic 0x293B at DirectoryStart+9
28841 # this only happens if bigger hlp file is detected after used search iterations
28861 ## file header magic 0x293B
28862 #>>(4.l+9) uleshort x \b, file header magic 0x%4.4x
28863 ## file header Flags 0x0402
28864 #>>(4.l+11) uleshort x \b, file header Flags 0x%4.4x
28865 ## file header PageSize 0400h 80h for *.ANN
28903 >>1 regex/c \^([^\xd>]*|.*\.hlp) MS Windows help file Content, based "%s"
28908 # Windows creates an full text search from hlp file, if the user clicks the "Find" tab and enables …
28918 >15 string 1.0\ --\ HyperTerminal\ data\ file MS Windows HyperTerminal profile
28928 >20 lelong&2 2 \b, Points to a file or directory
28982 # Summary: IE cache file
28984 0 string Client\ UrlCache\ MMF Internet Explorer cache file
28991 0 string regf MS Windows registry file, NT/2000 or above
28992 0 string CREG MS Windows 95/98/ME registry file
28993 0 string SHCC3 MS Windows 3.1 registry file
29039 >0 use ini-file
29042 >0 use ini-file
29045 >0 use ini-file
29047 0 name ini-file
29056 # but sometimes total commander directory tree file "treeinfo.wc" with lines like
29064 >>>&0 string !]\r\n[ Microsoft Windows Autorun file
29068 # version strings ASCII coded case-independent for Windows setup information script file
29109 # @CONFIG.UI configuration file of previous DOS version saved by Caldera OPENDOS INSTALL.EXE
29110 # CONFIG.PSS saved version of file CONFIG.SYS created by %WINDIR%\SYTEM\MSCONFIG.EXE
29111 # CONFIG.TSH renamed file CONFIG.SYS.BAT by %WINDIR%\SYTEM\MSCONFIG.EXE
29264 # Summary: backup file created with utility like NTBACKUP.EXE shipped with Windows NT/2K/XP/2003
29302 >>>>>4 ulelong&0x00020000 !0 \b, with file catalog
29364 # Reference: https://www.cryer.co.uk/file-types/p/pal.htm
29371 # 2nd line contains palette file version. For example "0100"
29438 # TO avoid in file version 5.36 error like
29440 # file: could not find any valid magic files! (No error)
29444 # usPartNumber; 1, unless the file was split into multiple parts
29446 # usTotalParts; The total number of WIM file parts in a spanned set
29459 # dwVersion version of the WIM file 00010d00h~1.13 00000e00h~0.14
29462 # dwImageCount; The number of images contained in the WIM file
29515 # wireless-regdb: file(1) magic for CRDA wireless-regdb file format
29517 0 string RGDB CRDA wireless regulatory database file
29522 # wordprocessors: file(1) magic fo word processors.
29524 ####### PWP file format used on Smith Corona Personal Word Processors:
29538 >>9 byte 2 WordPerfect help file
29539 >>9 byte 3 WordPerfect keyboard file
29559 >>9 byte 43 WordPerfect settings file
29562 >>9 byte 69 WordPerfect dialog file
29575 >>9 byte 2 Corel Notebook help file
29576 >>9 byte 3 Corel Notebook keyboard file
29582 >>9 byte 2 Corel Calculator help file
29591 >>9 byte 2 Corel Calendar help file
29592 >>9 byte 10 Corel Calendar data file
29598 >>9 byte 2 Corel Editor help file
29599 >>9 byte 3 Corel Editor keyboard file
29600 >>9 byte 25 Corel Editor macro resource file
29606 >>9 byte 2 Corel Macro editor help file
29607 >>9 byte 3 Corel Macro editor keyboard file
29618 >>9 byte 2 Corel PlanPerfect help file
29619 >>9 byte 3 Corel PlanPerfect keyboard file
29630 >>9 byte 2 Corel Mail help file
29641 >>9 byte 11 Corel Printer temporary file
29646 >>9 byte 2 Corel Scheduler help file
29647 >>9 byte 10 Corel Scheduler in file
29648 >>9 byte 11 Corel Scheduler out file
29653 >>9 byte 10 Corel GroupWise settings file
29655 >>9 byte 43 Corel GroupWise settings file
29673 # Corel loadable file
29675 >>9 byte 10 Corel loadable file
29678 >>9 byte 13 Corel printer settings file
29679 >>9 byte 14 Corel port definition file
29681 >>9 byte 16 Corel compressed file
29683 >>>9 byte x Corel loadable file: Unknown filetype %d
29688 >>9 byte 10 Corel Network service msg file
29689 >>9 byte 11 Corel Network service msg file
29691 >>9 byte 14 Corel GroupWise message file
29699 >>9 byte 24 GroupWise admin ADS deferment data file
29710 >>>9 byte x file type %d
29722 0 string CSBK Ted Neslson's CosmicBook hypertext file
29724 2 string EYWR AmigaWriter file
29726 # chi: file(1) magic for ChiWriter files
29727 0 string \\1cw\ ChiWriter file
29729 0 string \\1cw ChiWriter file
29743 # ichitaro456: file(1) magic for Just System Word Processor Ichitaro
29780 0 ulelong&0x8080FFFF 0x00001204 gfxboot compiled html help file
29787 # Requires file >= 5.05
29805 # x68000: file(1) magic for the Sharp Home Computer
29813 >>>&0 ubyte 0 Yanagisawa PIC image file,
29832 # file(1) magic(5) data for xdelta Josh MacDonald <jmacd@CS.Berkeley.EDU>
29834 0 string %XDELTA% XDelta binary patch file 0.14
29835 0 string %XDZ000% XDelta binary patch file 0.18
29836 0 string %XDZ001% XDelta binary patch file 0.20
29837 0 string %XDZ002% XDelta binary patch file 1.0
29838 0 string %XDZ003% XDelta binary patch file 1.0.4
29839 0 string %XDZ004% XDelta binary patch file 1.1
29845 # xenix: file(1) magic for Microsoft Xenix
29855 0 string core core file (Xenix)
29901 >0x1e leshort ^0x1 object file
29921 >0x1e leshort ^0x1 object file
29937 # This is Aaron's attempt at a MAGIC file for Xilinx .bit files.
30007 # xwindows: file(1) magic for various X/Window system file formats.
30023 0 long 395726 Jaleo XFS file
30043 # yara: file(1) magic for https://virustotal.github.io/yara/
30057 # zfs: file(1) magic for ZFS dumps
30155 # zilog: file(1) magic for Zilog Z8000.
30160 0 long 0xe807 object file (z8000 a.out)
30161 0 long 0xe808 pure object file (z8000 a.out)
30162 0 long 0xe809 separate object file (z8000 a.out)
30163 0 long 0xe805 overlay object file (z8000 a.out)
30166 # zip: file(1) magic for zip files; this is not use
30230 # zyxel: file(1) magic for ZyXEL modems
