namespace Wabbajack.Common.FileSignatures { public enum FileType { _123, _386, _3G2, _3GG, _3GP, _3GP5, _4XM, _7Z, AAC, ABA, ABD, ABI, ABY, AC, AC_, ACCDB, ACM, ACS, AD, ADF, ADP, ADX, AIFF, AIN, AMR, ANI, ANM, API, APK, APR, APUF, ARC, ARF, ARJ, ARL, ASF, AST, ASX, attachment, AU, AUT, AVI, AW, AX, b64, B85, BA2, BAG, BDR, BIN, BLI, BMP, BPG, BSA, BSB, BZ2, CAB, CAF, CAL, CAP, CAS, CAT, CBD, CBK, CDA, CDR, CFG, CHI, CHM, CIN, CL5, CLASS, CLB, CMX, CNV, COD, COM, CPE, CPI, CPL, CPT, CPX, CRU, CRW, CRX, CSD, CSH, CSO, CTF, CTL, CUR, DAA, DAT, DAX, DB, DB3, DB4, DBA, DBB, DBF, DBX, DCI, DCX, DDS, dex, DIB, DLL, DMG, DMP, DMS, DOC, DOCX, DOT, DPX, DRV, DRW, DS4, DSF, DSN, DSP, DSS, DST, DSW, DTD, DUN, DVF, DVR, DW4, DWG, E01, ECF, EFX, EML, ENL, EPS, EPUB, ESD, ETH, EVT, EVTX, Ex01, EXE, EXR, FBM, FDB, FDF, FITS, FLAC, FLI, FLT, FLV, FM, FON, FTR, G64, GDB, GED, GHO, GHS, GID, GIF, GPG, GPX, GRB, GRP, GX2, GZ, HAP, HDMP, HDR, HLP, HQX, HUS, ICO, IDX, IFF, IFO, IMG, IND, INDD, INFO, INS, IPD, ISO, IVR, JAR, JB2, JCEKS, JFIF, JG, JNT, JP2, JPE, JPEG, JPG, JTP, KGB, KMZ, KOZ, KWD, LBK, LGC, LGD, LHA, LIB, LIT, LNK, LOG, LWP, LZH, M4A, M4V, MANIFEST, MAR, MAT, MDB, MDF, MDI, MID, MIDI, MIF, MKV, MLS, MMF, MNY, MOF, MOV, MP, MP3, MP4, MPG, MSC, MSF, MSG, MSI, MSP, MSV, MTE, MTW, MXD, MXF, NRI, NSF, NTF, NVRAM, OBJ, OCX, ODP, ODT, OGA, OGG, OGV, OGX, OLB, ONE, ONEPKG, OPT, ORG, OST, OTF, OTT, OXPS, P10, PAK, PAT, PAX, PCH, PCS, PCX, PDB, PDF, PEC, PES, PF, PFC, PGD, PGM, PIF, PKR, PLS, PMOCCMOC, PNG, PPS, PPT, PPTX, PPZ, PRC, PSD, PSP, PUB, PUF, PWI, PWL, QBB, QCP, QDF, QEL, QEMU, QPH, QRP, QSD, QTS, QTX, QXD, RA, RAM, RAR, RAR_NEW, RAR_OLD, RBI, RDATA, REG, RGB, RM, RMI, RMVB, RPM, RTD, RTF, RVT, SAM, SAV, SCR, SCT, SDPX, SDR, SH3, SHD, SHW, SIB, SIL, SIT, SKF, SKR, SLE, SLN, SNM, SNP, SOU, SPF, SPL, SPO, SPVB, STL, SUD, SUO, SWF, SXC, SXD, SXI, SXW, SYS, SYW, TAR, TARZ, TB2, TBI, TBZ2, TES3, THP, TIB, TIF, TIFF, TLB, TORRENT, TPL, TR1, TTF, UCE, UFA, VBE, VBX, VCD, VCF, VCW, VHD, VLT, VMD, VMDK, VOB, VOC, VSD, VXD, WAB, WALLET, WAV, WB2, WB3, WEBM, WEBP, WIM, WIZ, WK1, WK3, WK4, WK5, WKS, WMA, WMF, WMV, WMZ, WP, WP5, WP6, WPD, WPF, WPG, WPL, WPP, WPS, WRI, WS, WS2, WSC, WSF, XAR, XCF, XDR, XLA, XLS, XLSX, XML, XPI, XPS, XPT, XXX, XZ, ZAP, ZIP, ZOO, } public static class Definitions { public static (FileType, byte[])[] Signatures = { // Morrowind BSA (FileType.TES3, new byte[] {0x00, 0x01, 0x00, 0x00}), // TES 4-5 and FO 3 BSA (FileType.BSA, new byte[] {0x42, 0x53, 0x41, 0x00}), // FO4 BSA (FileType.BA2, new byte[] {0x42, 0x54, 0x44, 0x58}), // Relaxed RAR format (FileType.RAR, new byte[] {0x52, 0x61, 0x72, 0x21}), // RAR5 or newer (FileType.RAR_NEW, new byte[] {0x52, 0x61, 0x72, 0x21, 0x1A, 0x07, 0x01, 0x00}), // RAR4 or older (FileType.RAR_OLD, new byte[] {0x52, 0x61, 0x72, 0x21, 0x1A, 0x07, 0x00}), // DDS (FileType.DDS, new byte[] {0x44, 0x44, 0x53, 0x20}), // JPEG2000 image files (FileType.JP2, new byte[] {0x00, 0x00, 0x00, 0x0C, 0x6A, 0x50, 0x20, 0x20}), // 3GPP multimedia files (FileType._3GP, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70}), // MPEG-4 v1 (FileType.MP4, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70, 0x69, 0x73, 0x6F, 0x6D}), // 3rd Generation Partnership Project 3GPP (FileType._3GG, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70}), // 3rd Generation Partnership Project 3GPP (FileType._3GP, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70}), // 3rd Generation Partnership Project 3GPP (FileType._3G2, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70}), // Windows Disk Image (FileType.TBI, new byte[] {0x00, 0x00, 0x00, 0x00, 0x14, 0x00, 0x00, 0x00}), // Bitcoin Core wallet.dat file (FileType.DAT, new byte[] {0x00, 0x00, 0x00, 0x00, 0x62, 0x31, 0x05, 0x00, 0x09, 0x00, 0x00, 0x00, 0x00, 0x20, 0x00, 0x00, 0x00, 0x09, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}), // MPEG-4 video_1 (FileType._3GP5, new byte[] {0x00, 0x00, 0x00, 0x18, 0x66, 0x74, 0x79, 0x70}), // MPEG-4 video_1 (FileType.M4V, new byte[] {0x00, 0x00, 0x00, 0x18, 0x66, 0x74, 0x79, 0x70}), // MPEG-4 video_1 (FileType.MP4, new byte[] {0x00, 0x00, 0x00, 0x18, 0x66, 0x74, 0x79, 0x70}), // MPEG-4 video_2 (FileType.MP4, new byte[] {0x00, 0x00, 0x00, 0x1C, 0x66, 0x74, 0x79, 0x70}), // 3GPP2 multimedia files (FileType._3GP, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70}), // Apple audio and video (FileType.M4A, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70, 0x4D, 0x34, 0x41}), // 3rd Generation Partnership Project 3GPP2 (FileType._3GG, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70}), // 3rd Generation Partnership Project 3GPP2 (FileType._3GP, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70}), // 3rd Generation Partnership Project 3GPP2 (FileType._3G2, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70}), // Windows icon|printer spool file (FileType.ICO, new byte[] {0x00, 0x00, 0x01, 0x00}), // Windows icon|printer spool file (FileType.SPL, new byte[] {0x00, 0x00, 0x01, 0x00}), // MPEG video file (FileType.MPG, new byte[] {0x00, 0x00, 0x01, 0xB3}), // DVD video file (FileType.MPG, new byte[] {0x00, 0x00, 0x01, 0xBA}), // DVD video file (FileType.VOB, new byte[] {0x00, 0x00, 0x01, 0xBA}), // Windows cursor (FileType.CUR, new byte[] {0x00, 0x00, 0x02, 0x00}), // Compucon-Singer embroidery design file (FileType.XXX, new byte[] {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}), // QuattroPro spreadsheet (FileType.WB2, new byte[] {0x00, 0x00, 0x02, 0x00}), // Wii images container (FileType.TPL, new byte[] {0x00, 0x20, 0xAF, 0x30}), // Lotus 1-2-3 (v1) (FileType.WK1, new byte[] {0x00, 0x00, 0x02, 0x00, 0x06, 0x04, 0x06, 0x00}), // Lotus 1-2-3 (v3) (FileType.WK3, new byte[] {0x00, 0x00, 0x1A, 0x00, 0x00, 0x10, 0x04, 0x00}), // Lotus 1-2-3 (v4-v5) (FileType.WK4, new byte[] {0x00, 0x00, 0x1A, 0x00, 0x02, 0x10, 0x04, 0x00}), // Lotus 1-2-3 (v4-v5) (FileType.WK5, new byte[] {0x00, 0x00, 0x1A, 0x00, 0x02, 0x10, 0x04, 0x00}), // Lotus 1-2-3 (v9) (FileType._123, new byte[] {0x00, 0x00, 0x1A, 0x00, 0x05, 0x10, 0x04}), // Quark Express (Intel) (FileType.QXD, new byte[] {0x00, 0x00, 0x49, 0x49, 0x58, 0x50, 0x52}), // Quark Express (Motorola) (FileType.QXD, new byte[] {0x00, 0x00, 0x4D, 0x4D, 0x58, 0x50, 0x52}), // Windows Help file_1 (FileType.HLP, new byte[] {0x00, 0x00, 0xFF, 0xFF, 0xFF, 0xFF}), // TrueType font file (FileType.TTF, new byte[] {0x00, 0x01, 0x00, 0x00, 0x00}), // Microsoft Money file (FileType.MNY, new byte[] {0x00, 0x01, 0x00, 0x00, 0x4D, 0x53, 0x49, 0x53, 0x41, 0x4D, 0x20, 0x44, 0x61, 0x74, 0x61, 0x62, 0x61, 0x73, 0x65}), // Microsoft Access 2007 (FileType.ACCDB, new byte[] {0x00, 0x01, 0x00, 0x00, 0x53, 0x74, 0x61, 0x6E, 0x64, 0x61, 0x72, 0x64, 0x20, 0x41, 0x43, 0x45, 0x20, 0x44, 0x42}), // Microsoft Access (FileType.MDB, new byte[] {0x00, 0x01, 0x00, 0x00, 0x53, 0x74, 0x61, 0x6E, 0x64, 0x61, 0x72, 0x64, 0x20, 0x4A, 0x65, 0x74, 0x20, 0x44, 0x42}), // Palm Address Book Archive (FileType.ABA, new byte[] {0x00, 0x01, 0x42, 0x41}), // Palm DateBook Archive (FileType.DBA, new byte[] {0x00, 0x01, 0x42, 0x44}), // Netscape Navigator (v4) database (FileType.DB, new byte[] {0x00, 0x06, 0x15, 0x61, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x04, 0xD2, 0x00, 0x00, 0x10, 0x00}), // FLIC animation (FileType.FLI, new byte[] {0x00, 0x11}), // Netscape Communicator (v4) mail folder (FileType.SNM, new byte[] {0x00, 0x1E, 0x84, 0x90, 0x00, 0x00, 0x00, 0x00}), // PowerPoint presentation subheader_1 (FileType.PPT, new byte[] {0x00, 0x6E, 0x1E, 0xF0}), // Webex Advanced Recording Format (FileType.ARF, new byte[] {0x01, 0x00, 0x02, 0x00}), // Firebird and Interbase database files (FileType.FDB, new byte[] {0x01, 0x00, 0x39, 0x30}), // Firebird and Interbase database files (FileType.GDB, new byte[] {0x01, 0x00, 0x39, 0x30}), // The Bat! Message Base Index (FileType.TBI, new byte[] {0x01, 0x01, 0x47, 0x19, 0xA4, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}), // SQL Data Base (FileType.MDF, new byte[] {0x01, 0x0F, 0x00, 0x00}), // Novell LANalyzer capture file (FileType.TR1, new byte[] {0x01, 0x10}), // Silicon Graphics RGB Bitmap (FileType.RGB, new byte[] {0x01, 0xDA, 0x01, 0x01, 0x00, 0x03}), // Micrografx vector graphic file (FileType.DRW, new byte[] {0x01, 0xFF, 0x02, 0x04, 0x03, 0x02}), // Digital Speech Standard file (FileType.DSS, new byte[] {0x02, 0x64, 0x73, 0x73}), // MapInfo Native Data Format (FileType.DAT, new byte[] {0x03}), // dBASE III file (FileType.DB3, new byte[] {0x03}), // Quicken price history (FileType.QPH, new byte[] {0x03, 0x00, 0x00, 0x00}), // Approach index file (FileType.ADX, new byte[] {0x03, 0x00, 0x00, 0x00, 0x41, 0x50, 0x50, 0x52}), // dBASE IV file (FileType.DB4, new byte[] {0x04}), // Adobe InDesign (FileType.INDD, new byte[] {0x06, 0x06, 0xED, 0xF5, 0xD8, 0x1D, 0x46, 0xE5, 0xBD, 0x31, 0xEF, 0xE7, 0xFE, 0x74, 0xB7, 0x1D}), // Material Exchange Format (FileType.MXF, new byte[] {0x06, 0x0E, 0x2B, 0x34, 0x02, 0x05, 0x01, 0x01, 0x0D, 0x01, 0x02, 0x01, 0x01, 0x02}), // Generic drawing programs (FileType.DRW, new byte[] {0x07}), // SkinCrafter skin (FileType.SKF, new byte[] {0x07, 0x53, 0x4B, 0x46}), // DesignTools 2D Design file (FileType.DTD, new byte[] {0x07, 0x64, 0x74, 0x32, 0x64, 0x64, 0x74, 0x64}), // dBASE IV or dBFast configuration file (FileType.DB, new byte[] {0x08}), // Excel spreadsheet subheader_1 (FileType.XLS, new byte[] {0x09, 0x08, 0x10, 0x00, 0x00, 0x06, 0x05, 0x00}), // ZSOFT Paintbrush file_1 (FileType.PCX, new byte[] {0x0A, 0x02, 0x01, 0x01}), // ZSOFT Paintbrush file_2 (FileType.PCX, new byte[] {0x0A, 0x03, 0x01, 0x01}), // ZSOFT Paintbrush file_3 (FileType.PCX, new byte[] {0x0A, 0x05, 0x01, 0x01}), // MultiBit Bitcoin wallet file (FileType.WALLET, new byte[] {0x0A, 0x16, 0x6F, 0x72, 0x67, 0x2E, 0x62, 0x69, 0x74, 0x63, 0x6F, 0x69, 0x6E, 0x2E, 0x70, 0x72}), // Monochrome Picture TIFF bitmap (FileType.MP, new byte[] {0x0C, 0xED}), // DeskMate Document (FileType.DOC, new byte[] {0x0D, 0x44, 0x4F, 0x43}), // Nero CD compilation (FileType.NRI, new byte[] {0x0E, 0x4E, 0x65, 0x72, 0x6F, 0x49, 0x53, 0x4F}), // DeskMate Worksheet (FileType.WKS, new byte[] {0x0E, 0x57, 0x4B, 0x53}), // PowerPoint presentation subheader_2 (FileType.PPT, new byte[] {0x0F, 0x00, 0xE8, 0x03}), // Sibelius Music - Score (FileType.SIB, new byte[] {0x0F, 0x53, 0x49, 0x42, 0x45, 0x4C, 0x49, 0x55, 0x53}), // Easy CD Creator 5 Layout file (FileType.CL5, new byte[] {0x10, 0x00, 0x00, 0x00}), // Windows prefetch file (FileType.PF, new byte[] {0x11, 0x00, 0x00, 0x00, 0x53, 0x43, 0x43, 0x41}), // Lotus Notes database template (FileType.NTF, new byte[] {0x1A, 0x00, 0x00}), // Lotus Notes database (FileType.NSF, new byte[] {0x1A, 0x00, 0x00, 0x04, 0x00, 0x00}), // LH archive (old vers.-type 1) (FileType.ARC, new byte[] {0x1A, 0x02}), // LH archive (old vers.-type 2) (FileType.ARC, new byte[] {0x1A, 0x03}), // LH archive (old vers.-type 3) (FileType.ARC, new byte[] {0x1A, 0x04}), // LH archive (old vers.-type 4) (FileType.ARC, new byte[] {0x1A, 0x08}), // LH archive (old vers.-type 5) (FileType.ARC, new byte[] {0x1A, 0x09}), // Compressed archive file (FileType.PAK, new byte[] {0x1A, 0x0B}), // WinPharoah capture file (FileType.ETH, new byte[] {0x1A, 0x35, 0x01, 0x00}), // WebM video file (FileType.WEBM, new byte[] {0x1A, 0x45, 0xDF, 0xA3}), // Matroska stream file_1 (FileType.MKV, new byte[] {0x1A, 0x45, 0xDF, 0xA3}), // Matroska stream file_2 (FileType.MKV, new byte[] {0x1A, 0x45, 0xDF, 0xA3, 0x93, 0x42, 0x82, 0x88}), // Runtime Software disk image (FileType.DAT, new byte[] {0x1A, 0x52, 0x54, 0x53, 0x20, 0x43, 0x4F, 0x4D}), // WordStar Version 5.0-6.0 document (FileType.WS, new byte[] {0x1D, 0x7D}), // GZIP archive file (FileType.GZ, new byte[] {0x1F, 0x8B, 0x08}), // VLC Player Skin file (FileType.VLT, new byte[] {0x1F, 0x8B, 0x08}), // Compressed tape archive_1 (FileType.TARZ, new byte[] {0x1F, 0x9D, 0x90}), // Compressed tape archive_2 (FileType.TARZ, new byte[] {0x1F, 0xA0}), // MapInfo Sea Chart (FileType.BSB, new byte[] {0x21}), // AIN Compressed Archive (FileType.AIN, new byte[] {0x21, 0x12}), // Unix archiver (ar)-MS Program Library Common Object File Format (COFF) (FileType.LIB, new byte[] {0x21, 0x3C, 0x61, 0x72, 0x63, 0x68, 0x3E, 0x0A}), // Microsoft Outlook Exchange Offline Storage Folder (FileType.OST, new byte[] {0x21, 0x42, 0x44, 0x4E}), // Cerius2 file (FileType.MSI, new byte[] {0x23, 0x20}), // VMware 4 Virtual Disk description (FileType.VMDK, new byte[] {0x23, 0x20, 0x44, 0x69, 0x73, 0x6B, 0x20, 0x44}), // MS Developer Studio project file (FileType.DSP, new byte[] {0x23, 0x20, 0x4D, 0x69, 0x63, 0x72, 0x6F, 0x73}), // Adaptive Multi-Rate ACELP Codec (GSM) (FileType.AMR, new byte[] {0x23, 0x21, 0x41, 0x4D, 0x52}), // Skype audio compression (FileType.SIL, new byte[] {0x23, 0x21, 0x53, 0x49, 0x4C, 0x4B, 0x0A}), // Radiance High Dynamic Range image file (FileType.HDR, new byte[] {0x23, 0x3F, 0x52, 0x41, 0x44, 0x49, 0x41, 0x4E}), // VBScript Encoded script (FileType.VBE, new byte[] {0x23, 0x40, 0x7E, 0x5E}), // Brother-Babylock-Bernina Home Embroidery (FileType.PEC, new byte[] {0x23, 0x50, 0x45, 0x43, 0x30, 0x30, 0x30, 0x31}), // Brother-Babylock-Bernina Home Embroidery (FileType.PES, new byte[] {0x23, 0x50, 0x45, 0x53, 0x30}), // SPSS Data file (FileType.SAV, new byte[] {0x24, 0x46, 0x4C, 0x32, 0x40, 0x28, 0x23, 0x29}), // Encapsulated PostScript file (FileType.EPS, new byte[] {0x25, 0x21, 0x50, 0x53, 0x2D, 0x41, 0x64, 0x6F}), // PDF file (FileType.PDF, new byte[] {0x25, 0x50, 0x44, 0x46}), // PDF file (FileType.FDF, new byte[] {0x25, 0x50, 0x44, 0x46}), // Fuzzy bitmap (FBM) file (FileType.FBM, new byte[] {0x25, 0x62, 0x69, 0x74, 0x6D, 0x61, 0x70}), // BinHex 4 Compressed Archive (FileType.HQX, new byte[] {0x28, 0x54, 0x68, 0x69, 0x73, 0x20, 0x66, 0x69}), // Symantec Wise Installer log (FileType.LOG, new byte[] {0x2A, 0x2A, 0x2A, 0x20, 0x20, 0x49, 0x6E, 0x73}), // Compressed archive (FileType.LHA, new byte[] {0x2D, 0x6C, 0x68}), // Compressed archive (FileType.LZH, new byte[] {0x2D, 0x6C, 0x68}), // RealPlayer video file (V11+) (FileType.IVR, new byte[] {0x2E, 0x52, 0x45, 0x43}), // RealMedia streaming media (FileType.RM, new byte[] {0x2E, 0x52, 0x4D, 0x46}), // RealMedia streaming media (FileType.RMVB, new byte[] {0x2E, 0x52, 0x4D, 0x46}), // RealAudio file (FileType.RA, new byte[] {0x2E, 0x52, 0x4D, 0x46, 0x00, 0x00, 0x00, 0x12}), // RealAudio streaming media (FileType.RA, new byte[] {0x2E, 0x72, 0x61, 0xFD, 0x00}), // NeXT-Sun Microsystems audio file (FileType.AU, new byte[] {0x2E, 0x73, 0x6E, 0x64}), // Thunderbird-Mozilla Mail Summary File (FileType.MSF, new byte[] {0x2F, 0x2F, 0x20, 0x3C, 0x21, 0x2D, 0x2D, 0x20, 0x3C, 0x6D, 0x64, 0x62, 0x3A, 0x6D, 0x6F, 0x72, 0x6B, 0x3A, 0x7A}), // MS security catalog file (FileType.CAT, new byte[] {0x30}), // Windows Event Viewer file (FileType.EVT, new byte[] {0x30, 0x00, 0x00, 0x00, 0x4C, 0x66, 0x4C, 0x65}), // GEnealogical Data COMmunication (GEDCOM) file (FileType.GED, new byte[] {0x30, 0x20, 0x48, 0x45, 0x41, 0x44}), // Windows Media Audio-Video File (FileType.ASF, new byte[] {0x30, 0x26, 0xB2, 0x75, 0x8E, 0x66, 0xCF, 0x11}), // Windows Media Audio-Video File (FileType.WMA, new byte[] {0x30, 0x26, 0xB2, 0x75, 0x8E, 0x66, 0xCF, 0x11}), // Windows Media Audio-Video File (FileType.WMV, new byte[] {0x30, 0x26, 0xB2, 0x75, 0x8E, 0x66, 0xCF, 0x11}), // National Transfer Format Map (FileType.NTF, new byte[] {0x30, 0x31, 0x4F, 0x52, 0x44, 0x4E, 0x41, 0x4E}), // MS Write file_1 (FileType.WRI, new byte[] {0x31, 0xBE}), // MS Write file_2 (FileType.WRI, new byte[] {0x32, 0xBE}), // Pfaff Home Embroidery (FileType.PCS, new byte[] {0x32, 0x03, 0x10, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x00, 0xFF, 0x00}), // 7-Zip compressed file (FileType._7Z, new byte[] {0x37, 0x7A, 0xBC, 0xAF, 0x27, 0x1C}), // Photoshop image (FileType.PSD, new byte[] {0x38, 0x42, 0x50, 0x53}), // Surfplan kite project file (FileType.SLE, new byte[] {0x3A, 0x56, 0x45, 0x52, 0x53, 0x49, 0x4F, 0x4E}), // Advanced Stream Redirector (FileType.ASX, new byte[] {0x3C}), // BizTalk XML-Data Reduced Schema (FileType.XDR, new byte[] {0x3C}), // AOL HTML mail (FileType.DCI, new byte[] {0x3C, 0x21, 0x64, 0x6F, 0x63, 0x74, 0x79, 0x70}), // Windows Script Component (FileType.WSC, new byte[] {0x3C, 0x3F}), // Windows Visual Stylesheet (FileType.MANIFEST, new byte[] {0x3C, 0x3F, 0x78, 0x6D, 0x6C, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D}), // User Interface Language (FileType.XML, new byte[] {0x3C, 0x3F, 0x78, 0x6D, 0x6C, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D, 0x22, 0x31, 0x2E, 0x30, 0x22, 0x3F, 0x3E}), // MMC Snap-in Control file (FileType.MSC, new byte[] {0x3C, 0x3F, 0x78, 0x6D, 0x6C, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D, 0x22, 0x31, 0x2E, 0x30, 0x22, 0x3F, 0x3E, 0x0D, 0x0A, 0x3C, 0x4D, 0x4D, 0x43, 0x5F, 0x43, 0x6F, 0x6E, 0x73, 0x6F, 0x6C, 0x65, 0x46, 0x69, 0x6C, 0x65, 0x20, 0x43, 0x6F, 0x6E, 0x73, 0x6F, 0x6C, 0x65, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D, 0x22}), // Picasa movie project file (FileType.MXF, new byte[] {0x3C, 0x43, 0x54, 0x72, 0x61, 0x6E, 0x73, 0x54, 0x69, 0x6D, 0x65, 0x6C, 0x69, 0x6E, 0x65, 0x3E}), // Csound music (FileType.CSD, new byte[] {0x3C, 0x43, 0x73, 0x6F, 0x75, 0x6E, 0x64, 0x53, 0x79, 0x6E, 0x74, 0x68, 0x65, 0x73, 0x69, 0x7A}), // Adobe FrameMaker (FileType.FM, new byte[] {0x3C, 0x4D, 0x61, 0x6B, 0x65, 0x72, 0x46, 0x69}), // Adobe FrameMaker (FileType.MIF, new byte[] {0x3C, 0x4D, 0x61, 0x6B, 0x65, 0x72, 0x46, 0x69}), // GPS Exchange (v1.1) (FileType.GPX, new byte[] {0x3C, 0x67, 0x70, 0x78, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D, 0x22, 0x31, 0x2E}), // BASE85 file (FileType.B85, new byte[] {0x3C, 0x7E, 0x36, 0x3C, 0x5C, 0x25, 0x5F, 0x30, 0x67, 0x53, 0x71, 0x68, 0x3B}), // Quatro Pro for Windows 7.0 (FileType.WB3, new byte[] {0x3E, 0x00, 0x03, 0x00, 0xFE, 0xFF, 0x09, 0x00, 0x06}), // Windows Help file_2 (FileType.GID, new byte[] {0x3F, 0x5F, 0x03, 0x00}), // Windows Help file_2 (FileType.HLP, new byte[] {0x3F, 0x5F, 0x03, 0x00}), // EndNote Library File (FileType.ENL, new byte[] {0x40, 0x40, 0x40, 0x20, 0x00, 0x00, 0x40, 0x40, 0x40, 0x40}), // Generic AutoCAD drawing (FileType.DWG, new byte[] {0x41, 0x43, 0x31, 0x30}), // Steganos virtual secure drive (FileType.SLE, new byte[] {0x41, 0x43, 0x76}), // Harvard Graphics symbol graphic (FileType.SYW, new byte[] {0x41, 0x4D, 0x59, 0x4F}), // AOL config files (FileType.ABI, new byte[] {0x41, 0x4F, 0x4C}), // AOL config files (FileType.ABY, new byte[] {0x41, 0x4F, 0x4C}), // AOL config files (FileType.BAG, new byte[] {0x41, 0x4F, 0x4C}), // AOL config files (FileType.IDX, new byte[] {0x41, 0x4F, 0x4C}), // AOL config files (FileType.IND, new byte[] {0x41, 0x4F, 0x4C}), // AOL config files (FileType.PFC, new byte[] {0x41, 0x4F, 0x4C}), // AOL and AIM buddy list (FileType.BAG, new byte[] {0x41, 0x4F, 0x4C, 0x20, 0x46, 0x65, 0x65, 0x64}), // AOL address book (FileType.ABY, new byte[] {0x41, 0x4F, 0x4C, 0x44, 0x42}), // AOL user configuration (FileType.IDX, new byte[] {0x41, 0x4F, 0x4C, 0x44, 0x42}), // AOL client preferences-settings file (FileType.IND, new byte[] {0x41, 0x4F, 0x4C, 0x49, 0x44, 0x58}), // AOL address book index (FileType.ABI, new byte[] {0x41, 0x4F, 0x4C, 0x49, 0x4E, 0x44, 0x45, 0x58}), // AOL personal file cabinet (FileType.ORG, new byte[] {0x41, 0x4F, 0x4C, 0x56, 0x4D, 0x31, 0x30, 0x30}), // AOL personal file cabinet (FileType.PFC, new byte[] {0x41, 0x4F, 0x4C, 0x56, 0x4D, 0x31, 0x30, 0x30}), // AVG6 Integrity database (FileType.DAT, new byte[] {0x41, 0x56, 0x47, 0x36, 0x5F, 0x49, 0x6E, 0x74}), // RIFF Windows Audio (FileType.AVI, new byte[] {0x41, 0x56, 0x49, 0x20, 0x4C, 0x49, 0x53, 0x54}), // FreeArc compressed file (FileType.ARC, new byte[] {0x41, 0x72, 0x43, 0x01}), // vCard (FileType.VCF, new byte[] {0x42, 0x45, 0x47, 0x49, 0x4E, 0x3A, 0x56, 0x43}), // Speedtouch router firmware (FileType.BIN, new byte[] {0x42, 0x4C, 0x49, 0x32, 0x32, 0x33}), // Speedtouch router firmware (FileType.BLI, new byte[] {0x42, 0x4C, 0x49, 0x32, 0x32, 0x33}), // Speedtouch router firmware (FileType.RBI, new byte[] {0x42, 0x4C, 0x49, 0x32, 0x32, 0x33}), // Bitmap image (FileType.BMP, new byte[] {0x42, 0x4D}), // Bitmap image (FileType.DIB, new byte[] {0x42, 0x4D}), // Palmpilot resource file (FileType.PRC, new byte[] {0x42, 0x4F, 0x4F, 0x4B, 0x4D, 0x4F, 0x42, 0x49}), // Better Portable Graphics (FileType.BPG, new byte[] {0x42, 0x50, 0x47, 0xFB}), // bzip2 compressed archive (FileType.BZ2, new byte[] {0x42, 0x5A, 0x68}), // bzip2 compressed archive (FileType.TAR, new byte[] {0x42, 0x5A, 0x68}), // bzip2 compressed archive (FileType.BZ2, new byte[] {0x42, 0x5A, 0x68}), // bzip2 compressed archive (FileType.TBZ2, new byte[] {0x42, 0x5A, 0x68}), // bzip2 compressed archive (FileType.TB2, new byte[] {0x42, 0x5A, 0x68}), // Mac Disk image (BZ2 compressed) (FileType.DMG, new byte[] {0x42, 0x5A, 0x68}), // Puffer ASCII encrypted archive (FileType.APUF, new byte[] {0x42, 0x65, 0x67, 0x69, 0x6E, 0x20, 0x50, 0x75, 0x66, 0x66, 0x65, 0x72}), // Blink compressed archive (FileType.BLI, new byte[] {0x42, 0x6C, 0x69, 0x6E, 0x6B}), // RagTime document (FileType.RTD, new byte[] {0x43, 0x23, 0x2B, 0x44, 0xA4, 0x43, 0x4D, 0xA5}), // EA Interchange Format File (IFF)_3 (FileType.IFF, new byte[] {0x43, 0x41, 0x54, 0x20}), // WordPerfect dictionary (FileType.CBD, new byte[] {0x43, 0x42, 0x46, 0x49, 0x4C, 0x45}), // ISO-9660 CD Disc Image (FileType.ISO, new byte[] {0x43, 0x44, 0x30, 0x30, 0x31}), // RIFF CD audio (FileType.CDA, new byte[] {0x43, 0x44, 0x44, 0x41, 0x66, 0x6D, 0x74, 0x20}), // Compressed ISO CD image (FileType.CSO, new byte[] {0x43, 0x49, 0x53, 0x4F}), // Windows 7 thumbnail (FileType.DB, new byte[] {0x43, 0x4D, 0x4D, 0x4D, 0x15, 0x00, 0x00, 0x00}), // Corel Binary metafile (FileType.CLB, new byte[] {0x43, 0x4D, 0x58, 0x31}), // COM+ Catalog (FileType.CLB, new byte[] {0x43, 0x4F, 0x4D, 0x2B}), // VMware 3 Virtual Disk (FileType.VMDK, new byte[] {0x43, 0x4F, 0x57, 0x44}), // Corel Photopaint file_1 (FileType.CPT, new byte[] {0x43, 0x50, 0x54, 0x37, 0x46, 0x49, 0x4C, 0x45}), // Corel Photopaint file_2 (FileType.CPT, new byte[] {0x43, 0x50, 0x54, 0x46, 0x49, 0x4C, 0x45}), // Win9x registry hive (FileType.DAT, new byte[] {0x43, 0x52, 0x45, 0x47}), // Crush compressed archive (FileType.CRU, new byte[] {0x43, 0x52, 0x55, 0x53, 0x48, 0x20, 0x76}), // Shockwave Flash file (FileType.SWF, new byte[] {0x43, 0x57, 0x53}), // Calculux Indoor lighting project file (FileType.CIN, new byte[] {0x43, 0x61, 0x6C, 0x63, 0x75, 0x6C, 0x75, 0x78, 0x20, 0x49, 0x6E, 0x64, 0x6F, 0x6F, 0x72, 0x20}), // WhereIsIt Catalog (FileType.CTF, new byte[] {0x43, 0x61, 0x74, 0x61, 0x6C, 0x6F, 0x67, 0x20}), // IE History file (FileType.DAT, new byte[] {0x43, 0x6C, 0x69, 0x65, 0x6E, 0x74, 0x20, 0x55}), // Google Chrome Extension (FileType.CRX, new byte[] {0x43, 0x72, 0x32, 0x34}), // Creative Voice (FileType.VOC, new byte[] {0x43, 0x72, 0x65, 0x61, 0x74, 0x69, 0x76, 0x65, 0x20, 0x56, 0x6F, 0x69, 0x63, 0x65, 0x20, 0x46}), // PowerISO Direct-Access-Archive image (FileType.DAA, new byte[] {0x44, 0x41, 0x41, 0x00, 0x00, 0x00, 0x00, 0x00}), // DAX Compressed CD image (FileType.DAX, new byte[] {0x44, 0x41, 0x58, 0x00}), // Palm Zire photo database (FileType.DB, new byte[] {0x44, 0x42, 0x46, 0x48}), // Amiga DiskMasher compressed archive (FileType.DMS, new byte[] {0x44, 0x4D, 0x53, 0x21}), // Amiga disk file (FileType.ADF, new byte[] {0x44, 0x4F, 0x53}), // DST Compression (FileType.DST, new byte[] {0x44, 0x53, 0x54, 0x62}), // DVR-Studio stream file (FileType.DVR, new byte[] {0x44, 0x56, 0x44}), // DVD info file (FileType.IFO, new byte[] {0x44, 0x56, 0x44}), // Elite Plus Commander game file (FileType.CDR, new byte[] {0x45, 0x4C, 0x49, 0x54, 0x45, 0x20, 0x43, 0x6F}), // VideoVCD-VCDImager file (FileType.VCD, new byte[] {0x45, 0x4E, 0x54, 0x52, 0x59, 0x56, 0x43, 0x44}), // Apple ISO 9660-HFS hybrid CD image (FileType.ISO, new byte[] {0x45, 0x52, 0x02, 0x00, 0x00}), // EasyRecovery Saved State file (FileType.DAT, new byte[] {0x45, 0x52, 0x46, 0x53, 0x53, 0x41, 0x56, 0x45}), // DSD Storage Facility audio file (FileType.DSF, new byte[] {0x44, 0x53, 0x44, 0x20}), // MS Document Imaging file (FileType.MDI, new byte[] {0x45, 0x50}), // Expert Witness Compression Format (FileType.E01, new byte[] {0x45, 0x56, 0x46, 0x09, 0x0D, 0x0A, 0xFF, 0x00}), // EnCase Evidence File Format V2 (FileType.Ex01, new byte[] {0x45, 0x56, 0x46, 0x32, 0x0D, 0x0A, 0x81}), // Windows Vista event log (FileType.EVTX, new byte[] {0x45, 0x6C, 0x66, 0x46, 0x69, 0x6C, 0x65, 0x00}), // QuickBooks backup (FileType.QBB, new byte[] {0x45, 0x86, 0x00, 0x00, 0x06, 0x00}), // MS Fax Cover Sheet (FileType.CPE, new byte[] {0x46, 0x41, 0x58, 0x43, 0x4F, 0x56, 0x45, 0x52}), // Fiasco database definition file (FileType.FDB, new byte[] {0x46, 0x44, 0x42, 0x48, 0x00}), // Flash video file (FileType.FLV, new byte[] {0x46, 0x4C, 0x56}), // IFF ANIM file (FileType.ANM, new byte[] {0x46, 0x4F, 0x52, 0x4D}), // EA Interchange Format File (IFF)_1 (FileType.IFF, new byte[] {0x46, 0x4F, 0x52, 0x4D}), // Audio Interchange File (FileType.AIFF, new byte[] {0x46, 0x4F, 0x52, 0x4D, 0x00}), // DAKX Compressed Audio (FileType.DAX, new byte[] {0x46, 0x4F, 0x52, 0x4D, 0x00}), // Shockwave Flash player (FileType.SWF, new byte[] {0x46, 0x57, 0x53}), // Generic e-mail_2 (FileType.EML, new byte[] {0x46, 0x72, 0x6F, 0x6D}), // GIF file (FileType.GIF, new byte[] {0x47, 0x49, 0x46, 0x38}), // GIMP pattern file (FileType.PAT, new byte[] {0x47, 0x50, 0x41, 0x54}), // General Regularly-distributed Information (GRIdded) Binary (FileType.GRB, new byte[] {0x47, 0x52, 0x49, 0x42}), // Show Partner graphics file (FileType.GX2, new byte[] {0x47, 0x58, 0x32}), // Genetec video archive (FileType.G64, new byte[] {0x47, 0x65, 0x6E, 0x65, 0x74, 0x65, 0x63, 0x20, 0x4F, 0x6D, 0x6E, 0x69, 0x63, 0x61, 0x73, 0x74}), // SAS Transport dataset (FileType.XPT, new byte[] {0x48, 0x45, 0x41, 0x44, 0x45, 0x52, 0x20, 0x52, 0x45, 0x43, 0x4F, 0x52, 0x44, 0x2A, 0x2A, 0x2A}), // Harvard Graphics presentation file (FileType.SH3, new byte[] {0x48, 0x48, 0x47, 0x42, 0x31}), // TIFF file_1 (FileType.TIF, new byte[] {0x49, 0x20, 0x49}), // TIFF file_1 (FileType.TIFF, new byte[] {0x49, 0x20, 0x49}), // MP3 audio file (FileType.MP3, new byte[] {0x49, 0x44, 0x33}), // Sprint Music Store audio (FileType.KOZ, new byte[] {0x49, 0x44, 0x33, 0x03, 0x00, 0x00, 0x00}), // Canon RAW file (FileType.CRW, new byte[] {0x49, 0x49, 0x1A, 0x00, 0x00, 0x00, 0x48, 0x45}), // TIFF file_2 (FileType.TIF, new byte[] {0x49, 0x49, 0x2A, 0x00}), // TIFF file_2 (FileType.TIFF, new byte[] {0x49, 0x49, 0x2A, 0x00}), // Windows 7 thumbnail_2 (FileType.DB, new byte[] {0x49, 0x4D, 0x4D, 0x4D, 0x15, 0x00, 0x00, 0x00}), // Install Shield compressed file (FileType.CAB, new byte[] {0x49, 0x53, 0x63, 0x28}), // Install Shield compressed file (FileType.HDR, new byte[] {0x49, 0x53, 0x63, 0x28}), // MS Reader eBook (FileType.LIT, new byte[] {0x49, 0x54, 0x4F, 0x4C, 0x49, 0x54, 0x4C, 0x53}), // MS Compiled HTML Help File (FileType.CHI, new byte[] {0x49, 0x54, 0x53, 0x46}), // MS Compiled HTML Help File (FileType.CHM, new byte[] {0x49, 0x54, 0x53, 0x46}), // Inno Setup Uninstall Log (FileType.DAT, new byte[] {0x49, 0x6E, 0x6E, 0x6F, 0x20, 0x53, 0x65, 0x74}), // Inter@ctive Pager Backup (BlackBerry file (FileType.IPD, new byte[] {0x49, 0x6E, 0x74, 0x65, 0x72, 0x40, 0x63, 0x74, 0x69, 0x76, 0x65, 0x20, 0x50, 0x61, 0x67, 0x65}), // JARCS compressed archive (FileType.JAR, new byte[] {0x4A, 0x41, 0x52, 0x43, 0x53, 0x00}), // AOL ART file_1 (FileType.JG, new byte[] {0x4A, 0x47, 0x03, 0x0E}), // AOL ART file_2 (FileType.JG, new byte[] {0x4A, 0x47, 0x04, 0x0E}), // VMware 4 Virtual Disk (FileType.VMDK, new byte[] {0x4B, 0x44, 0x4D}), // KGB archive (FileType.KGB, new byte[] {0x4B, 0x47, 0x42, 0x5F, 0x61, 0x72, 0x63, 0x68}), // Win9x printer spool file (FileType.SHD, new byte[] {0x4B, 0x49, 0x00, 0x00}), // Windows shortcut file (FileType.LNK, new byte[] {0x4C, 0x00, 0x00, 0x00, 0x01, 0x14, 0x02, 0x00}), // MS COFF relocatable object code (FileType.OBJ, new byte[] {0x4C, 0x01}), // Tajima emboridery (FileType.DST, new byte[] {0x4C, 0x41, 0x3A}), // Windows help file_3 (FileType.GID, new byte[] {0x4C, 0x4E, 0x02, 0x00}), // Windows help file_3 (FileType.HLP, new byte[] {0x4C, 0x4E, 0x02, 0x00}), // EA Interchange Format File (IFF)_2 (FileType.IFF, new byte[] {0x4C, 0x49, 0x53, 0x54}), // DeluxePaint Animation (FileType.ANM, new byte[] {0x4C, 0x50, 0x46, 0x20, 0x00, 0x01}), // Logical File Evidence Format (FileType.E01, new byte[] {0x4C, 0x56, 0x46, 0x09, 0x0D, 0x0A, 0xFF, 0x00}), // Merriam-Webster Pocket Dictionary (FileType.PDB, new byte[] {0x4D, 0x2D, 0x57, 0x20, 0x50, 0x6F, 0x63, 0x6B}), // Mozilla archive (FileType.MAR, new byte[] {0x4D, 0x41, 0x52, 0x31, 0x00}), // Microsoft-MSN MARC archive (FileType.MAR, new byte[] {0x4D, 0x41, 0x52, 0x43}), // MATLAB v5 workspace (FileType.MAT, new byte[] {0x4D, 0x41, 0x54, 0x4C, 0x41, 0x42, 0x20, 0x35, 0x2E, 0x30, 0x20, 0x4D, 0x41, 0x54, 0x2D, 0x66, 0x69, 0x6C, 0x65}), // MAr compressed archive (FileType.MAR, new byte[] {0x4D, 0x41, 0x72, 0x30, 0x00}), // TargetExpress target file (FileType.MTE, new byte[] {0x4D, 0x43, 0x57, 0x20, 0x54, 0x65, 0x63, 0x68, 0x6E, 0x6F, 0x67, 0x6F, 0x6C, 0x69, 0x65, 0x73}), // Windows dump file (FileType.DMP, new byte[] {0x4D, 0x44, 0x4D, 0x50, 0x93, 0xA7}), // Windows dump file (FileType.HDMP, new byte[] {0x4D, 0x44, 0x4D, 0x50, 0x93, 0xA7}), // Milestones project management file (FileType.MLS, new byte[] {0x4D, 0x49, 0x4C, 0x45, 0x53}), // Skype localization data file (FileType.MLS, new byte[] {0x4D, 0x4C, 0x53, 0x57}), // TIFF file_3 (FileType.TIF, new byte[] {0x4D, 0x4D, 0x00, 0x2A}), // TIFF file_3 (FileType.TIFF, new byte[] {0x4D, 0x4D, 0x00, 0x2A}), // TIFF file_4 (FileType.TIF, new byte[] {0x4D, 0x4D, 0x00, 0x2B}), // TIFF file_4 (FileType.TIFF, new byte[] {0x4D, 0x4D, 0x00, 0x2B}), // Yamaha Synthetic music Mobile Application Format (FileType.MMF, new byte[] {0x4D, 0x4D, 0x4D, 0x44, 0x00, 0x00}), // VMware BIOS state file (FileType.NVRAM, new byte[] {0x4D, 0x52, 0x56, 0x4E}), // Microsoft cabinet file (FileType.CAB, new byte[] {0x4D, 0x53, 0x43, 0x46}), // OneNote Package (FileType.ONEPKG, new byte[] {0x4D, 0x53, 0x43, 0x46}), // Powerpoint Packaged Presentation (FileType.PPZ, new byte[] {0x4D, 0x53, 0x43, 0x46}), // MS Access Snapshot Viewer file (FileType.SNP, new byte[] {0x4D, 0x53, 0x43, 0x46}), // OLE-SPSS-Visual C++ library file (FileType.TLB, new byte[] {0x4D, 0x53, 0x46, 0x54, 0x02, 0x00, 0x01, 0x00}), // Microsoft Windows Imaging Format (FileType.WIM, new byte[] {0x4D, 0x53, 0x57, 0x49, 0x4D}), // Sony Compressed Voice File (FileType.CDR, new byte[] {0x4D, 0x53, 0x5F, 0x56, 0x4F, 0x49, 0x43, 0x45}), // Sony Compressed Voice File (FileType.DVF, new byte[] {0x4D, 0x53, 0x5F, 0x56, 0x4F, 0x49, 0x43, 0x45}), // Sony Compressed Voice File (FileType.MSV, new byte[] {0x4D, 0x53, 0x5F, 0x56, 0x4F, 0x49, 0x43, 0x45}), // MIDI sound file (FileType.MID, new byte[] {0x4D, 0x54, 0x68, 0x64}), // MIDI sound file (FileType.MIDI, new byte[] {0x4D, 0x54, 0x68, 0x64}), // Yamaha Piano (FileType.PCS, new byte[] {0x4D, 0x54, 0x68, 0x64}), // CD Stomper Pro label file (FileType.DSN, new byte[] {0x4D, 0x56}), // Milestones project management file_1 (FileType.MLS, new byte[] {0x4D, 0x56, 0x32, 0x31, 0x34}), // Milestones project management file_2 (FileType.MLS, new byte[] {0x4D, 0x56, 0x32, 0x43}), // Windows-DOS executable file (FileType.COM, new byte[] {0x4D, 0x5A}), // Windows-DOS executable file (FileType.DLL, new byte[] {0x4D, 0x5A}), // Windows-DOS executable file (FileType.DRV, new byte[] {0x4D, 0x5A}), // Windows-DOS executable file (FileType.EXE, new byte[] {0x4D, 0x5A}), // Windows-DOS executable file (FileType.PIF, new byte[] {0x4D, 0x5A}), // Windows-DOS executable file (FileType.QTS, new byte[] {0x4D, 0x5A}), // Windows-DOS executable file (FileType.QTX, new byte[] {0x4D, 0x5A}), // Windows-DOS executable file (FileType.SYS, new byte[] {0x4D, 0x5A}), // MS audio compression manager driver (FileType.ACM, new byte[] {0x4D, 0x5A}), // Library cache file (FileType.AX, new byte[] {0x4D, 0x5A}), // Control panel application (FileType.CPL, new byte[] {0x4D, 0x5A}), // Font file (FileType.FON, new byte[] {0x4D, 0x5A}), // ActiveX-OLE Custom Control (FileType.OCX, new byte[] {0x4D, 0x5A}), // OLE object library (FileType.OLB, new byte[] {0x4D, 0x5A}), // Screen saver (FileType.SCR, new byte[] {0x4D, 0x5A}), // VisualBASIC application (FileType.VBX, new byte[] {0x4D, 0x5A}), // Windows virtual device drivers (FileType.VXD, new byte[] {0x4D, 0x5A}), // Windows virtual device drivers (FileType._386, new byte[] {0x4D, 0x5A}), // Acrobat plug-in (FileType.API, new byte[] {0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00}), // DirectShow filter (FileType.AX, new byte[] {0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00}), // Audition graphic filter (FileType.FLT, new byte[] {0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00}), // ZoneAlam data file (FileType.ZAP, new byte[] {0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00, 0x04, 0x00, 0x00, 0x00, 0xFF, 0xFF}), // MS C++ debugging symbols file (FileType.PDB, new byte[] {0x4D, 0x69, 0x63, 0x72, 0x6F, 0x73, 0x6F, 0x66, 0x74, 0x20, 0x43, 0x2F, 0x43, 0x2B, 0x2B, 0x20}), // Visual Studio .NET file (FileType.SLN, new byte[] {0x4D, 0x69, 0x63, 0x72, 0x6F, 0x73, 0x6F, 0x66, 0x74, 0x20, 0x56, 0x69, 0x73, 0x75, 0x61, 0x6C}), // Windows Media Player playlist (FileType.WPL, new byte[] {0x4D, 0x69, 0x63, 0x72, 0x6F, 0x73, 0x6F, 0x66, 0x74, 0x20, 0x57, 0x69, 0x6E, 0x64, 0x6F, 0x77, 0x73, 0x20, 0x4D, 0x65, 0x64, 0x69, 0x61, 0x20, 0x50, 0x6C, 0x61, 0x79, 0x65, 0x72, 0x20, 0x2D, 0x2D, 0x20}), // VMapSource GPS Waypoint Database (FileType.GDB, new byte[] {0x4D, 0x73, 0x52, 0x63, 0x66}), // TomTom traffic data (FileType.DAT, new byte[] {0x4E, 0x41, 0x56, 0x54, 0x52, 0x41, 0x46, 0x46}), // MS Windows journal (FileType.JNT, new byte[] {0x4E, 0x42, 0x2A, 0x00}), // MS Windows journal (FileType.JTP, new byte[] {0x4E, 0x42, 0x2A, 0x00}), // NES Sound file (FileType.NSF, new byte[] {0x4E, 0x45, 0x53, 0x4D, 0x1A, 0x01}), // National Imagery Transmission Format file (FileType.NTF, new byte[] {0x4E, 0x49, 0x54, 0x46, 0x30}), // Agent newsreader character map (FileType.COD, new byte[] {0x4E, 0x61, 0x6D, 0x65, 0x3A, 0x20}), // 1Password 4 Cloud Keychain (FileType.attachment, new byte[] {0x4F, 0x50, 0x43, 0x4C, 0x44, 0x41, 0x54}), // Psion Series 3 Database (FileType.DBF, new byte[] {0x4F, 0x50, 0x4C, 0x44, 0x61, 0x74, 0x61, 0x62}), // OpenType font (FileType.OTF, new byte[] {0x4F, 0x54, 0x54, 0x4F, 0x00}), // Ogg Vorbis Codec compressed file (FileType.OGA, new byte[] {0x4F, 0x67, 0x67, 0x53, 0x00, 0x02, 0x00, 0x00}), // Ogg Vorbis Codec compressed file (FileType.OGG, new byte[] {0x4F, 0x67, 0x67, 0x53, 0x00, 0x02, 0x00, 0x00}), // Ogg Vorbis Codec compressed file (FileType.OGV, new byte[] {0x4F, 0x67, 0x67, 0x53, 0x00, 0x02, 0x00, 0x00}), // Ogg Vorbis Codec compressed file (FileType.OGX, new byte[] {0x4F, 0x67, 0x67, 0x53, 0x00, 0x02, 0x00, 0x00}), // Visio-DisplayWrite 4 text file (FileType.DW4, new byte[] {0x4F, 0x7B}), // Quicken QuickFinder Information File (FileType.IDX, new byte[] {0x50, 0x00, 0x00, 0x00, 0x20, 0x00, 0x00, 0x00}), // Portable Graymap Graphic (FileType.PGM, new byte[] {0x50, 0x35, 0x0A}), // Quake archive file (FileType.PAK, new byte[] {0x50, 0x41, 0x43, 0x4B}), // Windows memory dump (FileType.DMP, new byte[] {0x50, 0x41, 0x47, 0x45, 0x44, 0x55}), // PAX password protected bitmap (FileType.PAX, new byte[] {0x50, 0x41, 0x58}), // PestPatrol data-scan strings (FileType.DAT, new byte[] {0x50, 0x45, 0x53, 0x54}), // PGP disk image (FileType.PGD, new byte[] {0x50, 0x47, 0x50, 0x64, 0x4D, 0x41, 0x49, 0x4E}), // ChromaGraph Graphics Card Bitmap (FileType.IMG, new byte[] {0x50, 0x49, 0x43, 0x54, 0x00, 0x08}), // PKZIP archive_1 (FileType.ZIP, new byte[] {0x50, 0x4B, 0x03, 0x04}), // Android package (FileType.APK, new byte[] {0x50, 0x4B, 0x03, 0x04}), // MacOS X Dashboard Widget (FileType.ZIP, new byte[] {0x50, 0x4B, 0x03, 0x04}), // MS Office Open XML Format Document (FileType.DOCX, new byte[] {0x50, 0x4B, 0x03, 0x04}), // MS Office Open XML Format Document (FileType.PPTX, new byte[] {0x50, 0x4B, 0x03, 0x04}), // MS Office Open XML Format Document (FileType.XLSX, new byte[] {0x50, 0x4B, 0x03, 0x04}), // Java archive_1 (FileType.JAR, new byte[] {0x50, 0x4B, 0x03, 0x04}), // Google Earth session file (FileType.KMZ, new byte[] {0x50, 0x4B, 0x03, 0x04}), // KWord document (FileType.KWD, new byte[] {0x50, 0x4B, 0x03, 0x04}), // OpenDocument template (FileType.ODT, new byte[] {0x50, 0x4B, 0x03, 0x04}), // OpenDocument template (FileType.ODP, new byte[] {0x50, 0x4B, 0x03, 0x04}), // OpenDocument template (FileType.OTT, new byte[] {0x50, 0x4B, 0x03, 0x04}), // Microsoft Open XML paper specification (FileType.OXPS, new byte[] {0x50, 0x4B, 0x03, 0x04}), // OpenOffice documents (FileType.SXC, new byte[] {0x50, 0x4B, 0x03, 0x04}), // OpenOffice documents (FileType.SXD, new byte[] {0x50, 0x4B, 0x03, 0x04}), // OpenOffice documents (FileType.SXI, new byte[] {0x50, 0x4B, 0x03, 0x04}), // OpenOffice documents (FileType.SXW, new byte[] {0x50, 0x4B, 0x03, 0x04}), // StarOffice spreadsheet (FileType.SXC, new byte[] {0x50, 0x4B, 0x03, 0x04}), // Windows Media compressed skin file (FileType.WMZ, new byte[] {0x50, 0x4B, 0x03, 0x04}), // Mozilla Browser Archive (FileType.XPI, new byte[] {0x50, 0x4B, 0x03, 0x04}), // XML paper specification file (FileType.XPS, new byte[] {0x50, 0x4B, 0x03, 0x04}), // eXact Packager Models (FileType.XPT, new byte[] {0x50, 0x4B, 0x03, 0x04}), // Open Publication Structure eBook (FileType.EPUB, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x0A, 0x00, 0x02, 0x00}), // ZLock Pro encrypted ZIP (FileType.ZIP, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x01, 0x00}), // MS Office 2007 documents (FileType.DOCX, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x06, 0x00}), // MS Office 2007 documents (FileType.PPTX, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x06, 0x00}), // MS Office 2007 documents (FileType.XLSX, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x06, 0x00}), // Java archive_2 (FileType.JAR, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x08, 0x00}), // PKZIP archive_2 (FileType.ZIP, new byte[] {0x50, 0x4B, 0x05, 0x06}), // PKZIP archive_3 (FileType.ZIP, new byte[] {0x50, 0x4B, 0x07, 0x08}), // PKLITE archive (FileType.ZIP, new byte[] {0x50, 0x4B, 0x4C, 0x49, 0x54, 0x45}), // PKSFX self-extracting archive (FileType.ZIP, new byte[] {0x50, 0x4B, 0x53, 0x70, 0x58}), // Windows Program Manager group file (FileType.GRP, new byte[] {0x50, 0x4D, 0x43, 0x43}), // Norton Disk Doctor undo file (FileType.DAT, new byte[] {0x50, 0x4E, 0x43, 0x49, 0x55, 0x4E, 0x44, 0x4F}), // Microsoft Windows User State Migration Tool (FileType.PMOCCMOC, new byte[] {0x50, 0x4D, 0x4F, 0x43, 0x43, 0x4D, 0x4F, 0x43}), // Dreamcast Sound Format (FileType.DSF, new byte[] {0x50, 0x53, 0x46, 0x12}), // Puffer encrypted archive (FileType.PUF, new byte[] {0x50, 0x55, 0x46, 0x58}), // Quicken data (FileType.QEL, new byte[] {0x51, 0x45, 0x4C, 0x20}), // Qcow Disk Image (FileType.QEMU, new byte[] {0x51, 0x46, 0x49}), // RIFF Qualcomm PureVoice (FileType.QCP, new byte[] {0x51, 0x4C, 0x43, 0x4D, 0x66, 0x6D, 0x74, 0x20}), // Quicken data file (FileType.ABD, new byte[] {0x51, 0x57, 0x20, 0x56, 0x65, 0x72, 0x2E, 0x20}), // Quicken data file (FileType.QSD, new byte[] {0x51, 0x57, 0x20, 0x56, 0x65, 0x72, 0x2E, 0x20}), // Outlook-Exchange message subheader (FileType.MSG, new byte[] {0x52, 0x00, 0x6F, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x20, 0x00, 0x45, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x72, 0x00, 0x79, 0x00}), // Shareaza (P2P) thumbnail (FileType.DAT, new byte[] {0x52, 0x41, 0x5A, 0x41, 0x54, 0x44, 0x42, 0x31}), // R saved work space (FileType.RDATA, new byte[] {0x52, 0x44, 0x58, 0x32, 0x0A}), // WinNT Registry-Registry Undo files (FileType.REG, new byte[] {0x52, 0x45, 0x47, 0x45, 0x44, 0x49, 0x54}), // WinNT Registry-Registry Undo files (FileType.SUD, new byte[] {0x52, 0x45, 0x47, 0x45, 0x44, 0x49, 0x54}), // Antenna data file (FileType.AD, new byte[] {0x52, 0x45, 0x56, 0x4E, 0x55, 0x4D, 0x3A, 0x2C}), // Windows animated cursor (FileType.ANI, new byte[] {0x52, 0x49, 0x46, 0x46}), // Corel Presentation Exchange metadata (FileType.CMX, new byte[] {0x52, 0x49, 0x46, 0x46}), // CorelDraw document (FileType.CDR, new byte[] {0x52, 0x49, 0x46, 0x46}), // Video CD MPEG movie (FileType.DAT, new byte[] {0x52, 0x49, 0x46, 0x46}), // Micrografx Designer graphic (FileType.DS4, new byte[] {0x52, 0x49, 0x46, 0x46}), // 4X Movie video (FileType._4XM, new byte[] {0x52, 0x49, 0x46, 0x46}), // Resource Interchange File Format (FileType.AVI, new byte[] {0x52, 0x49, 0x46, 0x46}), // Resource Interchange File Format (FileType.CDA, new byte[] {0x52, 0x49, 0x46, 0x46}), // Resource Interchange File Format (FileType.QCP, new byte[] {0x52, 0x49, 0x46, 0x46}), // Resource Interchange File Format (FileType.RMI, new byte[] {0x52, 0x49, 0x46, 0x46}), // Resource Interchange File Format (FileType.WAV, new byte[] {0x52, 0x49, 0x46, 0x46}), // Resource Interchange File Format (FileType.WEBP, new byte[] {0x52, 0x49, 0x46, 0x46}), // RIFF Windows MIDI (FileType.RMI, new byte[] {0x52, 0x4D, 0x49, 0x44, 0x64, 0x61, 0x74, 0x61}), // WinNT Netmon capture file (FileType.CAP, new byte[] {0x52, 0x54, 0x53, 0x53}), // WinRAR compressed archive (FileType.RAR, new byte[] {0x52, 0x61, 0x72, 0x21, 0x1A, 0x07, 0x00}), // Generic e-mail_1 (FileType.EML, new byte[] {0x52, 0x65, 0x74, 0x75, 0x72, 0x6E, 0x2D, 0x50}), // Windows prefetch (FileType.PF, new byte[] {0x53, 0x43, 0x43, 0x41}), // Underground Audio (FileType.AST, new byte[] {0x53, 0x43, 0x48, 0x6C}), // Img Software Bitmap (FileType.IMG, new byte[] {0x53, 0x43, 0x4D, 0x49}), // SMPTE DPX (big endian) (FileType.SDPX, new byte[] {0x53, 0x44, 0x50, 0x58}), // Harvard Graphics presentation (FileType.SHW, new byte[] {0x53, 0x48, 0x4F, 0x57}), // Sietronics CPI XRD document (FileType.CPI, new byte[] {0x53, 0x49, 0x45, 0x54, 0x52, 0x4F, 0x4E, 0x49}), // Flexible Image Transport System (FITS) file (FileType.FITS, new byte[] {0x53, 0x49, 0x4D, 0x50, 0x4C, 0x45, 0x20, 0x20, 0x3D, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x54}), // StuffIt archive (FileType.SIT, new byte[] {0x53, 0x49, 0x54, 0x21, 0x00}), // SmartDraw Drawing file (FileType.SDR, new byte[] {0x53, 0x4D, 0x41, 0x52, 0x54, 0x44, 0x52, 0x57}), // StorageCraft ShadownProtect backup file (FileType.SPF, new byte[] {0x53, 0x50, 0x46, 0x49, 0x00}), // MultiBit Bitcoin blockchain file (FileType.SPVB, new byte[] {0x53, 0x50, 0x56, 0x42}), // SQLite database file (FileType.DB, new byte[] {0x53, 0x51, 0x4C, 0x69, 0x74, 0x65, 0x20, 0x66, 0x6F, 0x72, 0x6D, 0x61, 0x74, 0x20, 0x33, 0x00}), // DB2 conversion file (FileType.CNV, new byte[] {0x53, 0x51, 0x4C, 0x4F, 0x43, 0x4F, 0x4E, 0x56}), // StuffIt compressed archive (FileType.SIT, new byte[] {0x53, 0x74, 0x75, 0x66, 0x66, 0x49, 0x74, 0x20}), // SuperCalc worksheet (FileType.CAL, new byte[] {0x53, 0x75, 0x70, 0x65, 0x72, 0x43, 0x61, 0x6C}), // Wii-GameCube (FileType.THP, new byte[] {0x54, 0x48, 0x50, 0x00}), // GNU Info Reader file (FileType.INFO, new byte[] {0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20}), // Unicode extensions (FileType.UCE, new byte[] {0x55, 0x43, 0x45, 0x58}), // UFA compressed archive (FileType.UFA, new byte[] {0x55, 0x46, 0x41, 0xC6, 0xD2, 0xC1}), // UFO Capture map file (FileType.DAT, new byte[] {0x55, 0x46, 0x4F, 0x4F, 0x72, 0x62, 0x69, 0x74}), // Visual C PreCompiled header (FileType.PCH, new byte[] {0x56, 0x43, 0x50, 0x43, 0x48, 0x30}), // Visual Basic User-defined Control file (FileType.CTL, new byte[] {0x56, 0x45, 0x52, 0x53, 0x49, 0x4F, 0x4E, 0x20}), // MapInfo Interchange Format file (FileType.MIF, new byte[] {0x56, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x20}), // SPSS template (FileType.SCT, new byte[] {0x57, 0x04, 0x00, 0x00, 0x53, 0x50, 0x53, 0x53, 0x20, 0x74, 0x65, 0x6D, 0x70, 0x6C, 0x61, 0x74}), // RIFF Windows Audio (FileType.WAV, new byte[] {0x57, 0x41, 0x56, 0x45, 0x66, 0x6D, 0x74, 0x20}), // RIFF WebP (FileType.WEBP, new byte[] {0x57, 0x45, 0x42, 0x50}), // Walkman MP3 file (FileType.DAT, new byte[] {0x57, 0x4D, 0x4D, 0x50}), // WordStar for Windows file (FileType.WS2, new byte[] {0x57, 0x53, 0x32, 0x30, 0x30, 0x30}), // WinZip compressed archive (FileType.ZIP, new byte[] {0x57, 0x69, 0x6E, 0x5A, 0x69, 0x70}), // Lotus WordPro file (FileType.LWP, new byte[] {0x57, 0x6F, 0x72, 0x64, 0x50, 0x72, 0x6F}), // Exchange e-mail (FileType.EML, new byte[] {0x58, 0x2D}), // Packet sniffer files (FileType.CAP, new byte[] {0x58, 0x43, 0x50, 0x00}), // XPCOM libraries (FileType.XPT, new byte[] {0x58, 0x50, 0x43, 0x4F, 0x4D, 0x0A, 0x54, 0x79}), // SMPTE DPX file (little endian) (FileType.DPX, new byte[] {0x58, 0x50, 0x44, 0x53}), // MS Publisher (FileType.BDR, new byte[] {0x58, 0x54}), // ZOO compressed archive (FileType.ZOO, new byte[] {0x5A, 0x4F, 0x4F, 0x20}), // Macromedia Shockwave Flash (FileType.SWF, new byte[] {0x5A, 0x57, 0x53}), // MS Exchange configuration file (FileType.ECF, new byte[] {0x5B, 0x47, 0x65, 0x6E, 0x65, 0x72, 0x61, 0x6C}), // Visual C++ Workbench Info File (FileType.VCW, new byte[] {0x5B, 0x4D, 0x53, 0x56, 0x43}), // Dial-up networking file (FileType.DUN, new byte[] {0x5B, 0x50, 0x68, 0x6F, 0x6E, 0x65, 0x5D}), // Lotus AMI Pro document_1 (FileType.SAM, new byte[] {0x5B, 0x56, 0x45, 0x52, 0x5D}), // VocalTec VoIP media file (FileType.VMD, new byte[] {0x5B, 0x56, 0x4D, 0x44, 0x5D}), // Microsoft Code Page Translation file (FileType.CPX, new byte[] {0x5B, 0x57, 0x69, 0x6E, 0x64, 0x6F, 0x77, 0x73}), // Flight Simulator Aircraft Configuration (FileType.CFG, new byte[] {0x5B, 0x66, 0x6C, 0x74, 0x73, 0x69, 0x6D, 0x2E}), // WinAmp Playlist (FileType.PLS, new byte[] {0x5B, 0x70, 0x6C, 0x61, 0x79, 0x6C, 0x69, 0x73, 0x74, 0x5D}), // Lotus AMI Pro document_2 (FileType.SAM, new byte[] {0x5B, 0x76, 0x65, 0x72, 0x5D}), // Husqvarna Designer (FileType.HUS, new byte[] {0x5D, 0xFC, 0xC8, 0x00}), // Jar archive (FileType.JAR, new byte[] {0x5F, 0x27, 0xA8, 0x89}), // EnCase case file (FileType.CAS, new byte[] {0x5F, 0x43, 0x41, 0x53, 0x45, 0x5F}), // EnCase case file (FileType.CBK, new byte[] {0x5F, 0x43, 0x41, 0x53, 0x45, 0x5F}), // Compressed archive file (FileType.ARJ, new byte[] {0x60, 0xEA}), // UUencoded BASE64 file (FileType.b64, new byte[] {0x62, 0x65, 0x67, 0x69, 0x6E, 0x2D, 0x62, 0x61, 0x73, 0x65, 0x36, 0x34}), // Apple Core Audio File (FileType.CAF, new byte[] {0x63, 0x61, 0x66, 0x66}), // Macintosh encrypted Disk image (v1) (FileType.DMG, new byte[] {0x63, 0x64, 0x73, 0x61, 0x65, 0x6E, 0x63, 0x72}), // Virtual PC HD image (FileType.VHD, new byte[] {0x63, 0x6F, 0x6E, 0x65, 0x63, 0x74, 0x69, 0x78}), // Photoshop Custom Shape (FileType.CSH, new byte[] {0x63, 0x75, 0x73, 0x68, 0x00, 0x00, 0x00, 0x02}), // Intel PROset-Wireless Profile (FileType.P10, new byte[] {0x64, 0x00, 0x00, 0x00}), // Torrent file (FileType.TORRENT, new byte[] {0x64, 0x38, 0x3A, 0x61, 0x6E, 0x6E, 0x6F, 0x75, 0x6E, 0x63, 0x65}), // Dalvik (Android) executable file (FileType.dex, new byte[] {0x64, 0x65, 0x78, 0x0A}), // Audacity audio file (FileType.AU, new byte[] {0x64, 0x6E, 0x73, 0x2E}), // MS Visual Studio workspace file (FileType.DSW, new byte[] {0x64, 0x73, 0x77, 0x66, 0x69, 0x6C, 0x65}), // Macintosh encrypted Disk image (v2) (FileType.DMG, new byte[] {0x65, 0x6E, 0x63, 0x72, 0x63, 0x64, 0x73, 0x61}), // WinNT printer spool file (FileType.SHD, new byte[] {0x66, 0x49, 0x00, 0x00}), // Free Lossless Audio Codec file (FileType.FLAC, new byte[] {0x66, 0x4C, 0x61, 0x43, 0x00, 0x00, 0x00, 0x22}), // MPEG-4 video file_1 (FileType.MP4, new byte[] {0x66, 0x74, 0x79, 0x70, 0x33, 0x67, 0x70, 0x35}), // Apple Lossless Audio Codec file (FileType.M4A, new byte[] {0x66, 0x74, 0x79, 0x70, 0x4D, 0x34, 0x41, 0x20}), // ISO Media-MPEG v4-iTunes AVC-LC (FileType.FLV, new byte[] {0x66, 0x74, 0x79, 0x70, 0x4D, 0x34, 0x56, 0x20}), // ISO Media-MPEG v4-iTunes AVC-LC (FileType.M4V, new byte[] {0x66, 0x74, 0x79, 0x70, 0x4D, 0x34, 0x56, 0x20}), // MPEG-4 video file_2 (FileType.MP4, new byte[] {0x66, 0x74, 0x79, 0x70, 0x4D, 0x53, 0x4E, 0x56}), // ISO Base Media file (MPEG-4) v1 (FileType.MP4, new byte[] {0x66, 0x74, 0x79, 0x70, 0x69, 0x73, 0x6F, 0x6D}), // MPEG-4 video-QuickTime file (FileType.M4V, new byte[] {0x66, 0x74, 0x79, 0x70, 0x6D, 0x70, 0x34, 0x32}), // QuickTime movie_7 (FileType.MOV, new byte[] {0x66, 0x74, 0x79, 0x70, 0x71, 0x74, 0x20, 0x20}), // Win2000-XP printer spool file (FileType.SHD, new byte[] {0x67, 0x49, 0x00, 0x00}), // GIMP file (FileType.XCF, new byte[] {0x67, 0x69, 0x6d, 0x70, 0x20, 0x78, 0x63, 0x66}), // Win Server 2003 printer spool file (FileType.SHD, new byte[] {0x68, 0x49, 0x00, 0x00}), // Skype user data file (FileType.DBB, new byte[] {0x6C, 0x33, 0x33, 0x6C}), // QuickTime movie_1 (FileType.MOV, new byte[] {0x6D, 0x6F, 0x6F, 0x76}), // QuickTime movie_2 (FileType.MOV, new byte[] {0x66, 0x72, 0x65, 0x65}), // QuickTime movie_3 (FileType.MOV, new byte[] {0x6D, 0x64, 0x61, 0x74}), // QuickTime movie_4 (FileType.MOV, new byte[] {0x77, 0x69, 0x64, 0x65}), // QuickTime movie_5 (FileType.MOV, new byte[] {0x70, 0x6E, 0x6F, 0x74}), // QuickTime movie_6 (FileType.MOV, new byte[] {0x73, 0x6B, 0x69, 0x70}), // Internet Explorer v11 Tracking Protection List (FileType.TPL, new byte[] {0x6D, 0x73, 0x46, 0x69, 0x6C, 0x74, 0x65, 0x72, 0x4C, 0x69, 0x73, 0x74}), // MultiBit Bitcoin wallet information (FileType.INFO, new byte[] {0x6D, 0x75, 0x6C, 0x74, 0x69, 0x42, 0x69, 0x74, 0x2E, 0x69, 0x6E, 0x66, 0x6F}), // WinNT registry file (FileType.DAT, new byte[] {0x72, 0x65, 0x67, 0x66}), // Sonic Foundry Acid Music File (FileType.AC, new byte[] {0x72, 0x69, 0x66, 0x66}), // RealMedia metafile (FileType.RAM, new byte[] {0x72, 0x74, 0x73, 0x70, 0x3A, 0x2F, 0x2F}), // Allegro Generic Packfile (compressed) (FileType.DAT, new byte[] {0x73, 0x6C, 0x68, 0x21}), // Allegro Generic Packfile (uncompressed) (FileType.DAT, new byte[] {0x73, 0x6C, 0x68, 0x2E}), // PalmOS SuperMemo (FileType.PDB, new byte[] {0x73, 0x6D, 0x5F}), // STL (STereoLithography) file (FileType.STL, new byte[] {0x73, 0x6F, 0x6C, 0x69, 0x64}), // CALS raster bitmap (FileType.CAL, new byte[] {0x73, 0x72, 0x63, 0x64, 0x6F, 0x63, 0x69, 0x64}), // PowerBASIC Debugger Symbols (FileType.PDB, new byte[] {0x73, 0x7A, 0x65, 0x7A}), // PathWay Map file (FileType.PRC, new byte[] {0x74, 0x42, 0x4D, 0x50, 0x4B, 0x6E, 0x57, 0x72}), // TrueType font (FileType.TTF, new byte[] {0x74, 0x72, 0x75, 0x65, 0x00}), // Tape Archive (FileType.TAR, new byte[] {0x75, 0x73, 0x74, 0x61, 0x72}), // OpenEXR bitmap image (FileType.EXR, new byte[] {0x76, 0x2F, 0x31, 0x01}), // Qimage filter (FileType.FLT, new byte[] {0x76, 0x32, 0x30, 0x30, 0x33, 0x2E, 0x31, 0x30}), // MacOS X image file (FileType.DMG, new byte[] {0x78, 0x01, 0x73, 0x0D, 0x62, 0x62, 0x60}), // eXtensible ARchive file (FileType.XAR, new byte[] {0x78, 0x61, 0x72, 0x21}), // ZoomBrowser Image Index (FileType.INFO, new byte[] {0x7A, 0x62, 0x65, 0x78}), // Windows application log (FileType.LGC, new byte[] {0x7B, 0x0D, 0x0A, 0x6F, 0x20}), // Windows application log (FileType.LGD, new byte[] {0x7B, 0x0D, 0x0A, 0x6F, 0x20}), // MS WinMobile personal note (FileType.PWI, new byte[] {0x7B, 0x5C, 0x70, 0x77, 0x69}), // Rich Text Format (FileType.RTF, new byte[] {0x7B, 0x5C, 0x72, 0x74, 0x66, 0x31}), // Corel Paint Shop Pro image (FileType.PSP, new byte[] {0x7E, 0x42, 0x4B, 0x00}), // Easy Street Draw diagram file (FileType.ESD, new byte[] {0x7E, 0x45, 0x53, 0x44, 0x77, 0xF6, 0x85, 0x3E, 0xBF, 0x6A, 0xD2, 0x11, 0x45, 0x61, 0x73, 0x79, 0x20, 0x53, 0x74, 0x72, 0x65, 0x65, 0x74, 0x20, 0x44, 0x72, 0x61, 0x77}), // Digital Watchdog DW-TP-500G audio (FileType.IMG, new byte[] {0x7E, 0x74, 0x2C, 0x01, 0x50, 0x70, 0x02, 0x4D, 0x52}), // Relocatable object code (FileType.OBJ, new byte[] {0x80}), // Dreamcast audio (FileType.ADX, new byte[] {0x80, 0x00, 0x00, 0x20, 0x03, 0x12, 0x04}), // Kodak Cineon image (FileType.CIN, new byte[] {0x80, 0x2A, 0x5F, 0xD7}), // Outlook Express address book (Win95) (FileType.WAB, new byte[] {0x81, 0x32, 0x84, 0xC1, 0x85, 0x05, 0xD0, 0x11}), // WordPerfect text (FileType.WPF, new byte[] {0x81, 0xCD, 0xAB}), // PNG image (FileType.PNG, new byte[] {0x89, 0x50, 0x4E, 0x47, 0x0D, 0x0A, 0x1A, 0x0A}), // MS Answer Wizard (FileType.AW, new byte[] {0x8A, 0x01, 0x09, 0x00, 0x00, 0x00, 0xE1, 0x08}), // Hamarsoft compressed archive (FileType.HAP, new byte[] {0x91, 0x33, 0x48, 0x46}), // PGP secret keyring_1 (FileType.SKR, new byte[] {0x95, 0x00}), // PGP secret keyring_2 (FileType.SKR, new byte[] {0x95, 0x01}), // JBOG2 image file (FileType.JB2, new byte[] {0x97, 0x4A, 0x42, 0x32, 0x0D, 0x0A, 0x1A, 0x0A}), // GPG public keyring (FileType.GPG, new byte[] {0x99}), // PGP public keyring (FileType.PKR, new byte[] {0x99, 0x01}), // Outlook address file (FileType.WAB, new byte[] {0x9C, 0xCB, 0xCB, 0x8D, 0x13, 0x75, 0xD2, 0x11}), // Access Data FTK evidence (FileType.DAT, new byte[] {0xA9, 0x0D, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}), // Quicken data (FileType.QDF, new byte[] {0xAC, 0x9E, 0xBD, 0x8F, 0x00, 0x00}), // PowerPoint presentation subheader_3 (FileType.PPT, new byte[] {0xA0, 0x46, 0x1D, 0xF0}), // BGBlitz position database file (FileType.PDB, new byte[] {0xAC, 0xED, 0x00, 0x05, 0x73, 0x72, 0x00, 0x12}), // Win95 password file (FileType.PWL, new byte[] {0xB0, 0x4D, 0x46, 0x43}), // PCX bitmap (FileType.DCX, new byte[] {0xB1, 0x68, 0xDE, 0x3A}), // Acronis True Image_1 (FileType.TIB, new byte[] {0xB4, 0x6E, 0x68, 0x44}), // Windows calendar (FileType.CAL, new byte[] {0xB5, 0xA2, 0xB0, 0xB3, 0xB3, 0xB0, 0xA5, 0xB5}), // InstallShield Script (FileType.INS, new byte[] {0xB8, 0xC9, 0x0C, 0x00}), // MS Write file_3 (FileType.WRI, new byte[] {0xBE, 0x00, 0x00, 0x00, 0xAB}), // Palm Desktop DateBook (FileType.DAT, new byte[] {0xBE, 0xBA, 0xFE, 0xCA, 0x0F, 0x50, 0x61, 0x6C, 0x6D, 0x53, 0x47, 0x20, 0x44, 0x61, 0x74, 0x61}), // MS Agent Character file (FileType.ACS, new byte[] {0xC3, 0xAB, 0xCD, 0xAB}), // Adobe encapsulated PostScript (FileType.EPS, new byte[] {0xC5, 0xD0, 0xD3, 0xC6}), // Jeppesen FliteLog file (FileType.LBK, new byte[] {0xC8, 0x00, 0x79, 0x00}), // Java bytecode (FileType.CLASS, new byte[] {0xCA, 0xFE, 0xBA, 0xBE}), // Acronis True Image_2 (FileType.TIB, new byte[] {0xCE, 0x24, 0xB9, 0xA2, 0x20, 0x00, 0x00, 0x00}), // Java Cryptography Extension keystore (FileType.JCEKS, new byte[] {0xCE, 0xCE, 0xCE, 0xCE}), // Perfect Office document (FileType.DOC, new byte[] {0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1, 0x00}), // Outlook Express e-mail folder (FileType.DBX, new byte[] {0xCF, 0xAD, 0x12, 0xFE}), // Microsoft Office document (FileType.DOC, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Microsoft Office document (FileType.DOT, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Microsoft Office document (FileType.PPS, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Microsoft Office document (FileType.PPT, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Microsoft Office document (FileType.XLA, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Microsoft Office document (FileType.XLS, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Microsoft Office document (FileType.WIZ, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // CaseWare Working Papers (FileType.AC_, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Access project file (FileType.ADP, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Lotus-IBM Approach 97 file (FileType.APR, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // MSWorks database file (FileType.DB, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Microsoft Common Console Document (FileType.MSC, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Microsoft Installer package (FileType.MSI, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Microsoft Installer Patch (FileType.MSP, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Minitab data file (FileType.MTW, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // ArcMap GIS project file (FileType.MXD, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Developer Studio File Options file (FileType.OPT, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // MS Publisher file (FileType.PUB, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Revit Project file (FileType.RVT, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Visual Studio Solution User Options file (FileType.SOU, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // SPSS output file (FileType.SPO, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // Visio file (FileType.VSD, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // MSWorks text document (FileType.WPS, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}), // WinPharoah filter file (FileType.FTR, new byte[] {0xD2, 0x0A, 0x00, 0x00}), // AOL history|typed URL files (FileType.ARL, new byte[] {0xD4, 0x2A}), // AOL history|typed URL files (FileType.AUT, new byte[] {0xD4, 0x2A}), // Windows graphics metafile (FileType.WMF, new byte[] {0xD7, 0xCD, 0xC6, 0x9A}), // Word 2.0 file (FileType.DOC, new byte[] {0xDB, 0xA5, 0x2D, 0x00}), // Corel color palette (FileType.CPL, new byte[] {0xDC, 0xDC}), // eFax file (FileType.EFX, new byte[] {0xDC, 0xFE}), // Amiga icon (FileType.INFO, new byte[] {0xE3, 0x10, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00}), // Win98 password file (FileType.PWL, new byte[] {0xE3, 0x82, 0x85, 0x96}), // MS OneNote note (FileType.ONE, new byte[] {0xE4, 0x52, 0x5C, 0x7B, 0x8C, 0xD8, 0xA7, 0x4D}), // Windows executable file_1 (FileType.COM, new byte[] {0xE8}), // Windows executable file_1 (FileType.SYS, new byte[] {0xE8}), // Windows executable file_2 (FileType.COM, new byte[] {0xE9}), // Windows executable file_2 (FileType.SYS, new byte[] {0xE9}), // Windows executable file_3 (FileType.COM, new byte[] {0xEB}), // Windows executable file_3 (FileType.SYS, new byte[] {0xEB}), // GEM Raster file (FileType.IMG, new byte[] {0xEB, 0x3C, 0x90, 0x2A}), // Word document subheader (FileType.DOC, new byte[] {0xEC, 0xA5, 0xC1, 0x00}), // RedHat Package Manager (FileType.RPM, new byte[] {0xED, 0xAB, 0xEE, 0xDB}), // Windows Script Component (UTF-8)_1 (FileType.WSF, new byte[] {0xEF, 0xBB, 0xBF, 0x3C}), // Windows Script Component (UTF-8)_2 (FileType.WSC, new byte[] {0xEF, 0xBB, 0xBF, 0x3C, 0x3F}), // Bitcoin-Qt blockchain block file (FileType.DAT, new byte[] {0xF9, 0xBE, 0xB4, 0xD9}), // XZ archive (FileType.XZ, new byte[] {0xFD, 0x37, 0x7A, 0x58, 0x5A, 0x00}), // MS Publisher subheader (FileType.PUB, new byte[] {0xFD, 0x37, 0x7A, 0x58, 0x5A, 0x00}), // Thumbs.db subheader (FileType.DB, new byte[] {0xFD, 0xFF, 0xFF, 0xFF}), // MS Publisher file subheader (FileType.PUB, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x02}), // Visual Studio Solution subheader (FileType.SUO, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x04}), // PowerPoint presentation subheader_4 (FileType.PPT, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x0E, 0x00, 0x00, 0x00}), // Excel spreadsheet subheader_2 (FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x10}), // PowerPoint presentation subheader_5 (FileType.PPT, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x1C, 0x00, 0x00, 0x00}), // Excel spreadsheet subheader_3 (FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x1F}), // Developer Studio subheader (FileType.OPT, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x20}), // Excel spreadsheet subheader_4 (FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x22}), // Excel spreadsheet subheader_5 (FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x23}), // Excel spreadsheet subheader_6 (FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x28}), // Excel spreadsheet subheader_7 (FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x29}), // PowerPoint presentation subheader_6 (FileType.PPT, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x43, 0x00, 0x00, 0x00}), // Symantex Ghost image file (FileType.GHO, new byte[] {0xFE, 0xEF}), // Symantex Ghost image file (FileType.GHS, new byte[] {0xFE, 0xEF}), // Windows executable (FileType.SYS, new byte[] {0xFF}), // Works for Windows spreadsheet (FileType.WKS, new byte[] {0xFF, 0x00, 0x02, 0x00, 0x04, 0x04, 0x05, 0x54}), // QuickReport Report (FileType.QRP, new byte[] {0xFF, 0x0A, 0x00}), // Windows international code page (FileType.CPI, new byte[] {0xFF, 0x46, 0x4F, 0x4E, 0x54}), // Keyboard driver file (FileType.SYS, new byte[] {0xFF, 0x4B, 0x45, 0x59, 0x42, 0x20, 0x20, 0x20}), // WordPerfect text and graphics (FileType.WP, new byte[] {0xFF, 0x57, 0x50, 0x43}), // WordPerfect text and graphics (FileType.WPD, new byte[] {0xFF, 0x57, 0x50, 0x43}), // WordPerfect text and graphics (FileType.WPG, new byte[] {0xFF, 0x57, 0x50, 0x43}), // WordPerfect text and graphics (FileType.WPP, new byte[] {0xFF, 0x57, 0x50, 0x43}), // WordPerfect text and graphics (FileType.WP5, new byte[] {0xFF, 0x57, 0x50, 0x43}), // WordPerfect text and graphics (FileType.WP6, new byte[] {0xFF, 0x57, 0x50, 0x43}), // JPEG-EXIF-SPIFF images (FileType.JFIF, new byte[] {0xFF, 0xD8, 0xFF}), // JPEG-EXIF-SPIFF images (FileType.JPE, new byte[] {0xFF, 0xD8, 0xFF}), // JPEG-EXIF-SPIFF images (FileType.JPEG, new byte[] {0xFF, 0xD8, 0xFF}), // JPEG-EXIF-SPIFF images (FileType.JPG, new byte[] {0xFF, 0xD8, 0xFF}), // MPEG-4 AAC audio (FileType.AAC, new byte[] {0xFF, 0xF1}), // MPEG-2 AAC audio (FileType.AAC, new byte[] {0xFF, 0xF9}), // Windows Registry file (FileType.REG, new byte[] {0xFF, 0xFE}), // MSinfo file (FileType.MOF, new byte[] {0xFF, 0xFE, 0x23, 0x00, 0x6C, 0x00, 0x69, 0x00}), // DOS system driver (FileType.SYS, new byte[] {0xFF, 0xFF, 0xFF, 0xFF}), };}}