mirror of
https://github.com/wabbajack-tools/wabbajack.git
synced 2024-08-30 18:42:17 +00:00
2369 lines
80 KiB
C#
2369 lines
80 KiB
C#
|
|
namespace Wabbajack.Common.FileSignatures {
|
|
public static class Definitions {
|
|
public enum FileType { _123,
|
|
_386,
|
|
_3G2,
|
|
_3GG,
|
|
_3GP,
|
|
_3GP5,
|
|
_4XM,
|
|
_7Z,
|
|
AAC,
|
|
ABA,
|
|
ABD,
|
|
ABI,
|
|
ABY,
|
|
AC,
|
|
AC_,
|
|
ACCDB,
|
|
ACM,
|
|
ACS,
|
|
AD,
|
|
ADF,
|
|
ADP,
|
|
ADX,
|
|
AIFF,
|
|
AIN,
|
|
AMR,
|
|
ANI,
|
|
ANM,
|
|
API,
|
|
APK,
|
|
APR,
|
|
APUF,
|
|
ARC,
|
|
ARF,
|
|
ARJ,
|
|
ARL,
|
|
ASF,
|
|
AST,
|
|
ASX,
|
|
attachment,
|
|
AU,
|
|
AUT,
|
|
AVI,
|
|
AW,
|
|
AX,
|
|
b64,
|
|
B85,
|
|
BA2,
|
|
BAG,
|
|
BDR,
|
|
BIN,
|
|
BLI,
|
|
BMP,
|
|
BPG,
|
|
BSA,
|
|
BSB,
|
|
BZ2,
|
|
CAB,
|
|
CAF,
|
|
CAL,
|
|
CAP,
|
|
CAS,
|
|
CAT,
|
|
CBD,
|
|
CBK,
|
|
CDA,
|
|
CDR,
|
|
CFG,
|
|
CHI,
|
|
CHM,
|
|
CIN,
|
|
CL5,
|
|
CLASS,
|
|
CLB,
|
|
CMX,
|
|
CNV,
|
|
COD,
|
|
COM,
|
|
CPE,
|
|
CPI,
|
|
CPL,
|
|
CPT,
|
|
CPX,
|
|
CRU,
|
|
CRW,
|
|
CRX,
|
|
CSD,
|
|
CSH,
|
|
CSO,
|
|
CTF,
|
|
CTL,
|
|
CUR,
|
|
DAA,
|
|
DAT,
|
|
DAX,
|
|
DB,
|
|
DB3,
|
|
DB4,
|
|
DBA,
|
|
DBB,
|
|
DBF,
|
|
DBX,
|
|
DCI,
|
|
DCX,
|
|
dex,
|
|
DIB,
|
|
DLL,
|
|
DMG,
|
|
DMP,
|
|
DMS,
|
|
DOC,
|
|
DOCX,
|
|
DOT,
|
|
DPX,
|
|
DRV,
|
|
DRW,
|
|
DS4,
|
|
DSF,
|
|
DSN,
|
|
DSP,
|
|
DSS,
|
|
DST,
|
|
DSW,
|
|
DTD,
|
|
DUN,
|
|
DVF,
|
|
DVR,
|
|
DW4,
|
|
DWG,
|
|
E01,
|
|
ECF,
|
|
EFX,
|
|
EML,
|
|
ENL,
|
|
EPS,
|
|
EPUB,
|
|
ESD,
|
|
ETH,
|
|
EVT,
|
|
EVTX,
|
|
Ex01,
|
|
EXE,
|
|
EXR,
|
|
FBM,
|
|
FDB,
|
|
FDF,
|
|
FITS,
|
|
FLAC,
|
|
FLI,
|
|
FLT,
|
|
FLV,
|
|
FM,
|
|
FON,
|
|
FTR,
|
|
G64,
|
|
GDB,
|
|
GED,
|
|
GHO,
|
|
GHS,
|
|
GID,
|
|
GIF,
|
|
GPG,
|
|
GPX,
|
|
GRB,
|
|
GRP,
|
|
GX2,
|
|
GZ,
|
|
HAP,
|
|
HDMP,
|
|
HDR,
|
|
HLP,
|
|
HQX,
|
|
HUS,
|
|
ICO,
|
|
IDX,
|
|
IFF,
|
|
IFO,
|
|
IMG,
|
|
IND,
|
|
INDD,
|
|
INFO,
|
|
INS,
|
|
IPD,
|
|
ISO,
|
|
IVR,
|
|
JAR,
|
|
JB2,
|
|
JCEKS,
|
|
JFIF,
|
|
JG,
|
|
JNT,
|
|
JP2,
|
|
JPE,
|
|
JPEG,
|
|
JPG,
|
|
JTP,
|
|
KGB,
|
|
KMZ,
|
|
KOZ,
|
|
KWD,
|
|
LBK,
|
|
LGC,
|
|
LGD,
|
|
LHA,
|
|
LIB,
|
|
LIT,
|
|
LNK,
|
|
LOG,
|
|
LWP,
|
|
LZH,
|
|
M4A,
|
|
M4V,
|
|
MANIFEST,
|
|
MAR,
|
|
MAT,
|
|
MDB,
|
|
MDF,
|
|
MDI,
|
|
MID,
|
|
MIDI,
|
|
MIF,
|
|
MKV,
|
|
MLS,
|
|
MMF,
|
|
MNY,
|
|
MOF,
|
|
MOV,
|
|
MP,
|
|
MP3,
|
|
MP4,
|
|
MPG,
|
|
MSC,
|
|
MSF,
|
|
MSG,
|
|
MSI,
|
|
MSP,
|
|
MSV,
|
|
MTE,
|
|
MTW,
|
|
MXD,
|
|
MXF,
|
|
NRI,
|
|
NSF,
|
|
NTF,
|
|
NVRAM,
|
|
OBJ,
|
|
OCX,
|
|
ODP,
|
|
ODT,
|
|
OGA,
|
|
OGG,
|
|
OGV,
|
|
OGX,
|
|
OLB,
|
|
ONE,
|
|
ONEPKG,
|
|
OPT,
|
|
ORG,
|
|
OST,
|
|
OTF,
|
|
OTT,
|
|
OXPS,
|
|
P10,
|
|
PAK,
|
|
PAT,
|
|
PAX,
|
|
PCH,
|
|
PCS,
|
|
PCX,
|
|
PDB,
|
|
PDF,
|
|
PEC,
|
|
PES,
|
|
PF,
|
|
PFC,
|
|
PGD,
|
|
PGM,
|
|
PIF,
|
|
PKR,
|
|
PLS,
|
|
PMOCCMOC,
|
|
PNG,
|
|
PPS,
|
|
PPT,
|
|
PPTX,
|
|
PPZ,
|
|
PRC,
|
|
PSD,
|
|
PSP,
|
|
PUB,
|
|
PUF,
|
|
PWI,
|
|
PWL,
|
|
QBB,
|
|
QCP,
|
|
QDF,
|
|
QEL,
|
|
QEMU,
|
|
QPH,
|
|
QRP,
|
|
QSD,
|
|
QTS,
|
|
QTX,
|
|
QXD,
|
|
RA,
|
|
RAM,
|
|
RAR,
|
|
RAR_NEW,
|
|
RAR_OLD,
|
|
RBI,
|
|
RDATA,
|
|
REG,
|
|
RGB,
|
|
RM,
|
|
RMI,
|
|
RMVB,
|
|
RPM,
|
|
RTD,
|
|
RTF,
|
|
RVT,
|
|
SAM,
|
|
SAV,
|
|
SCR,
|
|
SCT,
|
|
SDPX,
|
|
SDR,
|
|
SH3,
|
|
SHD,
|
|
SHW,
|
|
SIB,
|
|
SIL,
|
|
SIT,
|
|
SKF,
|
|
SKR,
|
|
SLE,
|
|
SLN,
|
|
SNM,
|
|
SNP,
|
|
SOU,
|
|
SPF,
|
|
SPL,
|
|
SPO,
|
|
SPVB,
|
|
STL,
|
|
SUD,
|
|
SUO,
|
|
SWF,
|
|
SXC,
|
|
SXD,
|
|
SXI,
|
|
SXW,
|
|
SYS,
|
|
SYW,
|
|
TAR,
|
|
TARZ,
|
|
TB2,
|
|
TBI,
|
|
TBZ2,
|
|
TES3,
|
|
THP,
|
|
TIB,
|
|
TIF,
|
|
TIFF,
|
|
TLB,
|
|
TORRENT,
|
|
TPL,
|
|
TR1,
|
|
TTF,
|
|
UCE,
|
|
UFA,
|
|
VBE,
|
|
VBX,
|
|
VCD,
|
|
VCF,
|
|
VCW,
|
|
VHD,
|
|
VLT,
|
|
VMD,
|
|
VMDK,
|
|
VOB,
|
|
VOC,
|
|
VSD,
|
|
VXD,
|
|
WAB,
|
|
WALLET,
|
|
WAV,
|
|
WB2,
|
|
WB3,
|
|
WEBM,
|
|
WEBP,
|
|
WIM,
|
|
WIZ,
|
|
WK1,
|
|
WK3,
|
|
WK4,
|
|
WK5,
|
|
WKS,
|
|
WMA,
|
|
WMF,
|
|
WMV,
|
|
WMZ,
|
|
WP,
|
|
WP5,
|
|
WP6,
|
|
WPD,
|
|
WPF,
|
|
WPG,
|
|
WPL,
|
|
WPP,
|
|
WPS,
|
|
WRI,
|
|
WS,
|
|
WS2,
|
|
WSC,
|
|
WSF,
|
|
XAR,
|
|
XCF,
|
|
XDR,
|
|
XLA,
|
|
XLS,
|
|
XLSX,
|
|
XML,
|
|
XPI,
|
|
XPS,
|
|
XPT,
|
|
XXX,
|
|
XZ,
|
|
ZAP,
|
|
ZIP,
|
|
ZOO,
|
|
}
|
|
|
|
public static (FileType, byte[])[] Signatures = {
|
|
// Morrowind BSA
|
|
(FileType.TES3, new byte[] {0x00, 0x01, 0x00, 0x00}),
|
|
|
|
// TES 4-5 and FO 3 BSA
|
|
(FileType.BSA, new byte[] {0x42, 0x53, 0x41, 0x00}),
|
|
|
|
// FO4 BSA
|
|
(FileType.BA2, new byte[] {0x42, 0x54, 0x44, 0x58}),
|
|
|
|
// Relaxed RAR format
|
|
(FileType.RAR, new byte[] {0x52, 0x61, 0x72, 0x21}),
|
|
|
|
// RAR5 or newer
|
|
(FileType.RAR_NEW, new byte[] {0x52, 0x61, 0x72, 0x21, 0x1A, 0x07, 0x01, 0x00}),
|
|
|
|
// RAR4 or older
|
|
(FileType.RAR_OLD, new byte[] {0x52, 0x61, 0x72, 0x21, 0x1A, 0x07, 0x00}),
|
|
|
|
// JPEG2000 image files
|
|
(FileType.JP2, new byte[] {0x00, 0x00, 0x00, 0x0C, 0x6A, 0x50, 0x20, 0x20}),
|
|
|
|
// 3GPP multimedia files
|
|
(FileType._3GP, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70}),
|
|
|
|
// MPEG-4 v1
|
|
(FileType.MP4, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70, 0x69, 0x73, 0x6F, 0x6D}),
|
|
|
|
// 3rd Generation Partnership Project 3GPP
|
|
(FileType._3GG, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70}),
|
|
|
|
// 3rd Generation Partnership Project 3GPP
|
|
(FileType._3GP, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70}),
|
|
|
|
// 3rd Generation Partnership Project 3GPP
|
|
(FileType._3G2, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70}),
|
|
|
|
// Windows Disk Image
|
|
(FileType.TBI, new byte[] {0x00, 0x00, 0x00, 0x00, 0x14, 0x00, 0x00, 0x00}),
|
|
|
|
// Bitcoin Core wallet.dat file
|
|
(FileType.DAT, new byte[] {0x00, 0x00, 0x00, 0x00, 0x62, 0x31, 0x05, 0x00, 0x09, 0x00, 0x00, 0x00, 0x00, 0x20, 0x00, 0x00, 0x00, 0x09, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}),
|
|
|
|
// MPEG-4 video_1
|
|
(FileType._3GP5, new byte[] {0x00, 0x00, 0x00, 0x18, 0x66, 0x74, 0x79, 0x70}),
|
|
|
|
// MPEG-4 video_1
|
|
(FileType.M4V, new byte[] {0x00, 0x00, 0x00, 0x18, 0x66, 0x74, 0x79, 0x70}),
|
|
|
|
// MPEG-4 video_1
|
|
(FileType.MP4, new byte[] {0x00, 0x00, 0x00, 0x18, 0x66, 0x74, 0x79, 0x70}),
|
|
|
|
// MPEG-4 video_2
|
|
(FileType.MP4, new byte[] {0x00, 0x00, 0x00, 0x1C, 0x66, 0x74, 0x79, 0x70}),
|
|
|
|
// 3GPP2 multimedia files
|
|
(FileType._3GP, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70}),
|
|
|
|
// Apple audio and video
|
|
(FileType.M4A, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70, 0x4D, 0x34, 0x41}),
|
|
|
|
// 3rd Generation Partnership Project 3GPP2
|
|
(FileType._3GG, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70}),
|
|
|
|
// 3rd Generation Partnership Project 3GPP2
|
|
(FileType._3GP, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70}),
|
|
|
|
// 3rd Generation Partnership Project 3GPP2
|
|
(FileType._3G2, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70}),
|
|
|
|
// Windows icon|printer spool file
|
|
(FileType.ICO, new byte[] {0x00, 0x00, 0x01, 0x00}),
|
|
|
|
// Windows icon|printer spool file
|
|
(FileType.SPL, new byte[] {0x00, 0x00, 0x01, 0x00}),
|
|
|
|
// MPEG video file
|
|
(FileType.MPG, new byte[] {0x00, 0x00, 0x01, 0xB3}),
|
|
|
|
// DVD video file
|
|
(FileType.MPG, new byte[] {0x00, 0x00, 0x01, 0xBA}),
|
|
|
|
// DVD video file
|
|
(FileType.VOB, new byte[] {0x00, 0x00, 0x01, 0xBA}),
|
|
|
|
// Windows cursor
|
|
(FileType.CUR, new byte[] {0x00, 0x00, 0x02, 0x00}),
|
|
|
|
// Compucon-Singer embroidery design file
|
|
(FileType.XXX, new byte[] {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}),
|
|
|
|
// QuattroPro spreadsheet
|
|
(FileType.WB2, new byte[] {0x00, 0x00, 0x02, 0x00}),
|
|
|
|
// Wii images container
|
|
(FileType.TPL, new byte[] {0x00, 0x20, 0xAF, 0x30}),
|
|
|
|
// Lotus 1-2-3 (v1)
|
|
(FileType.WK1, new byte[] {0x00, 0x00, 0x02, 0x00, 0x06, 0x04, 0x06, 0x00}),
|
|
|
|
// Lotus 1-2-3 (v3)
|
|
(FileType.WK3, new byte[] {0x00, 0x00, 0x1A, 0x00, 0x00, 0x10, 0x04, 0x00}),
|
|
|
|
// Lotus 1-2-3 (v4-v5)
|
|
(FileType.WK4, new byte[] {0x00, 0x00, 0x1A, 0x00, 0x02, 0x10, 0x04, 0x00}),
|
|
|
|
// Lotus 1-2-3 (v4-v5)
|
|
(FileType.WK5, new byte[] {0x00, 0x00, 0x1A, 0x00, 0x02, 0x10, 0x04, 0x00}),
|
|
|
|
// Lotus 1-2-3 (v9)
|
|
(FileType._123, new byte[] {0x00, 0x00, 0x1A, 0x00, 0x05, 0x10, 0x04}),
|
|
|
|
// Quark Express (Intel)
|
|
(FileType.QXD, new byte[] {0x00, 0x00, 0x49, 0x49, 0x58, 0x50, 0x52}),
|
|
|
|
// Quark Express (Motorola)
|
|
(FileType.QXD, new byte[] {0x00, 0x00, 0x4D, 0x4D, 0x58, 0x50, 0x52}),
|
|
|
|
// Windows Help file_1
|
|
(FileType.HLP, new byte[] {0x00, 0x00, 0xFF, 0xFF, 0xFF, 0xFF}),
|
|
|
|
// TrueType font file
|
|
(FileType.TTF, new byte[] {0x00, 0x01, 0x00, 0x00, 0x00}),
|
|
|
|
// Microsoft Money file
|
|
(FileType.MNY, new byte[] {0x00, 0x01, 0x00, 0x00, 0x4D, 0x53, 0x49, 0x53, 0x41, 0x4D, 0x20, 0x44, 0x61, 0x74, 0x61, 0x62, 0x61, 0x73, 0x65}),
|
|
|
|
// Microsoft Access 2007
|
|
(FileType.ACCDB, new byte[] {0x00, 0x01, 0x00, 0x00, 0x53, 0x74, 0x61, 0x6E, 0x64, 0x61, 0x72, 0x64, 0x20, 0x41, 0x43, 0x45, 0x20, 0x44, 0x42}),
|
|
|
|
// Microsoft Access
|
|
(FileType.MDB, new byte[] {0x00, 0x01, 0x00, 0x00, 0x53, 0x74, 0x61, 0x6E, 0x64, 0x61, 0x72, 0x64, 0x20, 0x4A, 0x65, 0x74, 0x20, 0x44, 0x42}),
|
|
|
|
// Palm Address Book Archive
|
|
(FileType.ABA, new byte[] {0x00, 0x01, 0x42, 0x41}),
|
|
|
|
// Palm DateBook Archive
|
|
(FileType.DBA, new byte[] {0x00, 0x01, 0x42, 0x44}),
|
|
|
|
// Netscape Navigator (v4) database
|
|
(FileType.DB, new byte[] {0x00, 0x06, 0x15, 0x61, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x04, 0xD2, 0x00, 0x00, 0x10, 0x00}),
|
|
|
|
// FLIC animation
|
|
(FileType.FLI, new byte[] {0x00, 0x11}),
|
|
|
|
// Netscape Communicator (v4) mail folder
|
|
(FileType.SNM, new byte[] {0x00, 0x1E, 0x84, 0x90, 0x00, 0x00, 0x00, 0x00}),
|
|
|
|
// PowerPoint presentation subheader_1
|
|
(FileType.PPT, new byte[] {0x00, 0x6E, 0x1E, 0xF0}),
|
|
|
|
// Webex Advanced Recording Format
|
|
(FileType.ARF, new byte[] {0x01, 0x00, 0x02, 0x00}),
|
|
|
|
// Firebird and Interbase database files
|
|
(FileType.FDB, new byte[] {0x01, 0x00, 0x39, 0x30}),
|
|
|
|
// Firebird and Interbase database files
|
|
(FileType.GDB, new byte[] {0x01, 0x00, 0x39, 0x30}),
|
|
|
|
// The Bat! Message Base Index
|
|
(FileType.TBI, new byte[] {0x01, 0x01, 0x47, 0x19, 0xA4, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}),
|
|
|
|
// SQL Data Base
|
|
(FileType.MDF, new byte[] {0x01, 0x0F, 0x00, 0x00}),
|
|
|
|
// Novell LANalyzer capture file
|
|
(FileType.TR1, new byte[] {0x01, 0x10}),
|
|
|
|
// Silicon Graphics RGB Bitmap
|
|
(FileType.RGB, new byte[] {0x01, 0xDA, 0x01, 0x01, 0x00, 0x03}),
|
|
|
|
// Micrografx vector graphic file
|
|
(FileType.DRW, new byte[] {0x01, 0xFF, 0x02, 0x04, 0x03, 0x02}),
|
|
|
|
// Digital Speech Standard file
|
|
(FileType.DSS, new byte[] {0x02, 0x64, 0x73, 0x73}),
|
|
|
|
// MapInfo Native Data Format
|
|
(FileType.DAT, new byte[] {0x03}),
|
|
|
|
// dBASE III file
|
|
(FileType.DB3, new byte[] {0x03}),
|
|
|
|
// Quicken price history
|
|
(FileType.QPH, new byte[] {0x03, 0x00, 0x00, 0x00}),
|
|
|
|
// Approach index file
|
|
(FileType.ADX, new byte[] {0x03, 0x00, 0x00, 0x00, 0x41, 0x50, 0x50, 0x52}),
|
|
|
|
// dBASE IV file
|
|
(FileType.DB4, new byte[] {0x04}),
|
|
|
|
// Adobe InDesign
|
|
(FileType.INDD, new byte[] {0x06, 0x06, 0xED, 0xF5, 0xD8, 0x1D, 0x46, 0xE5, 0xBD, 0x31, 0xEF, 0xE7, 0xFE, 0x74, 0xB7, 0x1D}),
|
|
|
|
// Material Exchange Format
|
|
(FileType.MXF, new byte[] {0x06, 0x0E, 0x2B, 0x34, 0x02, 0x05, 0x01, 0x01, 0x0D, 0x01, 0x02, 0x01, 0x01, 0x02}),
|
|
|
|
// Generic drawing programs
|
|
(FileType.DRW, new byte[] {0x07}),
|
|
|
|
// SkinCrafter skin
|
|
(FileType.SKF, new byte[] {0x07, 0x53, 0x4B, 0x46}),
|
|
|
|
// DesignTools 2D Design file
|
|
(FileType.DTD, new byte[] {0x07, 0x64, 0x74, 0x32, 0x64, 0x64, 0x74, 0x64}),
|
|
|
|
// dBASE IV or dBFast configuration file
|
|
(FileType.DB, new byte[] {0x08}),
|
|
|
|
// Excel spreadsheet subheader_1
|
|
(FileType.XLS, new byte[] {0x09, 0x08, 0x10, 0x00, 0x00, 0x06, 0x05, 0x00}),
|
|
|
|
// ZSOFT Paintbrush file_1
|
|
(FileType.PCX, new byte[] {0x0A, 0x02, 0x01, 0x01}),
|
|
|
|
// ZSOFT Paintbrush file_2
|
|
(FileType.PCX, new byte[] {0x0A, 0x03, 0x01, 0x01}),
|
|
|
|
// ZSOFT Paintbrush file_3
|
|
(FileType.PCX, new byte[] {0x0A, 0x05, 0x01, 0x01}),
|
|
|
|
// MultiBit Bitcoin wallet file
|
|
(FileType.WALLET, new byte[] {0x0A, 0x16, 0x6F, 0x72, 0x67, 0x2E, 0x62, 0x69, 0x74, 0x63, 0x6F, 0x69, 0x6E, 0x2E, 0x70, 0x72}),
|
|
|
|
// Monochrome Picture TIFF bitmap
|
|
(FileType.MP, new byte[] {0x0C, 0xED}),
|
|
|
|
// DeskMate Document
|
|
(FileType.DOC, new byte[] {0x0D, 0x44, 0x4F, 0x43}),
|
|
|
|
// Nero CD compilation
|
|
(FileType.NRI, new byte[] {0x0E, 0x4E, 0x65, 0x72, 0x6F, 0x49, 0x53, 0x4F}),
|
|
|
|
// DeskMate Worksheet
|
|
(FileType.WKS, new byte[] {0x0E, 0x57, 0x4B, 0x53}),
|
|
|
|
// PowerPoint presentation subheader_2
|
|
(FileType.PPT, new byte[] {0x0F, 0x00, 0xE8, 0x03}),
|
|
|
|
// Sibelius Music - Score
|
|
(FileType.SIB, new byte[] {0x0F, 0x53, 0x49, 0x42, 0x45, 0x4C, 0x49, 0x55, 0x53}),
|
|
|
|
// Easy CD Creator 5 Layout file
|
|
(FileType.CL5, new byte[] {0x10, 0x00, 0x00, 0x00}),
|
|
|
|
// Windows prefetch file
|
|
(FileType.PF, new byte[] {0x11, 0x00, 0x00, 0x00, 0x53, 0x43, 0x43, 0x41}),
|
|
|
|
// Lotus Notes database template
|
|
(FileType.NTF, new byte[] {0x1A, 0x00, 0x00}),
|
|
|
|
// Lotus Notes database
|
|
(FileType.NSF, new byte[] {0x1A, 0x00, 0x00, 0x04, 0x00, 0x00}),
|
|
|
|
// LH archive (old vers.-type 1)
|
|
(FileType.ARC, new byte[] {0x1A, 0x02}),
|
|
|
|
// LH archive (old vers.-type 2)
|
|
(FileType.ARC, new byte[] {0x1A, 0x03}),
|
|
|
|
// LH archive (old vers.-type 3)
|
|
(FileType.ARC, new byte[] {0x1A, 0x04}),
|
|
|
|
// LH archive (old vers.-type 4)
|
|
(FileType.ARC, new byte[] {0x1A, 0x08}),
|
|
|
|
// LH archive (old vers.-type 5)
|
|
(FileType.ARC, new byte[] {0x1A, 0x09}),
|
|
|
|
// Compressed archive file
|
|
(FileType.PAK, new byte[] {0x1A, 0x0B}),
|
|
|
|
// WinPharoah capture file
|
|
(FileType.ETH, new byte[] {0x1A, 0x35, 0x01, 0x00}),
|
|
|
|
// WebM video file
|
|
(FileType.WEBM, new byte[] {0x1A, 0x45, 0xDF, 0xA3}),
|
|
|
|
// Matroska stream file_1
|
|
(FileType.MKV, new byte[] {0x1A, 0x45, 0xDF, 0xA3}),
|
|
|
|
// Matroska stream file_2
|
|
(FileType.MKV, new byte[] {0x1A, 0x45, 0xDF, 0xA3, 0x93, 0x42, 0x82, 0x88}),
|
|
|
|
// Runtime Software disk image
|
|
(FileType.DAT, new byte[] {0x1A, 0x52, 0x54, 0x53, 0x20, 0x43, 0x4F, 0x4D}),
|
|
|
|
// WordStar Version 5.0-6.0 document
|
|
(FileType.WS, new byte[] {0x1D, 0x7D}),
|
|
|
|
// GZIP archive file
|
|
(FileType.GZ, new byte[] {0x1F, 0x8B, 0x08}),
|
|
|
|
// VLC Player Skin file
|
|
(FileType.VLT, new byte[] {0x1F, 0x8B, 0x08}),
|
|
|
|
// Compressed tape archive_1
|
|
(FileType.TARZ, new byte[] {0x1F, 0x9D, 0x90}),
|
|
|
|
// Compressed tape archive_2
|
|
(FileType.TARZ, new byte[] {0x1F, 0xA0}),
|
|
|
|
// MapInfo Sea Chart
|
|
(FileType.BSB, new byte[] {0x21}),
|
|
|
|
// AIN Compressed Archive
|
|
(FileType.AIN, new byte[] {0x21, 0x12}),
|
|
|
|
// Unix archiver (ar)-MS Program Library Common Object File Format (COFF)
|
|
(FileType.LIB, new byte[] {0x21, 0x3C, 0x61, 0x72, 0x63, 0x68, 0x3E, 0x0A}),
|
|
|
|
// Microsoft Outlook Exchange Offline Storage Folder
|
|
(FileType.OST, new byte[] {0x21, 0x42, 0x44, 0x4E}),
|
|
|
|
// Cerius2 file
|
|
(FileType.MSI, new byte[] {0x23, 0x20}),
|
|
|
|
// VMware 4 Virtual Disk description
|
|
(FileType.VMDK, new byte[] {0x23, 0x20, 0x44, 0x69, 0x73, 0x6B, 0x20, 0x44}),
|
|
|
|
// MS Developer Studio project file
|
|
(FileType.DSP, new byte[] {0x23, 0x20, 0x4D, 0x69, 0x63, 0x72, 0x6F, 0x73}),
|
|
|
|
// Adaptive Multi-Rate ACELP Codec (GSM)
|
|
(FileType.AMR, new byte[] {0x23, 0x21, 0x41, 0x4D, 0x52}),
|
|
|
|
// Skype audio compression
|
|
(FileType.SIL, new byte[] {0x23, 0x21, 0x53, 0x49, 0x4C, 0x4B, 0x0A}),
|
|
|
|
// Radiance High Dynamic Range image file
|
|
(FileType.HDR, new byte[] {0x23, 0x3F, 0x52, 0x41, 0x44, 0x49, 0x41, 0x4E}),
|
|
|
|
// VBScript Encoded script
|
|
(FileType.VBE, new byte[] {0x23, 0x40, 0x7E, 0x5E}),
|
|
|
|
// Brother-Babylock-Bernina Home Embroidery
|
|
(FileType.PEC, new byte[] {0x23, 0x50, 0x45, 0x43, 0x30, 0x30, 0x30, 0x31}),
|
|
|
|
// Brother-Babylock-Bernina Home Embroidery
|
|
(FileType.PES, new byte[] {0x23, 0x50, 0x45, 0x53, 0x30}),
|
|
|
|
// SPSS Data file
|
|
(FileType.SAV, new byte[] {0x24, 0x46, 0x4C, 0x32, 0x40, 0x28, 0x23, 0x29}),
|
|
|
|
// Encapsulated PostScript file
|
|
(FileType.EPS, new byte[] {0x25, 0x21, 0x50, 0x53, 0x2D, 0x41, 0x64, 0x6F}),
|
|
|
|
// PDF file
|
|
(FileType.PDF, new byte[] {0x25, 0x50, 0x44, 0x46}),
|
|
|
|
// PDF file
|
|
(FileType.FDF, new byte[] {0x25, 0x50, 0x44, 0x46}),
|
|
|
|
// Fuzzy bitmap (FBM) file
|
|
(FileType.FBM, new byte[] {0x25, 0x62, 0x69, 0x74, 0x6D, 0x61, 0x70}),
|
|
|
|
// BinHex 4 Compressed Archive
|
|
(FileType.HQX, new byte[] {0x28, 0x54, 0x68, 0x69, 0x73, 0x20, 0x66, 0x69}),
|
|
|
|
// Symantec Wise Installer log
|
|
(FileType.LOG, new byte[] {0x2A, 0x2A, 0x2A, 0x20, 0x20, 0x49, 0x6E, 0x73}),
|
|
|
|
// Compressed archive
|
|
(FileType.LHA, new byte[] {0x2D, 0x6C, 0x68}),
|
|
|
|
// Compressed archive
|
|
(FileType.LZH, new byte[] {0x2D, 0x6C, 0x68}),
|
|
|
|
// RealPlayer video file (V11+)
|
|
(FileType.IVR, new byte[] {0x2E, 0x52, 0x45, 0x43}),
|
|
|
|
// RealMedia streaming media
|
|
(FileType.RM, new byte[] {0x2E, 0x52, 0x4D, 0x46}),
|
|
|
|
// RealMedia streaming media
|
|
(FileType.RMVB, new byte[] {0x2E, 0x52, 0x4D, 0x46}),
|
|
|
|
// RealAudio file
|
|
(FileType.RA, new byte[] {0x2E, 0x52, 0x4D, 0x46, 0x00, 0x00, 0x00, 0x12}),
|
|
|
|
// RealAudio streaming media
|
|
(FileType.RA, new byte[] {0x2E, 0x72, 0x61, 0xFD, 0x00}),
|
|
|
|
// NeXT-Sun Microsystems audio file
|
|
(FileType.AU, new byte[] {0x2E, 0x73, 0x6E, 0x64}),
|
|
|
|
// Thunderbird-Mozilla Mail Summary File
|
|
(FileType.MSF, new byte[] {0x2F, 0x2F, 0x20, 0x3C, 0x21, 0x2D, 0x2D, 0x20, 0x3C, 0x6D, 0x64, 0x62, 0x3A, 0x6D, 0x6F, 0x72, 0x6B, 0x3A, 0x7A}),
|
|
|
|
// MS security catalog file
|
|
(FileType.CAT, new byte[] {0x30}),
|
|
|
|
// Windows Event Viewer file
|
|
(FileType.EVT, new byte[] {0x30, 0x00, 0x00, 0x00, 0x4C, 0x66, 0x4C, 0x65}),
|
|
|
|
// GEnealogical Data COMmunication (GEDCOM) file
|
|
(FileType.GED, new byte[] {0x30, 0x20, 0x48, 0x45, 0x41, 0x44}),
|
|
|
|
// Windows Media Audio-Video File
|
|
(FileType.ASF, new byte[] {0x30, 0x26, 0xB2, 0x75, 0x8E, 0x66, 0xCF, 0x11}),
|
|
|
|
// Windows Media Audio-Video File
|
|
(FileType.WMA, new byte[] {0x30, 0x26, 0xB2, 0x75, 0x8E, 0x66, 0xCF, 0x11}),
|
|
|
|
// Windows Media Audio-Video File
|
|
(FileType.WMV, new byte[] {0x30, 0x26, 0xB2, 0x75, 0x8E, 0x66, 0xCF, 0x11}),
|
|
|
|
// National Transfer Format Map
|
|
(FileType.NTF, new byte[] {0x30, 0x31, 0x4F, 0x52, 0x44, 0x4E, 0x41, 0x4E}),
|
|
|
|
// MS Write file_1
|
|
(FileType.WRI, new byte[] {0x31, 0xBE}),
|
|
|
|
// MS Write file_2
|
|
(FileType.WRI, new byte[] {0x32, 0xBE}),
|
|
|
|
// Pfaff Home Embroidery
|
|
(FileType.PCS, new byte[] {0x32, 0x03, 0x10, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x00, 0xFF, 0x00}),
|
|
|
|
// 7-Zip compressed file
|
|
(FileType._7Z, new byte[] {0x37, 0x7A, 0xBC, 0xAF, 0x27, 0x1C}),
|
|
|
|
// Photoshop image
|
|
(FileType.PSD, new byte[] {0x38, 0x42, 0x50, 0x53}),
|
|
|
|
// Surfplan kite project file
|
|
(FileType.SLE, new byte[] {0x3A, 0x56, 0x45, 0x52, 0x53, 0x49, 0x4F, 0x4E}),
|
|
|
|
// Advanced Stream Redirector
|
|
(FileType.ASX, new byte[] {0x3C}),
|
|
|
|
// BizTalk XML-Data Reduced Schema
|
|
(FileType.XDR, new byte[] {0x3C}),
|
|
|
|
// AOL HTML mail
|
|
(FileType.DCI, new byte[] {0x3C, 0x21, 0x64, 0x6F, 0x63, 0x74, 0x79, 0x70}),
|
|
|
|
// Windows Script Component
|
|
(FileType.WSC, new byte[] {0x3C, 0x3F}),
|
|
|
|
// Windows Visual Stylesheet
|
|
(FileType.MANIFEST, new byte[] {0x3C, 0x3F, 0x78, 0x6D, 0x6C, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D}),
|
|
|
|
// User Interface Language
|
|
(FileType.XML, new byte[] {0x3C, 0x3F, 0x78, 0x6D, 0x6C, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D, 0x22, 0x31, 0x2E, 0x30, 0x22, 0x3F, 0x3E}),
|
|
|
|
// MMC Snap-in Control file
|
|
(FileType.MSC, new byte[] {0x3C, 0x3F, 0x78, 0x6D, 0x6C, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D, 0x22, 0x31, 0x2E, 0x30, 0x22, 0x3F, 0x3E, 0x0D, 0x0A, 0x3C, 0x4D, 0x4D, 0x43, 0x5F, 0x43, 0x6F, 0x6E, 0x73, 0x6F, 0x6C, 0x65, 0x46, 0x69, 0x6C, 0x65, 0x20, 0x43, 0x6F, 0x6E, 0x73, 0x6F, 0x6C, 0x65, 0x56, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D, 0x22}),
|
|
|
|
// Picasa movie project file
|
|
(FileType.MXF, new byte[] {0x3C, 0x43, 0x54, 0x72, 0x61, 0x6E, 0x73, 0x54, 0x69, 0x6D, 0x65, 0x6C, 0x69, 0x6E, 0x65, 0x3E}),
|
|
|
|
// Csound music
|
|
(FileType.CSD, new byte[] {0x3C, 0x43, 0x73, 0x6F, 0x75, 0x6E, 0x64, 0x53, 0x79, 0x6E, 0x74, 0x68, 0x65, 0x73, 0x69, 0x7A}),
|
|
|
|
// Adobe FrameMaker
|
|
(FileType.FM, new byte[] {0x3C, 0x4D, 0x61, 0x6B, 0x65, 0x72, 0x46, 0x69}),
|
|
|
|
// Adobe FrameMaker
|
|
(FileType.MIF, new byte[] {0x3C, 0x4D, 0x61, 0x6B, 0x65, 0x72, 0x46, 0x69}),
|
|
|
|
// GPS Exchange (v1.1)
|
|
(FileType.GPX, new byte[] {0x3C, 0x67, 0x70, 0x78, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D, 0x22, 0x31, 0x2E}),
|
|
|
|
// BASE85 file
|
|
(FileType.B85, new byte[] {0x3C, 0x7E, 0x36, 0x3C, 0x5C, 0x25, 0x5F, 0x30, 0x67, 0x53, 0x71, 0x68, 0x3B}),
|
|
|
|
// Quatro Pro for Windows 7.0
|
|
(FileType.WB3, new byte[] {0x3E, 0x00, 0x03, 0x00, 0xFE, 0xFF, 0x09, 0x00, 0x06}),
|
|
|
|
// Windows Help file_2
|
|
(FileType.GID, new byte[] {0x3F, 0x5F, 0x03, 0x00}),
|
|
|
|
// Windows Help file_2
|
|
(FileType.HLP, new byte[] {0x3F, 0x5F, 0x03, 0x00}),
|
|
|
|
// EndNote Library File
|
|
(FileType.ENL, new byte[] {0x40, 0x40, 0x40, 0x20, 0x00, 0x00, 0x40, 0x40, 0x40, 0x40}),
|
|
|
|
// Generic AutoCAD drawing
|
|
(FileType.DWG, new byte[] {0x41, 0x43, 0x31, 0x30}),
|
|
|
|
// Steganos virtual secure drive
|
|
(FileType.SLE, new byte[] {0x41, 0x43, 0x76}),
|
|
|
|
// Harvard Graphics symbol graphic
|
|
(FileType.SYW, new byte[] {0x41, 0x4D, 0x59, 0x4F}),
|
|
|
|
// AOL config files
|
|
(FileType.ABI, new byte[] {0x41, 0x4F, 0x4C}),
|
|
|
|
// AOL config files
|
|
(FileType.ABY, new byte[] {0x41, 0x4F, 0x4C}),
|
|
|
|
// AOL config files
|
|
(FileType.BAG, new byte[] {0x41, 0x4F, 0x4C}),
|
|
|
|
// AOL config files
|
|
(FileType.IDX, new byte[] {0x41, 0x4F, 0x4C}),
|
|
|
|
// AOL config files
|
|
(FileType.IND, new byte[] {0x41, 0x4F, 0x4C}),
|
|
|
|
// AOL config files
|
|
(FileType.PFC, new byte[] {0x41, 0x4F, 0x4C}),
|
|
|
|
// AOL and AIM buddy list
|
|
(FileType.BAG, new byte[] {0x41, 0x4F, 0x4C, 0x20, 0x46, 0x65, 0x65, 0x64}),
|
|
|
|
// AOL address book
|
|
(FileType.ABY, new byte[] {0x41, 0x4F, 0x4C, 0x44, 0x42}),
|
|
|
|
// AOL user configuration
|
|
(FileType.IDX, new byte[] {0x41, 0x4F, 0x4C, 0x44, 0x42}),
|
|
|
|
// AOL client preferences-settings file
|
|
(FileType.IND, new byte[] {0x41, 0x4F, 0x4C, 0x49, 0x44, 0x58}),
|
|
|
|
// AOL address book index
|
|
(FileType.ABI, new byte[] {0x41, 0x4F, 0x4C, 0x49, 0x4E, 0x44, 0x45, 0x58}),
|
|
|
|
// AOL personal file cabinet
|
|
(FileType.ORG, new byte[] {0x41, 0x4F, 0x4C, 0x56, 0x4D, 0x31, 0x30, 0x30}),
|
|
|
|
// AOL personal file cabinet
|
|
(FileType.PFC, new byte[] {0x41, 0x4F, 0x4C, 0x56, 0x4D, 0x31, 0x30, 0x30}),
|
|
|
|
// AVG6 Integrity database
|
|
(FileType.DAT, new byte[] {0x41, 0x56, 0x47, 0x36, 0x5F, 0x49, 0x6E, 0x74}),
|
|
|
|
// RIFF Windows Audio
|
|
(FileType.AVI, new byte[] {0x41, 0x56, 0x49, 0x20, 0x4C, 0x49, 0x53, 0x54}),
|
|
|
|
// FreeArc compressed file
|
|
(FileType.ARC, new byte[] {0x41, 0x72, 0x43, 0x01}),
|
|
|
|
// vCard
|
|
(FileType.VCF, new byte[] {0x42, 0x45, 0x47, 0x49, 0x4E, 0x3A, 0x56, 0x43}),
|
|
|
|
// Speedtouch router firmware
|
|
(FileType.BIN, new byte[] {0x42, 0x4C, 0x49, 0x32, 0x32, 0x33}),
|
|
|
|
// Speedtouch router firmware
|
|
(FileType.BLI, new byte[] {0x42, 0x4C, 0x49, 0x32, 0x32, 0x33}),
|
|
|
|
// Speedtouch router firmware
|
|
(FileType.RBI, new byte[] {0x42, 0x4C, 0x49, 0x32, 0x32, 0x33}),
|
|
|
|
// Bitmap image
|
|
(FileType.BMP, new byte[] {0x42, 0x4D}),
|
|
|
|
// Bitmap image
|
|
(FileType.DIB, new byte[] {0x42, 0x4D}),
|
|
|
|
// Palmpilot resource file
|
|
(FileType.PRC, new byte[] {0x42, 0x4F, 0x4F, 0x4B, 0x4D, 0x4F, 0x42, 0x49}),
|
|
|
|
// Better Portable Graphics
|
|
(FileType.BPG, new byte[] {0x42, 0x50, 0x47, 0xFB}),
|
|
|
|
// bzip2 compressed archive
|
|
(FileType.BZ2, new byte[] {0x42, 0x5A, 0x68}),
|
|
|
|
// bzip2 compressed archive
|
|
(FileType.TAR, new byte[] {0x42, 0x5A, 0x68}),
|
|
|
|
// bzip2 compressed archive
|
|
(FileType.BZ2, new byte[] {0x42, 0x5A, 0x68}),
|
|
|
|
// bzip2 compressed archive
|
|
(FileType.TBZ2, new byte[] {0x42, 0x5A, 0x68}),
|
|
|
|
// bzip2 compressed archive
|
|
(FileType.TB2, new byte[] {0x42, 0x5A, 0x68}),
|
|
|
|
// Mac Disk image (BZ2 compressed)
|
|
(FileType.DMG, new byte[] {0x42, 0x5A, 0x68}),
|
|
|
|
// Puffer ASCII encrypted archive
|
|
(FileType.APUF, new byte[] {0x42, 0x65, 0x67, 0x69, 0x6E, 0x20, 0x50, 0x75, 0x66, 0x66, 0x65, 0x72}),
|
|
|
|
// Blink compressed archive
|
|
(FileType.BLI, new byte[] {0x42, 0x6C, 0x69, 0x6E, 0x6B}),
|
|
|
|
// RagTime document
|
|
(FileType.RTD, new byte[] {0x43, 0x23, 0x2B, 0x44, 0xA4, 0x43, 0x4D, 0xA5}),
|
|
|
|
// EA Interchange Format File (IFF)_3
|
|
(FileType.IFF, new byte[] {0x43, 0x41, 0x54, 0x20}),
|
|
|
|
// WordPerfect dictionary
|
|
(FileType.CBD, new byte[] {0x43, 0x42, 0x46, 0x49, 0x4C, 0x45}),
|
|
|
|
// ISO-9660 CD Disc Image
|
|
(FileType.ISO, new byte[] {0x43, 0x44, 0x30, 0x30, 0x31}),
|
|
|
|
// RIFF CD audio
|
|
(FileType.CDA, new byte[] {0x43, 0x44, 0x44, 0x41, 0x66, 0x6D, 0x74, 0x20}),
|
|
|
|
// Compressed ISO CD image
|
|
(FileType.CSO, new byte[] {0x43, 0x49, 0x53, 0x4F}),
|
|
|
|
// Windows 7 thumbnail
|
|
(FileType.DB, new byte[] {0x43, 0x4D, 0x4D, 0x4D, 0x15, 0x00, 0x00, 0x00}),
|
|
|
|
// Corel Binary metafile
|
|
(FileType.CLB, new byte[] {0x43, 0x4D, 0x58, 0x31}),
|
|
|
|
// COM+ Catalog
|
|
(FileType.CLB, new byte[] {0x43, 0x4F, 0x4D, 0x2B}),
|
|
|
|
// VMware 3 Virtual Disk
|
|
(FileType.VMDK, new byte[] {0x43, 0x4F, 0x57, 0x44}),
|
|
|
|
// Corel Photopaint file_1
|
|
(FileType.CPT, new byte[] {0x43, 0x50, 0x54, 0x37, 0x46, 0x49, 0x4C, 0x45}),
|
|
|
|
// Corel Photopaint file_2
|
|
(FileType.CPT, new byte[] {0x43, 0x50, 0x54, 0x46, 0x49, 0x4C, 0x45}),
|
|
|
|
// Win9x registry hive
|
|
(FileType.DAT, new byte[] {0x43, 0x52, 0x45, 0x47}),
|
|
|
|
// Crush compressed archive
|
|
(FileType.CRU, new byte[] {0x43, 0x52, 0x55, 0x53, 0x48, 0x20, 0x76}),
|
|
|
|
// Shockwave Flash file
|
|
(FileType.SWF, new byte[] {0x43, 0x57, 0x53}),
|
|
|
|
// Calculux Indoor lighting project file
|
|
(FileType.CIN, new byte[] {0x43, 0x61, 0x6C, 0x63, 0x75, 0x6C, 0x75, 0x78, 0x20, 0x49, 0x6E, 0x64, 0x6F, 0x6F, 0x72, 0x20}),
|
|
|
|
// WhereIsIt Catalog
|
|
(FileType.CTF, new byte[] {0x43, 0x61, 0x74, 0x61, 0x6C, 0x6F, 0x67, 0x20}),
|
|
|
|
// IE History file
|
|
(FileType.DAT, new byte[] {0x43, 0x6C, 0x69, 0x65, 0x6E, 0x74, 0x20, 0x55}),
|
|
|
|
// Google Chrome Extension
|
|
(FileType.CRX, new byte[] {0x43, 0x72, 0x32, 0x34}),
|
|
|
|
// Creative Voice
|
|
(FileType.VOC, new byte[] {0x43, 0x72, 0x65, 0x61, 0x74, 0x69, 0x76, 0x65, 0x20, 0x56, 0x6F, 0x69, 0x63, 0x65, 0x20, 0x46}),
|
|
|
|
// PowerISO Direct-Access-Archive image
|
|
(FileType.DAA, new byte[] {0x44, 0x41, 0x41, 0x00, 0x00, 0x00, 0x00, 0x00}),
|
|
|
|
// DAX Compressed CD image
|
|
(FileType.DAX, new byte[] {0x44, 0x41, 0x58, 0x00}),
|
|
|
|
// Palm Zire photo database
|
|
(FileType.DB, new byte[] {0x44, 0x42, 0x46, 0x48}),
|
|
|
|
// Amiga DiskMasher compressed archive
|
|
(FileType.DMS, new byte[] {0x44, 0x4D, 0x53, 0x21}),
|
|
|
|
// Amiga disk file
|
|
(FileType.ADF, new byte[] {0x44, 0x4F, 0x53}),
|
|
|
|
// DST Compression
|
|
(FileType.DST, new byte[] {0x44, 0x53, 0x54, 0x62}),
|
|
|
|
// DVR-Studio stream file
|
|
(FileType.DVR, new byte[] {0x44, 0x56, 0x44}),
|
|
|
|
// DVD info file
|
|
(FileType.IFO, new byte[] {0x44, 0x56, 0x44}),
|
|
|
|
// Elite Plus Commander game file
|
|
(FileType.CDR, new byte[] {0x45, 0x4C, 0x49, 0x54, 0x45, 0x20, 0x43, 0x6F}),
|
|
|
|
// VideoVCD-VCDImager file
|
|
(FileType.VCD, new byte[] {0x45, 0x4E, 0x54, 0x52, 0x59, 0x56, 0x43, 0x44}),
|
|
|
|
// Apple ISO 9660-HFS hybrid CD image
|
|
(FileType.ISO, new byte[] {0x45, 0x52, 0x02, 0x00, 0x00}),
|
|
|
|
// EasyRecovery Saved State file
|
|
(FileType.DAT, new byte[] {0x45, 0x52, 0x46, 0x53, 0x53, 0x41, 0x56, 0x45}),
|
|
|
|
// DSD Storage Facility audio file
|
|
(FileType.DSF, new byte[] {0x44, 0x53, 0x44, 0x20}),
|
|
|
|
// MS Document Imaging file
|
|
(FileType.MDI, new byte[] {0x45, 0x50}),
|
|
|
|
// Expert Witness Compression Format
|
|
(FileType.E01, new byte[] {0x45, 0x56, 0x46, 0x09, 0x0D, 0x0A, 0xFF, 0x00}),
|
|
|
|
// EnCase Evidence File Format V2
|
|
(FileType.Ex01, new byte[] {0x45, 0x56, 0x46, 0x32, 0x0D, 0x0A, 0x81}),
|
|
|
|
// Windows Vista event log
|
|
(FileType.EVTX, new byte[] {0x45, 0x6C, 0x66, 0x46, 0x69, 0x6C, 0x65, 0x00}),
|
|
|
|
// QuickBooks backup
|
|
(FileType.QBB, new byte[] {0x45, 0x86, 0x00, 0x00, 0x06, 0x00}),
|
|
|
|
// MS Fax Cover Sheet
|
|
(FileType.CPE, new byte[] {0x46, 0x41, 0x58, 0x43, 0x4F, 0x56, 0x45, 0x52}),
|
|
|
|
// Fiasco database definition file
|
|
(FileType.FDB, new byte[] {0x46, 0x44, 0x42, 0x48, 0x00}),
|
|
|
|
// Flash video file
|
|
(FileType.FLV, new byte[] {0x46, 0x4C, 0x56}),
|
|
|
|
// IFF ANIM file
|
|
(FileType.ANM, new byte[] {0x46, 0x4F, 0x52, 0x4D}),
|
|
|
|
// EA Interchange Format File (IFF)_1
|
|
(FileType.IFF, new byte[] {0x46, 0x4F, 0x52, 0x4D}),
|
|
|
|
// Audio Interchange File
|
|
(FileType.AIFF, new byte[] {0x46, 0x4F, 0x52, 0x4D, 0x00}),
|
|
|
|
// DAKX Compressed Audio
|
|
(FileType.DAX, new byte[] {0x46, 0x4F, 0x52, 0x4D, 0x00}),
|
|
|
|
// Shockwave Flash player
|
|
(FileType.SWF, new byte[] {0x46, 0x57, 0x53}),
|
|
|
|
// Generic e-mail_2
|
|
(FileType.EML, new byte[] {0x46, 0x72, 0x6F, 0x6D}),
|
|
|
|
// GIF file
|
|
(FileType.GIF, new byte[] {0x47, 0x49, 0x46, 0x38}),
|
|
|
|
// GIMP pattern file
|
|
(FileType.PAT, new byte[] {0x47, 0x50, 0x41, 0x54}),
|
|
|
|
// General Regularly-distributed Information (GRIdded) Binary
|
|
(FileType.GRB, new byte[] {0x47, 0x52, 0x49, 0x42}),
|
|
|
|
// Show Partner graphics file
|
|
(FileType.GX2, new byte[] {0x47, 0x58, 0x32}),
|
|
|
|
// Genetec video archive
|
|
(FileType.G64, new byte[] {0x47, 0x65, 0x6E, 0x65, 0x74, 0x65, 0x63, 0x20, 0x4F, 0x6D, 0x6E, 0x69, 0x63, 0x61, 0x73, 0x74}),
|
|
|
|
// SAS Transport dataset
|
|
(FileType.XPT, new byte[] {0x48, 0x45, 0x41, 0x44, 0x45, 0x52, 0x20, 0x52, 0x45, 0x43, 0x4F, 0x52, 0x44, 0x2A, 0x2A, 0x2A}),
|
|
|
|
// Harvard Graphics presentation file
|
|
(FileType.SH3, new byte[] {0x48, 0x48, 0x47, 0x42, 0x31}),
|
|
|
|
// TIFF file_1
|
|
(FileType.TIF, new byte[] {0x49, 0x20, 0x49}),
|
|
|
|
// TIFF file_1
|
|
(FileType.TIFF, new byte[] {0x49, 0x20, 0x49}),
|
|
|
|
// MP3 audio file
|
|
(FileType.MP3, new byte[] {0x49, 0x44, 0x33}),
|
|
|
|
// Sprint Music Store audio
|
|
(FileType.KOZ, new byte[] {0x49, 0x44, 0x33, 0x03, 0x00, 0x00, 0x00}),
|
|
|
|
// Canon RAW file
|
|
(FileType.CRW, new byte[] {0x49, 0x49, 0x1A, 0x00, 0x00, 0x00, 0x48, 0x45}),
|
|
|
|
// TIFF file_2
|
|
(FileType.TIF, new byte[] {0x49, 0x49, 0x2A, 0x00}),
|
|
|
|
// TIFF file_2
|
|
(FileType.TIFF, new byte[] {0x49, 0x49, 0x2A, 0x00}),
|
|
|
|
// Windows 7 thumbnail_2
|
|
(FileType.DB, new byte[] {0x49, 0x4D, 0x4D, 0x4D, 0x15, 0x00, 0x00, 0x00}),
|
|
|
|
// Install Shield compressed file
|
|
(FileType.CAB, new byte[] {0x49, 0x53, 0x63, 0x28}),
|
|
|
|
// Install Shield compressed file
|
|
(FileType.HDR, new byte[] {0x49, 0x53, 0x63, 0x28}),
|
|
|
|
// MS Reader eBook
|
|
(FileType.LIT, new byte[] {0x49, 0x54, 0x4F, 0x4C, 0x49, 0x54, 0x4C, 0x53}),
|
|
|
|
// MS Compiled HTML Help File
|
|
(FileType.CHI, new byte[] {0x49, 0x54, 0x53, 0x46}),
|
|
|
|
// MS Compiled HTML Help File
|
|
(FileType.CHM, new byte[] {0x49, 0x54, 0x53, 0x46}),
|
|
|
|
// Inno Setup Uninstall Log
|
|
(FileType.DAT, new byte[] {0x49, 0x6E, 0x6E, 0x6F, 0x20, 0x53, 0x65, 0x74}),
|
|
|
|
// Inter@ctive Pager Backup (BlackBerry file
|
|
(FileType.IPD, new byte[] {0x49, 0x6E, 0x74, 0x65, 0x72, 0x40, 0x63, 0x74, 0x69, 0x76, 0x65, 0x20, 0x50, 0x61, 0x67, 0x65}),
|
|
|
|
// JARCS compressed archive
|
|
(FileType.JAR, new byte[] {0x4A, 0x41, 0x52, 0x43, 0x53, 0x00}),
|
|
|
|
// AOL ART file_1
|
|
(FileType.JG, new byte[] {0x4A, 0x47, 0x03, 0x0E}),
|
|
|
|
// AOL ART file_2
|
|
(FileType.JG, new byte[] {0x4A, 0x47, 0x04, 0x0E}),
|
|
|
|
// VMware 4 Virtual Disk
|
|
(FileType.VMDK, new byte[] {0x4B, 0x44, 0x4D}),
|
|
|
|
// KGB archive
|
|
(FileType.KGB, new byte[] {0x4B, 0x47, 0x42, 0x5F, 0x61, 0x72, 0x63, 0x68}),
|
|
|
|
// Win9x printer spool file
|
|
(FileType.SHD, new byte[] {0x4B, 0x49, 0x00, 0x00}),
|
|
|
|
// Windows shortcut file
|
|
(FileType.LNK, new byte[] {0x4C, 0x00, 0x00, 0x00, 0x01, 0x14, 0x02, 0x00}),
|
|
|
|
// MS COFF relocatable object code
|
|
(FileType.OBJ, new byte[] {0x4C, 0x01}),
|
|
|
|
// Tajima emboridery
|
|
(FileType.DST, new byte[] {0x4C, 0x41, 0x3A}),
|
|
|
|
// Windows help file_3
|
|
(FileType.GID, new byte[] {0x4C, 0x4E, 0x02, 0x00}),
|
|
|
|
// Windows help file_3
|
|
(FileType.HLP, new byte[] {0x4C, 0x4E, 0x02, 0x00}),
|
|
|
|
// EA Interchange Format File (IFF)_2
|
|
(FileType.IFF, new byte[] {0x4C, 0x49, 0x53, 0x54}),
|
|
|
|
// DeluxePaint Animation
|
|
(FileType.ANM, new byte[] {0x4C, 0x50, 0x46, 0x20, 0x00, 0x01}),
|
|
|
|
// Logical File Evidence Format
|
|
(FileType.E01, new byte[] {0x4C, 0x56, 0x46, 0x09, 0x0D, 0x0A, 0xFF, 0x00}),
|
|
|
|
// Merriam-Webster Pocket Dictionary
|
|
(FileType.PDB, new byte[] {0x4D, 0x2D, 0x57, 0x20, 0x50, 0x6F, 0x63, 0x6B}),
|
|
|
|
// Mozilla archive
|
|
(FileType.MAR, new byte[] {0x4D, 0x41, 0x52, 0x31, 0x00}),
|
|
|
|
// Microsoft-MSN MARC archive
|
|
(FileType.MAR, new byte[] {0x4D, 0x41, 0x52, 0x43}),
|
|
|
|
// MATLAB v5 workspace
|
|
(FileType.MAT, new byte[] {0x4D, 0x41, 0x54, 0x4C, 0x41, 0x42, 0x20, 0x35, 0x2E, 0x30, 0x20, 0x4D, 0x41, 0x54, 0x2D, 0x66, 0x69, 0x6C, 0x65}),
|
|
|
|
// MAr compressed archive
|
|
(FileType.MAR, new byte[] {0x4D, 0x41, 0x72, 0x30, 0x00}),
|
|
|
|
// TargetExpress target file
|
|
(FileType.MTE, new byte[] {0x4D, 0x43, 0x57, 0x20, 0x54, 0x65, 0x63, 0x68, 0x6E, 0x6F, 0x67, 0x6F, 0x6C, 0x69, 0x65, 0x73}),
|
|
|
|
// Windows dump file
|
|
(FileType.DMP, new byte[] {0x4D, 0x44, 0x4D, 0x50, 0x93, 0xA7}),
|
|
|
|
// Windows dump file
|
|
(FileType.HDMP, new byte[] {0x4D, 0x44, 0x4D, 0x50, 0x93, 0xA7}),
|
|
|
|
// Milestones project management file
|
|
(FileType.MLS, new byte[] {0x4D, 0x49, 0x4C, 0x45, 0x53}),
|
|
|
|
// Skype localization data file
|
|
(FileType.MLS, new byte[] {0x4D, 0x4C, 0x53, 0x57}),
|
|
|
|
// TIFF file_3
|
|
(FileType.TIF, new byte[] {0x4D, 0x4D, 0x00, 0x2A}),
|
|
|
|
// TIFF file_3
|
|
(FileType.TIFF, new byte[] {0x4D, 0x4D, 0x00, 0x2A}),
|
|
|
|
// TIFF file_4
|
|
(FileType.TIF, new byte[] {0x4D, 0x4D, 0x00, 0x2B}),
|
|
|
|
// TIFF file_4
|
|
(FileType.TIFF, new byte[] {0x4D, 0x4D, 0x00, 0x2B}),
|
|
|
|
// Yamaha Synthetic music Mobile Application Format
|
|
(FileType.MMF, new byte[] {0x4D, 0x4D, 0x4D, 0x44, 0x00, 0x00}),
|
|
|
|
// VMware BIOS state file
|
|
(FileType.NVRAM, new byte[] {0x4D, 0x52, 0x56, 0x4E}),
|
|
|
|
// Microsoft cabinet file
|
|
(FileType.CAB, new byte[] {0x4D, 0x53, 0x43, 0x46}),
|
|
|
|
// OneNote Package
|
|
(FileType.ONEPKG, new byte[] {0x4D, 0x53, 0x43, 0x46}),
|
|
|
|
// Powerpoint Packaged Presentation
|
|
(FileType.PPZ, new byte[] {0x4D, 0x53, 0x43, 0x46}),
|
|
|
|
// MS Access Snapshot Viewer file
|
|
(FileType.SNP, new byte[] {0x4D, 0x53, 0x43, 0x46}),
|
|
|
|
// OLE-SPSS-Visual C++ library file
|
|
(FileType.TLB, new byte[] {0x4D, 0x53, 0x46, 0x54, 0x02, 0x00, 0x01, 0x00}),
|
|
|
|
// Microsoft Windows Imaging Format
|
|
(FileType.WIM, new byte[] {0x4D, 0x53, 0x57, 0x49, 0x4D}),
|
|
|
|
// Sony Compressed Voice File
|
|
(FileType.CDR, new byte[] {0x4D, 0x53, 0x5F, 0x56, 0x4F, 0x49, 0x43, 0x45}),
|
|
|
|
// Sony Compressed Voice File
|
|
(FileType.DVF, new byte[] {0x4D, 0x53, 0x5F, 0x56, 0x4F, 0x49, 0x43, 0x45}),
|
|
|
|
// Sony Compressed Voice File
|
|
(FileType.MSV, new byte[] {0x4D, 0x53, 0x5F, 0x56, 0x4F, 0x49, 0x43, 0x45}),
|
|
|
|
// MIDI sound file
|
|
(FileType.MID, new byte[] {0x4D, 0x54, 0x68, 0x64}),
|
|
|
|
// MIDI sound file
|
|
(FileType.MIDI, new byte[] {0x4D, 0x54, 0x68, 0x64}),
|
|
|
|
// Yamaha Piano
|
|
(FileType.PCS, new byte[] {0x4D, 0x54, 0x68, 0x64}),
|
|
|
|
// CD Stomper Pro label file
|
|
(FileType.DSN, new byte[] {0x4D, 0x56}),
|
|
|
|
// Milestones project management file_1
|
|
(FileType.MLS, new byte[] {0x4D, 0x56, 0x32, 0x31, 0x34}),
|
|
|
|
// Milestones project management file_2
|
|
(FileType.MLS, new byte[] {0x4D, 0x56, 0x32, 0x43}),
|
|
|
|
// Windows-DOS executable file
|
|
(FileType.COM, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Windows-DOS executable file
|
|
(FileType.DLL, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Windows-DOS executable file
|
|
(FileType.DRV, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Windows-DOS executable file
|
|
(FileType.EXE, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Windows-DOS executable file
|
|
(FileType.PIF, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Windows-DOS executable file
|
|
(FileType.QTS, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Windows-DOS executable file
|
|
(FileType.QTX, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Windows-DOS executable file
|
|
(FileType.SYS, new byte[] {0x4D, 0x5A}),
|
|
|
|
// MS audio compression manager driver
|
|
(FileType.ACM, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Library cache file
|
|
(FileType.AX, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Control panel application
|
|
(FileType.CPL, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Font file
|
|
(FileType.FON, new byte[] {0x4D, 0x5A}),
|
|
|
|
// ActiveX-OLE Custom Control
|
|
(FileType.OCX, new byte[] {0x4D, 0x5A}),
|
|
|
|
// OLE object library
|
|
(FileType.OLB, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Screen saver
|
|
(FileType.SCR, new byte[] {0x4D, 0x5A}),
|
|
|
|
// VisualBASIC application
|
|
(FileType.VBX, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Windows virtual device drivers
|
|
(FileType.VXD, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Windows virtual device drivers
|
|
(FileType._386, new byte[] {0x4D, 0x5A}),
|
|
|
|
// Acrobat plug-in
|
|
(FileType.API, new byte[] {0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00}),
|
|
|
|
// DirectShow filter
|
|
(FileType.AX, new byte[] {0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00}),
|
|
|
|
// Audition graphic filter
|
|
(FileType.FLT, new byte[] {0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00}),
|
|
|
|
// ZoneAlam data file
|
|
(FileType.ZAP, new byte[] {0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00, 0x04, 0x00, 0x00, 0x00, 0xFF, 0xFF}),
|
|
|
|
// MS C++ debugging symbols file
|
|
(FileType.PDB, new byte[] {0x4D, 0x69, 0x63, 0x72, 0x6F, 0x73, 0x6F, 0x66, 0x74, 0x20, 0x43, 0x2F, 0x43, 0x2B, 0x2B, 0x20}),
|
|
|
|
// Visual Studio .NET file
|
|
(FileType.SLN, new byte[] {0x4D, 0x69, 0x63, 0x72, 0x6F, 0x73, 0x6F, 0x66, 0x74, 0x20, 0x56, 0x69, 0x73, 0x75, 0x61, 0x6C}),
|
|
|
|
// Windows Media Player playlist
|
|
(FileType.WPL, new byte[] {0x4D, 0x69, 0x63, 0x72, 0x6F, 0x73, 0x6F, 0x66, 0x74, 0x20, 0x57, 0x69, 0x6E, 0x64, 0x6F, 0x77, 0x73, 0x20, 0x4D, 0x65, 0x64, 0x69, 0x61, 0x20, 0x50, 0x6C, 0x61, 0x79, 0x65, 0x72, 0x20, 0x2D, 0x2D, 0x20}),
|
|
|
|
// VMapSource GPS Waypoint Database
|
|
(FileType.GDB, new byte[] {0x4D, 0x73, 0x52, 0x63, 0x66}),
|
|
|
|
// TomTom traffic data
|
|
(FileType.DAT, new byte[] {0x4E, 0x41, 0x56, 0x54, 0x52, 0x41, 0x46, 0x46}),
|
|
|
|
// MS Windows journal
|
|
(FileType.JNT, new byte[] {0x4E, 0x42, 0x2A, 0x00}),
|
|
|
|
// MS Windows journal
|
|
(FileType.JTP, new byte[] {0x4E, 0x42, 0x2A, 0x00}),
|
|
|
|
// NES Sound file
|
|
(FileType.NSF, new byte[] {0x4E, 0x45, 0x53, 0x4D, 0x1A, 0x01}),
|
|
|
|
// National Imagery Transmission Format file
|
|
(FileType.NTF, new byte[] {0x4E, 0x49, 0x54, 0x46, 0x30}),
|
|
|
|
// Agent newsreader character map
|
|
(FileType.COD, new byte[] {0x4E, 0x61, 0x6D, 0x65, 0x3A, 0x20}),
|
|
|
|
// 1Password 4 Cloud Keychain
|
|
(FileType.attachment, new byte[] {0x4F, 0x50, 0x43, 0x4C, 0x44, 0x41, 0x54}),
|
|
|
|
// Psion Series 3 Database
|
|
(FileType.DBF, new byte[] {0x4F, 0x50, 0x4C, 0x44, 0x61, 0x74, 0x61, 0x62}),
|
|
|
|
// OpenType font
|
|
(FileType.OTF, new byte[] {0x4F, 0x54, 0x54, 0x4F, 0x00}),
|
|
|
|
// Ogg Vorbis Codec compressed file
|
|
(FileType.OGA, new byte[] {0x4F, 0x67, 0x67, 0x53, 0x00, 0x02, 0x00, 0x00}),
|
|
|
|
// Ogg Vorbis Codec compressed file
|
|
(FileType.OGG, new byte[] {0x4F, 0x67, 0x67, 0x53, 0x00, 0x02, 0x00, 0x00}),
|
|
|
|
// Ogg Vorbis Codec compressed file
|
|
(FileType.OGV, new byte[] {0x4F, 0x67, 0x67, 0x53, 0x00, 0x02, 0x00, 0x00}),
|
|
|
|
// Ogg Vorbis Codec compressed file
|
|
(FileType.OGX, new byte[] {0x4F, 0x67, 0x67, 0x53, 0x00, 0x02, 0x00, 0x00}),
|
|
|
|
// Visio-DisplayWrite 4 text file
|
|
(FileType.DW4, new byte[] {0x4F, 0x7B}),
|
|
|
|
// Quicken QuickFinder Information File
|
|
(FileType.IDX, new byte[] {0x50, 0x00, 0x00, 0x00, 0x20, 0x00, 0x00, 0x00}),
|
|
|
|
// Portable Graymap Graphic
|
|
(FileType.PGM, new byte[] {0x50, 0x35, 0x0A}),
|
|
|
|
// Quake archive file
|
|
(FileType.PAK, new byte[] {0x50, 0x41, 0x43, 0x4B}),
|
|
|
|
// Windows memory dump
|
|
(FileType.DMP, new byte[] {0x50, 0x41, 0x47, 0x45, 0x44, 0x55}),
|
|
|
|
// PAX password protected bitmap
|
|
(FileType.PAX, new byte[] {0x50, 0x41, 0x58}),
|
|
|
|
// PestPatrol data-scan strings
|
|
(FileType.DAT, new byte[] {0x50, 0x45, 0x53, 0x54}),
|
|
|
|
// PGP disk image
|
|
(FileType.PGD, new byte[] {0x50, 0x47, 0x50, 0x64, 0x4D, 0x41, 0x49, 0x4E}),
|
|
|
|
// ChromaGraph Graphics Card Bitmap
|
|
(FileType.IMG, new byte[] {0x50, 0x49, 0x43, 0x54, 0x00, 0x08}),
|
|
|
|
// PKZIP archive_1
|
|
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// Android package
|
|
(FileType.APK, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// MacOS X Dashboard Widget
|
|
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// MS Office Open XML Format Document
|
|
(FileType.DOCX, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// MS Office Open XML Format Document
|
|
(FileType.PPTX, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// MS Office Open XML Format Document
|
|
(FileType.XLSX, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// Java archive_1
|
|
(FileType.JAR, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// Google Earth session file
|
|
(FileType.KMZ, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// KWord document
|
|
(FileType.KWD, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// OpenDocument template
|
|
(FileType.ODT, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// OpenDocument template
|
|
(FileType.ODP, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// OpenDocument template
|
|
(FileType.OTT, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// Microsoft Open XML paper specification
|
|
(FileType.OXPS, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// OpenOffice documents
|
|
(FileType.SXC, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// OpenOffice documents
|
|
(FileType.SXD, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// OpenOffice documents
|
|
(FileType.SXI, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// OpenOffice documents
|
|
(FileType.SXW, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// StarOffice spreadsheet
|
|
(FileType.SXC, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// Windows Media compressed skin file
|
|
(FileType.WMZ, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// Mozilla Browser Archive
|
|
(FileType.XPI, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// XML paper specification file
|
|
(FileType.XPS, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// eXact Packager Models
|
|
(FileType.XPT, new byte[] {0x50, 0x4B, 0x03, 0x04}),
|
|
|
|
// Open Publication Structure eBook
|
|
(FileType.EPUB, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x0A, 0x00, 0x02, 0x00}),
|
|
|
|
// ZLock Pro encrypted ZIP
|
|
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x01, 0x00}),
|
|
|
|
// MS Office 2007 documents
|
|
(FileType.DOCX, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x06, 0x00}),
|
|
|
|
// MS Office 2007 documents
|
|
(FileType.PPTX, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x06, 0x00}),
|
|
|
|
// MS Office 2007 documents
|
|
(FileType.XLSX, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x06, 0x00}),
|
|
|
|
// Java archive_2
|
|
(FileType.JAR, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x08, 0x00}),
|
|
|
|
// PKZIP archive_2
|
|
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x05, 0x06}),
|
|
|
|
// PKZIP archive_3
|
|
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x07, 0x08}),
|
|
|
|
// PKLITE archive
|
|
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x4C, 0x49, 0x54, 0x45}),
|
|
|
|
// PKSFX self-extracting archive
|
|
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x53, 0x70, 0x58}),
|
|
|
|
// Windows Program Manager group file
|
|
(FileType.GRP, new byte[] {0x50, 0x4D, 0x43, 0x43}),
|
|
|
|
// Norton Disk Doctor undo file
|
|
(FileType.DAT, new byte[] {0x50, 0x4E, 0x43, 0x49, 0x55, 0x4E, 0x44, 0x4F}),
|
|
|
|
// Microsoft Windows User State Migration Tool
|
|
(FileType.PMOCCMOC, new byte[] {0x50, 0x4D, 0x4F, 0x43, 0x43, 0x4D, 0x4F, 0x43}),
|
|
|
|
// Dreamcast Sound Format
|
|
(FileType.DSF, new byte[] {0x50, 0x53, 0x46, 0x12}),
|
|
|
|
// Puffer encrypted archive
|
|
(FileType.PUF, new byte[] {0x50, 0x55, 0x46, 0x58}),
|
|
|
|
// Quicken data
|
|
(FileType.QEL, new byte[] {0x51, 0x45, 0x4C, 0x20}),
|
|
|
|
// Qcow Disk Image
|
|
(FileType.QEMU, new byte[] {0x51, 0x46, 0x49}),
|
|
|
|
// RIFF Qualcomm PureVoice
|
|
(FileType.QCP, new byte[] {0x51, 0x4C, 0x43, 0x4D, 0x66, 0x6D, 0x74, 0x20}),
|
|
|
|
// Quicken data file
|
|
(FileType.ABD, new byte[] {0x51, 0x57, 0x20, 0x56, 0x65, 0x72, 0x2E, 0x20}),
|
|
|
|
// Quicken data file
|
|
(FileType.QSD, new byte[] {0x51, 0x57, 0x20, 0x56, 0x65, 0x72, 0x2E, 0x20}),
|
|
|
|
// Outlook-Exchange message subheader
|
|
(FileType.MSG, new byte[] {0x52, 0x00, 0x6F, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x20, 0x00, 0x45, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x72, 0x00, 0x79, 0x00}),
|
|
|
|
// Shareaza (P2P) thumbnail
|
|
(FileType.DAT, new byte[] {0x52, 0x41, 0x5A, 0x41, 0x54, 0x44, 0x42, 0x31}),
|
|
|
|
// R saved work space
|
|
(FileType.RDATA, new byte[] {0x52, 0x44, 0x58, 0x32, 0x0A}),
|
|
|
|
// WinNT Registry-Registry Undo files
|
|
(FileType.REG, new byte[] {0x52, 0x45, 0x47, 0x45, 0x44, 0x49, 0x54}),
|
|
|
|
// WinNT Registry-Registry Undo files
|
|
(FileType.SUD, new byte[] {0x52, 0x45, 0x47, 0x45, 0x44, 0x49, 0x54}),
|
|
|
|
// Antenna data file
|
|
(FileType.AD, new byte[] {0x52, 0x45, 0x56, 0x4E, 0x55, 0x4D, 0x3A, 0x2C}),
|
|
|
|
// Windows animated cursor
|
|
(FileType.ANI, new byte[] {0x52, 0x49, 0x46, 0x46}),
|
|
|
|
// Corel Presentation Exchange metadata
|
|
(FileType.CMX, new byte[] {0x52, 0x49, 0x46, 0x46}),
|
|
|
|
// CorelDraw document
|
|
(FileType.CDR, new byte[] {0x52, 0x49, 0x46, 0x46}),
|
|
|
|
// Video CD MPEG movie
|
|
(FileType.DAT, new byte[] {0x52, 0x49, 0x46, 0x46}),
|
|
|
|
// Micrografx Designer graphic
|
|
(FileType.DS4, new byte[] {0x52, 0x49, 0x46, 0x46}),
|
|
|
|
// 4X Movie video
|
|
(FileType._4XM, new byte[] {0x52, 0x49, 0x46, 0x46}),
|
|
|
|
// Resource Interchange File Format
|
|
(FileType.AVI, new byte[] {0x52, 0x49, 0x46, 0x46}),
|
|
|
|
// Resource Interchange File Format
|
|
(FileType.CDA, new byte[] {0x52, 0x49, 0x46, 0x46}),
|
|
|
|
// Resource Interchange File Format
|
|
(FileType.QCP, new byte[] {0x52, 0x49, 0x46, 0x46}),
|
|
|
|
// Resource Interchange File Format
|
|
(FileType.RMI, new byte[] {0x52, 0x49, 0x46, 0x46}),
|
|
|
|
// Resource Interchange File Format
|
|
(FileType.WAV, new byte[] {0x52, 0x49, 0x46, 0x46}),
|
|
|
|
// Resource Interchange File Format
|
|
(FileType.WEBP, new byte[] {0x52, 0x49, 0x46, 0x46}),
|
|
|
|
// RIFF Windows MIDI
|
|
(FileType.RMI, new byte[] {0x52, 0x4D, 0x49, 0x44, 0x64, 0x61, 0x74, 0x61}),
|
|
|
|
// WinNT Netmon capture file
|
|
(FileType.CAP, new byte[] {0x52, 0x54, 0x53, 0x53}),
|
|
|
|
// WinRAR compressed archive
|
|
(FileType.RAR, new byte[] {0x52, 0x61, 0x72, 0x21, 0x1A, 0x07, 0x00}),
|
|
|
|
// Generic e-mail_1
|
|
(FileType.EML, new byte[] {0x52, 0x65, 0x74, 0x75, 0x72, 0x6E, 0x2D, 0x50}),
|
|
|
|
// Windows prefetch
|
|
(FileType.PF, new byte[] {0x53, 0x43, 0x43, 0x41}),
|
|
|
|
// Underground Audio
|
|
(FileType.AST, new byte[] {0x53, 0x43, 0x48, 0x6C}),
|
|
|
|
// Img Software Bitmap
|
|
(FileType.IMG, new byte[] {0x53, 0x43, 0x4D, 0x49}),
|
|
|
|
// SMPTE DPX (big endian)
|
|
(FileType.SDPX, new byte[] {0x53, 0x44, 0x50, 0x58}),
|
|
|
|
// Harvard Graphics presentation
|
|
(FileType.SHW, new byte[] {0x53, 0x48, 0x4F, 0x57}),
|
|
|
|
// Sietronics CPI XRD document
|
|
(FileType.CPI, new byte[] {0x53, 0x49, 0x45, 0x54, 0x52, 0x4F, 0x4E, 0x49}),
|
|
|
|
// Flexible Image Transport System (FITS) file
|
|
(FileType.FITS, new byte[] {0x53, 0x49, 0x4D, 0x50, 0x4C, 0x45, 0x20, 0x20, 0x3D, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x54}),
|
|
|
|
// StuffIt archive
|
|
(FileType.SIT, new byte[] {0x53, 0x49, 0x54, 0x21, 0x00}),
|
|
|
|
// SmartDraw Drawing file
|
|
(FileType.SDR, new byte[] {0x53, 0x4D, 0x41, 0x52, 0x54, 0x44, 0x52, 0x57}),
|
|
|
|
// StorageCraft ShadownProtect backup file
|
|
(FileType.SPF, new byte[] {0x53, 0x50, 0x46, 0x49, 0x00}),
|
|
|
|
// MultiBit Bitcoin blockchain file
|
|
(FileType.SPVB, new byte[] {0x53, 0x50, 0x56, 0x42}),
|
|
|
|
// SQLite database file
|
|
(FileType.DB, new byte[] {0x53, 0x51, 0x4C, 0x69, 0x74, 0x65, 0x20, 0x66, 0x6F, 0x72, 0x6D, 0x61, 0x74, 0x20, 0x33, 0x00}),
|
|
|
|
// DB2 conversion file
|
|
(FileType.CNV, new byte[] {0x53, 0x51, 0x4C, 0x4F, 0x43, 0x4F, 0x4E, 0x56}),
|
|
|
|
// StuffIt compressed archive
|
|
(FileType.SIT, new byte[] {0x53, 0x74, 0x75, 0x66, 0x66, 0x49, 0x74, 0x20}),
|
|
|
|
// SuperCalc worksheet
|
|
(FileType.CAL, new byte[] {0x53, 0x75, 0x70, 0x65, 0x72, 0x43, 0x61, 0x6C}),
|
|
|
|
// Wii-GameCube
|
|
(FileType.THP, new byte[] {0x54, 0x48, 0x50, 0x00}),
|
|
|
|
// GNU Info Reader file
|
|
(FileType.INFO, new byte[] {0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20}),
|
|
|
|
// Unicode extensions
|
|
(FileType.UCE, new byte[] {0x55, 0x43, 0x45, 0x58}),
|
|
|
|
// UFA compressed archive
|
|
(FileType.UFA, new byte[] {0x55, 0x46, 0x41, 0xC6, 0xD2, 0xC1}),
|
|
|
|
// UFO Capture map file
|
|
(FileType.DAT, new byte[] {0x55, 0x46, 0x4F, 0x4F, 0x72, 0x62, 0x69, 0x74}),
|
|
|
|
// Visual C PreCompiled header
|
|
(FileType.PCH, new byte[] {0x56, 0x43, 0x50, 0x43, 0x48, 0x30}),
|
|
|
|
// Visual Basic User-defined Control file
|
|
(FileType.CTL, new byte[] {0x56, 0x45, 0x52, 0x53, 0x49, 0x4F, 0x4E, 0x20}),
|
|
|
|
// MapInfo Interchange Format file
|
|
(FileType.MIF, new byte[] {0x56, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x20}),
|
|
|
|
// SPSS template
|
|
(FileType.SCT, new byte[] {0x57, 0x04, 0x00, 0x00, 0x53, 0x50, 0x53, 0x53, 0x20, 0x74, 0x65, 0x6D, 0x70, 0x6C, 0x61, 0x74}),
|
|
|
|
// RIFF Windows Audio
|
|
(FileType.WAV, new byte[] {0x57, 0x41, 0x56, 0x45, 0x66, 0x6D, 0x74, 0x20}),
|
|
|
|
// RIFF WebP
|
|
(FileType.WEBP, new byte[] {0x57, 0x45, 0x42, 0x50}),
|
|
|
|
// Walkman MP3 file
|
|
(FileType.DAT, new byte[] {0x57, 0x4D, 0x4D, 0x50}),
|
|
|
|
// WordStar for Windows file
|
|
(FileType.WS2, new byte[] {0x57, 0x53, 0x32, 0x30, 0x30, 0x30}),
|
|
|
|
// WinZip compressed archive
|
|
(FileType.ZIP, new byte[] {0x57, 0x69, 0x6E, 0x5A, 0x69, 0x70}),
|
|
|
|
// Lotus WordPro file
|
|
(FileType.LWP, new byte[] {0x57, 0x6F, 0x72, 0x64, 0x50, 0x72, 0x6F}),
|
|
|
|
// Exchange e-mail
|
|
(FileType.EML, new byte[] {0x58, 0x2D}),
|
|
|
|
// Packet sniffer files
|
|
(FileType.CAP, new byte[] {0x58, 0x43, 0x50, 0x00}),
|
|
|
|
// XPCOM libraries
|
|
(FileType.XPT, new byte[] {0x58, 0x50, 0x43, 0x4F, 0x4D, 0x0A, 0x54, 0x79}),
|
|
|
|
// SMPTE DPX file (little endian)
|
|
(FileType.DPX, new byte[] {0x58, 0x50, 0x44, 0x53}),
|
|
|
|
// MS Publisher
|
|
(FileType.BDR, new byte[] {0x58, 0x54}),
|
|
|
|
// ZOO compressed archive
|
|
(FileType.ZOO, new byte[] {0x5A, 0x4F, 0x4F, 0x20}),
|
|
|
|
// Macromedia Shockwave Flash
|
|
(FileType.SWF, new byte[] {0x5A, 0x57, 0x53}),
|
|
|
|
// MS Exchange configuration file
|
|
(FileType.ECF, new byte[] {0x5B, 0x47, 0x65, 0x6E, 0x65, 0x72, 0x61, 0x6C}),
|
|
|
|
// Visual C++ Workbench Info File
|
|
(FileType.VCW, new byte[] {0x5B, 0x4D, 0x53, 0x56, 0x43}),
|
|
|
|
// Dial-up networking file
|
|
(FileType.DUN, new byte[] {0x5B, 0x50, 0x68, 0x6F, 0x6E, 0x65, 0x5D}),
|
|
|
|
// Lotus AMI Pro document_1
|
|
(FileType.SAM, new byte[] {0x5B, 0x56, 0x45, 0x52, 0x5D}),
|
|
|
|
// VocalTec VoIP media file
|
|
(FileType.VMD, new byte[] {0x5B, 0x56, 0x4D, 0x44, 0x5D}),
|
|
|
|
// Microsoft Code Page Translation file
|
|
(FileType.CPX, new byte[] {0x5B, 0x57, 0x69, 0x6E, 0x64, 0x6F, 0x77, 0x73}),
|
|
|
|
// Flight Simulator Aircraft Configuration
|
|
(FileType.CFG, new byte[] {0x5B, 0x66, 0x6C, 0x74, 0x73, 0x69, 0x6D, 0x2E}),
|
|
|
|
// WinAmp Playlist
|
|
(FileType.PLS, new byte[] {0x5B, 0x70, 0x6C, 0x61, 0x79, 0x6C, 0x69, 0x73, 0x74, 0x5D}),
|
|
|
|
// Lotus AMI Pro document_2
|
|
(FileType.SAM, new byte[] {0x5B, 0x76, 0x65, 0x72, 0x5D}),
|
|
|
|
// Husqvarna Designer
|
|
(FileType.HUS, new byte[] {0x5D, 0xFC, 0xC8, 0x00}),
|
|
|
|
// Jar archive
|
|
(FileType.JAR, new byte[] {0x5F, 0x27, 0xA8, 0x89}),
|
|
|
|
// EnCase case file
|
|
(FileType.CAS, new byte[] {0x5F, 0x43, 0x41, 0x53, 0x45, 0x5F}),
|
|
|
|
// EnCase case file
|
|
(FileType.CBK, new byte[] {0x5F, 0x43, 0x41, 0x53, 0x45, 0x5F}),
|
|
|
|
// Compressed archive file
|
|
(FileType.ARJ, new byte[] {0x60, 0xEA}),
|
|
|
|
// UUencoded BASE64 file
|
|
(FileType.b64, new byte[] {0x62, 0x65, 0x67, 0x69, 0x6E, 0x2D, 0x62, 0x61, 0x73, 0x65, 0x36, 0x34}),
|
|
|
|
// Apple Core Audio File
|
|
(FileType.CAF, new byte[] {0x63, 0x61, 0x66, 0x66}),
|
|
|
|
// Macintosh encrypted Disk image (v1)
|
|
(FileType.DMG, new byte[] {0x63, 0x64, 0x73, 0x61, 0x65, 0x6E, 0x63, 0x72}),
|
|
|
|
// Virtual PC HD image
|
|
(FileType.VHD, new byte[] {0x63, 0x6F, 0x6E, 0x65, 0x63, 0x74, 0x69, 0x78}),
|
|
|
|
// Photoshop Custom Shape
|
|
(FileType.CSH, new byte[] {0x63, 0x75, 0x73, 0x68, 0x00, 0x00, 0x00, 0x02}),
|
|
|
|
// Intel PROset-Wireless Profile
|
|
(FileType.P10, new byte[] {0x64, 0x00, 0x00, 0x00}),
|
|
|
|
// Torrent file
|
|
(FileType.TORRENT, new byte[] {0x64, 0x38, 0x3A, 0x61, 0x6E, 0x6E, 0x6F, 0x75, 0x6E, 0x63, 0x65}),
|
|
|
|
// Dalvik (Android) executable file
|
|
(FileType.dex, new byte[] {0x64, 0x65, 0x78, 0x0A}),
|
|
|
|
// Audacity audio file
|
|
(FileType.AU, new byte[] {0x64, 0x6E, 0x73, 0x2E}),
|
|
|
|
// MS Visual Studio workspace file
|
|
(FileType.DSW, new byte[] {0x64, 0x73, 0x77, 0x66, 0x69, 0x6C, 0x65}),
|
|
|
|
// Macintosh encrypted Disk image (v2)
|
|
(FileType.DMG, new byte[] {0x65, 0x6E, 0x63, 0x72, 0x63, 0x64, 0x73, 0x61}),
|
|
|
|
// WinNT printer spool file
|
|
(FileType.SHD, new byte[] {0x66, 0x49, 0x00, 0x00}),
|
|
|
|
// Free Lossless Audio Codec file
|
|
(FileType.FLAC, new byte[] {0x66, 0x4C, 0x61, 0x43, 0x00, 0x00, 0x00, 0x22}),
|
|
|
|
// MPEG-4 video file_1
|
|
(FileType.MP4, new byte[] {0x66, 0x74, 0x79, 0x70, 0x33, 0x67, 0x70, 0x35}),
|
|
|
|
// Apple Lossless Audio Codec file
|
|
(FileType.M4A, new byte[] {0x66, 0x74, 0x79, 0x70, 0x4D, 0x34, 0x41, 0x20}),
|
|
|
|
// ISO Media-MPEG v4-iTunes AVC-LC
|
|
(FileType.FLV, new byte[] {0x66, 0x74, 0x79, 0x70, 0x4D, 0x34, 0x56, 0x20}),
|
|
|
|
// ISO Media-MPEG v4-iTunes AVC-LC
|
|
(FileType.M4V, new byte[] {0x66, 0x74, 0x79, 0x70, 0x4D, 0x34, 0x56, 0x20}),
|
|
|
|
// MPEG-4 video file_2
|
|
(FileType.MP4, new byte[] {0x66, 0x74, 0x79, 0x70, 0x4D, 0x53, 0x4E, 0x56}),
|
|
|
|
// ISO Base Media file (MPEG-4) v1
|
|
(FileType.MP4, new byte[] {0x66, 0x74, 0x79, 0x70, 0x69, 0x73, 0x6F, 0x6D}),
|
|
|
|
// MPEG-4 video-QuickTime file
|
|
(FileType.M4V, new byte[] {0x66, 0x74, 0x79, 0x70, 0x6D, 0x70, 0x34, 0x32}),
|
|
|
|
// QuickTime movie_7
|
|
(FileType.MOV, new byte[] {0x66, 0x74, 0x79, 0x70, 0x71, 0x74, 0x20, 0x20}),
|
|
|
|
// Win2000-XP printer spool file
|
|
(FileType.SHD, new byte[] {0x67, 0x49, 0x00, 0x00}),
|
|
|
|
// GIMP file
|
|
(FileType.XCF, new byte[] {0x67, 0x69, 0x6d, 0x70, 0x20, 0x78, 0x63, 0x66}),
|
|
|
|
// Win Server 2003 printer spool file
|
|
(FileType.SHD, new byte[] {0x68, 0x49, 0x00, 0x00}),
|
|
|
|
// Skype user data file
|
|
(FileType.DBB, new byte[] {0x6C, 0x33, 0x33, 0x6C}),
|
|
|
|
// QuickTime movie_1
|
|
(FileType.MOV, new byte[] {0x6D, 0x6F, 0x6F, 0x76}),
|
|
|
|
// QuickTime movie_2
|
|
(FileType.MOV, new byte[] {0x66, 0x72, 0x65, 0x65}),
|
|
|
|
// QuickTime movie_3
|
|
(FileType.MOV, new byte[] {0x6D, 0x64, 0x61, 0x74}),
|
|
|
|
// QuickTime movie_4
|
|
(FileType.MOV, new byte[] {0x77, 0x69, 0x64, 0x65}),
|
|
|
|
// QuickTime movie_5
|
|
(FileType.MOV, new byte[] {0x70, 0x6E, 0x6F, 0x74}),
|
|
|
|
// QuickTime movie_6
|
|
(FileType.MOV, new byte[] {0x73, 0x6B, 0x69, 0x70}),
|
|
|
|
// Internet Explorer v11 Tracking Protection List
|
|
(FileType.TPL, new byte[] {0x6D, 0x73, 0x46, 0x69, 0x6C, 0x74, 0x65, 0x72, 0x4C, 0x69, 0x73, 0x74}),
|
|
|
|
// MultiBit Bitcoin wallet information
|
|
(FileType.INFO, new byte[] {0x6D, 0x75, 0x6C, 0x74, 0x69, 0x42, 0x69, 0x74, 0x2E, 0x69, 0x6E, 0x66, 0x6F}),
|
|
|
|
// WinNT registry file
|
|
(FileType.DAT, new byte[] {0x72, 0x65, 0x67, 0x66}),
|
|
|
|
// Sonic Foundry Acid Music File
|
|
(FileType.AC, new byte[] {0x72, 0x69, 0x66, 0x66}),
|
|
|
|
// RealMedia metafile
|
|
(FileType.RAM, new byte[] {0x72, 0x74, 0x73, 0x70, 0x3A, 0x2F, 0x2F}),
|
|
|
|
// Allegro Generic Packfile (compressed)
|
|
(FileType.DAT, new byte[] {0x73, 0x6C, 0x68, 0x21}),
|
|
|
|
// Allegro Generic Packfile (uncompressed)
|
|
(FileType.DAT, new byte[] {0x73, 0x6C, 0x68, 0x2E}),
|
|
|
|
// PalmOS SuperMemo
|
|
(FileType.PDB, new byte[] {0x73, 0x6D, 0x5F}),
|
|
|
|
// STL (STereoLithography) file
|
|
(FileType.STL, new byte[] {0x73, 0x6F, 0x6C, 0x69, 0x64}),
|
|
|
|
// CALS raster bitmap
|
|
(FileType.CAL, new byte[] {0x73, 0x72, 0x63, 0x64, 0x6F, 0x63, 0x69, 0x64}),
|
|
|
|
// PowerBASIC Debugger Symbols
|
|
(FileType.PDB, new byte[] {0x73, 0x7A, 0x65, 0x7A}),
|
|
|
|
// PathWay Map file
|
|
(FileType.PRC, new byte[] {0x74, 0x42, 0x4D, 0x50, 0x4B, 0x6E, 0x57, 0x72}),
|
|
|
|
// TrueType font
|
|
(FileType.TTF, new byte[] {0x74, 0x72, 0x75, 0x65, 0x00}),
|
|
|
|
// Tape Archive
|
|
(FileType.TAR, new byte[] {0x75, 0x73, 0x74, 0x61, 0x72}),
|
|
|
|
// OpenEXR bitmap image
|
|
(FileType.EXR, new byte[] {0x76, 0x2F, 0x31, 0x01}),
|
|
|
|
// Qimage filter
|
|
(FileType.FLT, new byte[] {0x76, 0x32, 0x30, 0x30, 0x33, 0x2E, 0x31, 0x30}),
|
|
|
|
// MacOS X image file
|
|
(FileType.DMG, new byte[] {0x78, 0x01, 0x73, 0x0D, 0x62, 0x62, 0x60}),
|
|
|
|
// eXtensible ARchive file
|
|
(FileType.XAR, new byte[] {0x78, 0x61, 0x72, 0x21}),
|
|
|
|
// ZoomBrowser Image Index
|
|
(FileType.INFO, new byte[] {0x7A, 0x62, 0x65, 0x78}),
|
|
|
|
// Windows application log
|
|
(FileType.LGC, new byte[] {0x7B, 0x0D, 0x0A, 0x6F, 0x20}),
|
|
|
|
// Windows application log
|
|
(FileType.LGD, new byte[] {0x7B, 0x0D, 0x0A, 0x6F, 0x20}),
|
|
|
|
// MS WinMobile personal note
|
|
(FileType.PWI, new byte[] {0x7B, 0x5C, 0x70, 0x77, 0x69}),
|
|
|
|
// Rich Text Format
|
|
(FileType.RTF, new byte[] {0x7B, 0x5C, 0x72, 0x74, 0x66, 0x31}),
|
|
|
|
// Corel Paint Shop Pro image
|
|
(FileType.PSP, new byte[] {0x7E, 0x42, 0x4B, 0x00}),
|
|
|
|
// Easy Street Draw diagram file
|
|
(FileType.ESD, new byte[] {0x7E, 0x45, 0x53, 0x44, 0x77, 0xF6, 0x85, 0x3E, 0xBF, 0x6A, 0xD2, 0x11, 0x45, 0x61, 0x73, 0x79, 0x20, 0x53, 0x74, 0x72, 0x65, 0x65, 0x74, 0x20, 0x44, 0x72, 0x61, 0x77}),
|
|
|
|
// Digital Watchdog DW-TP-500G audio
|
|
(FileType.IMG, new byte[] {0x7E, 0x74, 0x2C, 0x01, 0x50, 0x70, 0x02, 0x4D, 0x52}),
|
|
|
|
// Relocatable object code
|
|
(FileType.OBJ, new byte[] {0x80}),
|
|
|
|
// Dreamcast audio
|
|
(FileType.ADX, new byte[] {0x80, 0x00, 0x00, 0x20, 0x03, 0x12, 0x04}),
|
|
|
|
// Kodak Cineon image
|
|
(FileType.CIN, new byte[] {0x80, 0x2A, 0x5F, 0xD7}),
|
|
|
|
// Outlook Express address book (Win95)
|
|
(FileType.WAB, new byte[] {0x81, 0x32, 0x84, 0xC1, 0x85, 0x05, 0xD0, 0x11}),
|
|
|
|
// WordPerfect text
|
|
(FileType.WPF, new byte[] {0x81, 0xCD, 0xAB}),
|
|
|
|
// PNG image
|
|
(FileType.PNG, new byte[] {0x89, 0x50, 0x4E, 0x47, 0x0D, 0x0A, 0x1A, 0x0A}),
|
|
|
|
// MS Answer Wizard
|
|
(FileType.AW, new byte[] {0x8A, 0x01, 0x09, 0x00, 0x00, 0x00, 0xE1, 0x08}),
|
|
|
|
// Hamarsoft compressed archive
|
|
(FileType.HAP, new byte[] {0x91, 0x33, 0x48, 0x46}),
|
|
|
|
// PGP secret keyring_1
|
|
(FileType.SKR, new byte[] {0x95, 0x00}),
|
|
|
|
// PGP secret keyring_2
|
|
(FileType.SKR, new byte[] {0x95, 0x01}),
|
|
|
|
// JBOG2 image file
|
|
(FileType.JB2, new byte[] {0x97, 0x4A, 0x42, 0x32, 0x0D, 0x0A, 0x1A, 0x0A}),
|
|
|
|
// GPG public keyring
|
|
(FileType.GPG, new byte[] {0x99}),
|
|
|
|
// PGP public keyring
|
|
(FileType.PKR, new byte[] {0x99, 0x01}),
|
|
|
|
// Outlook address file
|
|
(FileType.WAB, new byte[] {0x9C, 0xCB, 0xCB, 0x8D, 0x13, 0x75, 0xD2, 0x11}),
|
|
|
|
// Access Data FTK evidence
|
|
(FileType.DAT, new byte[] {0xA9, 0x0D, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}),
|
|
|
|
// Quicken data
|
|
(FileType.QDF, new byte[] {0xAC, 0x9E, 0xBD, 0x8F, 0x00, 0x00}),
|
|
|
|
// PowerPoint presentation subheader_3
|
|
(FileType.PPT, new byte[] {0xA0, 0x46, 0x1D, 0xF0}),
|
|
|
|
// BGBlitz position database file
|
|
(FileType.PDB, new byte[] {0xAC, 0xED, 0x00, 0x05, 0x73, 0x72, 0x00, 0x12}),
|
|
|
|
// Win95 password file
|
|
(FileType.PWL, new byte[] {0xB0, 0x4D, 0x46, 0x43}),
|
|
|
|
// PCX bitmap
|
|
(FileType.DCX, new byte[] {0xB1, 0x68, 0xDE, 0x3A}),
|
|
|
|
// Acronis True Image_1
|
|
(FileType.TIB, new byte[] {0xB4, 0x6E, 0x68, 0x44}),
|
|
|
|
// Windows calendar
|
|
(FileType.CAL, new byte[] {0xB5, 0xA2, 0xB0, 0xB3, 0xB3, 0xB0, 0xA5, 0xB5}),
|
|
|
|
// InstallShield Script
|
|
(FileType.INS, new byte[] {0xB8, 0xC9, 0x0C, 0x00}),
|
|
|
|
// MS Write file_3
|
|
(FileType.WRI, new byte[] {0xBE, 0x00, 0x00, 0x00, 0xAB}),
|
|
|
|
// Palm Desktop DateBook
|
|
(FileType.DAT, new byte[] {0xBE, 0xBA, 0xFE, 0xCA, 0x0F, 0x50, 0x61, 0x6C, 0x6D, 0x53, 0x47, 0x20, 0x44, 0x61, 0x74, 0x61}),
|
|
|
|
// MS Agent Character file
|
|
(FileType.ACS, new byte[] {0xC3, 0xAB, 0xCD, 0xAB}),
|
|
|
|
// Adobe encapsulated PostScript
|
|
(FileType.EPS, new byte[] {0xC5, 0xD0, 0xD3, 0xC6}),
|
|
|
|
// Jeppesen FliteLog file
|
|
(FileType.LBK, new byte[] {0xC8, 0x00, 0x79, 0x00}),
|
|
|
|
// Java bytecode
|
|
(FileType.CLASS, new byte[] {0xCA, 0xFE, 0xBA, 0xBE}),
|
|
|
|
// Acronis True Image_2
|
|
(FileType.TIB, new byte[] {0xCE, 0x24, 0xB9, 0xA2, 0x20, 0x00, 0x00, 0x00}),
|
|
|
|
// Java Cryptography Extension keystore
|
|
(FileType.JCEKS, new byte[] {0xCE, 0xCE, 0xCE, 0xCE}),
|
|
|
|
// Perfect Office document
|
|
(FileType.DOC, new byte[] {0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1, 0x00}),
|
|
|
|
// Outlook Express e-mail folder
|
|
(FileType.DBX, new byte[] {0xCF, 0xAD, 0x12, 0xFE}),
|
|
|
|
// Microsoft Office document
|
|
(FileType.DOC, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Microsoft Office document
|
|
(FileType.DOT, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Microsoft Office document
|
|
(FileType.PPS, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Microsoft Office document
|
|
(FileType.PPT, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Microsoft Office document
|
|
(FileType.XLA, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Microsoft Office document
|
|
(FileType.XLS, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Microsoft Office document
|
|
(FileType.WIZ, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// CaseWare Working Papers
|
|
(FileType.AC_, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Access project file
|
|
(FileType.ADP, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Lotus-IBM Approach 97 file
|
|
(FileType.APR, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// MSWorks database file
|
|
(FileType.DB, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Microsoft Common Console Document
|
|
(FileType.MSC, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Microsoft Installer package
|
|
(FileType.MSI, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Microsoft Installer Patch
|
|
(FileType.MSP, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Minitab data file
|
|
(FileType.MTW, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// ArcMap GIS project file
|
|
(FileType.MXD, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Developer Studio File Options file
|
|
(FileType.OPT, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// MS Publisher file
|
|
(FileType.PUB, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Revit Project file
|
|
(FileType.RVT, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Visual Studio Solution User Options file
|
|
(FileType.SOU, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// SPSS output file
|
|
(FileType.SPO, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// Visio file
|
|
(FileType.VSD, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// MSWorks text document
|
|
(FileType.WPS, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
|
|
|
|
// WinPharoah filter file
|
|
(FileType.FTR, new byte[] {0xD2, 0x0A, 0x00, 0x00}),
|
|
|
|
// AOL history|typed URL files
|
|
(FileType.ARL, new byte[] {0xD4, 0x2A}),
|
|
|
|
// AOL history|typed URL files
|
|
(FileType.AUT, new byte[] {0xD4, 0x2A}),
|
|
|
|
// Windows graphics metafile
|
|
(FileType.WMF, new byte[] {0xD7, 0xCD, 0xC6, 0x9A}),
|
|
|
|
// Word 2.0 file
|
|
(FileType.DOC, new byte[] {0xDB, 0xA5, 0x2D, 0x00}),
|
|
|
|
// Corel color palette
|
|
(FileType.CPL, new byte[] {0xDC, 0xDC}),
|
|
|
|
// eFax file
|
|
(FileType.EFX, new byte[] {0xDC, 0xFE}),
|
|
|
|
// Amiga icon
|
|
(FileType.INFO, new byte[] {0xE3, 0x10, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00}),
|
|
|
|
// Win98 password file
|
|
(FileType.PWL, new byte[] {0xE3, 0x82, 0x85, 0x96}),
|
|
|
|
// MS OneNote note
|
|
(FileType.ONE, new byte[] {0xE4, 0x52, 0x5C, 0x7B, 0x8C, 0xD8, 0xA7, 0x4D}),
|
|
|
|
// Windows executable file_1
|
|
(FileType.COM, new byte[] {0xE8}),
|
|
|
|
// Windows executable file_1
|
|
(FileType.SYS, new byte[] {0xE8}),
|
|
|
|
// Windows executable file_2
|
|
(FileType.COM, new byte[] {0xE9}),
|
|
|
|
// Windows executable file_2
|
|
(FileType.SYS, new byte[] {0xE9}),
|
|
|
|
// Windows executable file_3
|
|
(FileType.COM, new byte[] {0xEB}),
|
|
|
|
// Windows executable file_3
|
|
(FileType.SYS, new byte[] {0xEB}),
|
|
|
|
// GEM Raster file
|
|
(FileType.IMG, new byte[] {0xEB, 0x3C, 0x90, 0x2A}),
|
|
|
|
// Word document subheader
|
|
(FileType.DOC, new byte[] {0xEC, 0xA5, 0xC1, 0x00}),
|
|
|
|
// RedHat Package Manager
|
|
(FileType.RPM, new byte[] {0xED, 0xAB, 0xEE, 0xDB}),
|
|
|
|
// Windows Script Component (UTF-8)_1
|
|
(FileType.WSF, new byte[] {0xEF, 0xBB, 0xBF, 0x3C}),
|
|
|
|
// Windows Script Component (UTF-8)_2
|
|
(FileType.WSC, new byte[] {0xEF, 0xBB, 0xBF, 0x3C, 0x3F}),
|
|
|
|
// Bitcoin-Qt blockchain block file
|
|
(FileType.DAT, new byte[] {0xF9, 0xBE, 0xB4, 0xD9}),
|
|
|
|
// XZ archive
|
|
(FileType.XZ, new byte[] {0xFD, 0x37, 0x7A, 0x58, 0x5A, 0x00}),
|
|
|
|
// MS Publisher subheader
|
|
(FileType.PUB, new byte[] {0xFD, 0x37, 0x7A, 0x58, 0x5A, 0x00}),
|
|
|
|
// Thumbs.db subheader
|
|
(FileType.DB, new byte[] {0xFD, 0xFF, 0xFF, 0xFF}),
|
|
|
|
// MS Publisher file subheader
|
|
(FileType.PUB, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x02}),
|
|
|
|
// Visual Studio Solution subheader
|
|
(FileType.SUO, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x04}),
|
|
|
|
// PowerPoint presentation subheader_4
|
|
(FileType.PPT, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x0E, 0x00, 0x00, 0x00}),
|
|
|
|
// Excel spreadsheet subheader_2
|
|
(FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x10}),
|
|
|
|
// PowerPoint presentation subheader_5
|
|
(FileType.PPT, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x1C, 0x00, 0x00, 0x00}),
|
|
|
|
// Excel spreadsheet subheader_3
|
|
(FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x1F}),
|
|
|
|
// Developer Studio subheader
|
|
(FileType.OPT, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x20}),
|
|
|
|
// Excel spreadsheet subheader_4
|
|
(FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x22}),
|
|
|
|
// Excel spreadsheet subheader_5
|
|
(FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x23}),
|
|
|
|
// Excel spreadsheet subheader_6
|
|
(FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x28}),
|
|
|
|
// Excel spreadsheet subheader_7
|
|
(FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x29}),
|
|
|
|
// PowerPoint presentation subheader_6
|
|
(FileType.PPT, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x43, 0x00, 0x00, 0x00}),
|
|
|
|
// Symantex Ghost image file
|
|
(FileType.GHO, new byte[] {0xFE, 0xEF}),
|
|
|
|
// Symantex Ghost image file
|
|
(FileType.GHS, new byte[] {0xFE, 0xEF}),
|
|
|
|
// Windows executable
|
|
(FileType.SYS, new byte[] {0xFF}),
|
|
|
|
// Works for Windows spreadsheet
|
|
(FileType.WKS, new byte[] {0xFF, 0x00, 0x02, 0x00, 0x04, 0x04, 0x05, 0x54}),
|
|
|
|
// QuickReport Report
|
|
(FileType.QRP, new byte[] {0xFF, 0x0A, 0x00}),
|
|
|
|
// Windows international code page
|
|
(FileType.CPI, new byte[] {0xFF, 0x46, 0x4F, 0x4E, 0x54}),
|
|
|
|
// Keyboard driver file
|
|
(FileType.SYS, new byte[] {0xFF, 0x4B, 0x45, 0x59, 0x42, 0x20, 0x20, 0x20}),
|
|
|
|
// WordPerfect text and graphics
|
|
(FileType.WP, new byte[] {0xFF, 0x57, 0x50, 0x43}),
|
|
|
|
// WordPerfect text and graphics
|
|
(FileType.WPD, new byte[] {0xFF, 0x57, 0x50, 0x43}),
|
|
|
|
// WordPerfect text and graphics
|
|
(FileType.WPG, new byte[] {0xFF, 0x57, 0x50, 0x43}),
|
|
|
|
// WordPerfect text and graphics
|
|
(FileType.WPP, new byte[] {0xFF, 0x57, 0x50, 0x43}),
|
|
|
|
// WordPerfect text and graphics
|
|
(FileType.WP5, new byte[] {0xFF, 0x57, 0x50, 0x43}),
|
|
|
|
// WordPerfect text and graphics
|
|
(FileType.WP6, new byte[] {0xFF, 0x57, 0x50, 0x43}),
|
|
|
|
// JPEG-EXIF-SPIFF images
|
|
(FileType.JFIF, new byte[] {0xFF, 0xD8, 0xFF}),
|
|
|
|
// JPEG-EXIF-SPIFF images
|
|
(FileType.JPE, new byte[] {0xFF, 0xD8, 0xFF}),
|
|
|
|
// JPEG-EXIF-SPIFF images
|
|
(FileType.JPEG, new byte[] {0xFF, 0xD8, 0xFF}),
|
|
|
|
// JPEG-EXIF-SPIFF images
|
|
(FileType.JPG, new byte[] {0xFF, 0xD8, 0xFF}),
|
|
|
|
// MPEG-4 AAC audio
|
|
(FileType.AAC, new byte[] {0xFF, 0xF1}),
|
|
|
|
// MPEG-2 AAC audio
|
|
(FileType.AAC, new byte[] {0xFF, 0xF9}),
|
|
|
|
// Windows Registry file
|
|
(FileType.REG, new byte[] {0xFF, 0xFE}),
|
|
|
|
// MSinfo file
|
|
(FileType.MOF, new byte[] {0xFF, 0xFE, 0x23, 0x00, 0x6C, 0x00, 0x69, 0x00}),
|
|
|
|
// DOS system driver
|
|
(FileType.SYS, new byte[] {0xFF, 0xFF, 0xFF, 0xFF}),
|
|
|
|
|
|
};}} |