wabbajack/Wabbajack.Common/FileSignatures/Signatures.cs
2021-10-23 10:51:17 -06:00

2515 lines
75 KiB
C#

namespace Wabbajack.Common.FileSignatures;
public enum FileType
{
_123,
_386,
_3G2,
_3GG,
_3GP,
_3GP5,
_4XM,
_7Z,
AAC,
ABA,
ABD,
ABI,
ABY,
AC,
AC_,
ACCDB,
ACM,
ACS,
AD,
ADF,
ADP,
ADX,
AIFF,
AIN,
AMR,
ANI,
ANM,
API,
APK,
APR,
APUF,
ARC,
ARF,
ARJ,
ARL,
ASF,
AST,
ASX,
attachment,
AU,
AUT,
AVI,
AW,
AX,
b64,
B85,
BA2,
BAG,
BDR,
BIN,
BLI,
BMP,
BPG,
BSA,
BSB,
BZ2,
CAB,
CAF,
CAL,
CAP,
CAS,
CAT,
CBD,
CBK,
CDA,
CDR,
CFG,
CHI,
CHM,
CIN,
CL5,
CLASS,
CLB,
CMX,
CNV,
COD,
COM,
CPE,
CPI,
CPL,
CPT,
CPX,
CRU,
CRW,
CRX,
CSD,
CSH,
CSO,
CTF,
CTL,
CUR,
DAA,
DAT,
DAX,
DB,
DB3,
DB4,
DBA,
DBB,
DBF,
DBX,
DCI,
DCX,
DDS,
dex,
DIB,
DLL,
DMG,
DMP,
DMS,
DOC,
DOCX,
DOT,
DPX,
DRV,
DRW,
DS4,
DSF,
DSN,
DSP,
DSS,
DST,
DSW,
DTD,
DUN,
DVF,
DVR,
DW4,
DWG,
E01,
ECF,
EFX,
EML,
ENL,
EPS,
EPUB,
ESD,
ETH,
EVT,
EVTX,
Ex01,
EXE,
EXR,
FBM,
FDB,
FDF,
FITS,
FLAC,
FLI,
FLT,
FLV,
FM,
FON,
FTR,
G64,
GDB,
GED,
GHO,
GHS,
GID,
GIF,
GPG,
GPX,
GRB,
GRP,
GX2,
GZ,
HAP,
HDMP,
HDR,
HLP,
HQX,
HUS,
ICO,
IDX,
IFF,
IFO,
IMG,
IND,
INDD,
INFO,
INS,
IPD,
ISO,
IVR,
JAR,
JB2,
JCEKS,
JFIF,
JG,
JNT,
JP2,
JPE,
JPEG,
JPG,
JTP,
KGB,
KMZ,
KOZ,
KWD,
LBK,
LGC,
LGD,
LHA,
LIB,
LIT,
LNK,
LOG,
LWP,
LZH,
M4A,
M4V,
MANIFEST,
MAR,
MAT,
MDB,
MDF,
MDI,
MID,
MIDI,
MIF,
MKV,
MLS,
MMF,
MNY,
MOF,
MOV,
MP,
MP3,
MP4,
MPG,
MSC,
MSF,
MSG,
MSI,
MSP,
MSV,
MTE,
MTW,
MXD,
MXF,
NRI,
NSF,
NTF,
NVRAM,
OBJ,
OCX,
ODP,
ODT,
OGA,
OGG,
OGV,
OGX,
OLB,
ONE,
ONEPKG,
OPT,
ORG,
OST,
OTF,
OTT,
OXPS,
P10,
PAK,
PAT,
PAX,
PCH,
PCS,
PCX,
PDB,
PDF,
PEC,
PES,
PF,
PFC,
PGD,
PGM,
PIF,
PKR,
PLS,
PMOCCMOC,
PNG,
PPS,
PPT,
PPTX,
PPZ,
PRC,
PSD,
PSP,
PUB,
PUF,
PWI,
PWL,
QBB,
QCP,
QDF,
QEL,
QEMU,
QPH,
QRP,
QSD,
QTS,
QTX,
QXD,
RA,
RAM,
RAR,
RAR_NEW,
RAR_OLD,
RBI,
RDATA,
REG,
RGB,
RM,
RMI,
RMVB,
RPM,
RTD,
RTF,
RVT,
SAM,
SAV,
SCR,
SCT,
SDPX,
SDR,
SH3,
SHD,
SHW,
SIB,
SIL,
SIT,
SKF,
SKR,
SLE,
SLN,
SNM,
SNP,
SOU,
SPF,
SPL,
SPO,
SPVB,
STL,
SUD,
SUO,
SWF,
SXC,
SXD,
SXI,
SXW,
SYS,
SYW,
TAR,
TARZ,
TB2,
TBI,
TBZ2,
TES3,
THP,
TIB,
TIF,
TIFF,
TLB,
TORRENT,
TPL,
TR1,
TTF,
UCE,
UFA,
VBE,
VBX,
VCD,
VCF,
VCW,
VHD,
VLT,
VMD,
VMDK,
VOB,
VOC,
VSD,
VXD,
WAB,
WALLET,
WAV,
WB2,
WB3,
WEBM,
WEBP,
WIM,
WIZ,
WK1,
WK3,
WK4,
WK5,
WKS,
WMA,
WMF,
WMV,
WMZ,
WP,
WP5,
WP6,
WPD,
WPF,
WPG,
WPL,
WPP,
WPS,
WRI,
WS,
WS2,
WSC,
WSF,
XAR,
XCF,
XDR,
XLA,
XLS,
XLSX,
XML,
XPI,
XPS,
XPT,
XXX,
XZ,
ZAP,
ZIP,
ZOO
}
public static class Definitions
{
public static (FileType, byte[])[] Signatures =
{
// Morrowind BSA
(FileType.TES3, new byte[] {0x00, 0x01, 0x00, 0x00}),
// TES 4-5 and FO 3 BSA
(FileType.BSA, new byte[] {0x42, 0x53, 0x41, 0x00}),
// FO4 BSA
(FileType.BA2, new byte[] {0x42, 0x54, 0x44, 0x58}),
// Relaxed RAR format
(FileType.RAR, new byte[] {0x52, 0x61, 0x72, 0x21}),
// RAR5 or newer
(FileType.RAR_NEW, new byte[] {0x52, 0x61, 0x72, 0x21, 0x1A, 0x07, 0x01, 0x00}),
// RAR4 or older
(FileType.RAR_OLD, new byte[] {0x52, 0x61, 0x72, 0x21, 0x1A, 0x07, 0x00}),
// DDS
(FileType.DDS, new byte[] {0x44, 0x44, 0x53, 0x20}),
// JPEG2000 image files
(FileType.JP2, new byte[] {0x00, 0x00, 0x00, 0x0C, 0x6A, 0x50, 0x20, 0x20}),
// 3GPP multimedia files
(FileType._3GP, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70}),
// MPEG-4 v1
(FileType.MP4, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70, 0x69, 0x73, 0x6F, 0x6D}),
// 3rd Generation Partnership Project 3GPP
(FileType._3GG, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70}),
// 3rd Generation Partnership Project 3GPP
(FileType._3GP, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70}),
// 3rd Generation Partnership Project 3GPP
(FileType._3G2, new byte[] {0x00, 0x00, 0x00, 0x14, 0x66, 0x74, 0x79, 0x70}),
// Windows Disk Image
(FileType.TBI, new byte[] {0x00, 0x00, 0x00, 0x00, 0x14, 0x00, 0x00, 0x00}),
// Bitcoin Core wallet.dat file
(FileType.DAT,
new byte[]
{
0x00, 0x00, 0x00, 0x00, 0x62, 0x31, 0x05, 0x00, 0x09, 0x00, 0x00, 0x00, 0x00, 0x20, 0x00, 0x00, 0x00,
0x09, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
}),
// MPEG-4 video_1
(FileType._3GP5, new byte[] {0x00, 0x00, 0x00, 0x18, 0x66, 0x74, 0x79, 0x70}),
// MPEG-4 video_1
(FileType.M4V, new byte[] {0x00, 0x00, 0x00, 0x18, 0x66, 0x74, 0x79, 0x70}),
// MPEG-4 video_1
(FileType.MP4, new byte[] {0x00, 0x00, 0x00, 0x18, 0x66, 0x74, 0x79, 0x70}),
// MPEG-4 video_2
(FileType.MP4, new byte[] {0x00, 0x00, 0x00, 0x1C, 0x66, 0x74, 0x79, 0x70}),
// 3GPP2 multimedia files
(FileType._3GP, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70}),
// Apple audio and video
(FileType.M4A, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70, 0x4D, 0x34, 0x41}),
// 3rd Generation Partnership Project 3GPP2
(FileType._3GG, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70}),
// 3rd Generation Partnership Project 3GPP2
(FileType._3GP, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70}),
// 3rd Generation Partnership Project 3GPP2
(FileType._3G2, new byte[] {0x00, 0x00, 0x00, 0x20, 0x66, 0x74, 0x79, 0x70}),
// Windows icon|printer spool file
(FileType.ICO, new byte[] {0x00, 0x00, 0x01, 0x00}),
// Windows icon|printer spool file
(FileType.SPL, new byte[] {0x00, 0x00, 0x01, 0x00}),
// MPEG video file
(FileType.MPG, new byte[] {0x00, 0x00, 0x01, 0xB3}),
// DVD video file
(FileType.MPG, new byte[] {0x00, 0x00, 0x01, 0xBA}),
// DVD video file
(FileType.VOB, new byte[] {0x00, 0x00, 0x01, 0xBA}),
// Windows cursor
(FileType.CUR, new byte[] {0x00, 0x00, 0x02, 0x00}),
// Compucon-Singer embroidery design file
(FileType.XXX,
new byte[]
{
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
}),
// QuattroPro spreadsheet
(FileType.WB2, new byte[] {0x00, 0x00, 0x02, 0x00}),
// Wii images container
(FileType.TPL, new byte[] {0x00, 0x20, 0xAF, 0x30}),
// Lotus 1-2-3 (v1)
(FileType.WK1, new byte[] {0x00, 0x00, 0x02, 0x00, 0x06, 0x04, 0x06, 0x00}),
// Lotus 1-2-3 (v3)
(FileType.WK3, new byte[] {0x00, 0x00, 0x1A, 0x00, 0x00, 0x10, 0x04, 0x00}),
// Lotus 1-2-3 (v4-v5)
(FileType.WK4, new byte[] {0x00, 0x00, 0x1A, 0x00, 0x02, 0x10, 0x04, 0x00}),
// Lotus 1-2-3 (v4-v5)
(FileType.WK5, new byte[] {0x00, 0x00, 0x1A, 0x00, 0x02, 0x10, 0x04, 0x00}),
// Lotus 1-2-3 (v9)
(FileType._123, new byte[] {0x00, 0x00, 0x1A, 0x00, 0x05, 0x10, 0x04}),
// Quark Express (Intel)
(FileType.QXD, new byte[] {0x00, 0x00, 0x49, 0x49, 0x58, 0x50, 0x52}),
// Quark Express (Motorola)
(FileType.QXD, new byte[] {0x00, 0x00, 0x4D, 0x4D, 0x58, 0x50, 0x52}),
// Windows Help file_1
(FileType.HLP, new byte[] {0x00, 0x00, 0xFF, 0xFF, 0xFF, 0xFF}),
// TrueType font file
(FileType.TTF, new byte[] {0x00, 0x01, 0x00, 0x00, 0x00}),
// Microsoft Money file
(FileType.MNY,
new byte[]
{
0x00, 0x01, 0x00, 0x00, 0x4D, 0x53, 0x49, 0x53, 0x41, 0x4D, 0x20, 0x44, 0x61, 0x74, 0x61, 0x62, 0x61,
0x73, 0x65
}),
// Microsoft Access 2007
(FileType.ACCDB,
new byte[]
{
0x00, 0x01, 0x00, 0x00, 0x53, 0x74, 0x61, 0x6E, 0x64, 0x61, 0x72, 0x64, 0x20, 0x41, 0x43, 0x45, 0x20,
0x44, 0x42
}),
// Microsoft Access
(FileType.MDB,
new byte[]
{
0x00, 0x01, 0x00, 0x00, 0x53, 0x74, 0x61, 0x6E, 0x64, 0x61, 0x72, 0x64, 0x20, 0x4A, 0x65, 0x74, 0x20,
0x44, 0x42
}),
// Palm Address Book Archive
(FileType.ABA, new byte[] {0x00, 0x01, 0x42, 0x41}),
// Palm DateBook Archive
(FileType.DBA, new byte[] {0x00, 0x01, 0x42, 0x44}),
// Netscape Navigator (v4) database
(FileType.DB,
new byte[]
{
0x00, 0x06, 0x15, 0x61, 0x00, 0x00, 0x00, 0x02, 0x00, 0x00, 0x04, 0xD2, 0x00, 0x00, 0x10, 0x00
}),
// FLIC animation
(FileType.FLI, new byte[] {0x00, 0x11}),
// Netscape Communicator (v4) mail folder
(FileType.SNM, new byte[] {0x00, 0x1E, 0x84, 0x90, 0x00, 0x00, 0x00, 0x00}),
// PowerPoint presentation subheader_1
(FileType.PPT, new byte[] {0x00, 0x6E, 0x1E, 0xF0}),
// Webex Advanced Recording Format
(FileType.ARF, new byte[] {0x01, 0x00, 0x02, 0x00}),
// Firebird and Interbase database files
(FileType.FDB, new byte[] {0x01, 0x00, 0x39, 0x30}),
// Firebird and Interbase database files
(FileType.GDB, new byte[] {0x01, 0x00, 0x39, 0x30}),
// The Bat! Message Base Index
(FileType.TBI, new byte[] {0x01, 0x01, 0x47, 0x19, 0xA4, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}),
// SQL Data Base
(FileType.MDF, new byte[] {0x01, 0x0F, 0x00, 0x00}),
// Novell LANalyzer capture file
(FileType.TR1, new byte[] {0x01, 0x10}),
// Silicon Graphics RGB Bitmap
(FileType.RGB, new byte[] {0x01, 0xDA, 0x01, 0x01, 0x00, 0x03}),
// Micrografx vector graphic file
(FileType.DRW, new byte[] {0x01, 0xFF, 0x02, 0x04, 0x03, 0x02}),
// Digital Speech Standard file
(FileType.DSS, new byte[] {0x02, 0x64, 0x73, 0x73}),
// MapInfo Native Data Format
(FileType.DAT, new byte[] {0x03}),
// dBASE III file
(FileType.DB3, new byte[] {0x03}),
// Quicken price history
(FileType.QPH, new byte[] {0x03, 0x00, 0x00, 0x00}),
// Approach index file
(FileType.ADX, new byte[] {0x03, 0x00, 0x00, 0x00, 0x41, 0x50, 0x50, 0x52}),
// dBASE IV file
(FileType.DB4, new byte[] {0x04}),
// Adobe InDesign
(FileType.INDD,
new byte[]
{
0x06, 0x06, 0xED, 0xF5, 0xD8, 0x1D, 0x46, 0xE5, 0xBD, 0x31, 0xEF, 0xE7, 0xFE, 0x74, 0xB7, 0x1D
}),
// Material Exchange Format
(FileType.MXF, new byte[] {0x06, 0x0E, 0x2B, 0x34, 0x02, 0x05, 0x01, 0x01, 0x0D, 0x01, 0x02, 0x01, 0x01, 0x02}),
// Generic drawing programs
(FileType.DRW, new byte[] {0x07}),
// SkinCrafter skin
(FileType.SKF, new byte[] {0x07, 0x53, 0x4B, 0x46}),
// DesignTools 2D Design file
(FileType.DTD, new byte[] {0x07, 0x64, 0x74, 0x32, 0x64, 0x64, 0x74, 0x64}),
// dBASE IV or dBFast configuration file
(FileType.DB, new byte[] {0x08}),
// Excel spreadsheet subheader_1
(FileType.XLS, new byte[] {0x09, 0x08, 0x10, 0x00, 0x00, 0x06, 0x05, 0x00}),
// ZSOFT Paintbrush file_1
(FileType.PCX, new byte[] {0x0A, 0x02, 0x01, 0x01}),
// ZSOFT Paintbrush file_2
(FileType.PCX, new byte[] {0x0A, 0x03, 0x01, 0x01}),
// ZSOFT Paintbrush file_3
(FileType.PCX, new byte[] {0x0A, 0x05, 0x01, 0x01}),
// MultiBit Bitcoin wallet file
(FileType.WALLET,
new byte[]
{
0x0A, 0x16, 0x6F, 0x72, 0x67, 0x2E, 0x62, 0x69, 0x74, 0x63, 0x6F, 0x69, 0x6E, 0x2E, 0x70, 0x72
}),
// Monochrome Picture TIFF bitmap
(FileType.MP, new byte[] {0x0C, 0xED}),
// DeskMate Document
(FileType.DOC, new byte[] {0x0D, 0x44, 0x4F, 0x43}),
// Nero CD compilation
(FileType.NRI, new byte[] {0x0E, 0x4E, 0x65, 0x72, 0x6F, 0x49, 0x53, 0x4F}),
// DeskMate Worksheet
(FileType.WKS, new byte[] {0x0E, 0x57, 0x4B, 0x53}),
// PowerPoint presentation subheader_2
(FileType.PPT, new byte[] {0x0F, 0x00, 0xE8, 0x03}),
// Sibelius Music - Score
(FileType.SIB, new byte[] {0x0F, 0x53, 0x49, 0x42, 0x45, 0x4C, 0x49, 0x55, 0x53}),
// Easy CD Creator 5 Layout file
(FileType.CL5, new byte[] {0x10, 0x00, 0x00, 0x00}),
// Windows prefetch file
(FileType.PF, new byte[] {0x11, 0x00, 0x00, 0x00, 0x53, 0x43, 0x43, 0x41}),
// Lotus Notes database template
(FileType.NTF, new byte[] {0x1A, 0x00, 0x00}),
// Lotus Notes database
(FileType.NSF, new byte[] {0x1A, 0x00, 0x00, 0x04, 0x00, 0x00}),
// LH archive (old vers.-type 1)
(FileType.ARC, new byte[] {0x1A, 0x02}),
// LH archive (old vers.-type 2)
(FileType.ARC, new byte[] {0x1A, 0x03}),
// LH archive (old vers.-type 3)
(FileType.ARC, new byte[] {0x1A, 0x04}),
// LH archive (old vers.-type 4)
(FileType.ARC, new byte[] {0x1A, 0x08}),
// LH archive (old vers.-type 5)
(FileType.ARC, new byte[] {0x1A, 0x09}),
// Compressed archive file
(FileType.PAK, new byte[] {0x1A, 0x0B}),
// WinPharoah capture file
(FileType.ETH, new byte[] {0x1A, 0x35, 0x01, 0x00}),
// WebM video file
(FileType.WEBM, new byte[] {0x1A, 0x45, 0xDF, 0xA3}),
// Matroska stream file_1
(FileType.MKV, new byte[] {0x1A, 0x45, 0xDF, 0xA3}),
// Matroska stream file_2
(FileType.MKV, new byte[] {0x1A, 0x45, 0xDF, 0xA3, 0x93, 0x42, 0x82, 0x88}),
// Runtime Software disk image
(FileType.DAT, new byte[] {0x1A, 0x52, 0x54, 0x53, 0x20, 0x43, 0x4F, 0x4D}),
// WordStar Version 5.0-6.0 document
(FileType.WS, new byte[] {0x1D, 0x7D}),
// GZIP archive file
(FileType.GZ, new byte[] {0x1F, 0x8B, 0x08}),
// VLC Player Skin file
(FileType.VLT, new byte[] {0x1F, 0x8B, 0x08}),
// Compressed tape archive_1
(FileType.TARZ, new byte[] {0x1F, 0x9D, 0x90}),
// Compressed tape archive_2
(FileType.TARZ, new byte[] {0x1F, 0xA0}),
// MapInfo Sea Chart
(FileType.BSB, new byte[] {0x21}),
// AIN Compressed Archive
(FileType.AIN, new byte[] {0x21, 0x12}),
// Unix archiver (ar)-MS Program Library Common Object File Format (COFF)
(FileType.LIB, new byte[] {0x21, 0x3C, 0x61, 0x72, 0x63, 0x68, 0x3E, 0x0A}),
// Microsoft Outlook Exchange Offline Storage Folder
(FileType.OST, new byte[] {0x21, 0x42, 0x44, 0x4E}),
// Cerius2 file
(FileType.MSI, new byte[] {0x23, 0x20}),
// VMware 4 Virtual Disk description
(FileType.VMDK, new byte[] {0x23, 0x20, 0x44, 0x69, 0x73, 0x6B, 0x20, 0x44}),
// MS Developer Studio project file
(FileType.DSP, new byte[] {0x23, 0x20, 0x4D, 0x69, 0x63, 0x72, 0x6F, 0x73}),
// Adaptive Multi-Rate ACELP Codec (GSM)
(FileType.AMR, new byte[] {0x23, 0x21, 0x41, 0x4D, 0x52}),
// Skype audio compression
(FileType.SIL, new byte[] {0x23, 0x21, 0x53, 0x49, 0x4C, 0x4B, 0x0A}),
// Radiance High Dynamic Range image file
(FileType.HDR, new byte[] {0x23, 0x3F, 0x52, 0x41, 0x44, 0x49, 0x41, 0x4E}),
// VBScript Encoded script
(FileType.VBE, new byte[] {0x23, 0x40, 0x7E, 0x5E}),
// Brother-Babylock-Bernina Home Embroidery
(FileType.PEC, new byte[] {0x23, 0x50, 0x45, 0x43, 0x30, 0x30, 0x30, 0x31}),
// Brother-Babylock-Bernina Home Embroidery
(FileType.PES, new byte[] {0x23, 0x50, 0x45, 0x53, 0x30}),
// SPSS Data file
(FileType.SAV, new byte[] {0x24, 0x46, 0x4C, 0x32, 0x40, 0x28, 0x23, 0x29}),
// Encapsulated PostScript file
(FileType.EPS, new byte[] {0x25, 0x21, 0x50, 0x53, 0x2D, 0x41, 0x64, 0x6F}),
// PDF file
(FileType.PDF, new byte[] {0x25, 0x50, 0x44, 0x46}),
// PDF file
(FileType.FDF, new byte[] {0x25, 0x50, 0x44, 0x46}),
// Fuzzy bitmap (FBM) file
(FileType.FBM, new byte[] {0x25, 0x62, 0x69, 0x74, 0x6D, 0x61, 0x70}),
// BinHex 4 Compressed Archive
(FileType.HQX, new byte[] {0x28, 0x54, 0x68, 0x69, 0x73, 0x20, 0x66, 0x69}),
// Symantec Wise Installer log
(FileType.LOG, new byte[] {0x2A, 0x2A, 0x2A, 0x20, 0x20, 0x49, 0x6E, 0x73}),
// Compressed archive
(FileType.LHA, new byte[] {0x2D, 0x6C, 0x68}),
// Compressed archive
(FileType.LZH, new byte[] {0x2D, 0x6C, 0x68}),
// RealPlayer video file (V11+)
(FileType.IVR, new byte[] {0x2E, 0x52, 0x45, 0x43}),
// RealMedia streaming media
(FileType.RM, new byte[] {0x2E, 0x52, 0x4D, 0x46}),
// RealMedia streaming media
(FileType.RMVB, new byte[] {0x2E, 0x52, 0x4D, 0x46}),
// RealAudio file
(FileType.RA, new byte[] {0x2E, 0x52, 0x4D, 0x46, 0x00, 0x00, 0x00, 0x12}),
// RealAudio streaming media
(FileType.RA, new byte[] {0x2E, 0x72, 0x61, 0xFD, 0x00}),
// NeXT-Sun Microsystems audio file
(FileType.AU, new byte[] {0x2E, 0x73, 0x6E, 0x64}),
// Thunderbird-Mozilla Mail Summary File
(FileType.MSF,
new byte[]
{
0x2F, 0x2F, 0x20, 0x3C, 0x21, 0x2D, 0x2D, 0x20, 0x3C, 0x6D, 0x64, 0x62, 0x3A, 0x6D, 0x6F, 0x72, 0x6B,
0x3A, 0x7A
}),
// MS security catalog file
(FileType.CAT, new byte[] {0x30}),
// Windows Event Viewer file
(FileType.EVT, new byte[] {0x30, 0x00, 0x00, 0x00, 0x4C, 0x66, 0x4C, 0x65}),
// GEnealogical Data COMmunication (GEDCOM) file
(FileType.GED, new byte[] {0x30, 0x20, 0x48, 0x45, 0x41, 0x44}),
// Windows Media Audio-Video File
(FileType.ASF, new byte[] {0x30, 0x26, 0xB2, 0x75, 0x8E, 0x66, 0xCF, 0x11}),
// Windows Media Audio-Video File
(FileType.WMA, new byte[] {0x30, 0x26, 0xB2, 0x75, 0x8E, 0x66, 0xCF, 0x11}),
// Windows Media Audio-Video File
(FileType.WMV, new byte[] {0x30, 0x26, 0xB2, 0x75, 0x8E, 0x66, 0xCF, 0x11}),
// National Transfer Format Map
(FileType.NTF, new byte[] {0x30, 0x31, 0x4F, 0x52, 0x44, 0x4E, 0x41, 0x4E}),
// MS Write file_1
(FileType.WRI, new byte[] {0x31, 0xBE}),
// MS Write file_2
(FileType.WRI, new byte[] {0x32, 0xBE}),
// Pfaff Home Embroidery
(FileType.PCS,
new byte[]
{
0x32, 0x03, 0x10, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x80, 0x00, 0x00, 0x00, 0xFF, 0x00
}),
// 7-Zip compressed file
(FileType._7Z, new byte[] {0x37, 0x7A, 0xBC, 0xAF, 0x27, 0x1C}),
// Photoshop image
(FileType.PSD, new byte[] {0x38, 0x42, 0x50, 0x53}),
// Surfplan kite project file
(FileType.SLE, new byte[] {0x3A, 0x56, 0x45, 0x52, 0x53, 0x49, 0x4F, 0x4E}),
// Advanced Stream Redirector
(FileType.ASX, new byte[] {0x3C}),
// BizTalk XML-Data Reduced Schema
(FileType.XDR, new byte[] {0x3C}),
// AOL HTML mail
(FileType.DCI, new byte[] {0x3C, 0x21, 0x64, 0x6F, 0x63, 0x74, 0x79, 0x70}),
// Windows Script Component
(FileType.WSC, new byte[] {0x3C, 0x3F}),
// Windows Visual Stylesheet
(FileType.MANIFEST,
new byte[] {0x3C, 0x3F, 0x78, 0x6D, 0x6C, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D}),
// User Interface Language
(FileType.XML,
new byte[]
{
0x3C, 0x3F, 0x78, 0x6D, 0x6C, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D, 0x22, 0x31, 0x2E,
0x30, 0x22, 0x3F, 0x3E
}),
// MMC Snap-in Control file
(FileType.MSC,
new byte[]
{
0x3C, 0x3F, 0x78, 0x6D, 0x6C, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D, 0x22, 0x31, 0x2E,
0x30, 0x22, 0x3F, 0x3E, 0x0D, 0x0A, 0x3C, 0x4D, 0x4D, 0x43, 0x5F, 0x43, 0x6F, 0x6E, 0x73, 0x6F, 0x6C,
0x65, 0x46, 0x69, 0x6C, 0x65, 0x20, 0x43, 0x6F, 0x6E, 0x73, 0x6F, 0x6C, 0x65, 0x56, 0x65, 0x72, 0x73,
0x69, 0x6F, 0x6E, 0x3D, 0x22
}),
// Picasa movie project file
(FileType.MXF,
new byte[]
{
0x3C, 0x43, 0x54, 0x72, 0x61, 0x6E, 0x73, 0x54, 0x69, 0x6D, 0x65, 0x6C, 0x69, 0x6E, 0x65, 0x3E
}),
// Csound music
(FileType.CSD,
new byte[]
{
0x3C, 0x43, 0x73, 0x6F, 0x75, 0x6E, 0x64, 0x53, 0x79, 0x6E, 0x74, 0x68, 0x65, 0x73, 0x69, 0x7A
}),
// Adobe FrameMaker
(FileType.FM, new byte[] {0x3C, 0x4D, 0x61, 0x6B, 0x65, 0x72, 0x46, 0x69}),
// Adobe FrameMaker
(FileType.MIF, new byte[] {0x3C, 0x4D, 0x61, 0x6B, 0x65, 0x72, 0x46, 0x69}),
// GPS Exchange (v1.1)
(FileType.GPX,
new byte[]
{
0x3C, 0x67, 0x70, 0x78, 0x20, 0x76, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x3D, 0x22, 0x31, 0x2E
}),
// BASE85 file
(FileType.B85, new byte[] {0x3C, 0x7E, 0x36, 0x3C, 0x5C, 0x25, 0x5F, 0x30, 0x67, 0x53, 0x71, 0x68, 0x3B}),
// Quatro Pro for Windows 7.0
(FileType.WB3, new byte[] {0x3E, 0x00, 0x03, 0x00, 0xFE, 0xFF, 0x09, 0x00, 0x06}),
// Windows Help file_2
(FileType.GID, new byte[] {0x3F, 0x5F, 0x03, 0x00}),
// Windows Help file_2
(FileType.HLP, new byte[] {0x3F, 0x5F, 0x03, 0x00}),
// EndNote Library File
(FileType.ENL, new byte[] {0x40, 0x40, 0x40, 0x20, 0x00, 0x00, 0x40, 0x40, 0x40, 0x40}),
// Generic AutoCAD drawing
(FileType.DWG, new byte[] {0x41, 0x43, 0x31, 0x30}),
// Steganos virtual secure drive
(FileType.SLE, new byte[] {0x41, 0x43, 0x76}),
// Harvard Graphics symbol graphic
(FileType.SYW, new byte[] {0x41, 0x4D, 0x59, 0x4F}),
// AOL config files
(FileType.ABI, new byte[] {0x41, 0x4F, 0x4C}),
// AOL config files
(FileType.ABY, new byte[] {0x41, 0x4F, 0x4C}),
// AOL config files
(FileType.BAG, new byte[] {0x41, 0x4F, 0x4C}),
// AOL config files
(FileType.IDX, new byte[] {0x41, 0x4F, 0x4C}),
// AOL config files
(FileType.IND, new byte[] {0x41, 0x4F, 0x4C}),
// AOL config files
(FileType.PFC, new byte[] {0x41, 0x4F, 0x4C}),
// AOL and AIM buddy list
(FileType.BAG, new byte[] {0x41, 0x4F, 0x4C, 0x20, 0x46, 0x65, 0x65, 0x64}),
// AOL address book
(FileType.ABY, new byte[] {0x41, 0x4F, 0x4C, 0x44, 0x42}),
// AOL user configuration
(FileType.IDX, new byte[] {0x41, 0x4F, 0x4C, 0x44, 0x42}),
// AOL client preferences-settings file
(FileType.IND, new byte[] {0x41, 0x4F, 0x4C, 0x49, 0x44, 0x58}),
// AOL address book index
(FileType.ABI, new byte[] {0x41, 0x4F, 0x4C, 0x49, 0x4E, 0x44, 0x45, 0x58}),
// AOL personal file cabinet
(FileType.ORG, new byte[] {0x41, 0x4F, 0x4C, 0x56, 0x4D, 0x31, 0x30, 0x30}),
// AOL personal file cabinet
(FileType.PFC, new byte[] {0x41, 0x4F, 0x4C, 0x56, 0x4D, 0x31, 0x30, 0x30}),
// AVG6 Integrity database
(FileType.DAT, new byte[] {0x41, 0x56, 0x47, 0x36, 0x5F, 0x49, 0x6E, 0x74}),
// RIFF Windows Audio
(FileType.AVI, new byte[] {0x41, 0x56, 0x49, 0x20, 0x4C, 0x49, 0x53, 0x54}),
// FreeArc compressed file
(FileType.ARC, new byte[] {0x41, 0x72, 0x43, 0x01}),
// vCard
(FileType.VCF, new byte[] {0x42, 0x45, 0x47, 0x49, 0x4E, 0x3A, 0x56, 0x43}),
// Speedtouch router firmware
(FileType.BIN, new byte[] {0x42, 0x4C, 0x49, 0x32, 0x32, 0x33}),
// Speedtouch router firmware
(FileType.BLI, new byte[] {0x42, 0x4C, 0x49, 0x32, 0x32, 0x33}),
// Speedtouch router firmware
(FileType.RBI, new byte[] {0x42, 0x4C, 0x49, 0x32, 0x32, 0x33}),
// Bitmap image
(FileType.BMP, new byte[] {0x42, 0x4D}),
// Bitmap image
(FileType.DIB, new byte[] {0x42, 0x4D}),
// Palmpilot resource file
(FileType.PRC, new byte[] {0x42, 0x4F, 0x4F, 0x4B, 0x4D, 0x4F, 0x42, 0x49}),
// Better Portable Graphics
(FileType.BPG, new byte[] {0x42, 0x50, 0x47, 0xFB}),
// bzip2 compressed archive
(FileType.BZ2, new byte[] {0x42, 0x5A, 0x68}),
// bzip2 compressed archive
(FileType.TAR, new byte[] {0x42, 0x5A, 0x68}),
// bzip2 compressed archive
(FileType.BZ2, new byte[] {0x42, 0x5A, 0x68}),
// bzip2 compressed archive
(FileType.TBZ2, new byte[] {0x42, 0x5A, 0x68}),
// bzip2 compressed archive
(FileType.TB2, new byte[] {0x42, 0x5A, 0x68}),
// Mac Disk image (BZ2 compressed)
(FileType.DMG, new byte[] {0x42, 0x5A, 0x68}),
// Puffer ASCII encrypted archive
(FileType.APUF, new byte[] {0x42, 0x65, 0x67, 0x69, 0x6E, 0x20, 0x50, 0x75, 0x66, 0x66, 0x65, 0x72}),
// Blink compressed archive
(FileType.BLI, new byte[] {0x42, 0x6C, 0x69, 0x6E, 0x6B}),
// RagTime document
(FileType.RTD, new byte[] {0x43, 0x23, 0x2B, 0x44, 0xA4, 0x43, 0x4D, 0xA5}),
// EA Interchange Format File (IFF)_3
(FileType.IFF, new byte[] {0x43, 0x41, 0x54, 0x20}),
// WordPerfect dictionary
(FileType.CBD, new byte[] {0x43, 0x42, 0x46, 0x49, 0x4C, 0x45}),
// ISO-9660 CD Disc Image
(FileType.ISO, new byte[] {0x43, 0x44, 0x30, 0x30, 0x31}),
// RIFF CD audio
(FileType.CDA, new byte[] {0x43, 0x44, 0x44, 0x41, 0x66, 0x6D, 0x74, 0x20}),
// Compressed ISO CD image
(FileType.CSO, new byte[] {0x43, 0x49, 0x53, 0x4F}),
// Windows 7 thumbnail
(FileType.DB, new byte[] {0x43, 0x4D, 0x4D, 0x4D, 0x15, 0x00, 0x00, 0x00}),
// Corel Binary metafile
(FileType.CLB, new byte[] {0x43, 0x4D, 0x58, 0x31}),
// COM+ Catalog
(FileType.CLB, new byte[] {0x43, 0x4F, 0x4D, 0x2B}),
// VMware 3 Virtual Disk
(FileType.VMDK, new byte[] {0x43, 0x4F, 0x57, 0x44}),
// Corel Photopaint file_1
(FileType.CPT, new byte[] {0x43, 0x50, 0x54, 0x37, 0x46, 0x49, 0x4C, 0x45}),
// Corel Photopaint file_2
(FileType.CPT, new byte[] {0x43, 0x50, 0x54, 0x46, 0x49, 0x4C, 0x45}),
// Win9x registry hive
(FileType.DAT, new byte[] {0x43, 0x52, 0x45, 0x47}),
// Crush compressed archive
(FileType.CRU, new byte[] {0x43, 0x52, 0x55, 0x53, 0x48, 0x20, 0x76}),
// Shockwave Flash file
(FileType.SWF, new byte[] {0x43, 0x57, 0x53}),
// Calculux Indoor lighting project file
(FileType.CIN,
new byte[]
{
0x43, 0x61, 0x6C, 0x63, 0x75, 0x6C, 0x75, 0x78, 0x20, 0x49, 0x6E, 0x64, 0x6F, 0x6F, 0x72, 0x20
}),
// WhereIsIt Catalog
(FileType.CTF, new byte[] {0x43, 0x61, 0x74, 0x61, 0x6C, 0x6F, 0x67, 0x20}),
// IE History file
(FileType.DAT, new byte[] {0x43, 0x6C, 0x69, 0x65, 0x6E, 0x74, 0x20, 0x55}),
// Google Chrome Extension
(FileType.CRX, new byte[] {0x43, 0x72, 0x32, 0x34}),
// Creative Voice
(FileType.VOC,
new byte[]
{
0x43, 0x72, 0x65, 0x61, 0x74, 0x69, 0x76, 0x65, 0x20, 0x56, 0x6F, 0x69, 0x63, 0x65, 0x20, 0x46
}),
// PowerISO Direct-Access-Archive image
(FileType.DAA, new byte[] {0x44, 0x41, 0x41, 0x00, 0x00, 0x00, 0x00, 0x00}),
// DAX Compressed CD image
(FileType.DAX, new byte[] {0x44, 0x41, 0x58, 0x00}),
// Palm Zire photo database
(FileType.DB, new byte[] {0x44, 0x42, 0x46, 0x48}),
// Amiga DiskMasher compressed archive
(FileType.DMS, new byte[] {0x44, 0x4D, 0x53, 0x21}),
// Amiga disk file
(FileType.ADF, new byte[] {0x44, 0x4F, 0x53}),
// DST Compression
(FileType.DST, new byte[] {0x44, 0x53, 0x54, 0x62}),
// DVR-Studio stream file
(FileType.DVR, new byte[] {0x44, 0x56, 0x44}),
// DVD info file
(FileType.IFO, new byte[] {0x44, 0x56, 0x44}),
// Elite Plus Commander game file
(FileType.CDR, new byte[] {0x45, 0x4C, 0x49, 0x54, 0x45, 0x20, 0x43, 0x6F}),
// VideoVCD-VCDImager file
(FileType.VCD, new byte[] {0x45, 0x4E, 0x54, 0x52, 0x59, 0x56, 0x43, 0x44}),
// Apple ISO 9660-HFS hybrid CD image
(FileType.ISO, new byte[] {0x45, 0x52, 0x02, 0x00, 0x00}),
// EasyRecovery Saved State file
(FileType.DAT, new byte[] {0x45, 0x52, 0x46, 0x53, 0x53, 0x41, 0x56, 0x45}),
// DSD Storage Facility audio file
(FileType.DSF, new byte[] {0x44, 0x53, 0x44, 0x20}),
// MS Document Imaging file
(FileType.MDI, new byte[] {0x45, 0x50}),
// Expert Witness Compression Format
(FileType.E01, new byte[] {0x45, 0x56, 0x46, 0x09, 0x0D, 0x0A, 0xFF, 0x00}),
// EnCase Evidence File Format V2
(FileType.Ex01, new byte[] {0x45, 0x56, 0x46, 0x32, 0x0D, 0x0A, 0x81}),
// Windows Vista event log
(FileType.EVTX, new byte[] {0x45, 0x6C, 0x66, 0x46, 0x69, 0x6C, 0x65, 0x00}),
// QuickBooks backup
(FileType.QBB, new byte[] {0x45, 0x86, 0x00, 0x00, 0x06, 0x00}),
// MS Fax Cover Sheet
(FileType.CPE, new byte[] {0x46, 0x41, 0x58, 0x43, 0x4F, 0x56, 0x45, 0x52}),
// Fiasco database definition file
(FileType.FDB, new byte[] {0x46, 0x44, 0x42, 0x48, 0x00}),
// Flash video file
(FileType.FLV, new byte[] {0x46, 0x4C, 0x56}),
// IFF ANIM file
(FileType.ANM, new byte[] {0x46, 0x4F, 0x52, 0x4D}),
// EA Interchange Format File (IFF)_1
(FileType.IFF, new byte[] {0x46, 0x4F, 0x52, 0x4D}),
// Audio Interchange File
(FileType.AIFF, new byte[] {0x46, 0x4F, 0x52, 0x4D, 0x00}),
// DAKX Compressed Audio
(FileType.DAX, new byte[] {0x46, 0x4F, 0x52, 0x4D, 0x00}),
// Shockwave Flash player
(FileType.SWF, new byte[] {0x46, 0x57, 0x53}),
// Generic e-mail_2
(FileType.EML, new byte[] {0x46, 0x72, 0x6F, 0x6D}),
// GIF file
(FileType.GIF, new byte[] {0x47, 0x49, 0x46, 0x38}),
// GIMP pattern file
(FileType.PAT, new byte[] {0x47, 0x50, 0x41, 0x54}),
// General Regularly-distributed Information (GRIdded) Binary
(FileType.GRB, new byte[] {0x47, 0x52, 0x49, 0x42}),
// Show Partner graphics file
(FileType.GX2, new byte[] {0x47, 0x58, 0x32}),
// Genetec video archive
(FileType.G64,
new byte[]
{
0x47, 0x65, 0x6E, 0x65, 0x74, 0x65, 0x63, 0x20, 0x4F, 0x6D, 0x6E, 0x69, 0x63, 0x61, 0x73, 0x74
}),
// SAS Transport dataset
(FileType.XPT,
new byte[]
{
0x48, 0x45, 0x41, 0x44, 0x45, 0x52, 0x20, 0x52, 0x45, 0x43, 0x4F, 0x52, 0x44, 0x2A, 0x2A, 0x2A
}),
// Harvard Graphics presentation file
(FileType.SH3, new byte[] {0x48, 0x48, 0x47, 0x42, 0x31}),
// TIFF file_1
(FileType.TIF, new byte[] {0x49, 0x20, 0x49}),
// TIFF file_1
(FileType.TIFF, new byte[] {0x49, 0x20, 0x49}),
// MP3 audio file
(FileType.MP3, new byte[] {0x49, 0x44, 0x33}),
// Sprint Music Store audio
(FileType.KOZ, new byte[] {0x49, 0x44, 0x33, 0x03, 0x00, 0x00, 0x00}),
// Canon RAW file
(FileType.CRW, new byte[] {0x49, 0x49, 0x1A, 0x00, 0x00, 0x00, 0x48, 0x45}),
// TIFF file_2
(FileType.TIF, new byte[] {0x49, 0x49, 0x2A, 0x00}),
// TIFF file_2
(FileType.TIFF, new byte[] {0x49, 0x49, 0x2A, 0x00}),
// Windows 7 thumbnail_2
(FileType.DB, new byte[] {0x49, 0x4D, 0x4D, 0x4D, 0x15, 0x00, 0x00, 0x00}),
// Install Shield compressed file
(FileType.CAB, new byte[] {0x49, 0x53, 0x63, 0x28}),
// Install Shield compressed file
(FileType.HDR, new byte[] {0x49, 0x53, 0x63, 0x28}),
// MS Reader eBook
(FileType.LIT, new byte[] {0x49, 0x54, 0x4F, 0x4C, 0x49, 0x54, 0x4C, 0x53}),
// MS Compiled HTML Help File
(FileType.CHI, new byte[] {0x49, 0x54, 0x53, 0x46}),
// MS Compiled HTML Help File
(FileType.CHM, new byte[] {0x49, 0x54, 0x53, 0x46}),
// Inno Setup Uninstall Log
(FileType.DAT, new byte[] {0x49, 0x6E, 0x6E, 0x6F, 0x20, 0x53, 0x65, 0x74}),
// Inter@ctive Pager Backup (BlackBerry file
(FileType.IPD,
new byte[]
{
0x49, 0x6E, 0x74, 0x65, 0x72, 0x40, 0x63, 0x74, 0x69, 0x76, 0x65, 0x20, 0x50, 0x61, 0x67, 0x65
}),
// JARCS compressed archive
(FileType.JAR, new byte[] {0x4A, 0x41, 0x52, 0x43, 0x53, 0x00}),
// AOL ART file_1
(FileType.JG, new byte[] {0x4A, 0x47, 0x03, 0x0E}),
// AOL ART file_2
(FileType.JG, new byte[] {0x4A, 0x47, 0x04, 0x0E}),
// VMware 4 Virtual Disk
(FileType.VMDK, new byte[] {0x4B, 0x44, 0x4D}),
// KGB archive
(FileType.KGB, new byte[] {0x4B, 0x47, 0x42, 0x5F, 0x61, 0x72, 0x63, 0x68}),
// Win9x printer spool file
(FileType.SHD, new byte[] {0x4B, 0x49, 0x00, 0x00}),
// Windows shortcut file
(FileType.LNK, new byte[] {0x4C, 0x00, 0x00, 0x00, 0x01, 0x14, 0x02, 0x00}),
// MS COFF relocatable object code
(FileType.OBJ, new byte[] {0x4C, 0x01}),
// Tajima emboridery
(FileType.DST, new byte[] {0x4C, 0x41, 0x3A}),
// Windows help file_3
(FileType.GID, new byte[] {0x4C, 0x4E, 0x02, 0x00}),
// Windows help file_3
(FileType.HLP, new byte[] {0x4C, 0x4E, 0x02, 0x00}),
// EA Interchange Format File (IFF)_2
(FileType.IFF, new byte[] {0x4C, 0x49, 0x53, 0x54}),
// DeluxePaint Animation
(FileType.ANM, new byte[] {0x4C, 0x50, 0x46, 0x20, 0x00, 0x01}),
// Logical File Evidence Format
(FileType.E01, new byte[] {0x4C, 0x56, 0x46, 0x09, 0x0D, 0x0A, 0xFF, 0x00}),
// Merriam-Webster Pocket Dictionary
(FileType.PDB, new byte[] {0x4D, 0x2D, 0x57, 0x20, 0x50, 0x6F, 0x63, 0x6B}),
// Mozilla archive
(FileType.MAR, new byte[] {0x4D, 0x41, 0x52, 0x31, 0x00}),
// Microsoft-MSN MARC archive
(FileType.MAR, new byte[] {0x4D, 0x41, 0x52, 0x43}),
// MATLAB v5 workspace
(FileType.MAT,
new byte[]
{
0x4D, 0x41, 0x54, 0x4C, 0x41, 0x42, 0x20, 0x35, 0x2E, 0x30, 0x20, 0x4D, 0x41, 0x54, 0x2D, 0x66, 0x69,
0x6C, 0x65
}),
// MAr compressed archive
(FileType.MAR, new byte[] {0x4D, 0x41, 0x72, 0x30, 0x00}),
// TargetExpress target file
(FileType.MTE,
new byte[]
{
0x4D, 0x43, 0x57, 0x20, 0x54, 0x65, 0x63, 0x68, 0x6E, 0x6F, 0x67, 0x6F, 0x6C, 0x69, 0x65, 0x73
}),
// Windows dump file
(FileType.DMP, new byte[] {0x4D, 0x44, 0x4D, 0x50, 0x93, 0xA7}),
// Windows dump file
(FileType.HDMP, new byte[] {0x4D, 0x44, 0x4D, 0x50, 0x93, 0xA7}),
// Milestones project management file
(FileType.MLS, new byte[] {0x4D, 0x49, 0x4C, 0x45, 0x53}),
// Skype localization data file
(FileType.MLS, new byte[] {0x4D, 0x4C, 0x53, 0x57}),
// TIFF file_3
(FileType.TIF, new byte[] {0x4D, 0x4D, 0x00, 0x2A}),
// TIFF file_3
(FileType.TIFF, new byte[] {0x4D, 0x4D, 0x00, 0x2A}),
// TIFF file_4
(FileType.TIF, new byte[] {0x4D, 0x4D, 0x00, 0x2B}),
// TIFF file_4
(FileType.TIFF, new byte[] {0x4D, 0x4D, 0x00, 0x2B}),
// Yamaha Synthetic music Mobile Application Format
(FileType.MMF, new byte[] {0x4D, 0x4D, 0x4D, 0x44, 0x00, 0x00}),
// VMware BIOS state file
(FileType.NVRAM, new byte[] {0x4D, 0x52, 0x56, 0x4E}),
// Microsoft cabinet file
(FileType.CAB, new byte[] {0x4D, 0x53, 0x43, 0x46}),
// OneNote Package
(FileType.ONEPKG, new byte[] {0x4D, 0x53, 0x43, 0x46}),
// Powerpoint Packaged Presentation
(FileType.PPZ, new byte[] {0x4D, 0x53, 0x43, 0x46}),
// MS Access Snapshot Viewer file
(FileType.SNP, new byte[] {0x4D, 0x53, 0x43, 0x46}),
// OLE-SPSS-Visual C++ library file
(FileType.TLB, new byte[] {0x4D, 0x53, 0x46, 0x54, 0x02, 0x00, 0x01, 0x00}),
// Microsoft Windows Imaging Format
(FileType.WIM, new byte[] {0x4D, 0x53, 0x57, 0x49, 0x4D}),
// Sony Compressed Voice File
(FileType.CDR, new byte[] {0x4D, 0x53, 0x5F, 0x56, 0x4F, 0x49, 0x43, 0x45}),
// Sony Compressed Voice File
(FileType.DVF, new byte[] {0x4D, 0x53, 0x5F, 0x56, 0x4F, 0x49, 0x43, 0x45}),
// Sony Compressed Voice File
(FileType.MSV, new byte[] {0x4D, 0x53, 0x5F, 0x56, 0x4F, 0x49, 0x43, 0x45}),
// MIDI sound file
(FileType.MID, new byte[] {0x4D, 0x54, 0x68, 0x64}),
// MIDI sound file
(FileType.MIDI, new byte[] {0x4D, 0x54, 0x68, 0x64}),
// Yamaha Piano
(FileType.PCS, new byte[] {0x4D, 0x54, 0x68, 0x64}),
// CD Stomper Pro label file
(FileType.DSN, new byte[] {0x4D, 0x56}),
// Milestones project management file_1
(FileType.MLS, new byte[] {0x4D, 0x56, 0x32, 0x31, 0x34}),
// Milestones project management file_2
(FileType.MLS, new byte[] {0x4D, 0x56, 0x32, 0x43}),
// Windows-DOS executable file
(FileType.COM, new byte[] {0x4D, 0x5A}),
// Windows-DOS executable file
(FileType.DLL, new byte[] {0x4D, 0x5A}),
// Windows-DOS executable file
(FileType.DRV, new byte[] {0x4D, 0x5A}),
// Windows-DOS executable file
(FileType.EXE, new byte[] {0x4D, 0x5A}),
// Windows-DOS executable file
(FileType.PIF, new byte[] {0x4D, 0x5A}),
// Windows-DOS executable file
(FileType.QTS, new byte[] {0x4D, 0x5A}),
// Windows-DOS executable file
(FileType.QTX, new byte[] {0x4D, 0x5A}),
// Windows-DOS executable file
(FileType.SYS, new byte[] {0x4D, 0x5A}),
// MS audio compression manager driver
(FileType.ACM, new byte[] {0x4D, 0x5A}),
// Library cache file
(FileType.AX, new byte[] {0x4D, 0x5A}),
// Control panel application
(FileType.CPL, new byte[] {0x4D, 0x5A}),
// Font file
(FileType.FON, new byte[] {0x4D, 0x5A}),
// ActiveX-OLE Custom Control
(FileType.OCX, new byte[] {0x4D, 0x5A}),
// OLE object library
(FileType.OLB, new byte[] {0x4D, 0x5A}),
// Screen saver
(FileType.SCR, new byte[] {0x4D, 0x5A}),
// VisualBASIC application
(FileType.VBX, new byte[] {0x4D, 0x5A}),
// Windows virtual device drivers
(FileType.VXD, new byte[] {0x4D, 0x5A}),
// Windows virtual device drivers
(FileType._386, new byte[] {0x4D, 0x5A}),
// Acrobat plug-in
(FileType.API, new byte[] {0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00}),
// DirectShow filter
(FileType.AX, new byte[] {0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00}),
// Audition graphic filter
(FileType.FLT, new byte[] {0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00}),
// ZoneAlam data file
(FileType.ZAP, new byte[] {0x4D, 0x5A, 0x90, 0x00, 0x03, 0x00, 0x00, 0x00, 0x04, 0x00, 0x00, 0x00, 0xFF, 0xFF}),
// MS C++ debugging symbols file
(FileType.PDB,
new byte[]
{
0x4D, 0x69, 0x63, 0x72, 0x6F, 0x73, 0x6F, 0x66, 0x74, 0x20, 0x43, 0x2F, 0x43, 0x2B, 0x2B, 0x20
}),
// Visual Studio .NET file
(FileType.SLN,
new byte[]
{
0x4D, 0x69, 0x63, 0x72, 0x6F, 0x73, 0x6F, 0x66, 0x74, 0x20, 0x56, 0x69, 0x73, 0x75, 0x61, 0x6C
}),
// Windows Media Player playlist
(FileType.WPL,
new byte[]
{
0x4D, 0x69, 0x63, 0x72, 0x6F, 0x73, 0x6F, 0x66, 0x74, 0x20, 0x57, 0x69, 0x6E, 0x64, 0x6F, 0x77, 0x73,
0x20, 0x4D, 0x65, 0x64, 0x69, 0x61, 0x20, 0x50, 0x6C, 0x61, 0x79, 0x65, 0x72, 0x20, 0x2D, 0x2D, 0x20
}),
// VMapSource GPS Waypoint Database
(FileType.GDB, new byte[] {0x4D, 0x73, 0x52, 0x63, 0x66}),
// TomTom traffic data
(FileType.DAT, new byte[] {0x4E, 0x41, 0x56, 0x54, 0x52, 0x41, 0x46, 0x46}),
// MS Windows journal
(FileType.JNT, new byte[] {0x4E, 0x42, 0x2A, 0x00}),
// MS Windows journal
(FileType.JTP, new byte[] {0x4E, 0x42, 0x2A, 0x00}),
// NES Sound file
(FileType.NSF, new byte[] {0x4E, 0x45, 0x53, 0x4D, 0x1A, 0x01}),
// National Imagery Transmission Format file
(FileType.NTF, new byte[] {0x4E, 0x49, 0x54, 0x46, 0x30}),
// Agent newsreader character map
(FileType.COD, new byte[] {0x4E, 0x61, 0x6D, 0x65, 0x3A, 0x20}),
// 1Password 4 Cloud Keychain
(FileType.attachment, new byte[] {0x4F, 0x50, 0x43, 0x4C, 0x44, 0x41, 0x54}),
// Psion Series 3 Database
(FileType.DBF, new byte[] {0x4F, 0x50, 0x4C, 0x44, 0x61, 0x74, 0x61, 0x62}),
// OpenType font
(FileType.OTF, new byte[] {0x4F, 0x54, 0x54, 0x4F, 0x00}),
// Ogg Vorbis Codec compressed file
(FileType.OGA, new byte[] {0x4F, 0x67, 0x67, 0x53, 0x00, 0x02, 0x00, 0x00}),
// Ogg Vorbis Codec compressed file
(FileType.OGG, new byte[] {0x4F, 0x67, 0x67, 0x53, 0x00, 0x02, 0x00, 0x00}),
// Ogg Vorbis Codec compressed file
(FileType.OGV, new byte[] {0x4F, 0x67, 0x67, 0x53, 0x00, 0x02, 0x00, 0x00}),
// Ogg Vorbis Codec compressed file
(FileType.OGX, new byte[] {0x4F, 0x67, 0x67, 0x53, 0x00, 0x02, 0x00, 0x00}),
// Visio-DisplayWrite 4 text file
(FileType.DW4, new byte[] {0x4F, 0x7B}),
// Quicken QuickFinder Information File
(FileType.IDX, new byte[] {0x50, 0x00, 0x00, 0x00, 0x20, 0x00, 0x00, 0x00}),
// Portable Graymap Graphic
(FileType.PGM, new byte[] {0x50, 0x35, 0x0A}),
// Quake archive file
(FileType.PAK, new byte[] {0x50, 0x41, 0x43, 0x4B}),
// Windows memory dump
(FileType.DMP, new byte[] {0x50, 0x41, 0x47, 0x45, 0x44, 0x55}),
// PAX password protected bitmap
(FileType.PAX, new byte[] {0x50, 0x41, 0x58}),
// PestPatrol data-scan strings
(FileType.DAT, new byte[] {0x50, 0x45, 0x53, 0x54}),
// PGP disk image
(FileType.PGD, new byte[] {0x50, 0x47, 0x50, 0x64, 0x4D, 0x41, 0x49, 0x4E}),
// ChromaGraph Graphics Card Bitmap
(FileType.IMG, new byte[] {0x50, 0x49, 0x43, 0x54, 0x00, 0x08}),
// PKZIP archive_1
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// Android package
(FileType.APK, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// MacOS X Dashboard Widget
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// MS Office Open XML Format Document
(FileType.DOCX, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// MS Office Open XML Format Document
(FileType.PPTX, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// MS Office Open XML Format Document
(FileType.XLSX, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// Java archive_1
(FileType.JAR, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// Google Earth session file
(FileType.KMZ, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// KWord document
(FileType.KWD, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// OpenDocument template
(FileType.ODT, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// OpenDocument template
(FileType.ODP, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// OpenDocument template
(FileType.OTT, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// Microsoft Open XML paper specification
(FileType.OXPS, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// OpenOffice documents
(FileType.SXC, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// OpenOffice documents
(FileType.SXD, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// OpenOffice documents
(FileType.SXI, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// OpenOffice documents
(FileType.SXW, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// StarOffice spreadsheet
(FileType.SXC, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// Windows Media compressed skin file
(FileType.WMZ, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// Mozilla Browser Archive
(FileType.XPI, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// XML paper specification file
(FileType.XPS, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// eXact Packager Models
(FileType.XPT, new byte[] {0x50, 0x4B, 0x03, 0x04}),
// Open Publication Structure eBook
(FileType.EPUB, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x0A, 0x00, 0x02, 0x00}),
// ZLock Pro encrypted ZIP
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x01, 0x00}),
// MS Office 2007 documents
(FileType.DOCX, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x06, 0x00}),
// MS Office 2007 documents
(FileType.PPTX, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x06, 0x00}),
// MS Office 2007 documents
(FileType.XLSX, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x06, 0x00}),
// Java archive_2
(FileType.JAR, new byte[] {0x50, 0x4B, 0x03, 0x04, 0x14, 0x00, 0x08, 0x00}),
// PKZIP archive_2
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x05, 0x06}),
// PKZIP archive_3
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x07, 0x08}),
// PKLITE archive
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x4C, 0x49, 0x54, 0x45}),
// PKSFX self-extracting archive
(FileType.ZIP, new byte[] {0x50, 0x4B, 0x53, 0x70, 0x58}),
// Windows Program Manager group file
(FileType.GRP, new byte[] {0x50, 0x4D, 0x43, 0x43}),
// Norton Disk Doctor undo file
(FileType.DAT, new byte[] {0x50, 0x4E, 0x43, 0x49, 0x55, 0x4E, 0x44, 0x4F}),
// Microsoft Windows User State Migration Tool
(FileType.PMOCCMOC, new byte[] {0x50, 0x4D, 0x4F, 0x43, 0x43, 0x4D, 0x4F, 0x43}),
// Dreamcast Sound Format
(FileType.DSF, new byte[] {0x50, 0x53, 0x46, 0x12}),
// Puffer encrypted archive
(FileType.PUF, new byte[] {0x50, 0x55, 0x46, 0x58}),
// Quicken data
(FileType.QEL, new byte[] {0x51, 0x45, 0x4C, 0x20}),
// Qcow Disk Image
(FileType.QEMU, new byte[] {0x51, 0x46, 0x49}),
// RIFF Qualcomm PureVoice
(FileType.QCP, new byte[] {0x51, 0x4C, 0x43, 0x4D, 0x66, 0x6D, 0x74, 0x20}),
// Quicken data file
(FileType.ABD, new byte[] {0x51, 0x57, 0x20, 0x56, 0x65, 0x72, 0x2E, 0x20}),
// Quicken data file
(FileType.QSD, new byte[] {0x51, 0x57, 0x20, 0x56, 0x65, 0x72, 0x2E, 0x20}),
// Outlook-Exchange message subheader
(FileType.MSG,
new byte[]
{
0x52, 0x00, 0x6F, 0x00, 0x6F, 0x00, 0x74, 0x00, 0x20, 0x00, 0x45, 0x00, 0x6E, 0x00, 0x74, 0x00, 0x72,
0x00, 0x79, 0x00
}),
// Shareaza (P2P) thumbnail
(FileType.DAT, new byte[] {0x52, 0x41, 0x5A, 0x41, 0x54, 0x44, 0x42, 0x31}),
// R saved work space
(FileType.RDATA, new byte[] {0x52, 0x44, 0x58, 0x32, 0x0A}),
// WinNT Registry-Registry Undo files
(FileType.REG, new byte[] {0x52, 0x45, 0x47, 0x45, 0x44, 0x49, 0x54}),
// WinNT Registry-Registry Undo files
(FileType.SUD, new byte[] {0x52, 0x45, 0x47, 0x45, 0x44, 0x49, 0x54}),
// Antenna data file
(FileType.AD, new byte[] {0x52, 0x45, 0x56, 0x4E, 0x55, 0x4D, 0x3A, 0x2C}),
// Windows animated cursor
(FileType.ANI, new byte[] {0x52, 0x49, 0x46, 0x46}),
// Corel Presentation Exchange metadata
(FileType.CMX, new byte[] {0x52, 0x49, 0x46, 0x46}),
// CorelDraw document
(FileType.CDR, new byte[] {0x52, 0x49, 0x46, 0x46}),
// Video CD MPEG movie
(FileType.DAT, new byte[] {0x52, 0x49, 0x46, 0x46}),
// Micrografx Designer graphic
(FileType.DS4, new byte[] {0x52, 0x49, 0x46, 0x46}),
// 4X Movie video
(FileType._4XM, new byte[] {0x52, 0x49, 0x46, 0x46}),
// Resource Interchange File Format
(FileType.AVI, new byte[] {0x52, 0x49, 0x46, 0x46}),
// Resource Interchange File Format
(FileType.CDA, new byte[] {0x52, 0x49, 0x46, 0x46}),
// Resource Interchange File Format
(FileType.QCP, new byte[] {0x52, 0x49, 0x46, 0x46}),
// Resource Interchange File Format
(FileType.RMI, new byte[] {0x52, 0x49, 0x46, 0x46}),
// Resource Interchange File Format
(FileType.WAV, new byte[] {0x52, 0x49, 0x46, 0x46}),
// Resource Interchange File Format
(FileType.WEBP, new byte[] {0x52, 0x49, 0x46, 0x46}),
// RIFF Windows MIDI
(FileType.RMI, new byte[] {0x52, 0x4D, 0x49, 0x44, 0x64, 0x61, 0x74, 0x61}),
// WinNT Netmon capture file
(FileType.CAP, new byte[] {0x52, 0x54, 0x53, 0x53}),
// WinRAR compressed archive
(FileType.RAR, new byte[] {0x52, 0x61, 0x72, 0x21, 0x1A, 0x07, 0x00}),
// Generic e-mail_1
(FileType.EML, new byte[] {0x52, 0x65, 0x74, 0x75, 0x72, 0x6E, 0x2D, 0x50}),
// Windows prefetch
(FileType.PF, new byte[] {0x53, 0x43, 0x43, 0x41}),
// Underground Audio
(FileType.AST, new byte[] {0x53, 0x43, 0x48, 0x6C}),
// Img Software Bitmap
(FileType.IMG, new byte[] {0x53, 0x43, 0x4D, 0x49}),
// SMPTE DPX (big endian)
(FileType.SDPX, new byte[] {0x53, 0x44, 0x50, 0x58}),
// Harvard Graphics presentation
(FileType.SHW, new byte[] {0x53, 0x48, 0x4F, 0x57}),
// Sietronics CPI XRD document
(FileType.CPI, new byte[] {0x53, 0x49, 0x45, 0x54, 0x52, 0x4F, 0x4E, 0x49}),
// Flexible Image Transport System (FITS) file
(FileType.FITS,
new byte[]
{
0x53, 0x49, 0x4D, 0x50, 0x4C, 0x45, 0x20, 0x20, 0x3D, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20,
0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x20, 0x54
}),
// StuffIt archive
(FileType.SIT, new byte[] {0x53, 0x49, 0x54, 0x21, 0x00}),
// SmartDraw Drawing file
(FileType.SDR, new byte[] {0x53, 0x4D, 0x41, 0x52, 0x54, 0x44, 0x52, 0x57}),
// StorageCraft ShadownProtect backup file
(FileType.SPF, new byte[] {0x53, 0x50, 0x46, 0x49, 0x00}),
// MultiBit Bitcoin blockchain file
(FileType.SPVB, new byte[] {0x53, 0x50, 0x56, 0x42}),
// SQLite database file
(FileType.DB,
new byte[]
{
0x53, 0x51, 0x4C, 0x69, 0x74, 0x65, 0x20, 0x66, 0x6F, 0x72, 0x6D, 0x61, 0x74, 0x20, 0x33, 0x00
}),
// DB2 conversion file
(FileType.CNV, new byte[] {0x53, 0x51, 0x4C, 0x4F, 0x43, 0x4F, 0x4E, 0x56}),
// StuffIt compressed archive
(FileType.SIT, new byte[] {0x53, 0x74, 0x75, 0x66, 0x66, 0x49, 0x74, 0x20}),
// SuperCalc worksheet
(FileType.CAL, new byte[] {0x53, 0x75, 0x70, 0x65, 0x72, 0x43, 0x61, 0x6C}),
// Wii-GameCube
(FileType.THP, new byte[] {0x54, 0x48, 0x50, 0x00}),
// GNU Info Reader file
(FileType.INFO, new byte[] {0x54, 0x68, 0x69, 0x73, 0x20, 0x69, 0x73, 0x20}),
// Unicode extensions
(FileType.UCE, new byte[] {0x55, 0x43, 0x45, 0x58}),
// UFA compressed archive
(FileType.UFA, new byte[] {0x55, 0x46, 0x41, 0xC6, 0xD2, 0xC1}),
// UFO Capture map file
(FileType.DAT, new byte[] {0x55, 0x46, 0x4F, 0x4F, 0x72, 0x62, 0x69, 0x74}),
// Visual C PreCompiled header
(FileType.PCH, new byte[] {0x56, 0x43, 0x50, 0x43, 0x48, 0x30}),
// Visual Basic User-defined Control file
(FileType.CTL, new byte[] {0x56, 0x45, 0x52, 0x53, 0x49, 0x4F, 0x4E, 0x20}),
// MapInfo Interchange Format file
(FileType.MIF, new byte[] {0x56, 0x65, 0x72, 0x73, 0x69, 0x6F, 0x6E, 0x20}),
// SPSS template
(FileType.SCT,
new byte[]
{
0x57, 0x04, 0x00, 0x00, 0x53, 0x50, 0x53, 0x53, 0x20, 0x74, 0x65, 0x6D, 0x70, 0x6C, 0x61, 0x74
}),
// RIFF Windows Audio
(FileType.WAV, new byte[] {0x57, 0x41, 0x56, 0x45, 0x66, 0x6D, 0x74, 0x20}),
// RIFF WebP
(FileType.WEBP, new byte[] {0x57, 0x45, 0x42, 0x50}),
// Walkman MP3 file
(FileType.DAT, new byte[] {0x57, 0x4D, 0x4D, 0x50}),
// WordStar for Windows file
(FileType.WS2, new byte[] {0x57, 0x53, 0x32, 0x30, 0x30, 0x30}),
// WinZip compressed archive
(FileType.ZIP, new byte[] {0x57, 0x69, 0x6E, 0x5A, 0x69, 0x70}),
// Lotus WordPro file
(FileType.LWP, new byte[] {0x57, 0x6F, 0x72, 0x64, 0x50, 0x72, 0x6F}),
// Exchange e-mail
(FileType.EML, new byte[] {0x58, 0x2D}),
// Packet sniffer files
(FileType.CAP, new byte[] {0x58, 0x43, 0x50, 0x00}),
// XPCOM libraries
(FileType.XPT, new byte[] {0x58, 0x50, 0x43, 0x4F, 0x4D, 0x0A, 0x54, 0x79}),
// SMPTE DPX file (little endian)
(FileType.DPX, new byte[] {0x58, 0x50, 0x44, 0x53}),
// MS Publisher
(FileType.BDR, new byte[] {0x58, 0x54}),
// ZOO compressed archive
(FileType.ZOO, new byte[] {0x5A, 0x4F, 0x4F, 0x20}),
// Macromedia Shockwave Flash
(FileType.SWF, new byte[] {0x5A, 0x57, 0x53}),
// MS Exchange configuration file
(FileType.ECF, new byte[] {0x5B, 0x47, 0x65, 0x6E, 0x65, 0x72, 0x61, 0x6C}),
// Visual C++ Workbench Info File
(FileType.VCW, new byte[] {0x5B, 0x4D, 0x53, 0x56, 0x43}),
// Dial-up networking file
(FileType.DUN, new byte[] {0x5B, 0x50, 0x68, 0x6F, 0x6E, 0x65, 0x5D}),
// Lotus AMI Pro document_1
(FileType.SAM, new byte[] {0x5B, 0x56, 0x45, 0x52, 0x5D}),
// VocalTec VoIP media file
(FileType.VMD, new byte[] {0x5B, 0x56, 0x4D, 0x44, 0x5D}),
// Microsoft Code Page Translation file
(FileType.CPX, new byte[] {0x5B, 0x57, 0x69, 0x6E, 0x64, 0x6F, 0x77, 0x73}),
// Flight Simulator Aircraft Configuration
(FileType.CFG, new byte[] {0x5B, 0x66, 0x6C, 0x74, 0x73, 0x69, 0x6D, 0x2E}),
// WinAmp Playlist
(FileType.PLS, new byte[] {0x5B, 0x70, 0x6C, 0x61, 0x79, 0x6C, 0x69, 0x73, 0x74, 0x5D}),
// Lotus AMI Pro document_2
(FileType.SAM, new byte[] {0x5B, 0x76, 0x65, 0x72, 0x5D}),
// Husqvarna Designer
(FileType.HUS, new byte[] {0x5D, 0xFC, 0xC8, 0x00}),
// Jar archive
(FileType.JAR, new byte[] {0x5F, 0x27, 0xA8, 0x89}),
// EnCase case file
(FileType.CAS, new byte[] {0x5F, 0x43, 0x41, 0x53, 0x45, 0x5F}),
// EnCase case file
(FileType.CBK, new byte[] {0x5F, 0x43, 0x41, 0x53, 0x45, 0x5F}),
// Compressed archive file
(FileType.ARJ, new byte[] {0x60, 0xEA}),
// UUencoded BASE64 file
(FileType.b64, new byte[] {0x62, 0x65, 0x67, 0x69, 0x6E, 0x2D, 0x62, 0x61, 0x73, 0x65, 0x36, 0x34}),
// Apple Core Audio File
(FileType.CAF, new byte[] {0x63, 0x61, 0x66, 0x66}),
// Macintosh encrypted Disk image (v1)
(FileType.DMG, new byte[] {0x63, 0x64, 0x73, 0x61, 0x65, 0x6E, 0x63, 0x72}),
// Virtual PC HD image
(FileType.VHD, new byte[] {0x63, 0x6F, 0x6E, 0x65, 0x63, 0x74, 0x69, 0x78}),
// Photoshop Custom Shape
(FileType.CSH, new byte[] {0x63, 0x75, 0x73, 0x68, 0x00, 0x00, 0x00, 0x02}),
// Intel PROset-Wireless Profile
(FileType.P10, new byte[] {0x64, 0x00, 0x00, 0x00}),
// Torrent file
(FileType.TORRENT, new byte[] {0x64, 0x38, 0x3A, 0x61, 0x6E, 0x6E, 0x6F, 0x75, 0x6E, 0x63, 0x65}),
// Dalvik (Android) executable file
(FileType.dex, new byte[] {0x64, 0x65, 0x78, 0x0A}),
// Audacity audio file
(FileType.AU, new byte[] {0x64, 0x6E, 0x73, 0x2E}),
// MS Visual Studio workspace file
(FileType.DSW, new byte[] {0x64, 0x73, 0x77, 0x66, 0x69, 0x6C, 0x65}),
// Macintosh encrypted Disk image (v2)
(FileType.DMG, new byte[] {0x65, 0x6E, 0x63, 0x72, 0x63, 0x64, 0x73, 0x61}),
// WinNT printer spool file
(FileType.SHD, new byte[] {0x66, 0x49, 0x00, 0x00}),
// Free Lossless Audio Codec file
(FileType.FLAC, new byte[] {0x66, 0x4C, 0x61, 0x43, 0x00, 0x00, 0x00, 0x22}),
// MPEG-4 video file_1
(FileType.MP4, new byte[] {0x66, 0x74, 0x79, 0x70, 0x33, 0x67, 0x70, 0x35}),
// Apple Lossless Audio Codec file
(FileType.M4A, new byte[] {0x66, 0x74, 0x79, 0x70, 0x4D, 0x34, 0x41, 0x20}),
// ISO Media-MPEG v4-iTunes AVC-LC
(FileType.FLV, new byte[] {0x66, 0x74, 0x79, 0x70, 0x4D, 0x34, 0x56, 0x20}),
// ISO Media-MPEG v4-iTunes AVC-LC
(FileType.M4V, new byte[] {0x66, 0x74, 0x79, 0x70, 0x4D, 0x34, 0x56, 0x20}),
// MPEG-4 video file_2
(FileType.MP4, new byte[] {0x66, 0x74, 0x79, 0x70, 0x4D, 0x53, 0x4E, 0x56}),
// ISO Base Media file (MPEG-4) v1
(FileType.MP4, new byte[] {0x66, 0x74, 0x79, 0x70, 0x69, 0x73, 0x6F, 0x6D}),
// MPEG-4 video-QuickTime file
(FileType.M4V, new byte[] {0x66, 0x74, 0x79, 0x70, 0x6D, 0x70, 0x34, 0x32}),
// QuickTime movie_7
(FileType.MOV, new byte[] {0x66, 0x74, 0x79, 0x70, 0x71, 0x74, 0x20, 0x20}),
// Win2000-XP printer spool file
(FileType.SHD, new byte[] {0x67, 0x49, 0x00, 0x00}),
// GIMP file
(FileType.XCF, new byte[] {0x67, 0x69, 0x6d, 0x70, 0x20, 0x78, 0x63, 0x66}),
// Win Server 2003 printer spool file
(FileType.SHD, new byte[] {0x68, 0x49, 0x00, 0x00}),
// Skype user data file
(FileType.DBB, new byte[] {0x6C, 0x33, 0x33, 0x6C}),
// QuickTime movie_1
(FileType.MOV, new byte[] {0x6D, 0x6F, 0x6F, 0x76}),
// QuickTime movie_2
(FileType.MOV, new byte[] {0x66, 0x72, 0x65, 0x65}),
// QuickTime movie_3
(FileType.MOV, new byte[] {0x6D, 0x64, 0x61, 0x74}),
// QuickTime movie_4
(FileType.MOV, new byte[] {0x77, 0x69, 0x64, 0x65}),
// QuickTime movie_5
(FileType.MOV, new byte[] {0x70, 0x6E, 0x6F, 0x74}),
// QuickTime movie_6
(FileType.MOV, new byte[] {0x73, 0x6B, 0x69, 0x70}),
// Internet Explorer v11 Tracking Protection List
(FileType.TPL, new byte[] {0x6D, 0x73, 0x46, 0x69, 0x6C, 0x74, 0x65, 0x72, 0x4C, 0x69, 0x73, 0x74}),
// MultiBit Bitcoin wallet information
(FileType.INFO, new byte[] {0x6D, 0x75, 0x6C, 0x74, 0x69, 0x42, 0x69, 0x74, 0x2E, 0x69, 0x6E, 0x66, 0x6F}),
// WinNT registry file
(FileType.DAT, new byte[] {0x72, 0x65, 0x67, 0x66}),
// Sonic Foundry Acid Music File
(FileType.AC, new byte[] {0x72, 0x69, 0x66, 0x66}),
// RealMedia metafile
(FileType.RAM, new byte[] {0x72, 0x74, 0x73, 0x70, 0x3A, 0x2F, 0x2F}),
// Allegro Generic Packfile (compressed)
(FileType.DAT, new byte[] {0x73, 0x6C, 0x68, 0x21}),
// Allegro Generic Packfile (uncompressed)
(FileType.DAT, new byte[] {0x73, 0x6C, 0x68, 0x2E}),
// PalmOS SuperMemo
(FileType.PDB, new byte[] {0x73, 0x6D, 0x5F}),
// STL (STereoLithography) file
(FileType.STL, new byte[] {0x73, 0x6F, 0x6C, 0x69, 0x64}),
// CALS raster bitmap
(FileType.CAL, new byte[] {0x73, 0x72, 0x63, 0x64, 0x6F, 0x63, 0x69, 0x64}),
// PowerBASIC Debugger Symbols
(FileType.PDB, new byte[] {0x73, 0x7A, 0x65, 0x7A}),
// PathWay Map file
(FileType.PRC, new byte[] {0x74, 0x42, 0x4D, 0x50, 0x4B, 0x6E, 0x57, 0x72}),
// TrueType font
(FileType.TTF, new byte[] {0x74, 0x72, 0x75, 0x65, 0x00}),
// Tape Archive
(FileType.TAR, new byte[] {0x75, 0x73, 0x74, 0x61, 0x72}),
// OpenEXR bitmap image
(FileType.EXR, new byte[] {0x76, 0x2F, 0x31, 0x01}),
// Qimage filter
(FileType.FLT, new byte[] {0x76, 0x32, 0x30, 0x30, 0x33, 0x2E, 0x31, 0x30}),
// MacOS X image file
(FileType.DMG, new byte[] {0x78, 0x01, 0x73, 0x0D, 0x62, 0x62, 0x60}),
// eXtensible ARchive file
(FileType.XAR, new byte[] {0x78, 0x61, 0x72, 0x21}),
// ZoomBrowser Image Index
(FileType.INFO, new byte[] {0x7A, 0x62, 0x65, 0x78}),
// Windows application log
(FileType.LGC, new byte[] {0x7B, 0x0D, 0x0A, 0x6F, 0x20}),
// Windows application log
(FileType.LGD, new byte[] {0x7B, 0x0D, 0x0A, 0x6F, 0x20}),
// MS WinMobile personal note
(FileType.PWI, new byte[] {0x7B, 0x5C, 0x70, 0x77, 0x69}),
// Rich Text Format
(FileType.RTF, new byte[] {0x7B, 0x5C, 0x72, 0x74, 0x66, 0x31}),
// Corel Paint Shop Pro image
(FileType.PSP, new byte[] {0x7E, 0x42, 0x4B, 0x00}),
// Easy Street Draw diagram file
(FileType.ESD,
new byte[]
{
0x7E, 0x45, 0x53, 0x44, 0x77, 0xF6, 0x85, 0x3E, 0xBF, 0x6A, 0xD2, 0x11, 0x45, 0x61, 0x73, 0x79, 0x20,
0x53, 0x74, 0x72, 0x65, 0x65, 0x74, 0x20, 0x44, 0x72, 0x61, 0x77
}),
// Digital Watchdog DW-TP-500G audio
(FileType.IMG, new byte[] {0x7E, 0x74, 0x2C, 0x01, 0x50, 0x70, 0x02, 0x4D, 0x52}),
// Relocatable object code
(FileType.OBJ, new byte[] {0x80}),
// Dreamcast audio
(FileType.ADX, new byte[] {0x80, 0x00, 0x00, 0x20, 0x03, 0x12, 0x04}),
// Kodak Cineon image
(FileType.CIN, new byte[] {0x80, 0x2A, 0x5F, 0xD7}),
// Outlook Express address book (Win95)
(FileType.WAB, new byte[] {0x81, 0x32, 0x84, 0xC1, 0x85, 0x05, 0xD0, 0x11}),
// WordPerfect text
(FileType.WPF, new byte[] {0x81, 0xCD, 0xAB}),
// PNG image
(FileType.PNG, new byte[] {0x89, 0x50, 0x4E, 0x47, 0x0D, 0x0A, 0x1A, 0x0A}),
// MS Answer Wizard
(FileType.AW, new byte[] {0x8A, 0x01, 0x09, 0x00, 0x00, 0x00, 0xE1, 0x08}),
// Hamarsoft compressed archive
(FileType.HAP, new byte[] {0x91, 0x33, 0x48, 0x46}),
// PGP secret keyring_1
(FileType.SKR, new byte[] {0x95, 0x00}),
// PGP secret keyring_2
(FileType.SKR, new byte[] {0x95, 0x01}),
// JBOG2 image file
(FileType.JB2, new byte[] {0x97, 0x4A, 0x42, 0x32, 0x0D, 0x0A, 0x1A, 0x0A}),
// GPG public keyring
(FileType.GPG, new byte[] {0x99}),
// PGP public keyring
(FileType.PKR, new byte[] {0x99, 0x01}),
// Outlook address file
(FileType.WAB, new byte[] {0x9C, 0xCB, 0xCB, 0x8D, 0x13, 0x75, 0xD2, 0x11}),
// Access Data FTK evidence
(FileType.DAT, new byte[] {0xA9, 0x0D, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}),
// Quicken data
(FileType.QDF, new byte[] {0xAC, 0x9E, 0xBD, 0x8F, 0x00, 0x00}),
// PowerPoint presentation subheader_3
(FileType.PPT, new byte[] {0xA0, 0x46, 0x1D, 0xF0}),
// BGBlitz position database file
(FileType.PDB, new byte[] {0xAC, 0xED, 0x00, 0x05, 0x73, 0x72, 0x00, 0x12}),
// Win95 password file
(FileType.PWL, new byte[] {0xB0, 0x4D, 0x46, 0x43}),
// PCX bitmap
(FileType.DCX, new byte[] {0xB1, 0x68, 0xDE, 0x3A}),
// Acronis True Image_1
(FileType.TIB, new byte[] {0xB4, 0x6E, 0x68, 0x44}),
// Windows calendar
(FileType.CAL, new byte[] {0xB5, 0xA2, 0xB0, 0xB3, 0xB3, 0xB0, 0xA5, 0xB5}),
// InstallShield Script
(FileType.INS, new byte[] {0xB8, 0xC9, 0x0C, 0x00}),
// MS Write file_3
(FileType.WRI, new byte[] {0xBE, 0x00, 0x00, 0x00, 0xAB}),
// Palm Desktop DateBook
(FileType.DAT,
new byte[]
{
0xBE, 0xBA, 0xFE, 0xCA, 0x0F, 0x50, 0x61, 0x6C, 0x6D, 0x53, 0x47, 0x20, 0x44, 0x61, 0x74, 0x61
}),
// MS Agent Character file
(FileType.ACS, new byte[] {0xC3, 0xAB, 0xCD, 0xAB}),
// Adobe encapsulated PostScript
(FileType.EPS, new byte[] {0xC5, 0xD0, 0xD3, 0xC6}),
// Jeppesen FliteLog file
(FileType.LBK, new byte[] {0xC8, 0x00, 0x79, 0x00}),
// Java bytecode
(FileType.CLASS, new byte[] {0xCA, 0xFE, 0xBA, 0xBE}),
// Acronis True Image_2
(FileType.TIB, new byte[] {0xCE, 0x24, 0xB9, 0xA2, 0x20, 0x00, 0x00, 0x00}),
// Java Cryptography Extension keystore
(FileType.JCEKS, new byte[] {0xCE, 0xCE, 0xCE, 0xCE}),
// Perfect Office document
(FileType.DOC, new byte[] {0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1, 0x00}),
// Outlook Express e-mail folder
(FileType.DBX, new byte[] {0xCF, 0xAD, 0x12, 0xFE}),
// Microsoft Office document
(FileType.DOC, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Microsoft Office document
(FileType.DOT, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Microsoft Office document
(FileType.PPS, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Microsoft Office document
(FileType.PPT, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Microsoft Office document
(FileType.XLA, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Microsoft Office document
(FileType.XLS, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Microsoft Office document
(FileType.WIZ, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// CaseWare Working Papers
(FileType.AC_, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Access project file
(FileType.ADP, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Lotus-IBM Approach 97 file
(FileType.APR, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// MSWorks database file
(FileType.DB, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Microsoft Common Console Document
(FileType.MSC, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Microsoft Installer package
(FileType.MSI, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Microsoft Installer Patch
(FileType.MSP, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Minitab data file
(FileType.MTW, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// ArcMap GIS project file
(FileType.MXD, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Developer Studio File Options file
(FileType.OPT, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// MS Publisher file
(FileType.PUB, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Revit Project file
(FileType.RVT, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Visual Studio Solution User Options file
(FileType.SOU, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// SPSS output file
(FileType.SPO, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// Visio file
(FileType.VSD, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// MSWorks text document
(FileType.WPS, new byte[] {0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}),
// WinPharoah filter file
(FileType.FTR, new byte[] {0xD2, 0x0A, 0x00, 0x00}),
// AOL history|typed URL files
(FileType.ARL, new byte[] {0xD4, 0x2A}),
// AOL history|typed URL files
(FileType.AUT, new byte[] {0xD4, 0x2A}),
// Windows graphics metafile
(FileType.WMF, new byte[] {0xD7, 0xCD, 0xC6, 0x9A}),
// Word 2.0 file
(FileType.DOC, new byte[] {0xDB, 0xA5, 0x2D, 0x00}),
// Corel color palette
(FileType.CPL, new byte[] {0xDC, 0xDC}),
// eFax file
(FileType.EFX, new byte[] {0xDC, 0xFE}),
// Amiga icon
(FileType.INFO, new byte[] {0xE3, 0x10, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00}),
// Win98 password file
(FileType.PWL, new byte[] {0xE3, 0x82, 0x85, 0x96}),
// MS OneNote note
(FileType.ONE, new byte[] {0xE4, 0x52, 0x5C, 0x7B, 0x8C, 0xD8, 0xA7, 0x4D}),
// Windows executable file_1
(FileType.COM, new byte[] {0xE8}),
// Windows executable file_1
(FileType.SYS, new byte[] {0xE8}),
// Windows executable file_2
(FileType.COM, new byte[] {0xE9}),
// Windows executable file_2
(FileType.SYS, new byte[] {0xE9}),
// Windows executable file_3
(FileType.COM, new byte[] {0xEB}),
// Windows executable file_3
(FileType.SYS, new byte[] {0xEB}),
// GEM Raster file
(FileType.IMG, new byte[] {0xEB, 0x3C, 0x90, 0x2A}),
// Word document subheader
(FileType.DOC, new byte[] {0xEC, 0xA5, 0xC1, 0x00}),
// RedHat Package Manager
(FileType.RPM, new byte[] {0xED, 0xAB, 0xEE, 0xDB}),
// Windows Script Component (UTF-8)_1
(FileType.WSF, new byte[] {0xEF, 0xBB, 0xBF, 0x3C}),
// Windows Script Component (UTF-8)_2
(FileType.WSC, new byte[] {0xEF, 0xBB, 0xBF, 0x3C, 0x3F}),
// Bitcoin-Qt blockchain block file
(FileType.DAT, new byte[] {0xF9, 0xBE, 0xB4, 0xD9}),
// XZ archive
(FileType.XZ, new byte[] {0xFD, 0x37, 0x7A, 0x58, 0x5A, 0x00}),
// MS Publisher subheader
(FileType.PUB, new byte[] {0xFD, 0x37, 0x7A, 0x58, 0x5A, 0x00}),
// Thumbs.db subheader
(FileType.DB, new byte[] {0xFD, 0xFF, 0xFF, 0xFF}),
// MS Publisher file subheader
(FileType.PUB, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x02}),
// Visual Studio Solution subheader
(FileType.SUO, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x04}),
// PowerPoint presentation subheader_4
(FileType.PPT, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x0E, 0x00, 0x00, 0x00}),
// Excel spreadsheet subheader_2
(FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x10}),
// PowerPoint presentation subheader_5
(FileType.PPT, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x1C, 0x00, 0x00, 0x00}),
// Excel spreadsheet subheader_3
(FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x1F}),
// Developer Studio subheader
(FileType.OPT, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x20}),
// Excel spreadsheet subheader_4
(FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x22}),
// Excel spreadsheet subheader_5
(FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x23}),
// Excel spreadsheet subheader_6
(FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x28}),
// Excel spreadsheet subheader_7
(FileType.XLS, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x29}),
// PowerPoint presentation subheader_6
(FileType.PPT, new byte[] {0xFD, 0xFF, 0xFF, 0xFF, 0x43, 0x00, 0x00, 0x00}),
// Symantex Ghost image file
(FileType.GHO, new byte[] {0xFE, 0xEF}),
// Symantex Ghost image file
(FileType.GHS, new byte[] {0xFE, 0xEF}),
// Windows executable
(FileType.SYS, new byte[] {0xFF}),
// Works for Windows spreadsheet
(FileType.WKS, new byte[] {0xFF, 0x00, 0x02, 0x00, 0x04, 0x04, 0x05, 0x54}),
// QuickReport Report
(FileType.QRP, new byte[] {0xFF, 0x0A, 0x00}),
// Windows international code page
(FileType.CPI, new byte[] {0xFF, 0x46, 0x4F, 0x4E, 0x54}),
// Keyboard driver file
(FileType.SYS, new byte[] {0xFF, 0x4B, 0x45, 0x59, 0x42, 0x20, 0x20, 0x20}),
// WordPerfect text and graphics
(FileType.WP, new byte[] {0xFF, 0x57, 0x50, 0x43}),
// WordPerfect text and graphics
(FileType.WPD, new byte[] {0xFF, 0x57, 0x50, 0x43}),
// WordPerfect text and graphics
(FileType.WPG, new byte[] {0xFF, 0x57, 0x50, 0x43}),
// WordPerfect text and graphics
(FileType.WPP, new byte[] {0xFF, 0x57, 0x50, 0x43}),
// WordPerfect text and graphics
(FileType.WP5, new byte[] {0xFF, 0x57, 0x50, 0x43}),
// WordPerfect text and graphics
(FileType.WP6, new byte[] {0xFF, 0x57, 0x50, 0x43}),
// JPEG-EXIF-SPIFF images
(FileType.JFIF, new byte[] {0xFF, 0xD8, 0xFF}),
// JPEG-EXIF-SPIFF images
(FileType.JPE, new byte[] {0xFF, 0xD8, 0xFF}),
// JPEG-EXIF-SPIFF images
(FileType.JPEG, new byte[] {0xFF, 0xD8, 0xFF}),
// JPEG-EXIF-SPIFF images
(FileType.JPG, new byte[] {0xFF, 0xD8, 0xFF}),
// MPEG-4 AAC audio
(FileType.AAC, new byte[] {0xFF, 0xF1}),
// MPEG-2 AAC audio
(FileType.AAC, new byte[] {0xFF, 0xF9}),
// Windows Registry file
(FileType.REG, new byte[] {0xFF, 0xFE}),
// MSinfo file
(FileType.MOF, new byte[] {0xFF, 0xFE, 0x23, 0x00, 0x6C, 0x00, 0x69, 0x00}),
// DOS system driver
(FileType.SYS, new byte[] {0xFF, 0xFF, 0xFF, 0xFF})
};
}