1 2#------------------------------------------------------------------------------ 3# $File: ole2compounddocs,v 1.18 2022/05/31 17:38:36 christos Exp $ 4# Microsoft OLE 2 Compound Documents : file(1) magic for Microsoft Structured 5# storage (https://en.wikipedia.org/wiki/Compound_File_Binary_Format) 6# Additional tests for OLE 2 Compound Documents should be under this recipe. 7# reference: https://www.openoffice.org/sc/compdocfileformat.pdf 8 90 string \320\317\021\340\241\261\032\341 10# https://digital-preservation.github.io/droid/ 11# skip droid skeleton like fmt-39-signature-id-128.doc by valid version 12>0x1A ushort !0xABAB OLE 2 Compound Document 13#>0x1C uleshort x \b, endnian %#4.4x 14# big endian not tested 15>>0x1C ubeshort =0xfffe \b, big-endian 16>>>546 string jbjb : Microsoft Word Document 17!:mime application/msword 18!:apple MSWDWDBN 19!:ext doc 20# Byte Order 0xFFFE means little-endian found in real world applications 21#>>0x1C uleshort =0xfffe \b, little-endian 22>>0x1C uleshort =0xfffe 23# From: Joerg Jenderek 24# Major Version 3 or 4 25>>>0x1A uleshort x \b, v%u 26# Minor Version 32h=50 3Bh=59 3Eh=62 27>>>0x18 uleshort x \b.%u 28# SecID of first sector of the directory stream is often 1 but high like 3144h 29>>>48 ulelong x \b, SecID %#x 30# Sector Shift Exponent in short-stream container stream: 6~64 bytes 31>>>32 uleshort !6 \b, exponent of short stream %u 32# total number of sectors used for the FAT 33>>>44 ulelong >1 \b, %u FAT sectors 34# SecID of first sector of the short-sector allocation table (Mini FAT) 35# or -2 (End Of ChainSecID) if not extant 36>>>60 ulelong !0xffFFffFE \b, Mini FAT start sector %#x 37# total number of sectors used for the short-sector allocation table 38>>>64 ulelong !1 \b, %u Mini FAT sector 39# plural s 40>>>>64 ulelong >1 \bs 41# SecID of first sector of the master sector allocation table (DIFAT) 42# or -2 (End Of Chain SecID) if no additional sectors used 43>>>68 ulelong !0xffFFffFE \b, DIFAT start sector %#x 44# total number of sectors used for the master sector allocation table (DIFAT) 45>>>72 ulelong >0 \b, %u DIFAT sectors 46# First part of the master sector allocation table (DIFAT) containing 109 SecIDs 47#>>>76 ubequad x \b, DIFAT=%#16.16llx 48#>>>84 ubequad x \b%16.16llx... 49# pointer to root entry only works with standard configuration for SecID ~< 800h 50# Red-Carpet-presentation-1.0-1.sdd sg10.sdv 2000_GA_Annual_Review_Data.xls 51# "ORLEN Factbook 2017.xls" XnView_metadata.doc 52# "Barham, Lisa - Die Shopping-Prinzessinnen.doc" then not recognized 53>>>48 ulelong >0x800 too big for FILE_BYTES_MAX = 1 MiB 54# Sector Shift Exponent 9~512 for major version 3 or C~4096 for major version 4 55>>>0x1E uleshort 0xc \b, blocksize 4096 56# jump to one block (4096 bytes per block) before root storage block 57>>>>(48.l*4096) ubyte x 58>>>>>&4095 use ole2-directory 59#>>>0x1E uleshort 9 \b, blocksize 512 60>>>0x1E uleshort 9 61# jump to one block (512 bytes per block) before root storage block 62# in 5.37 only true for offset ~< FILE_BYTES_MAX=7 MiB defined in ../../src/file.h 63>>>>(48.l*512) ubyte x 64>>>>>&511 use ole2-directory 65# check directory entry structure and display types by GUID 660 name ole2-directory 67# directory entry name like "Root Entry" 68#>0 lestring16 x \b, 1st %.10s 69# type of the entry; 5~Root storage 70#>66 ubyte x \b, type %x 71# node colour of the entry: 00H ~ Red 01H ~ Black 72#>67 ubyte x \b, color %x 73# the DirIDs of the child nodes. Should both be -1 in the root storage entry 74#>68 bequad !0xffffffffffffffff \b, DirIDs %llx 75# second directory entry name like VisioDocument Control000 76#>128 lestring16 x \b, 2nd %.20s 77# third directory entry like WordDocument 78#>256 lestring16 x \b, 3rd %.20s 79# forth 80#>384 lestring16 x \b, 4th %.10s 81# 5th 82#>512 lestring16 x \b, 5th %.10s 83# 6th 84#>640 lestring16 x \b, 6th %.10s 85# 7th 86#>768 lestring16 x \b, 7th %.10s 87# https://wikileaks.org/ciav7p1/cms/page_13762814.html 88# https://m.blog.naver.com/superman4u/40047693679 89# https://misc.daniel-marschall.de/projects/guid_analysis/guid.txt 90# https://toolslick.com/conversion/data/guid 91#>80 ubequad !0 \b, clsid %#16.16llx 92#>>88 ubequad x \b%16.16llx 93# test for "Root Entry" inside directory by type 5 value 94>66 ubyte 5 95# look for CLSID GUID 0 96>>88 ubequad 0x0 97>>>80 ubequad 0x0 98# - Microstation V8 DGN files (www.bentley.com) 99# URL: https://en.wikipedia.org/wiki/MicroStation 100# Last update on 10/23/2006 by Lester Hightower 101# 07/24/2019 by Joerg Jenderek 102# Second directory entry name like Dgn~H Dgn~S 103>>>>128 lestring16 Dgn~ : Microstation V8 CAD 104#!:mime application/x-ole-storage 105!:mime application/x-bentley-dgn 106# http://www.q-cad.com/files/samples_cad_files/1344468165.dgn 107!:ext dgn 108# 109# URL: http://fileformats.archiveteam.org/wiki/WordPerfect 110# Second directory entry name PerfectOffice_ 111>>>>128 lestring16 PerfectOffice_ : WordPerfect 7-X3 presentations Master, Document or Graphic 112!:mime application/vnd.wordperfect 113# https://www.macdisk.com/macsigen.php "WPC2" for Wordperfect 2 *.wpd 114!:apple ????WPC7 115!:ext mst/wpd/wpg 116# 117# URL: http://fileformats.archiveteam.org/wiki/Microsoft_Works_Word_Processor 118# Second directory entry name MatOST_ 119>>>>128 lestring16 MatOST : Microsoft Works 3.0 document 120!:mime application/vnd.ms-works 121!:apple ????AWWP 122!:ext wps 123# 124# URL: http://fileformats.archiveteam.org/wiki/Microsoft_Works_Spreadsheet 125# 3rd directory entry name WksSSWorkBook 126>>>>256 lestring16 WksSSWorkBook : Microsoft Works 6-9 spreadsheet 127!:mime application/vnd.ms-works 128!:apple ????AWSS 129!:ext xlr 130# 131# URL: http://fileformats.archiveteam.org/wiki/XLS 132# what is the difference to {00020820-0000-0000-c000-000000000046} ? 133# Second directory entry name Workbook 134>>>>128 lestring16 Workbook 135>>>>>256 lestring16 !WksSSWorkBook : Microsoft Excel 97-2003 worksheet 0 clsid 136!:mime application/vnd.ms-excel 137# https://www.macdisk.com/macsigen.php XLS5 for Excel 5 138!:apple ????XLS9 139!:ext xls 140# 141# URL: http://fileformats.archiveteam.org/wiki/PPT 142# Second directory entry name Object1 Object12 Object35 143>>>>128 lestring16 Object : Microsoft PowerPoint 4 presentation 144!:mime application/vnd.ms-powerpoint 145# https://www.macdisk.com/macsigen.php 146!:apple ????PPT3 147!:ext ppt 148# 149# URL: https://www.msoutlook.info/question/164 150# Second directory entry name __CollDataStm 151>>>>128 lestring16 __CollDataStm : Microsoft Outlook Send Receive Settings 152#!:mime application/vnd.ms-outlook 153!:mime application/x-ms-srs 154# %APPDATA%\Microsoft\Outlook\Outlook.srs 155!:ext srs 156# 157# URL: https://www.file-extensions.org/cag-file-extension 158# Second directory entry name Category 159>>>>128 lestring16 Category : Microsoft Clip Art Gallery 160#!:mime application/x-ole-storage 161!:mime application/x-ms-cag 162!:apple MScgCGdb 163!:ext cag/ 164# 165# URL: https://www.filesuffix.com/de/extension/rra 166# 3rd directory entry name StrIndex_StringTable 167>>>>256 lestring16 StrIndex_StringTable : Windows temporarily installer 168#!:mime application/x-ole-storage 169!:mime application/x-ms-rra 170!:ext rra 171# 172# URL: https://www.forensicswiki.org/wiki/Jump_Lists 173# 3rd directory entry name DestList 174>>>>256 lestring16 DestList : Windows jump list 175#!:mime application/x-ole-storage 176!:mime application/x-ms-jumplist 177# %APPDATA%\Microsoft\Windows\Recent\AutomaticDestinations\*.automaticDestinations-ms 178!:ext automaticDestinations-ms 179# 180# URL: https://en.wikipedia.org/wiki/Windows_thumbnail_cache 181# Second directory entry name 256_ 182>>>>128 lestring16 256_ : Windows thumbnail database 256 183#!:mime application/x-ole-storage 184!:mime application/x-ms-thumbnail 185# Thumbs.db 186!:ext db 187>>>>128 lestring16 96_ : Windows thumbnail database 96 188!:mime application/x-ms-thumbnail 189!:ext db 190# 3rd directory entry name Catalog_ 191>>>>256 lestring16 Catalog : Windows thumbnail database 192!:mime application/x-ms-thumbnail 193!:ext db 194# 195# URL: https://support.microsoft.com/en-us/help/300887/how-to-use-system-information-msinfo32-command-line-tool-switches 196# Note: older Microsoft Systeminfo (MSInfo Configuration File of msinfo32); newer use xml based 197# Second directory entry name Control000 198>>>>128 lestring16 Control000 : Microsoft old Systeminfo 199#!:mime application/x-ole-storage 200!:mime application/x-ms-info 201!:ext nfo 202# 203# From: Joerg Jenderek 204# URL: https://en.wikipedia.org/wiki/Microsoft_Access 205# Reference: http://mark0.net/download/triddefs_xml.7z/defs/m/mdz.trid.xml 206# http://fileformats.archiveteam.org/wiki/Microsoft_Compound_File 207# Note: only version foo tested and called "Microsoft Access Wizard template" by TrID 208# Fourth directory entry name TemplateID 209>>>>384 lestring16 TemplateID : Microsoft Access wizard template 210# Second directory entry name like \005SummaryInformation and 3rd name like \005DocumentSummaryInformation 211#!:mime application/x-ole-storage 212#!:mime application/vnd.ms-office 213#!:mime application/vnd.ms-access 214#!:mime application/msaccess 215!:mime application/x-ms-mdz 216# http://extension.nirsoft.net/mdz 217!:ext mdz 218# 219# URL: http://fileformats.archiveteam.org/wiki/Corel_Print_House 220# Second directory entry name Thumbnail 221>>>>128 lestring16 Thumbnail : Corel PrintHouse image 222#!:mime application/x-ole-storage 223!:mime application/x-corel-cph 224!:ext cph 225# 3rd directory entry name Thumbnail 226>>>>256 lestring16 Thumbnail : Corel PrintHouse image 227!:mime application/x-corel-cph 228!:ext cph 229# URL: http://fileformats.archiveteam.org/wiki/Corel_Gallery 230# Note: format since Gallery 2; sometimes called Corel Multimedia Manager Album 231# third directory entry name _INFO_ 232>>>>256 lestring16 _INFO_ : Corel Gallery 233# second directory entry name _ITEM_ or _DATA_ 234# later directory entry names: _ALBUM_ _THUMBNAIL_ 235#!:mime application/x-ole-storage 236!:mime application/x-corel-gal 237!:ext gal 238# 239# URL: https://en.wikipedia.org/wiki/Hangul_(word_processor) 240# Note: "HWP Document File" signature found in FileHeader 241# Second directory entry name FileHeader hint for Thinkfree Office document 242>>>>128 lestring16 FileHeader : Hangul (Korean) 5.0 Word Processor File 243#!:mime application/haansofthwp 244!:mime application/x-hwp 245# https://example-files.online-convert.com/document/hwp/example.hwp 246!:ext hwp 247# 248# URL: https://ask.libreoffice.org/en/question/26303/creating-new-themes-for-the-gallery-not-functioning/ 249# Second directory entry name like dd2000 dd2001 dd2036 dd2060 dd2083 250>>>>128 lestring16 dd2 : StarOffice Gallery view 251#!:mime application/x-ole-storage 252!:mime application/x-star-sdv 253!:ext sdv 254# URL: https://en.wikipedia.org/wiki/SoftMaker_Office 255# second directory entry name Current User 256>>>>128 lestring16 Current\ User : SoftMaker 257# third directory entry name SMNativeObjData 258>>>>>256 lestring16 SMNativeObjData 259# 5th directory entry name PowerPoint 260>>>>>>512 lestring16 PowerPoint PowerPoint presentation or template 261!:mime application/vnd.ms-powerpoint 262!:ext ppt/pps/pot 263# 4th directory entry name PowerPoint 264>>>>>384 lestring16 PowerPoint Presentations or template 265# http://extension.nirsoft.net/prv 266!:mime application/vnd.softmaker.presentations 267!:ext prd/prv 268# third directory entry name like Current User 269>>>>256 lestring16 Current\ User : SoftMaker 270# 5th directory entry name PowerPoint 271>>>>>512 lestring16 PowerPoint Presentations or template 272# http://extension.nirsoft.net/prd 273!:mime application/vnd.softmaker.presentations 274!:ext prd/prv 275# 2nd directory entry name Pictures 276>>>>>>128 lestring16 Pictures with pictures 277# 278# URL: http://fileformats.archiveteam.org/wiki/PageMaker 279# Reference: http://mark0.net/download/triddefs_xml.7z/defs/p 280# pagemaker-generic.trid.xml 281# pagemaker-pm6.trid.xml 282# pagemaker-pm65.trid.xml 283# pmd-pm7.trid.xml 284# From: Joerg Jenderek 285# Note: since version 6 embedd as stream with PageMaker name the "old" format handled by ./wordprocessors 286# verified by Michal Mutl Structured Storage Viewer `SSView.exe brochus.pt6` 287# Second directory entry name PageMaker 288>>>>128 lestring16 PageMaker : 289# look for magic of "old" PageMaker like in 02TEMPLT.T65 290>>>>>0 search/0xa900/s \0\0\0\0\0\0\xff\x99 291# GRR: jump to PageMaker stream and inspect it by sub routine PageMaker of ./wordprocessors failed with wrong version! 292#>>>>>>&0 use PageMaker 293# THIS WORKS PARTLY! 294>>>>>>&0 indirect x 295# remaining null clsid 296>>>>128 default x : UNKNOWN 297# second directory entry name like VisioDocument Control000 298>>>>>128 lestring16 x with names %.20s 299# third directory entry like WordDocument 300>>>>>256 lestring16 x %.20s 301# forth 302>>>>>384 lestring16 x %.20s 303!:mime application/x-ole-storage 304# according to file version 5.41 with -e soft option 305#!:mime application/CDFV2 306#!:ext ??? 307# look for known clsid GUID 308# - Visio documents 309# URL: http://fileformats.archiveteam.org/wiki/Visio 310# Last update on 10/23/2006 by Lester Hightower, 07/20/2019 by Joerg Jenderek 311>>88 ubequad 0xc000000000000046 : Microsoft 312>>>80 ubequad 0x131a020000000000 Visio 2000-2002 Document, stencil or template 313!:mime application/vnd.visio 314# VSD~Drawing VSS~Stencil VST~Template 315!:ext vsd/vss/vst 316>>>80 ubequad 0x141a020000000000 Visio 2003-2010 Document, stencil or template 317!:mime application/vnd.visio 318!:ext vsd/vss/vst 319# 320# URL: http://fileformats.archiveteam.org/wiki/Windows_Installer 321>>>80 ubequad 0x84100c0000000000 Windows Installer Package 322!:mime application/x-msi 323#!:mime application/x-ms-win-installer 324!:ext msi 325>>>80 ubequad 0x86100c0000000000 Windows Installer Patch 326# ?? 327!:mime application/x-wine-extension-msp 328#!:mime application/x-ms-msp 329!:ext msp 330# 331# URL: http://fileformats.archiveteam.org/wiki/DOC 332>>>80 ubequad 0x0009020000000000 Word 6-95 document or template 333!:mime application/msword 334# for template MSWDW8TN 335!:apple MSWDWDBN 336!:ext doc/dot 337>>>80 ubequad 0x0609020000000000 Word 97-2003 document or template 338!:mime application/msword 339!:apple MSWDWDBN 340# dot for template; no extension on Macintosh 341!:ext doc/dot/ 342# 343# URL: http://fileformats.archiveteam.org/wiki/Microsoft_Works_Word_Processor 344>>>80 ubequad 0x0213020000000000 Works 3-4 document or template 345!:mime application/vnd.ms-works 346!:apple ????AWWP 347# ps for template https://filext.com/file-extension/PS bps for backup 348!:ext wps/ps/bps 349# 350# URL: http://fileformats.archiveteam.org/wiki/Microsoft_Works_Database 351>>>80 ubequad 0x0313020000000000 Works 3-4 database or template 352!:mime application/vnd.ms-works-db 353# https://www.macdisk.com/macsigen.php 354!:apple ????AWDB 355# db for template www.file-extensions.org/db-file-extension-microsoft-works-data bdb for backup 356!:ext wdb/db/bdb 357# 358# URL: https://en.wikipedia.org/wiki/Microsoft_Excel 359>>>80 ubequad 0x1008020000000000 Excel 5-95 worksheet, addin or template 360!:mime application/vnd.ms-excel 361# https://www.macdisk.com/macsigen.php 362!:apple ????XLS5 363# worksheet/addin/template/no extension on Macintosh 364!:ext xls/xla/xlt/ 365# 366>>>80 ubequad 0x2008020000000000 Excel 97-2003 367!:mime application/vnd.ms-excel 368# https://www.macdisk.com/macsigen.php XLS5 for Excel 5 369!:apple ????XLS9 370# 3rd directory entry name 371>>>>256 lestring16 _VBA_PROJECT_CUR addin 372!:ext xla/ 373# 4th directory entry name 374>>>>384 lestring16 _VBA_PROJECT_CUR addin 375!:ext xla 376#!:ext xla/ 377>>>>256 default x worksheet or template 378!:ext xls/xlt 379#!:ext xls/xlt/ 380# 381# URL: http://fileformats.archiveteam.org/wiki/OLE2 382>>>80 ubequad 0x0b0d020000000000 Outlook 97-2003 item 383#>>>80 ubequad 0x0b0d020000000000 Outlook 97-2003 Message 384#!:mime application/vnd.ms-outlook 385!:mime application/x-ms-msg 386!:ext msg 387# URL: https://wiki.fileformat.com/email/oft/ 388>>>80 ubequad 0x46f0060000000000 Outlook 97-2003 item template 389#!:mime application/vnd.ms-outlook 390!:mime application/x-ms-oft 391!:ext oft 392# 393# URL: http://fileformats.archiveteam.org/wiki/PPT 394>>>80 ubequad 0x5148040000000000 PowerPoint 4.0 presentation 395!:mime application/vnd.ms-powerpoint 396# https://www.macdisk.com/macsigen.php 397!:apple ????PPT3 398!:ext ppt 399#?? 400# URL: http://www.checkfilename.com/view-details/Microsoft-Works/RespageIndex/0/sTab/2/ 401>>88 ubequad 0xa29a00aa004a1a72 : Microsoft 402# URL: http://fileformats.archiveteam.org/wiki/Microsoft_Works_Word_Processor 403>>>80 ubequad 0xc2dbcd28e20ace11 Works 4 document 404!:mime application/vnd.ms-works 405!:apple ????AWWP 406!:ext wps 407# 408# URL: http://fileformats.archiveteam.org/wiki/Microsoft_Works_Database 409>>>80 ubequad 0xc3dbcd28e20ace11 Works 4 database 410!:mime application/vnd.ms-works-db 411!:apple ????AWDB 412!:ext wdb/bdb 413#?? 414>>88 ubequad 0xa40700c04fb932ba : Microsoft 415# URL: http://fileformats.archiveteam.org/wiki/Microsoft_Works_Word_Processor 416>>>80 ubequad 0xb25aa40e0a9ed111 Works 5-6 document 417!:mime application/vnd.ms-works 418!:apple ????AWWP 419!:ext wps 420# From: Joerg Jenderek 421# URL: https://en.wikipedia.org/wiki/Microsoft_Works 422# Reference: http://fileformats.archiveteam.org/wiki/Microsoft_Compound_File 423# Note: probably version 6 and 7 424# organize pictures like JPFG images in streams __cf1 with names like 425# 001.JPG, 002.JPG ... in streams __fname 426>>88 ubequad 0xa1c800c04f612452 : Microsoft 427>>>80 ubequad 0xc0c7266eb98cd311 Works portfolio 428# 2nd directory entry name PfOrder, 3rd __LastID and 4th __SizeUsed 429#!:mime application/x-ole-storage 430# https://www.iana.org/assignments/media-types/application/vnd.ms-works 431!:mime application/vnd.ms-works 432# https://extension.nirsoft.net/wsb 433# like: wsbsamp.wsb WORKS2003_CD:\MSWorks\Common\Sammlung.wsb 434!:ext wsb 435#?? 436# URL: http://fileformats.archiveteam.org/wiki/Microsoft_Publisher 437>>88 ubequad 0x00c0000000000046 : Microsoft 438>>>80 ubequad 0x0112020000000000 Publisher 439!:mime application/vnd.ms-publisher 440!:ext pub 441# 442# URL: http://fileformats.archiveteam.org/wiki/PPT 443#?? 444>>88 ubequad 0xa90300aa00510ea3 : Microsoft 445>>>80 ubequad 0x70ae7bea3bfbcd11 PowerPoint 95 presentation 446!:mime application/vnd.ms-powerpoint 447# https://www.macdisk.com/macsigen.php 448!:apple ????PPT3 449!:ext ppt/pot 450#?? 451>>88 ubequad 0x86ea00aa00b929e8 : Microsoft 452>>>80 ubequad 0x108d81649b4fcf11 PowerPoint 97-2003 presentation or template 453!:mime application/vnd.ms-powerpoint 454!:apple ????PPT3 455# /autostart/template 456!:ext ppt/pps/pot 457# From: Joerg Jenderek 458# URL: https://www.file-extensions.org/ppa-file-extension 459# https://en.wikipedia.org/wiki/Microsoft_PowerPoint#cite_note-231 460# Reference: http://fileformats.archiveteam.org/wiki/Microsoft_Compound_File 461>>88 ubequad 0x871800aa0060263b : Microsoft 462# only version 8 (97) tested; PowerPoint 4.0 to 11.0 (2004) (Wikipedia); 97 to 2003 (file-extensions.org) 463>>>80 ubequad 0xf04672810a72cf11 PowerPoint Addin or Wizard 464# second, third and fourth directory entry name like VBA PROJECT PROJECTwm 465# http://extension.nirsoft.net/pwz 466!:mime application/vnd.ms-powerpoint 467# like: BSHPPT97.PPA "AutoContent Wizard.pwz" 468!:ext ppa/pwz 469# 470# From: Joerg Jenderek 471# URL: http://fileformats.archiveteam.org/wiki/AWD_(At_Work_Document) 472# Reference: http://mark0.net/download/triddefs_xml.7z/defs/a/awd-fax.trid.xml 473# Note: called "Microsoft At Work Fax document" by TrID 474>>88 ubequad 0xb29400dd010f2bf9 : Microsoft 475>>>80 ubequad 0x801cb0023de01a10 At Work fax Document 476#!:mime application/x-ole-storage 477!:mime image/x-ms-awd 478!:ext awd 479# 480# URL: https://en.wikipedia.org/wiki/Microsoft_Project 481#?? 482>>88 ubequad 0xbe1100c04fb6faf1 : Microsoft 483>>>80 ubequad 0x3a8fb774c8c8d111 Project 484!:mime application/vnd.ms-project 485!:ext mpp 486# From: Joerg Jenderek 487# URL: https://en.wikipedia.org/wiki/Microsoft_Office_shared_tools#Binder 488# Reference: http://mark0.net/download/triddefs_xml.7z/defs/o/obd.trid.xml 489# http://fileformats.archiveteam.org/wiki/Microsoft_Compound_File 490# Note: only version 8 tested and called "Office Binder Document" by TrID and 491# "Microsoft Office Binder File for Windows" version 97-2000 by DROID fmt/240 492>>88 ubequad 0xb21c00aa004ba90b : Microsoft 493>>>80 ubequad 0x0004855964661b10 Office Binder Document, Template or wizard 494# second directory entry name like Binder 495# https://www.file-extensions.org/obd-file-extension 496#!:mime application/vnd.ms-binder 497!:mime application/x-msbinder 498# obt for template; obz for Microsoft Office Binder wizard 499!:ext obd/obt/obz 500# 501# URL: http://fileformats.archiveteam.org/wiki/WordPerfect 502# Reference: http://fileformats.archiveteam.org/wiki/Microsoft_Compound_File 503# https://github.com/OneWingedShark/WordPerfect/ 504# blob/master/doc/SDK_Help/FileFormats/WPFF_DocumentStructure.htm 505# From: Joerg Jenderek 506# Note: internal version x.2 or 2.2 like in embedded ole6-PerfectOffice_MAIN.wpd 507# 3rd directory entry name PerfectOffice_OBJECT and 2nd PerfectOffice_MAIN, 508# which contains WordPerfect document \xffWPC signature handled by ./wordprocessors 509>>88 ubequad 0x19370000929679cd : WordPerfect 7 510>>>80 ubequad 0xff739851ad2d2002 Document 511!:mime application/vnd.wordperfect 512#!:apple ????WPC? 513# https://fossies.org/linux/wp2latex/test/ole6.wpd 514!:ext wpd 515#>>>>0 search/0xc01/s \xffWPC \b, WPC SIGNATURE 516# inspect embedded WordPerfect document by ./wordprocessors with 1 space at end 517#>>>>>&0 indirect x \b; contains 518# GRR: the above expression does not work correctly 519# 520# URL: http://fileformats.archiveteam.org/wiki/SHW_(Corel) 521#??? 522>>88 ubequad 0x99ae04021c007002 : WordPerfect 523>>>80 ubequad 0x62fe2e4099191b10 7-X3 presentation 524!:mime application/x-corelpresentations 525#!:mime application/x-shw-viewer 526#!:mime image/x-presentations 527!:ext shw 528# 529# URL: http://www.checkfilename.com/view-details/WordPerfect-Office-X3/RespageIndex/0/sTab/2/ 530>>>80 ubequad 0x60fe2e4099191b10 9 Graphic 531#!:mime application/x-wpg 532#!:mime image/x-wordperfect-graphics 533!:mime image/x-wpg 534# https://www.macdisk.com/macsigen.php "WPC2" for Wordperfect 2 *.wpd 535!:apple ????WPC9 536!:ext wpg 537# 538# URL: http://fileformats.archiveteam.org/wiki/StarOffice_binary_formats 539>>88 ubequad 0x996104021c007002 : StarOffice 540>>>80 ubequad 0x407e5cdc5cb31b10 StarWriter 3.0 document or template 541# https://www.openoffice.org/framework/documentation/mimetypes/mimetypes.html 542!:mime application/x-starwriter 543!:ext sdw/vor 544# 545>>>80 ubequad 0xa03f543fa6b61b10 StarCalc 3.0 spreadsheet or template 546!:mime application/x-starcalc 547!:ext sdc/vor 548# 549>>>80 ubequad 0xe0aa10af6db31b10 StarDraw 3.0 drawing or template 550!:mime application/x-starimpress 551#!:mime application/x-stardraw 552# sda ?? 553!:ext sdd/sda/vor 554#?? 555>>88 ubequad 0x89cb008029e4b0b1 : StarOffice 556>>>80 ubequad 0x41d461633542d011 StarCalc 4.0 spreadsheet or template 557!:mime application/x-starcalc 558!:ext sdc/vor 559# 560>>>80 ubequad 0x61b8a5c6d685d111 StarCalc 5.0 spreadsheet or template 561!:mime application/vnd.stardivision.cal 562!:ext sdc/vor 563# 564>>>80 ubequad 0xc03c2d011642d011 StarImpress 4.0 presentation or template 565!:mime application/x-starimpress 566!:ext sdd/vor 567#?? 568>>88 ubequad 0xb12a04021c007002 : StarOffice 569>>>80 ubequad 0x600459d4fd351c10 StarMath 3.0 570!:mime application/x-starmath 571!:ext smf 572#?? 573>>88 ubequad 0x8e2c00001b4cc711 : StarOffice 574>>>80 ubequad 0xe0999cfb6d2c1c10 StarChart 3.0 575!:mime application/x-starchart 576!:ext sds 577#?? 578>>88 ubequad 0xa45e00a0249d57b1 : StarOffice 579>>>80 ubequad 0xb0e9048b0e42d011 StarWriter 4.0 document or template 580!:mime application/x-starwriter 581!:ext sdw/vor 582#?? 583>>88 ubequad 0x89ca008029e4b0b1 : StarOffice 584>>>80 ubequad 0xe1b7b3022542d011 StarMath 4.0 585!:mime application/x-starmath 586!:ext smf 587# 588>>>80 ubequad 0xe0b7b3022542d011 StarChart 4.0 589!:mime application/x-starchart 590!:ext sds 591#?? 592>>88 ubequad 0xa53f00a0249d57b1 : StarOffice 593>>>80 ubequad 0x70c90a340de3d011 Master 4.0 document 594!:mime application/x-starwriter-global 595!:ext sgl 596#?? 597>>88 ubequad 0x89d0008029e4b0b1 : StarOffice 598>>>80 ubequad 0x40e6b5ffde85d111 StarMath 5.0 599!:mime application/vnd.stardivision.math 600!:ext smf 601# 602>>>80 ubequad 0xa005892ebd85d111 StarDraw 5.0 drawing or template 603!:mime application/vnd.stardivision.draw 604!:ext sda/vor 605# 606>>>80 ubequad 0x21725c56bc85d111 StarImpress 5.0 presentation or template 607!:mime application/vnd.stardivision.impress 608# sda is used for what? 609!:ext sdd/vor/sda 610# 611>>>80 ubequad 0x214388bfdd85d111 StarChart 5.0 612!:mime application/vnd.stardivision.chart 613!:ext sds 614# ?? 615>>88 ubequad 0xaab4006097da561a : StarOffice 616>>>80 ubequad 0xd1f90cc2ae85d111 StarWriter 5.0 document or template 617!:mime application/vnd.stardivision.writer 618!:ext sdw/vor 619# 620>>>80 ubequad 0xd3f90cc2ae85d111 Master 5.0 document 621!:mime application/vnd.stardivision.writer-global 622!:ext sgl 623#?? 624# URL: http://fileformats.archiveteam.org/wiki/FlashPix 625>>88 ubequad 0x855300aa00a1f95b : Kodak 626>>>80 ubequad 0x0067615654c1ce11 FlashPIX Image 627!:mime image/vnd.fpx 628!:apple ????FPix 629!:ext fpx 630# URL: https://en.wikipedia.org/wiki/SoftMaker_Office 631>>88 ubequad 0x95f600a0cc3cca14 : PlanMaker 632>>>80 ubequad 0x9174088a6452d411 document or template 633!:mime application/vnd.softmaker.planmaker 634# pmv for template https://www.file-extensions.org/pmv-file-extension 635!:ext pmd/pmv 636# URL: http://fileformats.archiveteam.org/wiki/MAX_(3ds_Max) 637# https://en.wikipedia.org/wiki/Autodesk_3ds_Max 638# Reference: http://fileformats.archiveteam.org/wiki/Microsoft_Compound_File 639# Note: called "3D Studio Max Scene" by TrID and "3DS Max" by DROID and 640# "3DSMax thumbnail" by XnView and verfied by `nconvert -info A380.max` 641# applies only to "newer" versions (about 2008-2020) 642>>88 ubequad 0x9fed04143144cc1e : Autodesk 643>>>80 ubequad 0x7b8cdd1cc081a045 3ds Max 644#!:mime application/x-ole-storage 645!:mime model/x-autodesk-max 646# like: https://static.free3d.com/models/dropbox/dropbox/sq/A380.7z/A380.max 647!:ext max 648# also chr for character file according to DROID https://www.nationalarchives.gov.uk/PRONOM/fmt/978 649#!:ext max/chr 650# remaining non null clsid 651>>88 default x 652# GRR: check again for non null clsid because wrong when called by indirect directive 653>>>88 ubequad !0 : UNKNOWN 654# https://reposcope.com/mimetype/application/x-ole-storage 655!:mime application/x-ole-storage 656# according to file version 5.41 with -e soft option 657#!:mime application/CDFV2 658#!:ext ??? 659>>>>80 ubequad !0 \b, clsid %#16.16llx 660>>>>88 ubequad x \b%16.16llx 661 662