xref: /illumos-gate/usr/src/cmd/file/magic (revision cd61ae21816e53b94bc1673f3f1aa651fc3115e8)
1#
2# Copyright (c) 1988, 2010, Oracle and/or its affiliates. All rights reserved.
3#
4# CDDL HEADER START
5#
6# The contents of this file are subject to the terms of the
7# Common Development and Distribution License (the "License").
8# You may not use this file except in compliance with the License.
9#
10# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
11# or http://www.opensolaris.org/os/licensing.
12# See the License for the specific language governing permissions
13# and limitations under the License.
14#
15# When distributing Covered Code, include this CDDL HEADER in each
16# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
17# If applicable, add the following below this CDDL HEADER, with the
18# fields enclosed by brackets "[]" replaced with your own identifying
19# information: Portions Copyright [yyyy] [name of copyright owner]
20#
21# CDDL HEADER END
22#
23# This file contains the dictionary of file format identifiers (magic strings)
24# used by file(1).  The fields of this file are as follows:
25#
26# (1) byte offset
27# (2) value type
28# (3) optional operator (= by default)
29# (4) value to match (numeric or string)
30# (5) string to be printed
31#
32# Numeric values may be decimal, octal, or hex.  Also note that the last string
33# may have one printf format specifier.  The '>' in occassional column 1's is
34# magic: it forces file(1) to continue scanning and matching additional lines.
35# The first line afterwards not so marked terminates the search.
36#
37# The entries for ELF are not needed anymore, as file(1) now uses the elf(3ELF)
38# routines to look at ELF files.  They remain, commented out, for reference.
39#
40#0	string		\177ELF		ELF
41#>4	byte		1		32-bit
42#>5	byte		1		LSB
43#>5	byte		2		MSB
44#>16	short		0		unknown type
45#>16	short		1		relocatable
46#>16	short		2		executable
47#>16	short		3		dynamic lib
48#>16	short		4		core file
49#>18	short		0		unknown machine
50#>18	short		1		WE32100
51#>18	short		2		SPARC
52#>18	short		3		80386
53#>18	short		4		M68000
54#>18	short		5		M88000
55#>18	short		6		i80486
56#>18	short		7		i860
57#>18	short		8		RS3000_BE
58#>18	short		9		UNKNOWN
59#>18	short		10		RS3000_LE
60#>18	short		11		RS6000
61#>18	short		12		UNKNOWN
62#>18	short		13		UNKNOWN
63#>18	short		14		UNKNOWN
64#>18	short		15		PA_RISC
65#>18	short		16		nCUBE
66#>18	short		17		VPP500
67#>18	short		18		SPARC32PLUS
68#>18	short		19		UNKNOWN
69#>18	short		20		PowerPC
70#>20	long		1		Version 1
71#>36	long		1		MAU Required
72257	string		ustar		USTAR tar archive
73>156	byte		88		extended format
740	short		070701		cpio archive
750	string		070701		ASCII cpio archive
760	short		070702		cpio archive - CRC header
770	string		070702		ASCII cpio archive - CRC header
780	short		070707		cpio archive - CHR (-c) header
790	string		070707		ASCII cpio archive - CHR (-c) header
800	long		0177555		obsolete ar archive
810	short		0177545		pdp11/pre System V ar archive
820	long		0100554		apl workspace
830	short		017037		packed data
840	string		<ar>		System V Release 1 ar archive
850	string		!<arch>		current ar archive
860	short		0407		pdp11/pre System V vax executable
87>8	ushort		>0		not stripped
88>15	ubyte		>0		- version %ld
890	short		0401		unix-rt ldp
900	short		0405		pdp11 overlay
910	short		0410		pdp11/pre System V vax pure executable
92>8	ushort		>0		not stripped
93>15	ubyte		>0		- version %ld
940	short		0411		pdp11 separate I&D
95>8	ushort		>0		not stripped
96>15	ubyte		>0		- version %ld
970	short		015001		Compiled Terminfo Entry
98# little-endian entry
990	short		0432		Compiled Terminfo Entry
1000	short		0433		Curses screen image
1010	short		0434		Curses screen image
1020	short		0437		pdp11 kernel overlay
1030	short		0570		vax executable
104>12	long		>0		not stripped
105>22	ushort		>0		- version %ld
1060	short		0575		vax pure executable
107>12	long		>0		not stripped
108>22	ushort		>0		- version %ld
1090	short		0502		basic-16 executable
110>12	long		>0		not stripped
111>22	ushort		>0		- version %ld
1120	short		0503		basic-16 executable (TV)
113>12	long		>0		not stripped
114>22	ushort		>0		- version %ld
1150	short		0510		x86 executable
116>12	long		>0		not stripped
1170	short		0511		x86 executable (TV)
118>12	long		>0		not stripped
1190	short		0550		3b20 executable
120>12	long		>0		not stripped
121>22	ushort		>0		- version %ld
1220	short		0551		3b20 executable (TV)
123>12	long		>0		not stripped
124>22	ushort		>0		- version %ld
1250	short		0560		WE32000 executable
126>12	long		>0		not stripped
127>18	short		^00010000	- N/A on 3b2/300 w/paging
128>18	short		&00020000	- 32100 required
129>18	short		&00040000	and mau hardware required
130>20	short		0443		(target shared library)
131>20	short		0410		(swapped)
132>20	short		0413		(paged)
133>22	ushort		>0		- version %ld
1340	short		0561		WE32000 executable (TV)
135>12	long		>0		not stripped
136>18	short		&00020000	- 32100 required
137>18	short		&00040000	and mau hardware required
138>22	ushort		>0		- version %ld
1390	short		=0512		iAPX 286 executable small model (COFF)
140>12	long		>0		not stripped
141>22	ushort		>0		- version %ld
1420	short		=0522		iAPX 286 executable large model (COFF)
143>12	long		>0		not stripped
144>22	ushort		>0		- version %ld
1450	short		0514		iAPX 386 executable (COFF) (deprecated)
146>12	long		>0		not stripped
147>22	ushort		>0		- version %ld
1480	short		0520		mc68k executable
149>12	long		>0		not stripped
1500	short		0521		mc68k executable (shared)
151>12	long		>0		not stripped
1520	short		0522		mc68k executable (shared demand paged)
153>12	long		>0		not stripped
154# big-endian entries for pure executables
1552	short		0410		pure
156>1	byte		0		sun2 executable
157>1	byte		1		mc68010 executable
158>1	byte		2		mc68020 executable
159>1	byte		3		SPARC executable
160>0	ubyte		>077		dynamically linked
161# little-endian entries for pure executables
1622	short		04001		pure
163>1	byte		0		sun2 executable
164>1	byte		1		mc68010 executable
165>1	byte		2		mc68020 executable
166>1	byte		3		SPARC executable
167>0	ubyte		>077		dynamically linked
168# big-endian entries for impure executables
1692	short		0407		impure
170>1	byte		0		sun2 executable
171>1	byte		1		mc68010 executable
172>1	byte		2		mc68020 executable
173>1	byte		3		SPARC executable
174>0	ubyte		>077		dynamically linked
175# little-endian entries for impure executables
1762	short		03401		impure
177>1	byte		0		sun2 executable
178>1	byte		1		mc68010 executable
179>1	byte		2		mc68020 executable
180>1	byte		3		SPARC executable
181>0	ubyte		>077		dynamically linked
182# big-endian entries for Sun demand paged executables
1832	short		0413		Sun demand paged
184>1	byte		0		sun2 executable
185>1	byte		1		mc68010 executable
186>1	byte		2		mc68020 executable
187>1	byte		3		SPARC executable
188>0	ubyte		>077		dynamically linked
189# little-endian entries for Sun demand paged executables
1902	short		05401		Sun demand paged
191>1	byte		0		sun2 executable
192>1	byte		1		mc68010 executable
193>1	byte		2		mc68020 executable
194>1	byte		3		SPARC executable
195>0	ubyte		>077		dynamically linked
1960	short		0x8001		Adobe PostScript Type 1 binary font (PFB)
1970	short		0x0180		Adobe PostScript Type 1 binary font (PFB)
1980	long		0x00010000	TrueType font file version 1.0 (TTF)
1990	long		0x00000100	TrueType font file version 1.0 (TTF)
2000	long		0xf00000ff	extended accounting file
201# little-endian entry
2020	long		0xff0000f0	extended accounting file
2030	byte		0x80		8086 relocatable (Microsoft)
2040	byte		0xf0		MS-DOS library
2050	short		0xff65		x.out
206>2	string		__.SYMDEF	randomized
207>0	byte		x		archive
2080	short		0x206		Microsoft a.out
209>0x1e	short		&0x10		overlay
210>0x1e	short		&0x2		separate
211>0x1e	short		&0x4		pure
212>0x1e	short		&0x800		segmented
213>0x1e	short		&0x400		standalone
214>0x1e	short		&0x8		fixed-stack
215>0x1c	byte		&0x80		byte-swapped
216>0x1c	byte		&0x40		word-swapped
217>0x10	long		>0		not-stripped
218>0x1e	short		^0xc000		pre-SysV
219>0x1c	byte		&0x4		86
220>0x1c	byte		&0x9		286
221>0x1c	byte		&0xa		386
222>0x1e	short		&0x1		executable
223>0x1e	short		^0x1		object file
224>0x1e	short		&0x40		Large Text
225>0x1e	short		&0x20		Large Data
226>0x1e	short		&0x120		Huge Objects Enabled
2270	short		0x10b		VAX demand load format a.out object file
228>0x10	long		>0		not stripped
2290	short		0x140		old Microsoft 8086 x.out
230>0x3	byte		&0x4		separate
231>0x3	byte		&0x2		pure
232>0	byte		&0x1		executable
233>0	byte		^0x1		relocatable
234>0x14	long		>0		not stripped
2350	long		0x10b		VAX demand load format a.out object file
236>0x10	long		>0		not stripped
2370	long		0x140		old Microsoft 8086 x.out
238>0x3	byte		&0x4		separate
239>0x3	byte		&0x2		pure
240>0	byte		&0x1		executable
241>0	byte		^0x1		relocatable
242>0x14	long		>0		not stripped
2430	long		0xe807		object file (z8000 a.out)
2440	long		0xe808		pure object file (z8000 a.out)
2450	long		0xe809		separate object file (z8000 a.out)
2460	long		0xe805		overlay object file (z8000 a.out)
2470	long		0x178		Bell 5.0 executable
2482	short		0410		Sun read-only text executable
249>2	short		0407		Sun old executable
250>1	byte		3		(SPARC)
251>1	byte		2		(68020)
252>1	byte		1		(68010)
253>1	byte		0		(Sun2)
2540	short		0143561		byte-swapped cpio archive
2550	long		0101555		PDP-11 single precision APL workspace
2560	long		0101554		PDP-11 double precision APL workspace
2570	long		0101557		VAX single precision APL workspace
2580	long		0101556		VAX double precision APL workspace
2590	short		017437		old packed data
2600	string		\037\036	packed data
2610	string		\377\037	compacted data
2620	string		\037\235	compressed data
263>2	byte&0x80	>0		block compressed
264>2	byte&0x1f	x		%d bits
2650	string		\037\213	gzip compressed data
266>2	byte		8		- deflate method
267>3	byte		&0x1		, ascii
268>3	byte		&0x2		, continuation
269>3	byte		&0x4		, extra field
270>3	byte		&0x8		, original file name
271>3	byte		&0x10		, comment
272>3	byte		&0x20		, encrypted
273>8	byte		2		, max compression
274>8	byte		4		, max speed
2750	string		!<arch>\n__.SYMDEF	archive random library
2760	long		0x1010101	MMDF mailbox
2770	string		<!OPS		Interleaf ASCII document
27824	string		SunGKS		SunGKS
279# version number follows, in the form m.n
280>0	string		GKSM		Metafile
2810	string		GKSM		GKS Metafile
282# version number follows, in the form <!OPS, Version n.n>
2830	string		%!PS-AdobeFont	Adobe PostScript ASCII font (PFA)
2840	string		%!		PostScript document
285>2	string		PS-Adobe	 conforming to level
286>10	string		-1.0		 1.0
287>10	string		-2.0		 2.0
288>10	string		-3.0		 3.0
289# Handle Microsoft PostScript files (CTRL-D%!)
2900	string		\004%!		PostScript document text
291# version ID follows, in the form PS-Adobe-nn
2920	string		Interpress/Xerox	Interpress document
293# version ID follows, in the form /n.n
2940	string		StartFontMetrics	Adobe font metrics
2950	string		StartFont	Adobe font bits
2960	long		0x137A2944	NeWS bitmap font
2970	long		0x137A2947	NeWS font family
2988	long		0x137A2B45	X11/NeWS bitmap font
2998	long		0x137A2B48	X11/NeWS font family
300# snoop files are always big-endian
301# big-endian entries, with ullong equivalent of string "snoop"
3020	ullong		0x736e6f6f70000000	Snoop capture file
303>8	long		>0		- version %ld
304# little-endian entries, with ullong equivalent of string "snoop"
3050	ullong		0x000000706f6f6e73	Snoop capture file
306>11	long		>0		- version %ld
3070	short		0436		vfont definition
3080	string		<MakerFile	Frame Maker document
3090	string		<MIFFile	Frame Maker MIF file
3100	string		<MML		Frame Maker MML file
3110	string		<BookFile	Frame Maker book file
312# Audio files are always big-endian so there are two sets of tables here.
313# The CPU endian architecture is determined via the ordering of the first 4 bytes
314# (the string ".snd"). The tables below have this value represented as a single
315# 4 byte long. If the architecture is big-endian the %d token can be used for
316# interpreting the sampling rate.
317# Since %d can't be done on the data for little endian machines the limitation
318# is that sampling rates not included in the x86 entries will not be recognized.
319#
320# big-endian entries
321#
3220	long		0x2e736e64	audio data:
323>12	long		1		8-bit u-law,
324>12	long		2		8-bit linear PCM,
325>12	long		3		16-bit linear PCM,
326>12	long		4		24-bit linear PCM,
327>12	long		5		32-bit linear PCM,
328>12	long		6		32-bit floating point,
329>12	long		7		64-bit floating point,
330>12	long		23		compressed (4-bit G.721 ADPCM),
331>12	long		24		compressed (8-bit G.722 ADPCM),
332>12	long		25		compressed (3-bit G.723 ADPCM),
333>12	long		26		compressed (5-bit G.723 ADPCM),
334>12	long		27		8-bit A-law,
335>20	long		1		mono,
336>20	long		2		stereo,
337>20	long		4		quad,
338>16	long		x		%d Hz
339#
340# little-endian entries
341#
3420	long		0x646e732e	audio data:
343>12	long		0x01000000	8-bit u-law,
344>12	long		0x02000000	8-bit linear PCM,
345>12	long		0x03000000	16-bit linear PCM,
346>12	long		0x04000000	24-bit linear PCM,
347>12	long		0x05000000	32-bit linear PCM,
348>12	long		0x06000000	32-bit floating point,
349>12	long		0x07000000	64-bit floating point,
350>12	long		0x17000000	compressed (4-bit G.721 ADPCM),
351>12	long		0x18000000	compressed (8-bit G.722 ADPCM),
352>12	long		0x19000000	compressed (3-bit G.723 ADPCM),
353>12	long		0x1a000000	compressed (5-bit G.723 ADPCM),
354>12	long		0x1b000000	8-bit A-law,
355>20	long		0x01000000	mono,
356>20	long		0x02000000	stereo,
357>20	long		0x04000000	quad,
358>16	long		0x401f0000	8000 Hz
359>16	long		0x80250000	9600 Hz
360>16	long		0x112b0000	11025 Hz
361>16	long		0x803e0000	16000 Hz
362>16	long		0xd4490000	18900 Hz
363>16	long		0x22560000	22050 Hz
364>16	long		0x007d0000	32000 Hz
365>16	long		0xa8930000	37800 Hz
366>16	long		0x44ac0000	44100 Hz
367>16	long		0x80bb0000	48000 Hz
368# .wav files are always little-endian
369# .wav big-endian entries, starting with long value for the string "RIFF"
3700	long		0x52494646	audio data:
371>34	short		0x0800		8-bit
372>34	short		0x1000		16-bit
373>20	short		0x0100		linear PCM,
374>20	short		0x0200		MS ADPCM,
375>20	short		0x0600		A-law,
376>20	short		0x0700		u-law,
377>20	short		0x1100		DVI ADPCM,
378>22	short		0x0100		mono
379>22	short		0x0200		stereo
380# .wav little-endian entries, starting with long value for the string "RIFF"
3810	long		0x46464952	audio data:
382>34	short		0x0008		8-bit
383>34	short		0x0010		16-bit
384>20	short		0x0001		linear PCM,
385>20	short		0x0002		MS ADPCM,
386>20	short		0x0006		A-law,
387>20	short		0x0007		u-law,
388>20	short		0x0011		DVI ADPCM,
389>22	short		0x0001		mono
390>22	short		0x0002		stereo
391# .aiff files are always big-endian
392# .aiff big-endian entries, starting with long value for the string "FORM"
3930	long		0x464f524d	audio data:
394>26	short		0x0008		8-bit linear PCM,
395>26	short		0x0010		16-bit linear PCM,
396>20	short		0x0001		mono
397>20	short		0x0002		stereo
398# .aiff little-endian entries, starting with long value for the string "FORM"
3990	long		0x4d524f46	audio data:
400>26	short		0x0800		8-bit linear PCM,
401>26	short		0x1000		16-bit linear PCM,
402>20	short		0x0100		mono
403>20	short		0x0200		stereo
404# .mid files are always big-endian
405# .mid big-endian entries, starting with long value for the string "MThd"
4060	long		0x4d546864	MIDI data:
407>8	short		x		type %u,
408>10	short		x		%u track(s)
409# .mid little-endian entry (the string "MThd")
410# can't translate big-endian type and track information
4110	long		0x6468544d	MIDI data
412#
4130	short		0x1010		PEX Binary Archive
414# rasterfiles are big-endian
415# big-endian rasterfile entries
4160	long		0x59a66a95	rasterfile,
417>4	long		>0		%ld x
418>8	long		>0		%ld x
419>12	long		>0		%ld
420>20	long		0		old format image
421>20	long		1		standard format image
422>20	long		2		run-length byte encoded image
423>20	long		3		XRGB or RGB format image
424>20	long		4		tiff format image
425>20	long		5		iff (TAAC format) image
426>20	long		0xffff		experimental format image
427# little-endian rasterfile entries
428# cannot translate resolution stored as big-endian longs
4290	long		0x956aa659	rasterfile,
430>23	long		0		old format image
431>23	long		1		standard format image
432>23	long		2		run-length byte encoded image
433>23	long		3		XRGB or RGB format image
434>23	long		4		tiff format image
435>23	long		5		iff (TAAC format) image
436>20	long		0xffff		experimental format image
4370	long		0x884f5053	Interleaf fast-saved document
4380	long		0x2a535441	Aster*x
439>7	long		0x574f5244		Words Document
440>7	long		0x47524150		Graphic
441>7	long		0x53505245		Spreadsheet
442>7	long		0x4d414352		Macro
4430	long		0x32323738	Aster*x Version 2
444>29	byte		0x36			Words Document
445>29	byte		0x35			Graphic
446>29	byte		0x32			Spreadsheet
447>29	byte		0x38			Macro
4484	string		pgscriptver	IslandWrite document
44913	string		DrawFile	IslandDraw document
4500	string		P1		PBM ascii file
4510	string		P2		PGM ascii file
4520	string		P3		PPM ascii file
4530	string		P4		PBM raw file
4540	string		P5		PGM raw file
4550	string		P6		PPM raw file
4560	string		\115\115	TIFF file, big-endian
4570	string		\111\111	TIFF file, little-endian
4580	string		GIF87a		GIF file, v87
4590	string		GIF89a		GIF file, v89
4600	string		\377\330\377\340	JPEG file
4610	string		\377\330\377\341	JPEG file
4620	string		\377\330\377\356	JPG file
4638	string		ILBM		IFF ILBM file
4640	string		\312\376\272\276	java class file
46536	string		acsp	Kodak Color Management System, ICC Profile
4660	string		%PDF		Adobe Portable Document Format (PDF)
467>4	string		-1.0		v1.0
468>4	string		-1.1		v1.1
469>4	string		-1.2		v1.2
470>4	string		-1.3		v1.3
471>4	string		-1.4		v1.4
472>4	string		-1.5		v1.5
4730	string		<html		html document
4740	string		<HTML		html document
4750	string		<Html		html document
4760	string		<!doctype HTML	html document
4770	string		<!doctype Html	html document
4780	string		<!doctype html	html document
4790	string		<!DOCTYPE HTML	html document
4800	string		<!DOCTYPE Html	html document
4810	string		<!DOCTYPE html	html document
4820	string		<!Doctype HTML	html document
4830	string		<!Doctype Html	html document
4840	string		<!Doctype html	html document
4850	string		<head		html document
4860	string		<HEAD		html document
4870	string		<Head		html document
4880	string		<title		html document
4890	string		<TITLE		html document
4900	string		<Title		html document
4910	string		<?xml		XML document
4920	string		<?XML		XML document
4930	string		<?Xml		XML document
4940	string		\0211PNG	PNG image data
4950	string		.RMF		RealMedia file
4960	string		FlAsH-aRcHiVe	Flash Archive
497>13	string		-1.0		 1.0
498>13	string		-2.0		 2.0
49938	string		application/vnd.sun.xml.writer	StarOffice 7 Text Document
50038	string		application/vnd.sun.xml.calc	StarOffice 7 Spreadsheet
50138	string		application/vnd.sun.xml.draw	StarOffice 7 Drawing
50238	string		application/vnd.sun.xml.impress	StarOffice 7 Presentation
50338	string		application/vnd.sun.xml.math	StarOffice 7 Formula
50438	string		application/vnd.oasis.opendocument.chart	OpenDocument Chart
50538	string		application/vnd.oasis.opendocument.database	OpenDocument Database
50638	string		application/vnd.sun.xml.base			OpenDocument Database
50738	string		application/vnd.oasis.opendocument.formula	OpenDocument Formula
50838	string		application/vnd.oasis.opendocument.image	OpenDocument Image
50938	string		application/vnd.oasis.opendocument.text-web	HTML Document Template
51038	string		application/vnd.oasis.opendocument.text-	OpenDocument
511>78	string		template						Text Template
512>78	string		master							Master Document
51338	string		application/vnd.oasis.opendocument.text		OpenDocument Text
51438	string		application/vnd.oasis.opendocument.graphics	OpenDocument Drawing
515>81	string		-template						Template
51638	string		application/vnd.oasis.opendocument.presentation	OpenDocument Presentation
517>85	string		-template						Template
51838	string		application/vnd.oasis.opendocument.spreadsheet	OpenDocument Spreadsheet
519>84	string		-template						Template
5200	string		PK\003\004	ZIP archive
5210	string		MZ		DOS executable (EXE)
5220	string		LZ		DOS built-in
5230	byte		0xe9		DOS executable (COM)
5240	byte		0xeb		DOS executable (COM)
5250	string		\013\023\010\000	ksh compiled shell script executable
52624	long		60012		ufsdump archive file
5270	string		TZif		zoneinfo timezone data file
5280	string		BZh		bzip2 compressed data
529>3	byte		>47		, block size = %c00k
5300	string		SUNWcpch	Sun C compiler precompiled header
5310	string		SUNWCpch	Sun C++ compiler precompiled header
5320	string		\043\040PaCkAgE\040DaTaStReAm	package datastream
5330	short		0xcff1		CTF data file
5340	string		\177DOF		DTrace DOF data file
5350	string		\177FCF		fmd(1M) checkpoint file
5360	string		EFT\0		Fault tree file,
537>4	ushort		x		v%u
538>6	ushort		x		rev %u,
539>8	ushort		x		from esc v%u
540>10	ushort		x		rev %u
5410	string		_SM_		DMTF SMBIOS image
542>6	byte		x		version %u
543>7	byte		x		.%u
5440	byte		0x11		Solaris Audit File
5450	byte		0x78		Solaris Audit File
546# ZFS send stream entries
5478	ullong		0x00000002f5bacbac	ZFS snapshot stream
548# little endian stream
5498	ullong		0xaccbbaf502000000	ZFS snapshot stream
550
551
552# Video files
5532	string		\001\272\041	MPEG Movie file
5540	string		\377\375	MPEG-1 Audio Layer 2
5550	string		\377\373	MPEG-1 Audio Layer 3
5560	string		\377\372	MPEG-1 Audio Layer 3
5570	string		\111\104\063	MPEG-1 Layer 3 with ID3v2
558
559# AVI and GVI files
56020	string	hdrlavih	RIFF Avi Video
561>36	ulong	>0		%u Max Bps,
562>64	ushort	x		%u X
563>68	ushort	x		%u,
564>48	ulong	x		%u frames
565
56620	string	goog		RIFF gvi
567>88	ulong	>0		%u Max Bps
568>116	ushort	x		%u X
569>120	ushort	x		%u,
570>100	ulong	x		%u frames
571
572# JPEG 2000 - jp2 image file.
5733	string		\014\152\120\040\040	JPEG 2000 Image file
574
575# iso 9660 CD-ROM image and El Torito Bootable standard
57632769	string		CD\0		ISO 9660 filesystem image
577>34823	string		EL\040TORITO	- El Torito
578
579# Palm Pilot files .pdb and .prc of some type.
5800x3c	string	TEXtREAd		Palm DOC file
5810x3c	string	SDocSilX		iSilo 3 Doc file for PalmPilot
5820x3c	string	applSil			iSilo Application file
5830x3c	string	appl			Palm Pilot Application
5840x3c	string	ToGoToGo		iSilo Doc file for Palm Pilot
585
586#SGI files with .rgb extention
5870	string	\001\332			SGI Image data,
588>2	byte	1			RLE,
589>2	byte	0			Verbatim,
590>5	ubyte	x			%u-D
591>7	ubyte	x			%u x
592>9	ubyte	x			%u,
593>11	ubyte	x			%u channel(s)
594
5952048	string		PCD_IPI		Kodak Photo CD image pack file
596>0xe02	byte&0x03	0x00		, landscape mode
597>0xe02	byte&0x03	0x01		, portrait mode
598>0xe02	byte&0x03	0x02		, landscape mode
599>0xe02	byte&0x03	0x03		, portrait mode
6000	string		PCD_OPA		Kodak Photo CD overview pack file
601
602# MS Documents. Not much info available.
6030	string	\320\317\021\340\241\261\032\341	Microsoft
604>546	string	bjbj					Word
605>0	byte	<0					Document
6060	string	{\\rtf		Microsoft Rich Text Format Document
607
608# mp4 media format with different media files embedded in it
6094	string	ftyp		MPEG-4
610>8	string	isom		Base Media v1 [IS0 14496-12:2003]
611>8	string	iso2		Base Media v2 [ISO 14496-12:2005]
612>8	string	m4a\040		Apple iTunes AAC-LC (.M4A) Audio
613>8	string	m4v\040		Apple iTunes (.M4V) Video
614>8	string	qt		Apple QuickTime (.MOV/QT)
615>8	string	jp2		JPEG 2000 Image
616>8	string	jpm		JPEG 2000 Compound Image (.JPM) [ISO 15444-6]
617>8	string	jpx		JPEG 2000 w/ extensions (.JPX) [ISO 15444-2]
618>8	string	mp42		v2 [ISO 14496-14]
6194	string	moov		QuickTime MOV file
620
6210	string		\375\067\172\130\132\000	xz compressed data
622