More signature updates.

This commit is contained in:
Seth Hall 2015-04-06 17:21:53 -04:00
parent 19f498b4a4
commit 6861ecc046
7 changed files with 510 additions and 738 deletions

View file

@ -1,6 +1,8 @@
@load-sigs ./general
@load-sigs ./archive @load-sigs ./archive
@load-sigs ./audio
@load-sigs ./general
@load-sigs ./image @load-sigs ./image
@load-sigs ./video
@load-sigs ./msoffice @load-sigs ./msoffice
@load-sigs ./libmagic @load-sigs ./video
@load-sigs ./libmagic

View file

@ -16,16 +16,19 @@ signature file-multi-zip {
file-magic /^PK\x07\x08PK\x03\x04/ file-magic /^PK\x07\x08PK\x03\x04/
} }
# RAR
signature file-rar { signature file-rar {
file-mime "application/x-rar", 70 file-mime "application/x-rar", 70
file-magic /^Rar!/ file-magic /^Rar!/
} }
# GZIP
signature file-gzip { signature file-gzip {
file-mime "application/x-gzip", 100 file-mime "application/x-gzip", 100
file-magic /\x1f\x8b/ file-magic /\x1f\x8b/
} }
# Microsoft Cabinet
signature file-ms-cab { signature file-ms-cab {
file-mime "application/vnd.ms-cab-compressed", 110 file-mime "application/vnd.ms-cab-compressed", 110
file-magic /^MSCF\x00\x00\x00\x00/ file-magic /^MSCF\x00\x00\x00\x00/
@ -50,11 +53,13 @@ signature file-magic-auto352 {
file-magic /^(drpm|\xed\xab\xee\xdb)/ file-magic /^(drpm|\xed\xab\xee\xdb)/
} }
# StuffIt
signature file-stuffit { signature file-stuffit {
file-mime "application/x-stuffit", 70 file-mime "application/x-stuffit", 70
file-magic /^(SIT\x21|StuffIt)/ file-magic /^(SIT\x21|StuffIt)/
} }
# Archived data
signature file-x-archive { signature file-x-archive {
file-mime "application/x-archive", 70 file-mime "application/x-archive", 70
file-magic /^!?<ar(ch)?>/ file-magic /^!?<ar(ch)?>/
@ -63,7 +68,7 @@ signature file-x-archive {
# ARC archive data # ARC archive data
signature file-arc { signature file-arc {
file-mime "application/x-arc", 70 file-mime "application/x-arc", 70
file-magic /([\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f]{2})([\x02-\x0a\x14\x48]\x1a)/ file-magic /^[\x00-\x7f]{2}[\x02-\x0a\x14\x48]\x1a/
} }
# EET archive # EET archive
@ -78,43 +83,34 @@ signature file-zoo {
file-magic /^.{20}\xdc\xa7\xc4\xfd/ file-magic /^.{20}\xdc\xa7\xc4\xfd/
} }
# >0 lelong&,=407642370 (0x184c2102), ["LZ4 compressed data, legacy format"], swap_endian=0 # LZ4 compressed data (legacy format)
signature file-magic-auto382 { signature file-lz4-legacy {
file-mime "application/x-lz4", 70 file-mime "application/x-lz4", 70
file-magic /(\x02\x21\x4c\x18)/ file-magic /(\x02\x21\x4c\x18)/
} }
# >0 lelong&,=407708164 (0x184d2204), ["LZ4 compressed data"], swap_endian=0 # LZ4 compressed data
signature file-magic-auto383 { signature file-lz4 {
file-mime "application/x-lz4", 70 file-mime "application/x-lz4", 70
file-magic /(\x04\x22\x4d\x18)/ file-magic /^\x04\x22\x4d\x18/
} }
# >0 string,=LRZI (len=4), ["LRZIP compressed data"], swap_endian=0 # LRZIP compressed data
# >>5 byte&,x, [".%d"], swap_endian=0 signature file-lrzip {
signature file-magic-auto384 {
file-mime "application/x-lrzip", 1 file-mime "application/x-lrzip", 1
file-magic /(LRZI)(.{1})(.{1})/ file-magic /^LRZI/
} }
# >0 string,=LZIP (len=4), ["lzip compressed data"], swap_endian=0 # LZIP compressed data
signature file-magic-auto386 { signature file-lzip {
file-mime "application/x-lzip", 70 file-mime "application/x-lzip", 70
file-magic /(LZIP)/ file-magic /^LZIP/
} }
# >0 string/b,=MZ (len=2), [""], swap_endian=0 # Self-extracting PKZIP archive
# >>30 string,=Copyright 1989-1990 PKWARE Inc. (len=31), ["Self-extracting PKZIP archive"], swap_endian=0
signature file-magic-auto434 { signature file-magic-auto434 {
file-mime "application/zip", 340 file-mime "application/zip", 340
file-magic /(MZ)(.{28})(Copyright 1989\x2d1990 PKWARE Inc\x2e)/ file-magic /^MZ.{28}(Copyright 1989\x2d1990 PKWARE Inc|PKLITE Copr)\x2e/
}
# >0 string/b,=MZ (len=2), [""], swap_endian=0
# >>30 string,=PKLITE Copr. (len=12), ["Self-extracting PKZIP archive"], swap_endian=0
signature file-magic-auto435 {
file-mime "application/zip", 150
file-magic /(MZ)(.{28})(PKLITE Copr\x2e)/
} }
# LHA archive (LZH) # LHA archive (LZH)
@ -123,66 +119,57 @@ signature file-lzh {
file-magic /^.{2}-(lh[ abcdex0-9]|lz[s2-8]|lz[s2-8]|pm[s012]|pc1)-/ file-magic /^.{2}-(lh[ abcdex0-9]|lz[s2-8]|lz[s2-8]|pm[s012]|pc1)-/
} }
# >0 string,=WARC/ (len=5), ["WARC Archive"], swap_endian=0 # WARC Archive
# >>5 string,x, ["version %.4s"], swap_endian=0 signature file-warc {
signature file-magic-auto177 { file-mime "application/warc", 50
file-mime "application/warc", 1 file-magic /^WARC\x2f/
file-magic /(WARC\x2f)(.{0})/
} }
# >0 string,=7z\274\257'\034 (len=6), ["7-zip archive data,"], swap_endian=0 # 7-zip archive data
# >>7 byte&,x, [".%d"], swap_endian=0 signature file-7zip {
signature file-magic-auto150 { file-mime "application/x-7z-compressed", 50
file-mime "application/x-7z-compressed", 1 file-magic /^7z\xbc\xaf\x27\x1c/
file-magic /(7z\xbc\xaf\x27\x1c)(.{1})(.{1})/
} }
# >0 ustring,=\3757zXZ\000 (len=6), ["XZ compressed data"], swap_endian=0 # XZ compressed data
signature file-magic-auto151 { signature file-xz {
file-mime "application/x-xz", 90 file-mime "application/x-xz", 90
file-magic /(\xfd7zXZ\x00)/ file-magic /^\xfd7zXZ\x00/
} }
# >0 string/b,=MZ (len=2), [""], swap_endian=0
# >>36 string,=LHa's SFX (len=9), [", LHa self-extracting archive"], swap_endian=0 # LHa self-extracting archive
signature file-magic-auto436 { signature file-magic-auto436 {
file-mime "application/x-lha", 120 file-mime "application/x-lha", 120
file-magic /(MZ)(.{34})(LHa\x27s SFX)/ file-magic /^MZ.{34}LH[aA]\x27s SFX/
} }
# >0 string/b,=MZ (len=2), [""], swap_endian=0 # ARJ archive data
# >>36 string,=LHA's SFX (len=9), [", LHa self-extracting archive"], swap_endian=0 signature file-arj {
signature file-magic-auto437 {
file-mime "application/x-lha", 120
file-magic /(MZ)(.{34})(LHA\x27s SFX)/
}
# >0 leshort&,=-5536 (0xea60), ["ARJ archive data"], swap_endian=0
signature file-magic-auto467 {
file-mime "application/x-arj", 50 file-mime "application/x-arj", 50
file-magic /(\x60\xea)/ file-magic /^\x60\xea/
} }
# >0 short&,=-14479 (0xc771), ["byte-swapped cpio archive"], swap_endian=0 # Byte-swapped cpio archive
signature file-magic-auto479 { signature file-bs-cpio {
file-mime "application/x-cpio", 50 file-mime "application/x-cpio", 50
file-magic /((\x71\xc7)|(\xc7\x71))/ file-magic /(\x71\xc7|\xc7\x71)/
} }
# >0 short&,=29127 (0x71c7), ["cpio archive"], swap_endian=0 # CPIO archive
signature file-magic-auto480 { signature file-cpio {
file-mime "application/x-cpio", 50 file-mime "application/x-cpio", 50
file-magic /((\xc7\x71)|(\x71\xc7))/ file-magic /^(\xc7\x71|\x71\xc7)/
} }
# >0 string,=\037\235 (len=2), ["compress'd data"], swap_endian=0 # Compress'd data
signature file-magic-auto500 { signature file-compress {
file-mime "application/x-compress", 50 file-mime "application/x-compress", 50
file-magic /(\x1f\x9d)/ file-magic /^\x1f\x9d/
} }
# >0 lelong&00ffffff,=93 (0x0000005d), [""], swap_endian=0 # LZMA compressed data
signature file-magic-auto218 { signature file-lzma {
file-mime "application/x-lzma", 71 file-mime "application/x-lzma", 71
file-magic /(\x5d\x00\x00.)/ file-magic /^\x5d\x00\x00/
} }

View file

@ -0,0 +1,121 @@
# >0 beshort&fffffffffffffffe,=-30 (0xffe2), ["MPEG ADTS, layer III, v2.5"], swap_endian=0
signature file-magic-auto487 {
file-mime "audio/mpeg", 50
file-magic /(\xff[\xe2\xe3])/
}
# >0 beshort&fffffffffffffffe,=-10 (0xfff6), ["MPEG ADTS, layer I, v2"], swap_endian=0
signature file-magic-auto488 {
file-mime "audio/mpeg", 50
file-magic /(\xff[\xf6\xf7])/
}
# >0 beshort&fffffffffffffffe,=-14 (0xfff2), ["MPEG ADTS, layer III, v2"], swap_endian=0
signature file-magic-auto489 {
file-mime "audio/mpeg", 50
file-magic /(\xff[\xf2\xf3])/
}
# >0 beshort&fffffffffffffffe,=-4 (0xfffc), ["MPEG ADTS, layer II, v1"], swap_endian=0
signature file-magic-auto490 {
file-mime "audio/mpeg", 50
file-magic /(\xff[\xfc\xfd])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x10, ["MPEG ADTS, layer III, v1, 32 kbps"], swap_endian=0
signature file-magic-auto438 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x20, ["MPEG ADTS, layer III, v1, 40 kbps"], swap_endian=0
signature file-magic-auto439 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x30, ["MPEG ADTS, layer III, v1, 48 kbps"], swap_endian=0
signature file-magic-auto440 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x40, ["MPEG ADTS, layer III, v1, 56 kbps"], swap_endian=0
signature file-magic-auto441 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x50, ["MPEG ADTS, layer III, v1, 64 kbps"], swap_endian=0
signature file-magic-auto442 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x60, ["MPEG ADTS, layer III, v1, 80 kbps"], swap_endian=0
signature file-magic-auto443 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x70, ["MPEG ADTS, layer III, v1, 96 kbps"], swap_endian=0
signature file-magic-auto444 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x80, ["MPEG ADTS, layer III, v1, 112 kbps"], swap_endian=0
signature file-magic-auto445 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x90, ["MPEG ADTS, layer III, v1, 128 kbps"], swap_endian=0
signature file-magic-auto446 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0xa0, ["MPEG ADTS, layer III, v1, 160 kbps"], swap_endian=0
signature file-magic-auto447 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0xb0, ["MPEG ADTS, layer III, v1, 192 kbps"], swap_endian=0
signature file-magic-auto448 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0xc0, ["MPEG ADTS, layer III, v1, 224 kbps"], swap_endian=0
signature file-magic-auto449 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0xd0, ["MPEG ADTS, layer III, v1, 256 kbps"], swap_endian=0
signature file-magic-auto450 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0xe0, ["MPEG ADTS, layer III, v1, 320 kbps"], swap_endian=0
signature file-magic-auto451 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef])/
}

View file

@ -9,22 +9,32 @@ signature file-plaintext {
signature file-xml { signature file-xml {
file-mime "application/xml", 10 file-mime "application/xml", 10
file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?)*<\?xml / file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*<\?xml /
} }
signature file-xhtml { signature file-xhtml {
file-mime "text/html", 100 file-mime "text/html", 100
file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?)*<\?xml version[ =]['"].*<(![dD][oO][cC][tT][yY][pP][eE] {1,}[hH][tT][mM][lL]|[hH][tT][mM][lL])/ file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*(<\?xml .*\?>)?([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*<(![dD][oO][cC][tT][yY][pP][eE] {1,}[hH][tT][mM][lL]|[hH][tT][mM][lL])/
} }
signature file-html { signature file-html {
file-mime "text/html", 49 file-mime "text/html", 49
file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?)*<![dD][oO][cC][tT][yY][pP][eE] {1,}[hH][tT][mM][lL]/ file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*(<\?xml .*\?>)?([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*<![dD][oO][cC][tT][yY][pP][eE] {1,}[hH][tT][mM][lL]/
} }
signature file-html2 { signature file-html2 {
file-mime "text/html", 20 file-mime "text/html", 20
file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?)*<([hH][eE][aA][dD]|[hH][tT][mM][lL]|[tT][iI][tT][lL][eE]|[bB][oO][dD][yY])/ file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*(<\?xml .*\?>)?([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*<([hH][eE][aA][dD]|[hH][tT][mM][lL]|[tT][iI][tT][lL][eE]|[bB][oO][dD][yY])/
}
signature file-rss {
file-mime "text/rss", 90
file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*(<\?xml .*\?>)?([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*<[rR][sS][sS]/
}
signature file-atom {
file-mime "text/atom", 100
file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*(<\?xml .*\?>)?([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*<[rR][sS][sS][^>]*xmlns:atom/
} }
signature file-coldfusion { signature file-coldfusion {
@ -34,17 +44,17 @@ signature file-coldfusion {
signature file-soap { signature file-soap {
file-mime "application/soap+xml", 49 file-mime "application/soap+xml", 49
file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?)*<[sS][oO][aA][pP]-[eE][nN][vV]:[eE][nN][vV][eE][lL][oO][pP][eE]/ file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*(<\?xml .*\?>)?([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*<[sS][oO][aA][pP]-[eE][nN][vV]:[eE][nN][vV][eE][lL][oO][pP][eE]/
} }
signature file-cross-domain-policy { signature file-cross-domain-policy {
file-mime "text/x-cross-domain-policy", 49 file-mime "text/x-cross-domain-policy", 49
file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?)*(<\?xml version="1.0"\?>)?<![dD][oO][cC][tT][yY][pP][eE] {1,}[cC][rR][oO][sS][sS]-[dD][oO][mM][aA][iI][nN]-[pP][oO][lL][iI][cC][yY]/ file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*(<\?xml .*\?>)?([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*<![dD][oO][cC][tT][yY][pP][eE] {1,}[cC][rR][oO][sS][sS]-[dD][oO][mM][aA][iI][nN]-[pP][oO][lL][iI][cC][yY]/
} }
signature file-cross-domain-policy2 { signature file-cross-domain-policy2 {
file-mime "text/x-cross-domain-policy", 49 file-mime "text/x-cross-domain-policy", 49
file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?)*<[cC][rR][oO][sS][sS]-[dD][oO][mM][aA][iI][nN]-[pP][oO][lL][iI][cC][yY]/ file-magic /^([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*(<\?xml .*\?>)?([\x0d\x0a[:blank:]]*(<!--.*-->)?[\x0d\x0a[:blank:]]*)*<[cC][rR][oO][sS][sS]-[dD][oO][mM][aA][iI][nN]-[pP][oO][lL][iI][cC][yY]/
} }
# Microsoft LNK files # Microsoft LNK files

View file

@ -9,11 +9,10 @@ signature file-gif {
file-magic /^GIF8/ file-magic /^GIF8/
} }
# JPEG image
# >0 beshort&,=-40 (0xffd8), ["JPEG image data"], swap_endian=0
signature file-magic-auto427 { signature file-magic-auto427 {
file-mime "image/jpeg", 52 file-mime "image/jpeg", 52
file-magic /(\xff\xd8)/ file-magic /^\xff\xd8/
} }
signature file-bmp { signature file-bmp {
@ -31,10 +30,9 @@ signature file-cur {
file-mime "image/x-cursor", 70 file-mime "image/x-cursor", 70
} }
# >0 string,=8BPS (len=4), ["Adobe Photoshop Image"], swap_endian=0
signature file-magic-auto289 { signature file-magic-auto289 {
file-mime "image/vnd.adobe.photoshop", 70 file-mime "image/vnd.adobe.photoshop", 70
file-magic /(8BPS)/ file-magic /^8BPS/
} }
signature file-png { signature file-png {
@ -66,78 +64,69 @@ signature file-jpm {
file-magic /\x00\x00\x00\x0cjP \x0d\x0a\x87\x0a.{8}jpm / file-magic /\x00\x00\x00\x0cjP \x0d\x0a\x87\x0a.{8}jpm /
} }
# >0 string,=Xcur (len=4), ["Xcursor data"], swap_endian=0 # Xcursor image
signature file-magic-auto271 { signature file-x-cursor {
file-mime "image/x-xcursor", 70 file-mime "image/x-xcursor", 70
file-magic /(Xcur)/ file-magic /^Xcur/
} }
# >0 string,=IIN1 (len=4), ["NIFF image data"], swap_endian=0 # NIFF image
signature file-magic-auto282 { signature file-niff {
file-mime "image/x-niff", 70 file-mime "image/x-niff", 70
file-magic /(IIN1)/ file-magic /^IIN1/
} }
# >0 lelong&,=20000630 (0x01312f76), ["OpenEXR image data,"], swap_endian=0 # OpenEXR image
signature file-magic-auto291 { signature file-openexr {
file-mime "image/x-exr", 70 file-mime "image/x-exr", 70
file-magic /(\x76\x2f\x31\x01)/ file-magic /^\x76\x2f\x31\x01/
} }
# >0 string,=SDPX (len=4), ["DPX image data, big-endian,"], swap_endian=0 # DPX image
signature file-magic-auto292 { signature file-dpx {
file-mime "image/x-dpx", 70 file-mime "image/x-dpx", 70
file-magic /(SDPX)/ file-magic /^SDPX/
} }
# >0 string,=CPC\262 (len=4), ["Cartesian Perceptual Compression image"], swap_endian=0 # Cartesian Perceptual Compression image
signature file-magic-auto294 { signature file-cpi {
file-mime "image/x-cpi", 70 file-mime "image/x-cpi", 70
file-magic /(CPC\xb2)/ file-magic /(CPC\xb2)/
} }
signature file-orf { signature file-orf {
file-mime "image/x-olympus-orf", 70 file-mime "image/x-olympus-orf", 70
file-magic /IIR[OS]|MMOR/ file-magic /IIR[OS]|MMOR/
} }
# >0 string,=FOVb (len=4), ["Foveon X3F raw image data"], swap_endian=0 # Foveon X3F raw image
signature file-magic-auto298 { signature file-x3r {
file-mime "image/x-x3f", 70 file-mime "image/x-x3f", 70
file-magic /(FOVb)/ file-magic /^FOVb/
} }
# >0 string,=PDN3 (len=4), ["Paint.NET image data"], swap_endian=0 # Paint.NET image
signature file-magic-auto299 { signature file-paint-net {
file-mime "image/x-paintnet", 70 file-mime "image/x-paintnet", 70
file-magic /(PDN3)/ file-magic /^PDN3/
} }
# >0 string,=RIFF (len=4), ["RIFF (little-endian) data"], swap_endian=0 # Corel Draw Picture
# >>8 string,=CDRA (len=4), [", Corel Draw Picture"], swap_endian=0 signature file-coreldraw {
signature file-magic-auto355 {
file-mime "image/x-coreldraw", 70 file-mime "image/x-coreldraw", 70
file-magic /(RIFF)(.{4})(CDRA)/ file-magic /^RIFF....CDR[A6]/
} }
# >0 string,=RIFF (len=4), ["RIFF (little-endian) data"], swap_endian=0 # Netpbm PAM image
# >>8 string,=CDR6 (len=4), [", Corel Draw Picture, version 6"], swap_endian=0 signature file-netbpm{
signature file-magic-auto356 {
file-mime "image/x-coreldraw", 70
file-magic /(RIFF)(.{4})(CDR6)/
}
# >0 string,=P7 (len=2), ["Netpbm PAM image file"], swap_endian=0
signature file-magic-auto484 {
file-mime "image/x-portable-pixmap", 50 file-mime "image/x-portable-pixmap", 50
file-magic /(P7)/ file-magic /^P7/
} }
# >4 string/W,=jP (len=2), ["JPEG 2000 image"], swap_endian=0 # JPEG 2000 image
signature file-magic-auto497 { signature file-jpeg-2000 {
file-mime "image/jp2", 50 file-mime "image/jp2", 50
file-magic /(.{4})(jP)/ file-magic /^....jP/
} }
# DjVU Images # DjVU Images
@ -152,27 +141,26 @@ signature file-dwg {
file-magic /^(AC[12]\.|AC10)/ file-magic /^(AC[12]\.|AC10)/
} }
# >0 string,=gimp xcf (len=8), ["GIMP XCF image data,"], swap_endian=0 # GIMP XCF image
signature file-magic-auto115 { signature file-gimp-xcf {
file-mime "image/x-xcf", 110 file-mime "image/x-xcf", 110
file-magic /(gimp xcf)/ file-magic /^gimp xcf/
} }
# >0 string/t,=[BitmapInfo2] (len=13), ["Polar Monitor Bitmap text"], swap_endian=0 # Polar Monitor Bitmap text
signature file-magic-auto62 { signature file-polar-monitor-bitmap {
file-mime "image/x-polar-monitor-bitmap", 160 file-mime "image/x-polar-monitor-bitmap", 160
file-magic /(\x5bBitmapInfo2\x5d)/ file-magic /^\x5bBitmapInfo2\x5d/
} }
# >0 string,=AWBM (len=4), [""], swap_endian=0 # Award BIOS bitmap
# >>4 leshort&,<1981 (0x07bd), ["Award BIOS bitmap"], swap_endian=0 signature file-award-bitmap {
signature file-magic-auto208 {
file-mime "image/x-award-bmp", 20 file-mime "image/x-award-bmp", 20
file-magic /(AWBM)(.{2})/ file-magic /^AWBM/
} }
# >0 string,=\021\006 (len=2), ["Award BIOS Logo, 136 x 84"], swap_endian=0 # Award BIOS Logo, 136 x 84
signature file-magic-auto483 { signature file-award-bios-logo {
file-mime "image/x-award-bioslogo", 50 file-mime "image/x-award-bioslogo", 50
file-magic /^\x11[\x06\x09]/ file-magic /^\x11[\x06\x09]/
} }

View file

@ -357,65 +357,50 @@ signature file-magic-auto104 {
file-magic /(ITOLITLS)(.{4})/ file-magic /(ITOLITLS)(.{4})/
} }
# >4096 string,=\211HDF\r\n\032\n (len=8), ["Hierarchical Data Format (version 5) with 4k user block"], swap_endian=0
signature file-magic-auto105 {
file-mime "application/x-hdf", 110
file-magic /(.{4096})(\x89HDF\x0d\x0a\x1a\x0a)/
}
# >2048 string,=\211HDF\r\n\032\n (len=8), ["Hierarchical Data Format (version 5) with 2k user block"], swap_endian=0
signature file-magic-auto106 {
file-mime "application/x-hdf", 110
file-magic /(.{2048})(\x89HDF\x0d\x0a\x1a\x0a)/
}
# >1024 string,=\211HDF\r\n\032\n (len=8), ["Hierarchical Data Format (version 5) with 1k user block"], swap_endian=0
signature file-magic-auto107 {
file-mime "application/x-hdf", 110
file-magic /(.{1024})(\x89HDF\x0d\x0a\x1a\x0a)/
}
# >512 string,=\211HDF\r\n\032\n (len=8), ["Hierarchical Data Format (version 5) with 512 bytes user block"], swap_endian=0
signature file-magic-auto108 {
file-mime "application/x-hdf", 110
file-magic /(.{512})(\x89HDF\x0d\x0a\x1a\x0a)/
}
# >0 string,=\211HDF\r\n\032\n (len=8), ["Hierarchical Data Format (version 5) data"], swap_endian=0 # >0 string,=\211HDF\r\n\032\n (len=8), ["Hierarchical Data Format (version 5) data"], swap_endian=0
signature file-magic-auto109 { signature file-magic-auto109 {
file-mime "application/x-hdf", 110 file-mime "application/x-hdf", 110
file-magic /(\x89HDF\x0d\x0a\x1a\x0a)/ file-magic /(\x89HDF\x0d\x0a\x1a\x0a)/
} }
# >36 string,=acspSUNW (len=8), ["Sun KCMS ICC Profile"], swap_endian=0 # Find a way to do the following to generically detect ICC profiles.
signature file-magic-auto111 { # An ICC parser should deal with the difference in these formats.
file-mime "application/vnd.iccprofile", 110 ## >36 string,=acspSUNW (len=8), ["Sun KCMS ICC Profile"], swap_endian=0
file-magic /(.{36})(acspSUNW)/ #signature file-magic-auto111 {
} # file-mime "application/vnd.iccprofile", 110
# file-magic /(.{36})(acspSUNW)/
#}
#
## >36 string,=acspSGI (len=8), ["SGI ICC Profile"], swap_endian=0
#signature file-magic-auto112 {
# file-mime "application/vnd.iccprofile", 110
# file-magic /(.{36})(acspSGI )/
#}
#
## >36 string,=acspMSFT (len=8), ["Microsoft ICM Color Profile"], swap_endian=0
#signature file-magic-auto113 {
# file-mime "application/vnd.iccprofile", 110
# file-magic /(.{36})(acspMSFT)/
#}
#
## >36 string,=acspAPPL (len=8), ["ColorSync ICC Profile"], swap_endian=0
#signature file-magic-auto114 {
# file-mime "application/vnd.iccprofile", 110
# file-magic /(.{36})(acspAPPL)/
#}
#
## >36 string,=acsp (len=4), ["ICC Profile"], swap_endian=0
#signature file-magic-auto277 {
# file-mime "application/vnd.iccprofile", 70
# file-magic /(.{36})(acsp)/
#}
# >36 string,=acspSGI (len=8), ["SGI ICC Profile"], swap_endian=0
signature file-magic-auto112 {
file-mime "application/vnd.iccprofile", 110
file-magic /(.{36})(acspSGI )/
}
# >36 string,=acspMSFT (len=8), ["Microsoft ICM Color Profile"], swap_endian=0
signature file-magic-auto113 {
file-mime "application/vnd.iccprofile", 110
file-magic /(.{36})(acspMSFT)/
}
# >36 string,=acspAPPL (len=8), ["ColorSync ICC Profile"], swap_endian=0
signature file-magic-auto114 {
file-mime "application/vnd.iccprofile", 110
file-magic /(.{36})(acspAPPL)/
}
# >512 string,=R\000o\000o\000t\000 (len=8), ["Hangul (Korean) Word Processor File 2000"], swap_endian=0 # >512 string,=R\000o\000o\000t\000 (len=8), ["Hangul (Korean) Word Processor File 2000"], swap_endian=0
signature file-magic-auto116 { #signature file-magic-auto116 {
file-mime "application/x-hwp", 110 # file-mime "application/x-hwp", 110
file-magic /(.{512})(R\x00o\x00o\x00t\x00)/ # file-magic /(.{512})(R\x00o\x00o\x00t\x00)/
} #}
# >0 string,=<MIFFile (len=8), ["FrameMaker MIF (ASCII) file"], swap_endian=0 # >0 string,=<MIFFile (len=8), ["FrameMaker MIF (ASCII) file"], swap_endian=0
signature file-magic-auto118 { signature file-magic-auto118 {
@ -529,78 +514,6 @@ signature file-magic-auto162 {
file-magic /(\x3c\x3fxml)(.{15})(.*)( xmlns\x3d)(['"]http:\x2f\x2fwww.opengis.net\x2fkml)/ file-magic /(\x3c\x3fxml)(.{15})(.*)( xmlns\x3d)(['"]http:\x2f\x2fwww.opengis.net\x2fkml)/
} }
# >60 string,=RINEX (len=5), [""], swap_endian=0
# >>80 search/256,=XXRINEXB (len=8), ["RINEX Data, GEO SBAS Broadcast"], swap_endian=0
# >>>5 string,x, [", version %6.6s"], swap_endian=0
signature file-magic-auto166 {
file-mime "rinex/broadcast", 1
file-magic /(.{60})(RINEX)(.{15})(.*)(XXRINEXB)/
}
# >60 string,=RINEX (len=5), [""], swap_endian=0
# >>80 search/256,=XXRINEXD (len=8), ["RINEX Data, Observation (Hatanaka comp)"], swap_endian=0
# >>>5 string,x, [", version %6.6s"], swap_endian=0
signature file-magic-auto167 {
file-mime "rinex/observation", 1
file-magic /(.{60})(RINEX)(.{15})(.*)(XXRINEXD)/
}
# >60 string,=RINEX (len=5), [""], swap_endian=0
# >>80 search/256,=XXRINEXC (len=8), ["RINEX Data, Clock"], swap_endian=0
# >>>5 string,x, [", version %6.6s"], swap_endian=0
signature file-magic-auto168 {
file-mime "rinex/clock", 1
file-magic /(.{60})(RINEX)(.{15})(.*)(XXRINEXC)/
}
# >60 string,=RINEX (len=5), [""], swap_endian=0
# >>80 search/256,=XXRINEXH (len=8), ["RINEX Data, GEO SBAS Navigation"], swap_endian=0
# >>>5 string,x, [", version %6.6s"], swap_endian=0
signature file-magic-auto169 {
file-mime "rinex/navigation", 1
file-magic /(.{60})(RINEX)(.{15})(.*)(XXRINEXH)/
}
# >60 string,=RINEX (len=5), [""], swap_endian=0
# >>80 search/256,=XXRINEXG (len=8), ["RINEX Data, GLONASS Navigation"], swap_endian=0
# >>>5 string,x, [", version %6.6s"], swap_endian=0
signature file-magic-auto170 {
file-mime "rinex/navigation", 1
file-magic /(.{60})(RINEX)(.{15})(.*)(XXRINEXG)/
}
# >60 string,=RINEX (len=5), [""], swap_endian=0
# >>80 search/256,=XXRINEXL (len=8), ["RINEX Data, Galileo Navigation"], swap_endian=0
# >>>5 string,x, [", version %6.6s"], swap_endian=0
signature file-magic-auto171 {
file-mime "rinex/navigation", 1
file-magic /(.{60})(RINEX)(.{15})(.*)(XXRINEXL)/
}
# >60 string,=RINEX (len=5), [""], swap_endian=0
# >>80 search/256,=XXRINEXM (len=8), ["RINEX Data, Meteorological"], swap_endian=0
# >>>5 string,x, [", version %6.6s"], swap_endian=0
signature file-magic-auto172 {
file-mime "rinex/meteorological", 1
file-magic /(.{60})(RINEX)(.{15})(.*)(XXRINEXM)/
}
# >60 string,=RINEX (len=5), [""], swap_endian=0
# >>80 search/256,=XXRINEXN (len=8), ["RINEX Data, Navigation "], swap_endian=0
# >>>5 string,x, [", version %6.6s"], swap_endian=0
signature file-magic-auto173 {
file-mime "rinex/navigation", 1
file-magic /(.{60})(RINEX)(.{15})(.*)(XXRINEXN)/
}
# >60 string,=RINEX (len=5), [""], swap_endian=0
# >>80 search/256,=XXRINEXO (len=8), ["RINEX Data, Observation"], swap_endian=0
# >>>5 string,x, [", version %6.6s"], swap_endian=0
signature file-magic-auto174 {
file-mime "rinex/observation", 1
file-magic /(.{60})(RINEX)(.{15})(.*)(XXRINEXO)/
}
# >0 string,=\000\001\000\000\000 (len=5), ["TrueType font data"], swap_endian=0 # >0 string,=\000\001\000\000\000 (len=5), ["TrueType font data"], swap_endian=0
signature file-magic-auto187 { signature file-magic-auto187 {
file-mime "application/x-font-ttf", 80 file-mime "application/x-font-ttf", 80
@ -935,13 +848,13 @@ signature file-magic-auto245 {
# >4 string,=idsc (len=4), ["Apple QuickTime image (fast start)"], swap_endian=0 # >4 string,=idsc (len=4), ["Apple QuickTime image (fast start)"], swap_endian=0
signature file-magic-auto255 { signature file-magic-auto255 {
file-mime "image/x-quicktime", 70 file-mime "image/x-quicktime", 70
file-magic /(.{4})(idsc)/ file-magic /....(idsc)/
} }
# >4 string,=pckg (len=4), ["Apple QuickTime compressed archive"], swap_endian=0 # >4 string,=pckg (len=4), ["Apple QuickTime compressed archive"], swap_endian=0
signature file-magic-auto256 { signature file-magic-auto256 {
file-mime "application/x-quicktime-player", 70 file-mime "application/x-quicktime-player", 70
file-magic /(.{4})(pckg)/ file-magic /....(pckg)/
} }
@ -949,21 +862,21 @@ signature file-magic-auto256 {
# >>8 string/W,=M4A (len=3), [", MPEG v4 system, iTunes AAC-LC"], swap_endian=0 # >>8 string/W,=M4A (len=3), [", MPEG v4 system, iTunes AAC-LC"], swap_endian=0
signature file-magic-auto268 { signature file-magic-auto268 {
file-mime "audio/mp4", 60 file-mime "audio/mp4", 60
file-magic /(.{4})(ftyp)(M4A)/ file-magic /....(ftyp)(M4A)/
} }
# >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0 # >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0
# >>8 string/W,=M4V (len=3), [", MPEG v4 system, iTunes AVC-LC"], swap_endian=0 # >>8 string/W,=M4V (len=3), [", MPEG v4 system, iTunes AVC-LC"], swap_endian=0
signature file-magic-auto269 { signature file-magic-auto269 {
file-mime "video/mp4", 60 file-mime "video/mp4", 60
file-magic /(.{4})(ftyp)(M4V)/ file-magic /....(ftyp)(M4V)/
} }
# >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0 # >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0
# >>8 string/W,=qt (len=2), [", Apple QuickTime movie"], swap_endian=0 # >>8 string/W,=qt (len=2), [", Apple QuickTime movie"], swap_endian=0
signature file-magic-auto270 { signature file-magic-auto270 {
file-mime "video/quicktime", 50 file-mime "video/quicktime", 50
file-magic /(.{4})(ftyp)(qt)/ file-magic /....(ftyp)(qt)/
} }
# >0 string,=ADIF (len=4), ["MPEG ADIF, AAC"], swap_endian=0 # >0 string,=ADIF (len=4), ["MPEG ADIF, AAC"], swap_endian=0
@ -985,11 +898,6 @@ signature file-magic-auto276 {
file-magic /(MAC )/ file-magic /(MAC )/
} }
# >36 string,=acsp (len=4), ["ICC Profile"], swap_endian=0
signature file-magic-auto277 {
file-mime "application/vnd.iccprofile", 70
file-magic /(.{36})(acsp)/
}
# >0 string,=FORM (len=4), ["IFF data"], swap_endian=0 # >0 string,=FORM (len=4), ["IFF data"], swap_endian=0
# >>8 string,=AIFF (len=4), [", AIFF audio"], swap_endian=0 # >>8 string,=AIFF (len=4), [", AIFF audio"], swap_endian=0
@ -1048,71 +956,71 @@ signature file-magic-auto303 {
file-magic /(\xce\xce\xce\xce)/ file-magic /(\xce\xce\xce\xce)/
} }
# >1080 string,=32CN (len=4), ["32-channel Taketracker module sound data"], swap_endian=0 ## >1080 string,=32CN (len=4), ["32-channel Taketracker module sound data"], swap_endian=0
signature file-magic-auto304 { #signature file-magic-auto304 {
file-mime "audio/x-mod", 70 # file-mime "audio/x-mod", 70
file-magic /(.{1080})(32CN)/ # file-magic /(.{1080})(32CN)/
} #}
#
# >1080 string,=16CN (len=4), ["16-channel Taketracker module sound data"], swap_endian=0 ## >1080 string,=16CN (len=4), ["16-channel Taketracker module sound data"], swap_endian=0
signature file-magic-auto305 { #signature file-magic-auto305 {
file-mime "audio/x-mod", 70 # file-mime "audio/x-mod", 70
file-magic /(.{1080})(16CN)/ # file-magic /(.{1080})(16CN)/
} #}
#
# >1080 string,=OKTA (len=4), ["8-channel Octalyzer module sound data"], swap_endian=0 ## >1080 string,=OKTA (len=4), ["8-channel Octalyzer module sound data"], swap_endian=0
signature file-magic-auto306 { #signature file-magic-auto306 {
file-mime "audio/x-mod", 70 # file-mime "audio/x-mod", 70
file-magic /(.{1080})(OKTA)/ # file-magic /(.{1080})(OKTA)/
} #}
#
# >1080 string,=CD81 (len=4), ["8-channel Octalyser module sound data"], swap_endian=0 ## >1080 string,=CD81 (len=4), ["8-channel Octalyser module sound data"], swap_endian=0
signature file-magic-auto307 { #signature file-magic-auto307 {
file-mime "audio/x-mod", 70 # file-mime "audio/x-mod", 70
file-magic /(.{1080})(CD81)/ # file-magic /(.{1080})(CD81)/
} #}
#
# >1080 string,=8CHN (len=4), ["8-channel Fasttracker module sound data"], swap_endian=0 ## >1080 string,=8CHN (len=4), ["8-channel Fasttracker module sound data"], swap_endian=0
signature file-magic-auto308 { #signature file-magic-auto308 {
file-mime "audio/x-mod", 70 # file-mime "audio/x-mod", 70
file-magic /(.{1080})(8CHN)/ # file-magic /(.{1080})(8CHN)/
} #}
#
# >1080 string,=6CHN (len=4), ["6-channel Fasttracker module sound data"], swap_endian=0 ## >1080 string,=6CHN (len=4), ["6-channel Fasttracker module sound data"], swap_endian=0
signature file-magic-auto309 { #signature file-magic-auto309 {
file-mime "audio/x-mod", 70 # file-mime "audio/x-mod", 70
file-magic /(.{1080})(6CHN)/ # file-magic /(.{1080})(6CHN)/
} #}
#
# >1080 string,=4CHN (len=4), ["4-channel Fasttracker module sound data"], swap_endian=0 ## >1080 string,=4CHN (len=4), ["4-channel Fasttracker module sound data"], swap_endian=0
signature file-magic-auto310 { #signature file-magic-auto310 {
file-mime "audio/x-mod", 70 # file-mime "audio/x-mod", 70
file-magic /(.{1080})(4CHN)/ # file-magic /(.{1080})(4CHN)/
} #}
#
# >1080 string,=FLT8 (len=4), ["8-channel Startracker module sound data"], swap_endian=0 ## >1080 string,=FLT8 (len=4), ["8-channel Startracker module sound data"], swap_endian=0
signature file-magic-auto311 { #signature file-magic-auto311 {
file-mime "audio/x-mod", 70 # file-mime "audio/x-mod", 70
file-magic /(.{1080})(FLT8)/ # file-magic /(.{1080})(FLT8)/
} #}
#
# >1080 string,=FLT4 (len=4), ["4-channel Startracker module sound data"], swap_endian=0 ## >1080 string,=FLT4 (len=4), ["4-channel Startracker module sound data"], swap_endian=0
signature file-magic-auto312 { #signature file-magic-auto312 {
file-mime "audio/x-mod", 70 # file-mime "audio/x-mod", 70
file-magic /(.{1080})(FLT4)/ # file-magic /(.{1080})(FLT4)/
} #}
#
# >1080 string,=M!K! (len=4), ["4-channel Protracker module sound data"], swap_endian=0 ## >1080 string,=M!K! (len=4), ["4-channel Protracker module sound data"], swap_endian=0
signature file-magic-auto313 { #signature file-magic-auto313 {
file-mime "audio/x-mod", 70 # file-mime "audio/x-mod", 70
file-magic /(.{1080})(M\x21K\x21)/ # file-magic /(.{1080})(M\x21K\x21)/
} #}
#
# >1080 string,=M.K. (len=4), ["4-channel Protracker module sound data"], swap_endian=0 ## >1080 string,=M.K. (len=4), ["4-channel Protracker module sound data"], swap_endian=0
signature file-magic-auto314 { #signature file-magic-auto314 {
file-mime "audio/x-mod", 70 # file-mime "audio/x-mod", 70
file-magic /(.{1080})(M\x2eK\x2e)/ # file-magic /(.{1080})(M\x2eK\x2e)/
} #}
# >0 lelong&,=336851773 (0x1413f33d), ["SYSLINUX' LSS16 image data"], swap_endian=0 # >0 lelong&,=336851773 (0x1413f33d), ["SYSLINUX' LSS16 image data"], swap_endian=0
signature file-magic-auto315 { signature file-magic-auto315 {
@ -1410,11 +1318,11 @@ signature file-magic-auto388 {
file-magic /(\xca\xfe\xd0\x0d)(.{1})/ file-magic /(\xca\xfe\xd0\x0d)(.{1})/
} }
# >0 search/4096,=\documentstyle (len=14), ["LaTeX document text"], swap_endian=0 ## >0 search/4096,=\documentstyle (len=14), ["LaTeX document text"], swap_endian=0
signature file-magic-auto390 { #signature file-magic-auto390 {
file-mime "text/x-tex", 62 # file-mime "text/x-tex", 62
file-magic /(.*)(\x5cdocumentstyle)/ # file-magic /(.*)(\x5cdocumentstyle)/
} #}
# >0 string,=DOC (len=3), [""], swap_endian=0 # >0 string,=DOC (len=3), [""], swap_endian=0
# >>43 byte&,=0x14, ["Just System Word Processor Ichitaro v4"], swap_endian=0 # >>43 byte&,=0x14, ["Just System Word Processor Ichitaro v4"], swap_endian=0
@ -1469,47 +1377,47 @@ signature file-magic-auto406 {
file-magic /(BZh)/ file-magic /(BZh)/
} }
# >0 search/4096,=\documentclass (len=14), ["LaTeX 2e document text"], swap_endian=0 ## >0 search/4096,=\documentclass (len=14), ["LaTeX 2e document text"], swap_endian=0
signature file-magic-auto412 { #signature file-magic-auto412 {
file-mime "text/x-tex", 59 # file-mime "text/x-tex", 59
file-magic /(.*)(\x5cdocumentclass)/ # file-magic /(.*)(\x5cdocumentclass)/
} #}
#
# >0 search/4096,=\contentsline (len=13), ["LaTeX table of contents"], swap_endian=0 ## >0 search/4096,=\contentsline (len=13), ["LaTeX table of contents"], swap_endian=0
signature file-magic-auto414 { #signature file-magic-auto414 {
file-mime "text/x-tex", 58 # file-mime "text/x-tex", 58
file-magic /(.*)(\x5ccontentsline)/ # file-magic /(.*)(\x5ccontentsline)/
} #}
#
# >0 search/4096,=\chapter (len=8), ["LaTeX document text"], swap_endian=0 ## >0 search/4096,=\chapter (len=8), ["LaTeX document text"], swap_endian=0
signature file-magic-auto415 { #signature file-magic-auto415 {
file-mime "text/x-tex", 56 # file-mime "text/x-tex", 56
file-magic /(.*)(\x5cchapter)/ # file-magic /(.*)(\x5cchapter)/
} #}
#
# >0 search/4096,=\section (len=8), ["LaTeX document text"], swap_endian=0 ## >0 search/4096,=\section (len=8), ["LaTeX document text"], swap_endian=0
signature file-magic-auto416 { #signature file-magic-auto416 {
file-mime "text/x-tex", 56 # file-mime "text/x-tex", 56
file-magic /(.*)(\x5csection)/ # file-magic /(.*)(\x5csection)/
} #}
#
# >0 search/4096,=\setlength (len=10), ["LaTeX document text"], swap_endian=0 ## >0 search/4096,=\setlength (len=10), ["LaTeX document text"], swap_endian=0
signature file-magic-auto419 { #signature file-magic-auto419 {
file-mime "text/x-tex", 55 # file-mime "text/x-tex", 55
file-magic /(.*)(\x5csetlength)/ # file-magic /(.*)(\x5csetlength)/
} #}
#
# >0 search/1,=Common subdirectories: (len=23), ["diff output text"], swap_endian=0 ## >0 search/1,=Common subdirectories: (len=23), ["diff output text"], swap_endian=0
signature file-magic-auto422 { #signature file-magic-auto422 {
file-mime "text/x-diff", 53 # file-mime "text/x-diff", 53
file-magic /(.*)(Common subdirectories\x3a )/ # file-magic /(.*)(Common subdirectories\x3a )/
} #}
#
# >0 search/4096,=(custom-set-variables (len=22), ["Lisp/Scheme program text"], swap_endian=0 ## >0 search/4096,=(custom-set-variables (len=22), ["Lisp/Scheme program text"], swap_endian=0
signature file-magic-auto426 { #signature file-magic-auto426 {
file-mime "text/x-lisp", 52 # file-mime "text/x-lisp", 52
file-magic /(.*)(\x28custom\x2dset\x2dvariables )/ # file-magic /(.*)(\x28custom\x2dset\x2dvariables )/
} #}
# >0 string/b,=MZ (len=2), [""], swap_endian=0 # >0 string/b,=MZ (len=2), [""], swap_endian=0
signature file-magic-auto433 { signature file-magic-auto433 {
@ -1517,104 +1425,6 @@ signature file-magic-auto433 {
file-magic /(MZ)/ file-magic /(MZ)/
} }
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x10, ["MPEG ADTS, layer III, v1, 32 kbps"], swap_endian=0
signature file-magic-auto438 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x20, ["MPEG ADTS, layer III, v1, 40 kbps"], swap_endian=0
signature file-magic-auto439 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x30, ["MPEG ADTS, layer III, v1, 48 kbps"], swap_endian=0
signature file-magic-auto440 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x40, ["MPEG ADTS, layer III, v1, 56 kbps"], swap_endian=0
signature file-magic-auto441 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x50, ["MPEG ADTS, layer III, v1, 64 kbps"], swap_endian=0
signature file-magic-auto442 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x60, ["MPEG ADTS, layer III, v1, 80 kbps"], swap_endian=0
signature file-magic-auto443 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x70, ["MPEG ADTS, layer III, v1, 96 kbps"], swap_endian=0
signature file-magic-auto444 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x80, ["MPEG ADTS, layer III, v1, 112 kbps"], swap_endian=0
signature file-magic-auto445 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0x90, ["MPEG ADTS, layer III, v1, 128 kbps"], swap_endian=0
signature file-magic-auto446 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0xa0, ["MPEG ADTS, layer III, v1, 160 kbps"], swap_endian=0
signature file-magic-auto447 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0xb0, ["MPEG ADTS, layer III, v1, 192 kbps"], swap_endian=0
signature file-magic-auto448 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0xc0, ["MPEG ADTS, layer III, v1, 224 kbps"], swap_endian=0
signature file-magic-auto449 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0xd0, ["MPEG ADTS, layer III, v1, 256 kbps"], swap_endian=0
signature file-magic-auto450 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf])/
}
# >0 beshort&fffffffffffffffe,=-6 (0xfffa), [""], swap_endian=0
# >>2 byte&fffffffffffffff0,=0xe0, ["MPEG ADTS, layer III, v1, 320 kbps"], swap_endian=0
signature file-magic-auto451 {
file-mime "audio/mpeg", 40
file-magic /(\xff[\xfa\xfb])([\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef])/
}
# >20 string,=45 (len=2), [""], swap_endian=0 # >20 string,=45 (len=2), [""], swap_endian=0
# >>0 regex/1,=(^[0-9]{5})[acdnp][^bhlnqsu-z] (len=30), ["MARC21 Bibliographic"], swap_endian=0 # >>0 regex/1,=(^[0-9]{5})[acdnp][^bhlnqsu-z] (len=30), ["MARC21 Bibliographic"], swap_endian=0
signature file-magic-auto460 { signature file-magic-auto460 {
@ -1636,17 +1446,17 @@ signature file-magic-auto462 {
file-magic /(.{20})(45)(.*)((^[0-9]{5})[cdn][uvxy])/ file-magic /(.{20})(45)(.*)((^[0-9]{5})[cdn][uvxy])/
} }
# >0 search/4096,=\relax (len=6), ["LaTeX auxiliary file"], swap_endian=0 ## >0 search/4096,=\relax (len=6), ["LaTeX auxiliary file"], swap_endian=0
signature file-magic-auto463 { #signature file-magic-auto463 {
file-mime "text/x-tex", 51 # file-mime "text/x-tex", 51
file-magic /(.*)(\x5crelax)/ # file-magic /(.*)(\x5crelax)/
} #}
#
# >0 search/4096,=\begin (len=6), ["LaTeX document text"], swap_endian=0 ## >0 search/4096,=\begin (len=6), ["LaTeX document text"], swap_endian=0
signature file-magic-auto464 { #signature file-magic-auto464 {
file-mime "text/x-tex", 51 # file-mime "text/x-tex", 51
file-magic /.*\x5c(input|begin)/ # file-magic /.*\x5c(input|begin)/
} #}
# >0 beshort&,=-26368 (0x9900), ["PGP key public ring"], swap_endian=0 # >0 beshort&,=-26368 (0x9900), ["PGP key public ring"], swap_endian=0
signature file-magic-auto470 { signature file-magic-auto470 {
@ -1710,29 +1520,6 @@ signature file-magic-auto486 {
file-magic /(\xff[\xf0\xf1\xf8\xf9])/ file-magic /(\xff[\xf0\xf1\xf8\xf9])/
} }
# >0 beshort&fffffffffffffffe,=-30 (0xffe2), ["MPEG ADTS, layer III, v2.5"], swap_endian=0
signature file-magic-auto487 {
file-mime "audio/mpeg", 50
file-magic /(\xff[\xe2\xe3])/
}
# >0 beshort&fffffffffffffffe,=-10 (0xfff6), ["MPEG ADTS, layer I, v2"], swap_endian=0
signature file-magic-auto488 {
file-mime "audio/mpeg", 50
file-magic /(\xff[\xf6\xf7])/
}
# >0 beshort&fffffffffffffffe,=-14 (0xfff2), ["MPEG ADTS, layer III, v2"], swap_endian=0
signature file-magic-auto489 {
file-mime "audio/mpeg", 50
file-magic /(\xff[\xf2\xf3])/
}
# >0 beshort&fffffffffffffffe,=-4 (0xfffc), ["MPEG ADTS, layer II, v1"], swap_endian=0
signature file-magic-auto490 {
file-mime "audio/mpeg", 50
file-magic /(\xff[\xfc\xfd])/
}
# >0 beshort&,=-26367 (0x9901), ["GPG key public ring"], swap_endian=0 # >0 beshort&,=-26367 (0x9901), ["GPG key public ring"], swap_endian=0
signature file-magic-auto492 { signature file-magic-auto492 {
@ -1764,11 +1551,11 @@ signature file-magic-auto507 {
file-magic /(\x0b\x77)/ file-magic /(\x0b\x77)/
} }
# >0 search/1,=This is Info file (len=17), ["GNU Info text"], swap_endian=0 ## >0 search/1,=This is Info file (len=17), ["GNU Info text"], swap_endian=0
signature file-magic-auto528 { #signature file-magic-auto528 {
file-mime "text/x-info", 47 # file-mime "text/x-info", 47
file-magic /(.*)(This is Info file)/ # file-magic /(.*)(This is Info file)/
} #}
# >0 regex/s,=\`(\r\n|;|[[]|\377\376) (len=15), [""], swap_endian=0 # >0 regex/s,=\`(\r\n|;|[[]|\377\376) (len=15), [""], swap_endian=0
# >>&0 search/8192,=[ (len=1), [""], swap_endian=0 # >>&0 search/8192,=[ (len=1), [""], swap_endian=0
@ -1834,17 +1621,17 @@ signature file-magic-auto532 {
file-magic /(\`(\x0d\x0a|;|[[]|\xff\xfe))(.*)(\x5b)(^([Ww][iI][nN][sS][oO][cC][kK][Cc][Rr][Cc][Ll][iI][sS][tT]|[Oo][Ee][Mm][Cc][Pp][Ll])])/ file-magic /(\`(\x0d\x0a|;|[[]|\xff\xfe))(.*)(\x5b)(^([Ww][iI][nN][sS][oO][cC][kK][Cc][Rr][Cc][Ll][iI][sS][tT]|[Oo][Ee][Mm][Cc][Pp][Ll])])/
} }
# >0 search/1,=<MakerDictionary (len=16), ["FrameMaker Dictionary text"], swap_endian=0 ## >0 search/1,=<MakerDictionary (len=16), ["FrameMaker Dictionary text"], swap_endian=0
signature file-magic-auto544 { #signature file-magic-auto544 {
file-mime "application/x-mif", 46 # file-mime "application/x-mif", 46
file-magic /(.*)(\x3cMakerDictionary)/ # file-magic /(.*)(\x3cMakerDictionary)/
} #}
# >0 search/4096,=% -*-latex-*- (len=13), ["LaTeX document text"], swap_endian=0 ## >0 search/4096,=% -*-latex-*- (len=13), ["LaTeX document text"], swap_endian=0
signature file-magic-auto558 { #signature file-magic-auto558 {
file-mime "text/x-tex", 43 # file-mime "text/x-tex", 43
file-magic /(.*)(\x25 \x2d\x2a\x2dlatex\x2d\x2a\x2d)/ # file-magic /(.*)(\x25 \x2d\x2a\x2dlatex\x2d\x2a\x2d)/
} #}
# The use of non-sequential offsets and relational operations made the # The use of non-sequential offsets and relational operations made the
# autogenerated signature incorrrect. # autogenerated signature incorrrect.
@ -1912,59 +1699,59 @@ signature file-magic-auto578 {
file-magic /(^dnl )/ file-magic /(^dnl )/
} }
# >0 search/4096,=(defparam (len=10), ["Lisp/Scheme program text"], swap_endian=0 ## >0 search/4096,=(defparam (len=10), ["Lisp/Scheme program text"], swap_endian=0
signature file-magic-auto583 { #signature file-magic-auto583 {
file-mime "text/x-lisp", 40 # file-mime "text/x-lisp", 40
file-magic /(.*)(\x28defparam )/ # file-magic /(.*)(\x28defparam )/
} #}
#
# >0 search/4096,=(autoload (len=10), ["Lisp/Scheme program text"], swap_endian=0 ## >0 search/4096,=(autoload (len=10), ["Lisp/Scheme program text"], swap_endian=0
signature file-magic-auto584 { #signature file-magic-auto584 {
file-mime "text/x-lisp", 40 # file-mime "text/x-lisp", 40
file-magic /(.*)(\x28autoload )/ # file-magic /(.*)(\x28autoload )/
} #}
#
# >0 search/1,=<TeXmacs| (len=9), ["TeXmacs document text"], swap_endian=0 ## >0 search/1,=<TeXmacs| (len=9), ["TeXmacs document text"], swap_endian=0
signature file-magic-auto589 { #signature file-magic-auto589 {
file-mime "text/texmacs", 39 # file-mime "text/texmacs", 39
file-magic /(.*)(\x3cTeXmacs\x7c)/ # file-magic /(.*)(\x3cTeXmacs\x7c)/
} #}
#
# >0 search/1,=/* XPM */ (len=9), ["X pixmap image text"], swap_endian=0 ## >0 search/1,=/* XPM */ (len=9), ["X pixmap image text"], swap_endian=0
signature file-magic-auto590 { #signature file-magic-auto590 {
file-mime "image/x-xpmi", 39 # file-mime "image/x-xpmi", 39
file-magic /(.*)(\x2f\x2a XPM \x2a\x2f)/ # file-magic /(.*)(\x2f\x2a XPM \x2a\x2f)/
} #}
#
# >0 search/8192,="LIBHDR" (len=8), ["BCPL source text"], swap_endian=0 ## >0 search/8192,="LIBHDR" (len=8), ["BCPL source text"], swap_endian=0
signature file-magic-auto596 { #signature file-magic-auto596 {
file-mime "text/x-bcpl", 38 # file-mime "text/x-bcpl", 38
file-magic /(.*)(\x22LIBHDR\x22)/ # file-magic /(.*)(\x22LIBHDR\x22)/
} #}
#
# >0 search/4096,=(defvar (len=8), ["Lisp/Scheme program text"], swap_endian=0 ## >0 search/4096,=(defvar (len=8), ["Lisp/Scheme program text"], swap_endian=0
signature file-magic-auto598 { #signature file-magic-auto598 {
file-mime "text/x-lisp", 38 # file-mime "text/x-lisp", 38
file-magic /(.*)(\x28defvar )/ # file-magic /(.*)(\x28defvar )/
} #}
#
# >0 search/1,=Only in (len=8), ["diff output text"], swap_endian=0 ## >0 search/1,=Only in (len=8), ["diff output text"], swap_endian=0
signature file-magic-auto600 { #signature file-magic-auto600 {
file-mime "text/x-diff", 38 # file-mime "text/x-diff", 38
file-magic /(.*)(Only in )/ # file-magic /(.*)(Only in )/
} #}
#
# >0 search/8192,="libhdr" (len=8), ["BCPL source text"], swap_endian=0 ## >0 search/8192,="libhdr" (len=8), ["BCPL source text"], swap_endian=0
signature file-magic-auto604 { #signature file-magic-auto604 {
file-mime "text/x-bcpl", 38 # file-mime "text/x-bcpl", 38
file-magic /(.*)(\x22libhdr\x22)/ # file-magic /(.*)(\x22libhdr\x22)/
} #}
#
# >0 search/4096,=(defun (len=7), ["Lisp/Scheme program text"], swap_endian=0 ## >0 search/4096,=(defun (len=7), ["Lisp/Scheme program text"], swap_endian=0
signature file-magic-auto607 { #signature file-magic-auto607 {
file-mime "text/x-lisp", 37 # file-mime "text/x-lisp", 37
file-magic /(.*)(\x28defun )/ # file-magic /(.*)(\x28defun )/
} #}
# >0 regex,=^msgid (len=7), ["GNU gettext message catalogue text"], swap_endian=0 # >0 regex,=^msgid (len=7), ["GNU gettext message catalogue text"], swap_endian=0
signature file-magic-auto608 { signature file-magic-auto608 {
@ -1973,7 +1760,7 @@ signature file-magic-auto608 {
} }
# >0 search/4096,=(setq (len=6), ["Lisp/Scheme program text"], swap_endian=0 # >0 search/4096,=(setq (len=6), ["Lisp/Scheme program text"], swap_endian=0
signature file-magic-auto611 { #signature file-magic-auto611 {
file-mime "text/x-lisp", 36 # file-mime "text/x-lisp", 36
file-magic /(.*)(\x28setq )/ # file-magic /(.*)(\x28setq )/
} #}

View file

@ -1,23 +1,19 @@
# >0 string,=FLV (len=3), ["Macromedia Flash Video"], swap_endian=0 # Macromedia Flash Video
signature file-magic-auto400 { signature file-flv {
file-mime "video/x-flv", 60 file-mime "video/x-flv", 60
file-magic /(FLV)/ file-magic /^FLV/
} }
# >4 leshort&,=-20719 (0xaf11), [""], swap_endian=0 # FLI animation
# >>8 leshort&,=320 (0x0140), [""], swap_endian=0 signature file-fli {
# >>>10 leshort&,=200 (0x00c8), [""], swap_endian=0
# >>>>12 leshort&,=8 (0x0008), ["FLI animation, 320x200x8"], swap_endian=0
signature file-magic-auto452 {
file-mime "video/x-fli", 50 file-mime "video/x-fli", 50
file-magic /(.{4})(\x11\xaf)(.{2})(\x40\x01)(\xc8\x00)(\x08\x00)/ file-magic /^.{4}\x11\xaf/
} }
# >4 leshort&,=-20718 (0xaf12), [""], swap_endian=0 # FLC animation
# >>12 leshort&,=8 (0x0008), ["FLC animation"], swap_endian=0 signature file-flc {
signature file-magic-auto453 {
file-mime "video/x-flc", 50 file-mime "video/x-flc", 50
file-magic /(.{4})(\x12\xaf)(.{6})(\x08\x00)/ file-magic /^.{4}\x12\xaf/
} }
# Motion JPEG 2000 # Motion JPEG 2000
@ -26,193 +22,74 @@ signature file-mj2 {
file-magic /\x00\x00\x00\x0cjP \x0d\x0a\x87\x0a.{8}mjp2/ file-magic /\x00\x00\x00\x0cjP \x0d\x0a\x87\x0a.{8}mjp2/
} }
# >0 string,=\212MNG (len=4), ["MNG video data,"], swap_endian=0 # MNG video
signature file-magic-auto274 { signature file-mng {
file-mime "video/x-mng", 70 file-mime "video/x-mng", 70
file-magic /(\x8aMNG)/ file-magic /^\x8aMNG/
} }
# >0 string,=\213JNG (len=4), ["JNG video data,"], swap_endian=0 # JNG video
signature file-magic-auto275 { signature file-jng {
file-mime "video/x-jng", 70 file-mime "video/x-jng", 70
file-magic /(\x8bJNG)/ file-magic /^\x8bJNG/
} }
# >0 belong&,=443 (0x000001bb), [""], swap_endian=0 # Generic MPEG container
signature file-magic-auto204 { signature file-mpeg {
file-mime "video/mpeg", 71 file-mime "video/mpeg", 50
file-magic /(\x00\x00\x01\xbb)/ file-magic /(\x00\x00\x01[\xb0-\xbb])/
} }
# >0 belong&,=432 (0x000001b0), [""], swap_endian=0 # MPV
signature file-magic-auto206 { signature file-mpv {
file-mime "video/mp4v-es", 71
file-magic /(\x00\x00\x01\xb0)/
}
# >0 belong&,=437 (0x000001b5), [""], swap_endian=0
signature file-magic-auto207 {
file-mime "video/mp4v-es", 71
file-magic /(\x00\x00\x01\xb5)/
}
# >0 belong&,=435 (0x000001b3), [""], swap_endian=0
signature file-magic-auto209 {
file-mime "video/mpv", 71 file-mime "video/mpv", 71
file-magic /(\x00\x00\x01\xb3)/ file-magic /(\x00\x00\x01\xb3)/
} }
# >0 belong&,=1 (0x00000001), [""], swap_endian=0 # H.264
# >>4 byte&0000001f,=0x07, [""], swap_endian=0 signature file-h264 {
signature file-magic-auto211 {
file-mime "video/h264", 41 file-mime "video/h264", 41
file-magic /(\x00\x00\x00\x01)([\x07\x27\x47\x67\x87\xa7\xc7\xe7])/ file-magic /(\x00\x00\x00\x01)([\x07\x27\x47\x67\x87\xa7\xc7\xe7])/
} }
# >0 belong&ffffffffffffff00,=256 (0x00000100), [""], swap_endian=0 # WebM video
# >>3 byte&,=0xba, ["MPEG sequence"], swap_endian=0 signature file-webm {
signature file-magic-auto213 {
file-mime "video/mpeg", 40
file-magic /(\x00\x00\x01\xba)/
}
# >0 belong&ffffffffffffff00,=256 (0x00000100), [""], swap_endian=0
# >>3 byte&,=0xb0, ["MPEG sequence, v4"], swap_endian=0
signature file-magic-auto214 {
file-mime "video/mpeg4-generic", 40
file-magic /(\x00\x00\x01\xb0)/
}
# >0 belong&ffffffffffffff00,=256 (0x00000100), [""], swap_endian=0
# >>3 byte&,=0xb5, ["MPEG sequence, v4"], swap_endian=0
signature file-magic-auto215 {
file-mime "video/mpeg4-generic", 40
file-magic /(\x00\x00\x01\xb5)/
}
# >0 belong&ffffffffffffff00,=256 (0x00000100), [""], swap_endian=0
# >>3 byte&,=0xb3, ["MPEG sequence"], swap_endian=0
signature file-magic-auto216 {
file-mime "video/mpeg", 40
file-magic /(\x00\x00\x01\xb3)/
}
# >0 belong&,=442 (0x000001ba), [""], swap_endian=0
# >>4 byte&,^0x40, [""], swap_endian=0
signature file-magic-auto251 {
file-mime "video/mpeg", 21
file-magic /(\x00\x00\x01\xba)([\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf])/
}
# >0 belong&,=440786851 (0x1a45dfa3), [""], swap_endian=0
# >>4 search/4096,=B\202 (len=2), [""], swap_endian=0
# >>>&1 string,=webm (len=4), ["WebM"], swap_endian=0
signature file-magic-auto224 {
file-mime "video/webm", 70 file-mime "video/webm", 70
file-magic /(\x1a\x45\xdf\xa3)(.*)(B\x82)(.{1})(webm)/ file-magic /(\x1a\x45\xdf\xa3)(.*)(B\x82)(.{1})(webm)/
} }
# >0 belong&,=440786851 (0x1a45dfa3), [""], swap_endian=0 # Matroska video
# >>4 search/4096,=B\202 (len=2), [""], swap_endian=0 signature file-matroska {
# >>>&1 string,=matroska (len=8), ["Matroska data"], swap_endian=0
signature file-magic-auto225 {
file-mime "video/x-matroska", 110 file-mime "video/x-matroska", 110
file-magic /(\x1a\x45\xdf\xa3)(.*)(B\x82)(.{1})(matroska)/ file-magic /(\x1a\x45\xdf\xa3)(.*)(B\x82)(.{1})(matroska)/
} }
# >0 belong&,=442 (0x000001ba), [""], swap_endian=0 # MP2P
# >>4 byte&,&0x40, [""], swap_endian=0 signature file-mp2p {
signature file-magic-auto250 {
file-mime "video/mp2p", 21 file-mime "video/mp2p", 21
file-magic /(\x00\x00\x01\xba)([\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff])/ file-magic /\x00\x00\x01\xba([\x40-\x7f\xc0-\xff])/
} }
# >0 string,=MOVI (len=4), ["Silicon Graphics movie file"], swap_endian=0 # Silicon Graphics video
signature file-magic-auto252 { signature file-sgi-movie {
file-mime "video/x-sgi-movie", 70 file-mime "video/x-sgi-movie", 70
file-magic /(MOVI)/ file-magic /^MOVI/
} }
# >4 string,=moov (len=4), ["Apple QuickTime"], swap_endian=0 # Apple QuickTime movie
signature file-magic-auto253 { signature file-quicktime {
file-mime "video/quicktime", 70 file-mime "video/quicktime", 70
file-magic /(.{4})(moov)/ file-magic /^....(mdat|moov)/
} }
# >4 string,=mdat (len=4), ["Apple QuickTime movie (unoptimized)"], swap_endian=0 # MPEG v4 video
signature file-magic-auto254 { signature file-mp4 {
file-mime "video/quicktime", 70
file-magic /(.{4})(mdat)/
}
# >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0
# >>8 string,=isom (len=4), [", MPEG v4 system, version 1"], swap_endian=0
signature file-magic-auto257 {
file-mime "video/mp4", 70 file-mime "video/mp4", 70
file-magic /(.{4})(ftyp)(isom)/ file-magic /(.{4})(ftyp)(isom|mp4[12])/
} }
# >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0 # 3GPP Video
# >>8 string,=mp41 (len=4), [", MPEG v4 system, version 1"], swap_endian=0 signature file-3gpp {
signature file-magic-auto258 {
file-mime "video/mp4", 70
file-magic /(.{4})(ftyp)(mp41)/
}
# >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0
# >>8 string,=mp42 (len=4), [", MPEG v4 system, version 2"], swap_endian=0
signature file-magic-auto259 {
file-mime "video/mp4", 70
file-magic /(.{4})(ftyp)(mp42)/
}
# >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0
# >>8 string,=3ge (len=3), [", MPEG v4 system, 3GPP"], swap_endian=0
signature file-magic-auto261 {
file-mime "video/3gpp", 60 file-mime "video/3gpp", 60
file-magic /(.{4})(ftyp)(3ge)/ file-magic /^....(ftyp)(3g[egps2]|avc1|mmp4)/
} }
# >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0
# >>8 string,=3gg (len=3), [", MPEG v4 system, 3GPP"], swap_endian=0
signature file-magic-auto262 {
file-mime "video/3gpp", 60
file-magic /(.{4})(ftyp)(3gg)/
}
# >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0
# >>8 string,=3gp (len=3), [", MPEG v4 system, 3GPP"], swap_endian=0
signature file-magic-auto263 {
file-mime "video/3gpp", 60
file-magic /(.{4})(ftyp)(3gp)/
}
# >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0
# >>8 string,=3gs (len=3), [", MPEG v4 system, 3GPP"], swap_endian=0
signature file-magic-auto264 {
file-mime "video/3gpp", 60
file-magic /(.{4})(ftyp)(3gs)/
}
# >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0
# >>8 string,=3g2 (len=3), [", MPEG v4 system, 3GPP2"], swap_endian=0
signature file-magic-auto265 {
file-mime "video/3gpp2", 60
file-magic /(.{4})(ftyp)(3g2)/
}
# >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0
# >>8 string,=mmp4 (len=4), [", MPEG v4 system, 3GPP Mobile"], swap_endian=0
signature file-magic-auto266 {
file-mime "video/mp4", 70
file-magic /(.{4})(ftyp)(mmp4)/
}
# >4 string,=ftyp (len=4), ["ISO Media"], swap_endian=0
# >>8 string,=avc1 (len=4), [", MPEG v4 system, 3GPP JVT AVC"], swap_endian=0
signature file-magic-auto267 {
file-mime "video/3gpp", 70
file-magic /(.{4})(ftyp)(avc1)/
}