use crate::sig::Signature;
thread_local!(pub static SIGNATURES: Vec<Signature<'static>> = vec![
Signature {
description: "High Efficiency Image Container (HEIC)",
class: "Multimedia",
exts: vec![
"AVIF",
],
offset: 0,
header: vec![
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "JPEG2000 image files",
class: "Picture",
exts: vec![
"JP2",
],
offset: 0,
header: vec![
0,
0,
0,
12,
106,
80,
32,
32,
],
trailer: vec![
],
},
Signature {
description: "3GPP multimedia files",
class: "Multimedia",
exts: vec![
"3GP",
],
offset: 0,
header: vec![
0,
0,
0,
20,
102,
116,
121,
112,
],
trailer: vec![
],
},
Signature {
description: "MPEG-4 v1",
class: "Multimedia",
exts: vec![
"MP4",
],
offset: 0,
header: vec![
0,
0,
0,
20,
102,
116,
121,
112,
105,
115,
111,
109,
],
trailer: vec![
],
},
Signature {
description: "3rd Generation Partnership Project 3GPP",
class: "Multimedia",
exts: vec![
"3GG",
"3GP",
"3G2",
],
offset: 0,
header: vec![
0,
0,
0,
20,
102,
116,
121,
112,
],
trailer: vec![
],
},
Signature {
description: "Windows Disk Image",
class: "Windows",
exts: vec![
"TBI",
],
offset: 0,
header: vec![
0,
0,
0,
0,
20,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Bitcoin Core wallet.dat file",
class: "Finance",
exts: vec![
"DAT",
],
offset: 8,
header: vec![
0,
0,
0,
0,
98,
49,
5,
0,
9,
0,
0,
0,
0,
32,
0,
0,
0,
9,
0,
0,
0,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "MPEG-4 video_1",
class: "Multimedia",
exts: vec![
"3GP5",
"M4V",
"MP4",
],
offset: 0,
header: vec![
0,
0,
0,
24,
102,
116,
121,
112,
],
trailer: vec![
],
},
Signature {
description: "MPEG-4 video_2",
class: "Multimedia",
exts: vec![
"MP4",
],
offset: 0,
header: vec![
0,
0,
0,
28,
102,
116,
121,
112,
],
trailer: vec![
],
},
Signature {
description: "3GPP2 multimedia files",
class: "Multimedia",
exts: vec![
"3GP",
],
offset: 0,
header: vec![
0,
0,
0,
32,
102,
116,
121,
112,
],
trailer: vec![
],
},
Signature {
description: "Apple audio and video",
class: "Multimedia",
exts: vec![
"M4A",
],
offset: 0,
header: vec![
0,
0,
0,
32,
102,
116,
121,
112,
77,
52,
65,
],
trailer: vec![
],
},
Signature {
description: "3rd Generation Partnership Project 3GPP2",
class: "Multimedia",
exts: vec![
"3GG",
"3GP",
"3G2",
],
offset: 0,
header: vec![
0,
0,
0,
32,
102,
116,
121,
112,
],
trailer: vec![
],
},
Signature {
description: "Windows icon|printer spool file",
class: "Windows",
exts: vec![
"ICO",
"SPL",
],
offset: 0,
header: vec![
0,
0,
1,
0,
],
trailer: vec![
],
},
Signature {
description: "MPEG video file",
class: "Multimedia",
exts: vec![
"MPG",
],
offset: 0,
header: vec![
0,
0,
1,
179,
],
trailer: vec![
0,
0,
1,
183,
],
},
Signature {
description: "DVD video file",
class: "Multimedia",
exts: vec![
"MPG",
"VOB",
],
offset: 0,
header: vec![
0,
0,
1,
186,
],
trailer: vec![
0,
0,
1,
185,
],
},
Signature {
description: "Windows cursor",
class: "Windows",
exts: vec![
"CUR",
],
offset: 0,
header: vec![
0,
0,
2,
0,
],
trailer: vec![
],
},
Signature {
description: "Compucon-Singer embroidery design file",
class: "Miscellaneous",
exts: vec![
"XXX",
],
offset: 0,
header: vec![
0,
0,
0,
0,
0,
0,
0,
0,
0,
0,
0,
0,
0,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "QuattroPro spreadsheet",
class: "Spreadsheet",
exts: vec![
"WB2",
],
offset: 0,
header: vec![
0,
0,
2,
0,
],
trailer: vec![
],
},
Signature {
description: "Amiga Hunk executable",
class: "System",
exts: vec![
],
offset: 0,
header: vec![
0,
0,
3,
243,
],
trailer: vec![
],
},
Signature {
description: "Wii images container",
class: "System",
exts: vec![
"TPL",
],
offset: 0,
header: vec![
0,
32,
175,
48,
],
trailer: vec![
],
},
Signature {
description: "Lotus 1-2-3 (v1)",
class: "Spreadsheet",
exts: vec![
"WK1",
],
offset: 0,
header: vec![
0,
0,
2,
0,
6,
4,
6,
0,
],
trailer: vec![
],
},
Signature {
description: "Lotus 1-2-3 (v3)",
class: "Spreadsheet",
exts: vec![
"WK3",
],
offset: 0,
header: vec![
0,
0,
26,
0,
0,
16,
4,
0,
],
trailer: vec![
],
},
Signature {
description: "Lotus 1-2-3 (v4-v5)",
class: "Spreadsheet",
exts: vec![
"WK4",
"WK5",
],
offset: 0,
header: vec![
0,
0,
26,
0,
2,
16,
4,
0,
],
trailer: vec![
],
},
Signature {
description: "Lotus 1-2-3 (v9)",
class: "Spreadsheet",
exts: vec![
"123",
],
offset: 0,
header: vec![
0,
0,
26,
0,
5,
16,
4,
],
trailer: vec![
],
},
Signature {
description: "Quark Express (Intel)",
class: "Presentation",
exts: vec![
"QXD",
],
offset: 0,
header: vec![
0,
0,
73,
73,
88,
80,
82,
],
trailer: vec![
],
},
Signature {
description: "Quark Express (Motorola)",
class: "Presentation",
exts: vec![
"QXD",
],
offset: 0,
header: vec![
0,
0,
77,
77,
88,
80,
82,
],
trailer: vec![
],
},
Signature {
description: "Windows Help file_1",
class: "Windows",
exts: vec![
"HLP",
],
offset: 6,
header: vec![
0,
0,
255,
255,
255,
255,
],
trailer: vec![
],
},
Signature {
description: "TrueType font file",
class: "Windows",
exts: vec![
"TTF",
],
offset: 0,
header: vec![
0,
1,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Microsoft Money file",
class: "Finance",
exts: vec![
"MNY",
],
offset: 0,
header: vec![
0,
1,
0,
0,
77,
83,
73,
83,
65,
77,
32,
68,
97,
116,
97,
98,
97,
115,
101,
],
trailer: vec![
],
},
Signature {
description: "Microsoft Access 2007",
class: "Database",
exts: vec![
"ACCDB",
],
offset: 0,
header: vec![
0,
1,
0,
0,
83,
116,
97,
110,
100,
97,
114,
100,
32,
65,
67,
69,
32,
68,
66,
],
trailer: vec![
],
},
Signature {
description: "Microsoft Access",
class: "Database",
exts: vec![
"MDB",
],
offset: 0,
header: vec![
0,
1,
0,
0,
83,
116,
97,
110,
100,
97,
114,
100,
32,
74,
101,
116,
32,
68,
66,
],
trailer: vec![
],
},
Signature {
description: "Palm Address Book Archive",
class: "Mobile",
exts: vec![
"ABA",
],
offset: 0,
header: vec![
0,
1,
66,
65,
],
trailer: vec![
],
},
Signature {
description: "Palm DateBook Archive",
class: "Mobile",
exts: vec![
"DBA",
],
offset: 0,
header: vec![
0,
1,
66,
68,
],
trailer: vec![
],
},
Signature {
description: "Netscape Navigator (v4) database",
class: "Network",
exts: vec![
"DB",
],
offset: 0,
header: vec![
0,
6,
21,
97,
0,
0,
0,
2,
0,
0,
4,
210,
0,
0,
16,
0,
],
trailer: vec![
],
},
Signature {
description: "Mbox table of contents file",
class: "E-mail",
exts: vec![
],
offset: 0,
header: vec![
0,
13,
187,
160,
],
trailer: vec![
],
},
Signature {
description: "FLIC animation",
class: "Miscellaneous",
exts: vec![
"FLI",
],
offset: 0,
header: vec![
0,
17,
],
trailer: vec![
],
},
Signature {
description: "BIOS details in RAM",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
0,
20,
0,
0,
1,
2,
],
trailer: vec![
],
},
Signature {
description: "Netscape Communicator (v4) mail folder",
class: "Email",
exts: vec![
"SNM",
],
offset: 0,
header: vec![
0,
30,
132,
144,
0,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "PowerPoint presentation subheader_1",
class: "Presentation",
exts: vec![
"PPT",
],
offset: 512,
header: vec![
0,
110,
30,
240,
],
trailer: vec![
],
},
Signature {
description: "Webex Advanced Recording Format",
class: "Video",
exts: vec![
"ARF",
],
offset: 0,
header: vec![
1,
0,
2,
0,
],
trailer: vec![
],
},
Signature {
description: "Firebird and Interbase database files",
class: "Database",
exts: vec![
"FDB",
"GDB",
],
offset: 0,
header: vec![
1,
0,
57,
48,
],
trailer: vec![
],
},
Signature {
description: "The Bat! Message Base Index",
class: "Email",
exts: vec![
"TBI",
],
offset: 0,
header: vec![
1,
1,
71,
25,
164,
0,
0,
0,
0,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "SQL Data Base",
class: "Database",
exts: vec![
"MDF",
],
offset: 0,
header: vec![
1,
15,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Novell LANalyzer capture file",
class: "Network",
exts: vec![
"TR1",
],
offset: 0,
header: vec![
1,
16,
],
trailer: vec![
],
},
Signature {
description: "Silicon Graphics RGB Bitmap",
class: "Picture",
exts: vec![
"RGB",
],
offset: 0,
header: vec![
1,
218,
1,
1,
0,
3,
],
trailer: vec![
],
},
Signature {
description: "Micrografx vector graphic file",
class: "Picture",
exts: vec![
"DRW",
],
offset: 0,
header: vec![
1,
255,
2,
4,
3,
2,
],
trailer: vec![
],
},
Signature {
description: "Digital Speech Standard file",
class: "Multimedia",
exts: vec![
"DSS",
],
offset: 0,
header: vec![
2,
100,
115,
115,
],
trailer: vec![
],
},
Signature {
description: "MapInfo Native Data Format",
class: "Navigation",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
3,
],
trailer: vec![
],
},
Signature {
description: "dBASE III file",
class: "Database",
exts: vec![
"DB3",
],
offset: 0,
header: vec![
3,
],
trailer: vec![
],
},
Signature {
description: "Quicken price history",
class: "Finance",
exts: vec![
"QPH",
],
offset: 0,
header: vec![
3,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Nokia PC Suite Content Copier file",
class: "Multimedia",
exts: vec![
"NFC",
],
offset: 0,
header: vec![
3,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Approach index file",
class: "Database",
exts: vec![
"ADX",
],
offset: 0,
header: vec![
3,
0,
0,
0,
65,
80,
80,
82,
],
trailer: vec![
],
},
Signature {
description: "Digital Speech Standard (v3)",
class: "Audio",
exts: vec![
"DSS",
],
offset: 0,
header: vec![
3,
100,
115,
115,
],
trailer: vec![
],
},
Signature {
description: "dBASE IV file",
class: "Database",
exts: vec![
"DB4",
],
offset: 0,
header: vec![
4,
],
trailer: vec![
],
},
Signature {
description: "INFO2 Windows recycle bin_1",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
4,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "INFO2 Windows recycle bin_2",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
5,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Adobe InDesign",
class: "Media",
exts: vec![
"INDD",
],
offset: 0,
header: vec![
6,
6,
237,
245,
216,
29,
70,
229,
189,
49,
239,
231,
254,
116,
183,
29,
],
trailer: vec![
],
},
Signature {
description: "Material Exchange Format",
class: "Media",
exts: vec![
"MXF",
],
offset: 0,
header: vec![
6,
14,
43,
52,
2,
5,
1,
1,
13,
1,
2,
1,
1,
2,
],
trailer: vec![
],
},
Signature {
description: "Generic drawing programs",
class: "Presentation",
exts: vec![
"DRW",
],
offset: 0,
header: vec![
7,
],
trailer: vec![
],
},
Signature {
description: "SkinCrafter skin",
class: "Miscellaneous",
exts: vec![
"SKF",
],
offset: 0,
header: vec![
7,
83,
75,
70,
],
trailer: vec![
],
},
Signature {
description: "DesignTools 2D Design file",
class: "Miscellaneous",
exts: vec![
"DTD",
],
offset: 0,
header: vec![
7,
100,
116,
50,
100,
100,
116,
100,
],
trailer: vec![
],
},
Signature {
description: "dBASE IV or dBFast configuration file",
class: "Database",
exts: vec![
"DB",
],
offset: 0,
header: vec![
8,
],
trailer: vec![
],
},
Signature {
description: "Excel spreadsheet subheader_1",
class: "Spreadsheet",
exts: vec![
"XLS",
],
offset: 512,
header: vec![
9,
8,
16,
0,
0,
6,
5,
0,
],
trailer: vec![
],
},
Signature {
description: "ZSOFT Paintbrush file_1",
class: "Presentation",
exts: vec![
"PCX",
],
offset: 0,
header: vec![
10,
2,
1,
1,
],
trailer: vec![
],
},
Signature {
description: "ZSOFT Paintbrush file_2",
class: "Presentation",
exts: vec![
"PCX",
],
offset: 0,
header: vec![
10,
3,
1,
1,
],
trailer: vec![
],
},
Signature {
description: "ZSOFT Paintbrush file_3",
class: "Presentation",
exts: vec![
"PCX",
],
offset: 0,
header: vec![
10,
5,
1,
1,
],
trailer: vec![
],
},
Signature {
description: "MultiBit Bitcoin wallet file",
class: "e-money",
exts: vec![
"WALLET",
],
offset: 0,
header: vec![
10,
22,
111,
114,
103,
46,
98,
105,
116,
99,
111,
105,
110,
46,
112,
114,
],
trailer: vec![
],
},
Signature {
description: "Monochrome Picture TIFF bitmap",
class: "Picture",
exts: vec![
"MP",
],
offset: 0,
header: vec![
12,
237,
],
trailer: vec![
],
},
Signature {
description: "DeskMate Document",
class: "Word processing suite",
exts: vec![
"DOC",
],
offset: 0,
header: vec![
13,
68,
79,
67,
],
trailer: vec![
],
},
Signature {
description: "Nero CD compilation",
class: "Miscellaneous",
exts: vec![
"NRI",
],
offset: 0,
header: vec![
14,
78,
101,
114,
111,
73,
83,
79,
],
trailer: vec![
],
},
Signature {
description: "DeskMate Worksheet",
class: "Word processing suite",
exts: vec![
"WKS",
],
offset: 0,
header: vec![
14,
87,
75,
83,
],
trailer: vec![
],
},
Signature {
description: "PowerPoint presentation subheader_2",
class: "Presentation",
exts: vec![
"PPT",
],
offset: 512,
header: vec![
15,
0,
232,
3,
],
trailer: vec![
],
},
Signature {
description: "Sibelius Music - Score",
class: "Multimedia",
exts: vec![
"SIB",
],
offset: 0,
header: vec![
15,
83,
73,
66,
69,
76,
73,
85,
83,
],
trailer: vec![
],
},
Signature {
description: "Easy CD Creator 5 Layout file",
class: "Utility",
exts: vec![
"CL5",
],
offset: 0,
header: vec![
16,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Windows prefetch file",
class: "Windows",
exts: vec![
"PF",
],
offset: 0,
header: vec![
17,
0,
0,
0,
83,
67,
67,
65,
],
trailer: vec![
],
},
Signature {
description: "Lotus Notes database template",
class: "Spreadsheet",
exts: vec![
"NTF",
],
offset: 0,
header: vec![
26,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Lotus Notes database",
class: "Spreadsheet",
exts: vec![
"NSF",
],
offset: 0,
header: vec![
26,
0,
0,
4,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "LH archive (old vers.-type 1)",
class: "Compressed archive",
exts: vec![
"ARC",
],
offset: 0,
header: vec![
26,
2,
],
trailer: vec![
],
},
Signature {
description: "LH archive (old vers.-type 2)",
class: "Compressed archive",
exts: vec![
"ARC",
],
offset: 0,
header: vec![
26,
3,
],
trailer: vec![
],
},
Signature {
description: "LH archive (old vers.-type 3)",
class: "Compressed archive",
exts: vec![
"ARC",
],
offset: 0,
header: vec![
26,
4,
],
trailer: vec![
],
},
Signature {
description: "LH archive (old vers.-type 4)",
class: "Compressed archive",
exts: vec![
"ARC",
],
offset: 0,
header: vec![
26,
8,
],
trailer: vec![
],
},
Signature {
description: "LH archive (old vers.-type 5)",
class: "Compressed archive",
exts: vec![
"ARC",
],
offset: 0,
header: vec![
26,
9,
],
trailer: vec![
],
},
Signature {
description: "Compressed archive file",
class: "Compressed archive",
exts: vec![
"PAK",
],
offset: 0,
header: vec![
26,
11,
],
trailer: vec![
],
},
Signature {
description: "WinPharoah capture file",
class: "Network",
exts: vec![
"ETH",
],
offset: 0,
header: vec![
26,
53,
1,
0,
],
trailer: vec![
],
},
Signature {
description: "WebM video file",
class: "Multimedia",
exts: vec![
"WEBM",
],
offset: 0,
header: vec![
26,
69,
223,
163,
],
trailer: vec![
],
},
Signature {
description: "Matroska stream file_1",
class: "Multimedia",
exts: vec![
"MKV",
],
offset: 0,
header: vec![
26,
69,
223,
163,
],
trailer: vec![
],
},
Signature {
description: "Matroska stream file_2",
class: "Multimedia",
exts: vec![
"MKV",
],
offset: 0,
header: vec![
26,
69,
223,
163,
147,
66,
130,
136,
],
trailer: vec![
],
},
Signature {
description: "Runtime Software disk image",
class: "Miscellaneous",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
26,
82,
84,
83,
32,
67,
79,
77,
],
trailer: vec![
],
},
Signature {
description: "WordStar Version 5.0-6.0 document",
class: "Word processing suite",
exts: vec![
"WS",
],
offset: 0,
header: vec![
29,
125,
],
trailer: vec![
],
},
Signature {
description: "GZIP archive file",
class: "Compressed archive",
exts: vec![
"GZ",
],
offset: 0,
header: vec![
31,
139,
8,
],
trailer: vec![
],
},
Signature {
description: "VLC Player Skin file",
class: "Miscellaneous",
exts: vec![
"VLT",
],
offset: 0,
header: vec![
31,
139,
8,
],
trailer: vec![
],
},
Signature {
description: "Synology router configuration backup file",
class: "Network",
exts: vec![
"DSS",
],
offset: 0,
header: vec![
31,
139,
8,
0,
],
trailer: vec![
],
},
Signature {
description: "Compressed tape archive_1",
class: "Compressed archive",
exts: vec![
"TAR.Z",
],
offset: 0,
header: vec![
31,
157,
144,
],
trailer: vec![
],
},
Signature {
description: "Compressed tape archive_2",
class: "Compressed archive",
exts: vec![
"TAR.Z",
],
offset: 0,
header: vec![
31,
160,
],
trailer: vec![
],
},
Signature {
description: "MapInfo Sea Chart",
class: "Navigation",
exts: vec![
"BSB",
],
offset: 0,
header: vec![
33,
],
trailer: vec![
],
},
Signature {
description: "NOAA Raster Navigation Chart (RNC) file",
class: "Navigation",
exts: vec![
"BSB",
],
offset: 0,
header: vec![
33,
13,
10,
67,
82,
82,
47,
84,
104,
105,
115,
32,
101,
108,
101,
99,
],
trailer: vec![
],
},
Signature {
description: "AIN Compressed Archive",
class: "Compressed archive",
exts: vec![
"AIN",
],
offset: 0,
header: vec![
33,
18,
],
trailer: vec![
],
},
Signature {
description: "Unix archiver (ar)-MS Program Library Common Object File Format (COFF)",
class: "Compressed archive",
exts: vec![
"LIB",
],
offset: 0,
header: vec![
33,
60,
97,
114,
99,
104,
62,
10,
],
trailer: vec![
],
},
Signature {
description: "Microsoft Outlook Exchange Offline Storage Folder",
class: "Email",
exts: vec![
"OST",
],
offset: 0,
header: vec![
33,
66,
68,
78,
],
trailer: vec![
],
},
Signature {
description: "Cerius2 file",
class: "Miscellaneous",
exts: vec![
"MSI",
],
offset: 0,
header: vec![
35,
32,
],
trailer: vec![
],
},
Signature {
description: "VMware 4 Virtual Disk description",
class: "Miscellaneous",
exts: vec![
"VMDK",
],
offset: 0,
header: vec![
35,
32,
68,
105,
115,
107,
32,
68,
],
trailer: vec![
],
},
Signature {
description: "MS Developer Studio project file",
class: "Programming",
exts: vec![
"DSP",
],
offset: 0,
header: vec![
35,
32,
77,
105,
99,
114,
111,
115,
],
trailer: vec![
],
},
Signature {
description: "Google Earth Keyhole Placemark file",
class: "Navigation",
exts: vec![
"ETA",
],
offset: 0,
header: vec![
35,
32,
84,
104,
105,
115,
32,
105,
115,
32,
97,
110,
32,
75,
101,
121,
],
trailer: vec![
],
},
Signature {
description: "Adaptive Multi-Rate ACELP Codec (GSM)",
class: "Multimedia",
exts: vec![
"AMR",
],
offset: 0,
header: vec![
35,
33,
65,
77,
82,
],
trailer: vec![
],
},
Signature {
description: "Skype audio compression",
class: "Multimedia",
exts: vec![
"SIL",
],
offset: 0,
header: vec![
35,
33,
83,
73,
76,
75,
10,
],
trailer: vec![
],
},
Signature {
description: "Radiance High Dynamic Range image file",
class: "Picture",
exts: vec![
"HDR",
],
offset: 0,
header: vec![
35,
63,
82,
65,
68,
73,
65,
78,
],
trailer: vec![
],
},
Signature {
description: "VBScript Encoded script",
class: "Programming",
exts: vec![
"VBE",
],
offset: 0,
header: vec![
35,
64,
126,
94,
],
trailer: vec![
],
},
Signature {
description: "NVIDIA Scene Graph binary file",
class: "Video",
exts: vec![
"NBF",
],
offset: 0,
header: vec![
35,
78,
66,
70,
],
trailer: vec![
],
},
Signature {
description: "Brother-Babylock-Bernina Home Embroidery",
class: "Miscellaneous",
exts: vec![
"PEC",
],
offset: 0,
header: vec![
35,
80,
69,
67,
48,
48,
48,
49,
],
trailer: vec![
],
},
Signature {
description: "Brother-Babylock-Bernina Home Embroidery",
class: "Miscellaneous",
exts: vec![
"PES",
],
offset: 0,
header: vec![
35,
80,
69,
83,
48,
],
trailer: vec![
],
},
Signature {
description: "SPSS Data file",
class: "Miscellaneous",
exts: vec![
"SAV",
],
offset: 0,
header: vec![
36,
70,
76,
50,
64,
40,
35,
41,
],
trailer: vec![
],
},
Signature {
description: "Encapsulated PostScript file",
class: "Word processing suite",
exts: vec![
"EPS",
],
offset: 0,
header: vec![
37,
33,
80,
83,
45,
65,
100,
111,
],
trailer: vec![
],
},
Signature {
description: "PDF file",
class: "Word processing suite",
exts: vec![
"PDF",
"FDF",
],
offset: 0,
header: vec![
37,
80,
68,
70,
],
trailer: vec![
37,
37,
69,
79,
70,
],
},
Signature {
description: "Fuzzy bitmap (FBM) file",
class: "Picture",
exts: vec![
"FBM",
],
offset: 0,
header: vec![
37,
98,
105,
116,
109,
97,
112,
],
trailer: vec![
],
},
Signature {
description: "BinHex 4 Compressed Archive",
class: "Compressed archive",
exts: vec![
"HQX",
],
offset: 0,
header: vec![
40,
84,
104,
105,
115,
32,
102,
105,
],
trailer: vec![
],
},
Signature {
description: "Symantec Wise Installer log",
class: "Miscellaneous",
exts: vec![
"LOG",
],
offset: 0,
header: vec![
42,
42,
42,
32,
32,
73,
110,
115,
],
trailer: vec![
],
},
Signature {
description: "Compressed archive",
class: "Compressed archive",
exts: vec![
"LHA",
"LZH",
],
offset: 2,
header: vec![
45,
108,
104,
],
trailer: vec![
],
},
Signature {
description: "RealPlayer video file (V11+)",
class: "Multimedia",
exts: vec![
"IVR",
],
offset: 0,
header: vec![
46,
82,
69,
67,
],
trailer: vec![
],
},
Signature {
description: "RealMedia streaming media",
class: "Multimedia",
exts: vec![
"RM",
"RMVB",
],
offset: 0,
header: vec![
46,
82,
77,
70,
],
trailer: vec![
],
},
Signature {
description: "RealAudio file",
class: "Multimedia",
exts: vec![
"RA",
],
offset: 0,
header: vec![
46,
82,
77,
70,
0,
0,
0,
18,
],
trailer: vec![
],
},
Signature {
description: "RealAudio streaming media",
class: "Multimedia",
exts: vec![
"RA",
],
offset: 0,
header: vec![
46,
114,
97,
253,
0,
],
trailer: vec![
],
},
Signature {
description: "NeXT-Sun Microsystems audio file",
class: "Multimedia",
exts: vec![
"AU",
],
offset: 0,
header: vec![
46,
115,
110,
100,
],
trailer: vec![
],
},
Signature {
description: "Thunderbird-Mozilla Mail Summary File",
class: "E-mail",
exts: vec![
"MSF",
],
offset: 0,
header: vec![
47,
47,
32,
60,
33,
45,
45,
32,
60,
109,
100,
98,
58,
109,
111,
114,
107,
58,
122,
],
trailer: vec![
],
},
Signature {
description: "MS security catalog file",
class: "Windows",
exts: vec![
"CAT",
],
offset: 0,
header: vec![
48,
],
trailer: vec![
],
},
Signature {
description: "Windows Event Viewer file",
class: "Windows",
exts: vec![
"EVT",
],
offset: 0,
header: vec![
48,
0,
0,
0,
76,
102,
76,
101,
],
trailer: vec![
],
},
Signature {
description: "GEnealogical Data COMmunication (GEDCOM) file",
class: "Miscellaneous",
exts: vec![
"GED",
],
offset: 0,
header: vec![
48,
32,
72,
69,
65,
68,
],
trailer: vec![
],
},
Signature {
description: "Windows Media Audio-Video File",
class: "Multimedia",
exts: vec![
"ASF",
"WMA",
"WMV",
],
offset: 0,
header: vec![
48,
38,
178,
117,
142,
102,
207,
17,
],
trailer: vec![
],
},
Signature {
description: "National Transfer Format Map",
class: "Miscellaneous",
exts: vec![
"NTF",
],
offset: 0,
header: vec![
48,
49,
79,
82,
68,
78,
65,
78,
],
trailer: vec![
],
},
Signature {
description: "cpio archive",
class: "Compressed archive",
exts: vec![
],
offset: 0,
header: vec![
48,
55,
48,
55,
48,
],
trailer: vec![
],
},
Signature {
description: "MS Write file_1",
class: "Word processing suite",
exts: vec![
"WRI",
],
offset: 0,
header: vec![
49,
190,
],
trailer: vec![
],
},
Signature {
description: "MS Write file_2",
class: "Word processing suite",
exts: vec![
"WRI",
],
offset: 0,
header: vec![
50,
190,
],
trailer: vec![
],
},
Signature {
description: "Pfaff Home Embroidery",
class: "Miscellaneous",
exts: vec![
"PCS",
],
offset: 0,
header: vec![
50,
3,
16,
0,
0,
0,
0,
0,
0,
0,
128,
0,
0,
0,
255,
0,
],
trailer: vec![
],
},
Signature {
description: "Tcpdump capture file",
class: "Network",
exts: vec![
],
offset: 0,
header: vec![
52,
205,
178,
161,
],
trailer: vec![
],
},
Signature {
description: "7-Zip compressed file",
class: "Compressed archive",
exts: vec![
"7Z",
],
offset: 0,
header: vec![
55,
122,
188,
175,
39,
28,
],
trailer: vec![
],
},
Signature {
description: "zisofs compressed file",
class: "Compressed archive",
exts: vec![
],
offset: 0,
header: vec![
55,
228,
83,
150,
201,
219,
214,
7,
],
trailer: vec![
],
},
Signature {
description: "Photoshop image",
class: "Picture",
exts: vec![
"PSD",
],
offset: 0,
header: vec![
56,
66,
80,
83,
],
trailer: vec![
],
},
Signature {
description: "Surfplan kite project file",
class: "Miscellaneous",
exts: vec![
"SLE",
],
offset: 0,
header: vec![
58,
86,
69,
82,
83,
73,
79,
78,
],
trailer: vec![
],
},
Signature {
description: "Advanced Stream Redirector",
class: "Multimedia",
exts: vec![
"ASX",
],
offset: 0,
header: vec![
60,
],
trailer: vec![
],
},
Signature {
description: "BizTalk XML-Data Reduced Schema",
class: "Miscellaneous",
exts: vec![
"XDR",
],
offset: 0,
header: vec![
60,
],
trailer: vec![
],
},
Signature {
description: "AOL HTML mail",
class: "Email",
exts: vec![
"DCI",
],
offset: 0,
header: vec![
60,
33,
100,
111,
99,
116,
121,
112,
],
trailer: vec![
],
},
Signature {
description: "Windows Script Component",
class: "Windows",
exts: vec![
"WSC",
],
offset: 0,
header: vec![
60,
63,
],
trailer: vec![
],
},
Signature {
description: "Windows Visual Stylesheet",
class: "Programming",
exts: vec![
"MANIFEST",
],
offset: 0,
header: vec![
60,
63,
120,
109,
108,
32,
118,
101,
114,
115,
105,
111,
110,
61,
],
trailer: vec![
],
},
Signature {
description: "User Interface Language",
class: "Miscellaneous",
exts: vec![
"XML",
],
offset: 0,
header: vec![
60,
63,
120,
109,
108,
32,
118,
101,
114,
115,
105,
111,
110,
61,
34,
49,
46,
48,
34,
63,
62,
],
trailer: vec![
],
},
Signature {
description: "MMC Snap-in Control file",
class: "Windows",
exts: vec![
"MSC",
],
offset: 0,
header: vec![
60,
63,
120,
109,
108,
32,
118,
101,
114,
115,
105,
111,
110,
61,
34,
49,
46,
48,
34,
63,
62,
13,
10,
60,
77,
77,
67,
95,
67,
111,
110,
115,
111,
108,
101,
70,
105,
108,
101,
32,
67,
111,
110,
115,
111,
108,
101,
86,
101,
114,
115,
105,
111,
110,
61,
34,
],
trailer: vec![
],
},
Signature {
description: "Picasa movie project file",
class: "Multimedia",
exts: vec![
"MXF",
],
offset: 0,
header: vec![
60,
67,
84,
114,
97,
110,
115,
84,
105,
109,
101,
108,
105,
110,
101,
62,
],
trailer: vec![
],
},
Signature {
description: "Csound music",
class: "Multimedia",
exts: vec![
"CSD",
],
offset: 0,
header: vec![
60,
67,
115,
111,
117,
110,
100,
83,
121,
110,
116,
104,
101,
115,
105,
122,
],
trailer: vec![
],
},
Signature {
description: "Google Earth Keyhole Overlay file",
class: "Navigation",
exts: vec![
"ETA",
],
offset: 0,
header: vec![
60,
75,
101,
121,
104,
111,
108,
101,
62,
],
trailer: vec![
],
},
Signature {
description: "Adobe FrameMaker",
class: "Presentation",
exts: vec![
"FM",
"MIF",
],
offset: 0,
header: vec![
60,
77,
97,
107,
101,
114,
70,
105,
],
trailer: vec![
],
},
Signature {
description: "GPS Exchange (v1.1)",
class: "Navigation",
exts: vec![
"GPX",
],
offset: 0,
header: vec![
60,
103,
112,
120,
32,
118,
101,
114,
115,
105,
111,
110,
61,
34,
49,
46,
],
trailer: vec![
],
},
Signature {
description: "BASE85 file",
class: "Word processing",
exts: vec![
"B85",
],
offset: 0,
header: vec![
60,
126,
54,
60,
92,
37,
95,
48,
103,
83,
113,
104,
59,
],
trailer: vec![
126,
62,
10,
],
},
Signature {
description: "Quatro Pro for Windows 7.0",
class: "Spreadsheet",
exts: vec![
"WB3",
],
offset: 24,
header: vec![
62,
0,
3,
0,
254,
255,
9,
0,
6,
],
trailer: vec![
],
},
Signature {
description: "Windows Help file_2",
class: "Windows",
exts: vec![
"GID",
"HLP",
],
offset: 0,
header: vec![
63,
95,
3,
0,
],
trailer: vec![
],
},
Signature {
description: "EndNote Library File",
class: "Miscellaneous",
exts: vec![
"ENL",
],
offset: 32,
header: vec![
64,
64,
64,
32,
0,
0,
64,
64,
64,
64,
],
trailer: vec![
],
},
Signature {
description: "Analog Box (ABox) circuit files",
class: "Audio",
exts: vec![
"ABOX2",
],
offset: 0,
header: vec![
65,
66,
111,
120,
],
trailer: vec![
],
},
Signature {
description: "Generic AutoCAD drawing",
class: "Presentation",
exts: vec![
"DWG",
],
offset: 0,
header: vec![
65,
67,
49,
48,
],
trailer: vec![
],
},
Signature {
description: "Steganos virtual secure drive",
class: "Miscellaneous",
exts: vec![
"SLE",
],
offset: 0,
header: vec![
65,
67,
118,
],
trailer: vec![
],
},
Signature {
description: "AOL parameter-info files",
class: "Network",
exts: vec![
],
offset: 0,
header: vec![
65,
67,
83,
68,
],
trailer: vec![
],
},
Signature {
description: "Harvard Graphics symbol graphic",
class: "Presentation",
exts: vec![
"SYW",
],
offset: 0,
header: vec![
65,
77,
89,
79,
],
trailer: vec![
],
},
Signature {
description: "AOL config files",
class: "Network",
exts: vec![
"ABI",
"ABY",
"BAG",
"IDX",
"IND",
"PFC",
],
offset: 0,
header: vec![
65,
79,
76,
],
trailer: vec![
],
},
Signature {
description: "AOL and AIM buddy list",
class: "Network",
exts: vec![
"BAG",
],
offset: 0,
header: vec![
65,
79,
76,
32,
70,
101,
101,
100,
],
trailer: vec![
],
},
Signature {
description: "AOL address book",
class: "Network",
exts: vec![
"ABY",
],
offset: 0,
header: vec![
65,
79,
76,
68,
66,
],
trailer: vec![
],
},
Signature {
description: "AOL user configuration",
class: "Network",
exts: vec![
"IDX",
],
offset: 0,
header: vec![
65,
79,
76,
68,
66,
],
trailer: vec![
],
},
Signature {
description: "AOL client preferences-settings file",
class: "Network",
exts: vec![
"IND",
],
offset: 0,
header: vec![
65,
79,
76,
73,
68,
88,
],
trailer: vec![
],
},
Signature {
description: "AOL address book index",
class: "Network",
exts: vec![
"ABI",
],
offset: 0,
header: vec![
65,
79,
76,
73,
78,
68,
69,
88,
],
trailer: vec![
],
},
Signature {
description: "AOL personal file cabinet",
class: "Network",
exts: vec![
"ORG",
"PFC",
],
offset: 0,
header: vec![
65,
79,
76,
86,
77,
49,
48,
48,
],
trailer: vec![
],
},
Signature {
description: "AVG6 Integrity database",
class: "Database",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
65,
86,
71,
54,
95,
73,
110,
116,
],
trailer: vec![
],
},
Signature {
description: "RIFF Windows Audio",
class: "Multimedia",
exts: vec![
"AVI",
],
offset: 8,
header: vec![
65,
86,
73,
32,
76,
73,
83,
84,
],
trailer: vec![
],
},
Signature {
description: "FreeArc compressed file",
class: "Compressed archive",
exts: vec![
"ARC",
],
offset: 0,
header: vec![
65,
114,
67,
1,
],
trailer: vec![
],
},
Signature {
description: "NTFS MFT (BAAD)",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
66,
65,
65,
68,
],
trailer: vec![
],
},
Signature {
description: "Google Chrome dictionary file",
class: "System",
exts: vec![
"BDIC",
],
offset: 0,
header: vec![
66,
68,
105,
99,
],
trailer: vec![
],
},
Signature {
description: "vCard",
class: "Miscellaneous",
exts: vec![
"VCF",
],
offset: 0,
header: vec![
66,
69,
71,
73,
78,
58,
86,
67,
],
trailer: vec![
],
},
Signature {
description: "Speedtouch router firmware",
class: "Network",
exts: vec![
"BIN",
"BLI",
"RBI",
],
offset: 0,
header: vec![
66,
76,
73,
50,
50,
51,
],
trailer: vec![
],
},
Signature {
description: "Bitmap image",
class: "Picture",
exts: vec![
"BMP",
"DIB",
],
offset: 0,
header: vec![
66,
77,
],
trailer: vec![
],
},
Signature {
description: "Palmpilot resource file",
class: "Mobile",
exts: vec![
"PRC",
],
offset: 0,
header: vec![
66,
79,
79,
75,
77,
79,
66,
73,
],
trailer: vec![
],
},
Signature {
description: "Better Portable Graphics",
class: "Multimedia",
exts: vec![
"BPG",
],
offset: 0,
header: vec![
66,
80,
71,
251,
],
trailer: vec![
],
},
Signature {
description: "bzip2 compressed archive",
class: "Compressed archive",
exts: vec![
"BZ2",
"TAR",
"BZ2",
"TBZ2",
"TB2",
],
offset: 0,
header: vec![
66,
90,
104,
],
trailer: vec![
],
},
Signature {
description: "Mac Disk image (BZ2 compressed)",
class: "Compressed archive",
exts: vec![
"DMG",
],
offset: 0,
header: vec![
66,
90,
104,
],
trailer: vec![
],
},
Signature {
description: "Puffer ASCII encrypted archive",
class: "Encryption",
exts: vec![
"APUF",
],
offset: 0,
header: vec![
66,
101,
103,
105,
110,
32,
80,
117,
102,
102,
101,
114,
],
trailer: vec![
],
},
Signature {
description: "Blink compressed archive",
class: "Compressed archive",
exts: vec![
"BLI",
],
offset: 0,
header: vec![
66,
108,
105,
110,
107,
],
trailer: vec![
],
},
Signature {
description: "RagTime document",
class: "Word processing suite",
exts: vec![
"RTD",
],
offset: 0,
header: vec![
67,
35,
43,
68,
164,
67,
77,
165,
],
trailer: vec![
],
},
Signature {
description: "EA Interchange Format File (IFF)_3",
class: "Multimedia",
exts: vec![
"IFF",
],
offset: 0,
header: vec![
67,
65,
84,
32,
],
trailer: vec![
],
},
Signature {
description: "WordPerfect dictionary",
class: "Word processing suite",
exts: vec![
"CBD",
],
offset: 0,
header: vec![
67,
66,
70,
73,
76,
69,
],
trailer: vec![
],
},
Signature {
description: "ISO-9660 CD Disc Image",
class: "Compressed archive",
exts: vec![
"ISO",
],
offset: 0,
header: vec![
67,
68,
48,
48,
49,
],
trailer: vec![
],
},
Signature {
description: "RIFF CD audio",
class: "Multimedia",
exts: vec![
"CDA",
],
offset: 8,
header: vec![
67,
68,
68,
65,
102,
109,
116,
32,
],
trailer: vec![
],
},
Signature {
description: "Compressed ISO CD image",
class: "Compressed archive",
exts: vec![
"CSO",
],
offset: 0,
header: vec![
67,
73,
83,
79,
],
trailer: vec![
],
},
Signature {
description: "Windows 7 thumbnail",
class: "Windows",
exts: vec![
"DB",
],
offset: 0,
header: vec![
67,
77,
77,
77,
21,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Corel Binary metafile",
class: "Miscellaneous",
exts: vec![
"CLB",
],
offset: 0,
header: vec![
67,
77,
88,
49,
],
trailer: vec![
],
},
Signature {
description: "COM+ Catalog",
class: "Miscellaneous",
exts: vec![
"CLB",
],
offset: 0,
header: vec![
67,
79,
77,
43,
],
trailer: vec![
],
},
Signature {
description: "VMware 3 Virtual Disk",
class: "Miscellaneous",
exts: vec![
"VMDK",
],
offset: 0,
header: vec![
67,
79,
87,
68,
],
trailer: vec![
],
},
Signature {
description: "Corel Photopaint file_1",
class: "Presentation",
exts: vec![
"CPT",
],
offset: 0,
header: vec![
67,
80,
84,
55,
70,
73,
76,
69,
],
trailer: vec![
],
},
Signature {
description: "Corel Photopaint file_2",
class: "Presentation",
exts: vec![
"CPT",
],
offset: 0,
header: vec![
67,
80,
84,
70,
73,
76,
69,
],
trailer: vec![
],
},
Signature {
description: "Win9x registry hive",
class: "Windows",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
67,
82,
69,
71,
],
trailer: vec![
],
},
Signature {
description: "Crush compressed archive",
class: "Compressed archive",
exts: vec![
"CRU",
],
offset: 0,
header: vec![
67,
82,
85,
83,
72,
32,
118,
],
trailer: vec![
],
},
Signature {
description: "Shockwave Flash file",
class: "Multimedia",
exts: vec![
"SWF",
],
offset: 0,
header: vec![
67,
87,
83,
],
trailer: vec![
],
},
Signature {
description: "Calculux Indoor lighting project file",
class: "Application",
exts: vec![
"CIN",
],
offset: 0,
header: vec![
67,
97,
108,
99,
117,
108,
117,
120,
32,
73,
110,
100,
111,
111,
114,
32,
],
trailer: vec![
],
},
Signature {
description: "WhereIsIt Catalog",
class: "Miscellaneous",
exts: vec![
"CTF",
],
offset: 0,
header: vec![
67,
97,
116,
97,
108,
111,
103,
32,
],
trailer: vec![
],
},
Signature {
description: "IE History file",
class: "Network",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
67,
108,
105,
101,
110,
116,
32,
85,
],
trailer: vec![
],
},
Signature {
description: "Google Chrome Extension",
class: "Programming",
exts: vec![
"CRX",
],
offset: 0,
header: vec![
67,
114,
50,
52,
],
trailer: vec![
],
},
Signature {
description: "Google Chromium patch update",
class: "System",
exts: vec![
"CRX",
],
offset: 0,
header: vec![
67,
114,
79,
68,
],
trailer: vec![
],
},
Signature {
description: "Creative Voice",
class: "Multimedia",
exts: vec![
"VOC",
],
offset: 0,
header: vec![
67,
114,
101,
97,
116,
105,
118,
101,
32,
86,
111,
105,
99,
101,
32,
70,
],
trailer: vec![
],
},
Signature {
description: "PowerISO Direct-Access-Archive image",
class: "Compressed archive",
exts: vec![
"DAA",
],
offset: 0,
header: vec![
68,
65,
65,
0,
0,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "DAX Compressed CD image",
class: "Miscellaneous",
exts: vec![
"DAX",
],
offset: 0,
header: vec![
68,
65,
88,
0,
],
trailer: vec![
],
},
Signature {
description: "Palm Zire photo database",
class: "Mobile",
exts: vec![
"DB",
],
offset: 0,
header: vec![
68,
66,
70,
72,
],
trailer: vec![
],
},
Signature {
description: "Amiga DiskMasher compressed archive",
class: "Compressed archive",
exts: vec![
"DMS",
],
offset: 0,
header: vec![
68,
77,
83,
33,
],
trailer: vec![
],
},
Signature {
description: "Amiga disk file",
class: "Miscellaneous",
exts: vec![
"ADF",
],
offset: 0,
header: vec![
68,
79,
83,
],
trailer: vec![
],
},
Signature {
description: "DST Compression",
class: "Compressed archive",
exts: vec![
"DST",
],
offset: 0,
header: vec![
68,
83,
84,
98,
],
trailer: vec![
],
},
Signature {
description: "DVR-Studio stream file",
class: "Multimedia",
exts: vec![
"DVR",
],
offset: 0,
header: vec![
68,
86,
68,
],
trailer: vec![
],
},
Signature {
description: "DVD info file",
class: "Multimedia",
exts: vec![
"IFO",
],
offset: 0,
header: vec![
68,
86,
68,
],
trailer: vec![
],
},
Signature {
description: "Elite Plus Commander game file",
class: "Miscellaneous",
exts: vec![
"CDR",
],
offset: 0,
header: vec![
69,
76,
73,
84,
69,
32,
67,
111,
],
trailer: vec![
],
},
Signature {
description: "VideoVCD-VCDImager file",
class: "Miscellaneous",
exts: vec![
"VCD",
],
offset: 0,
header: vec![
69,
78,
84,
82,
89,
86,
67,
68,
],
trailer: vec![
],
},
Signature {
description: "Apple ISO 9660-HFS hybrid CD image",
class: "Compressed archive",
exts: vec![
"ISO",
],
offset: 0,
header: vec![
69,
82,
2,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "EasyRecovery Saved State file",
class: "Miscellaneous",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
69,
82,
70,
83,
83,
65,
86,
69,
],
trailer: vec![
],
},
Signature {
description: "DSD Storage Facility audio file",
class: "Multimedia",
exts: vec![
"DSF",
],
offset: 0,
header: vec![
68,
83,
68,
32,
],
trailer: vec![
],
},
Signature {
description: "MS Document Imaging file",
class: "Word processing suite",
exts: vec![
"MDI",
],
offset: 0,
header: vec![
69,
80,
],
trailer: vec![
],
},
Signature {
description: "Expert Witness Compression Format",
class: "Miscellaneous",
exts: vec![
"E01",
],
offset: 0,
header: vec![
69,
86,
70,
9,
13,
10,
255,
0,
],
trailer: vec![
],
},
Signature {
description: "EnCase Evidence File Format V2",
class: "Miscellaneous",
exts: vec![
"Ex01",
],
offset: 0,
header: vec![
69,
86,
70,
50,
13,
10,
129,
],
trailer: vec![
],
},
Signature {
description: "Windows Vista event log",
class: "Windows",
exts: vec![
"EVTX",
],
offset: 0,
header: vec![
69,
108,
102,
70,
105,
108,
101,
0,
],
trailer: vec![
],
},
Signature {
description: "QuickBooks backup",
class: "Finance",
exts: vec![
"QBB",
],
offset: 0,
header: vec![
69,
134,
0,
0,
6,
0,
],
trailer: vec![
],
},
Signature {
description: "MS Fax Cover Sheet",
class: "Miscellaneous",
exts: vec![
"CPE",
],
offset: 0,
header: vec![
70,
65,
88,
67,
79,
86,
69,
82,
],
trailer: vec![
],
},
Signature {
description: "Fiasco database definition file",
class: "Database",
exts: vec![
"FDB",
],
offset: 0,
header: vec![
70,
68,
66,
72,
0,
],
trailer: vec![
],
},
Signature {
description: "NTFS MFT (FILE)",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
70,
73,
76,
69,
],
trailer: vec![
],
},
Signature {
description: "Flash video file",
class: "Multimedia",
exts: vec![
"FLV",
],
offset: 0,
header: vec![
70,
76,
86,
],
trailer: vec![
],
},
Signature {
description: "IFF ANIM file",
class: "Multimedia",
exts: vec![
"ANM",
],
offset: 0,
header: vec![
70,
79,
82,
77,
],
trailer: vec![
],
},
Signature {
description: "EA Interchange Format File (IFF)_1",
class: "Multimedia",
exts: vec![
"IFF",
],
offset: 0,
header: vec![
70,
79,
82,
77,
],
trailer: vec![
],
},
Signature {
description: "Audio Interchange File",
class: "Multimedia",
exts: vec![
"AIFF",
],
offset: 0,
header: vec![
70,
79,
82,
77,
0,
],
trailer: vec![
],
},
Signature {
description: "DAKX Compressed Audio",
class: "Multimedia",
exts: vec![
"DAX",
],
offset: 0,
header: vec![
70,
79,
82,
77,
0,
],
trailer: vec![
],
},
Signature {
description: "Shockwave Flash player",
class: "Multimedia",
exts: vec![
"SWF",
],
offset: 0,
header: vec![
70,
87,
83,
],
trailer: vec![
],
},
Signature {
description: "Generic e-mail_2",
class: "Email",
exts: vec![
"EML",
],
offset: 0,
header: vec![
70,
114,
111,
109,
],
trailer: vec![
],
},
Signature {
description: "GIF file",
class: "Picture",
exts: vec![
"GIF",
],
offset: 0,
header: vec![
71,
73,
70,
56,
],
trailer: vec![
0,
59,
],
},
Signature {
description: "GIMP pattern file",
class: "Picture",
exts: vec![
"PAT",
],
offset: 0,
header: vec![
71,
80,
65,
84,
],
trailer: vec![
],
},
Signature {
description: "General Regularly-distributed Information (GRIdded) Binary",
class: "Miscellaneous",
exts: vec![
"GRB",
],
offset: 0,
header: vec![
71,
82,
73,
66,
],
trailer: vec![
],
},
Signature {
description: "Show Partner graphics file",
class: "Picture",
exts: vec![
"GX2",
],
offset: 0,
header: vec![
71,
88,
50,
],
trailer: vec![
],
},
Signature {
description: "Genetec video archive",
class: "Multimedia",
exts: vec![
"G64",
],
offset: 0,
header: vec![
71,
101,
110,
101,
116,
101,
99,
32,
79,
109,
110,
105,
99,
97,
115,
116,
],
trailer: vec![
],
},
Signature {
description: "SAP PowerBuilder integrated development environment file",
class: "Programming",
exts: vec![
"PBD",
],
offset: 0,
header: vec![
72,
68,
82,
42,
80,
111,
119,
101,
114,
66,
117,
105,
108,
100,
101,
114,
],
trailer: vec![
],
},
Signature {
description: "SAS Transport dataset",
class: "Statistics",
exts: vec![
"XPT",
],
offset: 0,
header: vec![
72,
69,
65,
68,
69,
82,
32,
82,
69,
67,
79,
82,
68,
42,
42,
42,
],
trailer: vec![
],
},
Signature {
description: "Harvard Graphics presentation file",
class: "Presentation",
exts: vec![
"SH3",
],
offset: 0,
header: vec![
72,
72,
71,
66,
49,
],
trailer: vec![
],
},
Signature {
description: "TIFF file_1",
class: "Picture",
exts: vec![
"TIF",
"TIFF",
],
offset: 0,
header: vec![
73,
32,
73,
],
trailer: vec![
],
},
Signature {
description: "MP3 audio file",
class: "Multimedia",
exts: vec![
"MP3",
],
offset: 0,
header: vec![
73,
68,
51,
],
trailer: vec![
],
},
Signature {
description: "Sprint Music Store audio",
class: "Multimedia",
exts: vec![
"KOZ",
],
offset: 0,
header: vec![
73,
68,
51,
3,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Canon RAW file",
class: "Picture",
exts: vec![
"CRW",
],
offset: 0,
header: vec![
73,
73,
26,
0,
0,
0,
72,
69,
],
trailer: vec![
],
},
Signature {
description: "TIFF file_2",
class: "Picture",
exts: vec![
"TIF",
"TIFF",
],
offset: 0,
header: vec![
73,
73,
42,
0,
],
trailer: vec![
],
},
Signature {
description: "Windows 7 thumbnail_2",
class: "Windows",
exts: vec![
"DB",
],
offset: 0,
header: vec![
73,
77,
77,
77,
21,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Install Shield compressed file",
class: "Compressed archive",
exts: vec![
"CAB",
"HDR",
],
offset: 0,
header: vec![
73,
83,
99,
40,
],
trailer: vec![
],
},
Signature {
description: "MS Reader eBook",
class: "Miscellaneous",
exts: vec![
"LIT",
],
offset: 0,
header: vec![
73,
84,
79,
76,
73,
84,
76,
83,
],
trailer: vec![
],
},
Signature {
description: "MS Compiled HTML Help File",
class: "Windows",
exts: vec![
"CHI",
"CHM",
],
offset: 0,
header: vec![
73,
84,
83,
70,
],
trailer: vec![
],
},
Signature {
description: "Inno Setup Uninstall Log",
class: "Miscellaneous",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
73,
110,
110,
111,
32,
83,
101,
116,
],
trailer: vec![
],
},
Signature {
description: "Inter@ctive Pager Backup (BlackBerry file",
class: "Mobile",
exts: vec![
"IPD",
],
offset: 0,
header: vec![
73,
110,
116,
101,
114,
64,
99,
116,
105,
118,
101,
32,
80,
97,
103,
101,
],
trailer: vec![
],
},
Signature {
description: "JARCS compressed archive",
class: "Compressed archive",
exts: vec![
"JAR",
],
offset: 0,
header: vec![
74,
65,
82,
67,
83,
0,
],
trailer: vec![
],
},
Signature {
description: "AOL ART file_1",
class: "Picture",
exts: vec![
"JG",
],
offset: 0,
header: vec![
74,
71,
3,
14,
],
trailer: vec![
208,
203,
0,
0,
],
},
Signature {
description: "AOL ART file_2",
class: "Picture",
exts: vec![
"JG",
],
offset: 0,
header: vec![
74,
71,
4,
14,
],
trailer: vec![
207,
199,
203,
],
},
Signature {
description: "VMware 4 Virtual Disk",
class: "Miscellaneous",
exts: vec![
"VMDK",
],
offset: 0,
header: vec![
75,
68,
77,
],
trailer: vec![
],
},
Signature {
description: "KGB archive",
class: "Compressed archive",
exts: vec![
"KGB",
],
offset: 0,
header: vec![
75,
71,
66,
95,
97,
114,
99,
104,
],
trailer: vec![
],
},
Signature {
description: "Win9x printer spool file",
class: "Windows",
exts: vec![
"SHD",
],
offset: 0,
header: vec![
75,
73,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "KWAJ (compressed) file",
class: "Compressed archive",
exts: vec![
],
offset: 0,
header: vec![
75,
87,
65,
74,
136,
240,
39,
209,
],
trailer: vec![
],
},
Signature {
description: "Windows shortcut file",
class: "Windows",
exts: vec![
"LNK",
],
offset: 0,
header: vec![
76,
0,
0,
0,
1,
20,
2,
0,
],
trailer: vec![
],
},
Signature {
description: "MS COFF relocatable object code",
class: "Windows",
exts: vec![
"OBJ",
],
offset: 0,
header: vec![
76,
1,
],
trailer: vec![
],
},
Signature {
description: "Tajima emboridery",
class: "Miscellaneous",
exts: vec![
"DST",
],
offset: 0,
header: vec![
76,
65,
58,
],
trailer: vec![
],
},
Signature {
description: "Windows help file_3",
class: "Windows",
exts: vec![
"GID",
"HLP",
],
offset: 0,
header: vec![
76,
78,
2,
0,
],
trailer: vec![
],
},
Signature {
description: "EA Interchange Format File (IFF)_2",
class: "Multimedia",
exts: vec![
"IFF",
],
offset: 0,
header: vec![
76,
73,
83,
84,
],
trailer: vec![
],
},
Signature {
description: "DeluxePaint Animation",
class: "Multimedia",
exts: vec![
"ANM",
],
offset: 0,
header: vec![
76,
80,
70,
32,
0,
1,
],
trailer: vec![
],
},
Signature {
description: "Logical File Evidence Format",
class: "Miscellaneous",
exts: vec![
"E01",
],
offset: 0,
header: vec![
76,
86,
70,
9,
13,
10,
255,
0,
],
trailer: vec![
],
},
Signature {
description: "Merriam-Webster Pocket Dictionary",
class: "Miscellaneous",
exts: vec![
"PDB",
],
offset: 0,
header: vec![
77,
45,
87,
32,
80,
111,
99,
107,
],
trailer: vec![
],
},
Signature {
description: "Mozilla archive",
class: "Network",
exts: vec![
"MAR",
],
offset: 0,
header: vec![
77,
65,
82,
49,
0,
],
trailer: vec![
],
},
Signature {
description: "Microsoft-MSN MARC archive",
class: "Compressed archive",
exts: vec![
"MAR",
],
offset: 0,
header: vec![
77,
65,
82,
67,
],
trailer: vec![
],
},
Signature {
description: "MATLAB v5 workspace",
class: "Programming",
exts: vec![
"MAT",
],
offset: 0,
header: vec![
77,
65,
84,
76,
65,
66,
32,
53,
46,
48,
32,
77,
65,
84,
45,
102,
105,
108,
101,
],
trailer: vec![
],
},
Signature {
description: "MAr compressed archive",
class: "Compressed archive",
exts: vec![
"MAR",
],
offset: 0,
header: vec![
77,
65,
114,
48,
0,
],
trailer: vec![
],
},
Signature {
description: "TargetExpress target file",
class: "Miscellaneous",
exts: vec![
"MTE",
],
offset: 0,
header: vec![
77,
67,
87,
32,
84,
101,
99,
104,
110,
111,
103,
111,
108,
105,
101,
115,
],
trailer: vec![
],
},
Signature {
description: "Windows dump file",
class: "Windows",
exts: vec![
"DMP",
"HDMP",
],
offset: 0,
header: vec![
77,
68,
77,
80,
147,
167,
],
trailer: vec![
],
},
Signature {
description: "Milestones project management file",
class: "Miscellaneous",
exts: vec![
"MLS",
],
offset: 0,
header: vec![
77,
73,
76,
69,
83,
],
trailer: vec![
],
},
Signature {
description: "Skype localization data file",
class: "Network",
exts: vec![
"MLS",
],
offset: 0,
header: vec![
77,
76,
83,
87,
],
trailer: vec![
],
},
Signature {
description: "TIFF file_3",
class: "Picture",
exts: vec![
"TIF",
"TIFF",
],
offset: 0,
header: vec![
77,
77,
0,
42,
],
trailer: vec![
],
},
Signature {
description: "TIFF file_4",
class: "Picture",
exts: vec![
"TIF",
"TIFF",
],
offset: 0,
header: vec![
77,
77,
0,
43,
],
trailer: vec![
],
},
Signature {
description: "Yamaha Synthetic music Mobile Application Format",
class: "Multimedia",
exts: vec![
"MMF",
],
offset: 0,
header: vec![
77,
77,
77,
68,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "VMware BIOS state file",
class: "Miscellaneous",
exts: vec![
"NVRAM",
],
offset: 0,
header: vec![
77,
82,
86,
78,
],
trailer: vec![
],
},
Signature {
description: "Microsoft cabinet file",
class: "Windows",
exts: vec![
"CAB",
],
offset: 0,
header: vec![
77,
83,
67,
70,
],
trailer: vec![
],
},
Signature {
description: "OneNote Package",
class: "Windows",
exts: vec![
"ONEPKG",
],
offset: 0,
header: vec![
77,
83,
67,
70,
],
trailer: vec![
],
},
Signature {
description: "Powerpoint Packaged Presentation",
class: "Presentation",
exts: vec![
"PPZ",
],
offset: 0,
header: vec![
77,
83,
67,
70,
],
trailer: vec![
],
},
Signature {
description: "MS Access Snapshot Viewer file",
class: "Database",
exts: vec![
"SNP",
],
offset: 0,
header: vec![
77,
83,
67,
70,
],
trailer: vec![
],
},
Signature {
description: "OLE-SPSS-Visual C++ library file",
class: "Programming",
exts: vec![
"TLB",
],
offset: 0,
header: vec![
77,
83,
70,
84,
2,
0,
1,
0,
],
trailer: vec![
],
},
Signature {
description: "Health Level-7 data (pipe delimited) file",
class: "Programming",
exts: vec![
"HL7",
],
offset: 0,
header: vec![
13,
83,
72,
124,
94,
126,
92,
38,
124,
],
trailer: vec![
],
},
Signature {
description: "Microsoft Windows Imaging Format",
class: "Picture",
exts: vec![
"WIM",
],
offset: 0,
header: vec![
77,
83,
87,
73,
77,
],
trailer: vec![
],
},
Signature {
description: "Sony Compressed Voice File",
class: "Multimedia",
exts: vec![
"CDR",
"DVF",
"MSV",
],
offset: 0,
header: vec![
77,
83,
95,
86,
79,
73,
67,
69,
],
trailer: vec![
],
},
Signature {
description: "MIDI sound file",
class: "Multimedia",
exts: vec![
"MID",
"MIDI",
],
offset: 0,
header: vec![
77,
84,
104,
100,
],
trailer: vec![
],
},
Signature {
description: "Yamaha Piano",
class: "Multimedia",
exts: vec![
"PCS",
],
offset: 0,
header: vec![
77,
84,
104,
100,
],
trailer: vec![
],
},
Signature {
description: "CD Stomper Pro label file",
class: "Miscellaneous",
exts: vec![
"DSN",
],
offset: 0,
header: vec![
77,
86,
],
trailer: vec![
],
},
Signature {
description: "Milestones project management file_1",
class: "Miscellaneous",
exts: vec![
"MLS",
],
offset: 0,
header: vec![
77,
86,
50,
49,
52,
],
trailer: vec![
],
},
Signature {
description: "Milestones project management file_2",
class: "Miscellaneous",
exts: vec![
"MLS",
],
offset: 0,
header: vec![
77,
86,
50,
67,
],
trailer: vec![
],
},
Signature {
description: "Windows-DOS executable file",
class: "Windows",
exts: vec![
"COM",
"DLL",
"DRV",
"EXE",
"PIF",
"QTS",
"QTX",
"SYS",
],
offset: 0,
header: vec![
77,
90,
],
trailer: vec![
],
},
Signature {
description: "MS audio compression manager driver",
class: "Multimedia",
exts: vec![
"ACM",
],
offset: 0,
header: vec![
77,
90,
],
trailer: vec![
],
},
Signature {
description: "Library cache file",
class: "Windows",
exts: vec![
"AX",
],
offset: 0,
header: vec![
77,
90,
],
trailer: vec![
],
},
Signature {
description: "Control panel application",
class: "Windows",
exts: vec![
"CPL",
],
offset: 0,
header: vec![
77,
90,
],
trailer: vec![
],
},
Signature {
description: "Font file",
class: "Windows",
exts: vec![
"FON",
],
offset: 0,
header: vec![
77,
90,
],
trailer: vec![
],
},
Signature {
description: "ActiveX-OLE Custom Control",
class: "Windows",
exts: vec![
"OCX",
],
offset: 0,
header: vec![
77,
90,
],
trailer: vec![
],
},
Signature {
description: "OLE object library",
class: "Windows",
exts: vec![
"OLB",
],
offset: 0,
header: vec![
77,
90,
],
trailer: vec![
],
},
Signature {
description: "Screen saver",
class: "Windows",
exts: vec![
"SCR",
],
offset: 0,
header: vec![
77,
90,
],
trailer: vec![
],
},
Signature {
description: "VisualBASIC application",
class: "Programming",
exts: vec![
"VBX",
],
offset: 0,
header: vec![
77,
90,
],
trailer: vec![
],
},
Signature {
description: "Windows virtual device drivers",
class: "Windows",
exts: vec![
"VXD",
"386",
],
offset: 0,
header: vec![
77,
90,
],
trailer: vec![
],
},
Signature {
description: "Acrobat plug-in",
class: "Word processing suite",
exts: vec![
"API",
],
offset: 0,
header: vec![
77,
90,
144,
0,
3,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "DirectShow filter",
class: "Miscellaneous",
exts: vec![
"AX",
],
offset: 0,
header: vec![
77,
90,
144,
0,
3,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Audition graphic filter",
class: "Miscellaneous",
exts: vec![
"FLT",
],
offset: 0,
header: vec![
77,
90,
144,
0,
3,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "ZoneAlam data file",
class: "Miscellaneous",
exts: vec![
"ZAP",
],
offset: 0,
header: vec![
77,
90,
144,
0,
3,
0,
0,
0,
4,
0,
0,
0,
255,
255,
],
trailer: vec![
],
},
Signature {
description: "MS C++ debugging symbols file",
class: "Programming",
exts: vec![
"PDB",
],
offset: 0,
header: vec![
77,
105,
99,
114,
111,
115,
111,
102,
116,
32,
67,
47,
67,
43,
43,
32,
],
trailer: vec![
],
},
Signature {
description: "Visual Studio .NET file",
class: "Programming",
exts: vec![
"SLN",
],
offset: 0,
header: vec![
77,
105,
99,
114,
111,
115,
111,
102,
116,
32,
86,
105,
115,
117,
97,
108,
],
trailer: vec![
],
},
Signature {
description: "Windows Media Player playlist",
class: "Multimedia",
exts: vec![
"WPL",
],
offset: 84,
header: vec![
77,
105,
99,
114,
111,
115,
111,
102,
116,
32,
87,
105,
110,
100,
111,
119,
115,
32,
77,
101,
100,
105,
97,
32,
80,
108,
97,
121,
101,
114,
32,
45,
45,
32,
],
trailer: vec![
],
},
Signature {
description: "VMapSource GPS Waypoint Database",
class: "Navigation",
exts: vec![
"GDB",
],
offset: 0,
header: vec![
77,
115,
82,
99,
102,
],
trailer: vec![
],
},
Signature {
description: "TomTom traffic data",
class: "Navigation",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
78,
65,
86,
84,
82,
65,
70,
70,
],
trailer: vec![
],
},
Signature {
description: "MS Windows journal",
class: "Windows",
exts: vec![
"JNT",
"JTP",
],
offset: 0,
header: vec![
78,
66,
42,
0,
],
trailer: vec![
],
},
Signature {
description: "NES Sound file",
class: "Multimedia",
exts: vec![
"NSF",
],
offset: 0,
header: vec![
78,
69,
83,
77,
26,
1,
],
trailer: vec![
],
},
Signature {
description: "National Imagery Transmission Format file",
class: "Picture",
exts: vec![
"NTF",
],
offset: 0,
header: vec![
78,
73,
84,
70,
48,
],
trailer: vec![
],
},
Signature {
description: "Agent newsreader character map",
class: "Miscellaneous",
exts: vec![
"COD",
],
offset: 0,
header: vec![
78,
97,
109,
101,
58,
32,
],
trailer: vec![
],
},
Signature {
description: "1Password 4 Cloud Keychain",
class: "Encryption",
exts: vec![
"attachment",
],
offset: 0,
header: vec![
79,
80,
67,
76,
68,
65,
84,
],
trailer: vec![
],
},
Signature {
description: "Psion Series 3 Database",
class: "Database",
exts: vec![
"DBF",
],
offset: 0,
header: vec![
79,
80,
76,
68,
97,
116,
97,
98,
],
trailer: vec![
],
},
Signature {
description: "OpenType font",
class: "Word processing suite",
exts: vec![
"OTF",
],
offset: 0,
header: vec![
79,
84,
84,
79,
0,
],
trailer: vec![
],
},
Signature {
description: "Ogg Vorbis Codec compressed file",
class: "Multimedia",
exts: vec![
"OGA",
"OGG",
"OGV",
"OGX",
],
offset: 0,
header: vec![
79,
103,
103,
83,
0,
2,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Visio-DisplayWrite 4 text file",
class: "Presentation",
exts: vec![
"DW4",
],
offset: 0,
header: vec![
79,
123,
],
trailer: vec![
],
},
Signature {
description: "Quicken QuickFinder Information File",
class: "Finance",
exts: vec![
"IDX",
],
offset: 0,
header: vec![
80,
0,
0,
0,
32,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Portable Graymap Graphic",
class: "Picture",
exts: vec![
"PGM",
],
offset: 0,
header: vec![
80,
53,
10,
],
trailer: vec![
],
},
Signature {
description: "Quake archive file",
class: "Compressed archive",
exts: vec![
"PAK",
],
offset: 0,
header: vec![
80,
65,
67,
75,
],
trailer: vec![
],
},
Signature {
description: "Windows memory dump",
class: "Windows",
exts: vec![
"DMP",
],
offset: 0,
header: vec![
80,
65,
71,
69,
68,
85,
],
trailer: vec![
],
},
Signature {
description: "PAX password protected bitmap",
class: "Picture",
exts: vec![
"PAX",
],
offset: 0,
header: vec![
80,
65,
88,
],
trailer: vec![
],
},
Signature {
description: "PestPatrol data-scan strings",
class: "Miscellaneous",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
80,
69,
83,
84,
],
trailer: vec![
],
},
Signature {
description: "PGP disk image",
class: "Compressed archive",
exts: vec![
"PGD",
],
offset: 0,
header: vec![
80,
71,
80,
100,
77,
65,
73,
78,
],
trailer: vec![
],
},
Signature {
description: "ChromaGraph Graphics Card Bitmap",
class: "Picture",
exts: vec![
"IMG",
],
offset: 0,
header: vec![
80,
73,
67,
84,
0,
8,
],
trailer: vec![
],
},
Signature {
description: "PKZIP archive_1",
class: "Compressed archive",
exts: vec![
"ZIP",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "Android package",
class: "Mobile",
exts: vec![
"APK",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "MacOS X Dashboard Widget",
class: "MacOS",
exts: vec![
"ZIP",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "MS Office Open XML Format Document",
class: "Word processing suite",
exts: vec![
"DOCX",
"PPTX",
"XLSX",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "Java archive_1",
class: "Programming",
exts: vec![
"JAR",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "Google Earth session file",
class: "Navigation",
exts: vec![
"KMZ",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "KWord document",
class: "Word processing suite",
exts: vec![
"KWD",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "OpenDocument template",
class: "Word processing suite",
exts: vec![
"ODT",
"ODP",
"OTT",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "Microsoft Open XML paper specification",
class: "Word processing suite",
exts: vec![
"OXPS",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "OpenOffice documents",
class: "Word processing suite",
exts: vec![
"SXC",
"SXD",
"SXI",
"SXW",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "StarOffice spreadsheet",
class: "Spreadsheet",
exts: vec![
"SXC",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "Windows Media compressed skin file",
class: "Windows",
exts: vec![
"WMZ",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "Mozilla Browser Archive",
class: "Network",
exts: vec![
"XPI",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "XML paper specification file",
class: "Word processing suite",
exts: vec![
"XPS",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "eXact Packager Models",
class: "Miscellaneous",
exts: vec![
"XPT",
],
offset: 0,
header: vec![
80,
75,
3,
4,
],
trailer: vec![
],
},
Signature {
description: "Open Publication Structure eBook",
class: "Compressed archive",
exts: vec![
"EPUB",
],
offset: 0,
header: vec![
80,
75,
3,
4,
10,
0,
2,
0,
],
trailer: vec![
],
},
Signature {
description: "ZLock Pro encrypted ZIP",
class: "Compressed archive",
exts: vec![
"ZIP",
],
offset: 0,
header: vec![
80,
75,
3,
4,
20,
0,
1,
0,
],
trailer: vec![
],
},
Signature {
description: "MS Office 2007 documents",
class: "Word processing suite",
exts: vec![
"DOCX",
"PPTX",
"XLSX",
],
offset: 0,
header: vec![
80,
75,
3,
4,
20,
0,
6,
0,
],
trailer: vec![
],
},
Signature {
description: "Java archive_2",
class: "Programming",
exts: vec![
"JAR",
],
offset: 0,
header: vec![
80,
75,
3,
4,
20,
0,
8,
0,
],
trailer: vec![
],
},
Signature {
description: "PKZIP archive_2",
class: "Compressed archive",
exts: vec![
"ZIP",
],
offset: 0,
header: vec![
80,
75,
5,
6,
],
trailer: vec![
],
},
Signature {
description: "PKZIP archive_3",
class: "Compressed archive",
exts: vec![
"ZIP",
],
offset: 0,
header: vec![
80,
75,
7,
8,
],
trailer: vec![
],
},
Signature {
description: "PKLITE archive",
class: "Compressed archive",
exts: vec![
"ZIP",
],
offset: 30,
header: vec![
80,
75,
76,
73,
84,
69,
],
trailer: vec![
],
},
Signature {
description: "PKSFX self-extracting archive",
class: "Compressed archive",
exts: vec![
"ZIP",
],
offset: 526,
header: vec![
80,
75,
83,
112,
88,
],
trailer: vec![
],
},
Signature {
description: "Windows Program Manager group file",
class: "Windows",
exts: vec![
"GRP",
],
offset: 0,
header: vec![
80,
77,
67,
67,
],
trailer: vec![
],
},
Signature {
description: "Norton Disk Doctor undo file",
class: "Miscellaneous",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
80,
78,
67,
73,
85,
78,
68,
79,
],
trailer: vec![
],
},
Signature {
description: "Microsoft Windows User State Migration Tool",
class: "Windows",
exts: vec![
"PMOCCMOC",
],
offset: 0,
header: vec![
80,
77,
79,
67,
67,
77,
79,
67,
],
trailer: vec![
],
},
Signature {
description: "Dreamcast Sound Format",
class: "Multimedia",
exts: vec![
"DSF",
],
offset: 0,
header: vec![
80,
83,
70,
18,
],
trailer: vec![
],
},
Signature {
description: "Puffer encrypted archive",
class: "Encryption",
exts: vec![
"PUF",
],
offset: 0,
header: vec![
80,
85,
70,
88,
],
trailer: vec![
],
},
Signature {
description: "Parrot Video Encapsulation",
class: "Multimedia",
exts: vec![
],
offset: 0,
header: vec![
80,
97,
86,
69,
],
trailer: vec![
],
},
Signature {
description: "Quicken data",
class: "Finance",
exts: vec![
"QEL",
],
offset: 92,
header: vec![
81,
69,
76,
32,
],
trailer: vec![
],
},
Signature {
description: "Qcow Disk Image",
class: "Miscellaneous",
exts: vec![
"QEMU",
],
offset: 0,
header: vec![
81,
70,
73,
],
trailer: vec![
],
},
Signature {
description: "RIFF Qualcomm PureVoice",
class: "Multimedia",
exts: vec![
"QCP",
],
offset: 8,
header: vec![
81,
76,
67,
77,
102,
109,
116,
32,
],
trailer: vec![
],
},
Signature {
description: "Quicken data file",
class: "Finance",
exts: vec![
"ABD",
"QSD",
],
offset: 0,
header: vec![
81,
87,
32,
86,
101,
114,
46,
32,
],
trailer: vec![
],
},
Signature {
description: "Outlook-Exchange message subheader",
class: "Email",
exts: vec![
"MSG",
],
offset: 512,
header: vec![
82,
0,
111,
0,
111,
0,
116,
0,
32,
0,
69,
0,
110,
0,
116,
0,
114,
0,
121,
0,
],
trailer: vec![
],
},
Signature {
description: "Shareaza (P2P) thumbnail",
class: "Network",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
82,
65,
90,
65,
84,
68,
66,
49,
],
trailer: vec![
],
},
Signature {
description: "R saved work space",
class: "Programming",
exts: vec![
"RDATA",
],
offset: 0,
header: vec![
82,
68,
88,
50,
10,
],
trailer: vec![
],
},
Signature {
description: "WinNT Registry-Registry Undo files",
class: "Windows",
exts: vec![
"REG",
"SUD",
],
offset: 0,
header: vec![
82,
69,
71,
69,
68,
73,
84,
],
trailer: vec![
],
},
Signature {
description: "Antenna data file",
class: "Miscellaneous",
exts: vec![
"AD",
],
offset: 0,
header: vec![
82,
69,
86,
78,
85,
77,
58,
44,
],
trailer: vec![
],
},
Signature {
description: "Windows animated cursor",
class: "Windows",
exts: vec![
"ANI",
],
offset: 0,
header: vec![
82,
73,
70,
70,
],
trailer: vec![
],
},
Signature {
description: "Corel Presentation Exchange metadata",
class: "Presentation",
exts: vec![
"CMX",
],
offset: 0,
header: vec![
82,
73,
70,
70,
],
trailer: vec![
],
},
Signature {
description: "CorelDraw document",
class: "Presentation",
exts: vec![
"CDR",
],
offset: 0,
header: vec![
82,
73,
70,
70,
],
trailer: vec![
],
},
Signature {
description: "Video CD MPEG movie",
class: "Multimedia",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
82,
73,
70,
70,
],
trailer: vec![
],
},
Signature {
description: "Micrografx Designer graphic",
class: "Picture",
exts: vec![
"DS4",
],
offset: 0,
header: vec![
82,
73,
70,
70,
],
trailer: vec![
],
},
Signature {
description: "4X Movie video",
class: "Multimedia",
exts: vec![
"4XM",
],
offset: 0,
header: vec![
82,
73,
70,
70,
],
trailer: vec![
],
},
Signature {
description: "Resource Interchange File Format",
class: "Multimedia",
exts: vec![
"AVI",
"CDA",
"QCP",
"RMI",
"WAV",
"WEBP",
],
offset: 0,
header: vec![
82,
73,
70,
70,
],
trailer: vec![
],
},
Signature {
description: "RIFF Windows MIDI",
class: "Multimedia",
exts: vec![
"RMI",
],
offset: 8,
header: vec![
82,
77,
73,
68,
100,
97,
116,
97,
],
trailer: vec![
],
},
Signature {
description: "WinNT Netmon capture file",
class: "Network",
exts: vec![
"CAP",
],
offset: 0,
header: vec![
82,
84,
83,
83,
],
trailer: vec![
],
},
Signature {
description: "WinRAR compressed archive",
class: "Compressed archive",
exts: vec![
"RAR",
],
offset: 0,
header: vec![
82,
97,
114,
33,
26,
7,
0,
],
trailer: vec![
],
},
Signature {
description: "Generic e-mail_1",
class: "Email",
exts: vec![
"EML",
],
offset: 0,
header: vec![
82,
101,
116,
117,
114,
110,
45,
80,
],
trailer: vec![
],
},
Signature {
description: "Windows prefetch",
class: "Windows",
exts: vec![
"PF",
],
offset: 4,
header: vec![
83,
67,
67,
65,
],
trailer: vec![
],
},
Signature {
description: "Underground Audio",
class: "Multimedia",
exts: vec![
"AST",
],
offset: 0,
header: vec![
83,
67,
72,
108,
],
trailer: vec![
],
},
Signature {
description: "Img Software Bitmap",
class: "Picture",
exts: vec![
"IMG",
],
offset: 0,
header: vec![
83,
67,
77,
73,
],
trailer: vec![
],
},
Signature {
description: "SMPTE DPX (big endian)",
class: "Picture",
exts: vec![
"SDPX",
],
offset: 0,
header: vec![
83,
68,
80,
88,
],
trailer: vec![
],
},
Signature {
description: "Harvard Graphics presentation",
class: "Presentation",
exts: vec![
"SHW",
],
offset: 0,
header: vec![
83,
72,
79,
87,
],
trailer: vec![
],
},
Signature {
description: "Sietronics CPI XRD document",
class: "Miscellaneous",
exts: vec![
"CPI",
],
offset: 0,
header: vec![
83,
73,
69,
84,
82,
79,
78,
73,
],
trailer: vec![
],
},
Signature {
description: "Flexible Image Transport System (FITS) file",
class: "multimedia",
exts: vec![
"FITS",
],
offset: 0,
header: vec![
83,
73,
77,
80,
76,
69,
32,
32,
61,
32,
32,
32,
32,
32,
32,
32,
32,
32,
32,
32,
32,
32,
32,
32,
32,
32,
32,
32,
32,
84,
],
trailer: vec![
],
},
Signature {
description: "StuffIt archive",
class: "Compressed archive",
exts: vec![
"SIT",
],
offset: 0,
header: vec![
83,
73,
84,
33,
0,
],
trailer: vec![
],
},
Signature {
description: "SmartDraw Drawing file",
class: "Presentation",
exts: vec![
"SDR",
],
offset: 0,
header: vec![
83,
77,
65,
82,
84,
68,
82,
87,
],
trailer: vec![
],
},
Signature {
description: "StorageCraft ShadownProtect backup file",
class: "Backup",
exts: vec![
"SPF",
],
offset: 0,
header: vec![
83,
80,
70,
73,
0,
],
trailer: vec![
],
},
Signature {
description: "MultiBit Bitcoin blockchain file",
class: "e-money",
exts: vec![
"SPVB",
],
offset: 0,
header: vec![
83,
80,
86,
66,
],
trailer: vec![
],
},
Signature {
description: "SQLite database file",
class: "Database",
exts: vec![
"DB",
],
offset: 0,
header: vec![
83,
81,
76,
105,
116,
101,
32,
102,
111,
114,
109,
97,
116,
32,
51,
0,
],
trailer: vec![
],
},
Signature {
description: "DB2 conversion file",
class: "Database",
exts: vec![
"CNV",
],
offset: 0,
header: vec![
83,
81,
76,
79,
67,
79,
78,
86,
],
trailer: vec![
],
},
Signature {
description: "QBASIC SZDD file",
class: "Compressed archive",
exts: vec![
],
offset: 0,
header: vec![
83,
90,
32,
136,
240,
39,
51,
209,
],
trailer: vec![
],
},
Signature {
description: "SZDD file format",
class: "Compressed archive",
exts: vec![
],
offset: 0,
header: vec![
83,
90,
68,
68,
136,
240,
39,
51,
],
trailer: vec![
],
},
Signature {
description: "StuffIt compressed archive",
class: "Compressed archive",
exts: vec![
"SIT",
],
offset: 0,
header: vec![
83,
116,
117,
102,
102,
73,
116,
32,
],
trailer: vec![
],
},
Signature {
description: "SuperCalc worksheet",
class: "Spreadsheet",
exts: vec![
"CAL",
],
offset: 0,
header: vec![
83,
117,
112,
101,
114,
67,
97,
108,
],
trailer: vec![
],
},
Signature {
description: "Wii-GameCube",
class: "Multimedia",
exts: vec![
"THP",
],
offset: 0,
header: vec![
84,
72,
80,
0,
],
trailer: vec![
],
},
Signature {
description: "GNU Info Reader file",
class: "Programming",
exts: vec![
"INFO",
],
offset: 0,
header: vec![
84,
104,
105,
115,
32,
105,
115,
32,
],
trailer: vec![
],
},
Signature {
description: "Unicode extensions",
class: "Windows",
exts: vec![
"UCE",
],
offset: 0,
header: vec![
85,
67,
69,
88,
],
trailer: vec![
],
},
Signature {
description: "UFA compressed archive",
class: "Compressed archive",
exts: vec![
"UFA",
],
offset: 0,
header: vec![
85,
70,
65,
198,
210,
193,
],
trailer: vec![
],
},
Signature {
description: "UFO Capture map file",
class: "Miscellaneous",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
85,
70,
79,
79,
114,
98,
105,
116,
],
trailer: vec![
],
},
Signature {
description: "Visual C PreCompiled header",
class: "Programming",
exts: vec![
"PCH",
],
offset: 0,
header: vec![
86,
67,
80,
67,
72,
48,
],
trailer: vec![
],
},
Signature {
description: "Visual Basic User-defined Control file",
class: "Programming",
exts: vec![
"CTL",
],
offset: 0,
header: vec![
86,
69,
82,
83,
73,
79,
78,
32,
],
trailer: vec![
],
},
Signature {
description: "MapInfo Interchange Format file",
class: "Miscellaneous",
exts: vec![
"MIF",
],
offset: 0,
header: vec![
86,
101,
114,
115,
105,
111,
110,
32,
],
trailer: vec![
],
},
Signature {
description: "SPSS template",
class: "Statistics",
exts: vec![
"SCT",
],
offset: 0,
header: vec![
87,
4,
0,
0,
83,
80,
83,
83,
32,
116,
101,
109,
112,
108,
97,
116,
],
trailer: vec![
],
},
Signature {
description: "RIFF Windows Audio",
class: "Multimedia",
exts: vec![
"WAV",
],
offset: 8,
header: vec![
87,
65,
86,
69,
102,
109,
116,
32,
],
trailer: vec![
],
},
Signature {
description: "RIFF WebP",
class: "Multimedia",
exts: vec![
"WEBP",
],
offset: 8,
header: vec![
87,
69,
66,
80,
],
trailer: vec![
],
},
Signature {
description: "Walkman MP3 file",
class: "Multimedia",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
87,
77,
77,
80,
],
trailer: vec![
],
},
Signature {
description: "WordStar for Windows file",
class: "Word processing suite",
exts: vec![
"WS2",
],
offset: 0,
header: vec![
87,
83,
50,
48,
48,
48,
],
trailer: vec![
],
},
Signature {
description: "WinZip compressed archive",
class: "Compressed archive",
exts: vec![
"ZIP",
],
offset: 29152,
header: vec![
87,
105,
110,
90,
105,
112,
],
trailer: vec![
],
},
Signature {
description: "Lotus WordPro file",
class: "Word processing suite",
exts: vec![
"LWP",
],
offset: 0,
header: vec![
87,
111,
114,
100,
80,
114,
111,
],
trailer: vec![
],
},
Signature {
description: "Exchange e-mail",
class: "Email",
exts: vec![
"EML",
],
offset: 0,
header: vec![
88,
45,
],
trailer: vec![
],
},
Signature {
description: "Packet sniffer files",
class: "Network",
exts: vec![
"CAP",
],
offset: 0,
header: vec![
88,
67,
80,
0,
],
trailer: vec![
],
},
Signature {
description: "XPCOM libraries",
class: "Programming",
exts: vec![
"XPT",
],
offset: 0,
header: vec![
88,
80,
67,
79,
77,
10,
84,
121,
],
trailer: vec![
],
},
Signature {
description: "SMPTE DPX file (little endian)",
class: "Picture",
exts: vec![
"DPX",
],
offset: 0,
header: vec![
88,
80,
68,
83,
],
trailer: vec![
],
},
Signature {
description: "MS Publisher",
class: "Word processing suite",
exts: vec![
"BDR",
],
offset: 0,
header: vec![
88,
84,
],
trailer: vec![
],
},
Signature {
description: "ZOO compressed archive",
class: "Compressed archive",
exts: vec![
"ZOO",
],
offset: 0,
header: vec![
90,
79,
79,
32,
],
trailer: vec![
],
},
Signature {
description: "Macromedia Shockwave Flash",
class: "Multimedia",
exts: vec![
"SWF",
],
offset: 0,
header: vec![
90,
87,
83,
],
trailer: vec![
],
},
Signature {
description: "MS Exchange configuration file",
class: "Email",
exts: vec![
"ECF",
],
offset: 0,
header: vec![
91,
71,
101,
110,
101,
114,
97,
108,
],
trailer: vec![
],
},
Signature {
description: "Visual C++ Workbench Info File",
class: "Programming",
exts: vec![
"VCW",
],
offset: 0,
header: vec![
91,
77,
83,
86,
67,
],
trailer: vec![
],
},
Signature {
description: "Dial-up networking file",
class: "Network",
exts: vec![
"DUN",
],
offset: 0,
header: vec![
91,
80,
104,
111,
110,
101,
93,
],
trailer: vec![
],
},
Signature {
description: "Lotus AMI Pro document_1",
class: "Word processing suite",
exts: vec![
"SAM",
],
offset: 0,
header: vec![
91,
86,
69,
82,
93,
],
trailer: vec![
],
},
Signature {
description: "VocalTec VoIP media file",
class: "Multimedia",
exts: vec![
"VMD",
],
offset: 0,
header: vec![
91,
86,
77,
68,
93,
],
trailer: vec![
],
},
Signature {
description: "Microsoft Code Page Translation file",
class: "Windows",
exts: vec![
"CPX",
],
offset: 0,
header: vec![
91,
87,
105,
110,
100,
111,
119,
115,
],
trailer: vec![
],
},
Signature {
description: "Flight Simulator Aircraft Configuration",
class: "Games",
exts: vec![
"CFG",
],
offset: 0,
header: vec![
91,
102,
108,
116,
115,
105,
109,
46,
],
trailer: vec![
],
},
Signature {
description: "WinAmp Playlist",
class: "Audio",
exts: vec![
"PLS",
],
offset: 0,
header: vec![
91,
112,
108,
97,
121,
108,
105,
115,
116,
93,
],
trailer: vec![
],
},
Signature {
description: "Lotus AMI Pro document_2",
class: "Word processing suite",
exts: vec![
"SAM",
],
offset: 0,
header: vec![
91,
118,
101,
114,
93,
],
trailer: vec![
],
},
Signature {
description: "Husqvarna Designer",
class: "Miscellaneous",
exts: vec![
"HUS",
],
offset: 0,
header: vec![
93,
252,
200,
0,
],
trailer: vec![
],
},
Signature {
description: "Jar archive",
class: "Miscellaneous",
exts: vec![
"JAR",
],
offset: 0,
header: vec![
95,
39,
168,
137,
],
trailer: vec![
],
},
Signature {
description: "EnCase case file",
class: "Miscellaneous",
exts: vec![
"CAS",
"CBK",
],
offset: 0,
header: vec![
95,
67,
65,
83,
69,
95,
],
trailer: vec![
],
},
Signature {
description: "Compressed archive file",
class: "Compressed archive",
exts: vec![
"ARJ",
],
offset: 0,
header: vec![
96,
234,
],
trailer: vec![
],
},
Signature {
description: "UUencoded file",
class: "Compressed archive",
exts: vec![
],
offset: 0,
header: vec![
98,
101,
103,
105,
110,
],
trailer: vec![
],
},
Signature {
description: "UUencoded BASE64 file",
class: "Compressed archive",
exts: vec![
"b64",
],
offset: 0,
header: vec![
98,
101,
103,
105,
110,
45,
98,
97,
115,
101,
54,
52,
],
trailer: vec![
10,
61,
61,
61,
61,
10,
],
},
Signature {
description: "Binary property list (plist)",
class: "System",
exts: vec![
],
offset: 0,
header: vec![
98,
112,
108,
105,
115,
116,
],
trailer: vec![
],
},
Signature {
description: "Apple Core Audio File",
class: "Multimedia",
exts: vec![
"CAF",
],
offset: 0,
header: vec![
99,
97,
102,
102,
],
trailer: vec![
],
},
Signature {
description: "Macintosh encrypted Disk image (v1)",
class: "Compressed archive",
exts: vec![
"DMG",
],
offset: 0,
header: vec![
99,
100,
115,
97,
101,
110,
99,
114,
],
trailer: vec![
],
},
Signature {
description: "Virtual PC HD image",
class: "Miscellaneous",
exts: vec![
"VHD",
],
offset: 0,
header: vec![
99,
111,
110,
101,
99,
116,
105,
120,
],
trailer: vec![
],
},
Signature {
description: "Photoshop Custom Shape",
class: "Miscellaneous",
exts: vec![
"CSH",
],
offset: 0,
header: vec![
99,
117,
115,
104,
0,
0,
0,
2,
],
trailer: vec![
],
},
Signature {
description: "Intel PROset-Wireless Profile",
class: "Network",
exts: vec![
"P10",
],
offset: 0,
header: vec![
100,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Torrent file",
class: "Compressed archive",
exts: vec![
"TORRENT",
],
offset: 0,
header: vec![
100,
56,
58,
97,
110,
110,
111,
117,
110,
99,
101,
],
trailer: vec![
],
},
Signature {
description: "Dalvik (Android) executable file",
class: "Mobile",
exts: vec![
"dex",
],
offset: 0,
header: vec![
100,
101,
120,
10,
],
trailer: vec![
],
},
Signature {
description: "Audacity audio file",
class: "Multimedia",
exts: vec![
"AU",
],
offset: 0,
header: vec![
100,
110,
115,
46,
],
trailer: vec![
],
},
Signature {
description: "MS Visual Studio workspace file",
class: "Programming",
exts: vec![
"DSW",
],
offset: 0,
header: vec![
100,
115,
119,
102,
105,
108,
101,
],
trailer: vec![
],
},
Signature {
description: "Macintosh encrypted Disk image (v2)",
class: "Compressed archive",
exts: vec![
"DMG",
],
offset: 0,
header: vec![
101,
110,
99,
114,
99,
100,
115,
97,
],
trailer: vec![
],
},
Signature {
description: "WinNT printer spool file",
class: "Windows",
exts: vec![
"SHD",
],
offset: 0,
header: vec![
102,
73,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Free Lossless Audio Codec file",
class: "Multimedia",
exts: vec![
"FLAC",
],
offset: 0,
header: vec![
102,
76,
97,
67,
0,
0,
0,
34,
],
trailer: vec![
],
},
Signature {
description: "MPEG-4 video file_1",
class: "Multimedia",
exts: vec![
"MP4",
],
offset: 4,
header: vec![
102,
116,
121,
112,
51,
103,
112,
53,
],
trailer: vec![
],
},
Signature {
description: "Apple Lossless Audio Codec file",
class: "Multimedia",
exts: vec![
"M4A",
],
offset: 4,
header: vec![
102,
116,
121,
112,
77,
52,
65,
32,
],
trailer: vec![
],
},
Signature {
description: "ISO Media-MPEG v4-iTunes AVC-LC",
class: "Multimedia",
exts: vec![
"FLV",
"M4V",
],
offset: 4,
header: vec![
102,
116,
121,
112,
77,
52,
86,
32,
],
trailer: vec![
],
},
Signature {
description: "MPEG-4 video file_2",
class: "Multimedia",
exts: vec![
"MP4",
],
offset: 4,
header: vec![
102,
116,
121,
112,
77,
83,
78,
86,
],
trailer: vec![
],
},
Signature {
description: "ISO Base Media file (MPEG-4) v1",
class: "Multimedia",
exts: vec![
"MP4",
],
offset: 4,
header: vec![
102,
116,
121,
112,
105,
115,
111,
109,
],
trailer: vec![
],
},
Signature {
description: "MPEG-4 video-QuickTime file",
class: "Multimedia",
exts: vec![
"M4V",
],
offset: 4,
header: vec![
102,
116,
121,
112,
109,
112,
52,
50,
],
trailer: vec![
],
},
Signature {
description: "QuickTime movie_7",
class: "Multimedia",
exts: vec![
"MOV",
],
offset: 4,
header: vec![
102,
116,
121,
112,
113,
116,
32,
32,
],
trailer: vec![
],
},
Signature {
description: "Win2000-XP printer spool file",
class: "Windows",
exts: vec![
"SHD",
],
offset: 0,
header: vec![
103,
73,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "GIMP file",
class: "Picture",
exts: vec![
"XCF",
],
offset: 0,
header: vec![
103,
105,
109,
112,
32,
120,
99,
102,
],
trailer: vec![
],
},
Signature {
description: "Win Server 2003 printer spool file",
class: "Windows",
exts: vec![
"SHD",
],
offset: 0,
header: vec![
104,
73,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "MacOS icon file",
class: "System",
exts: vec![
"ICNS",
],
offset: 0,
header: vec![
105,
99,
110,
115,
],
trailer: vec![
],
},
Signature {
description: "Skype user data file",
class: "Network",
exts: vec![
"DBB",
],
offset: 0,
header: vec![
108,
51,
51,
108,
],
trailer: vec![
],
},
Signature {
description: "QuickTime movie_1",
class: "Multimedia",
exts: vec![
"MOV",
],
offset: 4,
header: vec![
109,
111,
111,
118,
],
trailer: vec![
],
},
Signature {
description: "QuickTime movie_2",
class: "Multimedia",
exts: vec![
"MOV",
],
offset: 4,
header: vec![
102,
114,
101,
101,
],
trailer: vec![
],
},
Signature {
description: "QuickTime movie_3",
class: "Multimedia",
exts: vec![
"MOV",
],
offset: 4,
header: vec![
109,
100,
97,
116,
],
trailer: vec![
],
},
Signature {
description: "QuickTime movie_4",
class: "Multimedia",
exts: vec![
"MOV",
],
offset: 4,
header: vec![
119,
105,
100,
101,
],
trailer: vec![
],
},
Signature {
description: "QuickTime movie_5",
class: "Multimedia",
exts: vec![
"MOV",
],
offset: 4,
header: vec![
112,
110,
111,
116,
],
trailer: vec![
],
},
Signature {
description: "QuickTime movie_6",
class: "Multimedia",
exts: vec![
"MOV",
],
offset: 4,
header: vec![
115,
107,
105,
112,
],
trailer: vec![
],
},
Signature {
description: "Internet Explorer v11 Tracking Protection List",
class: "Programming",
exts: vec![
"TPL",
],
offset: 0,
header: vec![
109,
115,
70,
105,
108,
116,
101,
114,
76,
105,
115,
116,
],
trailer: vec![
],
},
Signature {
description: "MultiBit Bitcoin wallet information",
class: "E-money",
exts: vec![
"INFO",
],
offset: 0,
header: vec![
109,
117,
108,
116,
105,
66,
105,
116,
46,
105,
110,
102,
111,
],
trailer: vec![
],
},
Signature {
description: "SMS text (SIM)",
class: "Mobile",
exts: vec![
],
offset: 0,
header: vec![
111,
60,
],
trailer: vec![
],
},
Signature {
description: "1Password 4 Cloud Keychain encrypted data",
class: "Encryption",
exts: vec![
],
offset: 0,
header: vec![
111,
112,
100,
97,
116,
97,
48,
49,
],
trailer: vec![
],
},
Signature {
description: "WinNT registry file",
class: "Windows",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
114,
101,
103,
102,
],
trailer: vec![
],
},
Signature {
description: "Sonic Foundry Acid Music File",
class: "Multimedia",
exts: vec![
"AC",
],
offset: 0,
header: vec![
114,
105,
102,
102,
],
trailer: vec![
],
},
Signature {
description: "RealMedia metafile",
class: "Multimedia",
exts: vec![
"RAM",
],
offset: 0,
header: vec![
114,
116,
115,
112,
58,
47,
47,
],
trailer: vec![
],
},
Signature {
description: "Allegro Generic Packfile (compressed)",
class: "Miscellaneous",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
115,
108,
104,
33,
],
trailer: vec![
],
},
Signature {
description: "Allegro Generic Packfile (uncompressed)",
class: "Miscellaneous",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
115,
108,
104,
46,
],
trailer: vec![
],
},
Signature {
description: "PalmOS SuperMemo",
class: "Mobile",
exts: vec![
"PDB",
],
offset: 0,
header: vec![
115,
109,
95,
],
trailer: vec![
],
},
Signature {
description: "STL (STereoLithography) file",
class: "Multimedia",
exts: vec![
"STL",
],
offset: 0,
header: vec![
115,
111,
108,
105,
100,
],
trailer: vec![
],
},
Signature {
description: "CALS raster bitmap",
class: "Picture",
exts: vec![
"CAL",
],
offset: 0,
header: vec![
115,
114,
99,
100,
111,
99,
105,
100,
],
trailer: vec![
],
},
Signature {
description: "PowerBASIC Debugger Symbols",
class: "Programming",
exts: vec![
"PDB",
],
offset: 0,
header: vec![
115,
122,
101,
122,
],
trailer: vec![
],
},
Signature {
description: "PathWay Map file",
class: "Mobile",
exts: vec![
"PRC",
],
offset: 60,
header: vec![
116,
66,
77,
80,
75,
110,
87,
114,
],
trailer: vec![
],
},
Signature {
description: "TrueType font",
class: "Windows",
exts: vec![
"TTF",
],
offset: 0,
header: vec![
116,
114,
117,
101,
0,
],
trailer: vec![
],
},
Signature {
description: "Tape Archive",
class: "Compressed archive",
exts: vec![
"TAR",
],
offset: 257,
header: vec![
117,
115,
116,
97,
114,
],
trailer: vec![
],
},
Signature {
description: "OpenEXR bitmap image",
class: "Picture",
exts: vec![
"EXR",
],
offset: 0,
header: vec![
118,
47,
49,
1,
],
trailer: vec![
],
},
Signature {
description: "Qimage filter",
class: "Miscellaneous",
exts: vec![
"FLT",
],
offset: 0,
header: vec![
118,
50,
48,
48,
51,
46,
49,
48,
],
trailer: vec![
],
},
Signature {
description: "MacOS X image file",
class: "MacOS",
exts: vec![
"DMG",
],
offset: 0,
header: vec![
120,
1,
115,
13,
98,
98,
96,
],
trailer: vec![
],
},
Signature {
description: "eXtensible ARchive file",
class: "Compressed archive",
exts: vec![
"XAR",
],
offset: 0,
header: vec![
120,
97,
114,
33,
],
trailer: vec![
],
},
Signature {
description: "ZoomBrowser Image Index",
class: "Miscellaneous",
exts: vec![
"INFO",
],
offset: 0,
header: vec![
122,
98,
101,
120,
],
trailer: vec![
],
},
Signature {
description: "Windows application log",
class: "Windows",
exts: vec![
"LGC",
"LGD",
],
offset: 0,
header: vec![
123,
13,
10,
111,
32,
],
trailer: vec![
],
},
Signature {
description: "Google Drive Drawing link",
class: "Word processing suite",
exts: vec![
"GDRAW",
],
offset: 0,
header: vec![
123,
34,
117,
114,
108,
34,
58,
32,
34,
104,
116,
116,
112,
115,
58,
47,
],
trailer: vec![
],
},
Signature {
description: "MS WinMobile personal note",
class: "Mobile",
exts: vec![
"PWI",
],
offset: 0,
header: vec![
123,
92,
112,
119,
105,
],
trailer: vec![
],
},
Signature {
description: "Rich Text Format",
class: "Word processing suite",
exts: vec![
"RTF",
],
offset: 0,
header: vec![
123,
92,
114,
116,
102,
49,
],
trailer: vec![
92,
112,
97,
114,
32,
125,
125,
],
},
Signature {
description: "Huskygram, Poem, or Singer embroidery",
class: "Miscellaneous",
exts: vec![
"CSD",
],
offset: 0,
header: vec![
124,
75,
195,
116,
225,
200,
83,
164,
121,
185,
1,
29,
252,
79,
221,
19,
],
trailer: vec![
],
},
Signature {
description: "Corel Paint Shop Pro image",
class: "Presentation",
exts: vec![
"PSP",
],
offset: 0,
header: vec![
126,
66,
75,
0,
],
trailer: vec![
],
},
Signature {
description: "Easy Street Draw diagram file",
class: "Presentation",
exts: vec![
"ESD",
],
offset: 0,
header: vec![
126,
69,
83,
68,
119,
246,
133,
62,
191,
106,
210,
17,
69,
97,
115,
121,
32,
83,
116,
114,
101,
101,
116,
32,
68,
114,
97,
119,
],
trailer: vec![
],
},
Signature {
description: "Digital Watchdog DW-TP-500G audio",
class: "Audio",
exts: vec![
"IMG",
],
offset: 0,
header: vec![
126,
116,
44,
1,
80,
112,
2,
77,
82,
],
trailer: vec![
],
},
Signature {
description: "ELF executable",
class: "Linux-Unix",
exts: vec![
],
offset: 0,
header: vec![
127,
69,
76,
70,
],
trailer: vec![
],
},
Signature {
description: "Relocatable object code",
class: "Windows",
exts: vec![
"OBJ",
],
offset: 0,
header: vec![
128,
],
trailer: vec![
],
},
Signature {
description: "Dreamcast audio",
class: "Multimedia",
exts: vec![
"ADX",
],
offset: 0,
header: vec![
128,
0,
0,
32,
3,
18,
4,
],
trailer: vec![
],
},
Signature {
description: "Kodak Cineon image",
class: "Picture",
exts: vec![
"CIN",
],
offset: 0,
header: vec![
128,
42,
95,
215,
],
trailer: vec![
],
},
Signature {
description: "Outlook Express address book (Win95)",
class: "Email",
exts: vec![
"WAB",
],
offset: 0,
header: vec![
129,
50,
132,
193,
133,
5,
208,
17,
],
trailer: vec![
],
},
Signature {
description: "WordPerfect text",
class: "Word processing suite",
exts: vec![
"WPF",
],
offset: 0,
header: vec![
129,
205,
171,
],
trailer: vec![
],
},
Signature {
description: "PNG image",
class: "Picture",
exts: vec![
"PNG",
],
offset: 0,
header: vec![
137,
80,
78,
71,
13,
10,
26,
10,
],
trailer: vec![
73,
69,
78,
68,
174,
66,
96,
130,
],
},
Signature {
description: "MS Answer Wizard",
class: "Windows",
exts: vec![
"AW",
],
offset: 0,
header: vec![
138,
1,
9,
0,
0,
0,
225,
8,
],
trailer: vec![
],
},
Signature {
description: "Hamarsoft compressed archive",
class: "Compressed archive",
exts: vec![
"HAP",
],
offset: 0,
header: vec![
145,
51,
72,
70,
],
trailer: vec![
],
},
Signature {
description: "PGP secret keyring_1",
class: "Miscellaneous",
exts: vec![
"SKR",
],
offset: 0,
header: vec![
149,
0,
],
trailer: vec![
],
},
Signature {
description: "PGP secret keyring_2",
class: "Miscellaneous",
exts: vec![
"SKR",
],
offset: 0,
header: vec![
149,
1,
],
trailer: vec![
],
},
Signature {
description: "JBOG2 image file",
class: "Picture",
exts: vec![
"JB2",
],
offset: 0,
header: vec![
151,
74,
66,
50,
13,
10,
26,
10,
],
trailer: vec![
3,
51,
0,
1,
0,
0,
0,
0,
],
},
Signature {
description: "GPG public keyring",
class: "Miscellaneous",
exts: vec![
"GPG",
],
offset: 0,
header: vec![
153,
],
trailer: vec![
],
},
Signature {
description: "PGP public keyring",
class: "Miscellaneous",
exts: vec![
"PKR",
],
offset: 0,
header: vec![
153,
1,
],
trailer: vec![
],
},
Signature {
description: "Outlook address file",
class: "Email",
exts: vec![
"WAB",
],
offset: 0,
header: vec![
156,
203,
203,
141,
19,
117,
210,
17,
],
trailer: vec![
],
},
Signature {
description: "tcpdump (libpcap) capture file",
class: "Network",
exts: vec![
],
offset: 0,
header: vec![
161,
178,
195,
212,
],
trailer: vec![
],
},
Signature {
description: "Extended tcpdump (libpcap) capture file",
class: "Network",
exts: vec![
],
offset: 0,
header: vec![
161,
178,
205,
52,
],
trailer: vec![
],
},
Signature {
description: "Access Data FTK evidence",
class: "Miscellaneous",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
169,
13,
0,
0,
0,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Khronos texture file",
class: "Picture",
exts: vec![
"KTX",
],
offset: 0,
header: vec![
171,
75,
84,
88,
32,
49,
49,
187,
13,
10,
26,
10,
],
trailer: vec![
],
},
Signature {
description: "Quicken data",
class: "Finance",
exts: vec![
"QDF",
],
offset: 0,
header: vec![
172,
158,
189,
143,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "PowerPoint presentation subheader_3",
class: "Presentation",
exts: vec![
"PPT",
],
offset: 512,
header: vec![
160,
70,
29,
240,
],
trailer: vec![
],
},
Signature {
description: "Java serialization data",
class: "Programming",
exts: vec![
],
offset: 0,
header: vec![
172,
237,
],
trailer: vec![
],
},
Signature {
description: "BGBlitz position database file",
class: "Miscellaneous",
exts: vec![
"PDB",
],
offset: 0,
header: vec![
172,
237,
0,
5,
115,
114,
0,
18,
],
trailer: vec![
],
},
Signature {
description: "Win95 password file",
class: "Windows",
exts: vec![
"PWL",
],
offset: 0,
header: vec![
176,
77,
70,
67,
],
trailer: vec![
],
},
Signature {
description: "PCX bitmap",
class: "Presentation",
exts: vec![
"DCX",
],
offset: 0,
header: vec![
177,
104,
222,
58,
],
trailer: vec![
],
},
Signature {
description: "Acronis True Image_1",
class: "Miscellaneous",
exts: vec![
"TIB",
],
offset: 0,
header: vec![
180,
110,
104,
68,
],
trailer: vec![
],
},
Signature {
description: "Windows calendar",
class: "Windows",
exts: vec![
"CAL",
],
offset: 0,
header: vec![
181,
162,
176,
179,
179,
176,
165,
181,
],
trailer: vec![
],
},
Signature {
description: "InstallShield Script",
class: "Windows",
exts: vec![
"INS",
],
offset: 0,
header: vec![
184,
201,
12,
0,
],
trailer: vec![
],
},
Signature {
description: "MS Write file_3",
class: "Word processing suite",
exts: vec![
"WRI",
],
offset: 0,
header: vec![
190,
0,
0,
0,
171,
],
trailer: vec![
],
},
Signature {
description: "Palm Desktop DateBook",
class: "Mobile",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
190,
186,
254,
202,
15,
80,
97,
108,
109,
83,
71,
32,
68,
97,
116,
97,
],
trailer: vec![
],
},
Signature {
description: "MS Agent Character file",
class: "Windows",
exts: vec![
"ACS",
],
offset: 0,
header: vec![
195,
171,
205,
171,
],
trailer: vec![
],
},
Signature {
description: "Adobe encapsulated PostScript",
class: "Word processing suite",
exts: vec![
"EPS",
],
offset: 0,
header: vec![
197,
208,
211,
198,
],
trailer: vec![
],
},
Signature {
description: "Jeppesen FliteLog file",
class: "Miscellaneous",
exts: vec![
"LBK",
],
offset: 0,
header: vec![
200,
0,
121,
0,
],
trailer: vec![
],
},
Signature {
description: "Java bytecode",
class: "Programming",
exts: vec![
"CLASS",
],
offset: 0,
header: vec![
202,
254,
186,
190,
],
trailer: vec![
],
},
Signature {
description: "Nokia phone backup file",
class: "Mobile",
exts: vec![
"NBU",
],
offset: 0,
header: vec![
204,
82,
51,
252,
233,
44,
24,
72,
175,
227,
54,
48,
26,
57,
64,
6,
],
trailer: vec![
],
},
Signature {
description: "NAV quarantined virus file",
class: "Miscellaneous",
exts: vec![
],
offset: 0,
header: vec![
205,
32,
170,
170,
2,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Acronis True Image_2",
class: "Multimedia",
exts: vec![
"TIB",
],
offset: 0,
header: vec![
206,
36,
185,
162,
32,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Java Cryptography Extension keystore",
class: "Encryption",
exts: vec![
"JCEKS",
],
offset: 0,
header: vec![
206,
206,
206,
206,
],
trailer: vec![
],
},
Signature {
description: "OS X ABI Mach-O binary (32-bit reverse)",
class: "Programming",
exts: vec![
],
offset: 0,
header: vec![
206,
250,
237,
254,
],
trailer: vec![
],
},
Signature {
description: "Perfect Office document",
class: "Word processing suite",
exts: vec![
"DOC",
],
offset: 0,
header: vec![
207,
17,
224,
161,
177,
26,
225,
0,
],
trailer: vec![
],
},
Signature {
description: "Outlook Express e-mail folder",
class: "Email",
exts: vec![
"DBX",
],
offset: 0,
header: vec![
207,
173,
18,
254,
],
trailer: vec![
],
},
Signature {
description: "OS X ABI Mach-O binary (64-bit reverse)",
class: "Programming",
exts: vec![
],
offset: 0,
header: vec![
207,
250,
237,
254,
],
trailer: vec![
],
},
Signature {
description: "Microsoft Office document",
class: "Word processing suite",
exts: vec![
"DOC",
"DOT",
"PPS",
"PPT",
"XLA",
"XLS",
"WIZ",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "CaseWare Working Papers",
class: "Miscellaneous",
exts: vec![
"AC_",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "Access project file",
class: "Database",
exts: vec![
"ADP",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "Lotus-IBM Approach 97 file",
class: "Database",
exts: vec![
"APR",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "MSWorks database file",
class: "Database",
exts: vec![
"DB",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "Microsoft Common Console Document",
class: "Windows",
exts: vec![
"MSC",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "Microsoft Installer package",
class: "Windows",
exts: vec![
"MSI",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "Microsoft Installer Patch",
class: "Windows",
exts: vec![
"MSP",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "Minitab data file",
class: "Statistics",
exts: vec![
"MTW",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "ArcMap GIS project file",
class: "Miscellaneous",
exts: vec![
"MXD",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "Developer Studio File Options file",
class: "Programming",
exts: vec![
"OPT",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "MS Publisher file",
class: "Word processing suite",
exts: vec![
"PUB",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "Revit Project file",
class: "Miscellaneous",
exts: vec![
"RVT",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "Visual Studio Solution User Options file",
class: "Programming",
exts: vec![
"SOU",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "SPSS output file",
class: "Miscellaneous",
exts: vec![
"SPO",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "Visio file",
class: "Miscellaneous",
exts: vec![
"VSD",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "MSWorks text document",
class: "Word processing suite",
exts: vec![
"WPS",
],
offset: 0,
header: vec![
208,
207,
17,
224,
161,
177,
26,
225,
],
trailer: vec![
],
},
Signature {
description: "WinPharoah filter file",
class: "Network",
exts: vec![
"FTR",
],
offset: 0,
header: vec![
210,
10,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "AOL history|typed URL files",
class: "Network",
exts: vec![
"ARL",
"AUT",
],
offset: 0,
header: vec![
212,
42,
],
trailer: vec![
],
},
Signature {
description: "WinDump (winpcap) capture file",
class: "Network",
exts: vec![
],
offset: 0,
header: vec![
212,
195,
178,
161,
],
trailer: vec![
],
},
Signature {
description: "Windows graphics metafile",
class: "Windows",
exts: vec![
"WMF",
],
offset: 0,
header: vec![
215,
205,
198,
154,
],
trailer: vec![
],
},
Signature {
description: "Word 2.0 file",
class: "Word processing",
exts: vec![
"DOC",
],
offset: 0,
header: vec![
219,
165,
45,
0,
],
trailer: vec![
],
},
Signature {
description: "Corel color palette",
class: "Presentation",
exts: vec![
"CPL",
],
offset: 0,
header: vec![
220,
220,
],
trailer: vec![
],
},
Signature {
description: "eFax file",
class: "Miscellaneous",
exts: vec![
"EFX",
],
offset: 0,
header: vec![
220,
254,
],
trailer: vec![
],
},
Signature {
description: "Amiga icon",
class: "Miscellaneous",
exts: vec![
"INFO",
],
offset: 0,
header: vec![
227,
16,
0,
1,
0,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Win98 password file",
class: "Windows",
exts: vec![
"PWL",
],
offset: 0,
header: vec![
227,
130,
133,
150,
],
trailer: vec![
],
},
Signature {
description: "MS OneNote note",
class: "Miscellaneous",
exts: vec![
"ONE",
],
offset: 0,
header: vec![
228,
82,
92,
123,
140,
216,
167,
77,
],
trailer: vec![
],
},
Signature {
description: "Windows executable file_1",
class: "Windows",
exts: vec![
"COM",
"SYS",
],
offset: 0,
header: vec![
232,
],
trailer: vec![
],
},
Signature {
description: "Windows executable file_2",
class: "Windows",
exts: vec![
"COM",
"SYS",
],
offset: 0,
header: vec![
233,
],
trailer: vec![
],
},
Signature {
description: "Windows executable file_3",
class: "Windows",
exts: vec![
"COM",
"SYS",
],
offset: 0,
header: vec![
235,
],
trailer: vec![
],
},
Signature {
description: "GEM Raster file",
class: "Picture",
exts: vec![
"IMG",
],
offset: 0,
header: vec![
235,
60,
144,
42,
],
trailer: vec![
],
},
Signature {
description: "BitLocker boot sector (Vista)",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
235,
82,
144,
45,
70,
86,
69,
45,
],
trailer: vec![
],
},
Signature {
description: "BitLocker boot sector (Win7)",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
235,
88,
144,
45,
70,
86,
69,
45,
],
trailer: vec![
],
},
Signature {
description: "Word document subheader",
class: "Word processing suite",
exts: vec![
"DOC",
],
offset: 512,
header: vec![
236,
165,
193,
0,
],
trailer: vec![
],
},
Signature {
description: "RedHat Package Manager",
class: "Compressed archive",
exts: vec![
"RPM",
],
offset: 0,
header: vec![
237,
171,
238,
219,
],
trailer: vec![
],
},
Signature {
description: "UTF-8 file",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
239,
187,
191,
],
trailer: vec![
],
},
Signature {
description: "Windows Script Component (UTF-8)_1",
class: "Windows",
exts: vec![
"WSF",
],
offset: 0,
header: vec![
239,
187,
191,
60,
],
trailer: vec![
],
},
Signature {
description: "Windows Script Component (UTF-8)_2",
class: "Windows",
exts: vec![
"WSC",
],
offset: 0,
header: vec![
239,
187,
191,
60,
63,
],
trailer: vec![
],
},
Signature {
description: "YouTube Timed Text (subtitle) file",
class: "Video",
exts: vec![
"YTT",
],
offset: 0,
header: vec![
239,
187,
191,
60,
63,
120,
109,
108,
32,
118,
101,
114,
115,
105,
111,
110,
],
trailer: vec![
],
},
Signature {
description: "FAT12 File Allocation Table",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
240,
255,
255,
],
trailer: vec![
],
},
Signature {
description: "FAT16 File Allocation Table",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
248,
255,
255,
255,
],
trailer: vec![
],
},
Signature {
description: "FAT32 File Allocation Table_1",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
248,
255,
255,
15,
255,
255,
255,
15,
],
trailer: vec![
],
},
Signature {
description: "FAT32 File Allocation Table_2",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
248,
255,
255,
15,
255,
255,
255,
255,
],
trailer: vec![
],
},
Signature {
description: "Bitcoin-Qt blockchain block file",
class: "E-money",
exts: vec![
"DAT",
],
offset: 0,
header: vec![
249,
190,
180,
217,
],
trailer: vec![
],
},
Signature {
description: "XZ archive",
class: "Compressed archive",
exts: vec![
"XZ",
],
offset: 0,
header: vec![
253,
55,
122,
88,
90,
0,
],
trailer: vec![
],
},
Signature {
description: "MS Publisher subheader",
class: "Word processing",
exts: vec![
"PUB",
],
offset: 512,
header: vec![
253,
55,
122,
88,
90,
0,
],
trailer: vec![
],
},
Signature {
description: "Thumbs.db subheader",
class: "Windows",
exts: vec![
"DB",
],
offset: 512,
header: vec![
253,
255,
255,
255,
],
trailer: vec![
],
},
Signature {
description: "MS Publisher file subheader",
class: "Word processing suite",
exts: vec![
"PUB",
],
offset: 512,
header: vec![
253,
255,
255,
255,
2,
],
trailer: vec![
],
},
Signature {
description: "Visual Studio Solution subheader",
class: "Programming",
exts: vec![
"SUO",
],
offset: 512,
header: vec![
253,
255,
255,
255,
4,
],
trailer: vec![
],
},
Signature {
description: "PowerPoint presentation subheader_4",
class: "Presentation",
exts: vec![
"PPT",
],
offset: 512,
header: vec![
253,
255,
255,
255,
14,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Excel spreadsheet subheader_2",
class: "Spreadsheet",
exts: vec![
"XLS",
],
offset: 512,
header: vec![
253,
255,
255,
255,
16,
],
trailer: vec![
],
},
Signature {
description: "PowerPoint presentation subheader_5",
class: "Presentation",
exts: vec![
"PPT",
],
offset: 512,
header: vec![
253,
255,
255,
255,
28,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "Excel spreadsheet subheader_3",
class: "Spreadsheet",
exts: vec![
"XLS",
],
offset: 512,
header: vec![
253,
255,
255,
255,
31,
],
trailer: vec![
],
},
Signature {
description: "Developer Studio subheader",
class: "Programming",
exts: vec![
"OPT",
],
offset: 512,
header: vec![
253,
255,
255,
255,
32,
],
trailer: vec![
],
},
Signature {
description: "Excel spreadsheet subheader_4",
class: "Spreadsheet",
exts: vec![
"XLS",
],
offset: 512,
header: vec![
253,
255,
255,
255,
34,
],
trailer: vec![
],
},
Signature {
description: "Excel spreadsheet subheader_5",
class: "Spreadsheet",
exts: vec![
"XLS",
],
offset: 512,
header: vec![
253,
255,
255,
255,
35,
],
trailer: vec![
],
},
Signature {
description: "Excel spreadsheet subheader_6",
class: "Spreadsheet",
exts: vec![
"XLS",
],
offset: 512,
header: vec![
253,
255,
255,
255,
40,
],
trailer: vec![
],
},
Signature {
description: "Excel spreadsheet subheader_7",
class: "Spreadsheet",
exts: vec![
"XLS",
],
offset: 512,
header: vec![
253,
255,
255,
255,
41,
],
trailer: vec![
],
},
Signature {
description: "PowerPoint presentation subheader_6",
class: "Presentation",
exts: vec![
"PPT",
],
offset: 512,
header: vec![
253,
255,
255,
255,
67,
0,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "OS X ABI Mach-O binary (32-bit)",
class: "Programming",
exts: vec![
],
offset: 0,
header: vec![
254,
237,
250,
206,
],
trailer: vec![
],
},
Signature {
description: "OS X ABI Mach-O binary (64-bit)",
class: "Programming",
exts: vec![
],
offset: 0,
header: vec![
254,
237,
250,
207,
],
trailer: vec![
],
},
Signature {
description: "JavaKeyStore",
class: "Programming",
exts: vec![
],
offset: 0,
header: vec![
254,
237,
254,
237,
],
trailer: vec![
],
},
Signature {
description: "Symantex Ghost image file",
class: "Compressed archive",
exts: vec![
"GHO",
"GHS",
],
offset: 0,
header: vec![
254,
239,
],
trailer: vec![
],
},
Signature {
description: "UTF-16-UCS-2 file",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
254,
255,
],
trailer: vec![
],
},
Signature {
description: "Windows executable",
class: "Windows",
exts: vec![
"SYS",
],
offset: 0,
header: vec![
255,
],
trailer: vec![
],
},
Signature {
description: "Works for Windows spreadsheet",
class: "Spreadsheet",
exts: vec![
"WKS",
],
offset: 0,
header: vec![
255,
0,
2,
0,
4,
4,
5,
84,
],
trailer: vec![
],
},
Signature {
description: "QuickReport Report",
class: "Financial",
exts: vec![
"QRP",
],
offset: 0,
header: vec![
255,
10,
0,
],
trailer: vec![
],
},
Signature {
description: "Windows international code page",
class: "Windows",
exts: vec![
"CPI",
],
offset: 0,
header: vec![
255,
70,
79,
78,
84,
],
trailer: vec![
],
},
Signature {
description: "Keyboard driver file",
class: "Windows",
exts: vec![
"SYS",
],
offset: 0,
header: vec![
255,
75,
69,
89,
66,
32,
32,
32,
],
trailer: vec![
],
},
Signature {
description: "WordPerfect text and graphics",
class: "Word processing suite",
exts: vec![
"WP",
"WPD",
"WPG",
"WPP",
"WP5",
"WP6",
],
offset: 0,
header: vec![
255,
87,
80,
67,
],
trailer: vec![
],
},
Signature {
description: "Generic JPEGimage fil",
class: "Picture",
exts: vec![
"JPEG",
"JPE",
"JPG",
],
offset: 0,
header: vec![
255,
216,
],
trailer: vec![
255,
217,
],
},
Signature {
description: "JPEG-EXIF-SPIFF images",
class: "Picture",
exts: vec![
"JPEG",
"JFIF",
"JPE",
"JPG",
],
offset: 0,
header: vec![
255,
216,
255,
],
trailer: vec![
255,
217,
],
},
Signature {
description: "MPEG-4 AAC audio",
class: "Audio",
exts: vec![
"AAC",
],
offset: 0,
header: vec![
255,
241,
],
trailer: vec![
],
},
Signature {
description: "MPEG-2 AAC audio",
class: "Audio",
exts: vec![
"AAC",
],
offset: 0,
header: vec![
255,
249,
],
trailer: vec![
],
},
Signature {
description: "Windows Registry file",
class: "Windows",
exts: vec![
"REG",
],
offset: 0,
header: vec![
255,
254,
],
trailer: vec![
],
},
Signature {
description: "UTF-32-UCS-2 file",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
255,
254,
],
trailer: vec![
],
},
Signature {
description: "UTF-32-UCS-4 file",
class: "Windows",
exts: vec![
],
offset: 0,
header: vec![
255,
254,
0,
0,
],
trailer: vec![
],
},
Signature {
description: "MSinfo file",
class: "Windows",
exts: vec![
"MOF",
],
offset: 0,
header: vec![
255,
254,
35,
0,
108,
0,
105,
0,
],
trailer: vec![
],
},
Signature {
description: "DOS system driver",
class: "Windows",
exts: vec![
"SYS",
],
offset: 0,
header: vec![
255,
255,
255,
255,
],
trailer: vec![
],
},
]);