-
Notifications
You must be signed in to change notification settings - Fork 34
/
Copy pathcustom.magic
105 lines (105 loc) · 3.61 KB
/
custom.magic
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
# Assemblyline Cart files
0 string CART
>0x6 quad 0 custom: archive/cart
# IDA Analysis files
0 string IDA1\000\000 custom: code/ida
# JFIF (JPEG) files
0 string JFIF\000\001 custom: image/jpg
# RTF Files
0 string {\\rt custom: document/office/rtf
# Flash files
0 string ZWS custom: archive/audiovisual/flash
0 string CWS custom: archive/audiovisual/flash
0 string FWS custom: audiovisual/flash
# MHTML files
0 string
>&0 regex/10 \^(Subject|MIME)
>>0x10 search/0x100 multipart/related
>>>0x50 search/0x300 urn:schemas-microsoft-com:office custom: document/office/mhtml
# OneNote Files
0 string \344R\\{\214\330\247M\256\261Sx\320)\226\323 custom: document/office/onenote
# Open XML files with Microsoft Word
0 string
>0 search/0x100 =<?mso-application\ progid="Word.Document"?> custom: document/office/word
# VBE files
0 string
>&0 regex/20 \^#@~\\^[^=]{6}== custom: code/vbe
# VBS files
0 string
>&0 regex/300 \(On\ Error\ Resume\ Next|WScript\.CreateObject) custom: code/vbs
# Android
# XML compiled files
0 string \003\000\010\000 custom: android/xml
# Resources files
0 string \002\000\014\000 custom: android/resource
# DEX files
0 string dex\n custom: android/dex
# Games sound files
# FSB
0 string FSB custom: audiovisual/fsb
# AFS
0 string AFS2 custom: audiovisual/afs
# ACB
0 string @UTF\000 custom: audiovisual/acb
# Textures
0 string PVR custom: image/texture/powervr
0 string KA3D custom: image/texture/ka3d
0 string RVIO custom: image/texture/rvio
0 string PKM custom: image/texture/pkm
0 string \253KTX\040 custom: image/texture/ktx
0 string 4\000\000\000
>&0 search/0x40 PVR! custom: font/texture/pvr
# Opengl code (gles)
0 search/0x100 technique
>&0 search/0x100 pass
>>&0 regex/0x100 VertexShader|PixelShader custom: code/gles
# Opengl code (glsl)
0 regex/0x100 COMPILEVS|COMPILEPS
>&0 regex/0x100 vec2|vec3|vec4 custom: code/glsl
1 string technique custom: code/glsl
1 string renderpath custom: code/glsl
1 string material custom: code/glsl
1 string texture custom: code/glsl
# Animations
0 string ibcc custom: code/animation/ccb
# Java manifest file
0 string Manifest-Version: custom: java/manifest
# Java signature file
0 string Signature-Version: custom: java/signature
# RSA Certs
0 string
>0 search/0x20 \006\011\052\206\110\206\367\015\001\007\002\240 custom: certificate/rsa
# Java Jbdiff files
0 string \x001jbdiff custom: java/jbdiff
# Resources files
0 long 4
>8 byte 0 custom: resource/pak
0 long 4
>8 byte 1 custom: resource/pak
0 long 4
>8 byte 2 custom: resource/pak
0 string CPK\040\377 custom: resource/cpk
0 string DTRZ custom: resource/dz
0 string
>(0.S-2) string Mesh custom: resource/sbm
0 string SC\000\000\000\001\000\000\000\020 custom: resource/sc
0 string CCZ!\000\000\000\001\000\000\000\000 custom: resource/ccz
0 string EB\000\003\000\000\000 custom: resource/big
0 string PTCH\007\001 custom: resource/ptc
0 string SBle
>16 string MRAH custom: resource/sbr
0 string
>&0 regex/40 [0-9]\\.[0-9]\\.[0-9][a-zA-Z][0-9] custom: resource/unity
# Database files
# DBF
0 string DBPF\002\000\000\000\001 custom: db/dbf
# sqlite
0 string SQLite\040format\040 custom: db/sqlite
# WSF code files
0 string \<job
>&0 search/0x30 \<script\ language custom: code/wsf
# TCPDump capture
0 short 0x3C4D
>&0 short 0xA1B2 custom: network\tcpdump
# Email
0 string DKIM-Signature: custom: document/email