1 2#----------------------------------------------------------------------------- 3# $File: misctools,v 1.20 2021/05/25 15:13:55 christos Exp $ 4# misctools: file(1) magic for miscellaneous UNIX tools. 5# 60 search/1 %%!! X-Post-It-Note text 70 string/c BEGIN:VCALENDAR vCalendar calendar file 8!:mime text/calendar 9# updated by Joerg Jenderek at Apr 2015, May 2021 10# https://en.wikipedia.org/wiki/VCard 11# URL: http://fileformats.archiveteam.org/wiki/VCard 12# https://datatracker.ietf.org/doc/html/rfc6350 13# the value is case-insensitive 140 string/c begin:vcard 15# skip DROID fmt-395-signature-id-634.vcf 16>13 string !VERSION:END vCard visiting card 17# deprecated 18#!:mime text/x-vcard 19!:mime text/vcard 20!:apple ????vCrd 21!:ext vcf/vcard 22# VERSION must come right after BEGIN for 3.0 or 4.0 except in 2.1 , where it can be anywhere 23# Joerg_Jenderek_67.vcf 24>>12 search/0x113b4/c version: 25# VERSION 2.1 , 3.0 or 4.0 26>>>&0 string x \b, version %-.3s 27>>>&0 string !2.1 28>>>>13 string !VERSION: \b, 2nd line does not start with VERSION: 29# downcase violates RFC 6350, but some "bad" software produce such vcards 30>>0 string !BEGIN \b, not up case 31# http://ftp.mozilla.org/pub/thunderbird/candidates/ 32# 78.10.1-candidates/build1/source/thunderbird-78.10.1.source.tar.xz 33# thunderbird-78.10.1/comm/mailnews/import/test/unit/resources/basic_vcard_addressbook.vcf 34>>11 beshort !0x0D0A \b, lines not separated by CRLF 35 36# Summary: Libtool library file 37# Extension: .la 38# Submitted by: Tomasz Trojanowski <tomek@uninet.com.pl> 390 search/80 .la\ -\ a\ libtool\ library\ file libtool library file 40 41# Summary: Libtool object file 42# Extension: .lo 43# Submitted by: Abel Cheung <abelcheung@gmail.com> 440 search/80 .lo\ -\ a\ libtool\ object\ file libtool object file 45 46# From: Daniel Novotny <dnovotny@redhat.com> 47# Update: Joerg Jenderek 48# URL: https://en.wikipedia.org/wiki/Core_dump#User-mode_memory_dumps 49# Reference: https://msdn.microsoft.com/en-us/library/ms680378%28VS.85%29.aspx 50# 51# "Windows Minidump" by TrID 52# ./misctools (version 5.25) labeled the entry as "MDMP crash report data" 530 string MDMP Mini DuMP crash report 54# https://filext.com/file-extension/DMP 55!:mime application/x-dmp 56!:ext dmp/mdmp 57# The high-order word is an internal value that is implementation specific. 58# The low-order word is MINIDUMP_VERSION 0xA793 59>4 ulelong&0x0000FFFF !0xA793 \b, version %#4.4x 60# NumberOfStreams 8,9,10,13 61>8 ulelong x \b, %d streams 62# StreamDirectoryRva 0x20 63>12 ulelong !0x20 \b, %#8.8x RVA 64# CheckSum 0 65>16 ulelong !0 \b, CheckSum %#8.8x 66# Reserved or TimeDateStamp 67>20 ledate x \b, %s 68# https://msdn.microsoft.com/en-us/library/windows/desktop/ms680519%28v=vs.85%29.aspx 69# Flags MINIDUMP_TYPE enumeration type 0 0x121 0x800 70>24 ulelong x \b, %#x type 71# >24 ulelong >0 \b; include 72# >>24 ulelong &0x00000001 \b data sections, 73# >>24 ulelong &0x00000020 \b list of unloaded modules, 74# >>24 ulelong &0x00000100 \b process and thread information, 75# >>24 ulelong &0x00000800 \b memory information, 76 77# Summary: abook addressbook file 78# Submitted by: Mark Schreiber <mark7@alumni.cmu.edu> 790 string #\x20abook\x20addressbook\x20file abook address book 80!:mime application/x-abook-addressbook 81