summaryrefslogtreecommitdiff
path: root/magic/Magdir/java
diff options
context:
space:
mode:
Diffstat (limited to 'magic/Magdir/java')
-rw-r--r--magic/Magdir/java39
1 files changed, 39 insertions, 0 deletions
diff --git a/magic/Magdir/java b/magic/Magdir/java
new file mode 100644
index 0000000..f494f61
--- /dev/null
+++ b/magic/Magdir/java
@@ -0,0 +1,39 @@
+
+#------------------------------------------------------------
+# $File: java,v 1.14 2013/02/08 16:54:45 christos Exp $
+# Java ByteCode and Mach-O binaries (e.g., Mac OS X) use the
+# same magic number, 0xcafebabe, so they are both handled
+# in the entry called "cafebabe".
+#------------------------------------------------------------
+# Java serialization
+# From Martin Pool (m.pool@pharos.com.au)
+0 beshort 0xaced Java serialization data
+>2 beshort >0x0004 \b, version %d
+
+0 belong 0xfeedfeed Java KeyStore
+!:mime application/x-java-keystore
+0 belong 0xcececece Java JCE KeyStore
+!:mime application/x-java-jce-keystore
+
+# Dalvik .dex format. http://retrodev.com/android/dexformat.html
+# From <mkf@google.com> "Mike Fleming"
+0 string dex\n
+>0 regex dex\n[0-9][0-9][0-9]\0 Dalvik dex file
+>4 string >000 version %s
+0 string dey\n
+>0 regex dey\n[0-9][0-9][0-9]\0 Dalvik dex file (optimized for host)
+>4 string >000 version %s
+
+# Java source
+0 regex ^import.*;$ Java source
+!:mime text/x-java
+
+# http://android.stackexchange.com/questions/23357/\
+# is-there-a-way-to-look-inside-and-modify-an-adb-backup-created-file/\
+# 23608#23608
+0 string ANDROID\040BACKUP\n Android Backup
+>15 string 1\n \b, version 1
+>17 string 0\n \b, uncompressed
+>17 string 1\n \b, compressed
+>19 string none\n \b, unencrypted
+>19 string AES-256\n \b, encrypted AES-256