#--------------------------------------------------------------------- # ANIMATION FILES #--------------------------------------------------------------------- # # AVI (Windows animation and DiVX/MPEG-4 movies) avi(4000000, RIFF\?\?\?\?); # MPEG Video mpg(4000000, \x00\x00\x01\xba, \x00\x00\x01\xb9); mpg(4000000, \x00\x00\x01\xb3, \x00\x00\x01\xb7); # Macromedia Flash fws(4000000, FWS); #--------------------------------------------------------------------- # GRAPHICS FILES #--------------------------------------------------------------------- # # # AOL ART files art(150000, \x4a\x47\x04\x0e, \xcf\xc7\xcb); art(150000, \x4a\x47\x03\x0e, \xd0\xcb\x00\x00); # GIF and JPG files (very common) gif(3000000, \x47\x49\x46\x38\x37\x61, \x00\x3b); gif(3000000, \x47\x49\x46\x38\x39\x61, \x00\x00\x3b); jpg(1000000, \xff\xd8\xff\xe0\x00\x10, \xff\xd9); jpg(1000000, \xff\xd8\xff\xe1); # PNG (used in web pages) png(1000000, \x50\x4e\x47\?, \xff\xfc\xfd\xfe); # BMP (used by MSWindows, use only if you have reason to think there are # BMP files worth digging for. This often kicks back a lot of false # positives bmp(100000, BM\?\?\x00\x00\x00); # TIF tif(200000000, \x49\x49\x2a\x00); #--------------------------------------------------------------------- # MICROSOFT OFFICE #--------------------------------------------------------------------- # # Word documents doc(12500000, \xd0\xcf\x11\xe0\xa1\xb1); # Outlook files pst(400000000, \x21\x42\x4e\xa5\x6f\xb5\xa6); ost(400000000, \x21\x42\x44\x4e); # Outlook Express dbx(4000000, \xcf\xad\x12\xfe\xc5\xfd\x74\x6f); idx(4000000, \x4a\x4d\x46\x39); mbx(4000000, \x4a\x4d\x46\x36); #--------------------------------------------------------------------- # HTML #--------------------------------------------------------------------- html(50000, \x3chtml, \x3c\x2fhtml\x3e); #--------------------------------------------------------------------- # ADOBE PDF #--------------------------------------------------------------------- pdf(5000000, \x25PDF, \x25EOF\x0d); #--------------------------------------------------------------------- # AOL (AMERICA ONLINE) #--------------------------------------------------------------------- # # AOL Mailbox mail(500000, \x41\x4f\x4c\x56\x4d); #--------------------------------------------------------------------- # SOUND FILES #--------------------------------------------------------------------- # wav will be captured as avi. # Real Audio Files ra(1000000, \x2e\x72\x61\xfd); ra(1000000, \x2eRMF); #--------------------------------------------------------------------- # MISCELLANEOUS #--------------------------------------------------------------------- # zip(10000000, PK\x03\x04, \x3c\xac); java(1000000, \xca\xfe\xba\xbe);