#------------------------------------------------------------ # Java ByteCode and Mach-O binaries (e.g., Mac OS X) use the # same magic number, 0xcafebabe, so they are both handled # in the entry called "cafebabe". #------------------------------------------------------------ # Java serialization # From Martin Pool (m.pool@pharos.com.au) 0 beshort 0xaced Java serialization data >2 beshort >0x0004 \b, version %d 0 belong 0xfeedfeed Java KeyStore 0 belong 0xcececece Java JCE KeyStore # Dalvik .dex format. http://retrodev.com/android/dexformat.html # From "Mike Fleming" 0 string dex\n >0 regex dex\n[0-9][0-9][0-9]\0 Dalvik dex file >4 string >000 version %s 0 string dey\n >0 regex dey\n[0-9][0-9][0-9]\0 Dalvik dex file (optimized for host) >4 string >000 version %s