123456789101112131415161718192021222324252627282930313233343536373839 |
- #------------------------------------------------------------
- # $File: java,v 1.14 2013/02/08 16:54:45 christos Exp $
- # Java ByteCode and Mach-O binaries (e.g., Mac OS X) use the
- # same magic number, 0xcafebabe, so they are both handled
- # in the entry called "cafebabe".
- #------------------------------------------------------------
- # Java serialization
- # From Martin Pool (m.pool@pharos.com.au)
- 0 beshort 0xaced Java serialization data
- >2 beshort >0x0004 \b, version %d
- 0 belong 0xfeedfeed Java KeyStore
- !:mime application/x-java-keystore
- 0 belong 0xcececece Java JCE KeyStore
- !:mime application/x-java-jce-keystore
- # Dalvik .dex format. http://retrodev.com/android/dexformat.html
- # From <mkf@google.com> "Mike Fleming"
- 0 string dex\n
- >0 regex dex\n[0-9][0-9][0-9]\0 Dalvik dex file
- >4 string >000 version %s
- 0 string dey\n
- >0 regex dey\n[0-9][0-9][0-9]\0 Dalvik dex file (optimized for host)
- >4 string >000 version %s
- # Java source
- 0 regex ^import.*;$ Java source
- !:mime text/x-java
- # http://android.stackexchange.com/questions/23357/\
- # is-there-a-way-to-look-inside-and-modify-an-adb-backup-created-file/\
- # 23608#23608
- 0 string ANDROID\040BACKUP\n Android Backup
- >15 string 1\n \b, version 1
- >17 string 0\n \b, uncompressed
- >17 string 1\n \b, compressed
- >19 string none\n \b, unencrypted
- >19 string AES-256\n \b, encrypted AES-256
|