File Manager

003 File Manager

Current Path: /usr/src/contrib/file/magic/Magdir

usr / src / contrib / file / magic / Magdir /

📁 ..
📄 acorn(3.65 KB)
📄 adi(425 B)
📄 adventure(4.38 KB)
📄 algol68(678 B)
📄 allegro(402 B)
📄 alliant(760 B)
📄 amanda(385 B)
📄 amigaos(2.95 KB)
📄 android(6.73 KB)
📄 animation(45.47 KB)
📄 aout(1.69 KB)
📄 apache(822 B)
📄 apl(276 B)
📄 apple(19.05 KB)
📄 application(273 B)
📄 applix(428 B)
📄 apt(1.57 KB)
📄 archive(55.73 KB)
📄 asf(6.39 KB)
📄 assembler(700 B)
📄 asterix(584 B)
📄 att3b(1.23 KB)
📄 audio(34.93 KB)
📄 basis(571 B)
📄 beetle(289 B)
📄 ber(2.34 KB)
📄 bflt(414 B)
📄 bhl(341 B)
📄 bioinformatics(7.5 KB)
📄 biosig(4.73 KB)
📄 blackberry(282 B)
📄 blcr(746 B)
📄 blender(1.17 KB)
📄 blit(884 B)
📄 bout(349 B)
📄 bsdi(1.13 KB)
📄 bsi(263 B)
📄 btsnoop(429 B)
📄 c-lang(3.39 KB)
📄 c64(1.67 KB)
📄 cad(12.21 KB)
📄 cafebabe(2.16 KB)
📄 cbor(610 B)
📄 cddb(386 B)
📄 chord(577 B)
📄 cisco(495 B)
📄 citrus(227 B)
📄 clarion(769 B)
📄 claris(1.68 KB)
📄 clipper(2.09 KB)
📄 clojure(1.11 KB)
📄 coff(2.86 KB)
📄 commands(5.2 KB)
📄 communications(853 B)
📄 compress(13.44 KB)
📄 console(36.72 KB)
📄 convex(2.58 KB)
📄 coverage(2.98 KB)
📄 cracklib(531 B)
📄 ctags(297 B)
📄 ctf(823 B)
📄 cubemap(403 B)
📄 cups(1.75 KB)
📄 dact(379 B)
📄 database(22.4 KB)
📄 dataone(1.72 KB)
📄 dbpf(630 B)
📄 der(3.31 KB)
📄 diamond(509 B)
📄 dif(1.4 KB)
📄 diff(1.05 KB)
📄 digital(1.8 KB)
📄 dolby(2.32 KB)
📄 dump(2.84 KB)
📄 dyadic(2.49 KB)
📄 ebml(350 B)
📄 edid(377 B)
📄 editors(1.01 KB)
📄 efi(547 B)
📄 elf(11 KB)
📄 encore(725 B)
📄 epoc(2.27 KB)
📄 erlang(709 B)
📄 espressif(1.92 KB)
📄 esri(826 B)
📄 fcs(516 B)
📄 filesystems(91.93 KB)
📄 finger(488 B)
📄 flash(1.73 KB)
📄 flif(1.08 KB)
📄 fonts(13.77 KB)
📄 forth(2.84 KB)
📄 fortran(349 B)
📄 frame(2.18 KB)
📄 freebsd(4.79 KB)
📄 fsav(4.13 KB)
📄 fusecompress(430 B)
📄 games(12.77 KB)
📄 gcc(505 B)
📄 gconv(344 B)
📄 geo(4.04 KB)
📄 geos(584 B)
📄 gimp(2.7 KB)
📄 git(321 B)
📄 glibc(879 B)
📄 gnome(2.44 KB)
📄 gnu(5.98 KB)
📄 gnumeric(411 B)
📄 gpt(9.74 KB)
📄 gpu(929 B)
📄 grace(892 B)
📄 graphviz(580 B)
📄 gringotts(1.54 KB)
📄 guile(471 B)
📄 hardware(385 B)
📄 hitachi-sh(1.09 KB)
📄 hp(13.74 KB)
📄 human68k(1004 B)
📄 ibm370(1.59 KB)
📄 ibm6000(1.22 KB)
📄 icc(7.67 KB)
📄 iff(2.67 KB)
📄 images(80.45 KB)
📄 inform(333 B)
📄 intel(4.63 KB)
📄 interleaf(333 B)
📄 island(345 B)
📄 ispell(2.8 KB)
📄 isz(514 B)
📄 java(1.54 KB)
📄 javascript(984 B)
📄 jpeg(3.42 KB)
📄 karma(291 B)
📄 kde(390 B)
📄 keepass(692 B)
📄 kerberos(1.43 KB)
📄 kicad(2.21 KB)
📄 kml(1.43 KB)
📄 lecter(269 B)
📄 lex(528 B)
📄 lif(240 B)
📄 linux(17.84 KB)
📄 lisp(2.77 KB)
📄 llvm(723 B)
📄 lua(754 B)
📄 luks(419 B)
📄 m4(370 B)
📄 mach(8.48 KB)
📄 macintosh(16.58 KB)
📄 macos(206 B)
📄 magic(426 B)
📄 mail.news(2.64 KB)
📄 make(1.25 KB)
📄 map(13.47 KB)
📄 maple(1.86 KB)
📄 marc21(1019 B)
📄 mathcad(300 B)
📄 mathematica(2.69 KB)
📄 matroska(422 B)
📄 mcrypt(1.21 KB)
📄 measure(1013 B)
📄 mercurial(424 B)
📄 metastore(337 B)
📄 meteorological(1.77 KB)
📄 microfocus(741 B)
📄 mime(280 B)
📄 mips(2.97 KB)
📄 mirage(258 B)
📄 misctools(2.45 KB)
📄 mkid(318 B)
📄 mlssa(277 B)
📄 mmdf(220 B)
📄 modem(2.94 KB)
📄 modulefile(421 B)
📄 motorola(2.63 KB)
📄 mozilla(1.41 KB)
📄 msdos(57.99 KB)
📄 msooxml(2.09 KB)
📄 msvc(2.35 KB)
📄 msx(9.34 KB)
📄 mup(781 B)
📄 music(546 B)
📄 nasa(272 B)
📄 natinst(1.05 KB)
📄 ncr(1.69 KB)
📄 neko(373 B)
📄 netbsd(7.36 KB)
📄 netscape(902 B)
📄 netware(306 B)
📄 news(555 B)
📄 nitpicker(460 B)
📄 numpy(401 B)
📄 oasis(471 B)
📄 ocaml(542 B)
📄 octave(323 B)
📄 ole2compounddocs(18.67 KB)
📄 olf(3.14 KB)
📄 openfst(616 B)
📄 opentimestamps(704 B)
📄 os2(1.83 KB)
📄 os400(1.88 KB)
📄 os9(2.55 KB)
📄 osf1(254 B)
📄 palm(5.16 KB)
📄 parix(384 B)
📄 parrot(764 B)
📄 pascal(444 B)
📄 pbf(444 B)
📄 pbm(258 B)
📄 pc88(726 B)
📄 pc98(2.72 KB)
📄 pdf(1.03 KB)
📄 pdp(1.3 KB)
📄 perl(3.52 KB)
📄 pgf(1.38 KB)
📄 pgp(15.43 KB)
📄 pkgadd(297 B)
📄 plan9(866 B)
📄 plus5(550 B)
📄 pmem(1.23 KB)
📄 polyml(744 B)
📄 printer(5.83 KB)
📄 project(389 B)
📄 psdbms(483 B)
📄 psl(559 B)
📄 pulsar(370 B)
📄 pwsafe(669 B)
📄 pyramid(426 B)
📄 python(10.29 KB)
📄 qt(745 B)
📄 revision(2.36 KB)
📄 riff(15.77 KB)
📄 rpi(674 B)
📄 rpm(1.09 KB)
📄 rpmsg(349 B)
📄 rst(385 B)
📄 rtf(3.71 KB)
📄 ruby(1.86 KB)
📄 sc(245 B)
📄 sccs(835 B)
📄 scientific(3.56 KB)
📄 securitycerts(366 B)
📄 selinux(806 B)
📄 sendmail(1.46 KB)
📄 sequent(1.67 KB)
📄 sereal(1.24 KB)
📄 sgi(3.89 KB)
📄 sgml(4.43 KB)
📄 sharc(816 B)
📄 sinclair(1007 B)
📄 sisu(471 B)
📄 sketch(258 B)
📄 smalltalk(593 B)
📄 smile(1.23 KB)
📄 sniffer(13.39 KB)
📄 softquad(1.45 KB)
📄 sosi(1.65 KB)
📄 spec(600 B)
📄 spectrum(3.17 KB)
📄 sql(5.15 KB)
📄 ssh(1.4 KB)
📄 ssl(929 B)
📄 sun(4.69 KB)
📄 sylk(1.23 KB)
📄 symbos(915 B)
📄 sysex(11.53 KB)
📄 tcl(1005 B)
📄 teapot(266 B)
📄 terminfo(2.46 KB)
📄 tex(4.55 KB)
📄 tgif(262 B)
📄 ti-8x(7.55 KB)
📄 timezone(1.46 KB)
📄 tplink(2.89 KB)
📄 troff(1.22 KB)
📄 tuxedo(306 B)
📄 typeset(286 B)
📄 unicode(771 B)
📄 unisig(402 B)
📄 unknown(1.34 KB)
📄 usd(568 B)
📄 uterus(468 B)
📄 uuencode(1.09 KB)
📄 vacuum-cleaner(2.06 KB)
📄 varied.out(1.63 KB)
📄 varied.script(1.49 KB)
📄 vax(1001 B)
📄 vicar(759 B)
📄 virtual(11.69 KB)
📄 virtutech(524 B)
📄 visx(972 B)
📄 vms(1.41 KB)
📄 vmware(283 B)
📄 vorbis(5.97 KB)
📄 vxl(489 B)
📄 warc(596 B)
📄 weak(629 B)
📄 web(371 B)
📄 webassembly(633 B)
📄 windows(37.27 KB)
📄 wireless(295 B)
📄 wordprocessors(10.51 KB)
📄 wsdl(761 B)
📄 x68000(743 B)
📄 xdelta(548 B)
📄 xenix(2.98 KB)
📄 xilinx(1.26 KB)
📄 xo65(987 B)
📄 xwindows(1.04 KB)
📄 yara(461 B)
📄 zfs(2.37 KB)
📄 zilog(451 B)
📄 zip(3.23 KB)
📄 zyxel(613 B)

Editing: fsav

#------------------------------------------------------------------------------
# $File: fsav,v 1.19 2019/04/19 00:42:27 christos Exp $
# fsav:  file(1) magic for datafellows fsav virus definition files
# Anthon van der Neut (anthon@mnt.org)

# ftp://ftp.f-prot.com/pub/{macrdef2.zip,nomacro.def}
0	beshort		0x1575		fsav macro virus signatures
>8	leshort		>0		(%d-
>11	byte		>0		\b%02d-
>10	byte		>0		\b%02d)
# ftp://ftp.f-prot.com/pub/sign.zip
#10	ubyte		<12
#>9	ubyte		<32
#>>8	ubyte		0x0a
#>>>12	ubyte		0x07
#>>>>11	uleshort	>0		fsav DOS/Windows virus signatures (%d-
#>>>>10	byte		0		\b01-
#>>>>10	byte		1		\b02-
#>>>>10	byte		2		\b03-
#>>>>10	byte		3		\b04-
#>>>>10	byte		4		\b05-
#>>>>10	byte		5		\b06-
#>>>>10	byte		6		\b07-
#>>>>10	byte		7		\b08-
#>>>>10	byte		8		\b09-
#>>>>10	byte		9		\b10-
#>>>>10	byte		10		\b11-
#>>>>10	byte		11		\b12-
#>>>>9	ubyte		>0		\b%02d)
# ftp://ftp.f-prot.com/pub/sign2.zip
#0	ubyte		0x62
#>1	ubyte		0xF5
#>>2	ubyte		0x1
#>>>3	ubyte		0x1
#>>>>4	ubyte		0x0e
#>>>>>13		ubyte	>0		fsav virus signatures
#>>>>>>11	ubyte	x		size 0x%02x
#>>>>>>12	ubyte	x		\b%02x
#>>>>>>13	ubyte	x		\b%02x bytes

# Joerg Jenderek: joerg dot jenderek at web dot de
# clamav-0.100.2\docs\html\node60.html 
# https://github.com/vrtadmin/clamav-faq/raw/master/manual/clamdoc.pdf
# ClamAV virus database files start with a 512 bytes colon separated header
# ClamAV-VDB:buildDate:version:signaturesNumbers:functionalityLevelRequired:MD5:Signature:builder:buildTime
# + gzipped (optional) tarball files
# output can often be verified by `sigtool --info=FILE`
0	string		ClamAV-VDB:	Clam AntiVirus
# padding spaces implies database
>511	ubyte		=0x20		database
!:mime	application/x-clamav-database
# empty build time
>>10	string		=::		(unsigned)
# sigtool(1) man page
!:ext	cud
# display some text to avoid error like:
# Magdir/fsav, 78: Warning: Current entry does not yet have a description for adding a EXTENSION type
# file: could not find any valid magic files! (No error)
>>10	default		x		(with buildtime)
#>>10	default		x
# clamtmp is used for temporily database like update process
# for pure tar database only cld extension found
!:ext	cld/cvd/clamtmp/cud
>511	default		x		file
!:mime	application/x-clamav
!:ext	info
>11	string		>\0
# buildDate empty or like "22 Mar 2017 12-57 -0400"; verified by `sigtool -i FILE`
>>11	regex		\^[^:]{0,23}	\b, %s
# version like 25170
>>>&1	regex		\^[^:]{1,6}	\b, version %s
# signaturesNumbers like 4566249
>>>>&1	regex		\^[^:]{1,10}	\b, %s signatures
# functionalityLevelRequired like 60
>>>>>&1	regex		\^[^:]{1,4}	\b, level %s
# X for nothing or MD5
#>>>>>>&1	regex	\^[^:]{1,32}	\b, MD5 "%s"
>>>>>>&1	regex	\^[^:]{1,32}
# X for nothing or digital signature starting like AIzk/LYbX
#>>>>>>>&1	regex	\^[^:]{1,255}	\b, signature "%s"
>>>>>>>&1	regex	\^[^:]{1,255}
# builder like neo
>>>>>>>>&1	regex	\^[^:]{1,32}	\b, builder %s
# buildTime like 1506611558
#>>>>>>>>>&1	regex	\^[^:]{1,10}	\b, %s
>>>>>>>>>&1	regex	\^[^:]{1,10}	
# padding with spaces
#>>>>>>>>>>&1	ubequad	x		\b, padding 0x%16.16llx
>510	ubyte		=0x20
# inspect real database content
#>>512	ubeshort	x		\b, database MAGIC 0x%x
# ./archive handle pure tar archives
>>1012	quad		=0		\b, with
>>>512	use		tar-file
# not pure tar
>>1012	quad		!0
# one space at the end of text and then handles gziped archives by ./compress
>>>512	string		\037\213	\b, with 
>>>>512	indirect	x

# Type: Grisoft AVG AntiVirus
# From: David Newgas <david@newgas.net>
0	string	AVG7_ANTIVIRUS_VAULT_FILE	AVG 7 Antivirus vault file data

0	string	X5O!P%@AP[4\\PZX54(P^)7CC)7}$EICAR
>33	string	-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*	EICAR virus test files

# From: Joerg Jenderek
# URL: https://www.avira.com/
# Note: found in directory %ProgramData%\Avira\Antivirus\INFECTED (Windows)
# tested with version 15.0.43.23 at November 2019
0	string		AntiVir\ Qua	Avira AntiVir quarantined
!:mime	application/x-avira-qua
#!:mime	application/octet-stream
!:ext	qua
>156	string		SUSPICIOUS_FILE
# file path of suspicious file
>>220	lestring16	x		%s
>156	string		!SUSPICIOUS_FILE
# file path of virus file
>>228	lestring16	x		%s
# quarantined date
>60	ldate		x		at %s
# virus/danger name
>156	string		!SUSPICIOUS_FILE
>>156	string		x		\b, category "%s"

003 File Manager

Editing: fsav

Upload File

Create Folder