Description Extensions Header Offset Footer Default size Flags *** Pictures JPEG JPG;jpeg;jpe \xFF+\xD8\xFF[\xC4\xDB\xE0-\xE3\xE8\xEB\xED\xEE\xFE] 0 ~1 e Thumbcache fragment cmmm CMMM..\x00\x00.[^\x00] 0 ~84 8000000 GUb PNG png \x89PNG\x0D\x0A\x1A\x0A 0 ~6 be GIF gif GIF8[79]a 0 ~3 TIFF/NEF/CR2/DNG tif;tiff;nef;cr2;dng;pef (\x49\x49\x2A\x00)|(\x4D\x4D\x00\x2A) 0 ~5 MSO Document Image mdi EP\*\x00 0 PaperPort scanned MAX1;max ViG..\x1A 0 Bitmap bmp;dib BM.....\x00.\x00....[\x0C\x28\x38\x40\x6C\x7C]\x00\x00\x00 0 ~4 PC Paintbrush pcx \x0A\x05\x01\x08 0 Paint Shop Pro psp;PsPImage (Paint Shop Pro I)|(~BK\x00) 0 High Dynamic Range hdr \#\?RADIANCE 0 Canon Raw crw HEAPCCDR 6 Fuji Raw raf FUJIFILMCCD-RAW 0 Minolta Dimage RAW image mrw \x00MRM 0 Adobe Photoshop psd 8BPS\x00\x01\x00\x00\x00\x00\x00\x00 0 Icon ico \x00\x00\x01\x00[\x01-\x15]\x00(\x10\x10|\x20\x20|\x30\x30|\x40\x40).\x00[\x00\x01] 0 ~7 24000 Graphics Metafile wmf \xD7\xCD\xC6\x9A\x00\x00 0 ~40 Windows 3 Metafile wmf \x01\x00\x09\x00\x00\x03 0 ~40 Enhanced Metafile emf EMF\x00\x00\x01\x00 40 ~18 e Artwork cache itc2 \x00\x00\x01\x1Citch 0 Corel Photopaint cpt CPT[789]?FILE 0 Corel Draw cdr RIFF....CDR 0 ~33 Corel Binary Metafile cmx CMX1 8 ~33 Calamus Vector Graphic cvg CALAMUSCVG 0 MacDraw drawing drw dDocD2 0 Freehand drawing (v3) fh3 FH31 0 Freehand drawing fh9;fh8;fh7;fh5;; AGD[1-4] 0 Google SketchUp skp \xFF\xFE\xFF\x0E\x53\x00\x6B\x00\x65\x00\x74\x00\x63\x00\x68\x00\x55\x00\x70\x00 0 CAD dwg AC10 0 Encapsulated PostScript eps;ai \xC5\xD0\xD3\xC6 0 ~70 WebM Video webm \x1A\x45\xDF\xA3\x01\x00\x00\x00 0 Sony RAW arw \x05\x00\x00\x00AW1\x2E 0 WordPerfect graphics WPG1;wpg \xFFWPC...\x00\x01\x16 0 The GIMP image xcf gimp\x20xcf\x20file 0 LuraWave JPEG-2000 bitmap jp2 \x00\x00\x00\x0C\x6A\x50\x20\x20\x0D\x0A......ftypjp2 0 Xara X drawing XARA;xar XARA\xA3\xA3\x0D 0 Kodak Cineon cin \x80\x2A\x5F\xD7\x00\x00\x08\x00\x00\x00\x04\x00\x00\x00\x04\x00\x00\x00\x00\x00 0 Digital Picture Exchange dpx SDPX\x00\x00[\x08\x20]\x00V#\x2E 0 Micrographix Graphic DRW1;drw \x01\xFF\x02\x04\x03\x02 0 Freehand (MX) Project fh10;fh11 \x1C\x01\x00\x00\x02\x00\x04\x1C\x01\x14\x00\x02\x00\x14\x1C\x01\x16\x00\x02\x00 0 Photoshop Large Document psb 8BPS\x00\x02\x00\x00\x00\x00\x00\x00\x00 0 WebP Image webp RIFF....WEBP 0 ~33 ZbThumbnail info zbex\x04\x00\x00\x4C 0 Adobe Bridge Cache bct \x6C\x6E\x62\x74\x02\x00\x00\x00 0 Corel Photo-Paint cpt CPT9FILE[\x01-\x0F]\x00\x00\x00 0 *** Documents Rich Text Format rtf \{\\rtf 0 ~20 G Unicode UTF-16LE txt \xFF\xFE[\x09\x0A\x0D\x20-\x3B\x40-\x7E\xC0-\xDC]\x00[^\x00]\x00 0 ~48 G Text UTF-8 txt \xEF\xBB\xBF[\x09\x0A\x0D\x20-\x3B\x40-\x7E\xC0-\xDC] 0 ~57 G MS Office/OLE2 ole2;doc;xls;dot;ppt;xla;ppa;pps;pot;msi;sdw;db;vsd;msg \xD0\xCF\x11\xE0\xA1\xB1\x1A\xE1 0 ~16 MS Office 2007+ docx;xlsx;pptx _Types\]\.xml 38 ~14 g MS Access mdb;mda;mde;mdt;fdb;psa \x00\x01\x00\x00Standard Jet 0 ~71 MS Access 2007 accdb;accde \x00\x01\x00\x00Standard ACE DB 0 MS Money mny \x00\x01\x00\x00MSISAM 0 FileMaker Pro database fp5;fp3 \x00\x01\x00\x00\x00\x02\x00\x01\x00\x05\x00\x02\x00\x02\xC0 0 FileMaker Pro 7 fp7 \x00\x01\x00\x00\x00\x02\x00\x01\x00\x05\x00\x02\x00\x02\xC0HBAM7 0 KWord kwd KOffice application/x-kword 10 ~14 g RagTime Document rtd \x43\x23\x2B\x44\xA4\x43\x4D\xA5\x48\x64\x72 0 WordPerfect document wpd;wp;wp5;wp6;wpp \xFFWPC...\x00\x01\x0A 0 MS Word 6.0 doc \x12\x34\x56\x78\x90\xFF 0 MS Word (MacBinary) doc BNMSWD...\x00 67 MS Write wri \x31\xBE\x00\x00\x00\xAB\x00\x00\x00\x00\x00\x00 0 MS Write wri \x32\xBE\x00\x00\x00\xAB\x00\x00\x00\x00\x00\x00 0 MS OneNote one \xE4\x52\x5C\x7B\x8C\xD8\xA7\x4D\xAE\xB1\x53\x78\xD0\x29\x96\xD3 0 OpenOffice Writer sxw;sxg sun\.xml\.writer 54 ~14 g OpenOffice Calc sxc;stc sun\.xml\.calc 54 ~14 g OpenOffice Math sxm sun\.xml\.math 54 ~14 g OpenOffice Impress sxi sun\.xml\.impress 54 ~14 g OpenOffice Draw sxd;std sun\.xml\.draw 54 ~14 g OpenOffice 2 Writer ott document\.text-templ 64 ~14 g OpenOffice 2 Writer odt document\.text 64 ~14 g OpenOffice 2 Calc ots document\.spreadsheet-templ 64 ~14 g OpenOffice 2 Calc ods document\.spreads 64 ~14 g OpenOffice 2 Base odb vnd\.sun\.xml\.base 50 ~14 g OpenOffice 2 Draw odg document\.graphic 64 ~14 g OpenOffice 2 Math odf document\.formula 64 ~14 g OpenOffice 2 Impress odp document\.present 64 ~14 g Quattro Pro Notebook 6.0 wb2 \x00\x00\x02\x00\x02\x10\xC9\x00\x02\x00\x00\x06 0 PostScript/Adobe ps;eps;ai %!PS-Adobe 0 ~56 Adobe Acrobat pdf;ai %PDF\x2D1\x2E 0 ~17 Adobe FrameMaker fm \x0A 100000 F Outlook 2011 Mac olk14MsgSource MSrc 0 ~77 OE addr. book wab \x9C\xCB\xCB\x8D\x13\x75\xD2\x11\x91\x58\x00\xC0\x4F\x79\x56\xA4 0 OE addr. book (Win95) wab \x81\x32\x84\xC1\x85\x05\xD0\x11\xB2\x90\x00\xAA\x00\x3C\xF6\x76 0 vCard vcf BEGIN:VCARD 0 END:VCARD 1000 Virtual Calendar vcs;ics BEGIN:[vV]C[aA][lL][eE][nN][dD][aA][rR] 0 END:VCALENDAR Eudora mbx From\x20\x3F\x3F\x3F\x40\x3F\x3F\x3F\x20 0 Video E-Mail vem High JPEG Data in Memory 0 Offline Address Book oab \x20\x00\x00\x00.{10}\x00\x00 0 ~86 *** Internet #INTERNAL1 HTML/XML HTML;htm;phtml;shtml;xml;xsd;msc ([\x0D\x0A\x09\x20]{0,21}((<[hH][tT][mM][lL])|(\x0A PList (binary) BPLIST;plist,ipmeta bplist00 0 ~58 Finder bookmark flnk book..\x00\x00\x00 0 ~75 Launch Service csstore \xD0\xFA\xD0\xDA\x00 0 ~76 MacOS X Keychain keychain kych\x00\x01 0 ~64 Virtual HD vhd conectix 0 VMware 4 Virtual Disk vmdk KDMV 0 Macintosh Disk Image dmf;dmg \x78\x01\x73\x0D\x62\x62\x60\x60 0 Windows Imaging wim;swm MSWIM\x00\x00\x00 0 ~66 iPhone backup index mbdx mbdx\x02\x00 0 iPhone backup db mbdb mbdb\x05\x00 0 iPhone crash report CRASH;log Incident Identifier: [0-9A-F]{8}- 0 ~56 AppleDouble _ad \x00\x05\x16\x07\x00\x02\x00\x00 0 Apple System Log asl ASL DB\x00{6} 0 ~79 IIE Log log \#Software: Microsoft Internet Information Services #\.#\x0D\x0A 0 ~56 Desktop Services Store ds_store \x00\x00\x00\x01Bud1 0 ~91 *** Music/Video Wave wav WAVEfmt 8 ~33 MP3 ID3 v2/3/4 mp3 ID3[\x02-\x04]\x00[\x00\x80]\x00 0 5242880 E MP3 general mp3 \xFF[\xE2\xE3\xF2\xF3\xFA\xFB][\x10-\x1B\x20-\x2B\x30-\x3B\x40-\x4B\x50-\x5B\x60-\x6B\x70-\x7B\x80-\x8B\x90-\x9B\xA0-\xAB\xB0-\xBB\xC0-\xCB\xD0-\xDB\xE0-\xEB] 0 ~21 cGE OGG Vorbis ogg;ogv;ogm;oga;ogx OggS\x00 0 ~45 5242880 G Audacity au dns\.\x5c 0 AVI avi AVI LIST 8 ~33 10000000 4X Movie 4xm 4XMVLIST 8 Windows Media asf;wmv;wma;dvr-ms \x30\x26\xB2\x75\x8E\x66\xCF\x11\xA6\xD9\x00\xAA\x00\x62\xCE\x6C 0 ~26 10000000 Windows Television wtv \xB7\xD8\x00\x20\x37\x49\xDA\x11\xA6\x4E\x00\x07\xE9\x5E\xAD\x8D 0 MediaPlayer Playlist wpl <\?wpl version= 0 \x0D\x0A M3U playlist m3u \#EXTM3U 0 ~56 Real Audio ram;ra \.raý 0 Real Media rm;rmvb;rv \.RMF 0 10000000 MPEG mpg;mpeg \x00\x00\x01\xBA 0 ~41 20971520 GE QuickTime Movie mov (moov|pnot|wide|mdat) 4 ~27 10000000 E QuickTime MOV mov ftypqt 4 ~27 E QuickTime 3GP 3gp ftypisom 4 ~27 QuickTime 3GP 3gp;3ga ftyp3gp 4 ~27 QuickTime 3GP 3gp ftypmmp4 4 ~27 QuickTime 3G2 3g2 ftyp3g2a 4 ~27 QuickTime M4A m4a;m4p ftypM4A\x20 4 ~27 QuickTime M4V m4v ftypM4V[P\x20] 4 ~27 QuickTime MP4 mp4 ftyp(mp41|avc1|MSNV|FACE|mobi) 4 ~27 QuickTime MP4 mp4;m4b ftypmp42 4 ~27 QuickTime MP4 mp4;m4b ftypdash 4 ~27 AVCHD mts \x00\x00\x00\x00\x47\x40 Matroska mkv;mka (matroska|\x01\x42\xF7\x81\x01\x42\xF2\x81) 8 Flash Video flv FLV\x01[\x01\x04\x05] 0 ~36 10000000 Flash MP4 video f4v ftyp(f4v|F4V)\x20 4 ~27 Director - Shockwave movie dcr XFIR...\x00MDGF 0 MIDI mid;kar MThd 0 250000 Sony Compressed voice dvf MS_VOICE\x00 0 Compact Disc Digital Audio (CD-DA) file cda RIFF....CDDAfmt 0 ~33 AMR-WB Audio awb \x23!AMR-WB\x0A 0 Adaptive Multi Rate audio amr \x23!AMR\x0A 0 ~90 Windows Media Video wvx PCS\x00 0 Audacity Block auf AudacityBlockFile 0 Sony Compressed Voice File dvf;msv MS_VOICE.{8}SONY CORPORATION 0 AU Format Sound snd \x53\x54\x45\x56\x45\x02\x48\x80 0 NeXT_Sun uLaw-AUdio-format ulaw;au \.snd\x00\x00[\x00\x01] 0 *** Programs Compiled HTML chm;chw;chi ITSF\x03\x00\x00\x00 0 ~47 Windows Help hlp;gid (\x3F\x5F\x03\x00)|(\x4C\x4E\x02\x00) 0 MS Help 2.0 its;lit ITOLITLS 0 Windows exec. exe;dll;drv;vxd;sys;ocx;vbx;com;fon MZ.[\x00-\x02].[\x00-\x02] 0 ~30 ELF Object o;ko \x7FELF[\x01\x02]\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01 0 ELF exec. elf \x7FELF\x01\x01\x01\x00.......\x00\x02 0 ~73 ELF 64-bit exec. elf64 \x7FELF\x02\x01\x01\x00.......\x00\x02 0 ~73 ELF shared object so \x7FELF[\x01\x02]\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03 0 ~73 MacOS exec. macho \xCA\xFE\xBA\xBE\x00\x00\x00[\x01\x02\x03] 0 ~67 MacOS 64-bit exec. macho64 \xCF\xFA\xED\xFE 0 *** Application Data Acronis True Image file tib \xB4\x6E\x68\x44 0 Nero CD Compilation nri;nrb \x0E\x4E\x65\x72\x6F\x49\x53\x4F\x30 0 \x00LFDU[^\x00]* Alcohol 120% CD Image mdf \x00\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\x00\x00\x02\x00\x01 0 Ghost Image gho;ghs \xFE\xEF\x01[\x00-\x03]....[\x00\x01][\x00\x01] 0 eMule Collection emulecollection ed2k://\|file\| 0 PGP pubring pkr;gpg \x99\x01\xA2\x04 0 PGP secring skr \x95\x01\xCF\x04 0 Steganos Safe sle ACL[2-5]\x00 0 PGP Safe pgd PGPdMAIN\x60\x01\x00 0 Skype chat CHATSYNC;dat sCdB 0 ~78 Skype localization data mls MLSW...skypePM \x00 0 Skype user data dbb l33l......\x00\x00 0 ~50 G iChat ichat AIM IM with 0 ~56 G MS/MSN MARC archive mar MARC\x03 0 Auto completion jsonp window\.google\.ac\.h\(\[ 0 \]\]\) 1000 Auto completion (2) jsonp window\.google\.td&& 0 \}\); 1000 MapSource GPS Waypoint Database gdb MsRcf 0 SeeYou Waypoint ndb ! ILEC 0 Artwork cache itc2 \x00\x01\x1Citch 0 Flash swf;swc [CF]WS[\x03-\x0F\x11] 0 ~37 Open Financial Connectivity ofc [\x09\x0D\x0A\x20\x3C] 0 ~56 Open financial exchange ofx;qfx \x0A?OFXHEADER:100 0 Point of Interest gpi GRMREC00 8 BlackBerry Backup ipd Inter@ctive Pager Backup/Restore File[\x0A\x20] 0 AVCHD Clip Information cpi HDMV0100 0 Nokia backup nbu \xCC\x52\x33\xFC\xE9\x2C\x18\x48\xAF\xE3\x36\x30\x1A\x39\x40\x06 0 Adobe InDesign indd \x06\x06\xED\xF5\xD8\x1D\x46\xE5\xBD\x31\xEF\xE7\xFE\x74\xB7\x1D 0 ~87 AVCHD Playlist mpl MPLS0[12]00\x00 0 Rhino 3D 3dm 3D Geometry File Format\x20\x20\x20\x20 0 Business Card Designer bcf Business\x0A\x00\x04\x00Card 0 Mobile Phone vNote vnt BEGIN:VNOTE 0 END:VNOTE MS Money mny pfmf\#1\x00 0 QuickBooks qbw \x00\x00\x56\x00\x00\x00\x01\x00\x00\x00..\x00\x00\x41\x00\x00\x00\x4C\x00\x00\x00\x49\x00\x00\x00 0 Inspiration Flowchart isf application/x-inspiration 0 Microsoft Money Backup mbf \x20\x00\x6D\x62\x66 58 Zune playlist zpl <\?zpl version= 0 ~56 Cisco VPN pcf \[main\]\x0D\x0ADescription= 0 ~56 Palm Datebook dba \xBE\xBA\xFE\xCA\x0FPalmSG Database......BD 0 Palm address book aba \xBE\xBA\xFE\xCA\x0FPalmSG Database......BA 0 Palm To-Do tda \xBE\xBA\xFE\xCA\x0FPalmSG Database......DT 0 Palm Memo mpa \xBE\xBA\xFE\xCA\x0FPalmSG Database......PM 0 TomTom POI tlv \x80\x01\x01\x01\x81\x01\x31http:// 3 1500 Pcap-NG Packet Capture pcapng \x4D\x3C\x2B\x1A\x01\x00\x00\x00 8 Adobe Bridge Cache bc hcac\x11\x00\x00\x00 0 ~88 Picasa3 Index thumbindex ffF@...\x00 0 ~89 Intuit Interchange Format iif !(HDR\x09PROD|TIMERHDR\x09VER)\x09VER\x09REL\x09 0 ~56 Tax Exchange Format txf V0##\x0D\x0AA 0 ~56 *** Special Interest Zip record zip PK\x03\x04[\x0A\x14] 0 ~62 bU Firefox cache firefox \x00\x01\x00[\x08-\x13].\x00..\x00\x00\x00.[\x49-\x52] 0 ~55 gU Mozilla 1.7 firefox \x00\x01\x00[\x05\x06].\x00..\x00\x00\x00.[\x42-\x48] 0 ~55 gU Information Summary summary \xFE\xFF\x00\x00.{21}\x00\x00\x00\xE0\x85\x9F\xF2\xF9\x4F 0 1024 U TCP Packet tcp \x08\x00\x45\x00.....\x00[\x01-\x80]\x06 12 ~61 1500 b UDP Packet udp \x08\x00\x45\x00[\x00-\x05].....[\x01-\x80]\x11 12 ~61 1500 b VISA/Mastercard ccn [^0-9\-A-Za-z_\.][45]###[- ]####[- ]####[- ]####[^0-9\-A-Za-z_\[&] 0 ~65 25 b Gigatribe 2.x state file state \x40\x02\x00\x00\x5C\x5C[a-zA-Z] 0 1000 Gigatribe 3.x state file state \x00\x00\x00\x01\x00\x00[\x00\x01].\x00[\\a-zA-Z]\x00[\\:a-zA-Z]\x00 0 \x12\x34\x56\x78 Gigatribe 2.x chat file GIGA,bin \x30\x41\x48\x43...\x00 0 Gigatribe 3.x chat file GIGA,dat \x63\x68\x00\x00\x00\x0A 0 Unix kern.log log [ADFJNOS][a-z][a-z] [ #]# [ 012]#:##:## [a-zA-Z] 0 ~56 G misc log files log 20[01]#-##-##[ T]##:##:##[ \.\,] 0 ~56 G Gatherer fragm gthr2 \x4D\x44\x4D\x44....\x00\x00\x00\x00 0 ~85 GUb CD Volume Descriptor vdscr \x01CD001\x01\x00 0 c Gateway php PHP1 \x00\x00\x00\x01\x00\x12AppendToGatewayUrl 0 PRC1 PRC1 ovly(DTGR|WP2P) 60 Photoshop thmb lnbt lnbt\x01\x00\x00\x00 0 \x08gS\x09 Spotify Playlist BNK1;bnk SPCO.\x00\x00\x00 0