1b6cee71dSXin LI 2b6cee71dSXin LI#------------------------------------------------------------ 33e41d09dSXin LI# $File: java,v 1.18 2015/11/29 22:08:14 christos Exp $ 4b6cee71dSXin LI# Java ByteCode and Mach-O binaries (e.g., Mac OS X) use the 5b6cee71dSXin LI# same magic number, 0xcafebabe, so they are both handled 6b6cee71dSXin LI# in the entry called "cafebabe". 7b6cee71dSXin LI#------------------------------------------------------------ 8b6cee71dSXin LI# Java serialization 9b6cee71dSXin LI# From Martin Pool ([email protected]) 10b6cee71dSXin LI0 beshort 0xaced Java serialization data 11b6cee71dSXin LI>2 beshort >0x0004 \b, version %d 12b6cee71dSXin LI 13b6cee71dSXin LI0 belong 0xfeedfeed Java KeyStore 14b6cee71dSXin LI!:mime application/x-java-keystore 15b6cee71dSXin LI0 belong 0xcececece Java JCE KeyStore 16b6cee71dSXin LI!:mime application/x-java-jce-keystore 17b6cee71dSXin LI 18b6cee71dSXin LI# Java source 193e41d09dSXin LI0 regex \^import.*;$ Java source 20b6cee71dSXin LI!:mime text/x-java 213e41d09dSXin LI 223e41d09dSXin LI# Java HPROF dumps 233e41d09dSXin LI# https://java.net/downloads/heap-snapshot/hprof-binary-format.html 243e41d09dSXin LI0 string JAVA\x20PROFILE\x201.0. 253e41d09dSXin LI>0x12 short 0 263e41d09dSXin LI>>0x11 ushort-0x31 <2 Java HPROF dump, 273e41d09dSXin LI>>0x17 beqdate/1000 x created %s 28