Description Extensions Header Offset Footer Default size Flags *** Pictures JPEG JPG;jpeg;jpe \xFF\xD8\xFF[\xC0\xC4\xDB\xE0-\xE3\xE8\xEB\xED\xEE\xFE] 0 ~1 e JPEG non-standard JPG;jpeg;jpe \xFF\xFF+\xD8\xFF[\xC4\xDB\xE0-\xE3\xE8\xEB\xED\xEE\xFE] 0 ~1 eB Thumbcache fragment cmmm CMMM..\x00\x00.[^\x00] 0 ~84 8000000 GUb PNG png \x89PNG\x0D\x0A\x1A\x0A 0 ~6 be GIF gif GIF8[79]a 0 ~3 TIFF/NEF/CR2/DNG tif;tiff;nef;cr2;dng;pef (\x49\x49\x2A\x00)|(\x4D\x4D\x00\x2A) 0 ~5 MSO Document Image mdi EP\*\x00 0 PaperPort scanned MAX1;max ViG..\x1A 0 Bitmap bmp;dib BM.....\x00.\x00....[\x0C\x28\x38\x40\x6C\x7C]\x00\x00\x00 0 ~4 PC Paintbrush pcx \x0A\x05\x01\x08 0 Paint Shop Pro psp;PsPImage (Paint Shop Pro I)|(~BK\x00) 0 High Dynamic Range hdr \#\?RADIANCE 0 Canon Raw crw HEAPCCDR 6 Fuji Raw raf FUJIFILMCCD-RAW 0 Minolta Dimage RAW image mrw \x00MRM 0 Adobe Photoshop psd 8BPS\x00\x01\x00\x00\x00\x00\x00\x00 0 Icon ico \x00\x00\x01\x00[\x01-\x15]\x00(\x10\x10|\x20\x20|\x30\x30|\x40\x40).\x00[\x00\x01] 0 ~7 24000 Graphics Metafile wmf \xD7\xCD\xC6\x9A\x00\x00 0 ~40 Windows 3 Metafile wmf \x01\x00\x09\x00\x00\x03 0 ~40 Enhanced Metafile emf EMF\x00\x00\x01\x00 40 ~18 e Artwork cache itc2 \x00\x00\x01\x1Citch 0 Corel Photopaint cpt CPT[789]?FILE 0 Corel Draw cdr RIFF....CDR 0 ~33 Corel Binary Metafile cmx CMX1 8 ~33 Calamus Vector Graphic cvg CALAMUSCVG 0 MacDraw drawing drw dDocD2 0 Freehand drawing (v3) fh3 FH31 0 Freehand drawing fh9;fh8;fh7;fh5;; AGD[1-4] 0 Google SketchUp skp \xFF\xFE\xFF\x0E\x53\x00\x6B\x00\x65\x00\x74\x00\x63\x00\x68\x00\x55\x00\x70\x00 0 CAD dwg AC10 0 Encapsulated PostScript eps;ai \xC5\xD0\xD3\xC6 0 ~70 WebM Video webm \x1A\x45\xDF\xA3\x01\x00\x00\x00 0 Sony RAW arw \x05\x00\x00\x00AW1\x2E 0 WordPerfect graphics WPG1;wpg \xFFWPC...\x00\x01\x16 0 The GIMP image xcf gimp\x20xcf\x20file 0 LuraWave JPEG-2000 bitmap jp2 \x00\x00\x00\x0C\x6A\x50\x20\x20\x0D\x0A......ftypjp2 0 Xara X drawing XARA;xar XARA\xA3\xA3\x0D 0 Kodak Cineon cin \x80\x2A\x5F\xD7\x00\x00\x08\x00\x00\x00\x04\x00\x00\x00\x04\x00\x00\x00\x00\x00 0 Digital Picture Exchange dpx SDPX\x00\x00[\x08\x20]\x00V#\x2E 0 Micrographix Graphic DRW1;drw \x01\xFF\x02\x04\x03\x02 0 Freehand (MX) Project fh10;fh11 \x1C\x01\x00\x00\x02\x00\x04\x1C\x01\x14\x00\x02\x00\x14\x1C\x01\x16\x00\x02\x00 0 Photoshop Large Document psb 8BPS\x00\x02\x00\x00\x00\x00\x00\x00\x00 0 WebP Image webp RIFF....WEBP 0 ~33 ZbThumbnail info zbex\x04\x00\x00\x4C 0 Adobe Bridge Cache bct \x6C\x6E\x62\x74\x02\x00\x00\x00 0 Corel Photo-Paint cpt CPT9FILE[\x01-\x0F]\x00\x00\x00 0 *** Documents Rich Text Format rtf \{\\rtf 0 ~20 G Unicode UTF-16LE txt \xFF\xFE[\x09\x0A\x0D\x20-\x3B\x40-\x7E\xC0-\xDC]\x00[^\x00]\x00 0 ~48 G Text UTF-8 txt \xEF\xBB\xBF[\x09\x0A\x0D\x20-\x3B\x40-\x7E\xC0-\xDC] 0 ~57 G MS Office/OLE2 ole2;doc;xls;dot;ppt;xla;ppa;pps;pot;msi;sdw;db;vsd;msg \xD0\xCF\x11\xE0\xA1\xB1\x1A\xE1 0 ~16 MS Office 2007+ docx;xlsx;pptx _Types\]\.xml 38 ~14 g MS Access mdb;mda;mde;mdt;fdb;psa \x00\x01\x00\x00Standard Jet 0 ~71 MS Access 2007 accdb;accde \x00\x01\x00\x00Standard ACE DB 0 MS Money mny \x00\x01\x00\x00MSISAM 0 FileMaker Pro database fp5;fp3 \x00\x01\x00\x00\x00\x02\x00\x01\x00\x05\x00\x02\x00\x02\xC0 0 FileMaker Pro 7 fp7 \x00\x01\x00\x00\x00\x02\x00\x01\x00\x05\x00\x02\x00\x02\xC0HBAM7 0 KWord kwd KOffice application/x-kword 10 ~14 g RagTime Document rtd \x43\x23\x2B\x44\xA4\x43\x4D\xA5\x48\x64\x72 0 WordPerfect document wpd;wp;wp5;wp6;wpp \xFFWPC...\x00\x01\x0A 0 MS Word 6.0 doc \x12\x34\x56\x78\x90\xFF 0 MS Word (MacBinary) doc BNMSWD...\x00 67 MS Write wri \x31\xBE\x00\x00\x00\xAB\x00\x00\x00\x00\x00\x00 0 MS Write wri \x32\xBE\x00\x00\x00\xAB\x00\x00\x00\x00\x00\x00 0 MS OneNote one \xE4\x52\x5C\x7B\x8C\xD8\xA7\x4D\xAE\xB1\x53\x78\xD0\x29\x96\xD3 0 OpenOffice Writer sxw;sxg sun\.xml\.writer 54 ~14 g OpenOffice Calc sxc;stc sun\.xml\.calc 54 ~14 g OpenOffice Math sxm sun\.xml\.math 54 ~14 g OpenOffice Impress sxi sun\.xml\.impress 54 ~14 g OpenOffice Draw sxd;std sun\.xml\.draw 54 ~14 g OpenOffice 2 Writer ott document\.text-templ 64 ~14 g OpenOffice 2 Writer odt document\.text 64 ~14 g OpenOffice 2 Calc ots document\.spreadsheet-templ 64 ~14 g OpenOffice 2 Calc ods document\.spreads 64 ~14 g OpenOffice 2 Base odb vnd\.sun\.xml\.base 50 ~14 g OpenOffice 2 Draw odg document\.graphic 64 ~14 g OpenOffice 2 Math odf document\.formula 64 ~14 g OpenOffice 2 Impress odp document\.present 64 ~14 g Quattro Pro Notebook 6.0 wb2 \x00\x00\x02\x00\x02\x10\xC9\x00\x02\x00\x00\x06 0 PostScript/Adobe ps;eps;ai %!PS-Adobe 0 ~56 Adobe Acrobat pdf;ai %PDF\x2D1\x2E 0 ~17 Adobe FrameMaker fm <MakerFile 0 Macintosh plaintext (MacBinary) txt TEXT.....\x00 65 E Quicken qdf \xAC\x9E\xBD\x8F 0 Quicken qsd QW Ver\. 0 QuickBooks Backup qbb \x45\x86\x00\x00\x06\x00 0 Lotus WordPro v9 lwp WordPro[\x00\x0D] 0 Lotus 123 v9 123 \x00\x00\x1A\x00[\x03\x05]\x10\x04 0 Lotus 123 v3-5 wk3;wk4;wk5 \x00\x00\x1A\x00[\x00\x02]\x10\x04\x00 0 Lotus 123 v1 wk1 \x00\x00\x02\x00\x06\x04\x06\x00\x08\x00\x00\x00\x00\x00 0 Lotus Notes nsf;ntf \x1A\x00\x00[\x03\x04]\x00\x00 0 Microsoft Project mpx MPX[, ] 0 IBM DisplayWrite rft;dds DDS \x7c\x00\x00\x00 0 Blindwrite bwt BLINDWRITE TOC FILE 0 Claris Works document cwk \x00BOBO 3 Claris Works word processor (MacBinary) cwk WORDBOBO 65 Claris Works text (MacBinary) cwk CWWPBOBO 65 DJVU djvu AT&TFORM 0 Pocket Word pwi \x7B\x5Cpwi\x15\x00\x00\x01 0 TextMaker Document tmd;tmv \x4D\x56\x00\xFF\x0C\x00\x0E\x00\x15\x00\x03\x00\x2D\x59\x41\x31 0 MS Works WKS1;wks \xFF\x00\x02\x00\x04\x04\x05\x54\x02\x00..\x26\x54\x02\x00\x00\x00\x06\x00\x08 0 *** E-mail AOL PFC pfc;org AOLVM100 0 ~22 Mailbox mbox;mbs From\x20[^\x3F] 0 ~43 E E-mail eml;mht (From|Return-Path|Delivered-To|Received):\x20 0 ~43 E Outlook pst;ost;fdb;pab !BDN 0 ~24 Outlook AutoComplete nk2 \x0D\xF0\xAD\xBA[\x0A-\x0C]\x00\x00\x00 0 Exchange DB edb \xEF\xCD\xAB\x89[\x20\x23]\x06\x00\x00[\x00\x01]\x00\x00\x00 4 ~54 20971520 Outlook Express dbx \xCF\xAD\x12\xFE[\x30\xC5-\xC7].{6}\x11 0 ~25 OS X Tiger E-mail emlx #{3,7}\x0D?\x0A(Delivered-To|Status|Return-Path|From|To|Date|Message-Id|x-store-info): 0 </plist>\x0A 100000 F Outlook 2011 Mac olk14MsgSource MSrc 0 ~77 OE addr. book wab \x9C\xCB\xCB\x8D\x13\x75\xD2\x11\x91\x58\x00\xC0\x4F\x79\x56\xA4 0 OE addr. book (Win95) wab \x81\x32\x84\xC1\x85\x05\xD0\x11\xB2\x90\x00\xAA\x00\x3C\xF6\x76 0 vCard vcf BEGIN:VCARD 0 END:VCARD 1000 Virtual Calendar vcs;ics BEGIN:[vV]C[aA][lL][eE][nN][dD][aA][rR] 0 END:VCALENDAR Eudora mbx From\x20\x3F\x3F\x3F\x40\x3F\x3F\x3F\x20 0 Video E-Mail vem High JPEG Data in Memory 0 Offline Address Book oab \x20\x00\x00\x00.{10}\x00\x00 0 ~86 *** Internet #INTERNAL1 HTML/XML HTML;htm;phtml;shtml;xml;xsd;msc ([\x0D\x0A\x09\x20]{0,21}((<[hH][tT][mM][lL])|(<![dD][oO][cC][tT][yY][pP])|(<!--)|(<\?xml)|(<xs:schema)))|(\xEF\xBB\xBF\x3C)|(\xFF\xFE\x3C\x00) 0 ~15 GtE PHP php;php3;php4 <\?php[^\x00] 0 ~56 SQLite 2.x database SQLITE2;sqlite;; \*\* This file contains an SQLite 2\.# 0 t SQLite 3.x database SQLITEDB;sqlite;kexi;db;lrcat;exb;; SQLite format 3\x00 0 ~59 t Mime Html mht;eml MIME-Version:\x201\.0\x0D\x0A 0 \x00 fE Nokia text vmg BEGIN:VMSG 0 END:VMSG Nokia SMS vmg B\x00E\x00G\x00I\x00N\x00\x3A\x00V\x00M\x00S\x00G\x00\x0A\x00 0 E\x00N\x00D\x00\x3A\x00V\x00M\x00S\x00G\x00\x0A\x00 2048 Dialup dun \[Phone\]\x0D\x0A 0 ~56 3000 Google cookie COOKIE;txt (__utma|PREF)\x0A 0 \x0A\x2A\x0A\x00 3000 Chrome cache chrome \xC3\xCA\x04\xC1[\x00\x03]\x00[\x01\x02]\x00 0 ~63 Chrome session snss SNSS\x01\x00\x00\x00 0 ~74 Facebook json for \(;;\);\{\x22 0 ~56 Opera Hotlist (v2.0) / bookmark adr (\xEF\xBB\xBF)?Opera Hotlist version #\.0 0 Firefox sessionrestore \(?\{\x22?windows\x22?:\[\{ 0 ~56 96000 Flash Cookie sol \x00\xBF....TCSO 0 ~52 Safari Cookies binarycookies cook\x00 0 ~68 *** Archives Zip Archive zip;jar;xps;apk;pages PK\x03\x04|PK00|PK\x05\x06 0 ~14 gE Jar Archive jar \x5F\x27\xA8\x89 0 RAR Archive rar Rar!\x1a\x07\x00 0 ~29 Tar/PAX Archive tar;pax ustar 257 ~31 G KGB Archive kgb KGB_arch - 0 GZip Archive gz;tgz;emz \x1F\x8B\x08[\x00\x08]....[\x00\x02\x04][\x00-\x12\xFF] 0 ~32 BZip Archive bz2 BZ[0h]#\x31\x41\x59\x26 0 ARJ Archive arj \x60\xEA......\x10\x00\x02 0 7-Zip Archive 7z 7z\xBC\xAF\x27 0 ~39 XZ Archive xz \xFD7zXZ\x00\x00 0 Stuffit SFX Archive sea APPLaust! 65 Stuffit Archive sitx StuffIt! 0 Stuffit v5 Archive sit StuffIt 0 ACE Archive ace \*\*ACE\*\* 7 BinHex 4.0 hqx must be converted with BinHex 11 MS Compressed cab;cdm;msu;mbf;wsp;lva;lvf;xsn;dl_;ex_;sy_ MSCF\x00\x00\x00\x00 0 ~82 ALZip alz ALZ\x01\x0A\x00\x00\x00 0 lzop compressed lzop;lzo \x89LZO\x00\x0D\x0A\x1A 0 SQX compressed archive sqx R....-sqx- 2 WinHki archive hki \x61\x5C\x04\x05\x14\x41\x00\x00\xFD\x00 0 ALZip EGG compressed egg EGGA\x00 0 Free Backup Fix fbf SymBakUp 1\.0\x0A\x1A\x01 0 *** OS Artifacts Win9x Registry Hive registry CREG 0 WinNT Registry Hive REGISTRY;; regf 0 ~28 Gt Registry fragment hbin hbin\x00 0 ~80 GUE Windows Password pwl \xE3\x82\x85\x96 0 Windows Event Log evt \x30\x00\x00\x00LfLe 0 ~44 Windows Event Log evtx ElfFile 0 ~42 setup info setupinfo;; DRBKLBSM 24 EFS Private Key file EFS;; \x02\x00\x00\x00\x00\x00\x00\x00[^\x00]\x00\x00\x00.\x00\x00\x00..\x00\x00..\x00\x00..\x00\x00\x14\x00 0 1000 EFS Master Key file EFS;; \x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[0-9a-f]\x00[0-9a-f]\x00 0 1000 Printer Spool 9x shd \x4B\x49\x00\x00..\x00\x00..\x00\x00..\x00\x00 0 1000 E Printer Spool NT shd \x66\x49\x00\x00......\x00\x00.\x00\x00\x00 0 1000 E Printer Spool W2K/XP shd \x67\x49\x00\x00.\x00\x00\x00......\x00\x00.\x00\x00\x00 0 4000 E Printer Spool 2003 shd \x68\x49\x00\x...
arcaingp