2 #------------------------------------------------------------
3 # $File: java,v 1.18 2015/11/29 22:08:14 christos Exp $
4 # Java ByteCode and Mach-O binaries (e.g., Mac OS X) use the
5 # same magic number, 0xcafebabe, so they are both handled
6 # in the entry called "cafebabe".
7 #------------------------------------------------------------
9 # From Martin Pool (m.pool@pharos.com.au)
10 0 beshort 0xaced Java serialization data
11 >2 beshort >0x0004 \b, version %d
13 0 belong 0xfeedfeed Java KeyStore
14 !:mime application/x-java-keystore
15 0 belong 0xcececece Java JCE KeyStore
16 !:mime application/x-java-jce-keystore
19 0 regex \^import.*;$ Java source
23 # https://java.net/downloads/heap-snapshot/hprof-binary-format.html
24 0 string JAVA\x20PROFILE\x201.0.
26 >>0x11 ushort-0x31 <2 Java HPROF dump,
27 >>0x17 beqdate/1000 x created %s