diff options
Diffstat (limited to 'contrib/file/magic/Magdir/virtual')
| -rw-r--r-- | contrib/file/magic/Magdir/virtual | 44 |
1 files changed, 38 insertions, 6 deletions
diff --git a/contrib/file/magic/Magdir/virtual b/contrib/file/magic/Magdir/virtual index 7872e32483ba..295dbd025d52 100644 --- a/contrib/file/magic/Magdir/virtual +++ b/contrib/file/magic/Magdir/virtual @@ -1,6 +1,6 @@ #------------------------------------------------------------------------------ -# $File: virtual,v 1.16 2022/01/18 14:08:15 christos Exp $ +# $File: virtual,v 1.21 2024/09/04 19:09:00 christos Exp $ # From: James Nobis <quel@quelrod.net> # Microsoft hard disk images for: # Virtual Server @@ -9,10 +9,10 @@ # URL: http://fileformats.archiveteam.org/wiki/VHD_(Virtual_Hard_Disk) # Reference: https://download.microsoft.com/download/f/f/e/ffef50a5-07dd-4cf8-aaa3-442c0673a029/ # Virtual%20Hard%20Disk%20Format%20Spec_10_18_06.doc -0 string connectix Microsoft Disk Image, Virtual Server or Virtual PC +0 string conectix Microsoft Disk Image, Virtual Server or Virtual PC # alternative shorter names -#0 string connectix Microsoft Virtual Hard Disk image -#0 string connectix Microsoft Virtual HD image +#0 string conectix Microsoft Virtual Hard Disk image +#0 string conectix Microsoft Virtual HD image !:mime application/x-virtualbox-vhd !:ext vhd # Features is a bit field used to indicate specific feature support @@ -135,8 +135,8 @@ # Reserved[4016] #>>0x10050 ulequad >0 \b, Reserved %#llx # VHDX_REGION_TABLE_HEADER Signature 0x69676572~regi at offset 192 KB and 256 KB ->0x30000 ulelong !0x69676572 \b, 1st region INVALID ->0x30000 ulelong =0x69676572 \b; region +>0x30000 ulelong !0x69676572 Microsoft Disk Image Extended, 1st region INVALID +>0x30000 ulelong =0x69676572 Microsoft Disk Image Extended; region # region Checksum. CRC-32C hash over the entire 64-KB table #>>0x30004 ulelong x \b, CRC %#x # The EntryCount specifies number of valid entries; Found 2; This must be =< 2047. @@ -299,9 +299,41 @@ >0 string >\0 (%s) >368 lequad x \b, %lld bytes +# From: Joerg Jenderek +# URL: https://www.virtualbox.org/manual/ch08.html#vboxmanage-modifynvram +# Reference: http://mark0.net/download/triddefs_xml.7z/defs/n/nvram-virtualbox.trid.xml +# Note: called "VirtualBox saved (U)EFI BIOS settings" by TrID and +# verfied partly by VirtualBox version 7.0.12 `VBoxManage modifynvram <uuid|vmname> listvars` +# first 64 bytes seems to be constant +0 long 0 +>0x28 string _FVH +>>0x64 beshort 0xAA55 +>>>0 use virtualbox-nvram +# display information of virtualbox *.nvram +0 name virtualbox-nvram +>0x64 beshort x VirtualBox NVRAM file +#!:mime application/octet-stream +!:mime application/x-virtualbox-nvram +!:ext nvram + 0 string/b Bochs\ Virtual\ HD\ Image Bochs disk image, >32 string x type %s, >48 string x subtype %s 0 lelong 0x02468ace Bochs Sparse disk image +# QEMU replay image +# From: Alexandre Iooss <erdnaxe@crans.org> +# URL: https://www.qemu.org/docs/master/system/replay.html +# Reference: https://gitlab.com/qemu/qemu/-/blob/master/replay/replay.c +0 ubelong&0xFFFFFFF0 0x00e02000 +>3 byte >5 +>>4 quad 0 +>>>12 ulelong <40 QEMU replay +>>>>3 byte x \b, version %d +>>>>3 byte 6 (QEMU 2.10-2.11) +>>>>3 byte 7 (QEMU 2.12-4.1) +>>>>3 byte 8 (QEMU 4.2) +>>>>3 byte 9 (QEMU 5.0) +>>>>3 byte 10 (QEMU 5.1-7.0) +>>>>3 byte 12 (QEMU 7.1+) |