Skip to content

Commit 5dcc68f

Browse files
DosX-devDosX-dev
committed
-
1 parent b4d6418 commit 5dcc68f

14 files changed

+882
-0
lines changed

‎db/zeus.db‎

Lines changed: 147 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,147 @@
1+
# Zeus File Identifier file format version 1.X
2+
#
3+
# Standart "zeus.db" database
4+
# Author is DosX
5+
#
6+
# Format:
7+
# {STRING_NAME}|{STRING_FILE_TYPE}|{STRING_DESCRIPTION}|{MASK_SIGNATURE}
8+
#
9+
# Hint for signatures writing:
10+
# * Use ".."/"??" to indicate an unknown byte (like "0000..29..11...00")
11+
# * Use the ' character to wrap an ASCII string (like "000000'String in the file!'000029")
12+
#
13+
# The signature is read only from the beginning of the file.
14+
15+
7z|Archive||'7z'
16+
ARCV 2|Archive||'ARCV'0002
17+
Adobe Font Metrics|Font|Contains the font and its parameters|'StartFontMetrics '
18+
Adobe Photoshop|Project|'8BPS'
19+
ArcFS|Archive||'Archive'00................2800000064
20+
Asar (Electron)|Archive|Electron Application package (NodeJS)|04..............................'{"files":{'
21+
Asymetrix|Archive||602213636c00
22+
BAGF|Archive||'BAGF'02
23+
BFF|Archive||09006bea
24+
BIGF|Archive||'BIGF'00
25+
BMF|Font|Contains the font and its parameters|'BMF'
26+
Basis Universal GPU Texture|Image||734213004D00
27+
BeOS package|Archive||'AlB'1a
28+
BulkZip|Archive||'blkzip'00
29+
CRAMFS|Archive||453dcd28........................'Compressed ROMFS'
30+
CRX|Archive||'Cr24'02
31+
DCL|Archive||00069a68
32+
Device Independent Document|Document||f702018392c01c3b
33+
DirectDraw Surface|Image||'DDS '7C000000
34+
Embedded OpenType Font|Font|Contains the font and its parameters|......00..........000200
35+
Encapsulated PostScript|Image||'%!PS-Adobe-'
36+
FTCOMP|Archive||a596fdff
37+
Facebook Zstandard/ZSTD compressed data|Archive||28B52FFD
38+
GIF|Image|Animated image|'GIF8'
39+
GNU Gettext Machine Object|Binary||950412de00000000
40+
GNU Gettext Machine Object|Binary||de12049500000000
41+
GXL|Archive||01ca'Copyright (c) Genus Microprogramming, Inc.'
42+
GZIP|Archive||1F8B
43+
HUFF|Archive||bd01..00..00..000000
44+
INSA|Archive||0100......00ecf9
45+
InstallShield INST v3|Archive||2aab79d800010000
46+
InstallShield INX v7|Archive||74c42c84e1e5d428
47+
InstallShield ISN|Archive||..0fd28ccc1f..3c0d8e830dd88f25ac
48+
InstallShield v3|Archive||135d658c3a010200
49+
IzPack|Archive||aced00057704
50+
JNG|Image|Contains raster graphics|8B'JNG'
51+
JPEG (EXIF)|Image|Contains raster graphics|FFD8FFE1....'Exif'00
52+
JPEG (OLD)|Image|Contains raster graphics|FFD8FFDB
53+
JPEG|Image|Contains raster graphics|FFD8FFE0....'JFIF'00
54+
KWAJ by Microsoft|Archive||'KWAJ'88
55+
Khronos Texture (KTX1)|Image||'«KTX 11»'0D0A1A0A
56+
Khronos Texture (KTX2)|Image||'«KTX 20»'0D0A1A0A
57+
LHA|Archive||....'-lh'..2d
58+
LZFSE|Archive||'bvxn'
59+
LZK00|Archive||'LZK00'000000
60+
LZMA|Archive||5d0000....ffffffffffffffff00180ddd04
61+
LZOP Compressed data|Archive||89'LZO'000D0A1A0A
62+
Long Range ZIP|Archive||'LRZI'
63+
Lua Bytecode|Script|Lua machine code|1B'Lua'..00
64+
MDCD|Archive||'MDmd'
65+
MP3|Audio|Music or sounds|'ID3'??00
66+
MP4|Video|The most common way to record video|000000..'ftyp'
67+
MPQ by Blizzard|Archive||'MPQ'1a
68+
MSKN 2 (zlib)|Archive||'_MCT'00'KSLZ'789c
69+
MVA|Archive||'mflh'0100
70+
MZIP|Archive||'MZIP'
71+
Microsoft Access Workgroup Information|Binary||00010000'Jet System DB '00
72+
Microsoft Compound|Archive||D0CF11E0A1B11AE1
73+
Microsoft Program Information|Binary||'MICROSOFT PIFEX'0087010000
74+
Microsoft Word 2 document|Document|Old Microsoft Word format|dca5..00..................00000000
75+
Microsoft Word 2 document|Document|Old Microsoft Word format|eca5c100..................00000000
76+
Microsoft XNA Game Studio Binary Package|Binary||'XNB'
77+
Microsoft compiled HTML|Binary||'ITSF'..000000
78+
NanoZip v0.09|Archive||AE01'NanoZip 0.09 alpha'
79+
OpenType - CFF compact Font|Font|Contains the font and its parameters|'OTTO'................'CFF '
80+
PAC by BVRP Software|Archive||'PAC - 'a9' BVRP Software 1990-2000'
81+
PACK|Archive||'PACK'............0000
82+
PCInstall|Archive||00000000000000000000000000007400010074000500
83+
PDF|Document||'%PDF'
84+
PP20|Archive||'PP20'09
85+
Package Data|Archive||0500000001000000??????????00????
86+
PaperPort|Archive||'ViG'....1a
87+
Program Debug Database|Database|Contains program debugging information|'BSJB'01
88+
Program Debug Database|Database|Contains program debugging information|'Microsoft C/C++ MSF 7.00'0d
89+
PNG|Image|Raster graphics with transparency|89'PNG'
90+
Qt message|Binary|File containing text information of the Qt framework|3cb86418caef9c95
91+
Quick Help|Binary||'LN'0200
92+
RAR|Archive|Commercial WinRAR format|'Rar!'1a
93+
RAZOR Archive|Archive||'CM'2805060000
94+
RPM package|Archive||edabeedb0300
95+
Rich Text|Document|Formatted rich text data (.rtf)|'{\rtf1\'
96+
Rockstar Advanced Game resources|Archive|Used in the GTA series of games|'7FPR'????00
97+
SCO|Archive||1fa0
98+
SIT|Archive||'SIT!'
99+
SKF|Archive||06'SKF3.0'
100+
SQZE|Archive||'SQZE'010000
101+
SW|Archive||'im001V'......50....0000
102+
SZ by Microsoft|Archive||'SZ '88
103+
SZDD by Microsoft|Archive||'SZDD'88
104+
SaveDskF|Archive||aa59f0000002
105+
Snappy compressed data|Archive||FF060000'sNaPpY'
106+
Solaris Package|Archive||'# PaCkAgE DaTaStReAm'
107+
SquashFS (Big Endian)|Archive||'sqsh'0000
108+
SquashFS (Little Endian)|Archive||'hsqs'0300
109+
SQLite|Database||'SQLite format 3'00
110+
Security Catalog Files|Archive||3082....06092A864886F70D010702A0
111+
TAR|Archive|Archive without encryption or compression|................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................00'ustar'
112+
TPWM (BlueByte)|Archive||'TPWM'
113+
TsiLang binary translation data|Binary||'SIB file: TsiLang binary translation data'
114+
Universal Binary|Image||CAFEBABE
115+
UnrealEngine|Binary|Game engine format|C1832A9E
116+
VMS SaveSet|Archive||0001000401000100010000000000000000000000000000000000000000000000010101
117+
WAV|Audio||'RIFF'
118+
WPK|Archive||032401010100
119+
Windows Animated Cursor|Image||'RIFF'........'ACON'
120+
Windows Bitmap|Image|.bmp picture|'BM'
121+
Windows Cursor|Image|.cur cursor|00000200
122+
Windows Icon|Image|.ico icon|00000100
123+
Windows Imaging|Archive||'MSWIM'000000
124+
Windows Minidump|Binary|.dmp (process dump)|'MDMP'93a7
125+
Windows PE|Executable|Can be run on Windows OS|'MZ'
126+
Windows Shortcut|Binary||4c0000000114020000000000c000000000000046
127+
Windows Write document|Document|Microsoft Write format|31be000000ab0000
128+
Windows Write document|Document|Microsoft Write format|32be000000ab0000
129+
XAR|Archive||'xar!'001c00010000
130+
XFL game resources|Archive||'LB'0100
131+
XZ|Archive||fd'7zXZ'0000
132+
ZIP|Archive|Regular ZIP format|'PK'03
133+
ZOO|Archive||'ZOO'............'Archive'
134+
ZPAQ Compressed data|Archive||'7kSt'
135+
Zinc data|Binary||'Zinc Data File Version'
136+
Zipped ISO disk Image|Archive||'IsZ!@'01
137+
Z|Archive||1f9d
138+
WebM|Video|Is a royalty-free video format that supports VP8, VP9, and AV1 codecs|1A45DFA3........................................'webmB'87
139+
WebM|Video|Is a royalty-free video format that supports VP8, VP9, and AV1 codecs|1A45DFA3......................................................'webmB'87
140+
Resources|Archive|.NET resources format|CECAEFBE01000000910000006C'System.Resources.'
141+
Boot Image|Archive||'DCS'01
142+
Custom Application Compatibility Database|Database||0300000000000000'sdbf'
143+
Encrypted WSH (VBE/JSE)|Script|Encrypted VBScript/JScript|'#@~^'
144+
145+
146+
# Unknown result
147+
Looks like a custom file format|Unknown|??

‎src/App.config‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
<?xml version="1.0" encoding="utf-8" ?>
2+
<configuration>
3+
<startup>
4+
<supportedRuntime version="v4.0" sku=".NETFramework,Version=v4.7.2" />
5+
</startup>
6+
</configuration>

‎src/Module1.vb‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
Imports System.IO
2+
Imports System.Security.Cryptography
3+
Imports System.Text
4+
Imports System.Text.RegularExpressions
5+
6+
Module Module1
7+
Sub Main(args As String())
8+
Console.WriteLine("
9+
███████ ███████ ██ ██ ███████
10+
███ ██ ██ ██ ██
11+
███ █████ ██ ██ ███████
12+
███ ██ ██ ██ ██
13+
███████ ███████ ██████ ███████
14+
FILE IDENTIFIER, (С) DosX
15+
")
16+
17+
Try
18+
Dim filePath As String = GetFilePathFromArgs(args)
19+
20+
If String.IsNullOrEmpty(filePath) Then
21+
Console.Out.WriteLine("Missing --file argument")
22+
Return
23+
End If
24+
25+
Dim fileChecker As New ZeusFileIdentifier.FileScanner("zeus.db"),
26+
result As ZeusFileIdentifier.Signature = fileChecker.CheckFile(filePath)
27+
28+
Console.Out.WriteLine("[ ANALYSIS ]")
29+
Console.Out.WriteLine("File type name: " & result.FileTypeName)
30+
31+
Dim fileTypeDescription As String = result.FileTypeDescription
32+
Console.Out.WriteLine("File type description: " & (If(fileTypeDescription.Length = 0, "-", fileTypeDescription)))
33+
34+
Console.Out.WriteLine("File format: " & result.FormatType)
35+
36+
Console.Out.WriteLine(vbLf & "[ GENERIC ]")
37+
38+
Dim fileSize As Long = fileChecker.GetFileSize(filePath)
39+
Console.Out.WriteLine("File size: " & fileSize & " bytes or ~" & (fileSize / 1024) & " kilobytes or ~" & Math.Round(fileSize / 1024 / 1024 / 1024, 4) & " gigabytes")
40+
41+
Dim fileEntropy As Double = fileChecker.CalculateEntropy(filePath)
42+
Console.Out.WriteLine("File entropy: " & Math.Round(fileEntropy, 2) & " out of 8 " & If(fileEntropy > 7.0, "[high; like compressed]", "[normal]"))
43+
44+
Console.Out.WriteLine(vbLf & "[ HASHES ]")
45+
46+
Dim md5Hash As String = fileChecker.GetFileHash(filePath, New MD5CryptoServiceProvider())
47+
Console.Out.WriteLine($"MD5 hash: {md5Hash}")
48+
49+
Dim sha1Hash As String = fileChecker.GetFileHash(filePath, New SHA1CryptoServiceProvider())
50+
Console.Out.WriteLine($"SHA-1 hash: {sha1Hash}")
51+
52+
Dim sha256Hash As String = fileChecker.GetFileHash(filePath, New SHA256CryptoServiceProvider())
53+
Console.Out.WriteLine($"SHA-256 hash: {sha256Hash}")
54+
Catch ex As Exception
55+
Console.Out.WriteLine(ex.Message)
56+
End Try
57+
Console.WriteLine()
58+
End Sub
59+
60+
Function GetFilePathFromArgs(args As String()) As String
61+
For i As Integer = 0 To args.Length - 2
62+
If args(i).ToLower() = "--file" Then
63+
Return args(i + 1)
64+
End If
65+
Next
66+
Return String.Empty
67+
End Function
68+
End Module

‎src/My Project/Application.Designer.vb‎

Lines changed: 13 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎src/My Project/Application.myapp‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
<?xml version="1.0" encoding="utf-8"?>
2+
<MyApplicationData xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
3+
<MySubMain>false</MySubMain>
4+
<SingleInstance>false</SingleInstance>
5+
<ShutdownMode>0</ShutdownMode>
6+
<EnableVisualStyles>true</EnableVisualStyles>
7+
<AuthenticationMode>0</AuthenticationMode>
8+
<ApplicationType>2</ApplicationType>
9+
<SaveMySettingsOnExit>true</SaveMySettingsOnExit>
10+
</MyApplicationData>

‎src/My Project/AssemblyInfo.vb‎

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
Imports System
2+
Imports System.Reflection
3+
Imports System.Runtime.InteropServices
4+
5+
' Общие сведения об этой сборке предоставляются следующим набором
6+
' набора атрибутов. Измените значения этих атрибутов, чтобы изменить сведения,
7+
' связанные со сборкой.
8+
9+
' Проверьте значения атрибутов сборки
10+
11+
<Assembly: AssemblyTitle("Zeus_File_Identifier")>
12+
<Assembly: AssemblyDescription("")>
13+
<Assembly: AssemblyCompany("")>
14+
<Assembly: AssemblyProduct("Zeus_File_Identifier")>
15+
<Assembly: AssemblyCopyright("Copyright © 2024")>
16+
<Assembly: AssemblyTrademark("")>
17+
18+
<Assembly: ComVisible(False)>
19+
20+
'Следующий GUID служит для идентификации библиотеки типов, если этот проект будет видимым для COM
21+
<Assembly: Guid("19f6c28c-ddc2-4fdb-a681-4959a357c4ce")>
22+
23+
' Сведения о версии сборки состоят из следующих четырех значений:
24+
'
25+
' Основной номер версии
26+
' Дополнительный номер версии
27+
' Номер сборки
28+
' Редакция
29+
'
30+
' Можно задать все значения или принять номера сборки и редакции по умолчанию
31+
' используя "*", как показано ниже:
32+
' <Assembly: AssemblyVersion("1.0.*")>
33+
34+
<Assembly: AssemblyVersion("1.0.0.0")>
35+
<Assembly: AssemblyFileVersion("1.0.0.0")>

‎src/My Project/Resources.Designer.vb‎

Lines changed: 62 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)