[File] [PATCH] of Magdir/msdos for CAB based Microsoft Desktop Gadget

[Christos Zoulas]

Added, thanks!

christos

> On Feb 20, 2020, at 4:19 PM, Jörg Jenderek <joerg.jen.der.ek at gmx.net> wrote:
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> Hello,
> some days ago i handled some Device Metadata Packages, which are
> Microsoft Cabinet archive. So i look for other CAB archives which are
> not described precisely. So i look for CAB based Microsoft Desktop
> sidebar gadgets with file name extension gadget. When running file
> command version 5.38 on such examples i get an output like:
> 
> 281_accuweatherforecastradar_gadgetsrevived.com.gadget:
> 	Microsoft Cabinet archive data,	many,
> 	255086 bytes, 104 files, at 0x44 +A "icon.png"
> 	+A "en-US\findLocation.html", flags 0x4, number 1,
> 	extra bytes 20 in head, 10 datablocks, 0x1 compression
> All_CPU_Meter_V4.7.3.gadget:
> 	Microsoft Cabinet archive data, many,
> 	202358 bytes, 49 files, at 0x44 +A "alarm1.mp3"
> 	+A "alarm2.mp3", flags 0x4, number 1,
> 	extra bytes 20 in head, 15 datablocks, 0x1 compression
> 
> So these examples are only described by generic expression as
> Microsoft Cabinet archive, but sub type classification is missing.
> Furthermore with --extension option wrong file name extension "cab"
> is displayed.
> 
> On Wikipedia i found a page about such Windows Desktop gadgets. So i
> add that page inside Magdir/msdos as reference by comment line like:
> # URL: https://en.wikipedia.org/wiki/Windows_Desktop_Gadgets
> More information about file format is available on Microsoft servers.
> So i add page about Windows sidebar gadget by reference line like:
> # docs.microsoft.com/en-us/previous-versions/windows/desktop/sidebar
> 
> According to that reference characteristic for Windows Sidebar gadget
> is a manifest inside gadget package. The gadget manifest file must be
> named "gadget.xml".
> 
> Unfortunately that file must not be the first archive name. So a
> brute force search inside CAB directory part must be done to identify
> examples. To catch "biggest" example All_CPU_Meter_V4.7.3.gadget
> found on website win10gadgets.com this is done after PowerPoint
> Viewer Packed and Go identifying part by additional magic line like:
>> 0x2c	search/968/c	gadget.xml	\b, Windows Desktop Gadget
> 
> According to website extension.nirsoft.net afterwards show user
> defined mime type and correct file name extension by lines:
> !:mime	application/x-windows-gadget
> !:ext	gadget
> 
> After applying the above mentioned modifications by patch
> file-5.38-msdos-gadget.diff then i get a more precise
> output like:
> 
> 281_accuweatherforecastradar_gadgetsrevived.com.gadget:
> 	Microsoft Cabinet archive data,
> 	Windows Desktop Gadget,
> 	255086 bytes, 104 files, at 0x44 +A "icon.png"
> 	+A "en-US\findLocation.html", flags 0x4, number 1,
> 	extra bytes 20 in head, 10 datablocks, 0x1 compression
> All_CPU_Meter_V4.7.3.gadget:
> 	Microsoft Cabinet archive data,
> 	Windows Desktop Gadget,
> 	202358 bytes, 49 files, at 0x44 +A "alarm1.mp3"
> 	+A "alarm2.mp3", flags 0x4, number 1,
> 	extra bytes 20 in head, 15 datablocks, 0x1 compression
> 
> I hope my diff file can be applied in future version of
> file utility. There exist a variant where such Windows gadgets are
> packed as ZIP archives. I will try to handles this in a future session.
> 
> With best wishes
> Jörg Jenderek
> - --
> Jörg Jenderek
> 
> 
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
> 
> iF0EARECAB0WIQS5/qNWKD4ASGOJGL+v8rHJQhrU1gUCXk73zAAKCRCv8rHJQhrU
> 1lAnAKC3ggsZjLsCS9EbyLqBnLRVSPr8OgCgzTce7O1XtTz0OVMFr7joDzl9xTs=
> =kMK6
> -----END PGP SIGNATURE-----
> <file-5_38-msdos-gadget_diff.DEFANGED-131755><file-5_38-msdos-gadget_diff_sig.DEFANGED-131756>--
> File mailing list
> File at astron.com
> https://mailman.astron.com/mailman/listinfo/file
> <sanitizer.log>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 235 bytes
Desc: Message signed with OpenPGP
URL: <https://mailman.astron.com/pipermail/file/attachments/20200224/79d35064/attachment.asc>