{"success":true,"data":{"ext":"eth","name":"GN Nettest WinPharoah capture file","description":"GN Nettest WinPharoah capture file is a proprietary capture format used by GN Nettest’s WinPharoah software for storing test recordings and measurement data. It is used to archive, review, and analyze captured telecommunications or network test sessions within WinPharoah workflows. The format is generally considered safe to open, although support is typically limited to legacy GN Nettest tools and older testing environments.","mime":[],"risk_level":"Safe","signatures":[{"hex":"1A 35 01 00","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]}],"related":[],"usage":{"python":"def is_eth(file_path: str) -> bool:\n    \"\"\"Check if file is a valid ETH by magic bytes.\"\"\"\n    signature = bytes([0x1A, 0x35, 0x01, 0x00])\n    with open(file_path, \"rb\") as f:\n        return f.read(4) == signature","node":"function isETH(buffer: Buffer): boolean {\n  const signature = Buffer.from([0x1A, 0x35, 0x01, 0x00]);\n  return buffer.subarray(0, 4).equals(signature);\n}","go":"func IsETH(data []byte) bool {\n    signature := []byte{0x1A, 0x35, 0x01, 0x00}\n    if len(data) < 4 {\n        return false\n    }\n    return bytes.Equal(data[:4], signature)\n}"}}}