/usr/share/radare2/2.3.0/magic/cafebabe is in libradare2-common 2.3.0+dfsg-2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 | # $OpenBSD: cafebabe,v 1.3 2009/04/24 18:54:34 chl Exp $
#------------------------------------------------------------------------------
# Cafe Babes unite!
#
# Since Java bytecode and Mach-O fat-files have the same magic number, the test
# must be performed in the same "magic" sequence to get both right. The long
# at offset 4 in a mach-O fat file tells the number of architectures; the short at
# offset 4 in a Java bytecode file is the JVM minor version and the
# short at offset 6 is the JVM major version. Since there are only
# only 18 labeled Mach-O architectures at current, and the first released
# Java class format was version 43.0, we can safely choose any number
# between 18 and 39 to test the number of architectures against
# (and use as a hack). Let's not use 18, because the Mach-O people
# might add another one or two as time goes by...
#
0 beshort 0xcafe
>2 beshort 0xbabe
#>4 belong >30 compiled Java class data,
#>4 belong >30
# !:mime application/x-java-applet
>>6 beshort <20
>>>6 beshort x version %d.
>>>4 beshort x \b%d
>>>4 belong 1 Mach-O fat file with 1 architecture
>>>4 belong >1
>>>>4 belong <20 Mach-O fat file with %d architectures
>2 beshort 0xd00d JAR compressed with pack200
!:mime application/x-java-pack200
|