List of file signatures

A file signature is data used to identify or verify the content of a file. Such signatures are also known as
magic numbers or magic bytes and are usually appended at the beginning of the file.

Many file formats are not intended to be read as text. If such a file is accidentally viewed as a text file, its
contents will be unintelligible. However, some file signatures can be recognizable when interpreted as text.
In the table below, the column "ISO 8859-1" shows how the file signature appears when interpreted as text
in the common ISO 8859-1 encoding, with unprintable characters represented as the control code
abbreviation or symbol, or codepage 1252 character where available, or a box otherwise. In some cases the
space character is shown as ␠.
 Hex signature ISO 8859-1 Offset Extension Description

Script or data to be passed

23 21 #! 0 to the program following
the shebang (#!)[1]

02 00 5a 57 52
54 00 00 00 00 Claris Works word
␂␀ZWRT␀␀␀␀␀␀␀␀␀␀ 0 cwk
00 00 00 00 00 processing doc
00

00 00 02 00 06
␀␀␂␀␆␄␆␀␈␀␀␀␀␀ Lotus 1-2-3 spreadsheet
04 06 00 08 00 0 wk1
(v1) file
00 00 00 00

00 00 1A 00 00
␀␀␚␀␀␊␄␀␀␀␀␀ Lotus 1-2-3 spreadsheet
10 04 00 00 00 0 wk3
(v3) file
00 00

00 00 1A 00 02
␀␀␚␀␂␊␄␀␀␀␀␀ wk4 Lotus 1-2-3 spreadsheet
10 04 00 00 00 0
wk5 (v4, v5) file
00 00

00 00 1A 00 05 Lotus 1-2-3 spreadsheet

␀␀␚␀␅␊␄ 0 123
10 04 (v9) file

␀␀␃ó Amiga Hunk executable

00 00 03 F3 0
file

00 00 49 49 58
50 52 (little-
endian) ␀␀IIXPR
0 qxd Quark Express document
00 00 4D 4D 58 ␀␀MMXPR
50 52 (big-
endian)

Password Gorilla
50 57 53 33 PWS3 0 psafe3
Password Database

D4 C3 B2 A1
Ôò¡
(little-endian)
0 pcap Libpcap File Format[2]
A1 B2 C3 D4
¡²ÃÔ
(big-endian)

4D 3C B2 A1
M<²¡
(little-endian) Libpcap File Format
0 pcap
A1 B2 3C 4D (nanosecond-resolution)[2]
¡²<M
(big-endian)

PCAP Next Generation

0A 0D 0D 0A ␊␍␍␊ 0 pcapng
Dump File Format[3]
RedHat Package Manager
ED AB EE DB í«îÛ 0 rpm
(RPM) package[4]

53 51 4C 69 74
65 20 66 sqlitedb
SQLite format 3␀ 0 sqlite SQLite Database[5]
6F 72 6D 61 74 db
20 33 00

Amazon Kindle Update

53 50 30 31 SP01 0 bin
Package[6]
 internal WAD (main
49 57 41 44 IWAD 0 wad
resource file of Doom)[7]
IBM Storyboard bitmap file
PIC Windows Program
␀ PIF Information File
00 0
SEA Mac Stuffit Self-Extracting
YTR Archive
IRIS OCR data file

00 00 00 00 00
00 00 00 ␀␀␀␀␀␀␀␀
00 00 00 00 00 PalmPilot
␀␀␀␀␀␀␀␀ 11 PDB
00 00 00 Database/Document File
␀␀␀␀␀␀␀␀
00 00 00 00 00
00 00 00

Palm Desktop Calendar

BE BA FE CA ¾ºþÊ 0 DBA
Archive

␀␁BD Palm Desktop To Do

00 01 42 44 0 DBA
Archive

␀␁DT Palm Desktop Calendar

00 01 44 54 0 TDA
Archive

54 44 46 24 TDF$ 0 TDF$ Telegram Desktop File

Telegram Desktop
54 44 45 46 TDEF 0 TDEF
Encrypted File

␀␁␀␀ Palm Desktop Data File

00 01 00 00 0
(Access format)
Computer icon encoded in
00 00 01 00 ␀␀␁␀ 0 ico
ICO file format[8]

69 63 6e 73 icns 0 icns Apple Icon Image format

3rd Generation
66 74 79 70 33 3gp Partnership Project 3GPP
ftyp3g 4
67 3g2 and 3GPP2 multimedia
files

66 74 79 70 68
High Efficiency Image
65 69 6366 74 ftypheic 4 heic
Container (HEIC)
79 70 6d

compressed file (often tar

␟□ z
1F 9D 0 zip) using Lempel-Ziv-
tar.z
Welch algorithm

␟⍽ z Compressed file (often tar

1F A0 0
tar.z zip) using LZH algorithm

Lempel Ziv Huffman

2D 6C 68 30 2D -lh0- 2 lzh archive file Method 0 (No
compression)
Lempel Ziv Huffman
2D 6C 68 35 2D -lh5- 2 lzh archive file Method 5
(8 KiB sliding window)

42 41 43 4B 4D
AmiBack Amiga Backup
49 4B 45 BACKMIKEDISK 0 bac
data file
44 49 53 4B
 AmiBack Amiga Backup
49 4E 44 58 INDX 0 idx
index file

62 70 6C 69 73
bplist 0 plist Binary Property List file
74

Compressed file using

42 5A 68 BZh 0 bz2
Bzip2 algorithm

47 49 46 38 37
Image file encoded in the
61 GIF87a
0 gif Graphics Interchange
47 49 46 38 39 GIF89a
Format (GIF)[9]
61

49 49 2A 00 II*␀
(little-endian) tif Tagged Image File Format
0
4D 4D 00 2A
tiff (TIFF)[10]
MM␀*
(big-endian)

49 49 2B 00 II+␀ 0 tif
(little-endian)
tiff BigTIFF[11]
4D 4D 00 2B MM␀+ 0
(big-endian)

Canon RAW Format

49 49 2A 00 10
II*␀␐␀␀␀CR Version 2[12]
00 00 00 0 cr2
Canon's RAW format is
43 52 based on TIFF.[13]

66 74 79 70 63
72 78 ftypcrx 0 cr3
43 52

80 2A 5F D7 €*_× 0 cin Kodak Cineon image

Compressed file using

52 4E 43 01 RNC␁ Rob Northen Compression
0 (version 1 and 2)
52 4E 43 02 RNC␂
algorithm[14]

4E 55 52 55 49
4D 47 NURUIMG nui nuru ASCII/ANSI image
0
4E 55 52 55 50 NURUPAL nup and palette files[15]
41 4C

53 44 50 58
(big-endian SDPX
format)
0 dpx SMPTE DPX image
58 50 44 53
(little-endian XPDS
format)

76 2F 31 01 v/1␁ 0 exr OpenEXR image

Better Portable Graphics

42 50 47 FB BPGû 0 bpg
format[16]

FF D8 FF DB ÿØÿÛ 0 jpg JPEG raw or in the JFIF or

jpeg Exif file format[17]
FF D8 FF E0 00
10 4A 46 ÿØÿà␀␐JFIF␀␁
49 46 00 01
FF D8 FF EE ÿØÿî

FF D8 FF
E1 ?? ?? 45 78 ÿØÿá??Exif␀␀
69 66 00 00

JPEG raw or in the JFIF or

FF D8 FF E0 ÿØÿà 0 jpg
Exif file format[17]
jp2
00 00 00 0C 6A j2k
␀␀␀␌jP␠␠␍␊‡␊ jpf
50 20 20 0D 0A
jpm
87 0A 0 jpg2 JPEG 2000 format[18]
j2c
jpc
FF 4F FF 51 ÿOÿQ jpx
mj2

QOI - The “Quite OK

71 6f 69 66 qoif 0 qoi
Image Format”[19]

46 4F 52 ilbm
0 lbm IFF Interleaved Bitmap
4D ?? ?? ?? ?? FORM????ILBM
any ibm Image
49 4C 42 4D iff

8svx
46 4F 52 8sv
0
4D ?? ?? ?? ?? FORM????8SVX svx IFF 8-Bit Sampled Voice
any
38 53 56 58 snd
iff

46 4F 52
0 acbm
4D ?? ?? ?? ?? FORM????ACBM Amiga Contiguous Bitmap
any iff
41 43 42 4D

46 4F 52
0 anbm
4D ?? ?? ?? ?? FORM????ANBM IFF Animated Bitmap
any iff
41 4E 42 4D

46 4F 52
0 anim
4D ?? ?? ?? ?? FORM????ANIM IFF CEL Animation
any iff
41 4E 49 4D

46 4F 52 faxx
0
4D ?? ?? ?? ?? FORM????FAXX fax IFF Facsimile Image
any
46 41 58 58 iff

46 4F 52
0 ftxt
4D ?? ?? ?? ?? FORM????FTXT IFF Formatted Text
any iff
46 54 58 54

46 4F 52 smus
0 smu
4D ?? ?? ?? ?? FORM????SMUS IFF Simple Musical Score
any mus
53 4D 55 53 iff

46 4F 52 cmus
0
4D ?? ?? ?? ?? FORM????CMUS mus IFF Musical Score
any
43 4D 55 53 iff

46 4F 52 yuvn
0
4D ?? ?? ?? ?? FORM????YUVN yuv IFF YUV Image
any
59 55 56 4E iff
46 4F 52
0
4D ?? ?? ?? ?? FORM????FANT iff Amiga Fantavision Movie
any
46 41 4E 54

aiff
46 4F 52 aif
0 Audio Interchange File
4D ?? ?? ?? ?? FORM????AIFF aifc
any Format
41 49 46 46 snd
iff

4C 5A 49 50 LZIP 0 lz lzip compressed file[20]

30 37 30 37 30
070707 0 cpio cpio archive file[21]
37

exe
dll
mui
sys
scr
cpl
DOS MZ executable and
ocx
4D 5A MZ 0 its descendants (including
ax
NE and PE)
iec
ime
rs
tsp
fon
efi

53 4D 53 4E 46
SMSNF200 0 ssp SmartSniff Packets File [22]
32 30 30

DOS ZM executable and

5A 4D ZM 0 exe
its descendants (rare)
zip
aar
apk
docx
epub
ipa
jar
kmz
maff
50 4B 03 04 msix
PK␃␄
50 4B 05 06 odp zip file format and formats
(empty archive) PK␅␆ 0 ods based on it, such as
50 4B 07 08 PK␇␈ odt EPUB, JAR, ODF, OOXML
(spanned archive) pk3
pk4
pptx
usdz
vsdx
xlsx
xpi
whl

Roshal ARchive
52 61 72 21 1A
Rar!␚␇␀ 0 rar compressed archive v1.50
07 00 onwards[23]

Roshal ARchive
52 61 72 21 1A
Rar!␚␇␁␀ 0 rar compressed archive v5.00
07 01 00
onwards[24]
 none, .axf, .bin, .elf, .o, Executable and Linkable
7F 45 4C 46 ␡ELF 0 .out, .prx, .puff, .ko, .mod,
.so Format[25]

Image encoded in the

89 50 4E 47 0D
‰PNG␍␊␚␊ 0 png Portable Network Graphics
0A 1A 0A format[26]

Data stored in version 4 of

␅␃␓␁ hdf4
0E 03 13 01 0 the Hierarchical Data
h4
Format.
0, 512, Data stored in version 5 of
89 48 44 46 0D hdf5
‰HDF␍␊␚␊ 1024, the Hierarchical Data
0A 1A 0A 2048, ...
h5
Format.

CP/M 3 and higher with

C9 É 0 com
overlays[27]
Java class file, Mach-O
CA FE BA BE Êþº¾ 0 class
Fat Binary

UTF-8 byte order mark,

txt
EF BB BF  0 commonly seen in text
others
files.[28][29][30]
UTF-16LE byte order
txt
FF FE ÿþ 0 mark, commonly seen in
others
text files.[28][29][30]
UTF-16BE byte order
txt
FE FF þÿ 0 mark, commonly seen in
others
text files.[28][29][30]

txt UTF-32LE byte order mark

FF FE 00 00 ÿþ␀␀ 0
others for text[28][30]

txt UTF-32BE byte order mark

00 00 FE FF ␀␀þÿ 0
others for text[28][30]

2B 2F 76 38 +/v8
2B 2F 76 39 +/v9 UTF-7 byte order mark for
0
2B 2F 76 2B +/v+ text[31][30]
2B 2F 76 2F +/v/

txt SCSU byte order mark for

0E FE FF ␎þÿ 0
others text[31][30]
UTF-EBCDIC byte order
DD 73 66 73 Ýsfs 0
mark for text[31][30]
0
FE ED FA CE þíúÎ Mach-O binary (32-bit)
0x1000

0
FE ED FA CF þíúÏ Mach-O binary (64-bit)
0x1000

FE ED FE ED þíþí 0 JKS Javakey Store[32]

Mach-O binary (reverse
CE FA ED FE Îúíþ 0 byte ordering scheme, 32-
bit)[33]
Mach-O binary (reverse
CF FA ED FE Ïúíþ 0 byte ordering scheme, 64-
bit)[33]

25 21 50 53 %!PS 0 ps PostScript document

25 21 50 53 2D
41 64 6F 62 65
%!PS-Adobe-3.0 eps Encapsulated PostScript
2D 33 2E 30 20 0
ESPF-3.0 epsf file version 3.0[34]
45 50 53 46 2D
33 2E 30

25 21 50 53 2D
41 64 6F 62 65
%!PS-Adobe-3.1 eps Encapsulated PostScript
2D 33 2E 31 20 0
ESPF-3.0 epsf file version 3.1[35]
45 50 53 46 2D
33 2E 30

49 54 53 46 03
ITSF␃␀␀␀`␀␀␀ MS Windows HtmlHelp
00 00 00 0 chm
Data
60 00 00 00

Windows 3.x/95/98 Help

3F 5F ?_ 0 hlp
file

25 50 44 46 2D %PDF- 0 pdf PDF document[36]

30 26 B2 75 8E
66 CF 11 asf Advanced Systems
0&²uŽfÏ␑¦Ù␀ª␀bÎl 0 wma
A6 D9 00 AA 00 Format[37]
wmv
62 CE 6C

24 53 44 49 30 System Deployment
$SDI0001 0 Image, a disk image
30 30 31 format used by Microsoft
ogg
Ogg, an open source
4F 67 67 53 OggS 0 oga
media container format
ogv

Photoshop Document file,

38 42 50 53 8BPS 0 psd Adobe Photoshop's native
file format

52 49 46
Waveform Audio File
46 ?? ?? ?? ?? RIFF????WAVE 0 wav
Format[38]
57 41 56 45

52 49 46
Audio Video Interleave
46 ?? ?? ?? ?? RIFF????AVI␠ 0 avi
video format[39]
41 56 49 20

MPEG-1 Layer 3 file

FF FB ÿû without an ID3 tag or with
FF F3 ÿó 0 mp3 an ID3v1 tag (which is
FF F2 ÿò appended at the end of the
file)

MP3 file with an ID3v2

49 44 33 ID3 0 mp3
container
BMP file, a bitmap format
bmp
42 4D BM 0 used mostly in the
dib
Windows world

0x8001 ISO9660 CD/DVD image

43 44 30 30 31 CD001 0x8801 iso
0x9001 file[40]

43 44 30 30 31 CD001 0x5EAC9 cdi CD-i CD image file

6D 61 69 6E 2E Nintendo Game & Watch
main.bs 0 mgw
62 73 image file

Nintendo Entertainment
4E 45 53 NES 0 nes
System image file

A0 32 41 A0 A0 Commodore 64 1541 disk

2A 0x165A4 d64
A0 image (D64 format)

47 53 52 2D 31 Commodore 64 1541 disk

GCR-1541 0 g64
35 34 31 image (G64 format)

Commodore 64 1581 disk

A0 33 44 A0 A0 3D 0x61819 d81
image (D81 format)

43 36 34 20 74
61 70 65 20 69 C64 tape image Commodore 64 tape
0 t64
6D 61 67 65 20 file image
66 69 6C 65

43 36 34 20 43
41 52 54 52 49 Commodore 64 cartridge
C64 CARTRIDGE␠␠␠ 0 crt
44 47 45 20 20 image
20

53 49 4D 50 4C
45 20 20
SIMPLE␠␠
3D 20 20 20 20
20 20 20 =␠␠␠␠␠␠␠ Flexible Image Transport
0 fits
20 20 20 20 20 ␠␠␠␠␠␠␠␠ System (FITS)[41]
20 20 20 ␠␠␠␠␠T
20 20 20 20 20
54

Free Lossless Audio

66 4C 61 43 fLaC 0 flac
Codec[42]
mid
4D 54 68 64 MThd 0
midi MIDI sound file[43]

Compound File Binary

Format, a container format
defined by Microsoft COM.
It can contain the
doc equivalent of files and
xls directories. It is used by
D0 CF 11 E0 A1
ÐÏ␑ࡱ␚á 0 ppt Windows Installer and for
B1 1A E1 msi documents in older
msg versions of Microsoft
Office.[44] It can be used
by other programs as well
that rely on the COM and
OLE API's.

64 65 78 0A 30
dex␊035␀ 0 dex Dalvik Executable
33 35 00

4B 44 4D KDM 0 vmdk VMDK files[45][46]

23 20 44 69 73
6B 20 44 65 73 VMware 4 Virtual Disk
# Disk Descripto 0 vmdk
63 72 69 70 74 description file (split disk)
6F
 Google Chrome
43 72 32 34 Cr24 0 crx extension[47] or packaged
app[48]
FreeHand 8
41 47 44 33 AGD3 0 fh8
document[49][50]

05 07 00 00 42
4F 42 4F ␅␇␀␀BOBO
05 07 00 00 00
␅␇␀␀␀␀␀␀ 0 cwk AppleWorks 5 document
00 00 00
␀␀␀␀␀␁
00 00 00 00 00
01

06 07 E1 00 42
4F 42 4F ␆␇á␀BOBO
06 07 E1 00 00
␆␇á␀␀␀␀␀ 0 cwk AppleWorks 6 document
00 00 00
␀␀␀␀␀␁
00 00 00 00 00
01

45 52 02 00 00
ER␂␀␀␀
00
0 toast Roxio Toast disc image file
8B 45 52 02 00
‹ER␂␀␀␀
00 00

6B 6F 6C 79 koly end–512 dmg Apple Disk Image file

eXtensible ARchive
78 61 72 21 xar! 0 xar
format[51]
Windows Files And
Settings Transfer
50 4D 4F 43 43 Repository[52] See also
PMOCCMOC 0 dat
4D 4F 43 USMT 3.0 (Win XP)[53]
and USMT 4.0 (Win 7)[54]
User Guides

Nintendo Entertainment
4E 45 53 1A NES␚ 0 nes
System ROM file[55]

75 73 74 61 72
00 30 30 ustar␀00
257 tar tar archive[56]
75 73 74 61 72 ustar␠␠␀
20 20 00

OAR file archive format,

4F 41 52 ?? OAR? 0 oar where ?? is the format
version.
Open source portable
74 6F 78 33 tox3 0 tox
voxel file[57]
Magic Lantern Video
4D 4C 56 49 MLVI 0 MLV
file[58]

44 43 4D 01 50
DCM␁PA30 Windows Update Binary
41 33 30 0
PA30 Delta Compression file[59]
50 41 33 30

37 7A BC AF 27
7z¼¯'␜ 0 7z 7-Zip File Format
1C
 ␟‹ gz
1F 8B 0
tar.gz GZIP compressed file[60]

FD 37 7A 58 5A xz XZ compression utility
ý7zXZ␀ 0
00 tar.xz using LZMA2 compression

LZ4 Frame Format[61]

␄"M␘ Remark: LZ4 block format
04 22 4D 18 0 lz4
does not offer any magic
bytes.[62]

4D 53 43 46 MSCF 0 cab Microsoft Cabinet file

Microsoft compressed file

in Quantum format, used
prior to Windows XP. File
can be decompressed
using Extract.exe or
Expand.exe distributed
with earlier versions of
53 5A 44 44 88
SZDDˆð'3 0 ??_ Windows. After
F0 27 33 compression, the last
character of the original
filename extension is
replaced with an
underscore, e.g.
‘Setup.exe’ becomes
‘Setup.ex_’.

Free Lossless Image

46 4C 49 46 FLIF 0 flif
Format

mkv
mka
␚Eߣ Matroska media container,
1A 45 DF A3 0 mks
including WebM
mk3d
webm
"SEAN : Session Analysis"
Training file. Also used in
compatible software
4D 49 4C 20 MIL␠ 0 stg "Rpw : Rowperfect for
Windows" and "RP3W :
ROWPERFECT3 for
Windows".

41 54 26 54 46 DjVu document
The following byte is either
4F 52 4D djvu
AT&TFORM????DJV 0 55 (U) for single-page or
?? ?? ?? ?? djv
4D (M) for multi-page
44 4A 56 documents.

DER encoded X.509

30 82 0‚ 0 der
certificate

2D 2D 2D 2D 2D
42 45 47 49 4E
20 43 45 52 54 -----BEGIN crt PEM encoded X.509
0
49 46 49 43 41 CERTIFICATE----- pem certificate
54 45 2D 2D 2D
2D 2D

2D 2D 2D 2D 2D -----BEGIN 0 csr PEM encoded X.509

42 45 47 49 4E CERTIFICATE pem Certificate Signing
Request
20 43 45 52 54 REQUEST-----
49 46 49 43 41
54 45 20 52 45
51 55 45 53 54
2D 2D 2D 2D 2D

2D 2D 2D 2D 2D
42 45 47 49 4E
20 50 52 49 56 -----BEGIN key PEM encoded X.509
0
41 54 45 20 4B PRIVATE KEY----- pem PKCS#8 private key
45 59 2D 2D 2D
2D 2D

2D 2D 2D 2D 2D
42 45 47 49 4E
20 44 53 41 20
-----BEGIN DSA key PEM encoded X.509
50 52 49 56 41 0
PRIVATE KEY----- pem PKCS#1 DSA private key
54 45 20 4B 45
59 2D 2D 2D 2D
2D

2D 2D 2D 2D 2D
42 45 47 49 4E
20 52 53 41 20
-----BEGIN RSA key PEM encoded X.509
50 52 49 56 41 0
PRIVATE KEY----- pem PKCS#1 RSA private key
54 45 20 4B 45
59 2D 2D 2D 2D
2D

50 75 54 54 59
2D 55 73 65 72
PuTTY-User-Key- PuTTY private key file
2D 4B 65 79 2D 0 ppk
File-2: version 2
46 69 6C 65 2D
32 3A

50 75 54 54 59
2D 55 73 65 72
PuTTY-User-Key- PuTTY private key file
2D 4B 65 79 2D 0 ppk
File-3: version 3
46 69 6C 65 2D
33 3A

2D 2D 2D 2D 2D
42 45 47 49 4E
20 4F 50 45 4E -----BEGIN
53 53 48 20 50 OPENSSH PRIVATE 0 OpenSSH private key file
52 49 56 41 54 KEY-----
45 20 4B 45 59
2D 2D 2D 2D 2D

2D 2D 2D 2D 2D
42 45 47 49 4E
-----BEGIN SSH2
20 53 53 48 32 0 pub OpenSSH public key file
PUBLIC KEY-----
20 4B 45 59 2D
2D 2D 2D 2D

DICOM Medical File

44 49 43 4D DICM 128 dcm
Format

77 4F 46 46 wOFF 0 woff WOFF File Format 1.0[63]

77 4F 46 32 wOF2 0 woff2 WOFF File Format 2.0[64]

3C 3F 78 6D 6C xml (UTF-8 or other 8-bit
<?xml␠
20 encodings)

3C 00 3F 00 78
00 6D 00 <␀?␀x␀m␀l␀␠␀ xml (UTF-16LE)
6C 00 20

00 3C 00 3F 00
78 00 6D ␀<␀?␀x␀m␀l␀␠ xml (UTF-16BE)
00 6C 00 20

3C 00 00 00 3F
00 00 00 <␀␀␀?␀␀␀ 0
78 00 00 00 6D eXtensible Markup
x␀␀␀m␀␀␀ after xml (UTF-32LE) Language[29][65]
00 00 00 BOM
l␀␀␀␠␀␀␀
6C 00 00 00 20
00 00 00

00 00 00 3C 00
00 00 3F ␀␀␀<␀␀␀?
00 00 00 78 00
␀␀␀x␀␀␀m xml (UTF-32BE)
00 00 6D
␀␀␀l␀␀␀␠
00 00 00 6C 00
00 00 20

4C 6F A7 94 93
Lo§”“@ xml (EBCDIC)
40

WebAssembly binary
00 61 73 6D ␀asm 0 wasm
format[66]
Lepton compressed JPEG
CF 84 01 Ï„␁ 0 lep
image[67]

43 57 53 CWS
0 swf Adobe Flash .swf
46 57 53 FWS

21 3C 61 72 63
!<arch>␊ 0 deb linux deb file
68 3E 0A

Google WebP image file,

where ?? ?? ?? ?? is the
52 49 46 file size. More information
46 ?? ?? ?? ?? RIFF????WEBP 0 webp on WebP File Header (http
57 45 42 50 s://developers.google.com/
speed/webp/docs/riff_cont
ainer#webp_file_header)

U-Boot / uImage. Das U-

27 05 19 56 '␅␙V 0 Boot Universal Boot
Loader.[68]

7B 5C 72 74 66
{\rtf1 0 rtf Rich Text Format
31

54 41 50 45 TAPE 0 Microsoft Tape Format

47 G 0 ts MPEG Transport Stream

0xBC tsv (MPEG-2 Part 1)[69]
0x178 tsa
... mpg
(every mpeg
 188th
byte)

m2p MPEG Program Stream

␀␀␁º vob (MPEG-1 Part 1
00 00 01 BA 0
mpg (essentially identical) and
mpeg MPEG-2 Part 1)
MPEG-1 video and MPEG-
␀␀␁³ mpg
00 00 01 B3 0 2 video (MPEG-1 Part 2
mpeg
and MPEG-2 Part 2)

66 74 79 70 69 ISO Base Media file

ftypisom 4 mp4
73 6F 6D (MPEG-4)

66 74 79 70 4D
ftypMSNV 4 mp4 MPEG-4 video file
53 4E 56

x␁ No Compression (no
78 01
preset dictionary)

Best speed (no preset

78 5E x^
dictionary)

Default Compression (no

78 9C xœ
preset dictionary)
Best Compression (no
78 DA xÚ
preset dictionary)
0 zlib
x␠ No Compression (with
78 20
preset dictionary)

Best speed (with preset

78 7D x}
dictionary)
Default Compression (with
78 BB x»
preset dictionary)

Best Compression (with

78 F9 xù
preset dictionary)

LZFSE - Lempel-Ziv style

data compression
62 76 78 32 bvx2 0 lzfse algorithm using Finite
State Entropy coding. OSS
by Apple.[70]
Apache ORC (Optimized
4F 52 43 ORC 0 orc
Row Columnar) file format

Obj␁ Apache Avro binary file

4F 62 6A 01 0 avro
format

RCFile columnar file

53 45 51 36 SEQ6 0 rc
format

3C 72 6F 62 6C
<roblox! 0 rbxl Roblox place file [71]
6F 78 21

p25 PhotoCap Object

65 87 78 56 e‡xV 0
obt Templates

55 55 AA AA UUªª 0 pcv PhotoCap Vector

78 56 34 xV4 0 pbt PhotoCap Template

pdt
pea
peb
pet
pgt
 pict
pjt
pkt
pmt

Apache Parquet columnar

50 41 52 31 PAR1 0
file format
Emulator Emaxsynth
45 4D 58 32 EMX2 0 ez2
samples

ez3
45 4D 55 33 EMU3 0 Emulator III synth samples
iso

1B 4C 75 61 ␛Lua 0 luac Lua bytecode[72]

62 6F 6F 6B 00
00 00 00 macOS file Alias[73]
book␀␀␀␀mark␀␀␀␀ 0 alias
6D 61 72 6B 00 (Symbolic link)
00 00 00

5B 5A 6F 6E 65
Microsoft Zone Identifier
54 72 61
[ZoneTransfer] 0 Identifier for URL Security
6E 73 66 65 72 Zones[74][75]
5D

52 65 63 65 69
76 65 64 Received: 0 eml Email Message var5
3A

20 02 01 62 A0
1E AB 07 ␠␂␁b⍽␞«␇␂␀␀␀ 0 tde Tableau Datasource
02 00 00 00

37 48 03 02 00
00 00 00
7H␃␂␀␀␀␀X509KEY 0 kdb KDB file
58 35 30 39 4B
45 59

85 ?? ?? 03 …??␃ 0 pgp PGP file [76]

28 B5 2F FD (µ/ý 0 zst Zstandard compress[77][78]

52 53 56 4B 44 QuickZip rs compressed
RSVKDATA 0 rs
41 54 41 archive[79][80]

3A 29 0A :)␊ 0 sml Smile file

Preferred Executable
4A 6F 79 21 Joy! 0
Format

VPK file, used to store

34 12 AA 55 4␒ªU 0 vpk game data for some
Source Engine games

2A 2A 41 43 45 ACE (compressed file

**ACE** 7 ace
2A 2A format)

60 EA `ê 0 arj ARJ

InstallShield CAB Archive

49 53 63 28 ISc( 0 cab
File
Windows 3.1x
4B 57 41 4A KWAJ 0 ??_
Compressed File
 Windows 9x Compressed
53 5A 44 44 SZDD 0 ??_
File

5A 4F 4F ZOO 0 zoo Zoo (file format)

50 31 0A P1␊ 0 pbm Portable bitmap ASCII

50 34 0A P4␊ 0 pbm Portable bitmap binary

50 32 0A P2␊ 0 pgm Portable Gray Map ASCII

50 35 0A P5␊ 0 pgm Portable Gray Map binary

50 33 0A P3␊ 0 ppm Portable Pixmap ASCII

50 36 0A P6␊ 0 ppm Portable Pixmap binary

D7 CD C6 9A ×ÍÆš 0 wmf Windows Metafile

67 69 6D 70 20
gimp xcf 0 xcf XCF (file format)
78 63 66

2F 2A 20 58 50
4D 20 2A /* XPM */ 0 xpm X PixMap
2F

Advanced Forensics
41 46 46 AFF 0 aff
Format

EnCase EWF version 2

45 56 46 32 EVF2 0 Ex01
format
EnCase EWF version 1
45 56 46 EVF 0 e01
format

51 46 49 QFI 0 qcow qcow file format

52 49 46
46 ?? ?? ?? ?? RIFF????ACON 0 ani Animated cursor
41 43 4F 4E

52 49 46
46 ?? ?? ?? ?? RIFF????CDDA 0 cda .cda file
43 44 44 41

52 49 46
Qualcomm PureVoice file
46 ?? ?? ?? ?? RIFF????QLCM 0 qcp
format
51 4C 43 4D

52 49 46
58 ?? ?? ?? ??
RIFX????FGDM
46 47 44 4D
(big-endian) Adobe
0 dcr
58 46 49 Shockwave[81][82][83]
52 ?? ?? ?? ??
XFIR????MDGF
4D 44 47 46
(little-endian)

52 49 46 0 dir Macromedia Director file

58 ?? ?? ?? ?? dxr format[84][82][83]
RIFX????MV93 drx
4D 56 39 33
(big-endian)
58 46 49
52 ?? ?? ?? ??
XFIR????39VM
33 39 56 4D
(little-endian)

46 4C 56 FLV 0 flv Flash Video file

3C 3C 3C 20 4F
72 61 63
6C 65 20 56 4D
<<< Orac
20 56 69
le VM Vi
72 74 75 61 6C VirtualBox Virtual Hard
rtualBox 0 vdi
42 6F 78 Disk file format
Disk Im
20 44 69 73 6B
age >>>
20 49 6D
61 67 65 20 3E
3E 3E

63 6F 6E 65 63 Windows Virtual PC Virtual

conectix 0 vhd
74 69 78 Hard Disk file format[85]

Windows Virtual PC
76 68 64 78 66
vhdxfile 0 vhdx Windows 8 Virtual Hard
69 6C 65 Disk file format

49 73 5A 21 IsZ! 0 isz Compressed ISO image

Direct Access Archive

44 41 41 DAA 0 daa
PowerISO
Windows Event Viewer file
4C 66 4C 65 LfLe 0 evt
format

45 6C 66 46 69 Windows Event Viewer

ElfFile 0 evtx
6C 65 XML file format

Windows customized
73 64 62 66 sdbf 8 sdb
database
Windows 3.x Program
50 4D 43 43 PMCC 0 grp Manager Program Group
file format

4B 43 4D 53 KCMS 0 icm ICC profile

dat
72 65 67 66 regf 0 Windows Registry file
hiv
Microsoft Outlook Personal
21 42 44 4E !BDN 0 pst
Storage Table file

3D model compressed
44 52 41 43 4F DRACO 0 drc
with Google Draco[86]
Gridded data (commonly
grib weather observations or
47 52 49 42 GRIB 0 forecasts) in the WMO
grib2
GRIB or GRIB2 format[87]

42 4C 45 4E 44
BLENDER 0 blend Blender File Format[88]
45 52

00 00 00 0C 4A 0 jxl Image encoded in the

58 4C 20 0D 0A ␀␀␀␌JXL␠␍␊‡␊ JPEG XL format[89]
87 0A
FF 0A ÿ␊

ttf
00 01 00 00 00 ␀␁␀␀␀ 0 tte TrueType font
dfont

4F 54 54 4F OTTO 0 otf OpenType font[90]

23 25 4D 6F 64 Modulefile for Environment

#%Module 0
75 6C 65 Modules[91]

4D 53 57 49 4D wim
MSWIM␀␀␀Ð␀␀␀␀ Windows Imaging Format
00 00 00 0 swm
file
D0 00 00 00 00 esd

Slob (sorted list of Object

storages) is a read-only,
21 2D 31 53 4C
!-1SLOB␟ 0 slob compressed data store
4F 42 1F with dictionary-like
interface[92]

AC ED ’ 0 Serialized Java Data[93]

43 72 65 61 74
69 76 65 20 56
6F 69 63 65 20 Creative Voice File 0 voc Creative Voice file
46 69 6C 65 1A
1A 00

au
2E 73 6E 64 .snd 0 Au audio file format
snd
OpenGL Iris Perfomer
DB 0A CE 00 0 .PFB (Performer Fast
Binary)[94]

48 5a 4c 52 00
HZLR 0 hazelrules Noodlesoft Hazel [95]
00 00 18

46 4C 68 64 FLhd 0 flp FL Studio Project File

FL Studio Mobile Project

31 30 4C 46 10LF 0 flm
File

52 4b 4d 43 32 Vormetric Encryption DPM

RKMC210 0
31 30 Version 2.1 Header[96]

00 01 00 00 4D
53 49 53 41 4D ␀␁␀␀MSISAM
0 mny Microsoft Money file
20 44 61 74 61 Database
62 61 73 65

00 01 00 00 53
74 61 6E 64 61 ␀␁␀␀Standard ACE Microsoft Access 2007
0 accdb
72 64 20 41 43 DB Database
45 20 44 42

00 01 00 00 53
74 61 6E 64 61 ␀␁␀␀Standard Jet Microsoft Access
0 mdb
72 64 20 4A 65 DB Database
74 20 44 42

01 FF 02 04 03 Micrografx vector graphic

␁ÿ␂␄␃␂ 0 drw
02 file
 Digital Speech Standard
02 64 73 73 ␂dss 0 dss (Olympus, Grundig, &
Phillips) v2
Digital Speech Standard
03 64 73 73 ␃dss 0 dss (Olympus, Grundig, &
Phillips) v3

03 00 00 00 41
␃␀␀␀APPR 0 adx Approach index file
50 50 52

06 06 ED F5 D8
1D 46 E5 BD 31
␆␆íõØ␝Få½1ïçþt·␝ 0 indd Adobe InDesign document
EF E7 FE 74 B7
1D

06 0E 2B 34 02
␆␎+4␂␅␁␁␍␁␂␁␁␂ 0-65535 Material Exchange Format
05 01 01 0D 01 mxf
(run-in) file
02 01 01 02

07 53 4B 46 ␇SKF 0 skf SkinCrafter skin file

07 64 74 32 64
␇dt2ddtd 0 dtd DesignTools 2D Design file
64 74 64

0A 16 6F 72 67
2E 62 69 74 63
␊␖org.bitcoin.pr 0 wallet MultiBit Bitcoin wallet file
6F 69 6E 2E 70
72

0D 44 4F 43 ␍DOC 0 doc DeskMate Document file

0E 4E 65 72 6F
␎NeroISO 0 nri Nero CD Compilation
49 53 4F

0E 57 4B 53 ␎WKS 0 wks DeskMate Worksheet

0F 53 49 42 45
␏SIBELIUS 0 sib Sibelius Music - Score file
4C 49 55 53

23 20 4D 69 63
72 6F 73 6F 66
74 20 44 65 76 # Microsoft Microsoft Developer Studio
0 dsp
65 6C 6F 70 65 Developer Studio project file
72 20 53 74 75
64 69 6F

Adaptive Multi-Rate
ACELP (Algebraic Code
Excited Linear Prediction)
23 21 41 4D 52 #!AMR 0 amr
Codec, commonly audio
format with GSM cell
phones.

23 21 53 49 4C Audio compression format

#!SILK␊ 0 sil
4B 0A developed by Skype

23 3F 52 41 44
#?RADIANCE␊ Radiance High Dynamic
49 41 4E 43 45 0 hdr
Range image file
0A

23 40 7E 5E #@~^ 0 vbe VBScript Encoded script

 MikroTik WinBox
0D F0 1D C0 ␍ð�À 0 cdb Connection Database
(Address Book)
m3u
23 45 58 54 4D
#EXTM3U 0 m3u8 Multimedia playlist
33 55

mdf␀ M2 Archive, used by game

6D 64 66 00 0 m
developer M2

Capcom RE Engine game

4B 50 4B 41 KPKA 0 pak
data archives

Capcom MT Framework
41 52 43 ARC 0 arc
game data archives
arc
41 72 43 ArC 0 FreeArc file
cdx

Interleaf PrinterLeaf /
WorldView document
D0 4F 50 53 ÐOPS 0 pl
format (now Broadvision
QuickSilver)

Single file NIfTI format,

6E 2B 31 00 n+1 344 nii used extensively in
biomedical imaging.
Header file of a .hdr/.img
pair in NIfTI format, used
6E 69 31 00 ni1 344 hdr
extensively in biomedical
imaging.

Report Builder file from

Digital Metaphors (https://
52 41 46 36 34 RAF64 0
www.digital-metaphors.co
m/)

Resource file Visionaire

56 49 53 33 VIS3 0 3.x Engine (https://www.vis
ionaire-studio.net/)
Health Level Seven (HL7)
Standard for electronic
4D 53 48 7C MSH|
0 hl7 data exchange [1] (https://
42 53 48 7C BSH| www.hl7.eu/HL7v2x/v25/st
d25/hl7.html)

SAP Power Monitor (http

s://github.com/SAP/power-
70 77 72 64 61
pwrdata 0 pwrdata monitoring-tool-for-macos)
74 61 (version 1.1.0 and higher)
data file

1a 08 .. 0 arc ARC archive file

2d 2d 2d 2d 2d
42 45 47 49 4e
20 50 47 50 20
-----BEGIN PGP
50 55 42 4c 49
PUBLIC KEY 0 asc Armored PGP public key
43 20 4b 45 49
BLOCK-----
20 42 4c 4f 43
4b 2d 2d 2d 2d
2d
3a 42 61 73 65 Windows 3.x - Windows 95
:Base 0 cnt
20 Help Contents

52 49 46
46 ?? ?? ?? ?? RIFF????VDRM 0 vdr VirtualDub
56 44 52 4d

52 59 46
46 ?? ?? ?? ?? RIFF????TRID 0 trd TrID
54 52 49 44

52 49 46
46 ?? ?? ?? ?? RIFF????shw4 0 shw Corel SHOW! 4.0
73 68 77 34

52 49 46
46 ?? ?? ?? ?? RIFF????shw5 0 shw Corel SHOW! 5.0
73 68 77 35

52 49 46
46 ?? ?? ?? ?? RIFF????shr5 0 shr Corel SHOW! 5.0 player
73 68 72 35

52 49 46
Corel SHOW! 5.0
46 ?? ?? ?? ?? RIFF????shb5 0 shb
background
73 68 62 35

52 49 46 MacroMind Multimedia
46 ?? ?? ?? ?? RIFF????RMMP 0 mmm Movie or Microsoft
52 4d 4d 50 Multimedia Movie

41 53 54 4d 2d
ASTM-E57 0 e57 ASTM E57 3D file format
45 35 37

aa aa aa aa ªªªª 0 sys Crowdstrike Channel File

Unreal Engine
8C 0A 00 Œ.. 0 ucas Compressed Asset
Storage file

2D 3D 3D 2D 2D
3D 3D 2D 2D 3D Unreal Engine Table of
-==--==--==--==- 0 utoc
3D 2D 2D 3D 3D Contents file
2D

Commodore 64 binary file

(source:
*.P00 format for
Power64 emulator (htt
43 36 34 46 69 ps://www.salto.at/Pow
C64File 0 P00 (P01, P02,...)
6C 65 00 er64/Documentation/P
ower64-Leggimi/AE-F
ormati_File.html#Secti
on%20E.1))

44 55 43 4B DUCK 8 DuckDB database file

(source:
 Source code (https://g
ithub.com/duckdb/duc
kdb/blob/main/src/incl
ude/duckdb/storage/st
orage_info.hpp#L69))

See also
List of filename extensions - alternative for file type identification and parsing
List of file formats
Magic number (programming)
Substitute character (for the 1Ah (^Z) "end-of-file" marker used in many signatures)
file (command)

References
1. "execve(2): execute program - Linux man page" (https://linux.die.net/man/2/execve).
linux.die.net. Retrieved 2022-07-12.
2. "Libpcap File Format" (https://wiki.wireshark.org/Development/LibpcapFileFormat#Global_He
ader). Retrieved 2018-06-19.
3. "PCAP Next Generation Dump File Format" (https://www.winpcap.org/ntar/draft/PCAP-DumpF
ileFormat.html#sectionshb). Retrieved 2018-06-19.
4. "A. Format of the RPM file" (ftp://ftp.tuwien.ac.at/.vhost/www.openpkg.org/doc/book/maximum
-rpm.html/node26.html). FTP server (FTP). Retrieved 2017-02-15. (To view documents see
Help:FTP)
5. "Database File Format" (https://www.sqlite.org/fileformat.html). Retrieved 2018-11-16.
6. "GitHub - NiLuJe/KindleTool: Tool for creating/extracting Kindle updates and more" (https://gith
ub.com/NiLuJe/KindleTool). GitHub. Retrieved 2017-02-15.
7. "IWAD" (https://zdoom.org/wiki/IWAD). Retrieved 2022-07-05.
8. Icons (http://msdn.microsoft.com/en-us/library/ms997538.aspx) (at MSDN)
9. GRAPHICS INTERCHANGE FORMAT(sm) Version 89a (http://www.w3.org/Graphics/GIF/spe
c-gif89a.txt)
10. "TIFF, Revision 6.0" (https://www.loc.gov/preservation/digital/formats/fdd/fdd000022.shtml).
Sustainability of Digital Formats: Planning for Library of Congress Collections. The Library of
Congress. 2022-04-06. Retrieved 2022-07-12.
11. "BigTIFF" (https://www.loc.gov/preservation/digital/formats/fdd/fdd000328.shtml).
www.loc.gov. 2024-04-15. Retrieved 2024-09-20.
12. Computer Knowledge. "File Extension .CR2 Details" (http://filext.com/file-extension/CR2).
filext.com.
13. "Inside the Canon RAW format version 2, understanding .CR2 file format and files produced
by Canon EOS Digital Camera" (http://lclevy.free.fr/cr2/#key_info). free.fr.
14. "Rob Northen compression" (https://segaretro.org/Rob_Northen_compression). Sega Retro.
11 August 2020. Retrieved 18 January 2024.
15. "domsson/nuru" (https://github.com/domsson/nuru). github.com. 9 September 2023.
16. Bellard, Fabrice (2015). "BPG Image format" (http://bellard.org/bpg/).
17. "Overview of JPEG 1" (https://jpeg.org/jpeg/).
18. "Overview of JPEG 2000" (https://jpeg.org/jpeg2000/).
19. "qoi-specification" (https://qoiformat.org/qoi-specification.pdf) (PDF).
20. "Lzip Compressed Format and the 'application/lzip' Media Type" (https://datatracker.ietf.org/do
c/draft-diaz-lzip/). Ietf Datatracker. section 2.
21. "Format of cpio archives" (https://www.mkssoftware.com/docs/man4/cpio.4.asp). Retrieved
2022-07-05.
22. "Format of SmartSniff packets file" (https://www.nirsoft.net/utils/smsniff.html). Retrieved
2024-08-05.
23. TechNote.txt: RAR version 4.00 - Technical information (Technical report). 2010-12-01. "The
marker block is actually considered as a fixed byte sequence: 0x52 0x61 0x72 0x21 0x1a
0x07 0x00"
24. "RAR 5.0 archive format" (https://www.rarlab.com/technote.htm). Retrieved 2023-10-19.
25. Tool Interface Standard (TIS) Executable and Linking Format (ELF) Specification (http://refspe
cs.linuxbase.org/elf/elf.pdf) Version 1.2 (May 1995)
26. PNG (Portable Network Graphics) Specification Version 1.0 (https://datatracker.ietf.org/doc/ht
ml/rfc2083). IETF. doi:10.17487/RFC2083 (https://doi.org/10.17487%2FRFC2083). RFC 2083
(https://datatracker.ietf.org/doc/html/rfc2083).
27. Elliott, John C.; Lopushinsky, Jim (2002) [1998-04-11]. "CP/M 3.0 COM file header" (http://ww
w.seasip.info/Cpm/rsxrec.html). Seasip.info. Archived (https://web.archive.org/web/201608301
94033/http://www.seasip.info/Cpm/rsxrec.html) from the original on 2016-08-30. Retrieved
2016-08-29.
28. "Faq - Utf-8, Utf-16, Utf-32 & Bom" (https://unicode.org/faq/utf_bom.html#BOM).
29. "How to : Load XML from File with Encoding Detection" (https://odieweblog.wordpress.com/20
16/04/10/how-to-load-xml-from-file-with-encoding-detection). 10 April 2016.
30. "SDL Documentation" (https://docs.sdl.com/791187/581899/sdl-contenta-5-7/representations-
of-boms-by-encoding).
31. Honerman, Tom (January 2, 2021). "Clarify guidance for use of a BOM as a UTF-8 encoding
signature" (https://unicode.org/L2/L2021/21038-bom-guidance.pdf) (PDF).
32. "JKS" (https://hg.openjdk.java.net/jdk10/jdk10/jdk/file/777356696811/src/java.base/share/clas
ses/sun/security/provider/JavaKeyStore.java). Javakey Store.
33. "Mac Developer Library" (https://developer.apple.com/library/mac/#documentation/DeveloperT
ools/Conceptual/MachORuntime/Reference/reference.html). apple.com.
34. "Encapsulated PostScript (EPS) File Format, Version 3.x" (https://www.loc.gov/preservation/di
gital/formats/fdd/fdd000246.shtml). Library of Congress. 10 May 2022. Retrieved 2022-07-05.
35. "Encapsulated PostScript (EPS) File Format, Version 3.x" (https://www.loc.gov/preservation/di
gital/formats/fdd/fdd000246.shtml). Library of Congress. 10 May 2022. Retrieved 2022-07-05.
36. "File command PDF Magic format" (https://github.com/file/file/blob/master/magic/Magdir/pdf).
GitHub. Retrieved 2018-11-06.
37. "ASF (Advanced Systems Format)" (http://www.digitalpreservation.gov/formats/fdd/fdd00006
7.shtml). 6 April 2007.
38. "WAVE Audio File Format" (https://www.loc.gov/preservation/digital/formats/fdd/fdd000001.sht
ml). Sustainability of Digital Formats: Planning for Library of Congress Collections. The Library
of Congress. 2022-04-19. Retrieved 2022-07-12.
39. "AVI (Audio Video Interleaved) File Format" (https://www.loc.gov/preservation/digital/formats/f
dd/fdd000059.shtml). Sustainability of Digital Formats: Planning for Library of Congress
Collections. The Library of Congress. 2016-03-09. Retrieved 2022-07-12.
40. Gary C. Kessler (21 October 2012). "File Signatures Table" (http://www.garykessler.net/library/
file_sigs.html). Retrieved 28 December 2012.
41. "Flexible Image Transport System (FITS), Version 3.0 - File type signifiers" (https://www.loc.go
v/preservation/digital/formats/fdd/fdd000317.shtml#sign). Library of Congress. 2012-09-26.
Retrieved 16 June 2021.
42. Josh Coalson. "FLAC— format" (https://xiph.org/flac/format.html#stream). Retrieved 16 June
2021. " "fLaC", the FLAC stream marker in ASCII, meaning byte 0 of the stream is 0x66,
followed by 0x4C 0x61 0x43"
43. "File Signature Database: mid File Signatures" (https://archive.today/20130801090244/http://fi
lesignatures.net/index.php?search=mid&mode=EXT). filesignatures.net. Archived from the
original (https://filesignatures.net/index.php?search=mid&mode=EXT) on August 1, 2013.
44. "Developing a tool to recognise MS Office file types ( .doc, .xls, .mdb, .ppt )" (https://web.archi
ve.org/web/20140809205308/http://social.msdn.microsoft.com/Forums/en-US/343d09e3-5fdf-
4b4a-9fa6-8ccb37a35930/developing-a-tool-to-recognise-ms-office-file-types-doc-xls-mdb-ppt
-?forum=os_binaryfile). social.msdn.microsoft.com. Archived from the original (http://social.ms
dn.microsoft.com/Forums/en-US/343d09e3-5fdf-4b4a-9fa6-8ccb37a35930/developing-a-tool-t
o-recognise-ms-office-file-types-doc-xls-mdb-ppt-?forum=os_binaryfile) on 2014-08-09.
Retrieved 2014-07-28.
45. "What Files Make Up a Virtual Machine?" (https://www.vmware.com/support/ws55/doc/ws_lea
rning_files_in_a_vm.html). VMware.
46. "VMware Virtual Disks Virtual Disk Format 1.1" (http://www.vmware.com/app/vmdk/?src=vmd
k). VMware.
47. "CRX Package Format" (https://developer.chrome.com/extensions/crx.html). chrome.com.
48. "CRX Package Format" (https://developer.chrome.com/apps/crx.html). chrome.com.
49. "[Pythonmac-SIG] Discovering file type" (https://mail.python.org/pipermail/pythonmac-sig/2005
-February/013028.html). python.org. 10 February 2005.
50. Kehl, Ken. "Re: What is the suffix for Freehand files?" (https://groups.google.com/g/macromed
ia.freehand/c/g6bGwP-YYks/m/4m2Xfk--7VkJ). Google Groups.
51. "xar - xarformat.wiki" (https://code.google.com/p/xar/wiki/xarformat). code.google.com.
52. "Easily Restore Your Computer With File and Settings Transfer Wizard XP (Part 1)" (https://w
ww.howtogeek.com/79820/easily-restore-your-computer-with-file-and-settings-transfer-wizard-
xp-part-1/). howtogeek.com. 27 August 2007.
53. "User State Migration Tool 3.0" (https://technet.microsoft.com/en-us/library/cc722032%28v=w
s.10%29.aspx). microsoft.com. Microsoft.
54. "User State Migration Tool 4.0 User's Guide" (https://technet.microsoft.com/en-us/library/dd56
0801.aspx). microsoft.com. Microsoft. 29 June 2010.
55. "NESRomTool::NES ROM Quickstart" (http://sadistech.com/nesromtool/romdoc.html).
sadistech.com.
56. "GNU tar 1.28: Basic Tar Format" (https://www.gnu.org/software/tar/manual/html_node/Standa
rd.html). gnu.org.
57. "UVOX Universal Voxel Translator - Man Page" (https://web.archive.org/web/2016050820203
8/http://tox.land/uvox/man.html). tox.land. Archived from the original (http://tox.land/uvox/man.
html) on 2016-05-08. Retrieved 2015-06-29.
58. "RAW Format v2.0 - Google Sheets" (https://docs.google.com/spreadsheet/ccc?key=0AgQ2M
OkAZTFHdHJraTVTOEpmNEIwTVlKd0dHVi1ULUE#gid=0). google.com.
59. "Using Binary Delta Compression (BDC) Technology to Update Windows Operating Systems"
(http://www.microsoft.com/en-us/download/details.aspx?id=1562). Microsoft. 10 June 2005.
Retrieved 15 March 2015.
60. Deutsch, L. Peter (May 1996). "Member header and trailer" (https://datatracker.ietf.org/doc/ht
ml/rfc1952#page-6). GZIP file format specification version 4.3 (https://datatracker.ietf.org/doc/
html/rfc1952). p. 6. doi:10.17487/RFC1952 (https://doi.org/10.17487%2FRFC1952). RFC
1952 (https://datatracker.ietf.org/doc/html/rfc1952). Retrieved 2018-10-29.
61. Collet, Yann (19 November 2021). "LZ4 Frame format" (https://github.com/lz4/lz4/blob/dev/do
c/lz4_Frame_format.md). github.com.
62. Collet, Yann (19 November 2021). "LZ4 Block Format" (https://github.com/lz4/lz4/blob/dev/do
c/lz4_Block_format.md). github.com.
63. "WOFF 1" (https://www.w3.org/TR/2012/REC-WOFF-20121213/). w3.org. 13 December 2012.
Retrieved 18 January 2024.
64. "WOFF 2" (https://www.w3.org/TR/WOFF2/). w3.org. 13 December 2012. Retrieved
18 January 2024.
65. "Extensible Markup Language (XML) 1.0 (Fifth Edition)" (https://www.w3.org/TR/xml/#sec-gue
ssing-no-ext-info).
66. "WebAssembly/design" (https://github.com/WebAssembly/design/blob/master/BinaryEncodin
g.md#high-level-structure). GitHub. Retrieved 2016-11-01.
67. "Lepton image compression: saving 22% losslessly from images at 15MB/s" (https://blogs.dro
pbox.com/tech/2016/07/lepton-image-compression-saving-22-losslessly-from-images-at-15mb
s/). Dropbox.
68. "How to Extract an uImage" (https://web.archive.org/web/20170225051131/http://buffalo.nas-c
entral.org/wiki/How_to_Extract_an_uImage). Archived from the original (http://buffalo.nas-cent
ral.org/wiki/How_to_Extract_an_uImage) on 2017-02-25. Retrieved 2017-02-24.
69. "An introduction to MPEG-TS" (https://tsduck.io/download/docs/mpegts-introduction.pdf)
(PDF).
70. "lzfse/lzfse" (https://github.com/lzfse/lzfse). GitHub. Retrieved 2018-10-16.
71. "ROBLOX File Format" (https://www.classy-studios.com/Downloads/RobloxFileSpec.pdf)
(PDF). www.classy-studios.com. Retrieved 5 September 2023.
72. Laurie, Dirk (2013). "Lua 5.2 Bytecode and Virtual Machine" (http://files.catwell.info/misc/mirro
r/lua-5.2-bytecode-vm-dirk-laurie/lua52vm.html).
73. "Mac OS X - ForensicsWiki" (https://www.forensicswiki.org/wiki/Mac_OS_X#Burn_Folder).
www.forensicswiki.org. Retrieved 2018-09-22.
74. "About URL Security Zones (Windows)" (https://technet.microsoft.com/en-us/windows/ms5371
83(v=vs.60)). learn.microsoft.com. 15 August 2017. Retrieved 18 January 2024.
75. "libyal/libfsntfs" (https://github.com/libyal/libfsntfs/blob/master/documentation/New%20Technol
ogies%20File%20System%20(NTFS).asciidoc). GitHub. Retrieved 2018-09-22.
76. "gnupg - Is it a coincidence that the first 4 bytes of a PGP/GPG file are ellipsis, smile, female
sign and a heart? - Information Security Stack Exchange)" (https://security.stackexchange.co
m/a/144555/12109). security.stackexchange.com. Retrieved 2020-06-05.
77. Collet, Yann; Kucherawy, Murray (October 2018). "Zstandard Frames" (https://datatracker.ietf.
org/doc/html/rfc8478#section-3.1.1). Zstandard Compression and the application/zstd Media
Type (https://datatracker.ietf.org/doc/html/rfc8478). sec. 3.1.1. doi:10.17487/RFC8478 (https://
doi.org/10.17487%2FRFC8478). RFC 8478 (https://datatracker.ietf.org/doc/html/rfc8478).
Retrieved 2018-10-29.
78. "Magic numbering scheme (zstd project issue tracker)" (https://github.com/facebook/zstd/issu
es/768). GitHub. Retrieved 2018-10-29.
79. "RS File Extension" (https://filext.com/file-extension/RS). filext.com. Retrieved 2020-09-18.
80. "Quickzip.org (WebArchive)" (https://web.archive.org/web/20050403233040/http://www.quickz
ip.org/help/). Archived from the original (http://www.quickzip.org/help/) on 2005-04-03.
Retrieved 2020-09-18.
81. "DCR format - reverseShockwave" (https://sites.google.com/site/reverseshockwave/home/dcr-
format).
82. "Shockwave (Director)" (https://web.archive.org/web/20200211184445/http://fileformats.archiv
eteam.org/wiki/Shockwave_(Director)). fileformats.archiveteam.org. Archived from the original
(http://fileformats.archiveteam.org/wiki/Shockwave_(Director)) on 11 February 2020.
Retrieved 15 January 2022.
83. "Projector EXE to Shockwave DCR" (https://docs.google.com/presentation/d/1pc-f2b4uB0qTF
svQ9XayQt3NYd6ARClPSS8ikOLtzbU/htmlpresent).
84. "Dir format - reverseShockwave" (https://sites.google.com/site/reverseshockwave/home/dir-for
mat).
85. "Virtual Hard Disk Image Format Specification" (https://download.microsoft.com/download/f/f/
e/ffef50a5-07dd-4cf8-aaa3-442c0673a029/Virtual%20Hard%20Disk%20Format%20Spec_10_
18_06.doc).
86. "Draco Bitstream Specification" (https://google.github.io/draco/spec/). google.github.io.
Archived (https://web.archive.org/web/20210118162812/https://google.github.io/draco/spec/)
from the original on 2021-01-18. Retrieved 2021-01-18.
87. "A GUIDE TO THE CODE FORM FM 92-IX Ext. GRIB" (https://web.archive.org/web/2021050
2163758/https://www.wmo.int/pages/prog/www/WDM/Guides/Guide-binary-2.html). Archived
from the original (https://www.wmo.int/pages/prog/www/WDM/Guides/Guide-binary-2.html) on
2021-05-02. Retrieved 2021-05-02.
88. "The mystery of the blend" (https://web.archive.org/web/20150418144220/http://www.atmind.n
l/blender/mystery_ot_blend.html). 2015-04-18. Archived from the original (https://www.atmind.
nl/blender/mystery_ot_blend.html) on 2015-04-18. Retrieved 2021-05-07.
89. "GitHub - JPEG/JPEG XL Reference Software" (https://github.com/libjxl/libjxl/blob/c98f133f3f5
e456caaa2ba00bc920e923b713abc/lib/jxl/decode.cc#L107-L138). github.com. Retrieved
2021-08-11.
90. "The OpenType Font File" (https://docs.microsoft.com/en-us/typography/opentype/spec/otff).
docs.microsoft.com. 9 December 2021. Retrieved 2022-02-07.
91. "Environment Modules Documentation: modulefile" (https://modules.readthedocs.io/en/latest/
modulefile.html). Retrieved 2021-08-19.
92. GitHub - itkach/slob: Data store for Aard 2 (https://github.com/itkach/slob)
93. "Java Object Serialization Specification: 6 - Object Serialization Stream Protocol" (https://doc
s.oracle.com/javase/7/docs/platform/serialization/spec/protocol.html).
94. "J3k0/OpenPFB" (https://github.com/j3k0/OpenPFB/blob/40d3bb13f672f50beca921aea58168
4d218fd989/OpenPfb.h#L370). GitHub. 25 June 2022.
95. "Noodlesoft – Noodlesoft – Simply Useful Software" (https://www.noodlesoft.com/).
www.noodlesoft.com. Retrieved 2022-07-24.
96. IBM. "Thales Vormetric Data Security Platform" (https://www.ibm.com/support/pages/system/fi
les/inline-files/$FILE/VDS_6.2.0_VAE_Install_API_Guide.pdf) (PDF). IBM.

External links
Gary Kessler's list of file signatures (http://www.garykessler.net/library/file_sigs.html)
Online File Signature Database for Forensic Practitioners, a private compilation free to Law
Enforcement (http://www.filesig.co.uk/ofsdb.html)
Man page for compress, uncompress, and zcat on SCO Open Server (https://web.archive.org/
web/20100502014229/http://docsrv.sco.com:507/en/man/html.C/compress.C.html)
Public Database of File Signatures (https://web.archive.org/web/20120621000045/http://www.f
ilesignatures.net/)
Complete list of magic numbers with sample files (http://asecuritysite.com/forensics/magic)
the original libmagic data files with thousands of entries (https://github.com/file/file/tree/maste
r/magic/Magdir) as used by file (command)

Retrieved from "https://en.wikipedia.org/w/index.php?title=List_of_file_signatures&oldid=1295724959"