[go: up one dir, main page]

0% found this document useful (0 votes)
144 views35 pages

List of File Signatures Table

The document provides a detailed table of various file formats and their corresponding hexadecimal signatures, offsets, and descriptions when interpreted as text in the ISO 8859-1 encoding. It highlights how certain file signatures can be recognized even when viewed as text and includes examples from different types of files such as documents, images, and databases. The table serves as a reference for identifying file types based on their signatures.

Uploaded by

dhiny R
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
144 views35 pages

List of File Signatures Table

The document provides a detailed table of various file formats and their corresponding hexadecimal signatures, offsets, and descriptions when interpreted as text in the ISO 8859-1 encoding. It highlights how certain file signatures can be recognized even when viewed as text and includes examples from different types of files such as documents, images, and databases. The table serves as a reference for identifying file types based on their signatures.

Uploaded by

dhiny R
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 35

Many file formats are not intended to be read as text.

If such a file is accidentally viewed


as a text file, its contents will be unintelligible. However, some file signatures can be
recognizable when interpreted as text. In the table below, the column "ISO 8859-1"
shows how the file signature appears when interpreted as text in the common ISO 8859-
1 encoding, with unprintable characters represented as the control code abbreviation
or symbol, or codepage 1252 character where available, or a box otherwise. In some
cases the space character is shown as ␠.

Hex signat Offse Extensi


ISO 8859-1 Description
ure t on

Script or data to be passed


23 21 #! 0 to the program following
the shebang (#!)[1]

02 00 5a 57
52 54 00 00 ␂␀ZWRT␀␀␀␀␀␀ Claris Works word
0 cwk
00 00 00 00 ␀␀␀␀ processing doc
00 00 00 00

00 00 02 00
06 04 06 00 ␀␀␂␀␆␄␆␀␈␀␀␀ Lotus 1-2-3 spreadsheet (v1)
0 wk1
08 00 00 00 ␀␀ file
00 00

00 00 1A 00
Lotus 1-2-3 spreadsheet (v3)
00 10 04 00 ␀␀␚␀␀␊␄␀␀␀␀␀ 0 wk3
file
00 00 00 00

00 00 1A 00
wk4 Lotus 1-2-3 spreadsheet (v4,
02 10 04 00 ␀␀␚␀␂␊␄␀␀␀␀␀ 0
wk5 v5) file
00 00 00 00

00 00 1A 00 Lotus 1-2-3 spreadsheet (v9)


␀␀␚␀␅␊␄ 0 123
05 10 04 file

00 00 03 F3 ␀␀␃ó 0 Amiga Hunk executable file

00 00 49 49
58 50 ␀␀IIXPR
0 qxd Quark Express document
52 (little- ␀␀MMXPR
endian)
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

00 00 4D 4D
58 50
52 (big-
endian)

Password Gorilla Password


50 57 53 33 PWS3 0 psafe3
Database

D4 C3 B2
A1 (little- Ôò¡ 0 pcap Libpcap File Format[2]
endian)

A1 B2 C3
D4 (big- ¡²ÃÔ 0 pcap Libpcap File Format[2]
endian)

4D 3C B2
Libpcap File Format
A1 (little- M<²¡ 0 pcap
(nanosecond-resolution)[2]
endian)

A1 B2 3C
Libpcap File Format
4D (big- ¡²<M 0 pcap
(nanosecond-resolution)[2]
endian)

PCAP Next Generation


0A 0D 0D 0A ␊␍␍␊ 0 pcapng
Dump File Format[3]

RedHat Package Manager


ED AB EE DB í«îÛ 0 rpm
(RPM) package[4]

53 51 4C 69
sqlitedb
74 65 20 66
SQLite format 3␀ 0 sqlite SQLite Database[5]
6F 72 6D 61
db
74 20 33 00

Amazon Kindle Update


53 50 30 31 SP01 0 bin
Package[6]
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

internal WAD (main


49 57 41 44 IWAD 0 wad
resource file of Doom)[7]

IBM Storyboard bitmap file


PIC Windows Program
PIF Information File
00 ␀ 0
SEA Mac Stuffit Self-Extracting
YTR Archive
IRIS OCR data file

00 00 00 00
00 00 00 00
␀␀␀␀␀␀␀␀
00 00 00 00 PalmPilot Database/Docum
␀␀␀␀␀␀␀␀ 11 PDB
00 00 00 00 ent File
␀␀␀␀␀␀␀␀
00 00 00 00
00 00 00 00

Palm Desktop Calendar


BE BA FE CA ¾ºþÊ 0 DBA
Archive

00 01 42 44 ␀␁BD 0 DBA Palm Desktop To Do Archive

Palm Desktop Calendar


00 01 44 54 ␀␁DT 0 TDA
Archive

54 44 46 24 TDF$ 0 TDF$ Telegram Desktop File

Telegram Desktop Encrypted


54 44 45 46 TDEF 0 TDEF
File

Palm Desktop Data File


00 01 00 00 ␀␁␀␀ 0
(Access format)

Computer icon encoded


00 00 01 00 ␀␀␁␀ 0 ico
in ICO file format[8]

69 63 6e 73 icns 0 icns Apple Icon Image format


Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

3rd Generation Partnership


66 74 79 70 3gp
ftyp3g 4 Project 3GPP and 3GPP2 mu
33 67 3g2
ltimedia files

66 74 79 70
68 65 69 High Efficiency Image
ftypheic 4 heic
6366 74 79 Container (HEIC)
70 6d

compressed file
z
1F 9D ␟□ 0 (often tar zip) using Lempel-
tar.z
Ziv-Welch algorithm

z Compressed file (often tar


1F A0 ␟⍽ 0
tar.z zip) using LZH algorithm

Lempel Ziv Huffman archive


2D 6C 68 30
-lh0- 2 lzh file Method 0 (No
2D
compression)

Lempel Ziv Huffman archive


2D 6C 68 35
-lh5- 2 lzh file Method 5 (8 KiB sliding
2D
window)

42 41 43 4B
AmiBack Amiga Backup dat
4D 49 4B 45 BACKMIKEDISK 0 bac
a file
44 49 53 4B

AmiBack Amiga Backup inde


49 4E 44 58 INDX 0 idx
x file

62 70 6C 69
bplist 0 plist Binary Property List file
73 74

Compressed file
42 5A 68 BZh 0 bz2
using Bzip2 algorithm
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

47 49 46 38
Image file encoded in
37 61 GIF87a
0 gif the Graphics Interchange
47 49 46 38 GIF89a
Format (GIF)[9]
39 61

49 49 2A
tif Tagged Image File
00 (little- II*␀ 0
tiff Format (TIFF)[10]
endian)

4D 4D 00
tif Tagged Image File
2A (big- MM␀* 0
tiff Format (TIFF)[10]
endian)

49 49 2B tif
00 (little- II+␀ 0 BigTIFF[11]
endian) tiff

4D 4D 00 tif
2B (big- MM␀+ 0 BigTIFF[11]
endian) tiff

Canon RAW Format Version


49 49 2A 00
2[12]
10 00 00 00 II*␀␐␀␀␀CR 0 cr2
Canon's RAW format is
43 52
based on TIFF.[13]

66 74 79 70
63 72 78 ftypcrx 0 cr3
43 52

80 2A 5F D7 €*_× 0 cin Kodak Cineon image

Compressed file using Rob


52 4E 43 01 RNC␁ Northen Compression
0
52 4E 43 02 RNC␂ (version 1 and 2)
algorithm[14]

4E 55 52 55 NURUIMG nui nuru ASCII/ANSI image and


0
49 4D 47 NURUPAL nup palette files[15]
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

4E 55 52 55
50 41 4C

53 44 50
58 (big-
SDPX 0 dpx SMPTE DPX image
endian form
at)

58 50 44
53 (little-
XPDS 0 dpx SMPTE DPX image
endian form
at)

76 2F 31 01 v/1␁ 0 exr OpenEXR image

Better Portable
42 50 47 FB BPGû 0 bpg
Graphics format[16]

jpg JPEG raw or in


FF D8 FF DB ÿØÿÛ 0
jpeg the JFIF or Exif file format[17]

FF D8 FF E0
jpg JPEG raw or in
00 10 4A 46 ÿØÿà␀␐JFIF␀␁ 0
jpeg the JFIF or Exif file format[17]
49 46 00 01

jpg JPEG raw or in


FF D8 FF EE ÿØÿî 0
jpeg the JFIF or Exif file format[17]

FF D8 FF
E1 ?? ?? 45 jpg JPEG raw or in
ÿØÿá??Exif␀␀ 0
78 jpeg the JFIF or Exif file format[17]
69 66 00 00

JPEG raw or in
FF D8 FF E0 ÿØÿà 0 jpg
the JFIF or Exif file format[17]

00 00 00 0C jp2
6A 50 20 20 ␀␀␀␌jP␠␠␍␊‡␊ 0 j2k JPEG 2000 format[18]
0D 0A 87 0A jpf
jpm
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

jpg2
j2c
jpc
jpx
mj2

jp2
j2k
jpf
jpm
FF 4F FF 51 ÿOÿQ 0 jpg2 JPEG 2000 format[18]
j2c
jpc
jpx
mj2

QOI - The “Quite OK Image


71 6f 69 66 qoif 0 qoi
Format”[19]

46 4F 52 ilbm
4D ?? ?? ?? ? 0 lbm IFF Interleaved Bitmap
FORM????ILBM
? any ibm Image
49 4C 42 4D iff

8svx
46 4F 52
8sv
4D ?? ?? ?? ? 0
FORM????8SVX svx IFF 8-Bit Sampled Voice
? any
snd
38 53 56 58
iff

46 4F 52
4D ?? ?? ?? ? 0 acbm
FORM????ACBM Amiga Contiguous Bitmap
? any iff
41 43 42 4D

46 4F 52 0 anbm
FORM????ANBM IFF Animated Bitmap
4D ?? ?? ?? ? any iff
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

?
41 4E 42 4D

46 4F 52
4D ?? ?? ?? ? 0 anim
FORM????ANIM IFF CEL Animation
? any iff
41 4E 49 4D

46 4F 52
faxx
4D ?? ?? ?? ? 0
FORM????FAXX fax IFF Facsimile Image
? any
iff
46 41 58 58

46 4F 52
4D ?? ?? ?? ? 0 ftxt
FORM????FTXT IFF Formatted Text
? any iff
46 54 58 54

46 4F 52 smus
4D ?? ?? ?? ? 0 smu
FORM????SMUS IFF Simple Musical Score
? any mus
53 4D 55 53 iff

46 4F 52
cmus
4D ?? ?? ?? ? 0
FORM????CMUS mus IFF Musical Score
? any
iff
43 4D 55 53

46 4F 52
yuvn
4D ?? ?? ?? ? 0
FORM????YUVN yuv IFF YUV Image
? any
iff
59 55 56 4E

46 4F 52
4D ?? ?? ?? ? 0
FORM????FANT iff Amiga Fantavision Movie
? any
46 41 4E 54
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

aiff
46 4F 52
aif
4D ?? ?? ?? ? 0 Audio Interchange File
FORM????AIFF aifc
? any Format
snd
41 49 46 46
iff

4C 5A 49 50 LZIP 0 lz lzip compressed file[20]

30 37 30 37
070707 0 cpio cpio archive file[21]
30 37

exe
dll
mui
sys
scr
cpl
DOS MZ executable and its
ocx
4D 5A MZ 0 descendants
ax
(including NE and PE)
iec
ime
rs
tsp
fon
efi

53 4D 53 4E
SMSNF200 0 ssp SmartSniff Packets File [22]
46 32 30 30

DOS ZM executable and its


5A 4D ZM 0 exe
descendants (rare)

zip
50 4B 03 04 aar
50 4B 05 PK␃␄ apk zip file format and formats
06 (empty PK␅␆ 0 docx based on it, such
archive) PK␇␈ epub as EPUB, JAR, ODF, OOXML
50 4B 07 ipa
jar
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

08 (spanned kmz
archive) maff
msix
odp
ods
odt
pk3
pk4
pptx
usdz
vsdx
xlsx
xpi

whl

52 61 72 21 Roshal ARchive compressed


Rar!␚␇␀ 0 rar
1A 07 00 archive v1.50 onwards[23]

52 61 72 21 Roshal ARchive compressed


Rar!␚␇␁␀ 0 rar
1A 07 01 00 archive v5.00 onwards[24]

none,
.axf, .bin,
.elf, .o, Executable and Linkable
7F 45 4C 46 ␡ELF 0
.out, .prx, Format[25]
.puff, .ko,
.mod, .so

Image encoded in
89 50 4E 47
‰PNG␍␊␚␊ 0 png the Portable Network
0D 0A 1A 0A
Graphics format[26]

Data stored in version 4 of


hdf4
0E 03 13 01 ␅␃␓␁ 0 the Hierarchical Data
h4
Format.
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

0, 512, Data stored in version 5 of


89 48 44 46 hdf5
‰HDF␍␊␚␊ 1024, the Hierarchical Data
0D 0A 1A 0A h5
2048, ... Format.

CP/M 3 and higher with


C9 É 0 com
overlays[27]

Java class file, Mach-O Fat


CA FE BA BE Êþº¾ 0 class
Binary

UTF-8 byte order mark,


txt
EF BB BF  0 commonly seen in text
others
files.[28][29][30]

UTF-16LE byte order mark,


txt
FF FE ÿþ 0 commonly seen in text
others
files.[28][29][30]

UTF-16BE byte order mark,


txt
FE FF þÿ 0 commonly seen in text
others
files.[28][29][30]

txt UTF-32LE byte order mark


FF FE 00 00 ÿþ␀␀ 0
others for text[28][30]

txt UTF-32BE byte order mark


00 00 FE FF ␀␀þÿ 0
others for text[28][30]

2B 2F 76 38 +/v8
2B 2F 76 39 +/v9 UTF-7 byte order mark for
0
2B 2F 76 2B +/v+ text[31][30]
2B 2F 76 2F +/v/

txt SCSU byte order mark for


0E FE FF ␎þÿ 0
others text[31][30]

UTF-EBCDIC byte order


DD 73 66 73 Ýsfs 0
mark for text[31][30]
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

0
FE ED FA CE þíúÎ Mach-O binary (32-bit)
0x1000

0
FE ED FA CF þíúÏ Mach-O binary (64-bit)
0x1000

FE ED FE ED þíþí 0 JKS Javakey Store[32]

Mach-O binary (reverse byte


CE FA ED FE Îúíþ 0
ordering scheme, 32-bit)[33]

Mach-O binary (reverse byte


CF FA ED FE Ïúíþ 0
ordering scheme, 64-bit)[33]

25 21 50 53 %!PS 0 ps PostScript document

25 21 50 53
2D 41 64 6F
62 65 2D 33 %!PS-Adobe-3.0 eps Encapsulated PostScript file
0
2E 30 20 45 ESPF-3.0 epsf version 3.0[34]
50 53 46 2D
33 2E 30

25 21 50 53
2D 41 64 6F
62 65 2D 33 %!PS-Adobe-3.1 eps Encapsulated PostScript file
0
2E 31 20 45 ESPF-3.0 epsf version 3.1[35]
50 53 46 2D
33 2E 30

49 54 53 46
03 00 00 00 ITSF␃␀␀␀`␀␀␀ 0 chm MS Windows HtmlHelp Data
60 00 00 00

3F 5F ?_ 0 hlp Windows 3.x/95/98 Help file

25 50 44 46
%PDF- 0 pdf PDF document[36]
2D
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

30 26 B2 75
asf
8E 66 CF 11 Advanced Systems
0&²uŽfÏ␑¦Ù␀ª␀bÎl 0 wma
A6 D9 00 AA Format[37]
wmv
00 62 CE 6C

System Deployment Image,


24 53 44 49
$SDI0001 0 a disk image format used
30 30 30 31
by Microsoft

ogg
Ogg, an open source media
4F 67 67 53 OggS 0 oga
container format
ogv

Photoshop Document
38 42 50 53 8BPS 0 psd file, Adobe Photoshop's
native file format

52 49 46
46 ?? ?? ?? ? Waveform Audio File
RIFF????WAVE 0 wav
? Format[38]
57 41 56 45

52 49 46
46 ?? ?? ?? ? Audio Video Interleave video
RIFF????AVI␠ 0 avi
? format[39]
41 56 49 20

MPEG-1 Layer 3 file without


FF FB ÿû
an ID3 tag or with an ID3v1
FF F3 ÿó 0 mp3
tag (which is appended at
FF F2 ÿò
the end of the file)

MP3 file with an ID3v2


49 44 33 ID3 0 mp3
container

BMP file, a bitmap format


bmp
42 4D BM 0 used mostly in
dib
the Windows world
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

0x8001
43 44 30 30 ISO9660 CD/DVD image
CD001 0x8801 iso
31 file[40]
0x9001

43 44 30 30 0x5EAC
CD001 cdi CD-i CD image file
31 9

6D 61 69 6E Nintendo Game &


main.bs 0 mgw
2E 62 73 Watch image file

Nintendo Entertainment
4E 45 53 NES 0 nes
System image file

A0 32 41 A0 0x165A Commodore 64 1541 disk


2A d64
A0 A0 4 image (D64 format)

47 53 52 2D Commodore 64 1541 disk


GCR-1541 0 g64
31 35 34 31 image (G64 format)

A0 33 44 A0 0x6181 Commodore 64 1581 disk


3D d81
A0 9 image (D81 format)

43 36 34 20
74 61 70 65
C64 tape image
20 69 6D 61 0 t64 Commodore 64 tape image
file
67 65 20 66
69 6C 65

43 36 34 20
43 41 52 54 C64 Commodore 64 cartridge
0 crt
52 49 44 47 CARTRIDGE␠␠␠ image
45 20 20 20

53 49 4D 50
4C 45 20 20 SIMPLE␠␠
3D 20 20 20 =␠␠␠␠␠␠␠ Flexible Image Transport
0 fits
20 20 20 20 ␠␠␠␠␠␠␠␠ System (FITS)[41]
20 20 20 20 ␠␠␠␠␠T
20 20 20 20
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

20 20 20 20
20 54

Free Lossless Audio


66 4C 61 43 fLaC 0 flac
Codec[42]

mid
4D 54 68 64 MThd 0 MIDI sound file[43]
midi

Compound File Binary


Format, a container format
defined by Microsoft COM. It
can contain the equivalent
doc
of files and directories. It is
xls
D0 CF 11 E0 used by Windows
ÐÏ␑ࡱ␚á 0 ppt
A1 B1 1A E1 Installer and for documents
msi
in older versions
msg
of Microsoft Office.[44] It can
be used by other programs
as well that rely on the COM
and OLE API's.

64 65 78 0A
dex␊035␀ 0 dex Dalvik Executable
30 33 35 00

4B 44 4D KDM 0 vmdk VMDK files[45][46]

23 20 44 69
73 6B 20 44 VMware 4 Virtual Disk
# Disk Descripto 0 vmdk
65 73 63 72 description file (split disk)
69 70 74 6F

Google
43 72 32 34 Cr24 0 crx Chrome extension[47] or
packaged app[48]

41 47 44 33 AGD3 0 fh8 FreeHand 8 document[49][50]


Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

05 07 00 00
42 4F 42 4F
␅␇␀␀BOBO
05 07 00 00
␅␇␀␀␀␀␀␀ 0 cwk AppleWorks 5 document
00 00 00 00
00 00 00 00 ␀␀␀␀␀␁
00 01

06 07 E1 00
42 4F 42 4F
␆␇á␀BOBO
06 07 E1 00
␆␇á␀␀␀␀␀ 0 cwk AppleWorks 6 document
00 00 00 00
00 00 00 00 ␀␀␀␀␀␁
00 01

45 52 02 00
ER␂␀␀␀ 0 toast Roxio Toast disc image file
00 00

8B 45 52 02
‹ER␂␀␀␀ 0 toast Roxio Toast disc image file
00 00 00

end–
6B 6F 6C 79 koly dmg Apple Disk Image file
512

78 61 72 21 xar! 0 xar eXtensible ARchive format[51]

Windows Files And Settings


Transfer Repository[52] See
50 4D 4F 43
PMOCCMOC 0 dat also USMT 3.0 (Win
43 4D 4F 43
XP)[53] and USMT 4.0 (Win
7)[54] User Guides

Nintendo Entertainment
4E 45 53 1A NES␚ 0 nes
System ROM file[55]

75 73 74 61
72 00 30 30 ustar␀00
257 tar tar archive[56]
75 73 74 61 ustar␠␠␀
72 20 20 00
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

OAR file archive format,


4F 41 52 ?? OAR? 0 oar where ?? is the format
version.

Open source portable voxel


74 6F 78 33 tox3 0 tox
file[57]

4D 4C 56 49 MLVI 0 MLV Magic Lantern Video file[58]

44 43 4D 01
DCM␁PA30 Windows Update Binary
50 41 33 30 0
PA30 Delta Compression file[59]
50 41 33 30

37 7A BC AF
7z¼¯'␜ 0 7z 7-Zip File Format
27 1C

gz
1F 8B ␟‹ 0 GZIP compressed file[60]
tar.gz

FD 37 7A 58 xz XZ compression utility
ý7zXZ␀ 0
5A 00 tar.xz using LZMA2 compression

LZ4 Frame Format[61]


Remark: LZ4 block format
04 22 4D 18 ␄"M␘ 0 lz4
does not offer any magic
bytes.[62]

4D 53 43 46 MSCF 0 cab Microsoft Cabinet file

Microsoft compressed file


in Quantum format, used
prior to Windows XP. File can
be decompressed using
53 5A 44 44 Extract.exe or Expand.exe
SZDDˆð'3 0 ??_
88 F0 27 33 distributed with earlier
versions of Windows. After
compression, the last
character of the original
filename extension is
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

replaced with
an underscore, e.g.
‘Setup.exe’ becomes
‘Setup.ex_’.

46 4C 49 46 FLIF 0 flif Free Lossless Image Format

mkv
mka
Matroska media container,
1A 45 DF A3 ␚Eߣ 0 mks
including WebM
mk3d
webm

"SEAN : Session Analysis"


Training file. Also used in
compatible software
4D 49 4C 20 MIL␠ 0 stg "Rpw : Rowperfect for
Windows" and "RP3W :
ROWPERFECT3 for
Windows".

DjVu document
41 54 26 54
The following byte is
46 4F 52 4D AT&TFORM????D djvu
0 either 55 (U) for single-page
?? ?? ?? ?? JV djv
or 4D (M) for multi-page
44 4A 56
documents.

DER encoded X.509


30 82 0‚ 0 der
certificate

2D 2D 2D 2D
2D 42 45 47
49 4E 20 43
-----BEGIN crt PEM encoded
45 52 54 49 0
CERTIFICATE----- pem X.509 certificate
46 49 43 41
54 45 2D 2D
2D 2D 2D
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

2D 2D 2D 2D
2D 42 45 47
49 4E 20 43
45 52 54 49 -----BEGIN PEM encoded
csr
46 49 43 41 CERTIFICATE 0 X.509 Certificate Signing
pem
54 45 20 52 REQUEST----- Request
45 51 55 45
53 54 2D 2D
2D 2D 2D

2D 2D 2D 2D
2D 42 45 47
49 4E 20 50
-----BEGIN key PEM encoded X.509 PKCS#8
52 49 56 41 0
PRIVATE KEY----- pem private key
54 45 20 4B
45 59 2D 2D
2D 2D 2D

2D 2D 2D 2D
2D 42 45 47
49 4E 20 44
53 41 20 50 -----BEGIN DSA key PEM encoded X.509
0
52 49 56 41 PRIVATE KEY----- pem PKCS#1 DSA private key
54 45 20 4B
45 59 2D 2D
2D 2D 2D

2D 2D 2D 2D
2D 42 45 47
49 4E 20 52
53 41 20 50 -----BEGIN RSA key PEM encoded X.509
0
52 49 56 41 PRIVATE KEY----- pem PKCS#1 RSA private key
54 45 20 4B
45 59 2D 2D
2D 2D 2D

50 75 54 54 PuTTY-User-Key- PuTTY private key file version


0 ppk
59 2D 55 73 File-2: 2
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

65 72 2D 4B
65 79 2D 46
69 6C 65 2D
32 3A

50 75 54 54
59 2D 55 73
65 72 2D 4B PuTTY-User-Key- PuTTY private key file version
0 ppk
65 79 2D 46 File-3: 3
69 6C 65 2D
33 3A

2D 2D 2D 2D
2D 42 45 47
49 4E 20 4F
50 45 4E 53 -----BEGIN
53 48 20 50 OPENSSH 0 OpenSSH private key file
52 49 56 41 PRIVATE KEY-----
54 45 20 4B
45 59 2D 2D
2D 2D 2D

2D 2D 2D 2D
2D 42 45 47
49 4E 20 53 -----BEGIN SSH2
0 pub OpenSSH public key file
53 48 32 20 PUBLIC KEY-----
4B 45 59 2D
2D 2D 2D 2D

44 49 43 4D DICM 128 dcm DICOM Medical File Format

77 4F 46 46 wOFF 0 woff WOFF File Format 1.0[63]

77 4F 46 32 wOF2 0 woff2 WOFF File Format 2.0[64]

0 xml (UTF-
3C 3F 78 6D eXtensible Markup
<?xml␠ after B 8 or other
6C 20 Language[29][65]
OM 8-bit
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

encoding
s)

3C 00 3F 00 0
xml (UTF- eXtensible Markup
78 00 6D 00 <␀?␀x␀m␀l␀␠␀ after B
16LE) Language[29][65]
6C 00 20 OM

00 3C 00 3F 0
xml (UTF- eXtensible Markup
00 78 00 6D ␀<␀?␀x␀m␀l␀␠ after B
16BE) Language[29][65]
00 6C 00 20 OM

3C 00 00 00
3F 00 00 00
<␀␀␀?␀␀␀ 0
78 00 00 00 xml (UTF- eXtensible Markup
x␀␀␀m␀␀␀ after B
6D 00 00 00 32LE) Language[29][65]
l␀␀␀␠␀␀␀ OM
6C 00 00 00
20 00 00 00

00 00 00 3C
00 00 00 3F
␀␀␀<␀␀␀? 0
00 00 00 78 xml (UTF- eXtensible Markup
␀␀␀x␀␀␀m after B
00 00 00 6D 32BE) Language[29][65]
␀␀␀l␀␀␀␠ OM
00 00 00 6C
00 00 00 20

0
4C 6F A7 94 xml eXtensible Markup
Lo§”“@ after B
93 40 (EBCDIC) Language[29][65]
OM

WebAssembly binary
00 61 73 6D ␀asm 0 wasm
format[66]

Lepton compressed JPEG


CF 84 01 Ï„␁ 0 lep
image[67]

43 57 53 CWS 0 swf Adobe Flash .swf

46 57 53 FWS 0 swf Adobe Flash .swf


Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

21 3C 61 72
!<arch>␊ 0 deb linux deb file
63 68 3E 0A

52 49 46 Google WebP image file,


46 ?? ?? ?? ? where ?? ?? ?? ?? is the file
RIFF????WEBP 0 webp
? size. More information
57 45 42 50 on WebP File Header

U-Boot / uImage. Das U-


27 05 19 56 '␅␙V 0 Boot Universal Boot
Loader.[68]

7B 5C 72 74
{\rtf1 0 rtf Rich Text Format
66 31

54 41 50 45 TAPE 0 Microsoft Tape Format

0
0xBC ts
0x178 tsv
MPEG Transport Stream
47 G ... tsa
(MPEG-2 Part 1)[69]
(every mpg
188th mpeg
byte)

m2p MPEG Program Stream


vob (MPEG-1 Part 1 (essentially
00 00 01 BA ␀␀␁º 0
mpg identical) and MPEG-2 Part
mpeg 1)

MPEG-1 video and MPEG-2


mpg
00 00 01 B3 ␀␀␁³ 0 video (MPEG-1 Part 2 and
mpeg
MPEG-2 Part 2)

66 74 79 70 ISO Base Media file (MPEG-


ftypisom 4 mp4
69 73 6F 6D 4)

66 74 79 70
ftypMSNV 4 mp4 MPEG-4 video file
4D 53 4E 56
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

No Compression (no preset


78 01 x␁ 0 zlib
dictionary)

Best speed (no preset


78 5E x^ 0 zlib
dictionary)

Default Compression (no


78 9C xœ 0 zlib
preset dictionary)

Best Compression (no


78 DA xÚ 0 zlib
preset dictionary)

No Compression (with
78 20 x␠ 0 zlib
preset dictionary)

Best speed (with preset


78 7D x} 0 zlib
dictionary)

Default Compression (with


78 BB x» 0 zlib
preset dictionary)

Best Compression (with


78 F9 xù 0 zlib
preset dictionary)

LZFSE - Lempel-Ziv style


data compression algorithm
62 76 78 32 bvx2 0 lzfse
using Finite State Entropy
coding. OSS by Apple.[70]

Apache ORC (Optimized


4F 52 43 ORC 0 orc
Row Columnar) file format

Apache Avro binary file


4F 62 6A 01 Obj␁ 0 avro
format

53 45 51 36 SEQ6 0 rc RCFile columnar file format

3C 72 6F 62
<roblox! 0 rbxl Roblox place file [71]
6C 6F 78 21
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

p25
65 87 78 56 e‡xV 0 PhotoCap Object Templates
obt

55 55 AA AA UUªª 0 pcv PhotoCap Vector

pbt
pdt
pea
peb
pet
78 56 34 xV4 0 PhotoCap Template
pgt
pict
pjt
pkt
pmt

Apache Parquet columnar


50 41 52 31 PAR1 0
file format

Emulator
45 4D 58 32 EMX2 0 ez2
Emaxsynth samples

ez3
45 4D 55 33 EMU3 0 Emulator III synth samples
iso

1B 4C 75 61 ␛Lua 0 luac Lua bytecode[72]

62 6F 6F 6B
00 00 00 00 book␀␀␀␀mark␀ macOS file
0 alias
6D 61 72 6B ␀␀␀ Alias[73] (Symbolic link)
00 00 00 00

5B 5A 6F 6E
65 54 72 61 Microsoft Zone Identifier for
[ZoneTransfer] 0 Identifier
6E 73 66 65 URL Security Zones[74][75]
72 5D
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

52 65 63 65
Email Message var5[citation
69 76 65 64 Received: 0 eml needed]
3A

20 02 01 62
A0 1E AB 07 ␠␂␁b⍽␞«␇␂␀␀␀ 0 tde Tableau Datasource
02 00 00 00

37 48 03 02
00 00 00 00 7H␃␂␀␀␀␀X509K
0 kdb KDB file
58 35 30 39 EY
4B 45 59

85 ?? ?? 03 …??␃ 0 pgp PGP file [76]

28 B5 2F FD (µ/ý 0 zst Zstandard compress[77][78]

52 53 56 4B QuickZip rs compressed
RSVKDATA 0 rs
44 41 54 41 archive[79][80]

3A 29 0A :)␊ 0 sml Smile file

4A 6F 79 21 Joy! 0 Preferred Executable Format

VPK file, used to store game


34 12 AA 55 4␒ªU 0 vpk data for some Source
Engine games

2A 2A 41 43 ACE (compressed file


**ACE** 7 ace
45 2A 2A format)[citation needed]

60 EA `ê 0 arj ARJ

InstallShield CAB Archive


49 53 63 28 ISc( 0 cab
File

Windows 3.1x Compressed


4B 57 41 4A KWAJ 0 ??_
File
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

Windows 9x Compressed
53 5A 44 44 SZDD 0 ??_
File

5A 4F 4F ZOO 0 zoo Zoo (file format)

50 31 0A P1␊ 0 pbm Portable bitmap ASCII

50 34 0A P4␊ 0 pbm Portable bitmap binary

50 32 0A P2␊ 0 pgm Portable Gray Map ASCII

50 35 0A P5␊ 0 pgm Portable Gray Map binary

50 33 0A P3␊ 0 ppm Portable Pixmap ASCII

50 36 0A P6␊ 0 ppm Portable Pixmap binary

D7 CD C6 9A ×ÍÆš 0 wmf Windows Metafile

67 69 6D 70
gimp xcf 0 xcf XCF (file format)
20 78 63 66

2F 2A 20 58
50 4D 20 2A /* XPM */ 0 xpm X PixMap
2F

41 46 46 AFF 0 aff Advanced Forensics Format

EnCase EWF version 2


45 56 46 32 EVF2 0 Ex01
format

EnCase EWF version 1


45 56 46 EVF 0 e01
format

51 46 49 QFI 0 qcow qcow file format

52 49 46
46 ?? ?? ?? ?
RIFF????ACON 0 ani Animated cursor
?
41 43 4F 4E
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

52 49 46
46 ?? ?? ?? ?
RIFF????CDDA 0 cda .cda file
?
43 44 44 41

52 49 46
46 ?? ?? ?? ? Qualcomm PureVoice file
RIFF????QLCM 0 qcp
? format
51 4C 43 4D

52 49 46
58 ?? ?? ?? ?
?
RIFX????FGDM 0 dcr Adobe Shockwave[81][82][83]
46 47 44
4D (big-
endian)

58 46 49
52 ?? ?? ?? ?
?
XFIR????MDGF 0 dcr Adobe Shockwave[81][82][83]
4D 44 47
46 (little-
endian)

52 49 46
58 ?? ?? ?? ?
dir
? Macromedia Director file
RIFX????MV93 0 dxr
4D 56 39 format[84][82][83]
drx
33 (big-
endian)

58 46 49
52 ?? ?? ?? ?
dir
? Macromedia Director file
XFIR????39VM 0 dxr
33 39 56 format[84][82][83]
drx
4D (little-
endian)
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

46 4C 56 FLV 0 flv Flash Video file

3C 3C 3C 20
4F 72 61 63
6C 65 20 56
<<< Orac
4D 20 56 69
le VM Vi
72 74 75 61 VirtualBox Virtual Hard Disk
rtualBox 0 vdi
6C 42 6F 78 file format
Disk Im
20 44 69 73
age >>>
6B 20 49 6D
61 67 65 20
3E 3E 3E

63 6F 6E 65 Windows Virtual PC Virtual


conectix 0 vhd
63 74 69 78 Hard Disk file format[85]

Windows Virtual
76 68 64 78
vhdxfile 0 vhdx PC Windows 8 Virtual Hard
66 69 6C 65
Disk file format

49 73 5A 21 IsZ! 0 isz Compressed ISO image

Direct Access
44 41 41 DAA 0 daa
Archive PowerISO

Windows Event Viewer file


4C 66 4C 65 LfLe 0 evt
format

45 6C 66 46 Windows Event Viewer XML


ElfFile 0 evtx
69 6C 65 file format

Windows customized
73 64 62 66 sdbf 8 sdb
database

Windows 3.x Program


50 4D 43 43 PMCC 0 grp Manager Program Group file
format

4B 43 4D 53 KCMS 0 icm ICC profile


Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

dat
72 65 67 66 regf 0 Windows Registry file
hiv

Microsoft Outlook Personal


21 42 44 4E !BDN 0 pst
Storage Table file

44 52 41 43 3D model compressed with


DRACO 0 drc
4F Google Draco[86]

Gridded data (commonly


weather observations or
grib
47 52 49 42 GRIB 0 forecasts) in
grib2
the WMO GRIB or GRIB2 for
mat[87]

42 4C 45 4E
BLENDER 0 blend Blender File Format[88]
44 45 52

00 00 00 0C
Image encoded in the JPEG
4A 58 4C 20 ␀␀␀␌JXL␠␍␊‡␊ 0 jxl
XL format[89]
0D 0A 87 0A

Image encoded in the JPEG


FF 0A ÿ␊ 0 jxl
XL format[89]

ttf
00 01 00 00
␀␁␀␀␀ 0 tte TrueType font
00
dfont

4F 54 54 4F OTTO 0 otf OpenType font[90]

23 25 4D 6F Modulefile for Environment


#%Module 0
64 75 6C 65 Modules[91]

4D 53 57 49
wim
4D 00 00 00 MSWIM␀␀␀Ð␀␀␀ Windows Imaging
0 swm
D0 00 00 00 ␀ Format file
esd
00
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

Slob (sorted list of Object


21 2D 31 53 storages) is a read-only,
!-1SLOB␟ 0 slob
4C 4F 42 1F compressed data store with
dictionary-like interface[92]

AC ED ’ 0 Serialized Java Data[93]

43 72 65 61
74 69 76 65
20 56 6F 69 Creative Voice
0 voc Creative Voice file
63 65 20 46 File
69 6C 65 1A
1A 00

au
2E 73 6E 64 .snd 0 Au audio file format
snd

OpenGL Iris Perfomer .PFB


DB 0A CE 00 0
(Performer Fast Binary)[94]

48 5a 4c 52 hazelrule
HZLR 0 Noodlesoft Hazel [95]
00 00 00 18 s

46 4C 68 64 FLhd 0 flp FL Studio Project File

31 30 4C 46 10LF 0 flm FL Studio Mobile Project File

52 4b 4d 43 Vormetric Encryption DPM


RKMC210 0
32 31 30 Version 2.1 Header[96]

00 01 00 00
4D 53 49 53
␀␁␀␀MSISAM
41 4D 20 44 0 mny Microsoft Money file
Database
61 74 61 62
61 73 65

00 01 00 00 ␀␁␀␀Standard Microsoft Access 2007


53 74 61 6E 0 accdb
ACE DB Database
64 61 72 64
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

20 41 43 45
20 44 42

00 01 00 00
53 74 61 6E
␀␁␀␀Standard
64 61 72 64 0 mdb Microsoft Access Database
Jet DB
20 4A 65 74
20 44 42

01 FF 02 04 Micrografx vector graphic


␁ÿ␂␄␃␂ 0 drw
03 02 file

Digital Speech Standard


02 64 73 73 ␂dss 0 dss (Olympus, Grundig, &
Phillips) v2

Digital Speech Standard


03 64 73 73 ␃dss 0 dss (Olympus, Grundig, &
Phillips) v3

03 00 00 00
␃␀␀␀APPR 0 adx Approach index file
41 50 50 52

06 06 ED F5
D8 1D 46 E5 ␆␆íõØ␝Få½1ïçþt·
0 indd Adobe InDesign document
BD 31 EF E7 ␝
FE 74 B7 1D

06 0E 2B 34
02 05 01 01 ␆␎+4␂␅␁␁␍␁␂␁ 0-65535 Material Exchange Format
mxf
0D 01 02 01 ␁␂ (run-in) file
01 02

07 53 4B 46 ␇SKF 0 skf SkinCrafter skin file

07 64 74 32
␇dt2ddtd 0 dtd DesignTools 2D Design file
64 64 74 64

0A 16 6F 72 ␊␖org.bitcoin.pr 0 wallet MultiBit Bitcoin wallet file


67 2E 62 69
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

74 63 6F 69
6E 2E 70 72

0D 44 4F 43 ␍DOC 0 doc DeskMate Document file

0E 4E 65 72
␎NeroISO 0 nri Nero CD Compilation
6F 49 53 4F

0E 57 4B 53 ␎WKS 0 wks DeskMate Worksheet

0F 53 49 42
45 4C 49 55 ␏SIBELIUS 0 sib Sibelius Music - Score file
53

23 20 4D 69
63 72 6F 73
6F 66 74 20
# Microsoft Microsoft Developer Studio
44 65 76 65 0 dsp
Developer Studio project file
6C 6F 70 65
72 20 53 74
75 64 69 6F

Adaptive Multi-Rate ACELP


(Algebraic Code Excited
23 21 41 4D
#!AMR 0 amr Linear Prediction) Codec,
52
commonly audio format
with GSM cell phones.

23 21 53 49 Audio compression format


#!SILK␊ 0 sil
4C 4B 0A developed by Skype

23 3F 52 41
Radiance High Dynamic
44 49 41 4E #?RADIANCE␊ 0 hdr
Range image file
43 45 0A

23 40 7E 5E #@~^ 0 vbe VBScript Encoded script

MikroTik WinBox Connection


0D F0 1D C0 ␍ð�À 0 cdb
Database (Address Book)
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

23 45 58 54 m3u
#EXTM3U 0 Multimedia playlist
4D 33 55 m3u8

M2 Archive, used by game


6D 64 66 00 mdf␀ 0 m
developer M2

Capcom RE Engine game


4B 50 4B 41 KPKA 0 pak
data archives

Capcom MT
41 52 43 ARC 0 arc Framework game data
archives

arc
41 72 43 ArC 0 FreeArc file
cdx

Interleaf PrinterLeaf /
WorldView document
D0 4F 50 53 ÐOPS 0 pl format
(now Broadvision QuickSilve
r)

Single file NIfTI format, used


6E 2B 31 00 n+1 344 nii extensively in biomedical
imaging.

Header file of a .hdr/.img


pair in NIfTI format, used
6E 69 31 00 ni1 344 hdr
extensively in biomedical
imaging.

52 41 46 36 Report Builder file


RAF64 0
34 from Digital Metaphors

Resource file Visionaire 3.x


56 49 53 33 VIS3 0
Engine
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

Health Level Seven (HL7)


4D 53 48 7C MSH|
0 hl7 Standard for electronic data
42 53 48 7C BSH|
exchange [1]

70 77 72 64 SAP Power Monitor (version


pwrdata 0 pwrdata
61 74 61 1.1.0 and higher) data file

1a 08 .. 0 arc ARC archive file

2d 2d 2d 2d
2d 42 45 47
49 4e 20 50
47 50 20 50 -----BEGIN PGP
55 42 4c 49 PUBLIC KEY 0 asc Armored PGP public key
43 20 4b 45 BLOCK-----
49 20 42 4c
4f 43 4b 2d
2d 2d 2d 2d

3a 42 61 73 Windows 3.x - Windows 95


:Base 0 cnt
65 20 Help Contents

52 49 46
46 ?? ?? ?? ? RIFF????VDRM 0 vdr VirtualDub
? 56 44 52 4d

52 59 46
46 ?? ?? ?? ? RIFF????TRID 0 trd TrID
? 54 52 49 44

52 49 46
46 ?? ?? ?? ? RIFF????shw4 0 shw Corel SHOW! 4.0
? 73 68 77 34

52 49 46
46 ?? ?? ?? ? RIFF????shw5 0 shw Corel SHOW! 5.0
? 73 68 77 35
Hex signat Offse Extensi
ISO 8859-1 Description
ure t on

52 49 46
46 ?? ?? ?? ? RIFF????shr5 0 shr Corel SHOW! 5.0 player
? 73 68 72 35

52 49 46
Corel SHOW! 5.0
46 ?? ?? ?? ? RIFF????shb5 0 shb
background
? 73 68 62 35

52 49 46 MacroMind Multimedia
46 ?? ?? ?? ? RIFF????RMMP 0 mmm Movie or Microsoft
? 52 4d 4d 50 Multimedia Movie

41 53 54 4d
ASTM-E57 0 e57 ASTM E57 3D file format
2d 45 35 37

aa aa aa aa ªªªª 0 sys Crowdstrike Channel File

Unreal Engine Compressed


8C 0A 00 Œ.. 0 ucas
Asset Storage file

2D 3D 3D 2D
2D 3D 3D 2D Unreal Engine Table of
-==--==--==--==- 0 utoc
2D 3D 3D 2D Contents file
2D 3D 3D 2D

Commodore 64 binary file


43 36 34 46 P00 (P01, (source:
C64File 0
69 6C 65 00 P02,...) *.P00 format for Power64
emulator)

DuckDB database file


44 55 43 4B DUCK 8 (source:

Source code)

You might also like