List of file signatures: Difference between revisions
No edit summary |
+lz4 streaming format magic bytes |
||
Line 521: | Line 521: | ||
| gz |
| gz |
||
| GZIP |
| GZIP |
||
|- |
|||
| 04 22 4D 18 |
|||
| ."M. |
|||
| 0 |
|||
| lz4 |
|||
| LZ4 Streaming Format<ref>http://mx.gw.com/pipermail/file/2014/001299.html</ref><br/> |
|||
Remark: LZ4 compressed data (file) format does not offer any magic bytes.<ref>http://fastcompression.blogspot.de/2011/05/lz4-explained.html</ref> |
|||
|- |
|- |
||
| 4D 53 43 46 |
| 4D 53 43 46 |
Revision as of 21:14, 22 September 2015
This is a list of file signatures, data used to identify or verify the content of a file. Such signatures are also known as magic numbers.
Many binary file formats are not intended to be read as text. If such a file is accidentally viewed as a text file, its contents will be unintelligible. However, sometimes the file signature can be recognizable when interpreted as text. The column ISO 8859-1 shows how the file signature appears when interpreted as text in the common ISO 8859-1 encoding.
Hex signature | ISO 8859-1 | Offset | File extension | Description |
---|---|---|---|---|
00 | . | 0 | PIC PIF |
IBM Storyboard bitmap file Windows Program Information File |
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |
........ ........ |
11 | PDB | PalmPilot Database/Document File |
BE BA FE CA | ... | 0 | DBA | Palm Desktop Calendar Archive |
00 01 42 44 | ... | 0 | DBA | Palm Desktop To Do Archive |
00 01 44 54 | ... | 0 | TDA | Palm Desktop Calendar Archive |
00 01 00 00 | ... | 0 | ... | Palm Desktop Data File (Access format) |
00 00 01 00 | .... | 0 | ico | Computer icon encoded in ICO file format[1] |
00 00 00 nn 66 74 79 70 33 67 70 |
....ftyp 3gp |
0 | 3GG, 3GP, 3G2 | 3rd Generation Partnership Project 3GPP (nn=0x14)
and 3GPP2 (nn=0x20) multimedia files |
00 00 00 nn 66 74 79 70 33 67 70 35 |
....ftyp 3gp5 |
0 | MP4 | MPEG-4 video files |
1F 9D | .. | 0 | z, tar.z | compressed file (often tar zip) using Lempel-Ziv-Welch algorithm |
1F A0 | .. | 0 | z, tar.z | Compressed file (often tar zip) using LZH algorithm |
42 41 43 4B 4D 49 4B 45 44 49 53 4B | BACKMIKEDISK | 0 | bac | File or tape containing a backup done with AmiBack on an Amiga. It typically is paired with an index file (idx) with the table of contents. |
42 5A 68 | BZh | 0 | bz2 | Compressed file using Bzip2 algorithm |
47 49 46 38 37 61
47 49 46 38 39 61 |
GIF87a
GIF89a |
0 | gif | Image file encoded in the Graphics Interchange Format (GIF)[2] |
49 49 2A 00 (little endian format) or 4D 4D 00 2A (big endian format) |
II*. or MM.* |
0 | tif, tiff | Tagged Image File Format |
49 49 2A 00 10 00 00 00 43 52 | II*.....CR | 0 | cr2 | Canon RAW Format Version 2[3] Canon's RAW format is based on the TIFF file format [4] |
80 2A 5F D7 | .*_. | 0 | cin | Kodak Cineon image |
53 44 50 58 (big endian format) or 58 50 44 53 (little endian format) |
SDPX or XPDS |
0 | dpx | SMPTE DPX image |
76 2F 31 01 | v/1. | 0 | exr | OpenEXR image |
42 50 47 FB | BPGû | 0 | bpg | Better Portable Graphics format[5] |
FF D8 FF E0 or FF D8 FF DB | ÿØÿà | 0 | jpg, jpeg | JPEG |
46 4F 52 4D nn nn nn nn 49 4C 42 4D | FORM....ILBM | 0, any | ilbm, lbm, ibm, iff | IFF Interleaved Bitmap Image |
46 4F 52 4D nn nn nn nn 38 53 56 58 | FORM....8SVX | 0, any | 8svx, 8sv, svx, snd, iff | IFF 8-Bit Sampled Voice |
46 4F 52 4D nn nn nn nn 41 43 42 4D | FORM....ACBM | 0, any | acbm, iff | Amiga Contiguous Bitmap |
46 4F 52 4D nn nn nn nn 41 4E 42 4D | FORM....ANBM | 0, any | anbm, iff | IFF Animated Bitmap |
46 4F 52 4D nn nn nn nn 41 4E 49 4D | FORM....ANIM | 0, any | anim, iff | IFF CEL Animation |
46 4F 52 4D nn nn nn nn 46 41 58 58 | FORM....FAXX | 0, any | faxx, fax, iff | IFF Facsimile Image |
46 4F 52 4D nn nn nn nn 46 54 58 54 | FORM....FTXT | 0, any | ftxt, txt, iff | IFF Formatted Text |
46 4F 52 4D nn nn nn nn 53 4D 55 53 | FORM....SMUS | 0, any | smus, smu, mus, iff | IFF Simple Musical Score |
46 4F 52 4D nn nn nn nn 43 4D 55 53 | FORM....CMUS | 0, any | cmus, mus, iff | IFF Musical Score |
46 4F 52 4D nn nn nn nn 59 55 56 4E | FORM....YUVN | 0, any | yuvn, yuv, iff | IFF YUV Image |
46 4F 52 4D nn nn nn nn 46 41 4E 54 | FORM....FANT | 0, any | iff | Amiga Fantavision Movie |
49 4E 44 58 | INDX | 0 | idx | Index file to a file or tape containing a backup done with AmiBack on an Amiga. |
4D 5A | MZ | 0 | exe | DOS MZ executable file format and its descendants (including NE and PE) |
50 4B 03 04, 50 4B 05 06 (empty archive) or 50 4B 07 08 (spanned archive) | PK.. | 0 | zip, jar, odt, ods, odp, docx, xlsx, pptx, apk | zip file format and formats based on it, such as JAR, ODF, OOXML |
52 61 72 21 1A 07 00 | Rar!... | 0 | rar | RAR archive version 1.50 onwards[6] |
52 61 72 21 1A 07 01 00 | Rar!.... | 0 | rar | RAR archive version 5.0 onwards[7] |
7F 45 4C 46 | .ELF | 0 | Executable and Linkable Format | |
89 50 4E 47 0D 0A 1A 0A | .PNG.... | 0 | png | Image encoded in the Portable Network Graphics format[8] |
CA FE BA BE | Êþº¾ | 0 | class | Java class file, Mach-O Fat Binary |
EF BB BF |  | 0 | UTF-8 encoded Unicode byte order mark, commonly seen in text files. | |
FE ED FA CE | ........ | 0 or typically 0x1000 | Mach-O binary (32-bit) | |
FE ED FA CF | ........ | 0 or typically 0x1000 | Mach-O binary (64-bit) | |
CE FA ED FE | ........ | 0 | Mach-O binary (reverse byte ordering scheme, 32-bit)[9] | |
CF FA ED FE | ........ | 0 | Mach-O binary (reverse byte ordering scheme, 64-bit)[9] | |
FF FE | .. | 0 | Byte-order mark for text file encoded in little-endian 16-bit Unicode Transfer Format | |
FF FE 00 00 | .... | 0 | Byte-order mark for text file encoded in little-endian 32-bit Unicode Transfer Format | |
25 21 50 53 | %!PS | 0 | ps | PostScript document |
25 50 44 46 | 0 | PDF document | ||
30 26 B2 75 8E 66 CF 11
A6 D9 00 AA 00 62 CE 6C |
0&²u.fÏ.
¦Ù.ª.bÎl |
0 | asf, wma, wmv | Advanced Systems Format[10] |
24 53 44 49 30 30 30 31 | $SDI0001 | 0 | System Deployment Image, a disk image format used by Microsoft | |
4F 67 67 53 | OggS | 0 | ogg, oga, ogv | Ogg, an open source media container format |
38 42 50 53 | 8BPS | 0 | psd | Photoshop Document file, Adobe Photoshop's native file format |
46 4F 52 4D nn nn nn nn 41 49 46 46 | FORM....AIFF | 0, any | aiff, aif, aifc, snd, iff | Audio Interchange File Format |
52 49 46 46 nn nn nn nn 57 41 56 45 | RIFF....WAVE | 0 | wav | Waveform Audio File Format |
FF FB | ˙ű | 0 | mp3 | MPEG-1 Layer 3 file without an ID3 tag or with an ID3v1 tag (which's appended at the end of the file) |
49 44 33 | ID3 | 0 | mp3 | MP3 file with an ID3v2 container |
42 4D | BM | 0 | bmp, dib | BMP file, a bitmap format used mostly in the Windows world |
43 44 30 30 31 | CD001 | 0x8001, 0x8801 or 0x9001 | iso | ISO9660 CD/DVD image file[11] |
53 49 4D 50 4C 45 20 20 3D 20 20 20 20 20 20 20 |
SIMPLE = T | 0 | fits | Flexible Image Transport System (FITS)[12] |
66 4C 61 43 | fLaC | 0 | flac | Free Lossless Audio Codec[13] |
4D 54 68 64 | MThd | 0 | mid, midi | MIDI sound file[14] |
D0 CF 11 E0 A1 B1 1A E1 | doc, xls, ppt | Microsoft Office documents[15] | ||
64 65 78 0A 30 33 35 00 | dex 035 |
0 | dex | Dalvik Executable |
4B 44 4D | KDM | 0 | vmdk | VMDK files [16][17] |
43 72 32 34 | Cr24 | 0 | crx | Google Chrome extension[18] or packaged app[19] |
41 47 44 33 | AGD3 | 0 | fh8 | FreeHand 8 document[20][21][22] |
05 07 00 00 42 4F 42 4F 05 07 00 00 00 00 00 00 00 00 00 00 00 01 |
....BOBO............ | 0 | cwk | AppleWorks 5 document |
06 07 E1 00 42 4F 42 4F 06 07 E1 00 00 00 00 00 00 00 00 00 00 01 |
....BOBO............ | 0 | cwk | AppleWorks 6 document |
45 52 02 00 00 00 or 8B 45 52 02 00 00 00 |
ER.... or ãER.... |
0 | toast | Roxio Toast disc image file, also some .dmg-files begin with same bytes |
78 01 73 0D 62 62 60 | x.s.bb` | 0 | dmg | Apple Disk Image file |
78 61 72 21 | xar! | 0 | xar | eXtensible ARchive format[23] |
50 4D 4F 43 43 4D 4F 43 | PMOCCMOC | 0 | dat | Windows Files And Settings Transfer Repository[24] See also USMT 3.0 (Win XP)[25] and USMT 4.0 (Win 7)[26] User Guides |
4E 45 53 1A | NES | 0 | nes | Nintendo Entertainment System ROM file [27] |
75 73 74 61 72 00 30 30 or 75 73 74 61 72 20 20 00 |
ustar.00 or ustar . |
257 | tar | tar archive[28] |
74 6F 78 33 | TOX | 0 | tox | Open source portable voxel file [29] |
4D 4C 56 49 | MLVI | 0 | MLV | Magic Lantern Video file[30] |
44 43 4D 01 50 41 33 30 | DCM PA30 | 0 | Windows Update Binary Delta Compression[31] | |
37 7A BC AF 27 1C | 7z¼¯' | 0 | 7z | 7-Zip File Format |
1F 8B | .. | 0 | gz | GZIP |
04 22 4D 18 | ."M. | 0 | lz4 | LZ4 Streaming Format[32] Remark: LZ4 compressed data (file) format does not offer any magic bytes.[33] |
4D 53 43 46 | MSCF | 0 | cab | Microsoft Cabinet file |
See also
References
- ^ Icons (at MSDN)
- ^ GRAPHICS INTERCHANGE FORMAT(sm) Version 89a
- ^ Computer Knowledge. "File Extension .CR2 Details". filext.com.
- ^ "Inside the Canon RAW format version 2, understanding .CR2 file format and files produced by Canon EOS Digital Camera". free.fr.
- ^ Bellard, Fabrice (2015). "BPG Image format".
- ^ "TechNote.txt: RAR version 4.00 - Technical information". 2010-12-01.
The marker block is actually considered as a fixed byte sequence: 0x52 0x61 0x72 0x21 0x1a 0x07 0x00
{{cite web}}
: Missing or empty|url=
(help) - ^ "RAR 5.0 archive format". Retrieved 2013-05-01.
- ^ "RFC 2083 - PNG (Portable Network Graphics) Specification Version 1.0". ietf.org.
- ^ a b "Mac Developer Library". apple.com.
- ^ "ASF (Advanced Systems Format)".
- ^ Gary C. Kessler (21 October 2012). "File Signatures Table". Retrieved 28 December 2012.
- ^ "Flexible Image Transport System (FITS), Version 3.0 - File type signifiers". 2012-09-26. Retrieved 24 January 2013.
- ^ Josh Coalson. "FLAC — format". Retrieved 4 April 2013.
"fLaC", the FLAC stream marker in ASCII, meaning byte 0 of the stream is 0x66, followed by 0x4C 0x61 0x43
- ^ "File Signature Database: mid File Signatures". filesignatures.net.
- ^ [1]
- ^ "What Files Make Up a Virtual Machine?". vmware.com.
- ^ http://www.vmware.com/app/vmdk/?src=vmdk
- ^ "CRX Package Format". chrome.com.
- ^ "CRX Package Format". chrome.com.
- ^ "[Pythonmac-SIG] Discovering file type". python.org.
- ^ Tim Fisher. "FH8 File - What It Is & How To Open One". About.com Tech.
- ^ "Google Groups". google.com.
- ^ "xarformat - xar - xarchive format - eXtensible ARchiver - Google Project Hosting". google.com.
{{cite web}}
: line feed character in|title=
at position 13 (help) - ^ "Easily Restore Your Computer With File and Settings Transfer Wizard XP (Part 1)". howtogeek.com.
- ^ "User State Migration Tool 3.0". microsoft.com. Microsoft.
- ^ "User State Migration Tool 4.0 User's Guide". microsoft.com. Microsoft.
- ^ "NESRomTool::NES ROM Quickstart". sadistech.com.
- ^ "GNU tar 1.28: Basic Tar Format". gnu.org.
- ^ "UVOX Universal Voxel Translator - Man Page". tox.land.
- ^ "RAW Format v2.0 - Google Sheets". google.com.
- ^ "Using Binary Delta Compression (BDC) Technology to Update Windows Operating Systems". Microsoft. 10 June 2005. Retrieved 15 March 2015.
- ^ http://mx.gw.com/pipermail/file/2014/001299.html
- ^ http://fastcompression.blogspot.de/2011/05/lz4-explained.html