Jump to content

List of file signatures

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Wikinaut (talk | contribs) at 21:14, 22 September 2015 (+lz4 streaming format magic bytes). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

This is a list of file signatures, data used to identify or verify the content of a file. Such signatures are also known as magic numbers.

Many binary file formats are not intended to be read as text. If such a file is accidentally viewed as a text file, its contents will be unintelligible. However, sometimes the file signature can be recognizable when interpreted as text. The column ISO 8859-1 shows how the file signature appears when interpreted as text in the common ISO 8859-1 encoding.

Hex signature ISO 8859-1 Offset File extension Description
00 . 0 PIC

PIF
SEA
YTR

IBM Storyboard bitmap file

Windows Program Information File
Mac Stuffit Self-Extracting Archive
IRIS OCR data file

00 00 00 00 00 00 00 00

00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00

........

........
........

11 PDB PalmPilot Database/Document File
BE BA FE CA ... 0 DBA Palm Desktop Calendar Archive
00 01 42 44 ... 0 DBA Palm Desktop To Do Archive
00 01 44 54 ... 0 TDA Palm Desktop Calendar Archive
00 01 00 00 ... 0 ... Palm Desktop Data File (Access format)
00 00 01 00 .... 0 ico Computer icon encoded in ICO file format[1]
00 00 00 nn 66 74 79 70

33 67 70

....ftyp

3gp

0 3GG, 3GP, 3G2 3rd Generation Partnership Project 3GPP (nn=0x14)

and 3GPP2 (nn=0x20) multimedia files

00 00 00 nn 66 74 79 70

33 67 70 35

....ftyp

3gp5

0 MP4 MPEG-4 video files
1F 9D .. 0 z, tar.z compressed file (often tar zip)

using Lempel-Ziv-Welch algorithm

1F A0 .. 0 z, tar.z Compressed file (often tar zip)

using LZH algorithm

42 41 43 4B 4D 49 4B 45 44 49 53 4B BACKMIKEDISK 0 bac File or tape containing a backup done with AmiBack on an Amiga. It typically is paired with an index file (idx) with the table of contents.
42 5A 68 BZh 0 bz2 Compressed file using Bzip2 algorithm
47 49 46 38 37 61

47 49 46 38 39 61

GIF87a

GIF89a

0 gif Image file encoded in the Graphics Interchange Format (GIF)[2]
49 49 2A 00 (little endian format) or
4D 4D 00 2A (big endian format)
II*. or
MM.*
0 tif, tiff Tagged Image File Format
49 49 2A 00 10 00 00 00 43 52 II*.....CR 0 cr2 Canon RAW Format Version 2[3]
Canon's RAW format is based on the TIFF file format [4]
80 2A 5F D7 .*_. 0 cin Kodak Cineon image
53 44 50 58 (big endian format) or
58 50 44 53 (little endian format)
SDPX or
XPDS
0 dpx SMPTE DPX image
76 2F 31 01 v/1. 0 exr OpenEXR image
42 50 47 FB BPGû 0 bpg Better Portable Graphics format[5]
FF D8 FF E0 or FF D8 FF DB ÿØÿà 0 jpg, jpeg JPEG
46 4F 52 4D nn nn nn nn 49 4C 42 4D FORM....ILBM 0, any ilbm, lbm, ibm, iff IFF Interleaved Bitmap Image
46 4F 52 4D nn nn nn nn 38 53 56 58 FORM....8SVX 0, any 8svx, 8sv, svx, snd, iff IFF 8-Bit Sampled Voice
46 4F 52 4D nn nn nn nn 41 43 42 4D FORM....ACBM 0, any acbm, iff Amiga Contiguous Bitmap
46 4F 52 4D nn nn nn nn 41 4E 42 4D FORM....ANBM 0, any anbm, iff IFF Animated Bitmap
46 4F 52 4D nn nn nn nn 41 4E 49 4D FORM....ANIM 0, any anim, iff IFF CEL Animation
46 4F 52 4D nn nn nn nn 46 41 58 58 FORM....FAXX 0, any faxx, fax, iff IFF Facsimile Image
46 4F 52 4D nn nn nn nn 46 54 58 54 FORM....FTXT 0, any ftxt, txt, iff IFF Formatted Text
46 4F 52 4D nn nn nn nn 53 4D 55 53 FORM....SMUS 0, any smus, smu, mus, iff IFF Simple Musical Score
46 4F 52 4D nn nn nn nn 43 4D 55 53 FORM....CMUS 0, any cmus, mus, iff IFF Musical Score
46 4F 52 4D nn nn nn nn 59 55 56 4E FORM....YUVN 0, any yuvn, yuv, iff IFF YUV Image
46 4F 52 4D nn nn nn nn 46 41 4E 54 FORM....FANT 0, any iff Amiga Fantavision Movie
49 4E 44 58 INDX 0 idx Index file to a file or tape containing a backup done with AmiBack on an Amiga.
4D 5A MZ 0 exe DOS MZ executable file format and its descendants (including NE and PE)
50 4B 03 04, 50 4B 05 06 (empty archive) or 50 4B 07 08 (spanned archive) PK.. 0 zip, jar, odt, ods, odp, docx, xlsx, pptx, apk zip file format and formats based on it, such as JAR, ODF, OOXML
52 61 72 21 1A 07 00 Rar!... 0 rar RAR archive version 1.50 onwards[6]
52 61 72 21 1A 07 01 00 Rar!.... 0 rar RAR archive version 5.0 onwards[7]
7F 45 4C 46 .ELF 0 Executable and Linkable Format
89 50 4E 47 0D 0A 1A 0A .PNG.... 0 png Image encoded in the Portable Network Graphics format[8]
CA FE BA BE Êþº¾ 0 class Java class file, Mach-O Fat Binary
EF BB BF  0 UTF-8 encoded Unicode byte order mark, commonly seen in text files.
FE ED FA CE ........ 0 or typically 0x1000 Mach-O binary (32-bit)
FE ED FA CF ........ 0 or typically 0x1000 Mach-O binary (64-bit)
CE FA ED FE ........ 0 Mach-O binary (reverse byte ordering scheme, 32-bit)[9]
CF FA ED FE ........ 0 Mach-O binary (reverse byte ordering scheme, 64-bit)[9]
FF FE .. 0 Byte-order mark for text file encoded in little-endian 16-bit Unicode Transfer Format
FF FE 00 00 .... 0 Byte-order mark for text file encoded in little-endian 32-bit Unicode Transfer Format
25 21 50 53 %!PS 0 ps PostScript document
25 50 44 46 %PDF 0 pdf PDF document
30 26 B2 75 8E 66 CF 11

A6 D9 00 AA 00 62 CE 6C

0&²u.fÏ.

¦Ù.ª.bÎl

0 asf, wma, wmv Advanced Systems Format[10]
24 53 44 49 30 30 30 31 $SDI0001 0 System Deployment Image, a disk image format used by Microsoft
4F 67 67 53 OggS 0 ogg, oga, ogv Ogg, an open source media container format
38 42 50 53 8BPS 0 psd Photoshop Document file, Adobe Photoshop's native file format
46 4F 52 4D nn nn nn nn 41 49 46 46 FORM....AIFF 0, any aiff, aif, aifc, snd, iff Audio Interchange File Format
52 49 46 46 nn nn nn nn 57 41 56 45 RIFF....WAVE 0 wav Waveform Audio File Format
FF FB ˙ű 0 mp3 MPEG-1 Layer 3 file without an ID3 tag or with an ID3v1 tag (which's appended at the end of the file)
49 44 33 ID3 0 mp3 MP3 file with an ID3v2 container
42 4D BM 0 bmp, dib BMP file, a bitmap format used mostly in the Windows world
43 44 30 30 31 CD001 0x8001, 0x8801 or 0x9001 iso ISO9660 CD/DVD image file[11]
53 49 4D 50 4C 45 20 20

3D 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20
20 20 20 20 20 54

SIMPLE = T 0 fits Flexible Image Transport System (FITS)[12]
66 4C 61 43 fLaC 0 flac Free Lossless Audio Codec[13]
4D 54 68 64 MThd 0 mid, midi MIDI sound file[14]
D0 CF 11 E0 A1 B1 1A E1 doc, xls, ppt Microsoft Office documents[15]
64 65 78 0A 30 33 35 00 dex
035
0 dex Dalvik Executable
4B 44 4D KDM 0 vmdk VMDK files [16][17]
43 72 32 34 Cr24 0 crx Google Chrome extension[18] or packaged app[19]
41 47 44 33 AGD3 0 fh8 FreeHand 8 document[20][21][22]
05 07 00 00 42 4F 42 4F
05 07 00 00 00 00 00 00
00 00 00 00 00 01
....BOBO............ 0 cwk AppleWorks 5 document
06 07 E1 00 42 4F 42 4F
06 07 E1 00 00 00 00 00
00 00 00 00 00 01
....BOBO............ 0 cwk AppleWorks 6 document
45 52 02 00 00 00
or
8B 45 52 02 00 00 00
ER....
or
ãER....
0 toast Roxio Toast disc image file, also some .dmg-files begin with same bytes
78 01 73 0D 62 62 60 x.s.bb` 0 dmg Apple Disk Image file
78 61 72 21 xar! 0 xar eXtensible ARchive format[23]
50 4D 4F 43 43 4D 4F 43 PMOCCMOC 0 dat Windows Files And Settings Transfer Repository[24] See also USMT 3.0 (Win XP)[25] and USMT 4.0 (Win 7)[26] User Guides
4E 45 53 1A NES 0 nes Nintendo Entertainment System ROM file [27]
75 73 74 61 72 00 30 30
or
75 73 74 61 72 20 20 00
ustar.00
or
ustar .
257 tar tar archive[28]
74 6F 78 33 TOX 0 tox Open source portable voxel file [29]
4D 4C 56 49 MLVI 0 MLV Magic Lantern Video file[30]
44 43 4D 01 50 41 33 30 DCM PA30 0 Windows Update Binary Delta Compression[31]
37 7A BC AF 27 1C 7z¼¯' 0 7z 7-Zip File Format
1F 8B .. 0 gz GZIP
04 22 4D 18 ."M. 0 lz4 LZ4 Streaming Format[32]

Remark: LZ4 compressed data (file) format does not offer any magic bytes.[33]

4D 53 43 46 MSCF 0 cab Microsoft Cabinet file

See also

References

  1. ^ Icons (at MSDN)
  2. ^ GRAPHICS INTERCHANGE FORMAT(sm) Version 89a
  3. ^ Computer Knowledge. "File Extension .CR2 Details". filext.com.
  4. ^ "Inside the Canon RAW format version 2, understanding .CR2 file format and files produced by Canon EOS Digital Camera". free.fr.
  5. ^ Bellard, Fabrice (2015). "BPG Image format".
  6. ^ "TechNote.txt: RAR version 4.00 - Technical information". 2010-12-01. The marker block is actually considered as a fixed byte sequence: 0x52 0x61 0x72 0x21 0x1a 0x07 0x00 {{cite web}}: Missing or empty |url= (help)
  7. ^ "RAR 5.0 archive format". Retrieved 2013-05-01.
  8. ^ "RFC 2083 - PNG (Portable Network Graphics) Specification Version 1.0". ietf.org.
  9. ^ a b "Mac Developer Library". apple.com.
  10. ^ "ASF (Advanced Systems Format)".
  11. ^ Gary C. Kessler (21 October 2012). "File Signatures Table". Retrieved 28 December 2012.
  12. ^ "Flexible Image Transport System (FITS), Version 3.0 - File type signifiers". 2012-09-26. Retrieved 24 January 2013.
  13. ^ Josh Coalson. "FLAC — format". Retrieved 4 April 2013. "fLaC", the FLAC stream marker in ASCII, meaning byte 0 of the stream is 0x66, followed by 0x4C 0x61 0x43
  14. ^ "File Signature Database: mid File Signatures". filesignatures.net.
  15. ^ [1]
  16. ^ "What Files Make Up a Virtual Machine?". vmware.com.
  17. ^ http://www.vmware.com/app/vmdk/?src=vmdk
  18. ^ "CRX Package Format". chrome.com.
  19. ^ "CRX Package Format". chrome.com.
  20. ^ "[Pythonmac-SIG] Discovering file type". python.org.
  21. ^ Tim Fisher. "FH8 File - What It Is & How To Open One". About.com Tech.
  22. ^ "Google Groups". google.com.
  23. ^ "xarformat - xar - xarchive format - eXtensible ARchiver - Google Project Hosting". google.com. {{cite web}}: line feed character in |title= at position 13 (help)
  24. ^ "Easily Restore Your Computer With File and Settings Transfer Wizard XP (Part 1)". howtogeek.com.
  25. ^ "User State Migration Tool 3.0". microsoft.com. Microsoft.
  26. ^ "User State Migration Tool 4.0 User's Guide". microsoft.com. Microsoft.
  27. ^ "NESRomTool::NES ROM Quickstart". sadistech.com.
  28. ^ "GNU tar 1.28: Basic Tar Format". gnu.org.
  29. ^ "UVOX Universal Voxel Translator - Man Page". tox.land.
  30. ^ "RAW Format v2.0 - Google Sheets". google.com.
  31. ^ "Using Binary Delta Compression (BDC) Technology to Update Windows Operating Systems". Microsoft. 10 June 2005. Retrieved 15 March 2015.
  32. ^ http://mx.gw.com/pipermail/file/2014/001299.html
  33. ^ http://fastcompression.blogspot.de/2011/05/lz4-explained.html