Skip to content

Instantly share code, notes, and snippets.

@tcjj3

tcjj3/FileSignatures.json

Forked from johnsarie27/FileSignatures.json
Created April 27, 2026 08:32
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save tcjj3/e0f852df72f49adb9d949198845f6756 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save tcjj3/e0f852df72f49adb9d949198845f6756 to your computer and use it in GitHub Desktop.
Download ZIP
File signatures
Raw
FileSignatures.json
[
{
"Hex_signature": "23 21",
"ISO_8859-1": "#!",
"Offset": "0",
"Extension": "",
"Description": "Script or data to be passed to the program following the shebang (#!)[1]"
},
{
"Hex_signature": "D4 C3 B2 A1 (little-endian)",
"ISO_8859-1": "Ôò¡",
"Offset": "0",
"Extension": "pcap",
"Description": "Libpcap File Format[2]"
},
{
"Hex_signature": "A1 B2 C3 D4 (big-endian)",
"ISO_8859-1": "¡²ÃÔ",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "4D 3C B2 A1 (little-endian)",
"ISO_8859-1": "M<²¡",
"Offset": "0",
"Extension": "pcap",
"Description": "Libpcap File Format (nanosecond-resolution)[2]"
},
{
"Hex_signature": "A1 B2 3C 4D (big-endian)",
"ISO_8859-1": "¡²<M",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "0A 0D 0D 0A",
"ISO_8859-1": "????",
"Offset": "0",
"Extension": "pcapng",
"Description": "PCAP Next Generation Dump File Format[3]"
},
{
"Hex_signature": "ED AB EE DB",
"ISO_8859-1": "í«îÛ",
"Offset": "0",
"Extension": "rpm",
"Description": "RedHat Package Manager (RPM) package[4]"
},
{
"Hex_signature": [
"53 51 4C 69 74 65 20 66",
"6F 72 6D 61 74 20 33 00"
],
"ISO_8859-1": "SQLite format 3?",
"Offset": "0",
"Extension": [
"sqlitedb",
"sqlite",
"db"
],
"Description": "SQLite Database[5]"
},
{
"Hex_signature": "53 50 30 31",
"ISO_8859-1": "SP01",
"Offset": "0",
"Extension": "bin",
"Description": "Amazon Kindle Update Package[6]"
},
{
"Hex_signature": "49 57 41 44",
"ISO_8859-1": "IWAD",
"Offset": "0",
"Extension": "wad",
"Description": "internal WAD (main resource file of Doom)[7]"
},
{
"Hex_signature": "00",
"ISO_8859-1": "?",
"Offset": "0",
"Extension": [
"PIC",
"PIF",
"SEA",
"YTR"
],
"Description": [
"IBM Storyboard bitmap file",
"Windows Program Information File",
"Mac Stuffit Self-Extracting Archive",
"IRIS OCR data file"
]
},
{
"Hex_signature": [
"00 00 00 00 00 00 00 00",
"00 00 00 00 00 00 00 00",
"00 00 00 00 00 00 00 00"
],
"ISO_8859-1": [
"????????",
"????????",
"????????"
],
"Offset": "11",
"Extension": "PDB",
"Description": "PalmPilot Database/Document File"
},
{
"Hex_signature": "BE BA FE CA",
"ISO_8859-1": "¾ºþÊ",
"Offset": "0",
"Extension": "DBA",
"Description": "Palm Desktop Calendar Archive"
},
{
"Hex_signature": "00 01 42 44",
"ISO_8859-1": "??BD",
"Offset": "0",
"Extension": "DBA",
"Description": "Palm Desktop To Do Archive"
},
{
"Hex_signature": "00 01 44 54",
"ISO_8859-1": "??DT",
"Offset": "0",
"Extension": "TDA",
"Description": "Palm Desktop Calendar Archive"
},
{
"Hex_signature": "54 44 46 24",
"ISO_8859-1": "TDF$",
"Offset": "0",
"Extension": "TDF$",
"Description": "Telegram Desktop File"
},
{
"Hex_signature": "54 44 45 46",
"ISO_8859-1": "TDEF",
"Offset": "0",
"Extension": "TDEF",
"Description": "Telegram Desktop Encrypted File"
},
{
"Hex_signature": "00 01 00 00",
"ISO_8859-1": "????",
"Offset": "0",
"Extension": "",
"Description": "Palm Desktop Data File (Access format)"
},
{
"Hex_signature": "00 00 01 00",
"ISO_8859-1": "????",
"Offset": "0",
"Extension": "ico",
"Description": "Computer icon encoded in ICO file format[8]"
},
{
"Hex_signature": "69 63 6e 73",
"ISO_8859-1": "icns",
"Offset": "0",
"Extension": "icns",
"Description": "Apple Icon Image format"
},
{
"Hex_signature": "66 74 79 70 33 67",
"ISO_8859-1": "ftyp3g",
"Offset": "4",
"Extension": [
"3gp",
"3g2"
],
"Description": "3rd Generation Partnership Project 3GPP and 3GPP2 multimedia files"
},
{
"Hex_signature": "1F 9D",
"ISO_8859-1": "??",
"Offset": "0",
"Extension": [
"z",
"tar.z"
],
"Description": "compressed file (often tar zip) using Lempel-Ziv-Welch algorithm"
},
{
"Hex_signature": "1F A0",
"ISO_8859-1": "??",
"Offset": "0",
"Extension": [
"z",
"tar.z"
],
"Description": "Compressed file (often tar zip) using LZH algorithm"
},
{
"Hex_signature": [
"42 41 43 4B 4D 49 4B 45",
"44 49 53 4B"
],
"ISO_8859-1": "BACKMIKEDISK",
"Offset": "0",
"Extension": "bac",
"Description": "AmiBack Amiga Backup data file"
},
{
"Hex_signature": "49 4E 44 58",
"ISO_8859-1": "INDX",
"Offset": "0",
"Extension": "idx",
"Description": "AmiBack Amiga Backup index file"
},
{
"Hex_signature": "62 70 6C 69 73 74",
"ISO_8859-1": "bplist",
"Offset": "0",
"Extension": "plist",
"Description": "Binary Property List file"
},
{
"Hex_signature": "42 5A 68",
"ISO_8859-1": "BZh",
"Offset": "0",
"Extension": "bz2",
"Description": "Compressed file using Bzip2 algorithm"
},
{
"Hex_signature": [
"47 49 46 38 37 61",
"47 49 46 38 39 61"
],
"ISO_8859-1": [
"GIF87a",
"GIF89a"
],
"Offset": "0",
"Extension": "gif",
"Description": "Image file encoded in the Graphics Interchange Format (GIF)[9]"
},
{
"Hex_signature": "49 49 2A 00 (little-endian)",
"ISO_8859-1": "II*?",
"Offset": "0",
"Extension": [
"tif",
"tiff"
],
"Description": "Tagged Image File Format (TIFF)[10]"
},
{
"Hex_signature": "4D 4D 00 2A (big-endian)",
"ISO_8859-1": "MM?*",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": [
"49 49 2A 00 10 00 00 00",
"43 52"
],
"ISO_8859-1": "II*?????CR",
"Offset": "0",
"Extension": "cr2",
"Description": [
"Canon RAW Format Version 2[11]",
"Canon's RAW format is based on TIFF.[12]"
]
},
{
"Hex_signature": "80 2A 5F D7",
"ISO_8859-1": "€*_×",
"Offset": "0",
"Extension": "cin",
"Description": "Kodak Cineon image"
},
{
"Hex_signature": [
"52 4E 43 01",
"52 4E 43 02"
],
"ISO_8859-1": [
"RNC?",
"RNC?"
],
"Offset": "0",
"Extension": "",
"Description": "Compressed file using Rob Northen Compression (version 1 and 2) algorithm"
},
{
"Hex_signature": [
"4E 55 52 55 49 4D 47",
"4E 55 52 55 50 41 4C"
],
"ISO_8859-1": [
"NURUIMG",
"NURUPAL"
],
"Offset": "0",
"Extension": [
"nui",
"nup"
],
"Description": "nuru ASCII/ANSI image and palette files"
},
{
"Hex_signature": "53 44 50 58 (big-endian format)",
"ISO_8859-1": "SDPX",
"Offset": "0",
"Extension": "dpx",
"Description": "SMPTE DPX image"
},
{
"Hex_signature": "58 50 44 53 (little-endian format)",
"ISO_8859-1": "XPDS",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "76 2F 31 01",
"ISO_8859-1": "v/1?",
"Offset": "0",
"Extension": "exr",
"Description": "OpenEXR image"
},
{
"Hex_signature": "42 50 47 FB",
"ISO_8859-1": "BPGû",
"Offset": "0",
"Extension": "bpg",
"Description": "Better Portable Graphics format[13]"
},
{
"Hex_signature": "FF D8 FF DB",
"ISO_8859-1": "ÿØÿÛ",
"Offset": "0",
"Extension": [
"jpg",
"jpeg"
],
"Description": "JPEG raw or in the JFIF or Exif file format[14]"
},
{
"Hex_signature": [
"FF D8 FF E0 00 10 4A 46",
"49 46 00 01"
],
"ISO_8859-1": "ÿØÿà??JFIF??",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "FF D8 FF EE",
"ISO_8859-1": "ÿØÿî",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": [
"FF D8 FF E1 ?? ?? 45 78",
"69 66 00 00"
],
"ISO_8859-1": "ÿØÿá??Exif??",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "FF D8 FF E0",
"ISO_8859-1": "ÿØÿà",
"Offset": "0",
"Extension": "jpg",
"Description": "JPEG raw or in the JFIF or Exif file format[14]"
},
{
"Hex_signature": "00 00 00 0C 6A 50 20 20 0D 0A 87 0A",
"ISO_8859-1": "????jP????‡?",
"Offset": "0",
"Extension": [
"jp2",
"j2k",
"jpf",
"jpm",
"jpg2",
"j2c",
"jpc",
"jpx",
"mj2"
],
"Description": "JPEG 2000 format[15]"
},
{
"Hex_signature": "FF 4F FF 51",
"ISO_8859-1": "ÿOÿQ",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "71 6f 69 66",
"ISO_8859-1": "qoif",
"Offset": "0",
"Extension": "",
"Description": "QOI - The “Quite OK Image Format”[16]"
},
{
"Hex_signature": [
"46 4F 52 4D ?? ?? ?? ??",
"49 4C 42 4D"
],
"ISO_8859-1": "FORM????ILBM",
"Offset": [
"0",
"any"
],
"Extension": [
"ilbm",
"lbm",
"ibm",
"iff"
],
"Description": "IFF Interleaved Bitmap Image"
},
{
"Hex_signature": [
"46 4F 52 4D ?? ?? ?? ??",
"38 53 56 58"
],
"ISO_8859-1": "FORM????8SVX",
"Offset": [
"0",
"any"
],
"Extension": [
"8svx",
"8sv",
"svx",
"snd",
"iff"
],
"Description": "IFF 8-Bit Sampled Voice"
},
{
"Hex_signature": [
"46 4F 52 4D ?? ?? ?? ??",
"41 43 42 4D"
],
"ISO_8859-1": "FORM????ACBM",
"Offset": [
"0",
"any"
],
"Extension": [
"acbm",
"iff"
],
"Description": "Amiga Contiguous Bitmap"
},
{
"Hex_signature": [
"46 4F 52 4D ?? ?? ?? ??",
"41 4E 42 4D"
],
"ISO_8859-1": "FORM????ANBM",
"Offset": [
"0",
"any"
],
"Extension": [
"anbm",
"iff"
],
"Description": "IFF Animated Bitmap"
},
{
"Hex_signature": [
"46 4F 52 4D ?? ?? ?? ??",
"41 4E 49 4D"
],
"ISO_8859-1": "FORM????ANIM",
"Offset": [
"0",
"any"
],
"Extension": [
"anim",
"iff"
],
"Description": "IFF CEL Animation"
},
{
"Hex_signature": [
"46 4F 52 4D ?? ?? ?? ??",
"46 41 58 58"
],
"ISO_8859-1": "FORM????FAXX",
"Offset": [
"0",
"any"
],
"Extension": [
"faxx",
"fax",
"iff"
],
"Description": "IFF Facsimile Image"
},
{
"Hex_signature": [
"46 4F 52 4D ?? ?? ?? ??",
"46 54 58 54"
],
"ISO_8859-1": "FORM????FTXT",
"Offset": [
"0",
"any"
],
"Extension": [
"ftxt",
"iff"
],
"Description": "IFF Formatted Text"
},
{
"Hex_signature": [
"46 4F 52 4D ?? ?? ?? ??",
"53 4D 55 53"
],
"ISO_8859-1": "FORM????SMUS",
"Offset": [
"0",
"any"
],
"Extension": [
"smus",
"smu",
"mus",
"iff"
],
"Description": "IFF Simple Musical Score"
},
{
"Hex_signature": [
"46 4F 52 4D ?? ?? ?? ??",
"43 4D 55 53"
],
"ISO_8859-1": "FORM????CMUS",
"Offset": [
"0",
"any"
],
"Extension": [
"cmus",
"mus",
"iff"
],
"Description": "IFF Musical Score"
},
{
"Hex_signature": [
"46 4F 52 4D ?? ?? ?? ??",
"59 55 56 4E"
],
"ISO_8859-1": "FORM????YUVN",
"Offset": [
"0",
"any"
],
"Extension": [
"yuvn",
"yuv",
"iff"
],
"Description": "IFF YUV Image"
},
{
"Hex_signature": [
"46 4F 52 4D ?? ?? ?? ??",
"46 41 4E 54"
],
"ISO_8859-1": "FORM????FANT",
"Offset": [
"0",
"any"
],
"Extension": "iff",
"Description": "Amiga Fantavision Movie"
},
{
"Hex_signature": [
"46 4F 52 4D ?? ?? ?? ??",
"41 49 46 46"
],
"ISO_8859-1": "FORM????AIFF",
"Offset": [
"0",
"any"
],
"Extension": [
"aiff",
"aif",
"aifc",
"snd",
"iff"
],
"Description": "Audio Interchange File Format"
},
{
"Hex_signature": "4C 5A 49 50",
"ISO_8859-1": "LZIP",
"Offset": "0",
"Extension": "lz",
"Description": "lzip compressed file[17]"
},
{
"Hex_signature": "30 37 30 37 30 37",
"ISO_8859-1": "070707",
"Offset": "0",
"Extension": "cpio",
"Description": "cpio archive file[18]"
},
{
"Hex_signature": "4D 5A",
"ISO_8859-1": "MZ",
"Offset": "0",
"Extension": [
"exe",
"scr",
"sys",
"dll",
"fon",
"cpl",
"iec",
"ime",
"rs",
"tsp",
"mz"
],
"Description": "DOS MZ executable and its descendants (including NE and PE)"
},
{
"Hex_signature": "5A 4D",
"ISO_8859-1": "ZM",
"Offset": "0",
"Extension": "exe",
"Description": "DOS ZM executable and its descendants (rare)"
},
{
"Hex_signature": [
"50 4B 03 04",
"50 4B 05 06 (empty archive)",
"50 4B 07 08 (spanned archive)"
],
"ISO_8859-1": [
"PK??",
"PK??",
"PK??"
],
"Offset": "0",
"Extension": [
"zip",
"aar",
"apk",
"docx",
"epub",
"ipa",
"jar",
"kmz",
"maff",
"msix",
"odp",
"ods",
"odt",
"pk3",
"pk4",
"pptx",
"usdz",
"vsdx",
"xlsx",
"xpi"
],
"Description": "zip file format and formats based on it, such as EPUB, JAR, ODF, OOXML"
},
{
"Hex_signature": "52 61 72 21 1A 07 00",
"ISO_8859-1": "Rar!???",
"Offset": "0",
"Extension": "rar",
"Description": "Roshal ARchive compressed archive v1.50 onwards[19]"
},
{
"Hex_signature": "52 61 72 21 1A 07 01 00",
"ISO_8859-1": "Rar!????",
"Offset": "0",
"Extension": "rar",
"Description": "Roshal ARchive compressed archive v5.00 onwards[20]"
},
{
"Hex_signature": "7F 45 4C 46",
"ISO_8859-1": "?ELF",
"Offset": "0",
"Extension": "",
"Description": "Executable and Linkable Format"
},
{
"Hex_signature": "89 50 4E 47 0D 0A 1A 0A",
"ISO_8859-1": "‰PNG????",
"Offset": "0",
"Extension": "png",
"Description": "Image encoded in the Portable Network Graphics format[21]"
},
{
"Hex_signature": "C9",
"ISO_8859-1": "É",
"Offset": "0",
"Extension": "com",
"Description": "CP/M 3 and higher with overlays[22]"
},
{
"Hex_signature": "CA FE BA BE",
"ISO_8859-1": "Êþº¾",
"Offset": "0",
"Extension": "class",
"Description": "Java class file, Mach-O Fat Binary"
},
{
"Hex_signature": "EF BB BF",
"ISO_8859-1": "",
"Offset": "0",
"Extension": [
"txt",
"others"
],
"Description": "UTF-8 byte order mark, commonly seen in text files.[23][24][25]"
},
{
"Hex_signature": "FF FE",
"ISO_8859-1": "ÿþ",
"Offset": "0",
"Extension": [
"txt",
"others"
],
"Description": "UTF-16LE byte order mark, commonly seen in text files.[23][24][25]"
},
{
"Hex_signature": "FE FF",
"ISO_8859-1": "þÿ",
"Offset": "0",
"Extension": [
"txt",
"others"
],
"Description": "UTF-16BE byte order mark, commonly seen in text files.[23][24][25]"
},
{
"Hex_signature": "FF FE 00 00",
"ISO_8859-1": "ÿþ??",
"Offset": "0",
"Extension": [
"txt",
"others"
],
"Description": "UTF-32LE byte order mark for text[23][25]"
},
{
"Hex_signature": "00 00 FE FF",
"ISO_8859-1": "??þÿ",
"Offset": "0",
"Extension": [
"txt",
"others"
],
"Description": "UTF-32BE byte order mark for text[23][25]"
},
{
"Hex_signature": [
"2B 2F 76 38",
"2B 2F 76 39",
"2B 2F 76 2B",
"2B 2F 76 2F"
],
"ISO_8859-1": [
"+/v8",
"+/v9",
"+/v+",
"+/v/"
],
"Offset": "0",
"Extension": "",
"Description": "UTF-7 byte order mark for text[26][25]"
},
{
"Hex_signature": "0E FE FF",
"ISO_8859-1": "?þÿ",
"Offset": "0",
"Extension": [
"txt",
"others"
],
"Description": "SCSU byte order mark for text[26][25]"
},
{
"Hex_signature": "DD 73 66 73",
"ISO_8859-1": "Ýsfs",
"Offset": "0",
"Extension": "",
"Description": "UTF-EBCDIC byte order mark for text[26][25]"
},
{
"Hex_signature": "FE ED FA CE",
"ISO_8859-1": "þíúÎ",
"Offset": [
"0",
"0x1000"
],
"Extension": "",
"Description": "Mach-O binary (32-bit)"
},
{
"Hex_signature": "FE ED FA CF",
"ISO_8859-1": "þíúÏ",
"Offset": [
"0",
"0x1000"
],
"Extension": "",
"Description": "Mach-O binary (64-bit)"
},
{
"Hex_signature": "FE ED FE ED",
"ISO_8859-1": "þíþí",
"Offset": "0",
"Extension": "",
"Description": "JKS JavakeyStore"
},
{
"Hex_signature": "CE FA ED FE",
"ISO_8859-1": "Îúíþ",
"Offset": "0",
"Extension": "",
"Description": "Mach-O binary (reverse byte ordering scheme, 32-bit)[27]"
},
{
"Hex_signature": "CF FA ED FE",
"ISO_8859-1": "Ïúíþ",
"Offset": "0",
"Extension": "",
"Description": "Mach-O binary (reverse byte ordering scheme, 64-bit)[27]"
},
{
"Hex_signature": "25 21 50 53",
"ISO_8859-1": "%!PS",
"Offset": "0",
"Extension": "ps",
"Description": "PostScript document"
},
{
"Hex_signature": "25 21 50 53 2D 41 64 6F 62 65 2D 33 2E 30 20 45 50 53 46 2D 33 2E 30",
"ISO_8859-1": "%!PS-Adobe-3.0 ESPF-3.0",
"Offset": "0",
"Extension": [
"eps",
"epsf"
],
"Description": "Encapsulated PostScript file version 3.0[28]"
},
{
"Hex_signature": "25 21 50 53 2D 41 64 6F 62 65 2D 33 2E 31 20 45 50 53 46 2D 33 2E 30",
"ISO_8859-1": "%!PS-Adobe-3.1 ESPF-3.0",
"Offset": "0",
"Extension": [
"eps",
"epsf"
],
"Description": "Encapsulated PostScript file version 3.1[28]"
},
{
"Hex_signature": [
"49 54 53 46 03 00 00 00",
"60 00 00 00"
],
"ISO_8859-1": "ITSF????`???",
"Offset": "0",
"Extension": "chm",
"Description": "MS Windows HtmlHelp Data"
},
{
"Hex_signature": "25 50 44 46 2D",
"ISO_8859-1": "%PDF-",
"Offset": "0",
"Extension": "pdf",
"Description": "PDF document[29]"
},
{
"Hex_signature": [
"30 26 B2 75 8E 66 CF 11",
"A6 D9 00 AA 00 62 CE 6C"
],
"ISO_8859-1": "0&²uŽfÏ?¦Ù?ª?bÎl",
"Offset": "0",
"Extension": [
"asf",
"wma",
"wmv"
],
"Description": "Advanced Systems Format[30]"
},
{
"Hex_signature": "24 53 44 49 30 30 30 31",
"ISO_8859-1": "$SDI0001",
"Offset": "0",
"Extension": "",
"Description": "System Deployment Image, a disk image format used by Microsoft"
},
{
"Hex_signature": "4F 67 67 53",
"ISO_8859-1": "OggS",
"Offset": "0",
"Extension": [
"ogg",
"oga",
"ogv"
],
"Description": "Ogg, an open source media container format"
},
{
"Hex_signature": "38 42 50 53",
"ISO_8859-1": "8BPS",
"Offset": "0",
"Extension": "psd",
"Description": "Photoshop Document file, Adobe Photoshop's native file format"
},
{
"Hex_signature": [
"52 49 46 46 ?? ?? ?? ??",
"57 41 56 45"
],
"ISO_8859-1": "RIFF????WAVE",
"Offset": "0",
"Extension": "wav",
"Description": "Waveform Audio File Format[31]"
},
{
"Hex_signature": [
"52 49 46 46 ?? ?? ?? ??",
"41 56 49 20"
],
"ISO_8859-1": "RIFF????AVI?",
"Offset": "0",
"Extension": "avi",
"Description": "Audio Video Interleave video format[32]"
},
{
"Hex_signature": [
"FF FB",
"FF F3",
"FF F2"
],
"ISO_8859-1": [
"ÿû",
"ÿó",
"ÿò"
],
"Offset": "0",
"Extension": "mp3",
"Description": "MPEG-1 Layer 3 file without an ID3 tag or with an ID3v1 tag (which is appended at the end of the file)"
},
{
"Hex_signature": "49 44 33",
"ISO_8859-1": "ID3",
"Offset": "0",
"Extension": "mp3",
"Description": "MP3 file with an ID3v2 container"
},
{
"Hex_signature": "42 4D",
"ISO_8859-1": "BM",
"Offset": "0",
"Extension": [
"bmp",
"dib"
],
"Description": "BMP file, a bitmap format used mostly in the Windows world"
},
{
"Hex_signature": "43 44 30 30 31",
"ISO_8859-1": "CD001",
"Offset": [
"0x8001",
"0x8801",
"0x9001"
],
"Extension": "iso",
"Description": "ISO9660 CD/DVD image file[33]"
},
{
"Hex_signature": "43 44 30 30 31",
"ISO_8859-1": "CD001",
"Offset": "0x5EAC9",
"Extension": "cdi",
"Description": "CD-i CD image file"
},
{
"Hex_signature": "6D 61 69 6E 2E 62 73",
"ISO_8859-1": "main.bs",
"Offset": "0",
"Extension": "mgw",
"Description": "Nintendo Game & Watch image file"
},
{
"Hex_signature": "4E 45 53",
"ISO_8859-1": "NES",
"Offset": "0",
"Extension": "nes",
"Description": "Nintendo Entertainment System image file"
},
{
"Hex_signature": "A0 32 41 A0 A0 A0",
"ISO_8859-1": "2A",
"Offset": "0x165A4",
"Extension": "d64",
"Description": "Commodore 64 1541 disk image (D64 format)"
},
{
"Hex_signature": "47 53 52 2D 31 35 34 31",
"ISO_8859-1": "GCR-1541",
"Offset": "0",
"Extension": "g64",
"Description": "Commodore 64 1541 disk image (G64 format)"
},
{
"Hex_signature": "A0 33 44 A0 A0",
"ISO_8859-1": "3D",
"Offset": "0x61819",
"Extension": "d81",
"Description": "Commodore 64 1581 disk image (D81 format)"
},
{
"Hex_signature": "43 36 34 20 74 61 70 65 20 69 6D 61 67 65 20 66 69 6C 65",
"ISO_8859-1": "C64 tape image file",
"Offset": "0",
"Extension": "t64",
"Description": "Commodore 64 tape image"
},
{
"Hex_signature": "43 36 34 20 43 41 52 54 52 49 44 47 45 20 20 20",
"ISO_8859-1": "C64 CARTRIDGE",
"Offset": "0",
"Extension": "crt",
"Description": "Commodore 64 cartridge image"
},
{
"Hex_signature": [
"53 49 4D 50 4C 45 20 20",
"3D 20 20 20 20 20 20 20",
"20 20 20 20 20 20 20 20",
"20 20 20 20 20 54"
],
"ISO_8859-1": [
"SIMPLE??",
"=???????",
"????????",
"?????T"
],
"Offset": "0",
"Extension": "fits",
"Description": "Flexible Image Transport System (FITS)[34]"
},
{
"Hex_signature": "66 4C 61 43",
"ISO_8859-1": "fLaC",
"Offset": "0",
"Extension": "flac",
"Description": "Free Lossless Audio Codec[35]"
},
{
"Hex_signature": "4D 54 68 64",
"ISO_8859-1": "MThd",
"Offset": "0",
"Extension": [
"mid",
"midi"
],
"Description": "MIDI sound file[36]"
},
{
"Hex_signature": "D0 CF 11 E0 A1 B1 1A E1",
"ISO_8859-1": "ÐÏ?ࡱ?á",
"Offset": "0",
"Extension": [
"doc",
"xls",
"ppt",
"msi",
"msg"
],
"Description": "Compound File Binary Format, a container format defined by Microsoft COM. It can contain the equivalent of files and directories. It is used by Windows Installer and for documents in older versions of Microsoft Office.[37] It can be used by other programs as well that rely on the COM and OLE API's."
},
{
"Hex_signature": "64 65 78 0A 30 33 35 00",
"ISO_8859-1": "dex?035?",
"Offset": "0",
"Extension": "dex",
"Description": "Dalvik Executable"
},
{
"Hex_signature": "4B 44 4D",
"ISO_8859-1": "KDM",
"Offset": "0",
"Extension": "vmdk",
"Description": "VMDK files[38][39]"
},
{
"Hex_signature": "43 72 32 34",
"ISO_8859-1": "Cr24",
"Offset": "0",
"Extension": "crx",
"Description": "Google Chrome extension[40] or packaged app[41]"
},
{
"Hex_signature": "41 47 44 33",
"ISO_8859-1": "AGD3",
"Offset": "0",
"Extension": "fh8",
"Description": "FreeHand 8 document[42][43][44]"
},
{
"Hex_signature": [
"05 07 00 00 42 4F 42 4F",
"05 07 00 00 00 00 00 00",
"00 00 00 00 00 01"
],
"ISO_8859-1": [
"????BOBO",
"????????",
"??????"
],
"Offset": "0",
"Extension": "cwk",
"Description": "AppleWorks 5 document"
},
{
"Hex_signature": [
"06 07 E1 00 42 4F 42 4F",
"06 07 E1 00 00 00 00 00",
"00 00 00 00 00 01"
],
"ISO_8859-1": [
"??á?BOBO",
"??á?????",
"??????"
],
"Offset": "0",
"Extension": "cwk",
"Description": "AppleWorks 6 document"
},
{
"Hex_signature": "45 52 02 00 00 00",
"ISO_8859-1": "ER????",
"Offset": "0",
"Extension": "toast",
"Description": "Roxio Toast disc image file"
},
{
"Hex_signature": "8B 45 52 02 00 00 00",
"ISO_8859-1": "‹ER????",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "6B 6F 6C 79",
"ISO_8859-1": "koly",
"Offset": "end–512",
"Extension": "dmg",
"Description": "Apple Disk Image file"
},
{
"Hex_signature": "78 61 72 21",
"ISO_8859-1": "xar!",
"Offset": "0",
"Extension": "xar",
"Description": "eXtensible ARchive format[45]"
},
{
"Hex_signature": "50 4D 4F 43 43 4D 4F 43",
"ISO_8859-1": "PMOCCMOC",
"Offset": "0",
"Extension": "dat",
"Description": "Windows Files And Settings Transfer Repository[46] See also USMT 3.0 (Win XP)[47] and USMT 4.0 (Win 7)[48] User Guides"
},
{
"Hex_signature": "4E 45 53 1A",
"ISO_8859-1": "NES?",
"Offset": "0",
"Extension": "nes",
"Description": "Nintendo Entertainment System ROM file[49]"
},
{
"Hex_signature": [
"75 73 74 61 72 00 30 30",
"75 73 74 61 72 20 20 00"
],
"ISO_8859-1": [
"ustar?00",
"ustar???"
],
"Offset": "257",
"Extension": "tar",
"Description": "tar archive[50]"
},
{
"Hex_signature": "4F 41 52 ??",
"ISO_8859-1": "OAR?",
"Offset": "0",
"Extension": "oar",
"Description": "OAR file archive format, where ?? is the format version."
},
{
"Hex_signature": "74 6F 78 33",
"ISO_8859-1": "tox3",
"Offset": "0",
"Extension": "tox",
"Description": "Open source portable voxel file[51]"
},
{
"Hex_signature": "4D 4C 56 49",
"ISO_8859-1": "MLVI",
"Offset": "0",
"Extension": "MLV",
"Description": "Magic Lantern Video file[52]"
},
{
"Hex_signature": [
"44 43 4D 01 50 41 33 30",
"50 41 33 30"
],
"ISO_8859-1": [
"DCM?PA30",
"PA30"
],
"Offset": "0",
"Extension": "",
"Description": "Windows Update Binary Delta Compression file[53]"
},
{
"Hex_signature": "37 7A BC AF 27 1C",
"ISO_8859-1": "7z¼¯'?",
"Offset": "0",
"Extension": "7z",
"Description": "7-Zip File Format"
},
{
"Hex_signature": "1F 8B",
"ISO_8859-1": "?‹",
"Offset": "0",
"Extension": [
"gz",
"tar.gz"
],
"Description": "GZIP compressed file[54]"
},
{
"Hex_signature": "FD 37 7A 58 5A 00",
"ISO_8859-1": "ý7zXZ?",
"Offset": "0",
"Extension": [
"xz",
"tar.xz"
],
"Description": [
"XZ compression utility",
" using LZMA2 compression"
]
},
{
"Hex_signature": "04 22 4D 18",
"ISO_8859-1": "?\"M?",
"Offset": "0",
"Extension": "lz4",
"Description": [
"LZ4 Frame Format[55]",
"Remark: LZ4 block format does not offer any magic bytes.[56]"
]
},
{
"Hex_signature": "4D 53 43 46",
"ISO_8859-1": "MSCF",
"Offset": "0",
"Extension": "cab",
"Description": "Microsoft Cabinet file"
},
{
"Hex_signature": "53 5A 44 44 88 F0 27 33",
"ISO_8859-1": "SZDDˆð'3",
"Offset": "0",
"Extension": "??_",
"Description": "Microsoft compressed file in Quantum format, used prior to Windows XP. File can be decompressed using Extract.exe or Expand.exe distributed with earlier versions of Windows. After compression, the last character of the original filename extension is replaced with an underscore, e.g. ‘Setup.exe’ becomes ‘Setup.ex_’."
},
{
"Hex_signature": "46 4C 49 46",
"ISO_8859-1": "FLIF",
"Offset": "0",
"Extension": "flif",
"Description": "Free Lossless Image Format"
},
{
"Hex_signature": "1A 45 DF A3",
"ISO_8859-1": "?Eߣ",
"Offset": "0",
"Extension": [
"mkv",
"mka",
"mks",
"mk3d",
"webm"
],
"Description": "Matroska media container, including WebM"
},
{
"Hex_signature": "4D 49 4C 20",
"ISO_8859-1": "MIL?",
"Offset": "0",
"Extension": "stg",
"Description": "\"SEAN : Session Analysis\" Training file. Also used in compatible software \"Rpw : Rowperfect for Windows\" and \"RP3W : ROWPERFECT3 for Windows\"."
},
{
"Hex_signature": [
"41 54 26 54 46 4F 52 4D",
"?? ?? ?? ?? 44 4A 56"
],
"ISO_8859-1": "AT&TFORM????DJV",
"Offset": "0",
"Extension": [
"djvu",
"djv"
],
"Description": [
"DjVu document",
"The following byte is either 55 (U) for single-page or 4D (M) for multi-page documents."
]
},
{
"Hex_signature": "30 82",
"ISO_8859-1": "0‚",
"Offset": "0",
"Extension": "der",
"Description": "DER encoded X.509 certificate"
},
{
"Hex_signature": "2D 2D 2D 2D 2D 42 45 47 49 4E 20 43 45 52 54 49 46 49 43 41 54 45 2D 2D 2D 2D 2D",
"ISO_8859-1": "-----BEGIN CERTIFICATE-----",
"Offset": "0",
"Extension": [
"crt",
"pem"
],
"Description": "PEM encoded X.509 certificate"
},
{
"Hex_signature": "2D 2D 2D 2D 2D 42 45 47 49 4E 20 43 45 52 54 49 46 49 43 41 54 45 20 52 45 51 55 45 53 54 2D 2D 2D 2D 2D",
"ISO_8859-1": "-----BEGIN CERTIFICATE REQUEST-----",
"Offset": "0",
"Extension": [
"csr",
"pem"
],
"Description": "PEM encoded X.509 Certificate Signing Request"
},
{
"Hex_signature": "2D 2D 2D 2D 2D 42 45 47 49 4E 20 50 52 49 56 41 54 45 20 4B 45 59 2D 2D 2D 2D 2D",
"ISO_8859-1": "-----BEGIN PRIVATE KEY-----",
"Offset": "0",
"Extension": [
"key",
"pem"
],
"Description": "PEM encoded X.509 PKCS#8 private key"
},
{
"Hex_signature": "2D 2D 2D 2D 2D 42 45 47 49 4E 20 44 53 41 20 50 52 49 56 41 54 45 20 4B 45 59 2D 2D 2D 2D 2D",
"ISO_8859-1": "-----BEGIN DSA PRIVATE KEY-----",
"Offset": "0",
"Extension": [
"key",
"pem"
],
"Description": "PEM encoded X.509 PKCS#1 DSA private key"
},
{
"Hex_signature": "2D 2D 2D 2D 2D 42 45 47 49 4E 20 52 45 41 20 50 52 49 56 41 54 45 20 4B 45 59 2D 2D 2D 2D 2D",
"ISO_8859-1": "-----BEGIN RSA PRIVATE KEY-----",
"Offset": "0",
"Extension": [
"key",
"pem"
],
"Description": "PEM encoded X.509 PKCS#1 RSA private key"
},
{
"Hex_signature": "50 75 54 54 59 2D 55 73 65 72 2D 4B 65 79 2D 46 69 6C 65 2D 32 3A",
"ISO_8859-1": "PuTTY-User-Key-File-2:",
"Offset": "0",
"Extension": "ppk",
"Description": "PuTTY private key file version 2"
},
{
"Hex_signature": "50 75 54 54 59 2D 55 73 65 72 2D 4B 65 79 2D 46 69 6C 65 2D 33 3A",
"ISO_8859-1": "PuTTY-User-Key-File-3:",
"Offset": "0",
"Extension": "ppk",
"Description": "PuTTY private key file version 3"
},
{
"Hex_signature": "44 49 43 4D",
"ISO_8859-1": "DICM",
"Offset": "128",
"Extension": "dcm",
"Description": "DICOM Medical File Format"
},
{
"Hex_signature": "77 4F 46 46",
"ISO_8859-1": "wOFF",
"Offset": "0",
"Extension": "woff",
"Description": "WOFF File Format 1.0"
},
{
"Hex_signature": "77 4F 46 32",
"ISO_8859-1": "wOF2",
"Offset": "0",
"Extension": "woff2",
"Description": "WOFF File Format 2.0"
},
{
"Hex_signature": "3C 3F 78 6D 6C 20",
"ISO_8859-1": "<?xml?",
"Offset": [
"0",
"after BOM"
],
"Extension": "xml",
"Description": "eXtensible Markup Language[24][57]"
},
{
"Hex_signature": [
"3C 00 3F 00 78 00 6D 00",
"6C 00 20"
],
"ISO_8859-1": "<???x?m?l???",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": [
"00 3C 00 3F 00 78 00 6D",
"00 6C 00 20"
],
"ISO_8859-1": "?<???x?m?l??",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": [
"3C 00 00 00 3F 00 00 00",
"78 00 00 00 6D 00 00 00",
"6C 00 00 00 20 00 00 00"
],
"ISO_8859-1": [
"<???????",
"x???m???",
"l???????"
],
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": [
"00 00 00 3C 00 00 00 3F",
"00 00 00 78 00 00 00 6D",
"00 00 00 6C 00 00 00 20"
],
"ISO_8859-1": [
"???<????",
"???x???m",
"???l????"
],
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "4C 6F A7 94 93 40",
"ISO_8859-1": "Lo§”“@",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "00 61 73 6D",
"ISO_8859-1": "?asm",
"Offset": "0",
"Extension": "wasm",
"Description": "WebAssembly binary format[58]"
},
{
"Hex_signature": "CF 84 01",
"ISO_8859-1": "Ï„?",
"Offset": "0",
"Extension": "lep",
"Description": "Lepton compressed JPEG image[59]"
},
{
"Hex_signature": "43 57 53",
"ISO_8859-1": "CWS",
"Offset": "0",
"Extension": "swf",
"Description": "Adobe Flash .swf"
},
{
"Hex_signature": "46 57 53",
"ISO_8859-1": "FWS",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "21 3C 61 72 63 68 3E 0A",
"ISO_8859-1": "!<arch>?",
"Offset": "0",
"Extension": "deb",
"Description": "linux deb file"
},
{
"Hex_signature": [
"52 49 46 46 ?? ?? ?? ??",
"57 45 42 50"
],
"ISO_8859-1": "RIFF????WEBP",
"Offset": "0",
"Extension": "webp",
"Description": "Google WebP image file, where ?? ?? ?? ?? is the file size. More information on WebP File Header"
},
{
"Hex_signature": "27 05 19 56",
"ISO_8859-1": "'??V",
"Offset": "0",
"Extension": "",
"Description": "U-Boot / uImage. Das U-Boot Universal Boot Loader.[60]"
},
{
"Hex_signature": "7B 5C 72 74 66 31",
"ISO_8859-1": "{\\rtf1",
"Offset": "0",
"Extension": "rtf",
"Description": "Rich Text Format"
},
{
"Hex_signature": "54 41 50 45",
"ISO_8859-1": "TAPE",
"Offset": "0",
"Extension": "",
"Description": "Microsoft Tape Format"
},
{
"Hex_signature": "47",
"ISO_8859-1": "G",
"Offset": [
"0",
"0xBC",
"0x178",
"...",
"(every 188th byte)"
],
"Extension": [
"ts",
"tsv",
"tsa",
"mpg",
"mpeg"
],
"Description": "MPEG Transport Stream (MPEG-2 Part 1)[61]"
},
{
"Hex_signature": "00 00 01 BA",
"ISO_8859-1": "???º",
"Offset": "0",
"Extension": [
"m2p",
"vob",
"mpg",
"mpeg"
],
"Description": "MPEG Program Stream (MPEG-1 Part 1 (essentially identical) and MPEG-2 Part 1)"
},
{
"Hex_signature": "00 00 01 B3",
"ISO_8859-1": "???³",
"Offset": "0",
"Extension": [
"mpg",
"mpeg"
],
"Description": "MPEG-1 video and MPEG-2 video (MPEG-1 Part 2 and MPEG-2 Part 2)"
},
{
"Hex_signature": "66 74 79 70 69 73 6F 6D",
"ISO_8859-1": "ftypisom",
"Offset": "4",
"Extension": "mp4",
"Description": "ISO Base Media file (MPEG-4)"
},
{
"Hex_signature": "78 01",
"ISO_8859-1": "x?",
"Offset": "0",
"Extension": "zlib",
"Description": "No Compression (no preset dictionary)"
},
{
"Hex_signature": "78 5E",
"ISO_8859-1": "x^",
"Offset": "Best speed (no preset dictionary)",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "78 9C",
"ISO_8859-1": "xœ",
"Offset": "Default Compression (no preset dictionary)",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "78 DA",
"ISO_8859-1": "xÚ",
"Offset": "Best Compression (no preset dictionary)",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "78 20",
"ISO_8859-1": "x?",
"Offset": "No Compression (with preset dictionary)",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "78 7D",
"ISO_8859-1": "x}",
"Offset": "Best speed (with preset dictionary)",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "78 BB",
"ISO_8859-1": "x»",
"Offset": "Default Compression (with preset dictionary)",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "78 F9",
"ISO_8859-1": "xù",
"Offset": "Best Compression (with preset dictionary)",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "62 76 78 32",
"ISO_8859-1": "bvx2",
"Offset": "0",
"Extension": "lzfse",
"Description": "LZFSE - Lempel-Ziv style data compression algorithm using Finite State Entropy coding. OSS by Apple.[62]"
},
{
"Hex_signature": "4F 52 43",
"ISO_8859-1": "ORC",
"Offset": "0",
"Extension": "orc",
"Description": "Apache ORC (Optimized Row Columnar) file format"
},
{
"Hex_signature": "4F 62 6A 01",
"ISO_8859-1": "Obj?",
"Offset": "0",
"Extension": "avro",
"Description": "Apache Avro binary file format"
},
{
"Hex_signature": "53 45 51 36",
"ISO_8859-1": "SEQ6",
"Offset": "0",
"Extension": "rc",
"Description": "RCFile columnar file format"
},
{
"Hex_signature": "65 87 78 56",
"ISO_8859-1": "e‡xV",
"Offset": "0",
"Extension": [
"p25",
"obt"
],
"Description": "PhotoCap Object Templates"
},
{
"Hex_signature": "55 55 AA AA",
"ISO_8859-1": "UUªª",
"Offset": "0",
"Extension": "pcv",
"Description": "PhotoCap Vector"
},
{
"Hex_signature": "78 56 34",
"ISO_8859-1": "xV4",
"Offset": "0",
"Extension": [
"pbt",
"pdt",
"pea",
"peb",
"pet",
"pgt",
"pict",
"pjt",
"pkt",
"pmt"
],
"Description": "PhotoCap Template"
},
{
"Hex_signature": "50 41 52 31",
"ISO_8859-1": "PAR1",
"Offset": "0",
"Extension": "",
"Description": "Apache Parquet columnar file format"
},
{
"Hex_signature": "45 4D 58 32",
"ISO_8859-1": "EMX2",
"Offset": "0",
"Extension": "ez2",
"Description": "Emulator Emaxsynth samples"
},
{
"Hex_signature": "45 4D 55 33",
"ISO_8859-1": "EMU3",
"Offset": "0",
"Extension": [
"ez3",
"iso"
],
"Description": "Emulator III synth samples"
},
{
"Hex_signature": "1B 4C 75 61",
"ISO_8859-1": "?Lua",
"Offset": "0",
"Extension": "luac",
"Description": "Lua bytecode[63]"
},
{
"Hex_signature": [
"62 6F 6F 6B 00 00 00 00",
"6D 61 72 6B 00 00 00 00"
],
"ISO_8859-1": "book????mark????",
"Offset": "0",
"Extension": "alias",
"Description": "macOS file Alias[64] (Symbolic link)"
},
{
"Hex_signature": [
"5B 5A 6F 6E 65 54 72 61",
"6E 73 66 65 72 5D"
],
"ISO_8859-1": "[ZoneTransfer]",
"Offset": "0",
"Extension": "Identifier",
"Description": "Microsoft Zone Identifier for URL Security Zones[65]"
},
{
"Hex_signature": [
"52 65 63 65 69 76 65 64",
"3A"
],
"ISO_8859-1": "Received:",
"Offset": "0",
"Extension": "eml",
"Description": "Email Message var5[citation needed]"
},
{
"Hex_signature": [
"20 02 01 62 A0 1E AB 07",
"02 00 00 00"
],
"ISO_8859-1": "???b??«?????",
"Offset": "0",
"Extension": "tde",
"Description": "Tableau Datasource"
},
{
"Hex_signature": [
"37 48 03 02 00 00 00 00",
"58 35 30 39 4B 45 59"
],
"ISO_8859-1": "7H??????X509KEY",
"Offset": "0",
"Extension": "kdb",
"Description": "KDB file"
},
{
"Hex_signature": "85 ?? ?? 03",
"ISO_8859-1": "…???",
"Offset": "0",
"Extension": "pgp",
"Description": "PGP file [66]"
},
{
"Hex_signature": "28 B5 2F FD",
"ISO_8859-1": "(µ/ý",
"Offset": "0",
"Extension": "zst",
"Description": "Zstandard compress[67][68]"
},
{
"Hex_signature": "52 53 56 4B 44 41 54 41",
"ISO_8859-1": "RSVKDATA",
"Offset": "0",
"Extension": "rs",
"Description": "QuickZip rs compressed archive[69][70]"
},
{
"Hex_signature": "3A 29 0A",
"ISO_8859-1": ":)?",
"Offset": "0",
"Extension": "sml",
"Description": "Smile file"
},
{
"Hex_signature": "4A 6F 79 21",
"ISO_8859-1": "Joy!",
"Offset": "0",
"Extension": "",
"Description": "Preferred Executable Format"
},
{
"Hex_signature": "31 0A 30 30",
"ISO_8859-1": "1?00",
"Offset": "0",
"Extension": "srt",
"Description": "SubRip File"
},
{
"Hex_signature": "34 12 AA 55",
"ISO_8859-1": "4?ªU",
"Offset": "0",
"Extension": "vpk",
"Description": "VPK file, used to store game data for some Source Engine games"
},
{
"Hex_signature": "2A 2A 41 43 45 2A 2A",
"ISO_8859-1": "**ACE**",
"Offset": "0",
"Extension": "ace",
"Description": "ACE (compressed file format)[citation needed]"
},
{
"Hex_signature": "60 EA",
"ISO_8859-1": "`ê",
"Offset": "0",
"Extension": "arj",
"Description": "ARJ"
},
{
"Hex_signature": "49 53 63 28",
"ISO_8859-1": "ISc(",
"Offset": "0",
"Extension": "cab",
"Description": "InstallShield CAB Archive File"
},
{
"Hex_signature": "4B 57 41 4A",
"ISO_8859-1": "KWAJ",
"Offset": "0",
"Extension": "??_",
"Description": "Windows 3.1x Compressed File"
},
{
"Hex_signature": "53 5A 44 44",
"ISO_8859-1": "SZDD",
"Offset": "0",
"Extension": "??_",
"Description": "Windows 9x Compressed File"
},
{
"Hex_signature": "5A 4F 4F",
"ISO_8859-1": "ZOO",
"Offset": "0",
"Extension": "zoo",
"Description": "Zoo (file format)"
},
{
"Hex_signature": "50 31 0A",
"ISO_8859-1": "P1?",
"Offset": "0",
"Extension": "pbm",
"Description": "Portable bitmap ASCII"
},
{
"Hex_signature": "50 34 0A",
"ISO_8859-1": "P4?",
"Offset": "0",
"Extension": "pbm",
"Description": "Portable bitmap binary"
},
{
"Hex_signature": "50 32 0A",
"ISO_8859-1": "P2?",
"Offset": "0",
"Extension": "pgm",
"Description": "Portable Gray Map ASCII"
},
{
"Hex_signature": "50 35 0A",
"ISO_8859-1": "P5?",
"Offset": "0",
"Extension": "pgm",
"Description": "Portable Gray Map binary"
},
{
"Hex_signature": "50 33 0A",
"ISO_8859-1": "P3?",
"Offset": "0",
"Extension": "ppm",
"Description": "Portable Pixmap ASCII"
},
{
"Hex_signature": "50 36 0A",
"ISO_8859-1": "P6?",
"Offset": "0",
"Extension": "ppm",
"Description": "Portable Pixmap binary"
},
{
"Hex_signature": "D7 CD C6 9A",
"ISO_8859-1": "×ÍÆš",
"Offset": "0",
"Extension": "wmf",
"Description": "Windows Metafile"
},
{
"Hex_signature": "67 69 6D 70 20 78 63 66",
"ISO_8859-1": "gimp xcf",
"Offset": "0",
"Extension": "xcf",
"Description": "XCF (file format)"
},
{
"Hex_signature": [
"2F 2A 20 58 50 4D 20 2A",
"2F"
],
"ISO_8859-1": "/* XPM */",
"Offset": "0",
"Extension": "xpm",
"Description": "X PixMap"
},
{
"Hex_signature": "41 46 46",
"ISO_8859-1": "AFF",
"Offset": "0",
"Extension": "aff",
"Description": "Advanced Forensics Format"
},
{
"Hex_signature": "45 56 46 32",
"ISO_8859-1": "EVF2",
"Offset": "0",
"Extension": "Ex01",
"Description": "EnCase EWF version 2 format"
},
{
"Hex_signature": "45 56 46",
"ISO_8859-1": "EVF",
"Offset": "0",
"Extension": "e01",
"Description": "EnCase EWF version 1 format"
},
{
"Hex_signature": "51 46 49",
"ISO_8859-1": "QFI",
"Offset": "0",
"Extension": "qcow",
"Description": "qcow file format"
},
{
"Hex_signature": [
"52 49 46 46 ?? ?? ?? ??",
"41 43 4F 4E"
],
"ISO_8859-1": "RIFF????ACON",
"Offset": "0",
"Extension": "ani",
"Description": "Animated cursor"
},
{
"Hex_signature": [
"52 49 46 46 ?? ?? ?? ??",
"43 44 44 41"
],
"ISO_8859-1": "RIFF????CDDA",
"Offset": "0",
"Extension": "cda",
"Description": ".cda file"
},
{
"Hex_signature": [
"52 49 46 46 ?? ?? ?? ??",
"51 4C 43 4D"
],
"ISO_8859-1": "RIFF????QLCM",
"Offset": "0",
"Extension": "qcp",
"Description": "Qualcomm PureVoice file format"
},
{
"Hex_signature": [
"52 49 46 58 ?? ?? ?? ??",
"46 47 44 4D (big-endian)"
],
"ISO_8859-1": "RIFX????FGDM",
"Offset": "0",
"Extension": "dcr",
"Description": "Adobe Shockwave[71][72][73]"
},
{
"Hex_signature": [
"58 46 49 52 ?? ?? ?? ??",
"4D 44 47 46 (little-endian)"
],
"ISO_8859-1": "XFIR????MDGF",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": [
"52 49 46 58 ?? ?? ?? ??",
"4D 56 39 33 (big-endian)"
],
"ISO_8859-1": "RIFX????MV93",
"Offset": "0",
"Extension": [
"dir",
"dxr",
"drx"
],
"Description": "Macromedia Director file format[74][72][73]"
},
{
"Hex_signature": [
"58 46 49 52 ?? ?? ?? ??",
"33 39 56 4D (little-endian)"
],
"ISO_8859-1": "XFIR????39VM",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "46 4C 56",
"ISO_8859-1": "FLV",
"Offset": "0",
"Extension": "flv",
"Description": "Flash Video file"
},
{
"Hex_signature": [
"3C 3C 3C 20 4F 72 61 63",
"6C 65 20 56 4D 20 56 69",
"72 74 75 61 6C 42 6F 78",
"20 44 69 73 6B 20 49 6D",
"61 67 65 20 3E 3E 3E"
],
"ISO_8859-1": [
"<<< Orac",
"le VM Vi",
"rtualBox",
" Disk Im",
"age >>>"
],
"Offset": "0",
"Extension": "vdi",
"Description": "VirtualBox Virtual Hard Disk file format"
},
{
"Hex_signature": [
"63 6F 6E 6E 65 63 74 69",
"78"
],
"ISO_8859-1": "connectix",
"Offset": "0",
"Extension": "vhd",
"Description": "Windows Virtual PC Virtual Hard Disk file format"
},
{
"Hex_signature": "76 68 64 78 66 69 6C 65",
"ISO_8859-1": "vhdxfile",
"Offset": "0",
"Extension": "vhdx",
"Description": "Windows Virtual PC Windows 8 Virtual Hard Disk file format"
},
{
"Hex_signature": "49 73 5A 21",
"ISO_8859-1": "IsZ!",
"Offset": "0",
"Extension": "isz",
"Description": "Compressed ISO image"
},
{
"Hex_signature": "44 41 41",
"ISO_8859-1": "DAA",
"Offset": "0",
"Extension": "daa",
"Description": "Direct Access Archive PowerISO"
},
{
"Hex_signature": "4C 66 4C 65",
"ISO_8859-1": "LfLe",
"Offset": "0",
"Extension": "evt",
"Description": "Windows Event Viewer file format"
},
{
"Hex_signature": "45 6C 66 46 69 6C 65",
"ISO_8859-1": "ElfFile",
"Offset": "0",
"Extension": "evtx",
"Description": "Windows Event Viewer XML file format"
},
{
"Hex_signature": "73 64 62 66",
"ISO_8859-1": "sdbf",
"Offset": "8",
"Extension": "sdb",
"Description": "Windows customized database"
},
{
"Hex_signature": "50 4D 43 43",
"ISO_8859-1": "PMCC",
"Offset": "0",
"Extension": "grp",
"Description": "Windows 3.x Program Manager Program Group file format"
},
{
"Hex_signature": "4B 43 4D 53",
"ISO_8859-1": "KCMS",
"Offset": "0",
"Extension": "icm",
"Description": "ICC profile"
},
{
"Hex_signature": "72 65 67 66",
"ISO_8859-1": "regf",
"Offset": "0",
"Extension": "dat",
"Description": "Windows Registry file"
},
{
"Hex_signature": "21 42 44 4E",
"ISO_8859-1": "!BDN",
"Offset": "0",
"Extension": "pst",
"Description": "Microsoft Outlook Personal Storage Table file"
},
{
"Hex_signature": "44 52 41 43 4F",
"ISO_8859-1": "DRACO",
"Offset": "0",
"Extension": "drc",
"Description": "3D model compressed with Google Draco[75]"
},
{
"Hex_signature": "47 52 49 42",
"ISO_8859-1": "GRIB",
"Offset": "0",
"Extension": [
"grib",
"grib2"
],
"Description": "Gridded data (commonly weather observations or forecasts) in the WMO GRIB or GRIB2 format[76]"
},
{
"Hex_signature": "42 4C 45 4E 44 45 52",
"ISO_8859-1": "BLENDER",
"Offset": "0",
"Extension": "blend",
"Description": "Blender File Format[77]"
},
{
"Hex_signature": "00 00 00 0C 4A 58 4C 20 0D 0A 87 0A",
"ISO_8859-1": "????JXL???‡?",
"Offset": "0",
"Extension": "jxl",
"Description": "Image encoded in the JPEG XL format[78]"
},
{
"Hex_signature": "FF 0A",
"ISO_8859-1": "ÿ?",
"Offset": "",
"Extension": "",
"Description": ""
},
{
"Hex_signature": "00 01 00 00 00",
"ISO_8859-1": "?????",
"Offset": "0",
"Extension": [
"ttf",
"tte",
"dfont"
],
"Description": "TrueType font"
},
{
"Hex_signature": "4F 54 54 4F",
"ISO_8859-1": "OTTO",
"Offset": "0",
"Extension": "otf",
"Description": "OpenType font[79]"
},
{
"Hex_signature": "23 25 4D 6F 64 75 6C 65",
"ISO_8859-1": "#%Module",
"Offset": "0",
"Extension": "",
"Description": "Modulefile for Environment Modules[80]"
},
{
"Hex_signature": [
"4D 53 57 49 4D 00 00 00",
"D0 00 00 00 00"
],
"ISO_8859-1": "MSWIM???Ð????",
"Offset": "0",
"Extension": [
"wim",
"swm",
"esd"
],
"Description": "Windows Imaging Format file"
},
{
"Hex_signature": "21 2D 31 53 4C 4F 42 1F",
"ISO_8859-1": "!-1SLOB?",
"Offset": "0",
"Extension": "slob",
"Description": "Slob (sorted list of blobs) is a read-only, compressed data store with dictionary-like interface[81]"
},
{
"Hex_signature": "AC ED",
"ISO_8859-1": "’",
"Offset": "0",
"Extension": "",
"Description": "Serialized Java Data[82]"
},
{
"Hex_signature": "43 72 65 61 74 69 76 65 20 56 6F 69 63 65 20 46 69 6C 65 1A 1A 00",
"ISO_8859-1": "Creative Voice File",
"Offset": "voc",
"Extension": "0",
"Description": "Creative Voice file"
},
{
"Hex_signature": "2E 73 6E 64",
"ISO_8859-1": ".snd",
"Offset": [
"au",
"snd"
],
"Extension": "0",
"Description": "Au audio file format"
},
{
"Hex_signature": "DB 0A CE 00",
"ISO_8859-1": "",
"Offset": "0",
"Extension": "",
"Description": "OpenGL Iris Perfomer .PFB (Performer Fast Binary)[83]"
},
{
"Hex_signature": "48 5a 4c 52 00 00 00 18",
"ISO_8859-1": "HZLR",
"Offset": "0",
"Extension": ".hazelrules",
"Description": "Noodlesoft Hazel [84]"
},
{
"Hex_signature": "46 4C 68 64",
"ISO_8859-1": "FLhd",
"Offset": "0",
"Extension": "flp",
"Description": "FL Studio Project File"
},
{
"Hex_signature": "31 30 4C 46",
"ISO_8859-1": "10LF",
"Offset": "0",
"Extension": "flm",
"Description": "FL Studio Mobile Project File"
}
]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment