List of file signatures

From Wikipedia, the free encyclopedia - View original article

 
Jump to: navigation, search

This is a list of file signatures, data used to identify or verify the content of a file. Such signatures are also known as magic numbers and are further explained in the Magic number (programming) article.

Many binary file formats are not intended to be read as text. If such a file is accidentally viewed as a text file, its contents will be unintelligible. However, sometimes the file signature can be recognizable when interpreted as text. The column ISO 8859-1 shows how the file signature appears when interpreted as text in the common ISO 8859-1 encoding.

Hex signatureISO 8859-1OffsetFile extensionDescription
00.0PIC

PIF
SEA
YTR

IBM Storyboard bitmap file

Windows Program Information File
Mac Stuffit Self-Extracting Archive
IRIS OCR data file

00 00 00 00 00 00 00 00

00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00

........

........
........

11PDBPalmPilot Database/Document File
BE BA FE CA...0DBAPalm Desktop Calendar Archive
00 01 42 44...0DBAPalm Desktop To Do Archive
00 01 44 54...0TDAPalm Desktop Calendar Archive
00 01 00 00...0...Palm Desktop Data File (Access format)
00 00 01 00....0icoComputer icon encoded in ICO file format[1]
00 00 00 nn 66 74 79 70

33 67 70

....ftyp

3gp

03GG, 3GP, 3G23rd Generation Partnership Project 3GPP (nn=0x14)

and 3GPP2 (nn=0x20) multimedia files

00 00 00 nn 66 74 79 70

33 67 70 35

....ftyp

3gp5

0MP4MPEG-4 video files
1F 9D..0z, tar.zcompressed file (often tar zip)

using Lempel-Ziv-Welch algorithm

1F A0..0z, tar.zCompressed file (often tar zip)

using LZH algorithm

42 5A 68BZh0bz2Compressed file using Bzip2 algorithm
47 49 46 38 37 61

47 49 46 38 39 61

GIF87a

GIF89a

0gifImage file encoded in the Graphics Interchange Format (GIF)[2]
49 49 2A 00 (little endian format) or
4D 4D 00 2A (big endian format)
II*. or
MM.*
0tif, tiffTagged Image File Format
80 2A 5F D7.*_.0cinKodak Cineon image
53 44 50 58 (big endian format) or
58 50 44 53 (little endian format)
SDPX or
XPDS
0dpxSMPTE DPX image
76 2F 31 01v/1.0exrOpenEXR image
FF D8 FFÿØÿà0jpg, jpegJPEG
46 4F 52 4D nn nn nn nn 49 4C 42 4DFORM....ILBM0, anyilbm, lbm, ibm, iffIFF Interleaved Bitmap Image
46 4F 52 4D nn nn nn nn 38 53 56 58FORM....8SVX0, any8svx, 8sv, svx, snd, iffIFF 8-Bit Sampled Voice
46 4F 52 4D nn nn nn nn 41 43 42 4DFORM....ACBM0, anyacbm, iffAmiga Contiguous Bitmap
46 4F 52 4D nn nn nn nn 41 4E 42 4DFORM....ANBM0, anyanbm, iffIFF Animated Bitmap
46 4F 52 4D nn nn nn nn 41 4E 49 4DFORM....ANIM0, anyanim, iffIFF CEL Animation
46 4F 52 4D nn nn nn nn 46 41 58 58FORM....FAXX0, anyfaxx, fax, iffIFF Facsimile Image
46 4F 52 4D nn nn nn nn 46 54 58 54FORM....FTXT0, anyftxt, txt, iffIFF Formatted Text
46 4F 52 4D nn nn nn nn 53 4D 55 53FORM....SMUS0, anysmus, smu, mus, iffIFF Simple Musical Score
46 4F 52 4D nn nn nn nn 43 4D 55 53FORM....CMUS0, anycmus, mus, iffIFF Musical Score
46 4F 52 4D nn nn nn nn 59 55 56 4EFORM....YUVN0, anyyuvn, yuv, iffIFF YUV Image
46 4F 52 4D nn nn nn nn 46 41 4E 54FORM....FANT0, anyiffAmiga Fantavision Movie
4D 5AMZ0exeDOS MZ executable file format and its descendants (including NE and PE)
50 4B 03 04, 50 4B 05 06 (empty archive) or 50 4B 07 08 (spanned archive)PK..0zip, jar, odt, ods, odp, docx, xlsx, pptx, apkzip file format and formats based on it, such as JAR, ODF, OOXML
52 61 72 21 1A 07 00Rar!...0rarRAR archive version 1.50 onwards[3]
52 61 72 21 1A 07 01 00Rar!....0rarRAR archive version 5.0 onwards[4]
7F 45 4C 46.ELF0Executable and Linkable Format
89 50 4E 47 0D 0A 1A 0A.PNG....0pngImage encoded in the Portable Network Graphics format[5]
CA FE BA BEÊþº¾0classJava class file, Mach-O Fat Binary
EF BB BF0UTF-8 encoded Unicode byte order mark, commonly seen in text files.
FE ED FA CE........0 or typically 0x1000Mach-O binary (32-bit)
FE ED FA CF........0 or typically 0x1000Mach-O binary (64-bit)
CE FA ED FE........0Mach-O binary (reverse byte ordering scheme, 32-bit)[6]
CF FA ED FE........0Mach-O binary (reverse byte ordering scheme, 64-bit)[7]
FF FE..0Byte-order mark for text file encoded in little-endian 16-bit Unicode Transfer Format
FF FE 00 00....0Byte-order mark for text file encoded in little-endian 32-bit Unicode Transfer Format
25 21 50 53 %!PS0psPostScript document
25 50 44 46 %PDF0pdfPDF document
30 26 B2 75 8E 66 CF 11

A6 D9 00 AA 00 62 CE 6C

0&²u.fÏ.

¦Ù.ª.bÎl

0asf, wma, wmvAdvanced Systems Format[8]
24 53 44 49 30 30 30 31$SDI00010System Deployment Image, a disk image format used by Microsoft
4F 67 67 53OggS0ogg, oga, ogvOgg, an open source media container format
38 42 50 538BPS0psdPhotoshop Document file, Adobe Photoshop's native file format
46 4F 52 4D nn nn nn nn 41 49 46 46FORM....AIFF0, anyaiff, aif, aifc, snd, iffAudio Interchange File Format
52 49 46 46 nn nn nn nn 57 41 56 45RIFF....WAVE0wavWaveform Audio File Format
FF FB˙ű0mp3MPEG-1 Layer 3 file without an ID3 tag or with an ID3v1 tag (which's appended at the end of the file)
49 44 33ID30mp3MP3 file with an ID3v2 container
42 4DBM0bmp, dibBMP file, a bitmap format used mostly in the Windows world
43 44 30 30 31CD0010x8001, 0x8801 or 0x9001isoISO9660 CD/DVD image file[9]
53 49 4d 50 4c 45 20 20

3d 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20
20 20 20 20 20 54

SIMPLE = T0fitsFlexible Image Transport System (FITS)[10]
66 4C 61 43fLaC0flacFree Lossless Audio Codec[11]
4D 54 68 64MThd0mid, midiMIDI sound file[12]
D0 CF 11 E0docMicrosoft Office documents
64 65 78 0A 30 33 35 00dex
035
0dexDalvik Executable
43 72 32 34Cr240crxGoogle Chrome extension[13] or packaged app[14]

See also[edit]

References[edit]

  1. ^ Icons (at MSDN)
  2. ^ GRAPHICS INTERCHANGE FORMAT(sm) Version 89a
  3. ^ "TechNote.txt: RAR version 4.00 - Technical information". 2010-12-01. "The marker block is actually considered as a fixed byte sequence: 0x52 0x61 0x72 0x21 0x1a 0x07 0x00" 
  4. ^ "RAR 5.0 archive format". Retrieved 2013-05-01. 
  5. ^ PNG (Portable Network Graphics) Specification Version 1.0
  6. ^ OS X ABI Mach-O File Format Reference
  7. ^ OS X ABI Mach-O File Format Reference
  8. ^ "ASF (Advanced Systems Format)". 
  9. ^ Gary C. Kessler (21 October 2012). "File Signatures Table". Retrieved 28 December 2012. 
  10. ^ "Flexible Image Transport System (FITS), Version 3.0 - File type signifiers". 2012-09-26. Retrieved 24 January 2013. 
  11. ^ Josh Coalson. "FLAC - format". Retrieved 4 April 2013. ""fLaC", the FLAC stream marker in ASCII, meaning byte 0 of the stream is 0x66, followed by 0x4C 0x61 0x43" 
  12. ^ http://filesignatures.net/index.php?search=mid&mode=EXT
  13. ^ http://developer.chrome.com/extensions/crx.html
  14. ^ http://developer.chrome.com/apps/crx.html

External links[edit]