337 records
What format is this file, judged by the bytes it starts with?
337 records covering 336 hex signatures, one fact each. Every value is transcribed from the source that states it and carries the sentence it was taken from: 1 source across 1 site, last checked 2026-09-22, due for re-check by 2027-09-22. Every record is listed below, each linking the page its value came from.
About this data
The leading bytes (magic number / file signature) that identify a file format, with its usual extension. Answers 'what actually is this file' when the extension is wrong or missing. Covers what Wikipedia's List of file signatures publishes — a broad cross-section, not every format that exists.
The data
| Hex signature | Offset | Extension | Format |
|---|---|---|---|
| 00 | 0 | PIC PIF SEA YTR | IBM Storyboard bitmap file Windows Program Information File Mac Stuffit Self-Extracting Archive IRIS OCR data file |
| 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 11 | PDB | PalmPilot Database/Document File |
| 00 00 00 0C 4A 58 4C 20 0D 0A 87 0A | 0 | jxl | Image encoded in the JPEG XL format |
| 00 00 00 0C 6A 50 20 20 0D 0A 87 0A | 0 | jp2 j2k jpf jpm jpg2 j2c jpc jpx mj2 | JPEG 2000 format |
| 00 00 00 3C 00 00 00 3F 00 00 00 78 00 00 00 6D 00 00 00 6C 00 00 00 20 | 0 after BOM | xml (UTF-32BE) | eXtensible Markup Language |
| 00 00 00 18 66 74 79 70 68 65 69 63 00 00 00 00 | 0 | heif | Apple HEIF image file |
| 00 00 01 00 | 0 | ico | Computer icon encoded in ICO file format |
| 00 00 1A 00 00 10 04 00 00 00 00 00 | 0 | wk3 | Lotus 1-2-3 spreadsheet (v3) file |
| 00 00 1A 00 02 10 04 00 00 00 00 00 | 0 | wk4 wk5 | Lotus 1-2-3 spreadsheet (v4, v5) file |
| 00 00 1A 00 05 10 04 | 0 | 123 | Lotus 1-2-3 spreadsheet (v9) file |
| 00 00 01 B3 | 0 | mpg mpeg | MPEG-1 video and MPEG-2 video (MPEG-1 Part 2 and MPEG-2 Part 2) |
| 00 00 01 BA | 0 | m2p vob mpg mpeg | MPEG Program Stream (MPEG-1 Part 1 (essentially identical) and MPEG-2 Part 1) |
| 00 00 02 00 06 04 06 00 08 00 00 00 00 00 | 0 | wk1 | Lotus 1-2-3 spreadsheet (v1) file |
| 00 00 03 F3 | 0 | Amiga Hunk executable file | |
| 00 00 49 49 58 50 52 (little-endian) 00 00 4D 4D 58 50 52 (big-endian) | 0 | qxd | Quark Express document |
| 00 00 FE FF | 0 | txt others | UTF-32BE byte order mark for text |
| 00 01 00 00 | 0 | Palm Desktop Data File (Access format) | |
| 00 01 00 00 00 | 0 | ttf tte dfont | TrueType font |
| 00 01 00 00 4D 53 49 53 41 4D 20 44 61 74 61 62 61 73 65 | 0 | mny | Microsoft Money file |
| 00 01 00 00 53 74 61 6E 64 61 72 64 20 4A 65 74 20 44 42 | 0 | mdb | Microsoft Access Database |
| 00 01 00 00 53 74 61 6E 64 61 72 64 20 41 43 45 20 44 42 | 0 | accdb | Microsoft Access 2007 Database |
| 00 01 42 44 | 0 | DBA | Palm Desktop To Do Archive |
| 00 01 44 54 | 0 | TDA | Palm Desktop Calendar Archive |
| 00 3C 00 3F 00 78 00 6D 00 6C 00 20 | 0 after BOM | xml (UTF-16BE) | eXtensible Markup Language |
| 00 61 73 6D | 0 | wasm | WebAssembly binary format |
| 0A 0D 0D 0A | 0 | pcapng | PCAP Next Generation Dump File Format |
| 0A 16 6F 72 67 2E 62 69 74 63 6F 69 6E 2E 70 72 | 0 | wallet | MultiBit Bitcoin wallet file |
| 0D 44 4F 43 | 0 | doc | DeskMate Document file |
| 0D F0 1D C0 | 0 | cdb | MikroTik WinBox Connection Database (Address Book) |
| 0E 03 13 01 | 0 | hdf4 h4 | Data stored in version 4 of the Hierarchical Data Format. |
| 0E 4E 65 72 6F 49 53 4F | 0 | nri | Nero CD Compilation |
| 0E 57 4B 53 | 0 | wks | DeskMate Worksheet |
| 0E FE FF | 0 | txt others | SCSU byte order mark for text |
| 0F 53 49 42 45 4C 49 55 53 | 0 | sib | Sibelius Music - Score file |
| 1a 08 | 0 | arc | ARC archive file |
| 1A 45 DF A3 | 0 | mkv mka mks mk3d webm | Matroska media container, including WebM |
| 1B 4C 75 61 | 0 | luac | Lua bytecode |
| 1F 8B | 0 | gz tar.gz | GZIP compressed file |
| 1F 9D | 0 | z tar.z | compressed file (often tar zip) using Lempel-Ziv-Welch algorithm |
| 1F A0 | 0 | z tar.z | Compressed file (often tar zip) using LZH algorithm |
| 01 FF 02 04 03 02 | 0 | drw | Micrografx vector graphic file |
| 02 00 5a 57 52 54 00 00 00 00 00 00 00 00 00 00 | 0 | cwk | Claris Works word processing doc |
| 02 64 73 73 | 0 | dss | Digital Speech Standard (Olympus, Grundig, & Phillips) v2 |
| 2A 2A 41 43 45 2A 2A | 7 | ace | ACE (compressed file format) [ citation needed ] |
| 2B 2F 76 38 2B 2F 76 39 2B 2F 76 2B 2B 2F 76 2F | 0 | UTF-7 byte order mark for text | |
| 2D 2D 2D 2D 2D 42 45 47 49 4E 20 4F 50 45 4E 53 53 48 20 50 52 49 56 41 54 45 20 4B 45 59 2D 2D 2D 2D 2D | 0 | OpenSSH private key file | |
| 2D 2D 2D 2D 2D 42 45 47 49 4E 20 43 45 52 54 49 46 49 43 41 54 45 2D 2D 2D 2D 2D | 0 | crt pem | PEM encoded X.509 certificate |
| 2D 2D 2D 2D 2D 42 45 47 49 4E 20 50 52 49 56 41 54 45 20 4B 45 59 2D 2D 2D 2D 2D | 0 | key pem | PEM encoded X.509 PKCS#8 private key |
| 2D 2D 2D 2D 2D 42 45 47 49 4E 20 53 53 48 32 20 4B 45 59 2D 2D 2D 2D 2D | 0 | pub | OpenSSH public key file |
| 2D 3D 3D 2D 2D 3D 3D 2D 2D 3D 3D 2D 2D 3D 3D 2D | 0 | utoc | Unreal Engine Table of Contents file |
| 2D 6C 68 30 2D | 2 | lzh | Lempel Ziv Huffman archive file Method 0 (No compression) |
| 2D 6C 68 35 2D | 2 | lzh | Lempel Ziv Huffman archive file Method 5 (8 KiB sliding window) |
| 2E 73 6E 64 | 0 | au snd | Au audio file format |
| 2F 2A 20 58 50 4D 20 2A 2F | 0 | xpm | X PixMap |
| 03 00 00 00 41 50 50 52 | 0 | adx | Approach index file |
| 03 64 73 73 | 0 | dss | Digital Speech Standard (Olympus, Grundig, & Phillips) v3 |
| 3A 29 0A | 0 | sml | Smile file |
| 3a 42 61 73 65 20 | 0 | cnt | Windows 3.x - Windows 95 Help Contents |
| 3C 00 00 00 3F 00 00 00 78 00 00 00 6D 00 00 00 6C 00 00 00 20 00 00 00 | 0 after BOM | xml (UTF-32LE) | eXtensible Markup Language |
| 3C 00 3F 00 78 00 6D 00 6C 00 20 | 0 after BOM | xml (UTF-16LE) | eXtensible Markup Language |
| 3C 3F 78 6D 6C 20 | 0 after BOM | xml (UTF-8 or other 8-bit encodings) | eXtensible Markup Language |
| 3C 72 6F 62 6C 6F 78 21 | 0 | rbxl | Roblox place file |
| 3F 5F | 0 | hlp | Windows 3.x/95/98 Help file |
| 04 22 4D 18 | 0 | lz4 | LZ4 Frame Format [62] Remark: LZ4 block format does not offer any magic bytes. |
| 4A 6F 79 21 | 0 | Preferred Executable Format | |
| 4B 43 4D 53 | 0 | icm | ICC profile |
| 4B 44 4D | 0 | vmdk | VMDK files |
| 4B 50 4B 41 | 0 | pak | Capcom RE Engine game data archives |
| 4B 57 41 4A | 0 | ??_ | Windows 3.1x Compressed File |
| 4C 5A 49 50 | 0 | lz | lzip compressed file |
| 4C 6F A7 94 93 40 | 0 after BOM | xml (EBCDIC) | eXtensible Markup Language |
| 4C 50 4B 53 48 48 52 48 | 0 | journal | journald log file |
| 4C 66 4C 65 | 0 | evt | Windows Event Viewer file format |
| 4D 3C B2 A1 (little-endian) | 0 | pcap | Libpcap File Format (nanosecond-resolution) |
| 4D 4C 56 49 | 0 | MLV | Magic Lantern Video file |
| 4D 4D 00 2A (big-endian) | 0 | tif tiff | Tagged Image File Format (TIFF) |
| 4D 4D 00 2B (big-endian) | 0 | tif tiff | BigTIFF |
| 4D 5A | 0 | exe dll mui sys scr cpl ocx ax iec ime rs tsp fon efi | DOS MZ executable and its descendants (including NE and PE) |
| 4D 49 4C 20 | 0 | stg | "SEAN : Session Analysis" Training file. Also used in compatible software "Rpw : Rowperfect for Windows" and "RP3W : ROWPERFECT3 for Windows". |
| 4D 53 43 46 | 0 | cab | Microsoft Cabinet file |
| 4D 53 48 7C 42 53 48 7C | 0 | hl7 | Health Level Seven (HL7) Standard for electronic data exchange |
| 4D 53 57 49 4D 00 00 00 D0 00 00 00 00 | 0 | wim swm esd | Windows Imaging Format file |
| 4D 54 68 64 | 0 | mid midi | MIDI sound file |
| 4E 45 53 1A | 0 | nes | Nintendo Entertainment System ROM file |
| 4E 55 52 55 49 4D 47 4E 55 52 55 50 41 4C | 0 | nui nup | nuru ASCII/ANSI image and palette files |
| 4F 41 52 ?? | 0 | oar | OAR file archive format, where ?? is the format version. |
| 4F 52 43 | 0 | orc | Apache ORC (Optimized Row Columnar) file format |
| 4F 54 54 4F | 0 | otf | OpenType font |
| 4F 62 6A 01 | 0 | avro | Apache Avro binary file format |
| 4F 67 67 53 | 0 | ogg oga ogv | Ogg, an open source media container format |
| 05 07 00 00 42 4F 42 4F 05 07 00 00 00 00 00 00 00 00 00 00 00 01 | 0 | cwk | AppleWorks 5 document |
| 5A 4D | 0 | exe | DOS ZM executable and its descendants (rare) |
| 5A 4F 4F | 0 | zoo | Zoo (file format) |
| 5B 5A 6F 6E 65 54 72 61 6E 73 66 65 72 5D | 0 | Identifier | Microsoft Zone Identifier for URL Security Zones |
| 06 0E 2B 34 02 05 01 01 0D 01 02 01 01 02 | 0-65535 (run-in) | mxf | Material Exchange Format file |
| 06 06 ED F5 D8 1D 46 E5 BD 31 EF E7 FE 74 B7 1D | 0 | indd | Adobe InDesign document |
| 06 07 E1 00 42 4F 42 4F 06 07 E1 00 00 00 00 00 00 00 00 00 00 01 | 0 | cwk | AppleWorks 6 document |
| 6B 6F 6C 79 | end–512 | dmg | Apple Disk Image file |
| 6D 61 69 6E 2E 62 73 | 0 | mgw | Nintendo Game & Watch image file |
| 6D 64 66 00 | 0 | m | M2 Archive, used by game developer M2 |
| 6E 2B 31 00 | 344 | nii | Single file NIfTI format, used extensively in biomedical imaging. |
| 6E 69 31 00 | 344 | hdr | Header file of a .hdr/.img pair in NIfTI format, used extensively in biomedical imaging. |
| 07 53 4B 46 | 0 | skf | SkinCrafter skin file |
| 07 64 74 32 64 64 74 64 | 0 | dtd | DesignTools 2D Design file |
| 7B 5C 72 74 66 31 | 0 | rtf | Rich Text Format |
| 7C 61 8A B2 | 0 | hpapp hpprgm hpsettings | HP Prime graphing calculator file |
| 7F 45 4C 46 | 0 | none, .axf, .bin, .elf, .o, .out, .prx, .puff, .ko, .mod, .so | Executable and Linkable Format |
| 8B 45 52 02 00 00 00 | 0 | toast | Roxio Toast disc image file |
| 8C 0A 00 | 0 | ucas | Unreal Engine Compressed Asset Storage file |
| 20 02 01 62 A0 1E AB 07 02 00 00 00 | 0 | tde | Tableau Datasource |
| 21 2D 31 53 4C 4F 42 1F | 0 | slob | Slob (sorted list of Object storages) is a read-only, compressed data store with dictionary-like interface |
| 21 3C 61 72 63 68 3E 0A | 0 | deb | linux deb file |
| 21 3C 73 79 6D 6C 69 6E 6B 3E | 0 | Cygwin symlinks | |
| 21 42 44 4E | 0 | pst | Microsoft Outlook Personal Storage Table file |
| 23 3F 52 41 44 49 41 4E 43 45 0A | 0 | hdr | Radiance High Dynamic Range image file |
| 23 20 44 69 73 6B 20 44 65 73 63 72 69 70 74 6F | 0 | vmdk | VMware 4 Virtual Disk description file (split disk) |
| 23 21 | 0 | Script or data to be passed to the program following the shebang (#!) | |
| 23 21 41 4D 52 | 0 | amr | Adaptive Multi-Rate ACELP (Algebraic Code Excited Linear Prediction) Codec, commonly audio format with GSM cell phones. |
| 23 21 53 49 4C 4B 0A | 0 | sil | Audio compression format developed by Skype |
| 23 25 4D 6F 64 75 6C 65 | 0 | Modulefile for Environment Modules | |
| 23 40 7E 5E | 0 | vbe | VBScript Encoded script |
| 23 45 58 54 4D 33 55 | 0 | m3u m3u8 | Multimedia playlist |
| 24 53 44 49 30 30 30 31 | 0 | System Deployment Image, a disk image format used by Microsoft | |
| 25 21 50 53 | 0 | ps | PostScript document |
| 25 21 50 53 2D 41 64 6F 62 65 2D 33 2E 30 20 45 50 53 46 2D 33 2E 30 | 0 | eps epsf | Encapsulated PostScript file version 3.0 |
| 25 21 50 53 2D 41 64 6F 62 65 2D 33 2E 31 20 45 50 53 46 2D 33 2E 30 | 0 | eps epsf | Encapsulated PostScript file version 3.1 |
| 25 50 44 46 2D | 0 | PDF document | |
| 27 05 19 56 | 0 | U-Boot / uImage. Das U-Boot Universal Boot Loader. | |
| 28 B5 2F FD | 0 | zst | Zstandard compress |
| 30 26 B2 75 8E 66 CF 11 A6 D9 00 AA 00 62 CE 6C | 0 | asf wma wmv | Advanced Systems Format |
| 30 37 30 37 30 31 | 0 | cpio | cpio "new" ASCII archive file |
| 30 37 30 37 30 32 | 0 | cpio | cpio ASCII archive file with crc |
| 30 37 30 37 30 37 | 0 | cpio | cpio ASCII archive file |
| 31 30 4C 46 | 0 | flm | FL Studio Mobile Project File |
| 34 12 AA 55 | 0 | vpk | VPK file, used to store game data for some Source Engine games |
| 37 7A BC AF 27 1C | 0 | 7z | 7-Zip File Format |
| 37 48 03 02 00 00 00 00 58 35 30 39 4B 45 59 | 0 | kdb | KDB file |
| 38 42 50 53 | 0 | psd | Photoshop Document file, Adobe Photoshop's native file format |
| 41 46 46 | 0 | aff | Advanced Forensics Format |
| 41 47 44 33 | 0 | fh8 | FreeHand 8 document |
| 41 52 43 | 0 | arc | Capcom MT Framework game data archives |
| 41 53 54 4d 2d 45 35 37 | 0 | e57 | ASTM E57 3D file format |
| 41 54 26 54 46 4F 52 4D ?? ?? ?? ?? 44 4A 56 | 0 | djvu djv | DjVu document The following byte is either 55 (U) for single-page or 4D (M) for multi-page documents. |
| 41 72 43 | 0 | arc cdx | FreeArc file |
| 42 4C 45 4E 44 45 52 | 0 | blend | Blender File Format |
| 42 4D | 0 | bmp dib | BMP file, a bitmap format used mostly in the Windows world |
| 42 5A 68 | 0 | bz2 | Compressed file using Bzip2 algorithm |
| 42 41 43 4B 4D 49 4B 45 44 49 53 4B | 0 | bac | AmiBack Amiga Backup data file |
| 42 50 47 FB | 0 | bpg | Better Portable Graphics format |
| 42 53 44 49 46 46 34 30 | 0 | bsdiff binary patch | |
| 43 5A 50 58 | 0 | czx | Czip X encrypted archive (v4.x) |
| 43 36 34 20 43 41 52 54 52 49 44 47 45 20 20 20 | 0 | crt | Commodore 64 cartridge image |
| 43 36 34 20 74 61 70 65 20 69 6D 61 67 65 20 66 69 6C 65 | 0 | t64 | Commodore 64 tape image |
| 43 36 34 46 69 6C 65 00 | 0 | P00 (P01, P02,...) | Commodore 64 binary file (source: *.P00 format for Power64 emulator) |
| 43 44 30 30 31 | 0x5EAC9 | cdi | CD-i CD image file |
| 43 44 30 30 31 | 0x8001 0x8801 0x9001 | iso | ISO9660 CD/DVD image file |
| 43 50 43 48 | 0 | pch | Clang pre-compiled header |
| 43 57 53 | 0 | swf | Adobe Flash .swf |
| 43 72 32 34 | 0 | crx | Google Chrome extension [48] or packaged app |
| 43 72 65 61 74 69 76 65 20 56 6F 69 63 65 20 46 69 6C 65 1A 1A 00 | 0 | voc | Creative Voice file |
| 44 41 41 | 0 | daa | Direct Access Archive PowerISO |
| 44 43 4D 01 50 41 33 30 50 41 33 30 | 0 | Windows Update Binary Delta Compression file | |
| 44 49 43 4D | 128 | dcm | DICOM Medical File Format |
| 44 52 41 43 4F | 0 | drc | 3D model compressed with Google Draco |
| 44 55 43 4B | 8 | DuckDB database file (source: Source code) | |
| 45 4D 55 33 | 0 | ez3 iso | Emulator III synth samples |
| 45 4D 58 32 | 0 | ez2 | Emulator Emaxsynth samples |
| 45 6C 66 46 69 6C 65 | 0 | evtx | Windows Event Viewer XML file format |
| 45 52 02 00 00 00 | 0 | toast | Roxio Toast disc image file |
| 45 56 46 | 0 | e01 | EnCase EWF version 1 format |
| 45 56 46 32 | 0 | Ex01 | EnCase EWF version 2 format |
| 46 4C 49 46 | 0 | flif | Free Lossless Image Format |
| 46 4C 56 | 0 | flv | Flash Video file |
| 46 4C 68 64 | 0 | flp | FL Studio Project File |
| 46 4F 52 4D ?? ?? ?? ?? 38 53 56 58 | 0 any | 8svx 8sv svx snd iff | IFF 8-Bit Sampled Voice |
| 46 4F 52 4D ?? ?? ?? ?? 41 4E 42 4D | 0 any | anbm iff | IFF Animated Bitmap |
| 46 4F 52 4D ?? ?? ?? ?? 41 4E 49 4D | 0 any | anim iff | IFF CEL Animation |
| 46 4F 52 4D ?? ?? ?? ?? 41 43 42 4D | 0 any | acbm iff | Amiga Contiguous Bitmap |
| 46 4F 52 4D ?? ?? ?? ?? 41 49 46 46 | 0 any | aiff aif aifc snd iff | Audio Interchange File Format |
| 46 4F 52 4D ?? ?? ?? ?? 43 4D 55 53 | 0 any | cmus mus iff | IFF Musical Score |
| 46 4F 52 4D ?? ?? ?? ?? 46 41 4E 54 | 0 any | iff | Amiga Fantavision Movie |
| 46 4F 52 4D ?? ?? ?? ?? 46 41 58 58 | 0 any | faxx fax iff | IFF Facsimile Image |
| 46 4F 52 4D ?? ?? ?? ?? 46 54 58 54 | 0 any | ftxt iff | IFF Formatted Text |
| 46 4F 52 4D ?? ?? ?? ?? 49 4C 42 4D | 0 any | ilbm lbm ibm iff | IFF Interleaved Bitmap Image |
| 46 4F 52 4D ?? ?? ?? ?? 53 4D 55 53 | 0 any | smus smu mus iff | IFF Simple Musical Score |
| 46 4F 52 4D ?? ?? ?? ?? 59 55 56 4E | 0 any | yuvn yuv iff | IFF YUV Image |
| 46 57 53 | 0 | swf | Adobe Flash .swf |
| 47 | 0 0xBC 0x178 ... (every 188th byte) | ts tsv tsa mpg mpeg | MPEG Transport Stream (MPEG-2 Part 1) |
| 47 49 46 38 37 61 47 49 46 38 39 61 | 0 | gif | Image file encoded in the Graphics Interchange Format (GIF) |
| 47 52 49 42 | 0 | grib grib2 | Gridded data (commonly weather observations or forecasts) in the WMO GRIB or GRIB2 format |
| 47 53 52 2D 31 35 34 31 | 0 | g64 | Commodore 64 1541 disk image (G64 format) |
| 48 5a 4c 52 00 00 00 18 | 0 | hazelrules | Noodlesoft Hazel |
| 49 4E 44 58 | 0 | idx | AmiBack Amiga Backup index file |
| 49 44 33 | 0 | mp3 | MP3 file with an ID3v2 container |
| 49 49 2A 00 10 00 00 00 43 52 | 0 | cr2 | Canon RAW Format Version 2 [12] Canon's RAW format is based on TIFF. |
| 49 49 2A 00 (little-endian) | 0 | tif tiff | Tagged Image File Format (TIFF) |
| 49 49 2B 00 (little-endian) | 0 | tif tiff | BigTIFF |
| 49 53 63 28 | 0 | cab | InstallShield CAB Archive File |
| 49 54 53 46 03 00 00 00 60 00 00 00 | 0 | chm | MS Windows HtmlHelp Data |
| 49 57 41 44 | 0 | wad | internal WAD (main resource file of Doom) |
| 49 73 5A 21 | 0 | isz | Compressed ISO image |
| 50 4B 03 04 50 4B 05 06 (empty archive) 50 4B 07 08 (spanned archive) | 0 | zip aar apk docx epub ipa jar kmz maff msix odp ods odt pk3 pk4 pptx usdz vsdx xlsx xpi whl | zip file format and formats based on it, such as EPUB, JAR, ODF, OOXML |
| 50 4D 4F 43 43 4D 4F 43 | 0 | dat | Windows Files And Settings Transfer Repository [53] See also USMT 3.0 (Win XP) [54] and USMT 4.0 (Win 7) [55] User Guides |
| 50 4D 43 43 | 0 | grp | Windows 3.x Program Manager Program Group file format |
| 50 31 0A | 0 | pbm | Portable bitmap ASCII |
| 50 32 0A | 0 | pgm | Portable Gray Map ASCII |
| 50 33 0A | 0 | ppm | Portable Pixmap ASCII |
| 50 34 0A | 0 | pbm | Portable bitmap binary |
| 50 35 0A | 0 | pgm | Portable Gray Map binary |
| 50 36 0A | 0 | ppm | Portable Pixmap binary |
| 50 41 52 31 | 0 | Apache Parquet columnar file format | |
| 50 57 53 33 | 0 | psafe3 | Password Gorilla Password Database |
| 50 75 54 54 59 2D 55 73 65 72 2D 4B 65 79 2D 46 69 6C 65 2D 32 3A | 0 | ppk | PuTTY private key file version 2 |
| 50 75 54 54 59 2D 55 73 65 72 2D 4B 65 79 2D 46 69 6C 65 2D 33 3A | 0 | ppk | PuTTY private key file version 3 |
| 51 46 49 | 0 | qcow | qcow file format |
| 52 4b 4d 43 32 31 30 | 0 | Vormetric Encryption DPM Version 2.1 Header | |
| 52 4E 43 01 52 4E 43 02 | 0 | Compressed file using Rob Northen Compression (version 1 and 2) algorithm | |
| 52 41 46 36 34 | 0 | Report Builder file from Digital Metaphors | |
| 52 49 46 46 ?? ?? ?? ?? 41 43 4F 4E | 0 | ani | Animated cursor |
| 52 49 46 46 ?? ?? ?? ?? 41 56 49 20 | 0 | avi | Audio Video Interleave video format |
| 52 49 46 46 ?? ?? ?? ?? 43 44 44 41 | 0 | cda | .cda file |
| 52 49 46 46 ?? ?? ?? ?? 51 4C 43 4D | 0 | qcp | Qualcomm PureVoice file format |
| 52 49 46 46 ?? ?? ?? ?? 52 4d 4d 50 | 0 | mmm | MacroMind Multimedia Movie or Microsoft Multimedia Movie |
| 52 49 46 46 ?? ?? ?? ?? 56 44 52 4d | 0 | vdr | VirtualDub |
| 52 49 46 46 ?? ?? ?? ?? 57 41 56 45 | 0 | wav | Waveform Audio File Format |
| 52 49 46 46 ?? ?? ?? ?? 57 45 42 50 | 0 | webp | Google WebP image file, where ?? ?? ?? ?? is the file size. More information on WebP File Header |
| 52 49 46 46 ?? ?? ?? ?? 73 68 62 35 | 0 | shb | Corel SHOW! 5.0 background |
| 52 49 46 46 ?? ?? ?? ?? 73 68 72 35 | 0 | shr | Corel SHOW! 5.0 player |
| 52 49 46 46 ?? ?? ?? ?? 73 68 77 34 | 0 | shw | Corel SHOW! 4.0 |
| 52 49 46 46 ?? ?? ?? ?? 73 68 77 35 | 0 | shw | Corel SHOW! 5.0 |
| 52 49 46 58 ?? ?? ?? ?? 4D 56 39 33 (big-endian) | 0 | dir dxr drx | Macromedia Director file format |
| 52 49 46 58 ?? ?? ?? ?? 46 47 44 4D (big-endian) | 0 | dcr | Adobe Shockwave |
| 52 53 56 4B 44 41 54 41 | 0 | rs | QuickZip rs compressed archive |
| 52 59 46 46 ?? ?? ?? ?? 54 52 49 44 | 0 | trd | TrID |
| 52 61 72 21 1A 07 00 | 0 | rar | Roshal ARchive compressed archive v1.50 onwards |
| 52 61 72 21 1A 07 01 00 | 0 | rar | Roshal ARchive compressed archive v5.00 onwards |
| 52 65 63 65 69 76 65 64 3A | 0 | eml | Email Message var5 [ citation needed ] |
| 53 4D 53 4E 46 32 30 30 | 0 | ssp | SmartSniff Packets File |
| 53 5A 44 44 | 0 | ??_ | Windows 9x Compressed File |
| 53 5A 44 44 88 F0 27 33 | 0 | ??_ | Microsoft compressed file in Quantum format, used prior to Windows XP. File can be decompressed using Extract.exe or Expand.exe distributed with earlier versions of Windows. After compression, the last character of the original filename extension is replaced with an underscore, e.g. ‘Setup.exe’ becomes ‘Setup.ex_’. |
| 53 44 50 58 (big-endian format) | 0 | dpx | SMPTE DPX image |
| 53 45 51 36 | 0 | rc | RCFile columnar file format |
| 53 50 30 31 | 0 | bin | Amazon Kindle Update Package |
| 53 51 4C 69 74 65 20 66 6F 72 6D 61 74 20 33 00 | 0 | sqlitedb sqlite db | SQLite Database |
| 54 41 50 45 | 0 | Microsoft Tape Format | |
| 54 44 45 46 | 0 | TDEF | Telegram Desktop Encrypted File |
| 54 44 46 24 | 0 | TDF$ | Telegram Desktop File |
| 55 55 AA AA | 0 | pcv | PhotoCap Vector |
| 56 49 53 33 | 0 | Resource file Visionaire 3.x Engine | |
| 58 46 49 52 ?? ?? ?? ?? 4D 44 47 46 (little-endian) | 0 | dcr | Adobe Shockwave |
| 58 46 49 52 ?? ?? ?? ?? 33 39 56 4D (little-endian) | 0 | dir dxr drx | Macromedia Director file format |
| 58 50 44 53 (little-endian format) | 0 | dpx | SMPTE DPX image |
| 60 EA | 0 | arj | ARJ |
| 62 6F 6F 6B | 0 | macOS bookmark format | |
| 62 6F 6F 6B 00 00 00 00 6D 61 72 6B 00 00 00 00 | 0 | alias | macOS file Alias [75] (Symbolic link) |
| 62 70 6C 69 73 74 | 0 | plist | Binary Property List file |
| 62 76 78 32 | 0 | lzfse | LZFSE - Lempel-Ziv style data compression algorithm using Finite State Entropy coding. OSS by Apple. |
| 63 6F 6E 65 63 74 69 78 | 0 | vhd | Windows Virtual PC Virtual Hard Disk file format |
| 64 65 78 0A 30 33 35 00 | 0 | dex | Dalvik Executable |
| 65 87 78 56 | 0 | p25 obt | PhotoCap Object Templates |
| 66 4C 61 43 | 0 | flac | Free Lossless Audio Codec |
| 66 74 79 70 4D 53 4E 56 | 4 | mp4 | MPEG-4 video file |
| 66 74 79 70 33 67 | 4 | 3gp 3g2 | 3rd Generation Partnership Project 3GPP and 3GPP2 multimedia files |
| 66 74 79 70 63 72 78 43 52 | 0 | cr3 | |
| 66 74 79 70 68 65 69 63 66 74 79 70 6d | 4 | heic | High Efficiency Image Container (HEIC) |
| 66 74 79 70 69 73 6F 6D | 4 | mp4 | ISO Base Media file (MPEG-4) |
| 67 6C 54 46 | 0 | glb | Binary glTF file |
| 67 69 6D 70 20 78 63 66 | 0 | xcf | XCF (file format) |
| 69 63 6e 73 | 0 | icns | Apple Icon Image format |
| 70 77 72 64 61 74 61 | 0 | pwrdata | SAP Power Monitor (version 1.1.0 and higher) data file |
| 71 6F 69 66 | 0 | qoi | QOI - The “Quite OK Image Format” |
| 72 65 67 66 | 0 | dat hiv | Windows Registry file |
| 73 64 62 66 | 8 | sdb | Windows customized database |
| 74 6F 78 33 | 0 | tox | Open source portable voxel file |
| 75 73 74 61 72 00 30 30 75 73 74 61 72 20 20 00 | 257 | tar | tar archive |
| 76 2F 31 01 | 0 | exr | OpenEXR image |
| 76 68 64 78 66 69 6C 65 | 0 | vhdx | Windows Virtual PC Windows 8 Virtual Hard Disk file format |
| 77 4F 46 32 | 0 | woff2 | WOFF File Format 2.0 |
| 77 4F 46 46 | 0 | woff | WOFF File Format 1.0 |
| 78 01 | 0 | zlib | No Compression (no preset dictionary) |
| 78 5E | 0 | zlib | Best speed (no preset dictionary) |
| 78 7D | 0 | zlib | Best speed (with preset dictionary) |
| 78 9C | 0 | zlib | Default Compression (no preset dictionary) |
| 78 20 | 0 | zlib | No Compression (with preset dictionary) |
| 78 56 34 | 0 | pbt pdt pea peb pet pgt pict pjt pkt pmt | PhotoCap Template |
| 78 61 72 21 | 0 | xar | eXtensible ARchive format |
| 78 BB | 0 | zlib | Default Compression (with preset dictionary) |
| 78 DA | 0 | zlib | Best Compression (no preset dictionary) |
| 78 F9 | 0 | zlib | Best Compression (with preset dictionary) |
| 80 2A 5F D7 | 0 | cin | Kodak Cineon image |
| 85 ?? ?? 03 | 0 | pgp | PGP file |
| 89 48 44 46 0D 0A 1A 0A | 0, 512, 1024, 2048, ... | hdf5 h5 | Data stored in version 5 of the Hierarchical Data Format. |
| 89 50 4E 47 0D 0A 1A 0A | 0 | png | Image encoded in the Portable Network Graphics format |
| A0 32 41 A0 A0 A0 | 0x165A4 | d64 | Commodore 64 1541 disk image (D64 format) |
| A0 33 44 A0 A0 | 0x61819 | d81 | Commodore 64 1581 disk image (D81 format) |
| A1 B2 3C 4D (big-endian) | 0 | pcap | Libpcap File Format (nanosecond-resolution) |
| A1 B2 C3 D4 (big-endian) | 0 | pcap | Libpcap File Format |
| aa aa aa aa | 0 | sys | Crowdstrike Channel File |
| AC ED | 0 | Serialized Java Data | |
| 2d 2d 2d 2d 2d 42 45 47 49 4e 20 50 47 50 20 50 55 42 4c 49 43 20 4b 45 49 20 42 4c 4f 43 4b 2d 2d 2d 2d 2d | 0 | asc | Armored PGP public key |
| BE BA FE CA | 0 | DBA | Palm Desktop Calendar Archive |
| C0 3B 39 98 | 0 | Linux EXT3/EXT4 jbd2 filesystem Journal | |
| C9 | 0 | com | CP/M 3 and higher with overlays |
| CA FE BA BE | 0 | class | Java class file, Mach-O Fat Binary |
| CE FA ED FE | 0 | Mach-O binary (reverse byte ordering scheme, 32-bit) | |
| CF 84 01 | 0 | lep | Lepton compressed JPEG image |
| CF FA ED FE | 0 | Mach-O binary (reverse byte ordering scheme, 64-bit) | |
| 2D 2D 2D 2D 2D 42 45 47 49 4E 20 43 45 52 54 49 46 49 43 41 54 45 20 52 45 51 55 45 53 54 2D 2D 2D 2D 2D | 0 | csr pem | PEM encoded X.509 Certificate Signing Request |
| D0 4F 50 53 | 0 | pl | Interleaf PrinterLeaf / WorldView document format (now Broadvision QuickSilver) |
| D0 CF 11 E0 A1 B1 1A E1 | 0 | doc xls ppt msi msg | Compound File Binary Format, a container format defined by Microsoft COM. It can contain the equivalent of files and directories. It is used by Windows Installer and for documents in older versions of Microsoft Office. [44] It can be used by other programs as well that rely on the COM and OLE API's. (0xD0CF11E0 visually resembles "DOCFILE". [45]) |
| D4 C3 B2 A1 (little-endian) | 0 | pcap | Libpcap File Format |
| D7 CD C6 9A | 0 | wmf | Windows Metafile |
| DB 0A CE 00 | 0 | OpenGL Iris Perfomer .PFB (Performer Fast Binary) | |
| DD 73 66 73 | 0 | UTF-EBCDIC byte order mark for text | |
| 23 20 4D 69 63 72 6F 73 6F 66 74 20 44 65 76 65 6C 6F 70 65 72 20 53 74 75 64 69 6F | 0 | dsp | Microsoft Developer Studio project file |
| E0 01 00 EA | 0 | Ion (serialization format) binary encoding | |
| ED AB EE DB | 0 | rpm | RedHat Package Manager (RPM) package |
| EF BB BF | 0 | txt others | UTF-8 byte order mark, commonly seen in text files. |
| FD 37 7A 58 5A 00 | 0 | xz tar.xz | XZ compression utility using LZMA2 compression |
| FE ED FA CE | 0 0x1000 | Mach-O binary (32-bit) | |
| FE ED FA CF | 0 0x1000 | Mach-O binary (64-bit) | |
| FE ED FE ED | 0 | JKS Javakey Store | |
| FE FF | 0 | txt others | UTF-16BE byte order mark, commonly seen in text files. |
| FF 0A | 0 | jxl | Image encoded in the JPEG XL format |
| FF 4F FF 51 | 0 | jp2 j2k jpf jpm jpg2 j2c jpc jpx mj2 | JPEG 2000 format |
| FF D8 FF DB | 0 | jpg jpeg | JPEG raw or in the JFIF or Exif file format |
| FF D8 FF E0 | 0 | jpg | JPEG raw or in the JFIF or Exif file format |
| FF D8 FF E0 00 10 4A 46 49 46 00 01 | 0 | jpg jpeg | JPEG raw or in the JFIF or Exif file format |
| FF D8 FF E1 ?? ?? 45 78 69 66 00 00 | 0 | jpg jpeg | JPEG raw or in the JFIF or Exif file format |
| FF D8 FF EE | 0 | jpg jpeg | JPEG raw or in the JFIF or Exif file format |
| FF FB FF F3 FF F2 | 0 | mp3 | MPEG-1 Layer 3 file without an ID3 tag or with an ID3v1 tag (which is appended at the end of the file) |
| FF FE | 0 | txt others | UTF-16LE byte order mark, commonly seen in text files. |
| FF FE 00 00 | 0 | txt others | UTF-32LE byte order mark for text |
| 53 49 4D 50 4C 45 20 20 3D 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54 | 0 | fits | Flexible Image Transport System (FITS) |
| 2D 2D 2D 2D 2D 42 45 47 49 4E 20 44 53 41 20 50 52 49 56 41 54 45 20 4B 45 59 2D 2D 2D 2D 2D | 0 | key pem | PEM encoded X.509 PKCS#1 DSA private key |
| 2D 2D 2D 2D 2D 42 45 47 49 4E 20 52 53 41 20 50 52 49 56 41 54 45 20 4B 45 59 2D 2D 2D 2D 2D | 0 | key pem | PEM encoded X.509 PKCS#1 RSA private key |
| 3C 3C 3C 20 4F 72 61 63 6C 65 20 56 4D 20 56 69 72 74 75 61 6C 42 6F 78 20 44 69 73 6B 20 49 6D 61 67 65 20 3E 3E 3E | 0 | vdi | VirtualBox Virtual Hard Disk file format |
Where this came from
Every record above links the page it was taken from and quotes the sentence that states it. These are the 1 source this dataset was assembled from.
- en.wikipedia.orghttps://en.wikipedia.org/wiki/List_of_file_signatures
Machine-readable
- data.jsonThe whole dataset — every record with its source URL and source quote.
- Open Knowledge Format bundleOne JSON object per line — every record's frontmatter and quoted span exactly as it is held here, in one fetch.
- data.csvThe same records as one flat table, for a spreadsheet or a dataframe. The last four columns are the source URL, the quoted sentence it was read from, the date we last checked it, and which columns are our reading rather than the page's words.
- How this is made and checkedWhat "verified against source" does and does not mean.
From your own code
Same records, same quotes, without scraping the page: refsource is on PyPI and npm. Each value comes back carrying the URL it was read from and the sentence on that page that states it — .source and .quote sit on the value itself rather than in a side channel, so the checking step is available instead of skipped.
pip install refsource
refsource lookup file-format-signatures extension="PIC PIF SEA YTR"
npx -y refsource lookup file-format-signatures extension="PIC PIF SEA YTR"
Set your AI assistant up to use this
Two files and no account. Put this in .mcp.json at the root of your project — Claude Code, Cursor, Windsurf, VS Code and Codex all read that file — and your assistant can look this dataset up instead of recalling it. The server is remote, keyless and read-only.
{
"mcpServers": {
"referencesource": {
"type": "http",
"url": "https://referencesource.org/mcp"
}
}
}Add to Cursor · or, on the command line: claude mcp add --transport http referencesource https://referencesource.org/mcp --scope project
Then one line in the project's CLAUDE.md or AGENTS.md, so the assistant knows when to reach for it:
When a question needs "File format magic numbers", call the referencesource MCP server at https://referencesource.org/mcp (tool `search_records`, dataset_slug `file-format-signatures`) instead of answering from memory — every record it returns carries its source URL and a verbatim quote from that page.What each tool does, and the servers built over single registers: Connect your AI assistant.