File Header

[ To find a specific extension quickly, use ctrl+f | Last Updated: 11/30/07 ] [ Looking for more information on file extensions? Look no further than here. ] [ Note: A ? mark on this page represents a hex value that appears to change more than the other values of the header. ] [ Note: On any given Windows system, a file signature is normally contained within the first 20 bytes of the file. ] [ Note: File signatures are also referred to as header data and magic numbers. ] [ Note: We've noticed that there are numerous files on the standard computer that contain an underscore mark in the file extension; in these cases we've come to the conclusion that the file itself is a compressed version of another file with a similar extension such as .ex_ for .exe or .bm_ for .bmp ]
Hex Signature/File Header	File Extension ^	ASCII Signature	Additional Info.
45 DA	.386		Executable File
23 20 6F 62 6A 65 78 70	.3md	# objexp
54 49 46 46 47 52 41 50	.3tf	TIFFGRAP
64 74 53 65 61 72 63 68	.abc	dtSearch	ABC Programming Language
4D 53 43 46 00 00 00 00	.ac_	MSCF
00 02 0? 00 0?	.acb
C3 AB CD AB	.acg	ëͫ
.acl
4D 5A 90 00 03 00 00 00	.acm	MZ	Executable File
C3 AB CD AB	.acs	ëͫ
41 44 46 33	.adf	ADF3
.adm
69 66 28 70 65 76 61 6C	.adp	if(peval
30 00 00 04 15 05 05 2?	.adx		Lotus Approach ADX File
21 12	.ain		AIN Archive File
0A 3C EB A2 7F EF A3 4E	.am	<ë¢ï£N
4A A5 14 1C 05 99 CC 44	.am	J¥™ÌD
5B 76 65 72 5D	.ami	Lotus Ami Pro
4D 53 43 46 00 00 00 00	.an_	MSCF
.anb
52 49 46 46	.ani	RIFF
4D 5A 90 00 03 00 00 00	.api	MZ
D0 CF 11 E0 A1 B1 1A E1	.apr	Lotus Approach APR File
.aps
1A 02	.arc	ARC/PKPAK Compressed 1
1A 03	.arc	ARC/PKPAK Compressed 2
1A 04	.arc	ARC/PKPAK Compressed 3
1A 08	.arc	ARC/PKPAK Compressed 4
1A 09	.arc	ARC/PKPAK Compressed 5
.art
60 EA	.arj	ARJ Compressed
4D 53 43 46 00 00 00 00	.as_	MSCF
3C 4F 42 4A 45 43 54 20	.asa	<OBJECT
.asd
.asf
.ashx
4D 00 69 00 63 00 72 00	.asms	Micr
.aso
3C 25 40 20 43 4F 44 45	.asp	<%@ CODE
02 00 00 00 53 44 4D 00	.ast
3C 41 53 58 20 56 65 72	.asx	<ASX Ver
2E 73 6E 64	.au	SoundMachine Audio File
41 56 47 20 37 2E 30 20	.avg	AVG 7.0
.avg
41 56 49 20	.avi	Audio Video Interleave File (AVI)
52 49 46 46	.avi	RIFF	Audio Video Interleave File (AVI)
52 49 46 46 6A 42 01 00	.avi	RIFF	Audio Video Interleave File (AVI)
41 56 47 20 37 20 2D 20	.avm	AVG 7 -
8A 01 0A 00 00 00 E1 08	.aw
4D 5A 90 00 03 00 00 00	.ax	MZ	Executable File
4D 53 43 46 00 00 00 00	.ax_	MSCF
.axd
.bag	AOL Feedbag
5B 33 2F 31 32 2F 32 30	.bak	Backup File
.bas
52 45 4D 20 44 75 6D 6D	.bat	Batch File
58 54 01 00 1A 00 43 6C	.bdr	XT
FF 53 43 43 FF 4D 41 50	.bin	Binary File
42 4D	.bmp	BM	Windows Bitmap Image
42 54 4C 46 30 31 2E 30	.btl	BTLF01.0
42 5A 68	.bz	Bzip Archive
42 5A 68	.bz2	Bzip Archive
49 53 63 28	.cab	Cabinet File
4D 53 43 46	.cab	MSCF	Microsoft CAB File Format
30 82	.cat
0? 00 FF FF 00 00 06 00	.cbz
.cdx
19 0D B7 4D 64 CE 0D D1	.cfg	·MdÎÑ
4D 53 43 46 00 00 00 00	.ch_	MSCF
49 54 53 46	.chm	ITSF	Compiled HTML/Help File
49 54 53 46 03 00 00 00	.chq	ITSF
FF FE 3F 00 61 00 62 00	.chs	ÿþ?
CA FE BA BE 00	.class	Êþº¾
43 4F 4D 2B	.clb	COM+
CA FE BA BE 00 03 00 2D	.cls	Êþº¾
.clw
.cmd
4D 53 43 46	.cn_	MSCF
3A 42 61 73 65 20	.cnt	:Base
4D 5A 90 00 03 00 00 00	.cnv	MZ
4A 4D	.cod	JM
4D 5A	.com	MZ
23 20 50 6F 73 74 67 72	.conf	# Postgr
3C 3F 78 6D 6C 20 76 65	.config	<?xml.version=
4D 5A	.cpl	MZ
CD DC 03 00	.cpl	ÍÜ
.cpp
.cpx
43 52 55 53 48	.cru	CRUSH Archive File
43 52 55 53 48	.crush		CRUSH Archive File
23 21 2F 62 69 6E 2F 63	.csh	#!/bin/c
.css	Cascading Style Sheet
41 56 47	.ctf	AVG	AVG Antivirus
2D 2D 20	.ctl	--
3B 2A 2A	.cty	;**
00 00 02 00 0? 00 20 20	.cur
42 54 43 56 23 23 42 61	.cvb	BTCV##BaseCV
43 4F 4D 2B 01 00 00 00	.dat	COM+
D0 CF 11 E0 A1 B1 1A E1	.db	Windows Thumbnail Cache
.dbf
CF AD 12 FE C? ?D	.dbx
3A DE 68 B1	.dcx	DCX Graphic File
72 65 67 66 AB 37	.default	regf«7
42 4D 76 3A	.dib	BMv:
3C 4F 20 6E 61 6D 65 3D	.dict
4D 5A	.dll	MZ	Dynamic Link Library
4D 5A 90 00 03 00 00 00	.dll	Dynamic Link Library
46 00 00 00 FF FF 01 00	.dms	Domain File for Domain Punch Pro software
D0 CF 11 E0 A1 B1 1A E1	.doc	ÐÏ à¡± á	Microsoft Word 2003 Document
7F FE 34 0A	.doc	MS Word
12 34 56 78 90 FF	.doc	MS Word 6.0
31 BE 00 00 00 AB 00 00	.doc	MS Word for DOS 6.0
50 4B 03 04 14 00 06 00	.docx	Microsoft Word 2007 Document
D0 CF 11 E0 A1 B1 1A E1	.dot	ÐÏ à¡± á
4D 5A	.drv	MZ
4D 5A ?? 00 ?? 00 00 00	.drv	Device Driver
4D 5A ?? 01 ?? 00 00 00	.drv	Device Driver
4D 5A	.ds	MZ
4D 47 58 20 69 74 70 64	.ds4		Micrografix Designer 4
23 20 4D 69 63 72 6F 73	.dsp	# Micros
5B 4? 65 6? 6?	.dtb
3C 21 45 4E 54 49 54 59	.dtd	XML DTD
5B 50 68 6F 6E 65 5D 0D	.dun	[Phone]	Dialup Networking File
5B 47 65 6E 65 72 61 6C	.ecf	[General]
10 00 00 05 80 00 00	.emf
25 21 50 53	.eps	%!PS-Adobe-3.1	Adobe EPS File
00 0C 00 00 00 00 00 00	.etl	Circular Trace Log File
03 00 00 00 C4 66 C4 56	.evt
4D 5A 90	.exe	MZ	Microsoft Executable
4C 01 02 00 3E 0D 1C 46	.exp	Export File
00 00 1A 00 07 80 01 00	.fm3	Lotus 123 v3 FMT File
20 00 68 00 20	.fmt	Lotus 123 v4 FMT File
4D 5A 90 00 03 00 00 00	.flt
3F 5F 03 00	.gid		Windows Help File
47 49 46 38 37 61	.gif	GIF87a	Graphics Interchange Format
47 49 46 38 39 61	.gif	GIF89a	Graphics Interchange Format
1F 8B 08	.gz		GZ Compressed File
91 33 48 46	.hap		HAP Archive File
3F 5F 03 00	.hlp	?_	Windows Help File
3C 68 74 6D 6C 3E	.htm	HyperText Markup Language 1
3C 48 54 4D 4C 3E	.htm	HyperText Markup Language 2
3C 21 44 4F 43 54	.htm	HyperText Markup Language 3
3C 21 44 4F 43 54 59 50	.htm	HyperText Markup
28 54 68 69 73 20 66 69	.hqx
00 00 01 00	.ico	Windows Icon File
5B 2E 53 68 65 6C 6C 43	.ini	Initialization File
FF FE 0D 00 0A 00 ?? 00	.ini	Initialization File
00 00 00 00 00 00 00 00	.iso	ISO-9660 Disc Image
FF 44 56 54 20 4B 46 00	.ix
5F 27 A8 89	.jar	JAR Archive File
FF D8 FF FE 00	.jpeg	JPG Graphical File
FF D8 FF E1	.jpg	JPG Graphical File
2D 6C 68 35 2D	.lha	LHA Compressed
21 3C 61 72 63 68 3E 0A	.lib	Object File Library
4C 00 00 00 01 14 02 00	.lnk	Windows Shortcut (Link File)
FF FE 3? 00 ?? 00 3A 00	.log
	.lzh	lh	LZ Compression File
3C 3F 78 6D 6C 20 76 65	.manifest	<?xml.version=	Manifest File
00 01 00 00 53 74 61 6E	.mdb	Microsoft Access Database
4D 54 68 64	.mid	MThd	MIDI Audio File
6D 64 61 74	.mov		QuickTime Movie
49 44 33 03	.mp3	ID3	MP3 Audio
00 00 01 B3	.mpg	MPEG Movie
00 00 01 B3	.mpeg	MPEG Movie
3C 3F 78 6D 6C 20 76 65	.msc	Microsoft Management Console Snap-in Control File
4D 5A 90 00 03 00 00 00	.msstyles	Microsoft Windows Visual Style
4D 5A 90 00 03 00 00 00	.mui	Configuration Resource File
0D 00 ?? ?? ?? 00 3F 00	.nls	National Language Support File
0D 00 ?? ?? ?? 00 6F 00	.nls	National Language Support File
1A 00 00 03 00 00 11 00	.nsf		Lotus Notes Database/Template
1A 00 00 03 00 00 11 00	.ntf		Lotus Notes Database/Template
4C 01	.obj		Compiled Object Module
4D 5A 90 00 03 00 00 00	.ocx	MZ	Object Linking and Embedding (OLE) Control Extension
4D 5A 90 00 03 00 00 00	.olb	Object Library File
25 50 44 46 2D 31 2E 33	.pdf	%PDF	Adobe Portable Document File
25 50 44 46 2D 31 2E 34	.pdf	%PDF	Adobe Portable Document File
89 50 4E 47 0D 0A 1A 0A	.png	‰PNG	Portable Network Graphic
7E 42 4B 00	.psp	PaintShop Pro Image File
21 42 44 4E 4D 37 4C CA	.pst	!BDN	Personal Folder File
D0 CF 11 E0 A1 B1 1A E1	.pub	Microsoft Publisher Document
6D 64 61 74	.qt	Quicktime Movie File
2E 72 61 FD	.ra	Real Audio File
2E 72 61 FD	.ram		Real Audio File
52 61 72 21	.rar		RAR Archive File
52 45 47 45 44 49 54 30	.reg
ED AB EE DB	.rpm	RPM Archive File
7B 5C 71 74 66 31	.rtf	{\rtf1	Rich Text Format File
7B 5C 72 74 66 31	.rtf	{\rtf1	Rich Text Format File
53 49 54 21	.sit	Stuffit v1 Archive File
53 74 75 66 66 49 74	.sit	Stuffit v5 Archive File
4D 5A	.sys	Executable File
1F 8B	.tar	Gzip Archive File
1F 8B	.tgz	Gzip Archive File
49 49 2A	.tif	TIFF (Intel)
4D 4D 2A	.tif	TIFF (Motorola)
49 49 2A	.tiff	TIFF (Intel)
4D 4D 2A	.tiff	TIFF (Motorola)
43 68 61 72 61 63 74 65	.tlb
.txt	Text File
55 46 41	.ufa	UFA Archive File
EF BB BF 3C 3F 78 6D 6C	.u3i
55 43 45 58 ?? ?? 00 00	.uce
5B 49 6E 74 65 72 6E 65	.url	Internet Shortcut
54 79 70 65 3D 45 78 65	.vbp
27 2A 2A 2A 2A 2A 2A 2A	.vbs
27 2D 2D 2D 2D 2D 2D 2D	.vbs
42 45 47 49 4E 3A 56 43	.vcf
62 65 67 69 6E 3A 76 63	.vcf
4D 5A 90 00 03 00 00 00	.vdm
5B 53 6F 75 72 63 65 46	.ver
4D 5A 90 00 03 00 00 00	.vxd
4D 5A 90 00 03 00 00 00	.w32
52 49 46 46	.wav
52 49 46 46	.wav	RIFF	WAVE PCM Soundfile Format
00 00 02 00 02 10 C9 00	.wb2
00 00 02 00 02 10 C9 00	.wb3
30 00 00 00 01 00 00 00	.wiz
D0 CF 11 E0 A1 B1 1A E1	.wiz
20 00 60 40 60	.wk1	Lotus 123 v1 Worksheet
00 00 1A 00 00 10 04 00	.wk3	Lotus 123 v3 Worksheet
00 00 1A 00 02 10 04 00	.wk4	Lotus 123 v5 Worksheet
4D 53 43 46 00 00 00 00	.wm_
30 26 B2 75 8E 66 CF 11	.wma
57 00 69 00 6E 00 64 00	.wmdb
D7 CD C6 9A	.wmf	Windows META File
3C 21 2D 2D 0D 0A 20 20	.wms
FF FE 3C 00 21 00 2D 00	.wms
30 26 B2 75 8E 66 CF 11	.wmz
50 4B 03 04 09 00 00 00	.wmz
FF 57 50 43	.wp	WordPerfect v5 or v6
FF 57 50 4? ?? ?? 00 00	.wpd
FF 57 50 43 23 05 00 00	.wpd
FF 57 50 47	.wpg	WordPerfect Graphic
3C 3F 77 70 6C 20 76 65	.wpl
31 BE 00 00 00 AB 00 00	.wri
7B 5C 72 74 66 31	.wri	{\rtf1	Windows Write Document
D0 CF 11 E0 A1 B1 1A E1	.wri
4D 5A 90 00 03 00 00 00	.x32
3C 3F 78 6D 6C 20 76 65	.xdr
3C 53 63 68 65 6D 61 20	.xdr
3C 3F 78 6D 6C 20 76 65	.xhtml
D0 CD 00 E0 A1 B1 1A E1	.xla
09 02 06 00 00 00 10 00	.xls	MS Excel v2
09 04 06 00 00 00 10 00	.xls	MS Excel v4
D0 CF 11 E0 A1 B1 1A E1	.xls	ÐÏ à¡± á	Microsoft Excel Sheet
D0 CF 11 E0 A1 B1 1A E1	.xlt		Microsoft Excel Sheet
3C 3F 78 6D 6C 20 76 65	.xml	Extensible Markup Language File
EF BB BF 3C 3F 78 6D 6C	.xml
FF FE 3C 00 3F 00 78 00	.xml
3C 3F 78 6D 6C 20 76 65	.xsl
EF BB BF 3C 3F 78 6D 6C	.xsl
3C 3F 78 6D 6C 20 76 65	.xul
00 ?? 49 52 49 53 20 67	.ytr
1F 9D	.z	TAR Compressed Archive File
4D 5A 90 00 03 00 00 00	.zap
50 4B 03 04	.zip	Zip Compressed
50 4B 03 04	.zip	PKZIP Compressed
50 4B 30 30 50 4B 03 04	.zip	WINZIP Compressed
50 4B 03 04 0A 00 00 00	.zip	PK	Compressed Archive
50 4B 03 04 14 00 00 00	.zip	PK	Compressed Archive
5A 4F 4F 20	.zoo		ZOO Archive File

http://www.aeicomputertech.com/forensics_file_signatures.php