Skip to content
CrazyDave edited this page Apr 13, 2016 · 5 revisions

FileId

FileId can identify the following formats:

Detailed Secondary Inspection

Detailed Information

  • exe - DOS Executable [0x4D,0x5A]
  • elf - ELF Executable [0x7F,0x45,0x4C,0x46]
  • dex - Dalvik Executable [0x64,0x65,0x78,0x0A,0x30,0x33,0x35,0x00]
  • dwg - Autocad Drawing [0x41,0x43,0x31,0x30]
  • mp4 - Mp4 Container [0x66,0x74,0x79,0x70]
  • asf - ASF Container [0x30,0x26,0xB2,0x75,0x8E,0x66,0xCF,0x11,0xA6,0xD9,0x00,0xAA,0x00,0x62,0xCE,0x6C]
  • riff - Riff file [0x52,0x49,0x46,0x46]

Identification only

  • lib - Microsoft Program Library Common Object File Format
  • obj - Microsoft Common Object File Format relocatable object code
  • zip - Zip Archive
  • rar - Rar Archive
  • 7z - 7z Archive
  • tar.z - Tar.Zip Container
  • bz2 - BZip2 Container
  • tar - Tar Archive
  • gz - GZIP Archive
  • cab - Microsoft Cabinet file
  • lha - LHA Archive
  • vhd - Microsoft Virtual HardDisk
  • iso - ISO 9660 Disk Image
  • vmdk - VMWare Virtual Disk
  • pcap - Network Packet Capture File
  • ico - Icon File
  • gif - GIF Image
  • tiff - Tagged Image File
  • jpg - JPEG Image
  • png - Portable Network Graphics
  • flac - Free Lossless Audio Codec
  • midi - MIDI Sound File
  • cur - Cursor
  • bmp - Bitmap Image
  • ps - PostScript document
  • pdf - PDF document
  • db - SQLLite Database File
  • lnk - LNK File
  • xls - Microsoft Excel (pre OLESS formats)
  • ppt - Microsoft Powerpoint (pre OLESS formats
  • mdb - Microsoft Access Database
  • accdb - Microsoft Access Database
  • one - Microsoft OneNote
  • onetoc2 - Microsoft OneNote Table of Contents
  • pst - Microsoft Outlook Personal Storage Table
  • chm - Complied Help File
  • dmp - Windows Dump File
  • hdmp - Windows Dump File with heap
  • mp3 - MPEG-1 Layer 3 file
  • flv - Flash Video
  • swf - Shockwave Flash File
  • script - *nix script
  • xml - XML
  • html - HTML Document
  • rtf - Rich Text Format
  • txt - Text File
Clone this wiki locally