Advertisement
brannondorsey

Magic Signatures

Feb 16th, 2018
2,947
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 18.40 KB | None | 0 0
  1. 3c3f786d6c2076657273696f6e3d22312e30223f3e0d0a3c4d4d435f436f6e736f6c6546696c6520436f6e736f6c65566572: MMC Snap-in Control file
  2. 4d6963726f736f66742057696e646f7773204d6564696120506c61796572202d2d20: Windows Media Player playlist
  3. 3c3f786d6c2076657273696f6e3d22312e30223f3e: User Interface Language
  4. 000100005374616e6461726420414345204442: Microsoft Access 2007
  5. 000100005374616e64617264204a6574204442: Microsoft Access
  6. 000100004d534953414d204461746162617365: Microsoft Money file
  7. 0006156100000002000004d200001000: Netscape Navigator (v4) database
  8. 53514c69746520666f726d6174203300: SQLite database file
  9. 4d6963726f736f667420432f432b2b20: MS C++ debugging symbols file
  10. 4d6963726f736f66742056697375616c: Visual Studio .NET file
  11. 4d5a90000300000004000000ffff: ZoneAlam data file
  12. 3c3f786d6c2076657273696f6e3d: Windows Visual Stylesheet
  13. 00000020667479704d3441: Apple audio and video files
  14. 40404020000040404040: EndNote Library File
  15. 3e000300feff090006: Quatro Pro for Windows 7.0
  16. 252150532d41646f: Encapsulated PostScript file
  17. 4c00000001140200: Windows shortcut file
  18. 455646090d0aff00: Expert Witness Compression Format
  19. 23204469736b2044: VMware 4 Virtual Disk description
  20. 56455253494f4e20: Visual Basic User-defined Control file
  21. 414f4c494e444558: AOL address book index
  22. 664c614300000022: Free Lossless Audio Codec file
  23. 49491a0000004845: Canon RAW file
  24. 300000004c664c65: Windows Event Viewer file
  25. 00001a0000100400: Lotus 1-2-3 (v3)
  26. 00001a0002100400: Lotus 1-2-3 (v4|v5), Lotus 1-2-3 (v4|v5)
  27. 6375736800000002: Photoshop Custom Shape
  28. 436c69656e742055: IE History file
  29. 233f52414449414e: Radiance High Dynamic Range image file
  30. 6465780a30303900: Dalvik (Android) executable file
  31. 30314f52444e414e: National Transfer Format Map
  32. 0000020006040600: Lotus 1-2-3 (v1)
  33. 0300000041505052: Approach index file
  34. 0000001866747970: MPEG-4 video files, MPEG-4 video files
  35. 537570657243616c: SuperCalc worksheet
  36. 76323030332e3130: Qimage filter
  37. 4b57414a88f027d1: KWAJ (compressed) file, KWAJ (compressed) file
  38. 1100000053434341: Windows prefetch file
  39. 9ccbcb8d1375d211: Outlook address file
  40. 0908100000060500: Excel spreadsheet subheader_1
  41. 89504e470d0a1a0a: PNG image
  42. 5245564e554d3a2c: Antenna data file
  43. 496e6e6f20536574: Inno Setup Uninstall Log
  44. 424f4f4b4d4f4249: Palmpilot resource file
  45. 456c6646696c6500: Windows Vista event log
  46. 5b47656e6572616c: MS Exchange configuration file
  47. 5b57696e646f7773: Microsoft Code Page Translation file
  48. cf11e0a1b11ae100: Perfect Office document
  49. fffe23006c006900: MSinfo file
  50. 636f6e6563746978: Virtual PC HD image
  51. 0000002066747970: 3GPP2 multimedia files, 3GPP2 multimedia files
  52. 4d2d5720506f636b: Merriam-Webster Pocket Dictionary
  53. 4d535f564f494345: Sony Compressed Voice File, Sony Compressed Voice File, Sony Compressed Voice File
  54. 5374756666497420: StuffIt compressed archive
  55. 4d5a900003000000: Acrobat plug-in, DirectShow filter, Audition graphic filter
  56. 504b030414000600: MS Office 2007 documents, MS Office 2007 documents, MS Office 2007 documents
  57. 0764743264647464: DesignTools 2D Design file
  58. 52415a4154444231: Shareaza (P2P) thumbnail
  59. 504b030414000800: Java archive_2
  60. 5850434f4d0a5479: XPCOM libraries
  61. 23204d6963726f73: MS Developer Studio project file
  62. 53494554524f4e49: Sietronics CPI XRD document
  63. 454e545259564344: VideoVCD|VCDImager file
  64. fdffffff1c000000: PowerPoint presentation subheader_5
  65. 4e41565452414646: TomTom traffic data
  66. 0000001466747970: 3GPP multimedia files, 3GPP multimedia files
  67. 504750644d41494e: PGP disk image
  68. 24464c3240282329: SPSS Data file
  69. 3c4d616b65724669: Adobe FrameMaker, Adobe FrameMaker
  70. 1a45dfa393428288: Matroska stream file
  71. 813284c18505d011: Outlook Express address book (Win95)
  72. ff00020004040554: Works for Windows spreadsheet
  73. 53514c4f434f4e56: DB2 conversion file
  74. 5157205665722e20: ABD | QSD Quicken data file, ABD | QSD Quicken data file
  75. d0cf11e0a1b11ae1: CaseWare Working Papers, Access project file, Lotus|IBM Approach 97 file, MSWorks database file, Microsoft Office document, Microsoft Office document, Microsoft Common Console Document, Microsoft Installer package, Minitab data file, Developer Studio File Options file, Microsoft Office document, Microsoft Office document, MS Publisher file, Revit Project file, Visual Studio Solution User Options file, SPSS output file, Visio file, Microsoft Office document, MSWorks text document, Microsoft Office document, Microsoft Office document
  76. 8a0109000000e108: MS Answer Wizard
  77. 4350543746494c45: Corel Photopaint file_1
  78. 3026b2758e66cf11: Windows Media Audio|Video File, Windows Media Audio|Video File, Windows Media Audio|Video File
  79. 2854686973206669: BinHex 4 Compressed Archive
  80. 4b47425f61726368: KGB archive
  81. 0000000c6a502020: JPEG2000 image files
  82. 535a444488f02733: SZDD file format, SZDD file format
  83. fdffffff0e000000: PowerPoint presentation subheader_4
  84. 414f4c564d313030: AOL personal file cabinet, AOL personal file cabinet
  85. cd20aaaa02000000: NAV quarantined virus file, NAV quarantined virus file
  86. 49544f4c49544c53: MS Reader eBook
  87. 4552465353415645: EasyRecovery Saved State file
  88. 213c617263683e0a: Unix archiver (ar)|MS Program Library Common Object File Format (COFF)
  89. 5000000020000000: Quicken QuickFinder Information File
  90. 4d53465402000100: OLE|SPSS|Visual C++ library file
  91. b5a2b0b3b3b0a5b5: Windows calendar
  92. 4c5646090d0aff00: Logical File Evidence Format
  93. 74424d504b6e5772: PathWay Map file
  94. 415647365f496e74: AVG6 Integrity database
  95. 454c49544520436f: Elite Plus Commander game file
  96. 5b666c7473696d2e: Flight Simulator Aircraft Configuration
  97. 4f504c4461746162: Psion Series 3 Database
  98. 504e4349554e444f: Norton Disk Doctor undo file
  99. e4525c7b8cd8a74d: MS OneNote note
  100. fdffffff43000000: PowerPoint presentation subheader_6
  101. aced000573720012: BGBlitz position database file
  102. 55464f4f72626974: UFO Capture map file
  103. 37e45396c9dbd607: zisofs compressed file, zisofs compressed file
  104. a90d000000000000: Access Data FTK evidence
  105. e310000100000000: Amiga icon
  106. 1a52545320434f4d: Runtime Software disk image
  107. 56657273696f6e20: MapInfo Interchange Format file
  108. 43232b44a4434da5: RagTime document
  109. 4f67675300020000: Ogg Vorbis Codec compressed file, Ogg Vorbis Codec compressed file, Ogg Vorbis Codec compressed file, Ogg Vorbis Codec compressed file
  110. 52657475726e2d50: Generic e-mail_1
  111. 2e524d4600000012: RealAudio file
  112. 436174616c6f6720: WhereIsIt Catalog
  113. 464158434f564552: MS Fax Cover Sheet
  114. 3a56455253494f4e: Surfplan kite project file
  115. 414f4c2046656564: AOL and AIM buddy list
  116. 001e849000000000: Netscape Communicator (v4) mail folder
  117. 424547494e3a5643: vCard
  118. 2a2a2a2020496e73: Symantec Wise Installer log
  119. 534d415254445257: SmartDraw Drawing file
  120. 5468697320697320: GNU Info Reader file
  121. 504b030414000100: ZLock Pro encrypted ZIP
  122. 3c21646f63747970: AOL HTML mail
  123. 535a2088f02733d1: QBASIC SZDD file, QBASIC SZDD file
  124. 0e4e65726f49534f: Nero CD compilation
  125. ff4b455942202020: Keyboard driver file
  126. 737263646f636964: CALS raster bitmap
  127. 00004d4d585052: Quark Express (Motorola)
  128. 727473703a2f2f: RealMedia metafile
  129. 52454745444954: WinNT Registry|Registry Undo files, WinNT Registry|Registry Undo files
  130. 80000020031204: Dreamcast audio
  131. 43525553482076: Crush compressed archive
  132. 64737766696c65: MS Visual Studio workspace file
  133. 00004949585052: Quark Express (Intel)
  134. 00001a00051004: Lotus 1-2-3 (v9), Lotus 1-2-3 (v9)
  135. 5b50686f6e655d: Dial-up networking file
  136. 576f726450726f: Lotus WordPro file
  137. 424c4932323351: Speedtouch router firmware
  138. 43505446494c45: Corel Photopaint file_2
  139. 526172211a0700: WinRAR compressed archive
  140. 49443303000000: Sprint Music Store audio
  141. 4e45534d1a01: NES Sound file
  142. 0000ffffffff: Windows Help file_1
  143. 504147454455: Windows memory dump
  144. 377abcaf271c: 7-Zip compressed file, 7-Zip compressed file
  145. 57696e5a6970: WinZip compressed archive
  146. 4d444d5093a7: Windows dump file, Windows dump file
  147. 434246494c45: WordPerfect dictionary
  148. ac9ebd8f0000: QDF Quicken data
  149. 504943540008: ChromaGraph Graphics Card Bitmap
  150. 01ff02040302: Micrografx vector graphic file
  151. 1a0000040000: Lotus Notes database
  152. 5f434153455f: EnCase case file, EnCase case file
  153. 4a4152435300: JARCS compressed archive
  154. 504b4c495445: PKLITE archive
  155. 554641c6d2c1: UFA compressed archive
  156. 001400000102: BIOS details in RAM, BIOS details in RAM
  157. 4d4d4d440000: Yamaha Synthetic music Mobile Application Format
  158. 01da01010003: Silicon Graphics RGB Bitmap
  159. 575332303030: WordStar for Windows file
  160. 564350434830: Visual C PreCompiled header
  161. 414f4c494458: AOL client preferences|settings file
  162. 62706c697374: Binary property list (plist), Binary property list (plist)
  163. 7b5c72746631: RTF file
  164. 4e616d653a20: Agent newsreader character map
  165. 458600000600: QuickBooks backup
  166. 4d56323134: Milestones project management file_1
  167. fdffffff23: Excel spreadsheet subheader_5
  168. fdffffff04: Visual Studio Solution subheader
  169. be000000ab: MS Write file_3
  170. fdffffff29: Excel spreadsheet subheader_7
  171. 504b537058: PKSFX self-extracting archive
  172. 7b5c707769: MS WinMobile personal note
  173. fdffffff20: Developer Studio subheader
  174. 5b5645525d: Lotus AMI Pro document_1
  175. ff464f4e54: Windows international code page
  176. 5b7665725d: Lotus AMI Pro document_2
  177. 7b0d0a6f20: Windows application log, Windows application log
  178. 7573746172: Tape Archive
  179. 5b4d535643: Visual C++ Workbench Info File
  180. 414f4c4442: AOL address book, AOL user configuration
  181. 4848474231: Harvard Graphics presentation file
  182. 626567696e: UUencoded file, UUencoded file
  183. 2e7261fd00: RealAudio streaming media
  184. 4344303031: ISO-9660 CD Disc Image
  185. 5349542100: StuffIt archive
  186. fdffffff22: Excel spreadsheet subheader_4
  187. fdffffff10: Excel spreadsheet subheader_2
  188. 3037303730: cpio archive, cpio archive
  189. 4e49544630: National Imagery Transmission Format file
  190. fdffffff1f: Excel spreadsheet subheader_3
  191. fdffffff28: Excel spreadsheet subheader_6
  192. 464f524d00: Audio Interchange File
  193. 4d41523100: Mozilla archive
  194. 4d41723000: MAr compressed archive
  195. 2321414d52: Adaptive Multi-Rate ACELP Codec (GSM)
  196. 4d494c4553: Milestones project management file
  197. 53484f57: Harvard Graphics presentation
  198. ffd8ffe3: SAMSUNG D500 JPEG FILE
  199. 58435000: Packet sniffer files
  200. 4d415243: Microsoft|MSN MARC archive
  201. 504d4343: Windows Program Manager group file
  202. 434d5831: Corel Binary metafile
  203. 006e1ef0: PowerPoint presentation subheader_1
  204. ffffffff: DOS system driver
  205. 4d52564e: VMware BIOS state file
  206. 67490000: Win2000|XP printer spool file
  207. ffd8ffe0: JPEG IMAGE, JFIF IMAGE FILE - jpeg, JPEG IMAGE, JPE IMAGE FILE - jpeg, JPEG IMAGE, JPEG IMAGE
  208. 736c682e: Allegro Generic Packfile (uncompressed)
  209. e3828596: Win98 password file
  210. 68490000: Win Server 2003 printer spool file
  211. d20a0000: WinPharoah filter file
  212. 5f27a889: Jar archive
  213. 0a050101: ZSOFT Paintbrush file_3
  214. d7cdc69a: Windows graphics metafile
  215. 2e736e64: NeXT|Sun Microsystems audio file
  216. 504b0708: PKZIP archive_3
  217. 47494638: GIF file
  218. c8007900: Jeppesen FliteLog file
  219. 77696465: QuickTime movie_4
  220. 414d594f: Harvard Graphics symbol graphic
  221. 41435344: AOL parameter|info files, AOL parameter|info files
  222. 1a350100: WinPharoah capture file
  223. 4d4d002a: TIFF file_3, TIFF file_3
  224. c5d0d3c6: Adobe encapsulated PostScript
  225. 4b490000: Win9x printer spool file
  226. 43524547: Win9x registry hive
  227. 66726565: QuickTime movie_2
  228. fffe0000: UTF-32|UCS-4 file, UTF-32|UCS-4 file
  229. 706e6f74: QuickTime movie_5
  230. 51454c20: QDL Quicken data
  231. 72696666: Sonic Foundry Acid Music File
  232. 2e524d46: RealMedia streaming media, RealMedia streaming media
  233. b04d4643: Win95 password file
  234. a1b2c3d4: tcpdump (libpcap) capture file, tcpdump (libpcap) capture file
  235. 04000000: INFO2 Windows recycle bin_1, INFO2 Windows recycle bin_1
  236. 00000200: Windows cursor, QuattroPro spreadsheet
  237. 3f5f0300: Windows Help file_2, Windows Help file_2
  238. 444d5321: Amiga DiskMasher compressed archive
  239. 46726f6d: Generic e-mail_2
  240. 64000000: Intel PROset|Wireless Profile
  241. 0e574b53: DeskMate Worksheet
  242. a0461df0: PowerPoint presentation subheader_3
  243. fdffffff: Thumbs.db subheader
  244. 737a657a: PowerBASIC Debugger Symbols
  245. 55434558: Unicode extensions
  246. 0f00e803: PowerPoint presentation subheader_2
  247. 646e732e: Audacity audio file
  248. 41433130: Generic AutoCAD drawing
  249. edabeedb: RedHat Package Manager
  250. 03000000: Quicken price history
  251. 4a47030e: AOL ART file_1
  252. cfad12fe: Outlook Express e-mail folder
  253. 72656766: WinNT registry file
  254. 4c4e0200: Windows help file_3, Windows help file_3
  255. 49545346: MS Compiled HTML Help File, MS Compiled HTML Help File
  256. 4d4c5357: Skype localization data file
  257. 05000000: INFO2 Windows recycle bin_2, INFO2 Windows recycle bin_2
  258. 48695021: Houdini image file. Three-dimensional modeling and animation
  259. 00014241: Palm Address Book Archive, Palm Address Book Archive
  260. 41724301: FreeArc compressed file
  261. 49536328: Install Shield compressed file, Install Shield compressed file
  262. 434f5744: VMware 3 Virtual Disk
  263. 0a030101: ZSOFT Paintbrush file_2
  264. 434f4d2b: COM+ Catalog
  265. 2e524543: RealPlayer video file (V11+)
  266. cafebabe: Java bytecode
  267. 52545353: WinNT Netmon capture file
  268. 010f0000: SQL Data Base
  269. 0a020101: ZSOFT Paintbrush file_1
  270. 4a47040e: AOL ART file_2
  271. 52494646: 4X Movie video, 4X Movie video, Windows animated cursor, Resource Interchange File Format, Resource Interchange File Format, CorelDraw document, Corel Presentation Exchange metadata, Video CD MPEG movie, Micrografx Designer graphic, Resource Interchange File Format, Resource Interchange File Format, Resource Interchange File Format
  272. 4d563243: Milestones project management file_2
  273. d4c3b2a1: WinDump (winpcap) capture file, WinDump (winpcap) capture file
  274. dba52d00: Word 2.0 file
  275. 49492a00: TIFF file_2, TIFF file_2
  276. 07534b46: SkinCrafter skin
  277. 7e424b00: Corel Paint Shop Pro image
  278. 00000100: Windows icon|printer spool file, Windows icon|printer spool file
  279. 53434d49: Img Software Bitmap
  280. 6c33336c: Skype user data file
  281. 000001b3: MPEG video file
  282. 44424648: Palm Zire photo database
  283. 66490000: WinNT printer spool file
  284. a1b2cd34: Extended tcpdump (libpcap) capture file, Extended tcpdump (libpcap) capture file
  285. 504b0304: Customization files, MS Office Open XML Format Document, Java archive_1, KWord document, OpenDocument template, OpenDocument template, OpenDocument template, MS Office Open XML Format Document, StarOffice spreadsheet, OpenOffice documents, OpenOffice documents, OpenOffice documents, Windows Media compressed skin file, MS Office Open XML Format Document, Mozilla Browser Archive, XML paper specification file, eXact Packager Models, PKZIP archive_1
  286. b168de3a: PCX bitmap
  287. 4d534346: Microsoft cabinet file, Powerpoint Packaged Presentation, MS Access Snapshot Viewer file
  288. 6d6f6f76: QuickTime movie_1
  289. 25504446: PDF file, PDF file
  290. b46e6844: Acronis True Image
  291. ffd8ffe2: CANNON EOS JPEG FILE
  292. 7f454c46: ELF executable, ELF executable
  293. 5a4f4f20: ZOO compressed archive
  294. 6d646174: QuickTime movie_3
  295. 504b0506: PKZIP archive_2
  296. 736b6970: QuickTime movie_6
  297. 574d4d50: Walkman MP3 file
  298. 91334846: Hamarsoft compressed archive
  299. 34cdb2a1: Tcpdump capture file, Tcpdump capture file
  300. ffd8ffe1: Digital camera JPG using Exchangeable Image File Format (EXIF)
  301. 5343486c: Underground Audio
  302. 00014244: Palm DateBook Archive
  303. 5041434b: Quake archive file
  304. 736c6821: Allegro Generic Packfile (compressed)
  305. 4d4d002b: TIFF file_4, TIFF file_4
  306. ff575043: WordPerfect text and graphics, WordPerfect text and graphics, WordPerfect text and graphics, WordPerfect text and graphics, WordPerfect text and graphics, WordPerfect text and graphics
  307. 47504154: GIMP pattern file
  308. ffd8ffe8: Still Picture Interchange File Format (SPIFF)
  309. 4e422a00: MS Windows journal, MS Windows journal
  310. c3abcdab: MS Agent Character file
  311. 4d546864: MIDI sound file, MIDI sound file
  312. 7a626578: ZoomBrowser Image Index
  313. 50455354: PestPatrol data|scan strings
  314. 38425053: Photoshop image
  315. 02647373: Digital Speech Standard file
  316. eca5c100: Word document subheader
  317. 0d444f43: DeskMate Document
  318. 000001ba: DVD video file, DVD video file
  319. eb3c902a: GEM Raster file
  320. 414f4c: AOL config files, AOL config files, AOL config files, AOL config files, AOL config files, AOL config files
  321. 492049: TIFF file_1, TIFF file_1
  322. 435753: Shockwave Flash file
  323. 444f53: Amiga disk file
  324. 736d5f: PalmOS SuperMemo
  325. 425a68: bzip2 compressed archive, bzip2 compressed archive, bzip2 compressed archive, bzip2 compressed archive
  326. 81cdab: WordPerfect text
  327. 2d6c68: Compressed archive, Compressed archive
  328. 504158: PAX password protected bitmap
  329. 1a0000: Lotus Notes database template
  330. 1f8b08: GZIP archive file
  331. 414376: Steganos virtual secure drive
  332. 50350a: Portable Graymap Graphic
  333. 4b444d: VMware 4 Virtual Disk
  334. 475832: Show Partner graphics file
  335. 1f9d90: Compressed tape archive_1
  336. efbbbf: UTF8 file, UTF8 file
  337. 445644: DVR-Studio stream file, DVD info file
  338. 494433: MP3 audio file
  339. 464c56: Flash video file
  340. 514649: Qcow Disk Image
  341. 465753: Shockwave Flash player
  342. aced: Java serialization data, Java serialization data
  343. fffe: Windows Registry file
  344. 0110: Novell LANalyzer capture file
  345. 1d7d: WordStar Version 5.0|6.0 document
  346. 1a03: LH archive (old vers.|type 2)
  347. 4550: MS Document Imaging file
  348. 9500: PGP secret keyring_1
  349. 9901: PGP public keyring
  350. 1a0b: PAK Compressed archive file
  351. 4d56: CD Stomper Pro label file
  352. 2112: AIN Compressed Archive
  353. 1a09: LH archive (old vers.|type 5)
  354. dcfe: eFax file
  355. 1a04: LH archive (old vers.|type 3)
  356. 0ced: Monochrome Picture TIFF bitmap
  357. 31be: MS Write file_1
  358. 0011: FLIC animation
  359. 6f3c: SMS text (SIM), SMS text (SIM)
  360. 4f7b: Visio|DisplayWrite 4 text file
  361. 60ea: ARJ Compressed archive file
  362. 4c01: MS COFF relocatable object code
  363. feef: Symantex Ghost image file, Symantex Ghost image file
  364. 1a02: LH archive (old vers.|type 1)
  365. 582d: Exchange e-mail
  366. dcdc: Corel color palette
  367. 5854: MS Publisher
  368. 9501: PGP secret keyring_2
  369. 32be: MS Write file_2
  370. 424d: Bitmap image, Bitmap image
  371. feff: UTF-16|UCS-2 file, UTF-16|UCS-2 file
  372. d42a: AOL history|typed URL files, AOL history|typed URL files
  373. 4d5a: Windows virtual device drivers, Windows virtual device drivers, MS audio compression manager driver, Library cache file, Windows|DOS executable file, Control panel application, Windows|DOS executable file, Windows|DOS executable file, Windows|DOS executable file, Font file, ActiveX|OLE Custom Control, OLE object library, Windows|DOS executable file, Windows|DOS executable file, Windows|DOS executable file, Screen saver, Windows|DOS executable file, VisualBASIC application, Windows virtual device drivers
  374. 1a08: LH archive (old vers.|type 4)
  375. 1fa0: Compressed tape archive_2
  376. 2320: Cerius2 file
  377. 07: Generic drawing programs
  378. 04: dBASE IV file
  379. 99: GPG public keyring
  380. 3c: Advanced Stream Redirector, BizTalk XML-Data Reduced Schema
  381. 08: dBASE IV or dBFast configuration file
  382. 30: MS security catalog file
  383. e8: Windows executable file_1, Windows executable file_1
  384. 80: Relocatable object code
  385. 78: MacOS X image file
  386. e9: Windows executable file_2, Windows executable file_2
  387. 03: MapInfo Native Data Format, dBASE III file
  388. ff: Windows executable
  389. eb: Windows executable file_3, Windows executable file_3
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement