GCK File Signature Table Powered by

Logo
AboutHome

About

This table of file signatures (also known as "magic numbers") is a continuing work in progres, started by Dr. Gary Kessler in 2002. See also Wikipedia's List of File Signatures Comments, additions and queries can be sent to SEARCH's Cybercrime and Digital Forensics Program at cyber@search.org


This list is not exhaustive, although new files are added when they are found or when someone contributes a signature. Interpret this table as a one-way function: the magic number generally indicates the file type, whereas the file type does not always have the given magic number. If you want to know what a particular file extension refers, check out File Extension Seeker: Metasearch engine for file extensions.


Some other useful information:


If you are using a Linux/MacOS/Unix system, you can use the file command to determine the file type based upon the file signature, per the system's magic file.

And, one final item — if you are searching for network traffic in raw binary files (e.g., RAM or unallocated space), see Hints About Looking for Network Packet Fragments.


© 2025 SEARCH Group, Incorporated