Crush — Format Reference

The file formats Crush knows: what each one contains, where it is found, its signatures and whether Crush can analyse it. This site is built from the format database in the Crush source code; formats.db, bundled with Crush, is built from the same source.

• Crush support: “Supported” means Crush has a parser or container backend for the format (named in brackets). “Not yet supported” means it has none.
• Known extensions are a hint, never proof. Evidence files are routinely renamed, carved or exported without an extension. Crush identifies formats by their content, not by their name.
• Draft: compiled from a brief web search (search engine or AI-assisted) and not reviewed yet. Drafts are not part of formats.db, so Crush neither shows them nor uses their signatures.
• Another curated list of file signatures: GCK File Signature Table, started by Gary Kessler in 2002 and since 2025 maintained by SEARCH.

Machine-readable: formats.json · formats.db

Signature lookup

Enter hex bytes (e.g. 37 7A or 53 51 4C 69 74 65). Lists every signature that contains them, with the offset the signature has in a file. To identify a file, open it in Crush (Show Format Info).

183 formats