Android Binary XML (ABX)
| Format | Android Binary XML (ABX) |
|---|---|
| Short name | ABX |
| Category | serialization |
| Platforms | Android |
| Crush support | Supported (AbxParser) |
| Status | Reviewed |
| Last reviewed | 2026-10-04 |
Forensic relevance
Android system configuration stored as compact binary XML, introduced in Android 12 and used mainly for system files. Files keep the .xml name (sometimes .abx) and are recognisable only by their header. Key files include packages.xml (installed apps and permissions) and the settings files (global, secure, system). Provides insight into installed software, permission grants, and system configuration state.
Signatures
| Offset | Hex | ASCII (non-printable as .) | Description |
|---|---|---|---|
| offset 0 (0x0) | 41 42 58 00 | ABX. | Android Binary XML header |
Known extensions
.xml, .abx
References
- AOSP source (BinaryXmlSerializer) https://cs.android.com/android/platform/superproject/main/+/main:frameworks/libs/modules-utils/java/com/android/modules/utils/BinaryXmlSerializer.java
- AOSP abx utility source https://android.googlesource.com/platform/frameworks/base/+/refs/heads/main/cmds/abx/
- CCL Solutions Group — ABX research https://www.cclsolutionsgroup.com/post/android-abx-binary-xml
- Android settings forensic analysis (Mattia Epifani) https://blog.digital-forensics.it/2024/01/analysis-of-android-settings-during.html
Cite this entry
Crush Format Reference, “Android Binary XML (ABX)”. https://kalink0.github.io/crush-forensics/formats/abx/ — source: crush/data/build_formats_db.py at commit 640a2a9928f4e36a976b89901512a8dce824d093, built 2026-10-21 06:46:19 UTC.
Entry in the source at this commit · Change history of the source · Report a correction