Crush — Format Reference

Built from crush/data/build_formats_db.py at commit 640a2a9928f4 on 2026-10-21 06:46:19 UTC.

← All formats

WAV Audio

FormatWAV Audio
Short nameWAV
Categorymedia
PlatformsWindows, macOS, Linux, iOS, Android, QNX
Crush supportSupported (MediaParser)
StatusReviewed
Last reviewed2026-10-04

Forensic relevance

RIFF-based audio container, typically holding uncompressed PCM, used for voice recordings, call recordings, dictation devices, bodycams, and professional recorders. RIFF INFO chunks may contain title, creation date, originator, and software. The Broadcast Wave Format (BWF) extension adds a 'bext' chunk with: originator name and reference, origination date and time (YYYY-MM-DD / HH:MM:SS; time zone not defined by the specification), TimeReference (64-bit sample count since midnight — precise recording timestamp), and a CodingHistory field describing the encoding chain. No native encryption — audio is directly accessible. Standard RIFF is limited to ~4GB; larger files use RF64 extension.

Signatures

OffsetHex ASCII (non-printable as .)Description
offset 0 (0x0)52 49 46 46RIFFRIFF container header
offset 0 (0x0)52 46 36 34RF64RF64 header (WAV/BWF larger than 4 GB)
offset 8 (0x8)57 41 56 45WAVEWAVE subtype identifier at offset 8

Known extensions

.wav, .bwf

References

Cite this entry

Crush Format Reference, “WAV Audio”. https://kalink0.github.io/crush-forensics/formats/wav/ — source: crush/data/build_formats_db.py at commit 640a2a9928f4e36a976b89901512a8dce824d093, built 2026-10-21 06:46:19 UTC.

Entry in the source at this commit · Change history of the source · Report a correction