WMV Video (ASF)
| Format | WMV Video (ASF) |
|---|---|
| Short name | WMV |
| Category | media |
| Platforms | Windows |
| Crush support | Not yet supported |
| Status | Reviewed |
| Last reviewed | 2026-10-05 |
Forensic relevance
Windows Media Video in the Advanced Systems Format (ASF) container, which is also used for WMA audio. The file is a sequence of GUID-identified objects: the header object holds the File Properties Object (file ID, creation date, play duration, packet count), stream properties and optional metadata such as title and author, followed by the data object and optional index objects. WMV is still encountered in older camera, screen recording and video surveillance exports. Audio-only and video files share the same header signature and are distinguished by their stream types.
Signatures
| Offset | Hex | ASCII (non-printable as .) | Description |
|---|---|---|---|
| offset 0 (0x0) | 30 26 B2 75 8E 66 CF 11 A6 D9 00 AA 00 62 CE 6C | 0&.u.f.......b.l | ASF header object GUID 75B22630-668E-11CF-A6D9-00AA0062CE6C at offset 0 (shared with WMA; distinguished by stream type) |
Known extensions
.wmv, .asf
References
- ASF File Structure (Microsoft) https://learn.microsoft.com/en-us/windows/win32/medfound/asf-file-structure
- Advanced Systems Format (PRONOM fmt/131) https://www.nationalarchives.gov.uk/pronom/fmt/131
Cite this entry
Crush Format Reference, “WMV Video (ASF)”. https://kalink0.github.io/crush-forensics/formats/wmv/ — source: crush/data/build_formats_db.py at commit 640a2a9928f4e36a976b89901512a8dce824d093, built 2026-10-21 06:46:19 UTC.
Entry in the source at this commit · Change history of the source · Report a correction