{"success":true,"data":{"ext":"eml","name":"A commmon file extension for e-mail files","description":"EML is a de facto file format for Internet e-mail messages, based on the message/rfc822 standard defined and maintained by the IETF. It is used to store and exchange individual e-mail messages in clients such as Microsoft Outlook Express, Mozilla Thunderbird, Eudora, and similar mail programs. The format is generally safe, but messages may contain attachments, links, or scripts, so files from untrusted sources should still be handled cautiously.","mime":["message/rfc822"],"risk_level":"Safe","signatures":[{"hex":"23 21 20 72 6E 65 77 73","offset":0,"sources":[{"name":"Apache Tika","url":"https://raw.githubusercontent.com/apache/tika/main/tika-core/src/main/resources/org/apache/tika/mime/tika-mimetypes.xml"}]},{"hex":"4E 23 21 20 72 6E 65 77 73","offset":0,"sources":[{"name":"Apache Tika","url":"https://raw.githubusercontent.com/apache/tika/main/tika-core/src/main/resources/org/apache/tika/mime/tika-mimetypes.xml"}]},{"hex":"46 6F 72 77 61 72 64 20 74 6F","offset":0,"sources":[{"name":"Apache Tika","url":"https://raw.githubusercontent.com/apache/tika/main/tika-core/src/main/resources/org/apache/tika/mime/tika-mimetypes.xml"}]},{"hex":"50 69 70 65 20 74 6F","offset":0,"sources":[{"name":"Apache Tika","url":"https://raw.githubusercontent.com/apache/tika/main/tika-core/src/main/resources/org/apache/tika/mime/tika-mimetypes.xml"}]},{"hex":"58 2D 4D 61 69 6C 65 72 3A","offset":0,"sources":[{"name":"Apache Tika","url":"https://raw.githubusercontent.com/apache/tika/main/tika-core/src/main/resources/org/apache/tika/mime/tika-mimetypes.xml"}]},{"hex":"58 2D 4E 6F 74 65 73 2D 49 74 65 6D 3A","offset":0,"sources":[{"name":"Apache Tika","url":"https://raw.githubusercontent.com/apache/tika/main/tika-core/src/main/resources/org/apache/tika/mime/tika-mimetypes.xml"}]},{"hex":"52 65 63 65 69 76 65 64","offset":0,"sources":[{"name":"Wikipedia","url":"https://en.wikipedia.org/wiki/List_of_file_signatures"}]},{"hex":"46 72 6F 6D 20 20 20","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]},{"hex":"46 72 6F 6D 20 3F 3F 3F","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]},{"hex":"46 72 6F 6D 3A 20","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]},{"hex":"52 65 74 75 72 6E 2D 50 61 74 68 3A 20","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]},{"hex":"58 2D","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]}],"related":["emlx","mime","dbx","dci","msf","mbox"],"usage":{"python":"def is_eml(file_path: str) -> bool:\n    \"\"\"Check if file is a valid EML by magic bytes.\"\"\"\n    signature = bytes([0x23, 0x21, 0x20, 0x72, 0x6E, 0x65, 0x77, 0x73])\n    with open(file_path, \"rb\") as f:\n        return f.read(8) == signature","node":"function isEML(buffer: Buffer): boolean {\n  const signature = Buffer.from([0x23, 0x21, 0x20, 0x72, 0x6E, 0x65, 0x77, 0x73]);\n  return buffer.subarray(0, 8).equals(signature);\n}","go":"func IsEML(data []byte) bool {\n    signature := []byte{0x23, 0x21, 0x20, 0x72, 0x6E, 0x65, 0x77, 0x73}\n    if len(data) < 8 {\n        return false\n    }\n    return bytes.Equal(data[:8], signature)\n}"},"category":"Email & PIM"}}