{"success":true,"data":{"ext":"ghs","name":"Symantex Ghost image file","description":"Symantec Ghost image file (GHS) is a disk imaging format created by Symantec for use with Ghost backup and cloning software. It is used to store system, partition, or volume images for deployment, restoration, and migration across computers. The format is primarily associated with legacy Ghost workflows and is generally safe to open, though image files from untrusted sources should be handled cautiously because they may contain altered or unexpected disk content.","mime":[],"risk_level":"Safe","signatures":[{"hex":"FE EF","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]}],"related":["gho"],"usage":{"python":"def is_ghs(file_path: str) -> bool:\n    \"\"\"Check if file is a valid GHS by magic bytes.\"\"\"\n    signature = bytes([0xFE, 0xEF])\n    with open(file_path, \"rb\") as f:\n        return f.read(2) == signature","node":"function isGHS(buffer: Buffer): boolean {\n  const signature = Buffer.from([0xFE, 0xEF]);\n  return buffer.subarray(0, 2).equals(signature);\n}","go":"func IsGHS(data []byte) bool {\n    signature := []byte{0xFE, 0xEF}\n    if len(data) < 2 {\n        return false\n    }\n    return bytes.Equal(data[:2], signature)\n}"}}}