HIV
application/octet-stream
Magic Bytes
Offset: 0
72 65 67 66
The Windows Registry Hive is a binary file format developed by Microsoft to store hierarchical configuration data for the Windows operating system. These files, typically located in system configuration directories, contain keys and values governing user settings, software installations, and hardware preferences. While not executable, hive files are critical for system stability and are frequently analyzed during digital forensics investigations to reconstruct user activity and system history.
Validation Code
How to validate .hiv files in Python
Python
def is_hiv(file_path: str) -> bool:
"""Check if file is a valid HIV by magic bytes."""
signature = bytes([0x72, 0x65, 0x67, 0x66])
with open(file_path, "rb") as f:
return f.read(4) == signatureHow to validate .hiv files in Node.js
Node.js
function isHIV(buffer: Buffer): boolean {
const signature = Buffer.from([0x72, 0x65, 0x67, 0x66]);
return buffer.subarray(0, 4).equals(signature);
}
Go
func IsHIV(data []byte) bool {
signature := []byte{0x72, 0x65, 0x67, 0x66}
if len(data) < 4 {
return false
}
return bytes.Equal(data[:4], signature)
}API Endpoint
GET
/api/v1/hiv
curl https://filesignature.org/api/v1/hiv