IDENTIFIER
application/octet-stream
Magic Bytes
Offset: 0
5B 5A 6F 6E 65 54 72 61 6E 73 66 65 72 5D
The Windows Zone Identifier is a plain text metadata format implemented by Microsoft to support Attachment Execution Services within the Windows NTFS file system. It is automatically attached to downloaded files via Alternate Data Streams to record the source URL and corresponding security zone. This mechanism, colloquially known as the "Mark of the Web," allows the operating system to apply security restrictions or warnings before executing potentially unsafe content from the internet.
Validation Code
How to validate .identifier files in Python
Python
def is_identifier(file_path: str) -> bool:
"""Check if file is a valid IDENTIFIER by magic bytes."""
signature = bytes([0x5B, 0x5A, 0x6F, 0x6E, 0x65, 0x54, 0x72, 0x61, 0x6E, 0x73, 0x66, 0x65, 0x72, 0x5D])
with open(file_path, "rb") as f:
return f.read(14) == signatureHow to validate .identifier files in Node.js
Node.js
function isIDENTIFIER(buffer: Buffer): boolean {
const signature = Buffer.from([0x5B, 0x5A, 0x6F, 0x6E, 0x65, 0x54, 0x72, 0x61, 0x6E, 0x73, 0x66, 0x65, 0x72, 0x5D]);
return buffer.subarray(0, 14).equals(signature);
}
Go
func IsIDENTIFIER(data []byte) bool {
signature := []byte{0x5B, 0x5A, 0x6F, 0x6E, 0x65, 0x54, 0x72, 0x61, 0x6E, 0x73, 0x66, 0x65, 0x72, 0x5D}
if len(data) < 14 {
return false
}
return bytes.Equal(data[:14], signature)
}API Endpoint
GET
/api/v1/identifier
curl https://filesignature.org/api/v1/identifier