Internet Explorer v11 Tracking Protection List file
application/octet-stream
Magic Bytes
Offset: 0
00 3B 05 00 01 00 00 00
The Internet Explorer Tracking Protection List (TPL) is a proprietary configuration file format developed by Microsoft for the Internet Explorer 11 browser. These files function as filtering databases that allow the browser to block content from specific domains known for tracking user activity across the web. While now a legacy format, TPL files are considered safe to handle as they contain static filtering instructions rather than executable logic or scripts.
Validation Code
How to validate .tpl files in Python
Python
def is_tpl(file_path: str) -> bool:
"""Check if file is a valid TPL by magic bytes."""
signature = bytes([0x00, 0x3B, 0x05, 0x00, 0x01, 0x00, 0x00, 0x00])
with open(file_path, "rb") as f:
return f.read(8) == signature
How to validate .tpl files in Node.js
Node.js
function isTPL(buffer: Buffer): boolean {
const signature = Buffer.from([0x00, 0x3B, 0x05, 0x00, 0x01, 0x00, 0x00, 0x00]);
return buffer.subarray(0, 8).equals(signature);
}
Go
func IsTPL(data []byte) bool {
signature := []byte{0x00, 0x3B, 0x05, 0x00, 0x01, 0x00, 0x00, 0x00}
if len(data) < 8 {
return false
}
return bytes.Equal(data[:8], signature)
}
API Endpoint
GET
/api/v1/tpl
curl https://filesignature.org/api/v1/tpl