Skip to content

Object Linking and Embedding magic bytes (.wiz)

.wiz file signature: D0 CF 11 E0 A1 B1 1A E1 | application/octet-stream

Category: Office

An Object Linking and Embedding (OLE) Compound File, created by Microsoft for its Structured Storage architecture, is a legacy container format for storing multiple streams and properties within a single file. It is used primarily by Microsoft Office 97–2003 applications and related wizard or template files. The format is obsolete in modern Office workflows, and files from untrusted sources may contain embedded macros or active content that require caution.

Safe

Magic Bytes

Offset 0
D0 CF 11 E0 A1 B1 1A E1

Sources: Gary Kessler

Validation Code

How to validate .wiz files in Python

Python
def is_wiz(file_path: str) -> bool:
    """Check if file is a valid WIZ by magic bytes."""
    signature = bytes([0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1])
    with open(file_path, "rb") as f:
        return f.read(8) == signature

How to validate .wiz files in Node.js

Node.js
function isWIZ(buffer: Buffer): boolean {
  const signature = Buffer.from([0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1]);
  return buffer.subarray(0, 8).equals(signature);
}

How to validate .wiz files in Go

Go
func IsWIZ(data []byte) bool {
    signature := []byte{0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}
    if len(data) < 8 {
        return false
    }
    return bytes.Equal(data[:8], signature)
}

API Endpoint

GET /api/v1/wiz
curl https://filesignature.org/api/v1/wiz

See the full API documentation for all endpoints and parameters.

Related Formats

Frequently Asked Questions

What is a .wiz file?

A .wiz file is an Object Linking and Embedding file. An Object Linking and Embedding (OLE) Compound File, created by Microsoft for its Structured Storage architecture, is a legacy container format for storing multiple streams and properties within a single file. It is used primarily by Microsoft Office 97–2003 applications and related wizard or template files. The format is obsolete in modern Office workflows, and files from untrusted sources may contain embedded macros or active content that require caution.

What are the magic bytes for .wiz files?

The magic bytes for Object Linking and Embedding (.wiz) files are D0 CF 11 E0 A1 B1 1A E1 at byte offset 0. These bytes identify the file format more reliably than the extension alone.

How do I validate a .wiz file?

To validate a .wiz file, read the first bytes of the file and compare them against the known magic bytes (D0 CF 11 E0 A1 B1 1A E1) at offset 0. This is more reliable than checking the file extension alone, as extensions can be renamed.

What is the MIME type for .wiz files?

There is no officially registered MIME type for .wiz files. Systems typically use application/octet-stream as a generic fallback when handling this format.

Is it safe to open .wiz files?

Object Linking and Embedding (.wiz) files are generally safe to open. They are classified as low risk because they primarily contain data rather than executable code. However, always ensure files come from a trusted source.