ImHex-Patterns

Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor

Table of Contents

Hex Patterns

Name	MIME	Path	Description
BMP	image/bmp	patterns/bmp.hexpat	OS2/Windows Bitmap files
ELF	application/x-executable	patterns/elf.hexpat	ELF header in elf binaries
PE	application/x-dosexec	patterns/pe.hexpat	PE header, COFF header, Standard COFF fields and Windows Specific fields
NE		patterns/ne.hexpat	NE header and Standard NE fields
Intel HEX		patterns/intel_hex.hexpat	Intel hexadecimal object file format definition
MIDI	audio/midi	patterns/midi.hexpat	MIDI header, event fields provided
WAV	audio/wav	patterns/wav.hexpat	RIFF header, WAVE header, PCM header
ZIP	application/zip	patterns/zip.hexpat	End of Central Directory Header, Central Directory File Headers
PCAP	application/vnd.tcpdump.pcap	patterns/pcap.hexpat	pcap header and packets
SPIRV		patterns/spirv.hexpat	SPIR-V header and instructions
AFE2		patterns/afe2.hexpat	Nintendo Switch Atmosphère CFW Fatal Error log
AR	application/x-archive	patterns/ar.hexpat	Static library archive files
NACP		patterns/nacp.hexpat	Nintendo Switch NACP files
NRO		patterns/nro.hexpat	Nintendo Switch NRO files
PRODINFO		patterns/prodinfo.hexpat	Nintendo Switch PRODINFO
Java Class	application/x-java-applet	patterns/java_class.hexpat	Java Class files
ARM VTOR		patterns/arm_cm_vtor.hexpat	ARM Cortex M Vector Table Layout
ICO		patterns/ico.hexpat	Icon (.ico) or Cursor (.cur) files
PNG	image/png	patterns/png.hexpat	PNG image files
QOI	image/qoi	patterns/qoi.hexpat	QOI image files
DDS	image/vnd-ms.dds	patterns/dds.hexpat	DirectDraw Surface
TGA	image/tga	patterns/tga.hexpat	Truevision TGA/TARGA image
ISO		patterns/iso.hexpat	ISO 9660 file system
VDF		patterns/vdf.hexpat	Binary Value Data Format (.vdf) files
IP		patterns/ip.hexpat	Ethernet II Frames (IP Packets)
UF2		patterns/uf2.hexpat	USB Flashing Format
File System		patterns/fs.hexpat	Drive File System
Bencode	application/x-bittorrent	patterns/bencode.hexpat	Bencode encoding, used by Torrent files
Protobuf		patterns/protobuf.hexpat	Google Protobuf encoding
OGG	audio/ogg	patterns/ogg.hexpat	OGG Audio format
STL	model/stl	patterns/stl.hexpat	STL 3D Model format
VHDX		patterns/vhdx.hexpat	Microsoft Hyper-V Virtual Hard Disk format
NTAG		patterns/ntag.hexpat	NTAG213/NTAG215/NTAG216, NFC Forum Type 2 Tag compliant IC
Shell Link	application/x-ms-shortcut	patterns/lnk.hexpat	Windows Shell Link file format
Xilinx BIT		patterns/xilinx_bit.hexpat	Xilinx FPGA Bitstreams
FLAC	audio/flac	patterns/flac.hexpat	Free Lossless Audio Codec, FLAC Audio Format
BSON	application/bson	patterns/bson.hexpat	BSON (Binary JSON) format
msgpack	application/x-msgpack	patterns/msgpack.hexpat	MessagePack binary serialization format
MiniDump	application/x-dmp	patterns/minidump.hexpat	Windows MiniDump files
ID3	audio/mpeg	patterns/id3.hexpat	ID3 tags in MP3 files
TAR	application/x-tar	patterns/tar.hexpat	Tar file format
CPIO	application/x-cpio	patterns/cpio.hexpat	Old Binary CPIO Format
FDT		patterns/fdt.hexpat	Flat Linux Device Tree blob
StuffItV5	application/x-stuffit	patterns/sit5.hexpat	StuffIt V5 archive
NBT		patterns/nbt.hexpat	Minecraft NBT format
PCX	application/x-pcx	patterns/pcx.hexpat	PCX Image format
GZIP	application/gzip	patterns/gzip.hexpat	GZip compressed data format
PFS0		patterns/pfs0.hexpat	Nintendo Switch PFS0 archive (NSP files)
XCI		patterns/xci.hexpat	Nintendo Switch XCI cardridge ROM
WAD		patterns/wad.hexpat	DOOM WAD Archive
GIF	image/gif	patterns/gif.hexpat	GIF image files
ZSTD	application/zstd	patterns/zstd.hexpat	Zstandard compressed data format
COFF	application/x-coff	patterns/coff.hexpat	Common Object File Format (COFF) executable
Mach-O	application/x-mach-binary	patterns/macho.hexpat	Mach-O executable
CHM		patterns/chm.hexpat	Windows HtmlHelp Data (ITSF / CHM)
DMG		patterns/dmg.hexpat	Apple Disk Image Trailer (DMG)
XBEH	audio/x-xbox-executable	patterns/xbeh.hexpat	Xbox executable
QBCL		patterns/qbcl.hexpat	Qubicle voxel scene project file
CCHVA		patterns/cchva.hexpat	Command and Conquer Voxel Animation
CCVXL		patterns/ccvxl.hexpat	Command and Conquer Voxel Model
CCPAL		patterns/ccpal.hexpat	Command and Conquer Voxel Palette
PIF	image/pif	patterns/pif.hexpat	PIF Image Format
JPEG	image/jpeg	patterns/jpeg.hexpat	JPEG Image Format

Scripts

Name	Path	Description
svd2pat	scripts/svd2pat.py	Converts a ARM .svd register MMIO definition file into a pattern
csv2tbl	scripts/csv2tbl.py	Converts a 010 editor CSV encoding file into a table file

Pattern Libraries

Name	Path	Description
libstd	includes/std/*	Pattern Language Standard Libaray
libtype	includes/type/*	Various custom types with special formatters
libhex	includes/hex/*	Functions to interact with ImHex

Yara rules

Name	Path	Description
Official Rules	yara/official_rules/*	Official Yara rules repository

Magic files

Name	Path	Description
Nintendo Switch	magic/nintendo_switch_magic	Identifies common file types used on the Nintendo Switch
Portable Executable	magic/portable_executable_magic	Identifies PE files used on Windows

Constants files

Name	Path	Description
CRC-16	constants/crc16.json	Constants associated with CRC-16 operations
CRC-32	constants/crc32.json	Constants associated with CRC-32 operations
HTTP-Codes	constants/http_status.json	HTTP Status code values
Linux Error Codes	constants/linux_errors.json	Values of Linux error results

Encoding files

Name	Path	Description
Arabic ISO	encodings/arabic_iso.tbl	Arabic ISO encoding
Arabic Windows	encodings/arabic_windows.tbl	Arabic Windows encoding
ASCII	encodings/ascii.tbl	Regular ASCII encoding
ASCII+ANSI	encodings/ascii_ansi.tbl	Extended ASCII encoding
ASCII+OEM	encodings/ascii_oem.tbl	ASCII encoding with Windows OEM characters
Baltic ISO	encodings/baltic_iso.tbl	Baltic ISO encoding
Baltic Windows	encodings/baltic_windows.tbl	Baltic Windows encoding
Cyrillic ISO	encodings/cyrillic_iso.tbl	Cyrillic ISO encoding
Cyrillic Windows	encodings/cyrillic_windows.tbl	Cyrillic Windows encoding
Cyrillic KOI8-R	encodings/cyrillic_koi8_r.tbl	Cyrillic KOI8-R encoding (Russian Characters)
Cyrillic KOI8-U	encodings/cyrillic_koi8_u.tbl	Cyrillic KOI8-U encoding (Ukranian Characters)
Eastern Europe ISO	encodings/eastern_europe_iso.tbl	Eastern Europe ISO encoding
Eastern Europe Windows	encodings/eastern_europe_windows.tbl	Eastern Europe Windows encoding
EBCDIC	encodings/ebcdic.tbl	Extended Binary Coded Decimal Interchange Code, developed by IBM for their Main Frames
EUC-JP	encodings/euc_jp.tbl	EUC-JP encoding with NEC special and IBM extended characters
EUC-KR	encodings/euc_kr.tbl	EUC-KR encoding
Greek ISO	encodings/greek_iso.tbl	Greek ISO encoding
Greek Windows	encodings/greek_windows.tbl	Greek Windows encoding
Hebrew ISO	encodings/hebrew_iso.tbl	Hebrew ISO encoding
Hebrew Windows	encodings/hebrew_windows.tbl	Hebrew Windows encoding
ISO/IEC 646	encodings/iso_646.tbl	ISO/IEC 646 encoding, an older version of ASCII
ISO/IEC 6937	encodings/iso_6937.tbl	ISO/IEC 6937 encoding, an extension of ASCII containing additional character
JIS 0201	encodings/jis_x_0201.tbl	JIS X 0201 encoding in UTF-8
JIS X 0211	encodings/jis_x_0211.tbl	JIS X 0211 encoding in UTF-8
JIS 0213	encodings/jis_x_0213.tbl	JIS X 0213 encoding in UTF-8
Macintosh	encodings/macintosh.tbl	Macintosh character encoding used by the Kermit protocol
Pokémon (English, Generation 1)	encodings/pokegen1_en.tbl	Character encoding used by the English generation 1 Pokémon games
Shift-JIS UTF-8	encodings/shiftjis.tbl	Shift-JIS encoding in UTF-8
Thai	encodings/thai.tbl	Thai character encoding
Turkish ISO	encodings/turkish_iso.tbl	Turkish ISO encoding
Turkish Windows	encodings/turkish_windows.tbl	Turkish Windows encoding
UTF-8	encodings/utf8.tbl	UTF-8 encoding
Vietnamese	encodings/vietnamese.tbl	Vietnamese character encoding

Data Processor Nodes

Name	Path	Description
Caesar Cipher	nodes/caesar.hexnode	Simple adjustable per-byte Caecar Cipher (ROT)
XOR Cipher	nodes/xor.hexnode	XORs a input with a repeating XOR pad

Themes

Name	Path	Description
Visual Studio Dark	themes/vs_dark.json	Theme similar to Visual Studio's Dark theme

Contributing

If you want to contribute a file to the database, please make a PR which adds it to the right folder and adds a new entry to the table in this readme. To take advantage of the automatic pattern testing, please consider adding a test file named <pattern_name>.hexpat.<extension> to the /tests/patterns/test_data directory. Try to keep this file as small as possible so the repository doesn't become excessively large

Thanks a lot :)