VDI File signature

[mikhl]

Hi,

i was wondering if someone would be able to tell me what the file signature for a .vdi virtual hard disk is. i have gathered this:

Code: Select all

HEX: 3C 3C 3C 20 4F 72 61 63 6C 65 20 56 4D 20 56 69 72 74 75 61 6C 42 6F 78 20 44 69 73 6B 20 49 6D 61 67 65 20 3E 3E
Text: <<< Oracle VM VirtualBox Disk Image >>>

Is this correct? I was wondering if this would be the same for all .vdi virtual haed disk images.

Thanks in advance.

-mikhl

[mpack]

In theory that string is just free text and could be anything: and there has definitely been more than one value. The value tends to change every time the VirtualBox product name or owner changes, or if the VDI was created by a third party app. Below are some of the values I've encountered:

"<<< Sun VirtualBox Disk Image >>>\n"
"<<< Sun xVM VirtualBox Disk Image >>>\n"
"<<< innotek VirtualBox Disk Image >>>\n"
"<<< CloneVDI VirtualBox Disk Image >>>\n"
"<<< QEMU VM Virtual Disk Image >>>\n"
"<<< Oracle VM VirtualBox Disk Image >>>\n"

In case you're not a C user, "\n" is C notation for a newline character (chr 10).