TrID file identifier

[Mark0]

Hi!

I would like to present this tool I coded, hoping that it may prove useful to someone.



TrID is a free tool designed to identify binary files regardeless of names/extensions. Instead, it use a library of XML definitions that points to recurring patterns for each "knowed" formats.

Actually, more than 1.600 file types are supported, as you can see here:
http://mark0.net/soft-trid-deflist.html

You could also easyly build new defs for some file types you are familiar with. Simply point TrIDScan to a bunch of files of a specific type, and it will generate a newtype.trid.xml file. Rename it so something more meaningfull, edit the file to fill some description fileds, and you are done.
More details here:
http://mark0.net/soft-tridscan-e.html

If you send me the new defs, I will add them to the base library, and update the file types page giving you the proper credits.

There are 3 flavours of TrID.

Cmd line version:
http://mark0.net/soft-trid-e.html

GUI (.NET) version:
http://mark0.net/soft-tridnet-e.html

Also, an online/browser version. This one can be used from any PC with a browser and an internet connection.
http://mark0.net/onlinetrid/trid.aspx

Here's a sample output for an OpenOffice document:



Bye!

[mouser]

wanted to point out that mark0 has a fantastic site of freeware + donationware stuff that he has coded in addition to TriId (http://mark0.net/)
Really nice unusual stuff.

and do not miss the fact that mark0's TriID can be run using an online version if you like - so you just go to the web page, upload the file, and it will try to identify what the file is - extremely cool!

love your stuff mark0, please keep us updated on any new developments!

[Mark0]

I'll be glad to do so!

Thanks,
Bye!

[jpfx]

I use trid at work for figuring out what some customers send us as data. Very useful.

[zridling]

Thanks Mark0, this is excellent.

[Mark0]

I added to Online TrID the ability to write some feedback about a submitted file. So, if the results of the analysis seems not good (for example because you know exactly what the file should be, or because the results are not really helpful), you can write some note that will be associated to that file (what it should be, where you got, etc.). I periodically check the files and the info submitted, and if possible update & perfect the public DB accordingly.

Bye!

[dpierron]

Looks very good ! Thanks Mark0, this one goes straight into my personal tools collection !

[Mark0]

Thanks!
Unfortunately, it's down at the moment! My hoster have screwed up something regarding ASP.NET, and it's some hours now.
Later I will install the TrIDEngine in some other server.

Bye!

[Mark0]

How typical!!!
It restarted working now, obviously just after I had it setup to another server, and was modifying address & redirects!

Bye!

[Mark0]

Just noticed today:



This was a good occasion to put at work mouser's Screenshot Captor!

Bye!

[mouser]

nice

[mouser]

Congratulations Mark0 on the recent round of recognition that TriId has been getting.  Mentioned today in LifeHacker (http://lifehacker.co...h-unknown-extensions) but i've seen it praised in several places recently.  Lifehacker emphasizes how nice it is to provide a probability estimate of file id -- is that a new feature? I wish the antivirus programs would follow your lead and start doing this.

[Mark0]

Wow, thanks for pointing me out that news, mouser! 
The % display was in fact present from the firsts vers: it's not always that meaningful, but usually if can be of some help.