{"id":5925,"date":"2019-02-11T00:47:22","date_gmt":"2019-02-11T00:47:22","guid":{"rendered":"http:\/\/www.hexacorn.com\/blog\/?p=5925"},"modified":"2019-10-22T18:32:31","modified_gmt":"2019-10-22T18:32:31","slug":"file-extensions-of-interest","status":"publish","type":"post","link":"https:\/\/www.hexacorn.com\/blog\/2019\/02\/11\/file-extensions-of-interest\/","title":{"rendered":"File extensions of interest"},"content":{"rendered":"\n<p><strong>Update 2019-10-22<\/strong><\/p>\n\n\n\n<p>Added .pyz &amp; .war<\/p>\n\n\n\n<p><strong>Update 2019-09-08<\/strong><\/p>\n\n\n\n<p>Added large list of audio and video extensions.<\/p>\n\n\n\n<p><strong>Update 2019-05-19<\/strong><\/p>\n\n\n\n<p>Added .nst to email file extensions<\/p>\n\n\n\n<p><strong>Update 2019-04-28<\/strong><\/p>\n\n\n\n<p>Added more file types to block that are related to Total Commander plug-ins (the .lng and .mnu file extensions are not included though). More details in <a href=\"https:\/\/www.hexacorn.com\/blog\/2019\/05\/12\/total-commander-plugins-their-automated-installation\/\">this article<\/a>.<\/p>\n\n\n\n<p><strong>Update 2019-04-27<\/strong><\/p>\n\n\n\n<p>Added .wcx &#8212; Total Commander Plug-ins with auto-install capability (GUI is shown, but always).<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" loading=\"lazy\" width=\"368\" height=\"180\" src=\"https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2019\/04\/wcx.png\" alt=\"\" class=\"wp-image-6261\" srcset=\"https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2019\/04\/wcx.png 368w, https:\/\/www.hexacorn.com\/blog\/wp-content\/uploads\/2019\/04\/wcx-300x147.png 300w\" sizes=\"(max-width: 368px) 100vw, 368px\" \/><\/figure>\n\n\n\n<p><strong>Update 2019-03-24<\/strong><\/p>\n\n\n\n<p>Added Additional Archives file Extensions controlled by WinRar and WinZip (after their install)<\/p>\n\n\n\n<p><strong>Old Post<\/strong><\/p>\n\n\n\n<p>There are many lists like this floating online, so I thought I will create one more \ud83d\ude42<\/p>\n\n\n\n<p>I took Registry hives from a couple of systems, extracted the file extensions and their associations and came up with this list.<\/p>\n\n\n\n<p>This is v0.1. I will update it with time.<\/p>\n\n\n\n<ul><li>Access <ul><li>.accda, .accdb, .accdc, .accde, .accdr, .accdt, .accdu, .accdw, .accessor, .accft, .adcf, .ade, .adn, .adp, .frg, .laccdb, .ldb, .mad, .maf, .mag, .mam, .maq, .mar, .mas, .mat, .mau, .mav, .maw, .mda, .mdb, .mdbhtml, .mde, .mdn, .mdt, .mdw, .mdz, .snp, .wizhtml <\/li><\/ul><\/li><li>Excel <ul><li>.csv, .slk, .xla, .xlam, .xlk, .xll, .xlm, .xls, .xlsb, .xlshtml, .xlsm, .xlsmhtml, .xlsx, .xlt, .xlthtml, .xltm, .xltx, .xlw, .xlxml, .ods, .xld, .csv, .dif, .xlb, .xlc, .xlt, .xlv <\/li><\/ul><\/li><li>Word <ul><li>.doc, .dochtml, .docm, .docmhtml, .docx, .docxml, .dot, .dothtml, .dotm, .dotx, .odt, .rtf, .wbk, .wiz, .wll <\/li><\/ul><\/li><li>Powerpoint<ul><li>.odp, .pot, .pothtml, .potm, .potx, .ppa, .ppam, .pps, .ppsm, .ppsx, .ppt, .ppthtml, .pptm, .pptmhtml, .pptxml, .pwz, .sldm, .sldx<\/li><\/ul><\/li><li>Outlook<ul><li>.det, .eml, .fav, .fdm, .hol, .ibc, .msg, .nk2, .nst, .ofs, .oft, .ost, .otm, .pab, .pst, .vcs<\/li><\/ul><\/li><li>Visio<ul><li>.vdw, .vdx, .vsd, .vsdm, .vsdx, .vss, .vssm, .vssx, .vst, .vstm, .vstx, .vsx, .vtx<\/li><\/ul><\/li><li>Publisher<ul><li>.pub, .pubhtml, .pubmhtml<\/li><\/ul><\/li><li>InfoPath <ul><li>.infopathxml, .xsf, .xsn<\/li><\/ul><\/li><li>OneNote <ul><li>.one, .onepkg, .onetoc, .onetoc2, .ms-one-stub<\/li><\/ul><\/li><li>Office Theme<ul><li>.thmx<\/li><\/ul><\/li><li>PDF <ul><li>.pdf <\/li><\/ul><\/li><li>Powershell <ul><li>.cdxml, .ps1, .ps1xml, .psc1, .psd1, .psm1, .pssc <\/li><\/ul><\/li><li>Audio <ul><li>.3ga, .aac, .ac3, .adt, .adts, .aif, .aifc, .aiff, .alac, .amr, .aob, .ape, .apl, .au, .caf, .cda, .dts, .ec3, .flac, .it, .lpcm, .m3u, .m4a, .m4b, .m4p, .mid, .midi, .mka, .mlp, .mo3, .mp2, .mp3, .mpa, .mpc, .mpl, .mtm, .ofr, .ofs, .oga, .ogg, .opus, .ra, .ram, .rec, .rmi, .rmm, .rnx, .rp, .rpm, .s3m, .snd, .spx, .tak, .tta, .umx, .wav, .wax, .weba, .wma, .wpl, .wv, .xm<\/li><\/ul><\/li><li>Video <ul><li>.3g2, .3gp, .3gp2, .3gpp, .amv, .asf, .asx, .avi, .avs, .bdmv, .divx, .dtcp-ip, .dv, .DVR, .dvr-ms, .evo, .f4v, .flv, .hdmov, .ifo, .IVF, .k3g, .m1v, .m2p, .m2t, .m2ts, .m2v, .m4v, .mk3d, .mkv, .mod, .mov, .mp2, .mp2v, .mp4, .mp4v, .mpa, .mpe, .mpeg, .mpg, .mpls, .mpv2, .mpv4, .mqv, .mts, .mxf, .ogg, .ogm, .ogv, .pmp, .qt, .ram, .rec, .rm, .rmvb, .rv, .tod, .tp, .tps, .trp, .ts, .tts, .uvu, .vob, .webm, .wm, .wmv, .wmx, .WTV, .wvx<\/li><\/ul><\/li><li>Images <ul><li>.arw, .avcs, .bmp, .cr2, .crw, .dds, .dib, .dng, .emf, .erf, .gif, .heic, .heics, .heif, .heifs, .ico, .jfif, .jpe, .jpeg, .jpg, .jxr, .kdc, .mdi, .mrw, .nef, .nrw, .orf, .pano, .pef, .png, .psd, .raf, .raw, .rle, .rw2, .rwl, .sr2, .srw, .svg, .tif, .tiff, .wdp, .wmf, .xbm<\/li><\/ul><\/li><li>Archives<ul><li>.001, .7z, .arc, .arj, .B64, .BHX, .bz, .bz2, .cab, .gz, .hqx, .img, .iso, .kgb, .lha, .lz, .lzh, .LZS, .MIM, .MIME, .r00, .r01, .r02, .r03, .r04, .r05, .r06, .r07, .r08, .r09, .r10, .r11, .r12, .r13, .r14, .r15, .r16, .r17, .r18, .r19, .r20, .r21, .r22, .r23, .r24, .r25, .r26, .r27, .r28, .r29, .rar, .rev, .tar, .taz, .tbz, .tbz2, .tgz, .tlz, .txz, .TZ, .uu, .uue, .VHD, .VMDK, .wjf, .wmz, .wsz, .wzcloud, .wzconfig, .wzmul, .wzsul, .wztheme, .XX, .xxe, .xz, .YFS, .z, .z00, .z01, .zip, .zipx, .zoo<\/li><\/ul><\/li><li>Certificates<ul><li>.cat, .cer, .crl, .crt, .der, .p10, .p12, .p7b, .p7c, .p7m, .p7r, .p7s, .pem, .pfx, .pko, .spc, .sst, .stl<\/li><\/ul><\/li><li>Remote Desktop settings<ul><li>.rdp, .rdg<\/li><\/ul><\/li><li>Remote assistance<ul><li>.msrcincident<\/li><\/ul><\/li><li>Contact &amp; calendar files<ul><li>.contact, .ics, .vcf<\/li><\/ul><\/li><li>Executable<ul><li> .application, .com, .cpl, .exe, .ocx, .pif, .scr, .wcx, , wfx, wlx, wdx<\/li><\/ul><\/li><li>Executable requiring extra effort to load<ul><li>.386, .dll, .drv,  .local, .manifest, .rll, .sys, .vbx, .vxd (legacy)<\/li><\/ul><\/li><li>Microsoft Installer<ul><li>.inf, .msi, .msp, .msu<\/li><\/ul><\/li><li>Batch files<ul><li>.bat, .cmd<\/li><\/ul><\/li><li>MSHTA <ul><li>.hta <\/li><\/ul><\/li><li>Java Script <ul><li>.js, .jse <\/li><\/ul><\/li><li>Visual Basic Script <ul><li>.vbe, .vbs <\/li><\/ul><\/li><li>Windows Script File <ul><li>.wsf, .wsh <\/li><\/ul><\/li><li>Old moniker to a Windows Script Component <ul><li>.sct, .wsc <\/li><\/ul><\/li><li>Registry file<ul><li>.reg<\/li><\/ul><\/li><li>Windows Explorer Command<ul><li>.scf<\/li><\/ul><\/li><li>Shortcuts <ul><li>.lnk <\/li><\/ul><\/li><li>Internet Shortcut <ul><li>.url <\/li><\/ul><\/li><li>Web Point And Print File <ul><li>.webpnp <\/li><\/ul><\/li><li>Gadget files (legacy, Vista and Win7 only) <ul><li>.gadget <\/li><\/ul><\/li><li>Shell Scrap (legacy, XP-only) <ul><li>.shs <\/li><\/ul><\/li><li>Help files <ul><li>.chm, .hlp, .hxa, .hxc, .hxd, .hxe, .hxf, .hxh, .hxi, .hxk, .hxq, .hxr, .hxs, .hxt, .hxv, .hxw <\/li><\/ul><\/li><li>Other known malicious<ul><li>.iqy, .settingcontent-ms<\/li><\/ul><\/li><li>Various of interest  <ul><li>.group,  .odc, .rqy, .vsto, .mht, .mhtml, .website, .WMD, .xbap <\/li><\/ul><\/li><li>Various -ms files<ul><li>.accountpicture-ms, .appcontent-ms, .appref-ms, .devicemanifest-ms, .devicemetadata-ms, .dvr-ms, .library-ms, .mfcribbon-ms, .search-ms, .searchConnector-ms, .slupkg-ms, .xrm-ms<\/li><\/ul><\/li><li>Java<ul><li>.jar, .class, .java, .war<\/li><\/ul><\/li><li>Perl<ul><li>.pl<\/li><\/ul><\/li><li>Python<ul><li>.py, .pyc, .pyd, .pyw, .pyz<\/li><\/ul><\/li><li>Ruby<ul><li>.rb<\/li><\/ul><\/li><\/ul>\n\n\n\n<p>There is also a funny file extension called <em>.rat<\/em> with a MIME name <em>application\/rat-file<\/em> \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Update 2019-10-22 Added .pyz &amp; .war Update 2019-09-08 Added large list of audio and video extensions. Update 2019-05-19 Added .nst to email file extensions Update 2019-04-28 Added more file types to block that are related to Total Commander plug-ins (the &hellip; <a href=\"https:\/\/www.hexacorn.com\/blog\/2019\/02\/11\/file-extensions-of-interest\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[21],"tags":[],"_links":{"self":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/5925"}],"collection":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/comments?post=5925"}],"version-history":[{"count":15,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/5925\/revisions"}],"predecessor-version":[{"id":6849,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/posts\/5925\/revisions\/6849"}],"wp:attachment":[{"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/media?parent=5925"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/categories?post=5925"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hexacorn.com\/blog\/wp-json\/wp\/v2\/tags?post=5925"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}