---
type: lookup
id: evtx-45-6c-66-46-69-6c-65
asset: file-format-signatures
title: "45 6C 66 46 69 6C 65 — File format magic numbers"
sources:
  - https://en.wikipedia.org/wiki/List_of_file_signatures
source_quote: "wikipedia.org/wiki/Event_Viewer> Event Viewer file format | 45 6C 66 46 69 6C 65 | ElfFile | 0 | evtx | Windows <https://en.wikipedia.org/wiki/Event_Viewer> Event Viewer XML file format | 73 64 62 66 | sdbf | 8 | sdb | Windows customized database | 50 4D 43 43 | PMCC | 0 | grp | Windows 3.x <https://en.wikipedia.org/wiki/Program_Manager> Program Manager Prog"
generated: true
verified: false
harvested: 2026-08-03
stale_after: 2027-08-03
hex_signature: "45 6C 66 46 69 6C 65"
offset: "45"
extension: "evtx"
format: "Windows Event Viewer XML file format"
unverified_fields: format
---
**Hex signature:** 45 6C 66 46 69 6C 65

**Offset:** 45

**Extension:** evtx

**Format:** Windows Event Viewer XML file format

> wikipedia.org/wiki/Event_Viewer> Event Viewer file format | 45 6C 66 46 69 6C 65 | ElfFile | 0 | evtx | Windows <https://en.wikipedia.org/wiki/Event_Viewer> Event Viewer XML file format | 73 64 62 66 | sdbf | 8 | sdb | Windows customized database | 50 4D 43 43 | PMCC | 0 | grp | Windows 3.x <https://en.wikipedia.org/wiki/Program_Manager> Program Manager Prog

Source: <https://en.wikipedia.org/wiki/List_of_file_signatures>