ZIP Archive (.ZIP): Structure, Signatures & Inspection

Check supported header evidence locally. Identification is not file validation or a malware scan.

Quick facts

Extension

.zip

Format

ZIP Archive

Category

archive

MIME type

application/zip

Standard / developer

PKWARE

Open with

Python zipfile

What is ZIP?

ZIP is a container format rather than one compression algorithm. Local headers precede entry data and a central directory records the archive index. Listing entries does not extract or execute their contents.

• Package multiple files and directories into one transferable archive

How to open ZIP

Listing an archive is a structural inspection only. It does not establish that embedded files are safe, authentic or suitable to execute.

Technical details

Signature

Common signatures begin 50 4B 03 04, 50 4B 05 06 or 50 4B 07 08 depending on archive state

Encoding

Not applicable

Container

ZIP archive with local file records and a central directory

Compression

Per-entry method; entries may be stored or use Deflate and other registered ZIP methods

.ZIP File Format Specification

Things to check

• Implementations may not support every compression or encryption method defined by ZIP extensions.
• Extracting untrusted archives can consume excessive storage or write unsafe paths unless the extraction workflow applies limits and path checks.

Related formats

• GZIP Compressed File

  GZIP compresses a byte stream into gzip members, while ZIP stores a directory of entries with per-entry methods and metadata.

• EPUB Publication

  EPUB applies additional publication rules to a ZIP-based package, including a required mimetype entry.

• 3D Manufacturing Format

  3MF uses an Open Packaging Conventions package built on ZIP structures for 3D manufacturing content.