QCOW Image Format

From ForensicsWiki
Revision as of 09:30, 31 December 2010 by Joachim Metz (Talk | contribs)

Jump to: navigation, search

QEMU uses the QEMU Copy-On-Write (QCOW) files to store a disk image.

MIME types

File signature

QCOW files start with hexadecimal: 0x51 0x46 0x49 0xfb (ASCII: "QFI.")

File types

Currently there are versions of the QCOW format; version 1 and 2. Version 2 is the preferred format.

Contents

The QCOW format is used to store a disk image.

Encryption

The QCOW2 format supports optional AES encryption

See also