Which file format starts with "45 52 02" bytes?

I've got .cdr file format (not CorelDRAW file), however I've trouble opening/burning it. I expect it to be the disk image. Here are the first few lines:

$ hexdump -C *.cdr | head
00000000  45 52 02 00 00 70 00 00  00 00 00 00 00 00 00 00  |ER...p..........|
00000010  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000200  ...
$ hdiutil imageinfo *.cdr
hdiutil: imageinfo failed - image not recognized

In what kind of format is this file?

I've checked Magic numbers in files article on Wikipedia, but it's not listed there.


Well, I am not 100% on this, but it appears to be close to a Roxio Toast disk image file according to the list of file signatures found here on Wikipedia:

Roxio Toast disc image file, also some .dmg-files begin with same bytes.

The hex signature provided there is:

45 52 02 00 00 00

And the hex signature you are sharing is:

45 52 02 00 00 70

Note that the last hex value is 00 instead of 70 so this is even odder. Wonder if the 70 means the image is compressed? Similar info seems to be found in this definitions file for pyfsig; a Python file signature library.

Also—if I recall correctly—the .cdr extension on your file would seem to indicate to me that this disk image file was made with Roxio Toast.

And FWIW, files with the .dmg extension—as mentioned on the Wikipedia page—are macOS “Apple Disk Image” format images.


The file command tells me its an "Apple Driver Map, blocksize 512":

printf '\x45\x52\x02\x00\x00\x70' | file -
# /dev/stdin: Apple Driver Map, blocksize 512

The definition is in file's sourcecode in the file magic/Magdir/apple.

Interestingly, there is a disabled entry that would match even better: "Apple Partition data".