各种常见文件的hex文件头

我们在做ctf时,经常需要辨认各种文件头,跟大家分享一下一些常见的文件头。


扩展名

文件头标识(HEX)

文件描述

123

00 00 1A 00 05 10 04

Lotus 1-2-3 spreadsheet (v9) file

3gg; 3gp; 3g2

00 00 00 nn 66 74 79 70 33 67 70

3rd Generation Partnership Project 3GPP (nn=0x14)   and 3GPP2 (nn=0x20) multimedia files

7z

37 7A BC AF 27 1C

7-ZIP compressed file

aba

00 01 42 41

Palm Address Book Archive file

abi

41 4F 4C 49 4E 44 45 58

AOL address book index file

aby; idx

41 4F 4C 44 42

AOL database files: address book (ABY) and user   configuration data (MAIN.IDX)

accdb

00 01 00 00 53 74 61 6E 64 61 72 64 20 41 43 45 20   44 42

Microsoft Access 2007 file

ACM

4D 5A

MS audio compression manager driver

ADF

44 4F 53

Amiga disk file

adx

03 00 00 00 41 50 50 52

Lotus Approach ADX file

AIFF

46 4F 52 4D 00

Audio Interchange File

ain

21 12

AIN Compressed Archive File

ami

5B 76 65 72 5D

Lotus Ami Pro

amr

23 21 41 4D 52

Adaptive Multi-Rate ACELP (Algebraic Code Excited   Linear Prediction) Codec, commonly audio format with GSM cell phones

ANI

52 49 46 46

 

API

4D 5A 90 00 03 00 00 00

Acrobat plug-in

arc

1A 0x

LH archive file, old version(where x = 0x2, 0x3,   0x4, 0x8 or 0x9 for types 1-5, respectively)

arc

41 72 43 01

FreeArc compressed file

arj

60 EA

ARJ Compressed Archive

ARJ

60 EA 27

 

ART

4A 47 03 0E 00 00 00

AOL ART file

ART

4A 47 04 0E 00 00 00

AOL ART file

asf

30 26 B2 75 8E 66 CF 11

Windows Media

asf; wma; wmv

30 26 B2 75 8E 66 CF 11 A6 D9 00 AA 00 62 CE 6C

Microsoft Windows Media Audio/Video File(Advanced   Streaming Format)

asx

3C

Advanced Stream redirector file

au

2E 73 6E 64

SoundMachine Audio File

NeXT/Sun Microsystems μ-Law audio file


avi

41 56 49 20

Audio Video Interleave (AVI)

AX

4D 5A

Library cache file

AX

4D 5A 90 00 03 00 00 00

DirectShow filter

bag

41 4F 4C 20 46 65 65 64 62 61 67

AOL and AIM buddy list file

BAS

20 20 20

 

bin

42 4C 49 32 32 33 51

Thomson Speedtouch series WLAN router firmware

bmp

42 4D

Windows Bitmap

BMP

42 4D 3E

 

bz; bz2

42 5A 68

BZIP Archive

BZ2; TAR.BZ2; TBZ2; TB2

42 5A 68

bzip2 compressed archive

CAB

49 53 63

 

CAB; HDR

49 53 63 28

Install Shield v5.x or 6.x compressed file

CAB

4D 53 43 46

Microsoft CAB File Format

cat

30

Microsoft security catalog file

CBD

43 42 46 49 4C 45

WordPerfect dictionary file (unconfirmed)

CCD

5B 43 6C

 

cdr

CDR

Corel Draw

CDR

45 4C 49 54 45 20 43 6F 6D 6D 61 6E 64 65 72 20

Elite Plus Commander saved game file

CDR, DVF

4D 53 5F 56 4F 49 43 45

Sony Compressed Voice File

CHI; CHM

49 54 53 46

Microsoft Compiled HTML Help File

CHM

49 54 53

 

CLB

43 4D 58 31

Corel Binary metafile

CLB

43 4F 4D 2B

COM+ Catalog file

cnt

3A 42 61 73 65

 

COM, DLL, DRV, EXE, PIF, QTS, QTX, SYS

4D 5A

Windows/DOS executable file

COM

4D 5A EE

 

COM

E9 3B 03

 

CPE

46 41 58 43 4F 56 45 52 2D 56 45 52

Microsoft Fax Cover Sheet

CPL

4D 5A

Control panel application

CPT

43 50 54 37 46 49 4C 45

Corel Photopaint file

CPT

43 50 54 46 49 4C 45

Corel Photopaint file

CPX

5B 57 69

 

cru; crush

43 52 55 53 48

CRUSH Archive File

CRU

43 52 55 53 48 20 76

Crush compressed archive

CRW

49 49 1A 00 00 00 48 45 41 50 43 43 44 52 02 00

Canon digital camera RAW file

CTF

43 61 74 61 6C 6F 67 20 33 2E 30 30 00

WhereIsIt Catalog file

CUR

00 00 02 00 01 00 20 20

Windows cursor file

dat

03

MapInfo Native Data Format

dat

1A 52 54 53 20 43 4F 4D 50 52 45 53 53 45 44 20 49   4D 41 47 45 20 56 31 2E 30 1A

Runtime Software disk image

dat

41 56 47 36 5F 49 6E 74 65 67 72 69 74 79 5F 44 61   74 61 62 61 73 65

AVG6 Integrity database file

DAT

43 52 45 47

Windows 9x registry hive

DAT

43 6C 69 65 6E 74 20 55 72 6C 43 61 63 68 65 20 4D   4D 46 20 56 65 72 20

IE History DAT file

DAT

45 52 46 53 53 41 56 45 44 41 54 41 46 49 4C 45

Kroll EasyRecovery Saved Recovery State file

DAT

49 6E 6E 6F 20 53 65 74 75 70 20 55 6E 69 6E 73 74   61 6C 6C 20 4C 6F 67 20 28 62 29

Inno Setup Uninstall Log file

db

00 06 15 61 00 00 00 02 00 00 04 D2 00 00 10 00

Netscape Navigator (v4) database file

DB

44 42 46 48

Palm Zire photo database

db

08

dBASE IV or dBFast configuration file

db3

03

dBASE III file

db4

04

dBASE IV data file

dba

00 01 42 44

Palm DateBook Archive file

dbx

CF AD 12 FE

 

dbx

CF AD 12 FE C5 FD 74 6F

Outlook Express

dci

3C 21 64 6F 63 74 79 70

AOL HTML mail file

dcx

3A DE 68 B1

DCX Graphic File

DDB

00 01 00

 

dib

42 4D

device-independent bitmap image

DLL

4D 5A 90

 

DMP

4D 44 4D 50 93 A7

Windows minidump file

DMS

44 4D 53 21

Amiga DiskMasher compressed archive

doc

0D 44 4F 43

DeskMate Document file

doc

12 34 56 78 90 FF

MS Word 6.0

doc

31 BE 00 00 00 AB 00 00

MS Word for DOS 6.0

doc

7F FE 34 0A

MS Word

dot; ppt; xla; ppa; pps; pot; msi; sdw; db

D0 CF 11 E0

MS Office/OLE2

doc; dot; xls; xlt; xla; ppt; apr ;ppa; pps; pot; msi;   sdw; db

D0 CF 11 E0 A1 B1 1A E1

MS Compound Document v1 or Lotus Approach APR file

DPL

4D 5A 50

 

DRV

4D 5A 16

 

drw

07

A common signature and file extension for many   drawing programs.

drw

01 FF 02 04 03 02

Micrografx vector graphic file

ds4

4D 47 58 20 69 74 70 64

Micrografix Designer 4

DSN

4D 56

CD Stomper Pro label file

dsp

23 20 4D 69 63 72 6F 73 6F 66 74 20 44 65 76 6 56C   6F 70 65 72 20 53 74 75 64 69 6F

Microsoft Developer Studio project file

dss

02 64 73 73

Digital Speech Standard (Olympus, Grundig, &   Phillips)

dtd

07 64 74 32 64 64 74 64

DesignTools 2D Design file

dtd

3C 21 45 4E 54 49 54 59

XML DTD

DVR

44 56 44

DVR-Studio stream file

dwg

41 43 31

 

dwg

41 43 31 30

Generic AutoCAD drawing

NOTES on AutoCAD file headers: The 0x41-43-31-30   (AC10) is a generic header, occupying the first four bytes in the file. The   next two bytes give further indication about the version or subtype:

0x30-32 (02) — AutoCAD R2.5

0x30-33 (03) — AutoCAD R2.6

0x30-34 (04) — AutoCAD R9

0x30-36 (06) — AutoCAD R10

0x30-39 (09) — AutoCAD R11/R12

0x31-30 (10) — AutoCAD R13 (subtype 10)

0x31-31 (11) — AutoCAD R13 (subtype 11)

0x31-32 (12) — AutoCAD R13 (subtype 12)

0x31-33 (13) — AutoCAD R14 (subtype 13)

0x31-34 (14) — AutoCAD R14 (subtype 14)

0x31-35 (15) — AutoCAD R2000

0x31-38 (18) — AutoCAD R2004

0x32-31 (21) — AutoCAD R2007


Enn (where nn are numbers)

45 56 46

EnCase evidence file

ECO

2A 50 52

 

elf

7F 45 4C 46 01 01 01 00

ELF Executable

emf

01 00 00 00 58 00 00 00

Extended (Enhanced) Windows Metafile Format, printer   spool file

eml

44 65 6C 69 76 65 72 79 2D 64 61 74 65 3A

Email

EML

46 72 6F 6D 20 20 20

A commmon file extension for e-mail files.   Signatures shown here are for Netscape, Eudora, and a generic signature,   respectively. EML is also used by Outlook Express and QuickMail.

EML

46 72 6F 6D 20 3F 3F 3F

A commmon file extension for e-mail files.   Signatures shown here are for Netscape, Eudora, and a generic signature,   respectively. EML is also used by Outlook Express and QuickMail.

EML

46 72 6F 6D 3A 20

A commmon file extension for e-mail files.   Signatures shown here are for Netscape, Eudora, and a generic signature,   respectively. EML is also used by Outlook Express and QuickMail.

EML

52 65 63

 

enc

00 5C 41 B1 FF

Mujahideen Secrets 2 encrypted file

enl

[32 byte offset] 40 40 40 20 00 00 40 40 40 40

EndNote Library File

eps

25 21 50 53

Adobe EPS File

eps

25 21 50 53 2D 41 64 6F 62 65

Postscript

eps

25 21 50 53 2D 41 64 6F 62 65 2D 33 2E 30 20 45 50   53 46 2D 33 20 30

Adobe encapsulated PostScript file (If this   signature is not at the immediate beginning of the file, it will occur early in   the file, commonly at byte offset 30)

EPS

C5 D0 D3

 

eth

1A 35 01 00

GN Nettest WinPharoah capture file

evt

30 00 00 00 4C 66 4C 65

Windows Event Viewer file

evt

03 00 00 00 C4 66 C4 56

 

EVTX

45 6C 66 46 69 6C 65 00

Windows Vista event log file

exe; dll; drv; vxd; sys; ocx; vbx

4D 5A

Win32 Executable

exe; dll; drv; vxd; sys; ocx; vbx

4D 5A

Win16 Executable

exe; com; 386; ax; acm; sys; dll; drv; flt; fon; ocx;   scr; lrc; vxd; cpl; x32

4D 5A

Executable File

EXE, DLL, OCX, OLB, IMM, IME

4D 5A 90

 

fli

00 11 AF

FLIC Animation file

flt

00 01 01

OpenFlight 3D file

FLT

4D 5A 90 00 03 00 00 00

Audition graphic filter file (Adobe)

FLV

46 4C 56 01

Flash video file

fm

3C 4D 61 6B 65 72 46 69 6C 65 20

Adobe FrameMaker file

fm3

00 00 1A 00 07 80 01 00

Lotus 123 v3 FMT file

fmt

20 00 68 00 20 0

Lotus 123 v4 FMT file

FNT

43 48 41

 

FON

4D 5A

Font file

GBC

87 F5 3E

 

gid

3F 5F 03 00

Windows Help Index File

GID

4C 4E 02 00

Windows Help index file

GIF

47 49 46 38

 

gif

47 49 46 38 37 61

Graphics interchange format file (GIF 87A)

gif

47 49 46 38 39 61

Graphics interchange format file (GIF89A)

GTD

7B 50 72

 

GX2

47 58 32

Show Partner graphics file (not confirmed)

gz; tar; tgz

1F 8B

Gzip Archive File

gz; tgz

1F 8B 08

GZ Compressed File

hap

91 33 48 46

HAP Archive File

HDMP

4D 44 4D 50 93 A7

Windows heap dump file

hdr

23 3F 52 41 44 49 41 4E 43 45 0A

adiance High Dynamic Range image file

HLP

3F 5F 03

 

hlp

3F 5F 03 00

Windows Help file

HLP

4C 4E 02 00

Windows Help file

hlp

[7 byte offset] 00 00 FF FF FF FF

Windows Help file

hqx

28 54 68 69 73 20 66 69 6C 65

Macintosh BinHex 4 Compressed Archive

hqx

28 54 68 69 73 20 66 69 6C 65 20 6D 75 73 74 20 62   65 20 63 6F 6E 76 65 72 74 65 64 20 77 69 74 68 20 42 69 6E 48 65 78 20

Macintosh BinHex 4 Compressed Archive

HTM

3C 21 44

 

htm; html

3C 21 44 4F 43 54

HyperText Markup Language 3

htm; html

3C 48 54 4D 4C 3E

HyperText Markup Language 2

htm; html

3C 68 74 6D 6C 3E

HyperText Markup Language 1

html

68 74 6D 6C 3E

HTML

ico

00 00 01 00 00

Icon File

ico

00 00 01 00 01 00 20 20

Icon File

IFF

46 4F 52 4D

 

IFO

44 56 44

DVD info file

IME

4D 5A 90

 

img

00 01 00 08 00 01 00 01 01

Ventura Publisher/GEM VDI Image Format Bitmap file

IMG

00 FF FF

 

IMM

4D 5A 90

 

ind

41 4F 4C 49 44 58

AOL client preferences/settings file (MAIN.IND)

ISO

43 44 30 30 31

ISO-9660 CD Disc Image (This signature usually   occurs at byte 8001, 8801, or 9001.)

ivr

2E 52 45 43

RealPlayer video file (V11 and later)

JAR

4A 41 52 43 53 00

JARCS compressed archive

jar

5F 27 A8 89

JAR Archive File

jpg; jpeg

FF D8 FF

 

jpg; jpe; jpeg

FF D8 FF E0 00

JPG Graphic File

jpg; jpe; jpeg

FF D8 FF FE 00

JPG Graphic File

KGB

4B 47 42 5F 61 72 63 68 20 2D

KGB archive

KOZ

49 44 33 03 00 00 00

Sprint Music Store audio file (for mobile devices)

LDB

42 49 4C

 

lha

2D 6C 68 35 2D

LHA Compressed

lha; lzh

[2 byte offset] 2D 6C 68

Compressed archive file

LHP

3F 5F 03

 

lhp

3F 5F 03 00

Windows Help File

lib

21 3C 61 72 63 68 3E 0A

Unix archiver (ar) files and Microsoft Program   Library Common Object File Format (COFF)

LIB

2A 24 20

 

LIT

49 54 4F 4C 49 54 4C 53

Microsoft Reader eBook file

LNK

4C 00 00

 

lnk

4C 00 00 00

Windows Shortcut (Link File)

lnk

4C 00 00 00 01 14 02

Windows Link File

LNK

4C 00 00 00 01 14 02 00

Windows shortcut file

log

2A 2A 2A 20 20 49 6E 73 74 61 6C 6C 61 74 69 6F 6E   20 53 74 61 72 74 65 64 20

Symantec Wise Installer log file

lzh

lh

Lz compression file

lwp

57 6F 72 64 50 72 6F

Lotus WordPro v9

m3u

23 45 58

 

m4a

00 00 00 20 66 74 79 70 4D 34 41 20 00 00 00 00

Apple Lossless Audio Codec file

m4a; m4v

00 00 00 20 66 74 79 70 4D 34 41 20 00 00 00 00

QuickTime M4A/M4V file

manifest

3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D

Windows Visual Stylesheet XML file

MAR

4D 41 52 31 00

Mozilla archive

MAR

4D 41 52 43

Microsoft/MSN MARC archive

MAR

4D 41 72 30 00

MAr compressed archive

max

D0 CF 11

 

mdb

00 01 00 00 53 74 61 6E 64 61 72 64 20 4A 65 74 20   44 42

Microsoft Access file

mdb; mda; mde; mdt

53 74 61 6E 64 61 72 64 20 4A

MS Access

MDF

00 FF FF

 

mdf

00 FF FF FF FF FF FF FF FF FF FF 00 00 02 00 01

Alcohol 120% CD image

mdf

01 0F 00 00

Microsoft SQL Server 2000 database

MDI

45 50

Microsoft Document Imaging file

MDS

4D 45 44

 

MID; MIDI

4D 54 68 64

Musical Instrument Digital Interface (MIDI) sound   file

mkv

1A 45 DF A3 93 42 82 88 6D 61 74 72 6F 73 6B 61

Matroska stream file

MLS

4D 49 4C 45 53

Milestones v1.0 project management and scheduling   software (Also see "MV2C" and "MV214" signatures)

MLS

4D 4C 53 57

Skype localization data file

MLS

4D 56 32 31 34

Milestones v2.1b project management and scheduling   software (Also see "MILES" and "MV2C" signatures)

MLS

4D 56 32 43

Milestones v2.1a project management and scheduling   software (Also see "MILES" and "MV214" signatures)

MMF

4D 4D 4D 44 00 00

Yamaha Corp. Synthetic music Mobile Application   Format (SMAF) for multimedia files that can be played on hand-held devices.

mny

00 01 00 00 4D 53 49 53 41 4D 20 44 61 74 61 62 61   73 65

Microsoft Money file

MOV

00 00 0F

 

MOV

00 00 77

 

mov

6D 6F 6F 76

Quicktime

mov

6D 64 61 74

QuickTime Movie

mp

0C ED

Monochrome Picture TIFF bitmap file (unconfirmed)

MP3

49 44 33

MPEG-1 Audio Layer 3 (MP3) audio file

MP3

FF FB 50

 

mp4

00 00 00 18 66 74 79 70 33 67 70 35

MPEG-4 video files

MPA

00 00 01

 

mpg; mpeg

00 00 01 B3

MPEG Movie

mpg

00 00 01 BA

MPEG

MSC

3C 3F 78

 

msc

3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 2E   30 22 3F 3E 0D 0A 3C 4D 4D 43 5F 43 6F 6E 73 6F 6C 65 46 69 6C 65 20 43 6F 6E   73 6F 6C 65 56 65 72 73 69 6F 6E 3D 22

Microsoft Management Console Snap-in Control file

msi

23 20

Cerius2 file

MSV

4D 53 5F 56 4F 49 43 45

Sony Memory Stick Compressed Voice file

NES

4E 45 53

 

NLS

C2 20 20

 

nri

0E 4E 65 72 6F 49 53 4F

Nero CD Compilation

ntf

1A 00 00

Lotus Notes database template

nsf; ntf

1A 00 00 03 00 00

Lotus Notes Database/Template

nsf

1A 00 00 03 00 00 11 00

Notes Database

nsf

1A 00 00 04 00 00

Lotus Notes database

ntf

30 31 4F 52 44 4E 41 4E 43 45 20 53 55 52 56 45 59   20 20 20 20 20 20 20

National Transfer Format Map File

obj

4C 01

Microsoft Common Object File Format (COFF)   relocatable object code file for an Intel 386 or later/compatible processors

OCX

4D 5A

ActiveX or OLE Custom Control

OCX

4D 5A 90

 

OLB

4D 5A

OLE object library

OLB

4D 5A 90

 

org; pfc

41 4F 4C 56 4D 31 30 30

AOL personal file cabinet (PFC) file

pak

1A 0B

Compressed archive file

PAT

47 46 31 50 41 54 43 48

Advanced Gravis Ultrasound patch file

PAT

47 50 41 54

GIMP (GNU Image Manipulation Program) pattern file

PBK

5B 41 44

 

PCB

17 A1 50

 

PCS

0A 05 01            

 

pcx

0A nn 01 01

ZSOFT Paintbrush file(where nn = 0x02, 0x03, or   0x05)

pcx

0A 05 01 08

PC Paintbrush(often associated with Quake Engine   games)

pdb

[11 byte offset] 00 00 00 00 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00 00 00 00 00

Palmpilot Database/Document File

PDF

25 50 44

 

pdf; fdf

25 50 44 46

Adobe Portable Document Format and Forms Document   file

pdf

25 50 44 46 2D 31 2E

Adobe Acrobat

PDG

48 48 02

 

pf

11 00 00 00 53 43 43 41

Windows prefetch file

pic

01 00 00 00 01

Unknown type picture file

PJT

00 00 07

 

PLL

24 53 6F

 

PNG

89 50 4E

 

PNG

89 50 4E 47

 

png

89 50 4E 47 0D 0A

PNG Image File

png

89 50 4E 47 0D 0A 1A 0A

PNG Image File

PPC

52 65 63

 

PPT

D0 CF 11

 

ppt

[512 byte offset] 00 6E 1E F0

PowerPoint presentation subheader (MS Office)

ppt

[512 byte offset] 0F 00 E8 03

PowerPoint presentation subheader (MS Office)

PPZ

4D 53 43 46

Powerpoint Packaged Presentation

prc

42 4F 4F 4B 4D 4F 42 49

Palmpilot resource file

PRG

23 44 45

 

ps

25 21 50 53 2D 41 64 6F 62 65

Postscript

PSD

38 42 50

 

psd

38 42 50 53

Adobe Photoshop image file

psp

7E 42 4B 00

PaintShop Pro Image File

pst

21 42 44 4E

Microsoft Outlook Personal Folder file

pwl

E3 82 85 96

Windows Password

qbb

45 86 00 00 06 00

Intuit QuickBooks Backup file

qdf

AC 9E BD 8F

Quicken

qph

03 00 00 00

Quicken price history file

qt

6D 64 61 74

Quicktime Movie File

qxd

00 00 49 49 58 50 52

Quark Express document (Intel & Motorola,   respectively)

qxd

00 00 4D 4D 58 50 52

ra

2E 52 4D 46 00 00 00 12 00

Real Audio file

ra; ram

2E 72 61 FD

Real Audio File

ra

2E 72 61 FD 00

RealAudio streaming media file

RAR

52 61 72

 

rar

52 61 72 21

RAR Archive File

RAW

06 05 00

 

reg

52 45 47 45 44 49 54 34

 

rgb

01 DA 01 01 00 03

Silicon Graphics RGB Bitmap

RM

2E 52 4D

 

rm; rmvb

2E 52 4D 46

Real Media streaming media file

rpm

ED AB EE DB

RPM Archive File

RTD

43 23 2B 44 A4 43 4D A5 48 64 72

RagTime document file

RTF

7B 5C 72

 

rtf

7B 5C 72 74 66

Rich Text Format File

sav

24 46 4C 32 40 28 23 29 20 53 50 53 53 20 44 41 54   41 20 46 49 4C 45

SPSS Data file

SBV

46 45 44 46

(Unknown file type)

SCH

2A 76 65

 

scm

80 53 43

 

SH3

48 48 47 42 31

Harvard Graphics presentation file

SHD

4B 49 00 00

Windows 9x printer spool file

sit

53 49 54 21

Stuffit v1 Archive File

sit

53 74 75 66 66 49 74

Stuffit v5 Archive File

sle

3A 56 45 52 53 49 4F 4E

Surfplan kite project file

sle

41 43 76

teganos Security Suite virtual secure drive

sly; srt; slt

53 52 01 00

Sage sly.or.srt.or.slt

SMD

00 FF FF

 

snm

00 1E 84 90 00 00 00 00

Netscape Communicator (v4) mail folder

SNP

4D 53 43 46

Microsoft Access Snapshot Viewer file

sol

00 BF

Adobe Flash shared object file (e.g., Flash cookies)

spl

00 00 01 00

Windows NT/2000/XP printer spool file

SCR

4D 5A

Screen saver

SUB

FF FF FF

 

SWF

43 57 53

Shockwave Flash file (v5+)

SWF

46 57 53

Macromedia Shockwave Flash player file

sxc

calc

OpenOffice Calc

sxd

draw

OpenOffice Draw

sxi

impress

OpenOffice Impress

sxm

math

OpenOffice Math

sxw

writer

OpenOffice Writer

syw

41 4D 59 4F

Harvard Graphics symbol graphic

TAG

00 00 02

 

tar; cpio

30 37 30 37 30 37

CPIO Archive File

tar.z

1F 9D 90

Compressed tape archive file

tga

00 00 10 00 00

RLE压缩的前5字节

TGA

00 00 02

 

tga

00 00 02 00 00

未压缩的前5字节

TIF; TIFF

49 20 49

Tagged Image File Format file

tif; tiff

49 49 2A

TIFF (Intel)

tif; tiff

49 49 2A 00

Tagged Image File Format file (little endian, i.e.,   LSB first in the byte; Intel)

TIF; TIFF

4D 4D 00 2A

Tagged Image File Format file (big endian, i.e., LSB   last in the byte; Motorola)

tif; tiff

4D 4D 2A

TIFF (Motorola)

TIF; TIFF

4D 4D 00 2B

BigTIFF files; Tagged Image File Format files >4   GB

TLB

4D 53 46 54 02 00 01 00

OLE, SPSS, or Visual C++ type library file

tr1

01 10

Novell LANalyzer capture file

TST

00 01 00

 

TTF

00 01 00

 

ufa

55 46 41

UFA Archive File

VBX

4D 5A

VisualBASIC application

VCD

45 4E 54 52 59 56 43 44 02 00 00 01 02 00 18 58

VideoVCD (GNU VCDImager) file

vcf

42 45 47 49 4E 3A 56 43 41 52 44 0D 0A

vCard file

vob

00 00 01 BA

DVD Video Movie File (video/dvd, video/mpeg)

VXD, 386

4D 5A

Windows virtual device drivers

WAV

52 49 46

 

wav

57 41 56 45

Wave

wav

57 41 56 45 66 6D 74

Wave Files

wb2

00 00 02 00

QuattroPro for Windows Spreadsheet file

wb3

[24 byte offset] 3E 00 03 00 FE FF 09 00 06

Quatro Pro for Windows 7.0 Notebook file

wk1; wks

20 00 60 40 60

Lotus 123 v1 Worksheet

wk1

00 00 02 00 06 04 06 00 08 00 00 00 00 00

Lotus 1-2-3 spreadsheet (v1) file

wk3

00 00 1A 00 00 10 04 00

Lotus 123 spreadsheet (v3) file

wk4; wk5

00 00 1A 00 02 10 04 00

Lotus 1-2-3 spreadsheet (v4, v5) file

wks

0E 57 4B 53

DeskMate Worksheet

WMA

30 26 B2

 

wmf

01 00 09 00

Graphics Metafile

wmf

01 00 09 00 00 03

Windows Metadata file (Win 3.x format)

wmf

02 00 09 00

Graphics Metafile

wmf

D7 CD C6 9A

Windows Meta File

WMV

30 26 B2

 

wp

FF 57 50 43

WordPerfect v5 or v6

wpd

FF 57 50 43

WordPerfect

wpg

FF 57 50 47

WordPerfect Graphics

wri

31 BE

Microsoft Write file

WRI

31 BE 00

 

wri

32 BE

Microsoft Write file

ws

1D 7D

WordStar Version 5.0/6.0 document

XBE

58 42 45

 

xdr

3C

BizTalk XML-Data Reduced Schema file

xls

09 02 06 00 00 00 10 00 B9 04 5C 00

MS Excel v2

xls

09 04 06 00 00 00 10 00 F6 05 5C 00

MS Excel v4

XLS

D0 CF 11

 

xls

D0 CF 11 E0

MS Excel

xls

[512 byte offset]  09 08 10 00 00 06 05 00

Excel spreadsheet subheader (MS Office)

XML

3C 3F 78

 

xml

3C 3F 78 6D 6C

XML Document

xml

FF FE 3C 00 52 00 4F 00 4F 00 54 00 53 00 54 00 55 00   42 00

XML Document (ROOTSTUB)

XMV

00 50 01

 

XSL

FF FE 3C

 

xul

72 73 69 6F 6E 3D 22 31 3C 3F 78 6D 6C 20 76 65 2E   30 22 3F 3E

XML User Interface Language file

z

1F 9D

TAR Compressed Archive File

Z

1F 9D 8C

 

ZIP

50 4B 03

 

zip; jar; zipx

50 4B 03 04

ZIP Archive

zip

50 4B 30 30

ZIP Archive (outdated)

Zip

50 4B 30 30 50 4B 03 04

WINZIP Compressed

zoo

5A 4F 4F 20

ZOO Archive File

原文地址:https://www.cnblogs.com/lzlzzzzzz/p/11397307.html

时间: 2024-11-09 02:44:54

各种常见文件的hex文件头的相关文章

在py文件中设置文件头

在写python文件的时候有时需要记录作者.创建时间等时间,因此可以给python文件设置文件头,这里以PyCharm为例介绍设置步骤: 1. 打开PyCharm,依次点击Setting-----Editor------File and Code Template------Python Script,出现如图所示对话框 2. 在图示的方框里输入以下代码,点击OK #!/usr/bin/python3 # --*-- coding: utf-8 --*-- # @Author: your nam

Dev c++在新建文件中插入文件头

在菜单栏中依次点击Tools->Editor Options->Snippets->Default Source 勾选Insert the following code into every new empty file 输入自己模板点击OK保存.Date后面可以加<DATETIME>显示日期 /* Name: Copyright: Author: Date: <DATETIME> Description: */ #include<iostream>

常见文件后缀名

在后缀未知,或者后缀被修改的文件,依然通过文件头来判断该文件究竟是什么文件类型.方法是:用一个文本编辑工具如UltraEdit打开文件(16进制模式下),然后看文件头是什么字符,以下是常见文件类型的文件头字符,希望对你有帮助:JPEG (jpg),文件头:FFD8FF PNG (png),文件头:89504E47 GIF (gif),文件头:47494638 TIFF (tif),文件头:49492A00 Windows Bitmap (bmp),文件头:424D CAD (dwg),文件头:4

利用文件头判断文件类型

上传文件时经常需要做文件类型判断,例如图片.文档等,普通做法是直接判断文件后缀名,而文艺青年为了防止各种攻击同时也会加上使用文件头信息判断文件类型. 原理很简单:用文件头判断,直接读取文件的前2个字节即可. 1 public class FileUtil { 2 /** 3 * byte数组转换成16进制字符串 4 * 5 * @param src 6 * @return 7 */ 8 private static String bytesToHexString(byte[] src) { 9

java通过文件头来判断文件类型

import java.io.FileInputStream; import java.io.IOException; import java.util.HashMap; import java.util.Map.Entry; /** * @Description 根据的文件头来判断文件类型 * @author LJ * @Version v1.0 */ public class GetFileTypeByHead { public static void main(String[] args)

常见文件的文件头标志

1.从Ultra-edit-32中提取出来的 JPEG (jpg),文件头:FFD8FF PNG (png),文件头:89504E47 GIF (gif),文件头:47494638 TIFF (tif),文件头:49492A00 Windows Bitmap (bmp),文件头:424D CAD (dwg),文件头:41433130 Adobe Photoshop (psd),文件头:38425053 Rich Text Format (rtf),文件头:7B5C727466 XML (xml)

【CTF杂项】常见文件文件头文件尾格式总结及各类文件头

文件头文件尾总结 JPEG (jpg), 文件头:FFD8FF 文件尾:FF D9PNG (png), 文件头:89504E47 文件尾:AE 42 60 82GIF (gif), 文件头:47494638 文件尾:00 3B ZIP Archive (zip), 文件头:504B0304 文件尾:50 4B TIFF (tif), 文件头:49492A00 文件尾:Windows Bitmap (bmp), 文件头:424D 文件尾:CAD (dwg), 文件头:41433130 文件尾:Ad

常见文件的文件头

JPEG (jpg),文件头:FFD8FF PNG (png),文件头:89504E47 GIF (gif),文件头:47494638 TIFF (tif),文件头:49492A00 Windows Bitmap (bmp),文件头:424D CAD (dwg),文件头:41433130 Adobe Photoshop (psd),文件头:38425053 Rich Text Format (rtf),文件头:7B5C727466 XML (xml),文件头:3C3F786D6C HTML (h

各类文件的文件头标志[转]

各类文件的文件头标志 参见  http://www.garykessler.net/library/file_sigs.html 扩展名 文件头标识(HEX) 文件描述 123 00 00 1A 00 05 10 04 Lotus 1-2-3 spreadsheet (v9) file 3gg; 3gp; 3g2 00 00 00 nn 66 74 79 70 33 67 70 3rd Generation Partnership Project 3GPP (nn=0x14)   and 3GP