常见的文件头格式

可直接进行文件格式分析的小工具:

1. 从Ultra-edit-32中提取出来的

文件格式 文件头
JPEG (jpg) FFD8FF
PNG (png) 89504E47
GIF (gif) 47494638
TIFF (tif) 49492A00
Windows Bitmap (bmp) 424D
CAD (dwg) 41433130
Adobe Photoshop (psd) 38425053
Rich Text Format (rtf) 7B5C727466
XML (xml) 3C3F786D6C
HTML (html) 68746D6C3E
Email [thorough only] (eml) 44656C69766572792D646174653A
Outlook Express (dbx) CFAD12FEC5FD746F
Outlook (pst) 2142444E
MS Word/Excel (xls.or.doc) D0CF11E0
MS Access (mdb) 5374616E64617264204A
WordPerfect (wpd) FF575043
Postscript (eps.or.ps) 252150532D41646F6265
Adobe Acrobat (pdf) 255044462D312E
Quicken (qdf) AC9EBD8F
Windows Password (pwl) E3828596
ZIP Archive (zip) 504B0304
RAR Archive (rar) 52617221
Wave (wav) 57415645
AVI (avi) 41564920
Real Audio (ram) 2E7261FD
Real Media (rm) 2E524D46
MPEG (mpg) 000001BA
MPEG (mpg) 000001B3
Quicktime (mov) 6D6F6F76
Windows Media (asf) 3026B2758E66CF11

2. 从winhex中取出的文件头列表

文件格式 文件头
JPEG jpg;jpeg 0xFFD8FF
PNG png 0x89504E470D0A1A0A
GIF gif GIF8
TIFF tif;tiff 0x49492A00
TIFF tif;tiff 0x4D4D002A
Bit map bmp BM
AOL ART art 0x4A47040E00000
AOL ART art 0x4A47030E000000
PC Paintbrush pcx 0x0A050108
Graphics Metafile wmf 0xD7CDC69A
Graphics Metafile wmf 0x01000900
Graphics Metafile wmf 0x02000900
Enhanced Metafile emf 0x0100000058000000
Corel Draw cdr CDR
CAD dwg 0x41433130
Adobe Photoshop psd 8BPS
Rich Text Format rtf rtf
XML xml
HTML html;htm;PHP;php3;php4;phtml; shtml type
Email eml Delivery-date:
Outlook Express dbx 0xCFAD12FE
MS Office/OLE2doc;xls;dot;ppt;xla;ppa;pps;pot;msi;sdw;db 0xD0CF11E0A1B11AE1
MS Access mdb;mda;mde;mdt Standard J
WordPerfect wpd 0xFF575043
OpenOffice Writer sxw writer
OpenOffice Calc sxc calc
OpenOffice Math sxm math
OpenOffice Impress sxi impress
OpenOffice Draw sxd draw
Adobe FrameMaker fm
PostScript eps.or.ps;ps;eps %!PS-Adobe
Adobe Acrobat pdf %PDF-1.
Quicken qdf 0xAC9EBD8F
QuickBooks Backup qbb 0x458600000600
Sage sly.or.srt.or.slt;sly;srt; slt0x53520100
Sage Backup 1 SAGEBACKUP
Lotus WordPro v9 lwp 0x576F726450726F
Lotus 123 v9 123 0x00001A00051004
Lotus 123 v5 wk4 0x00001A0002100400
Lotus 123 v3 wk3 0x00001A0000100400
Lotus 123 v1 wk1 0x2000604060
Windows Password pwl 0xE3828596
ZIP Archive zip;jar 0x504B0304
ZIP Archive (outdated) zip 0x504B3030
RAR Archive rar Rar!
GZ Archive gz;tgz 0x1F8B08
BZIP Archive bz2 BZh
ARJ Archive arj 0x60EA
7-ZIP Archive 7z 7z集’
Wave wav WAVE
AVI avi AVI
Real Audio ram;ra .ra?0
Real Media rm .RMF
MPEG mpg;mpeg 0x000001BA
MPEG mpg;mpeg 0x000001B3
Quicktime mov moov
Windows Media asf 0x3026B2758E66CF11
MIDI mid MThd
Win32 Executable exe;dll;drv;vxd;sys;ocx; vbxMZ
Win16 Executable exe;dll;drv;vxd;sys;ocx; vbxMZ
ELF Executable elf; 0x7F454C4601010100

3.各种文件类型文件头标志位详细列表

文件头 文件类型
FFD8FFFE00 .JPEG;.JPE;.JPG JPGGraphic File
FFD8FFE000 .JPEG;.JPE;.JPG JPGGraphic File
474946383961 .gif GIF 89A
474946383761 .gif GIF 87A
424D .bmp Windows Bitmap
4D5A .exe;.com;.386;.ax;.acm;.sys;.dll;.drv;.flt;.fon;.ocx;.scr;.lrc;.vxd;
.cpl;.x32 Executable File
504B0304 .zip Zip Compressed
3A42617365 .cnt
D0CF11E0A1B11AE1 .doc;.xls;.xlt;.ppt;.apr MS Compound Document v1 or Lotus Approach APRfile
0100000058000000 .emf
03000000C466C456 .evt
3F5F0300 .gid;.hlp;.lhp Windows HelpFile
1F8B08 .gz GZ Compressed File
28546869732066696C65 .hqx
0000010000 .ico Icon File
4C000000011402 .lnk Windows LinkFile
25504446 .pdf Adobe PDF File
5245474544495434 .reg
7B5C727466 .rtf Rich Text Format File
lh .lzh Lz compression file
MThd .mid
0A050108 .pcx
25215053 .eps Adobe EPS File
2112 .ain AIN Archive File
1A02 .arc ARC/PKPAK Compressed 1
1A03 .arc ARC/PKPAK Compressed 2
1A04 .arc ARC/PKPAK Compressed 3
1A08 .arc ARC/PKPAK Compressed 4
1A09 .arc ARC/PKPAK Compressed 5
60EA .arj ARJ Compressed
41564920 .avi Audio Video Interleave(AVI)
425A68 .bz;.bz2 Bzip Archive
49536328 .cab Cabinet File
4C01 .obj Compiled Object Module
303730373037 .tar;.cpio CPIO ArchiveFile
4352555348 .cru;.crush CRUSH ArchiveFile
3ADE68B1 .dcx DCX Graphic File
1F8B .gz;.tar;.tgz Gzip ArchiveFile
91334846 .hap HAP Archive File
3C68746D6C3E .htm;.html HyperText Markup Language 1
3C48544D4C3E .htm;.html HyperText Markup Language 2
3C21444F4354 .htm;.html HyperText MarkupLanguage 3
100 .ico ICON File
5F27A889 .jar JAR Archive File
2D6C68352D .lha LHA Compressed
20006040600 .wk1;.wks Lotus 123 v1 Worksheet
00001A0007800100 .fm3 Lotus 123 v3 FMTfile
00001A0000100400 .wk3 Lotus 123 v3Worksheet
20006800200 .fmt Lotus 123 v4 FMTfile
00001A0002100400 .wk4 Lotus 123 v5
5B7665725D .ami Lotus Ami Pro
300000041505052 .adx Lotus ApproachADX file
1A0000030000 .nsf;.ntf Lotus NotesDatabase/Template
4D47582069747064 .ds4 MicrografixDesigner 4
4D534346 .cab Microsoft CAB FileFormat
4D546864 .mid Midi Audio File
000001B3 .mpg;.mpeg MPEG Movie
0902060000001000B9045C00 .xls MS Excel v2
0904060000001000F6055C00 .xls MS Excel v4
7FFE340A .doc MS Word
1234567890FF .doc MS Word 6.0
31BE000000AB0000 .doc MS Word forDOS 6.0
1A00000300001100 .nsf NotesDatabase
7E424B00 .psp PaintShop Pro Image File
504B0304 .zip PKZIP Compressed
89504E470D0A .png PNG Image File
6D646174 .mov QuickTime Movie
6D646174 .qt Quicktime MovieFile
52617221 .rar RAR Archive File
2E7261FD .ra;.ram Real AudioFile
EDABEEDB .rpm RPM Archive File
2E736E64 .au SoundMachine AudioFile
53495421 .sit Stuffit v1 ArchiveFile
53747566664974 .sit Stuffit v5Archive File
1F9D .z TAR Compressed ArchiveFile
49492A .tif;.tiff TIFF (Intel)
4D4D2A .tif;.tiff TIFF (Motorola)
554641 .ufa UFA Archive File
57415645666D74 .wav Wave Files
D7CDC69A .wmf Windows Meta File
4C000000 .lnk Windows Shortcut (LinkFile)
504B3030504B0304 .zip WINZIPCompressed
FF575047 .wpg WordPerfectGraphics
FF575043 .wp WordPerfect v5 orv6
3C3F786D6C .xml XML Document
FFFE3C0052004F004F0054005300540055004200 .xml XML Document(ROOTSTUB)
3C21454E54495459 .dtd XML DTD
5A4F4F20 .zoo ZOO Archive File

你可能感兴趣的:(其他杂七杂八的)