源:http://blog.csdn.net/txgc0/article/details/17246625
0x00 从Ultraedit中提取出来的文件头信息,两个字符算一字节(十六进制)
文件格式 | 文件头 |
---|---|
JPEG (jpg) | FFD8FF |
PNG (png) | 89504E47 |
GIF (gif) | 47494638 |
TIFF (tif) | 49492A00 |
Windows Bitmap (bmp) | 424D |
CAD (dwg) | 41433130 |
Adobe Photoshop (psd) | 38425053 |
Rich Text Format (rtf) | 7B5C727466 |
XML (xml) | 3C3F786D6C |
HTML (html) | 68746D6C3E |
Email (eml) | 44656C69766572792D646174653A |
Outlook Express (dbx) | CFAD12FEC5FD746F |
Outlook (pst) | 2142444E |
MS Word/Excel (xls.or.doc) | D0CF11E0 |
MS Access (mdb) | 5374616E64617264204A |
WordPerfect (wpd) | FF575043 |
Postscript (eps.or.ps) | 252150532D41646F6265 |
Adobe Acrobat (pdf) | 255044462D312E |
Quicken (qdf) | AC9EBD8F |
Windows Password (pwl) | E3828596 |
ZIP Archive (zip) | 504B0304 |
RAR Archive (rar) | 52617221 |
Wave (wav) | 57415645 |
AVI (avi) | 41564920 |
Real Audio (ram) | 2E7261FD |
Real Media (rm) | 2E524D46 |
MPEG (mpg) | 000001BA |
MPEG (mpg) | 000001B3 |
Quicktime (mov) | 6D6F6F76 |
Windows Media (asf) | 3026B2758E66CF11 |
MIDI (mid) | 4D546864 |
0x01 从winhex中取出的文件头列表
文件类型 | 后缀 | 文件头 |
---|---|---|
JPEG | jpg;jpeg | 0xFFD8FF |
PNG | png | 0x89504E470D0A1A0A |
GIF | gif | GIF8 |
TIFF | tif;tiff | 0x49492A00 |
TIFF | tif;tiff | 0x4D4D002A |
Bit map | bmp | BM |
AOL ART | art | 0x4A47040E000000 |
AOL ART | art | 0x4A47030E000000 |
PC Paintbrush | pcx | 0x0A050108 |
Graphics Metafile | wmf | 0xD7CDC69A |
Graphics Metafile | wmf | 0x01000900 |
Graphics Metafile | wmf | 0x02000900 |
Enhanced Metafile | emf | 0x0100000058000000 |
Corel Draw | cdr | CDR |
CAD | dwg | 0x41433130 |
Adobe Photoshop | psd | 8BPS |
Rich Text Format | rtf | rtf |
XML | xml | |
HTML | html;htm;php;php3;php4;phtml;shtml | type |
eml | Delivery-date: | |
Outlook Express | dbx | 0xCFAD12FE |
Outlookpst!BDN | ||
MS Office/OLE2 | doc;xls;dot;ppt;xla;ppa;pps;pot;msi;sdw;db | 0xD0CF11E0A1B11AE1 |
MS Access | mdb;mda;mde;mdt | Standard J |
WordPerfect | wpd | 0xFF575043 |
OpenOffice Writer | sxw | writer |
OpenOffice Calc | sxc | calc |
OpenOffice Math | sxm | math |
OpenOffice Impress | sxi | impress |
OpenOffice Draw | sxd | draw |
Adobe FrameMaker | fm | <MAKERFILE |
PostScript | eps.or.ps;ps;eps | %!PS-Adobe |
Adobe Acrobat | %PDF-1. | |
Quicken | qdf | 0xAC9EBD8F |
QuickBooks Backup | qbb | 0x458600000600 |
Sage | sly.or.srt.or.slt;sly;srt;slt | 0x53520100 |
Sage Backup | 1 | SAGEBACKUP |
Lotus WordPro v9 | lwp | 0x576F726450726F |
Lotus 123 v9 | 123 | 0x00001A00051004 |
Lotus 123 v5 | wk4 | 0x00001A0002100400 |
Lotus 123 v3 | wk3 | 0x00001A0000100400 |
Lotus 123 v1 | wk1 | 0x2000604060 |
Windows Password | pwl | 0xE3828596 |
ZIP Archive | zip;jar | 0x504B0304 |
ZIP Archive (outdated) | zip | 0x504B3030 |
RAR Archive | rar | Rar! |
GZ Archive | gz;tgz | 0x1F8B08 |
BZIP Archive | bz2 | BZh |
ARJ Archive | arj | 0x60EA |
7-ZIP Archive | 7z | 7z集’ |
Wave | wav | WAVE |
AVI | avi | AVI |
Real Audio | ram;ra | .ra?0 |
Real Media | rm | .RMF |
MPEG | mpg;mpeg | 0x000001BA |
MPEG | mpg;mpeg | 0x000001B3 |
Quicktime | mov | moov |
Windows Media | asf | 0x3026B2758E66CF11 |
MIDI | mid | MThd |
Win32 Executable(pe文件即可执行文件) | exe;dll;drv;vxd;sys;ocx;vbx | MZ |
Win16 Executable (pe文件即可执行文件) | exe;dll;drv;vxd;sys;ocx;vbx | MZ |
ELF Executable | elf;; | 0x7F454C4601010100 |