所有类型文件的文件头标志

合集下载

文件头标志大全

各类文件的文件头标志参见扩展名文件头标识（HEX）文件描述12300 00 1A 00 05 10 04Lotus 1-2-3 spreadsheet (v9) file3gg; 3gp; 3g200 00 00 nn 66 74 79 70 33 67703rd Generation Partnership Proj ect 3GPP (nn=0x14) and 3GPP2 (nn=0x20) multimedia files7z37 7A BC AF 27 1C7-ZIP compressed fileaba00 01 42 41Palm Address Book Archive file abi41 4F 4C 49 4E 44 45 58AOL address book index fileaby; idx41 4F 4C 44 42AOL database files: address book(ABY) and user configurationdataaccdb00 01 00 00 53 74 61 6E 64 6172 64 20 41 43 45 20 44 42Microsoft Access 2007 fileACM4D 5A MS audio compression managerdriverADF44 4F 53Amiga disk fileadx03 00 00 00 41 50 50 52Lotus Approach ADX fileAIFF46 4F 52 4D 00Audio Interchange Fileain21 12AIN Compressed Archive Fileami5B 76 65 72 5D Lotus Ami Proamr23 21 41 4D 52Adaptive Multi-Rate ACELP(Algebraic CodeExcited Linear Prediction)Codec, commonly audio format withGSM cell phonesANI52 49 46 46API4D 5A 90 00 03 00 00 00Acrobat plug-inarc1A 0x LH archive file, oldversion(where x = 0x2,0x3, 0x4, 0x8 or 0x9 for types1-5, respectively)arc41 72 43 01FreeArc compressed filearj60 EA ARJ Compressed ArchiveARJ60 EA 27ART4A 47 03 0E 00 00 00AOL ART fileART4A 47 04 0E 00 00 00AOL ART fileasf30 26 B2 75 8E 66 CF 11Windows Mediaasf; wma; wmv30 26 B2 75 8E 66 CF 11 A6 D900 AA 00 62 CE 6C Microsoft Windows Media Audio/VideoFile(Advanced Streaming Format)asx3C Advanced Stream redirector file au2E 73 6E 64SoundMachine Audio FileNeXT/Sun Microsystems μ-Lawaudio fileavi41 56 49 20Audio Video Interleave (AVI) AX4D 5A Library cache fileAX4D 5A 90 00 03 00 00 00DirectShow filterbag41 4F 4C 20 46 65 65 64 62 6167AOL and AIM buddy list file BAS20 20 20bin42 4C 49 32 32 33 51Thomson Speedtouch series WLANrouter firmwarebmp42 4D Windows BitmapBMP42 4D 3Ebz; bz242 5A 68BZIP ArchiveBZ2; ; TBZ2; TB242 5A 68bzip2 compressed archiveCAB49 53 63CAB; HDR49 53 63 28Install Shield or compressedfileCAB4D 53 43 46Microsoft CAB File Formatcat30Microsoft security catalog fileCBD43 42 46 49 4C 45WordPerfect dictionary file(unconfirmed)CCD5B 43 6Ccdr CDR Corel DrawCDR45 4C 49 54 45 20 43 6F 6D 6D61 6E 64 65 72 20Elite Plus Commander saved game fileCDR, DVF4D 53 5F 56 4F 49 43 45Sony Compressed Voice File CHI; CHM49 54 53 46Microsoft Compiled HTML Help File CHM49 54 53CLB43 4D 58 31Corel Binary metafileCLB43 4F 4D 2B COM+ Catalog filecnt3A 42 61 73 65COM, DLL, DRV,EXE, PIF, QTS,QTX, SYS4D 5A Windows/DOS executable fileCOM4D 5A EECOM E9 3B 03CPE46 41 58 43 4F 56 45 52 2D 5645 52Microsoft Fax Cover SheetCPL4D 5A Control panel applicationCPT43 50 54 37 46 49 4C 45Corel Photopaint fileCPT43 50 54 46 49 4C 45Corel Photopaint fileCPX5B 57 69cru; crush43 52 55 53 48CRUSH Archive FileCRU43 52 55 53 48 20 76Crush compressed archiveCRW49 49 1A 00 00 00 48 45 41 5043 43 44 52 02 00Canon digital camera RAW fileCTF43 61 74 61 6C 6F 67 20 33 2E30 30 00WhereIsIt Catalog fileCUR00 00 02 00 01 00 20 20Windows cursor filedat03MapInfo Native Data Formatdat1A 52 54 53 20 43 4F 4D 50 5245 53 53 45 44 20 49 4D 4147 45 20 56 31 2E 30 1ARuntime Software disk imagedat41 56 47 36 5F 49 6E 74 65 6772 69 74 79 5F 44 61 74 6162 61 73 65AVG6 Integrity database fileDAT43 52 45 47Windows 9x registry hive DAT43 6C 69 65 6E 74 20 55 72 6C43 61 63 68 65 20 4D 4D 4620 56 65 72 20IE History DAT fileDAT45 52 46 53 53 41 56 45 44 4154 41 46 49 4C 45Kroll EasyRecovery Saved Recovery State fileDAT49 6E 6E 6F 20 53 65 74 75 7020 55 6E 69 6E 73 74 61 6C6C 20 4C 6F 67 20 28 62 29Inno Setup Uninstall Log filedb00 06 15 61 00 00 00 02 00 0004 D2 00 00 10 00Netscape Navigator (v4) database fileDB44 42 46 48Palm Zire photo databasedb08dBASE IV or dBFast configurationfiledb303dBASE III filedb404dBASE IV data filedba00 01 42 44Palm DateBook Archive filedbx CF AD 12 FEdbx CF AD 12 FE C5 FD 74 6F Outlook Expressdci3C 21 64 6F 63 74 79 70AOL HTML mail filedcx3A DE 68 B1DCX Graphic FileDDB00 01 00dib42 4D device-independent bitmap image DLL4D 5A 90DMP4D 44 4D 50 93 A7Windows minidump fileDMS44 4D 53 21Amiga DiskMasher compressedarchivedoc0D 44 4F 43DeskMate Document filedoc12 34 56 78 90 FF MS Worddoc31 BE 00 00 00 AB 00 00MS Word for DOS doc7F FE 34 0A MS Worddot; ppt; xla;ppa; pps; pot;msi; sdw; dbD0 CF 11 E0MS Office/OLE2doc; dot; xls; xlt; xla; ppt; apr ;ppa; pps; pot;msi; sdw; db D0 CF 11 E0 A1 B1 1A E1MS Compound Document v1 or LotusApproach APR fileDPL4D 5A 50DRV4D 5A 16drw07 A common signature and fileextension for many drawingprograms.drw01 FF 02 04 03 02Micrografx vector graphic file ds44D 47 58 20 69 74 70 64Micrografix Designer 4DSN4D 56CD Stomper Pro label filedsp23 20 4D 69 63 72 6F 73 6F 6674 20 44 65 76 6 56C 6F 7065 72 20 53 74 75 64 69 6F Microsoft Developer Studio project filedss02 64 73 73Digital Speech Standard(Olympus, Grundig,& Phillips)dtd07 64 74 32 64 64 74 64DesignTools 2D Design filedtd3C 21 45 4E 54 49 54 59XML DTDDVR44 56 44DVR-Studio stream filedwg41 43 31dwg41 43 31 30Generic AutoCAD drawingNOTES on AutoCAD file headers:The 0x41-43-31-30 (AC10) is ageneric header, occupying thefirst four bytes in the file.The next two bytes givefurther indication about theversion or subtype:0x30-32 (02) — AutoCAD0x30-33 (03) — AutoCAD0x30-34 (04) — AutoCAD R90x30-36 (06) — AutoCAD R100x30-39 (09) — AutoCAD R11/R120x31-30 (10) — AutoCAD R13(subtype 10)0x31-31 (11) — AutoCAD R13(subtype 11)0x31-32 (12) — AutoCAD R13(subtype 12)0x31-33 (13) — AutoCAD R14(subtype 13)0x31-34 (14) — AutoCAD R14(subtype 14)0x31-35 (15) — AutoCAD R20000x31-38 (18) — AutoCAD R20040x32-31 (21) — AutoCAD R200745 56 46EnCase evidence fileEnn (where nn arenumbers)ECO2A 50 52elf7F 45 4C 46 01 01 01 00ELF Executableemf01 00 00 00 58 00 00 00Extended (Enhanced) WindowsMetafile Format,printer spool fileEmaileml44 65 6C 69 76 65 72 79 2D 6461 74 65 3AEML46 72 6F 6D 20 20 20 A commmon file extension fore-mail files. Signaturesshown here are for Netscape,Eudora, and a genericsignature, respectively. EMLis also used by Outlook Expressand QuickMail.EML46 72 6F 6D 20 3F 3F 3F A commmon file extension fore-mail files. Signaturesshown here are for Netscape,Eudora, and a genericsignature, respectively. EMLis also used by Outlook Expressand QuickMail.EML46 72 6F 6D 3A 20 A commmon file extension fore-mail files. Signaturesshown here are for Netscape,Eudora, and a genericsignature, respectively. EMLis also used by Outlook Expressand QuickMail.EML52 65 63enc00 5C 41 B1 FF Mujahideen Secrets 2 encryptedfileenl[32 byte offset] 40 40 40 2000 00 40 40 40 40EndNote Library Fileeps25 21 50 53Adobe EPS Fileeps25 21 50 53 2D 41 64 6F 62 65Postscripteps25 21 50 53 2D 41 64 6F 62 652D 33 2E 30 20 45 50 53 462D 33 20 30Adobe encapsulated PostScript file (If this signature is not at the immediate beginning of the file, it will occur earlyin the file, commonly at byte offset 30)EPS C5 D0 D3eth1A 35 01 00GN Nettest WinPharoah capturefileevt30 00 00 00 4C 66 4C 65Windows Event Viewer fileevt03 00 00 00 C4 66 C4 56EVTX45 6C 66 46 69 6C 65 00Windows Vista event log fileexe; dll; drv;vxd; sys; ocx;vbx4D 5A Win32 Executableexe; dll; drv;vxd; sys; ocx;4D 5A Win16 Executablevbx4D 5A Executable Fileexe; com; 386;ax; acm; sys;dll; drv; flt;fon;ocx; scr;lrc; vxd; cpl;x324D 5A 90EXE, DLL, OCX,OLB, IMM, IMEfli00 11 AF FLIC Animation fileflt00 01 01OpenFlight 3D fileFLT4D 5A 90 00 03 00 00 00Audition graphic filter file(Adobe)FLV46 4C 56 01Flash video fileAdobe FrameMaker filefm3C 4D 61 6B 65 72 46 69 6C 6520fm300 00 1A 00 07 80 01 00Lotus 123 v3 FMT filefmt20 00 68 00 20 0Lotus 123 v4 FMT fileFNT43 48 41FON4D 5A Font fileGBC87 F5 3Egid3F 5F 03 00Windows Help Index FileGID4C 4E 02 00Windows Help index fileGIF47 49 46 38gif47 49 46 38 37 61Graphics interchange format file(GIF 87A)gif47 49 46 38 39 61Graphics interchange format file(GIF89A)GTD7B 50 72GX247 58 32Show Partner graphics file (notconfirmed)gz; tar; tgz1F 8B Gzip Archive Filegz; tgz1F 8B 08GZ Compressed Filehap91 33 48 46HAP Archive File HDMP4D 44 4D 50 93 A7Windows heap dump filehdr23 3F 52 41 44 49 41 4E 43 450A adiance High Dynamic Range image fileHLP3F 5F 03hlp3F 5F 03 00Windows Help fileHLP4C 4E 02 00Windows Help filehlp[7 byte offset] 00 00 FF FF FFFFWindows Help filehqx28 54 68 69 73 20 66 69 6C 65Macintosh BinHex 4 CompressedArchivehqx28 54 68 69 73 20 66 69 6C 6520 6D 75 73 74 20 62 65 2063 6F 6E 76 65 72 74 65 64 2077 69 74 68 20 42 69 6E 48 6578 20Macintosh BinHex 4 Compressed ArchiveHTM3C 21 44htm; html3C 21 44 4F 43 54HyperText Markup Language 3 htm; html3C 48 54 4D 4C 3E HyperText Markup Language 2 htm; html3C 68 74 6D 6C 3E HyperText Markup Language 1html68 74 6D 6C 3E HTMLico00 00 01 00 00Icon Fileico00 00 01 00 01 00 20 20Icon FileIFF46 4F 52 4DIFO44 56 44DVD info fileIME4D 5A 90img00 01 00 08 00 01 00 01 01Ventura Publisher/GEM VDI ImageFormat Bitmap fileIMG00 FF FFIMM4D 5A 90ind41 4F 4C 49 44 58AOL client preferences/settingsfileISO43 44 30 30 31ISO-9660 CD Disc Image (Thissignature usually occurs atbyte 8001, 8801, or 9001.)ivr2E 52 45 43RealPlayer video file (V11 andlater)JAR4A 41 52 43 53 00JARCS compressed archivejar5F 27 A8 89JAR Archive Filejpg; jpeg FF D8 FFjpg; jpe; jpeg FF D8 FF E0 00JPG Graphic Filejpg; jpe; jpeg FF D8 FF FE 00JPG Graphic FileKGB4B 47 42 5F 61 72 63 68 20 2D KGB archiveKOZ49 44 33 03 00 00 00Sprint Music Store audio file(for mobile devices)LDB42 49 4Clha2D 6C 68 35 2D LHA Compressedlha; lzh[2 byte offset] 2D 6C 68Compressed archive fileLHP3F 5F 03lhp3F 5F 03 00Windows Help Filelib21 3C 61 72 63 68 3E 0A Unix archiver (ar) files andMicrosoft Program LibraryCommon Object File Format (COFF) LIB2A 24 20LIT49 54 4F 4C 49 54 4C 53Microsoft Reader eBook file LNK4C 00 00lnk4C 00 00 00Windows Shortcut (Link File)lnk4C 00 00 00 01 14 02Windows Link FileLNK4C 00 00 00 01 14 02 00Windows shortcut filelog2A 2A 2A 20 20 49 6E 73 74 61Symantec Wise Installer log file 6C 6C 61 74 69 6F 6E 20 5374 61 72 74 65 64 20lzh lh Lz compression filelwp57 6F 72 64 50 72 6F Lotus WordPro v9m3u23 45 58m4a00 00 00 20 66 74 79 70 4D 3441 20 00 00 00 00Apple Lossless Audio Codec filem4a; m4v00 00 00 20 66 74 79 70 4D 3441 20 00 00 00 00QuickTime M4A/M4V filemanifest3C 3F 78 6D 6C 20 76 65 72 7369 6F 6E 3D Windows Visual Stylesheet XML fileMAR4D 41 52 31 00Mozilla archiveMAR4D 41 52 43Microsoft/MSN MARC archiveMAR4D 41 72 30 00MAr compressed archivemax D0 CF 11mdb00 01 00 00 53 74 61 6E 64 6172 64 20 4A 65 74 20 44 42Microsoft Access filemdb; mda; mde;mdt53 74 61 6E 64 61 72 64 20 4A MS AccessMDF00 FF FFmdf00 FF FF FF FF FF FF FF FF FFFF 00 00 02 00 01Alcohol 120% CD imagemdf01 0F 00 00Microsoft SQL Server 2000databaseMDI45 50Microsoft Document Imaging file MDS4D 45 44MID; MIDI4D 54 68 64Musical Instrument DigitalInterface (MIDI) sound file mkv1A 45 DF A3 93 42 82 88 6D 6174 72 6F 73 6B 61Matroska stream fileMLS4D 49 4C 45 53Milestones project managementand scheduling software (Alsosee "MV2C" and "MV214"signatures)MLS4D 4C 53 57Skype localization data file MLS4D 56 32 31 34Milestones project managementand scheduling software (Alsosee "MILES" and "MV2C"signatures)MLS4D 56 32 43Milestones project managementand scheduling software (Alsosee "MILES" and "MV214"signatures)MMF4D 4D 4D 44 00 00Yamaha Corp. Synthetic musicMobile Application Format(SMAF) for multimedia files thatcan be played on hand-helddevices.mny00 01 00 00 4D 53 49 53 41 4D20 44 61 74 61 62 61 73 65Microsoft Money fileMOV00 00 0FMOV00 00 77mov6D 6F 6F 76Quicktimemov6D 64 61 74QuickTime Moviemp0C ED Monochrome Picture TIFF bitmapfile (unconfirmed)MP349 44 33MPEG-1 Audio Layer 3 (MP3) audiofileMP3FF FB 50mp400 00 00 18 66 74 79 70 33 6770 35MPEG-4 video filesMPA00 00 01mpg; mpeg00 00 01 B3MPEG Moviempg00 00 01 BA MPEGMSC3C 3F 78msc3C 3F 78 6D 6C 20 76 65 72 7369 6F 6E 3D 22 31 2E 30 223F 3E 0D 0A 3C 4D 4D 43 5F 436F 6E 73 6F 6C 65 46 69 6C 6520 43 6F 6E 73 6F 6C 65 5665 72 73 69 6F 6E 3D 22Microsoft Management Console Snap-in Control filemsi23 20Cerius2 fileMSV4D 53 5F 56 4F 49 43 45Sony Memory Stick CompressedVoice fileNES4E 45 53NLS C2 20 20nri0E 4E 65 72 6F 49 53 4F Nero CD Compilationntf1A 00 00Lotus Notes database template nsf; ntf1A 00 00 03 00 00Lotus Notes Database/Templatensf1A 00 00 03 00 00 11 00Notes Databasensf1A 00 00 04 00 00Lotus Notes databaseNational Transfer Format Map File ntf30 31 4F 52 44 4E 41 4E 43 4520 53 55 52 56 45 59 20 2020 20 20 20 20obj4C 01Microsoft Common Object FileFormat (COFF) relocatableobject code file for an Intel 386or later/compatible processors OCX4D 5A ActiveX or OLE Custom Control OCX4D 5A 90OLB4D 5A OLE object libraryOLB4D 5A 90org; pfc41 4F 4C 56 4D 31 30 30AOL personal file cabinet (PFC)filepak1A 0B Compressed archive filePAT47 46 31 50 41 54 43 48Advanced Gravis Ultrasound patchfilePAT47 50 41 54GIMP (GNU Image ManipulationProgram) pattern filePBK5B 41 44PCB17 A1 50PCS0A 0501pcx0A nn 01 01ZSOFT Paintbrush file(where nn =0x02, 0x03, or 0x05)pcx0A 05 01 08PC Paintbrush(often associatedwith Quake Engine games)Palmpilot Database/Document File pdb[11 byte offset] 00 00 00 0000 00 00 00 00 00 00 00 0000 00 00 00 00 00 00 00 00 0000PDF25 50 44pdf; fdf25 50 44 46Adobe Portable Document Formatand Forms Document filepdf25 50 44 46 2D 31 2E Adobe AcrobatPDG48 48 02pf11 00 00 00 53 43 43 41Windows prefetch filepic01 00 00 00 01Unknown type picture filePJT00 00 07PLL24 53 6FPNG89 50 4EPNG89 50 4E 47png89 50 4E 47 0D 0A PNG Image Filepng89 50 4E 47 0D 0A 1A 0A PNG Image FilePPC52 65 63PPT D0 CF 11ppt[512 byte offset] 00 6E 1E F0PowerPoint presentationsubheader (MS Office)ppt[512 byte offset] 0F 00 E8 03PowerPoint presentationsubheader (MS Office)PPZ4D 53 43 46Powerpoint Packaged Presentation prc42 4F 4F 4B 4D 4F 42 49Palmpilot resource filePRG23 44 45ps25 21 50 53 2D 41 64 6F 62 65PostscriptPSD38 42 50psd38 42 50 53Adobe Photoshop image filepsp7E 42 4B 00PaintShop Pro Image Filepst21 42 44 4E Microsoft Outlook PersonalFolder filepwl E3 82 85 96Windows Passwordqbb45 86 00 00 06 00Intuit QuickBooks Backup file qdf AC 9E BD 8F Quickenqph03 00 00 00Quicken price history fileqt6D 64 61 74Quicktime Movie Fileqxd00 00 49 49 58 50 52Quark Express document (Intel &Motorola, respectively)qxd00 00 4D 4D 58 50 52ra2E 52 4D 46 00 00 00 12 00Real Audio filera; ram2E 72 61 FD Real Audio Filera2E 72 61 FD 00RealAudio streaming media file RAR52 61 72rar52 61 72 21RAR Archive FileRAW06 05 00reg52 45 47 45 44 49 54 34rgb01 DA 01 01 00 03Silicon Graphics RGB BitmapRM2E 52 4Drm; rmvb2E 52 4D 46Real Media streaming media file rpm ED AB EE DB RPM Archive FileRagTime document fileRTD43 23 2B 44 A4 43 4D A5 48 6472RTF7B 5C 72rtf7B 5C 72 74 66Rich Text Format FileSPSS Data filesav24 46 4C 32 40 28 23 29 20 5350 53 53 20 44 41 54 41 2046 49 4C 45SBV46 45 44 46(Unknown file type)SCH2A 76 65scm80 53 43SH348 48 47 42 31Harvard Graphics presentationfileSHD4B 49 00 00Windows 9x printer spool filesit53 49 54 21Stuffit v1 Archive Filesit53 74 75 66 66 49 74Stuffit v5 Archive Filesle3A 56 45 52 53 49 4F 4E Surfplan kite project filesle41 43 76teganos Security Suite virtualsecure drivesly; srt; slt53 52 01 00SageFF FFsnm00 1E 84 90 00 00 00 00Netscape Communicator (v4) mailfolderSNP4D 53 43 46Microsoft Access Snapshot Viewerfilesol00 BF Adobe Flash shared object file .,Flash cookies)spl00 00 01 00Windows NT/2000/XP printer spoolfileSCR4D 5A Screen saverSUB FF FF FFSWF43 57 53Shockwave Flash file (v5+)SWF46 57 53Macromedia Shockwave Flashplayer filesxc calc OpenOffice Calcsxd draw OpenOffice Drawsxi impress OpenOffice Impresssxm math OpenOffice Mathsxw writer OpenOffice Writersyw41 4D 59 4F Harvard Graphics symbol graphic TAG00 00 02tar; cpio30 37 30 37 30 37CPIO Archive File1F 9D 90Compressed tape archive filetga00 00 10 00 00RLE压缩的前5字节TGA00 00 02tga00 00 02 00 00未压缩的前5字节TIF; TIFF49 20 49Tagged Image File Format filetif; tiff49 49 2A TIFF (Intel)tif; tiff49 49 2A 00Tagged Image File Format file(little endian, ., LSB firstin the byte; Intel)TIF; TIFF4D 4D 00 2A Tagged Image File Format file(big endian, ., LSB last inthe byte; Motorola)tif; tiff4D 4D 2A TIFF (Motorola)TIF; TIFF4D 4D 00 2B BigTIFF files; Tagged Image File Format files >4 GBTLB4D 53 46 54 02 00 01 00OLE, SPSS, or Visual C++ type library filetr101 10Novell LANalyzer capture file TST00 01 00TTF00 01 00ufa55 46 41UFA Archive FileVBX4D 5A VisualBASIC applicationVCD45 4E 54 52 59 56 43 44 02 0000 01 02 00 18 58VideoVCD (GNU VCDImager) filevcf42 45 47 49 4E 3A 56 43 41 5244 0D 0AvCard filevob00 00 01 BA DVD Video Movie File (video/dvd,video/mpeg)VXD, 3864D 5A Windows virtual device drivers WAV52 49 46wav57 41 56 45Wavewav57 41 56 45 66 6D 74Wave Fileswb200 00 02 00QuattroPro for WindowsSpreadsheet filewb3[24 byte offset] 3E 00 03 00FE FF 09 00 06Quatro Pro for Windows Notebook filewk1; wks20 00 60 40 60Lotus 123 v1 Worksheetwk100 00 02 00 06 04 06 00 08 0000 00 00 00Lotus 1-2-3 spreadsheet (v1) filewk300 00 1A 00 00 10 04 00Lotus 123 spreadsheet (v3) filewk4; wk500 00 1A 00 02 10 04 00Lotus 1-2-3 spreadsheet (v4, v5)filewks0E 57 4B 53DeskMate WorksheetWMA30 26 B2wmf01 00 09 00Graphics Metafilewmf01 00 09 00 00 03Windows Metadata file (Winformat)wmf02 00 09 00Graphics Metafilewmf D7 CD C6 9A Windows Meta FileWMV30 26 B2wp FF 57 50 43WordPerfect v5 or v6wpd FF 57 50 43WordPerfectwpg FF 57 50 47WordPerfect Graphicswri31 BE Microsoft Write fileWRI31 BE 00wri32 BE Microsoft Write filews1D 7D WordStar Version documentXBE58 42 45xdr3C BizTalk XML-Data Reduced Schemafilexls09 02 06 00 00 00 10 00 B9 045C 00MS Excel v2xls09 04 06 00 00 00 10 00 F6 055C 00MS Excel v4XLS D0 CF 11xls D0 CF 11 E0MS Excelxls[512 byte offset] 09 08 1000 00 06 05 00Excel spreadsheet subheader (MS Office)XML3C 3F 78xml3C 3F 78 6D 6C XML Documentxml FF FE 3C 00 52 00 4F 00 4F 00 XML Document (ROOTSTUB)54 00 53 00 54 00 55 00 4200XMV00 50 01XSL FF FE 3CXML User Interface Language file xul72 73 69 6F 6E 3D 22 31 3C 3F78 6D 6C 20 76 65 2E 30 223F 3Ez1F 9D TAR Compressed Archive FileZ1F 9D 8CZIP50 4B 03zip; jar; zipx50 4B 03 04ZIP Archivezip50 4B 30 30ZIP Archive (outdated)Zip50 4B 30 30 50 4B 03 04WINZIP Compressedzoo5A 4F 4F 20ZOO Archive FileSage Backup 1 SAGEBACKUP("3037", "CPIO Archive File"),("100", "ICON File"),("1F9D", "TAR Compressed Archive File"),FFD8FFFE00,.JPEG;.JPE;.JPG,"JPG Graphic File"FFD8FFE000,.JPEG;.JPE;.JPG,"JPG Graphic File"3961,.gif,"GIF 89A"3761,.gif,"GIF 87A"424D,.bmp,"Windows Bitmap"4D5A,.exe;;.386;.ax;.acm;.sys;.dll;.drv;.flt;.fon;.ocx;.scr;.lrc;.vxd ;.cpl;.x32,"Executable File"504B0304,.zip,"Zip Compressed"3A,t,""D0CF11E0A1B11AE1,.doc;.xls;.xlt;.ppt;.apr,"MS Compound Document v1 or Lotus Approach APR file"000,.emf,""03000000C466C456,.evt,""3F5F0300,.gid;.hlp;.lhp,"Windows Help File"1F8B08,.gz,"GZ Compressed File"6C65,.hqx,""0000010000,.ico,"Icon File"4C000000011402,.lnk,"Windows Link File",.pdf,"Adobe PDF File",.reg,""7B5C727466,.rtf,"Rich Text Format File"lh,.lzh,"Lz compression file"MThd,.mid,""0A050108,.pcx,"",.eps,"Adobe EPS File"2112,.ain,"AIN Archive File"1A02,.arc,"ARC/PKPAK Compressed 1"1A03,.arc,"ARC/PKPAK Compressed 2"1A04,.arc,"ARC/PKPAK Compressed 3"1A08,.arc,"ARC/PKPAK Compressed 4"1A09,.arc,"ARC/PKPAK Compressed 5"60EA,.arj,"ARJ Compressed",.avi,"Audio Video Interleave(AVI)"425A68,.bz;.bz2,"Bzip Archive",.cab,"Cabinet File"4C01,.obj,"Compiled Object Module"3037,.tar;.cpio,"CPIO Archive File"48,.cru;.crush,"CRUSH Archive File"3ADE68B1,.dcx,"DCX Graphic File"1F8B,.gz;.tar;.tgz,"Gzip Archive File",.hap,"HAP Archive File"3C68746D6C3E,.htm;.html,"HyperText Markup Language 1" 3C48544D4C3E,.htm;.html,"HyperText Markup Language 2" 3C21444F4354,.htm;.html,"HyperText Markup Language 3" 100,.ico,"ICON File"5F27A889,.jar,"JAR Archive File"2D6C68352D,.lha,"LHA Compressed"600,.wk1;.wks,"Lotus 123 v1 Worksheet"00001A0007800100,.fm3,"Lotus 123 v3 FMT file"00001A0000100400,.wk3,"Lotus 123 v3 Worksheet"200,.fmt,"Lotus 123 v4 FMT file"00001A0002100400,.wk4,"Lotus 123 v5"5B7665725D,.ami,"Lotus Ami Pro"1505052,.adx,"Lotus Approach ADX file"1A0000030000,.nsf;.ntf,"Lotus Notes Database/Template" 4D747064,.ds4,"Micrografix Designer 4"4D534346,.cab,"Microsoft CAB File Format"4D546864,.mid,"Midi Audio File"000001B3,.mpg;.mpeg,"MPEG Movie"00001000B9045C00,.xls,"MS Excel v2"00001000F6055C00,.xls,"MS Excel v4"7FFE340A,.doc,"MS Word"90FF,.doc,"MS Word "31BE000000AB0000,.doc,"MS Word for DOS "1A000000,.nsf,"Notes Database"7E424B00,.psp,"PaintShop Pro Image File"504B0304,.zip,"PKZIP Compressed"89504E470D0A,.png,"PNG Image File"6D646174,.mov,"QuickTime Movie"6D646174,.qt,"Quicktime Movie File",.rar,"RAR Archive File"2E7261FD,.ra;.ram,"Real Audio File"EDABEEDB,.rpm,"RPM Archive File"2E736E64,.au,"SoundMachine Audio File",.sit,"Stuffit v1 Archive File"664974,.sit,"Stuffit v5 Archive File"1F9D,.z,"TAR Compressed Archive File"49492A,.tif;.tiff,"TIFF(Intel)"4D4D2A,.tif;.tiff,"TIFF(Motorola)"554641,.ufa,"UFA Archive File"666D74,.wav,"Wave Files"D7CDC69A,.wmf,"Windows Meta File"4C000000,.lnk,"Windows Shortcut(Link File)"504B3030504B0304,.zip,"WINZIP Compressed"FF575047,.wpg,"WordPerfect Graphics"FF575043,.wp,"WordPerfect v5 or v6"3C3F786D6C,.xml,"XML Document"FFFE3C0052004F004F004200,.xml,"XML Document(ROOTSTUB)" 3C21454E,.dtd,"XML DTD"5A4F4F20,.zoo,"ZOO Archive File"。

文件头标志大全

各类文件的文件头标志参见扩展名文件头标识（HEX）文件描述12300 00 1A 00 05 10 04Lotus 1-2-3 spreadsheet (v9) file3gg; 3gp; 3g200 00 00 nn 66 74 79 70 33 67703rd Generation Partnership Proj ect 3GPP (nn=0x14) and 3GPP2 (nn=0x20) multimedia files7z37 7A BC AF 27 1C7-ZIP compressed fileaba00 01 42 41Palm Address Book Archive file abi41 4F 4C 49 4E 44 45 58AOL address book index file aby; idx41 4F 4C 44 42AOL database files: address book(ABY) and user configurationdataaccdb00 01 00 00 53 74 61 6E 64 6172 64 20 41 43 45 20 44 42Microsoft Access 2007 fileACM4D 5A MS audio compression managerdriverADF44 4F 53Amiga disk fileadx03 00 00 00 41 50 50 52Lotus Approach ADX fileAIFF46 4F 52 4D 00Audio Interchange Fileain21 12AIN Compressed Archive Fileami5B 76 65 72 5D Lotus Ami Proamr23 21 41 4D 52Adaptive Multi-Rate ACELP(Algebraic CodeExcited Linear Prediction)Codec, commonly audio format withGSM cell phonesANI52 49 46 46API4D 5A 90 00 03 00 00 00Acrobat plug-inarc1A 0x LH archive file, oldversion(where x = 0x2,0x3, 0x4, 0x8 or 0x9 for types1-5, respectively)arc41 72 43 01FreeArc compressed filearj60 EA ARJ Compressed ArchiveARJ60 EA 27ART4A 47 03 0E 00 00 00AOL ART fileART4A 47 04 0E 00 00 00AOL ART fileasf30 26 B2 75 8E 66 CF 11Windows Mediaasf; wma; wmv30 26 B2 75 8E 66 CF 11 A6 D900 AA 00 62 CE 6C Microsoft Windows Media Audio/VideoFile(Advanced Streaming Format)asx3C Advanced Stream redirector file au2E 73 6E 64SoundMachine Audio FileNeXT/Sun Microsystems μ-Lawaudio fileavi41 56 49 20Audio Video Interleave (AVI) AX4D 5A Library cache fileAX4D 5A 90 00 03 00 00 00DirectShow filterbag41 4F 4C 20 46 65 65 64 62 6167AOL and AIM buddy list file BAS20 20 20bin42 4C 49 32 32 33 51Thomson Speedtouch series WLANrouter firmwarebmp42 4D Windows BitmapBMP42 4D 3Ebz; bz242 5A 68BZIP ArchiveBZ2; ; TBZ2; TB242 5A 68bzip2 compressed archiveCAB49 53 63CAB; HDR49 53 63 28Install Shield or compressedfileCAB4D 53 43 46Microsoft CAB File Formatcat30Microsoft security catalog file CBD43 42 46 49 4C 45WordPerfect dictionary file(unconfirmed)CCD5B 43 6Ccdr CDR Corel DrawCDR45 4C 49 54 45 20 43 6F 6D 6D61 6E 64 65 72 20Elite Plus Commander saved game fileCDR, DVF4D 53 5F 56 4F 49 43 45Sony Compressed Voice File CHI; CHM49 54 53 46Microsoft Compiled HTML Help File CHM49 54 53CLB43 4D 58 31Corel Binary metafileCLB43 4F 4D 2B COM+ Catalog filecnt3A 42 61 73 65COM, DLL, DRV,EXE, PIF, QTS,QTX, SYS4D 5A Windows/DOS executable file COM4D 5A EECOM E9 3B 03CPE46 41 58 43 4F 56 45 52 2D 5645 52Microsoft Fax Cover SheetCPL4D 5A Control panel application CPT43 50 54 37 46 49 4C 45Corel Photopaint fileCPT43 50 54 46 49 4C 45Corel Photopaint fileCPX5B 57 69cru; crush43 52 55 53 48CRUSH Archive FileCRU43 52 55 53 48 20 76Crush compressed archive CRW49 49 1A 00 00 00 48 45 41 5043 43 44 52 02 00Canon digital camera RAW fileCTF43 61 74 61 6C 6F 67 20 33 2E30 30 00WhereIsIt Catalog fileCUR00 00 02 00 01 00 20 20Windows cursor filedat03MapInfo Native Data Format dat1A 52 54 53 20 43 4F 4D 50 5245 53 53 45 44 20 49 4D 4147 45 20 56 31 2E 30 1ARuntime Software disk imagedat41 56 47 36 5F 49 6E 74 65 6772 69 74 79 5F 44 61 74 6162 61 73 65AVG6 Integrity database fileDAT43 52 45 47Windows 9x registry hiveDAT43 6C 69 65 6E 74 20 55 72 6C43 61 63 68 65 20 4D 4D 4620 56 65 72 20IE History DAT fileDAT45 52 46 53 53 41 56 45 44 4154 41 46 49 4C 45Kroll EasyRecovery Saved Recovery State fileDAT49 6E 6E 6F 20 53 65 74 75 70 Inno Setup Uninstall Log file20 55 6E 69 6E 73 74 61 6C 6C 20 4C 6F 67 20 28 62 29db00 06 15 61 00 00 00 02 00 0004 D2 00 00 10 00Netscape Navigator (v4) database fileDB44 42 46 48Palm Zire photo databasedb08dBASE IV or dBFast configurationfiledb303dBASE III filedb404dBASE IV data filedba00 01 42 44Palm DateBook Archive filedbx CF AD 12 FEdbx CF AD 12 FE C5 FD 74 6F Outlook Expressdci3C 21 64 6F 63 74 79 70AOL HTML mail filedcx3A DE 68 B1DCX Graphic FileDDB00 01 00dib42 4D device-independent bitmap image DLL4D 5A 90DMP4D 44 4D 50 93 A7Windows minidump fileDMS44 4D 53 21Amiga DiskMasher compressedarchivedoc0D 44 4F 43DeskMate Document filedoc12 34 56 78 90 FF MS Worddoc31 BE 00 00 00 AB 00 00MS Word for DOSdoc7F FE 34 0A MS Worddot; ppt; xla;ppa; pps; pot;msi; sdw; dbD0 CF 11 E0MS Office/OLE2doc; dot; xls; xlt; xla; ppt; apr ;ppa; pps; pot;msi; sdw; db D0 CF 11 E0 A1 B1 1A E1MS Compound Document v1 or LotusApproach APR fileDPL4D 5A 50DRV4D 5A 16drw07 A common signature and fileextension for many drawingprograms.drw01 FF 02 04 03 02Micrografx vector graphic file ds44D 47 58 20 69 74 70 64Micrografix Designer 4DSN4D 56CD Stomper Pro label filedsp23 20 4D 69 63 72 6F 73 6F 6674 20 44 65 76 6 56C 6F 7065 72 20 53 74 75 64 69 6F Microsoft Developer Studio project filedss02 64 73 73Digital Speech Standard(Olympus, Grundig,& Phillips)dtd07 64 74 32 64 64 74 64DesignTools 2D Design filedtd3C 21 45 4E 54 49 54 59XML DTDDVR44 56 44DVR-Studio stream filedwg41 43 31dwg41 43 31 30Generic AutoCAD drawingNOTES on AutoCAD file headers:The 0x41-43-31-30 (AC10) is ageneric header, occupying thefirst four bytes in the file.The next two bytes givefurther indication about theversion or subtype:0x30-32 (02) — AutoCAD0x30-33 (03) — AutoCAD0x30-34 (04) — AutoCAD R90x30-36 (06) — AutoCAD R100x30-39 (09) — AutoCAD R11/R120x31-30 (10) — AutoCAD R13(subtype 10)0x31-31 (11) — AutoCAD R13(subtype 11)0x31-32 (12) — AutoCAD R13(subtype 12)0x31-33 (13) — AutoCAD R14(subtype 13)0x31-34 (14) — AutoCAD R14(subtype 14)0x31-35 (15) — AutoCAD R20000x31-38 (18) — AutoCAD R20040x32-31 (21) — AutoCAD R200745 56 46EnCase evidence fileEnn (where nn arenumbers)ECO2A 50 52elf7F 45 4C 46 01 01 01 00ELF Executableemf01 00 00 00 58 00 00 00Extended (Enhanced) WindowsMetafile Format,printer spool fileeml44 65 6C 69 76 65 72 79 2D 64Email61 74 65 3AEML46 72 6F 6D 20 20 20 A commmon file extension fore-mail files. Signaturesshown here are for Netscape,Eudora, and a genericsignature, respectively. EMLis also used by Outlook Expressand QuickMail.EML46 72 6F 6D 20 3F 3F 3F A commmon file extension fore-mail files. Signaturesshown here are for Netscape,Eudora, and a genericsignature, respectively. EMLis also used by Outlook Expressand QuickMail.EML46 72 6F 6D 3A 20 A commmon file extension fore-mail files. Signaturesshown here are for Netscape,Eudora, and a genericsignature, respectively. EMLis also used by Outlook Expressand QuickMail.EML52 65 63enc00 5C 41 B1 FF Mujahideen Secrets 2 encryptedfileEndNote Library Fileenl[32 byte offset] 40 40 40 2000 00 40 40 40 40eps25 21 50 53Adobe EPS Fileeps25 21 50 53 2D 41 64 6F 62 65Postscripteps25 21 50 53 2D 41 64 6F 62 65 Adobe encapsulated PostScript2D 33 2E 30 20 45 50 53 46 2D 33 20 30file (If this signature is not at the immediate beginning of the file, it will occur earlyin the file, commonly at byte offset 30)EPS C5 D0 D3eth1A 35 01 00GN Nettest WinPharoah capturefileevt30 00 00 00 4C 66 4C 65Windows Event Viewer fileevt03 00 00 00 C4 66 C4 56EVTX45 6C 66 46 69 6C 65 00Windows Vista event log file exe; dll; drv;vxd; sys; ocx;vbx4D 5A Win32 Executableexe; dll; drv;vxd; sys; ocx;vbx4D 5A Win16 Executableexe; com; 386;ax; acm; sys;dll; drv; flt;fon;ocx; scr;lrc; vxd; cpl;x324D 5A Executable FileEXE, DLL, OCX,OLB, IMM, IME4D 5A 90fli00 11 AF FLIC Animation fileflt00 01 01OpenFlight 3D fileFLT4D 5A 90 00 03 00 00 00Audition graphic filter file(Adobe)FLV46 4C 56 01Flash video filefm3C 4D 61 6B 65 72 46 69 6C 6520Adobe FrameMaker filefm300 00 1A 00 07 80 01 00Lotus 123 v3 FMT filefmt20 00 68 00 20 0Lotus 123 v4 FMT fileFNT43 48 41FON4D 5A Font fileGBC87 F5 3Egid3F 5F 03 00Windows Help Index FileGID4C 4E 02 00Windows Help index fileGIF47 49 46 38gif47 49 46 38 37 61Graphics interchange format file(GIF 87A)gif47 49 46 38 39 61Graphics interchange format file(GIF89A)GTD7B 50 72GX247 58 32Show Partner graphics file (notconfirmed)gz; tar; tgz1F 8B Gzip Archive Filegz; tgz1F 8B 08GZ Compressed Filehap91 33 48 46HAP Archive FileHDMP4D 44 4D 50 93 A7Windows heap dump filehdr23 3F 52 41 44 49 41 4E 43 450A adiance High Dynamic Range image fileHLP3F 5F 03hlp3F 5F 03 00Windows Help fileHLP4C 4E 02 00Windows Help filehlp[7 byte offset] 00 00 FF FF FFFFWindows Help filehqx28 54 68 69 73 20 66 69 6C 65Macintosh BinHex 4 CompressedArchivehqx28 54 68 69 73 20 66 69 6C 6520 6D 75 73 74 20 62 65 2063 6F 6E 76 65 72 74 65 64 2077 69 74 68 20 42 69 6E 48 6578 20Macintosh BinHex 4 Compressed ArchiveHTM3C 21 44htm; html3C 21 44 4F 43 54HyperText Markup Language 3 htm; html3C 48 54 4D 4C 3E HyperText Markup Language 2 htm; html3C 68 74 6D 6C 3E HyperText Markup Language 1html68 74 6D 6C 3E HTMLico00 00 01 00 00Icon Fileico00 00 01 00 01 00 20 20Icon FileIFF46 4F 52 4DIFO44 56 44DVD info fileIME4D 5A 90img00 01 00 08 00 01 00 01 01Ventura Publisher/GEM VDI ImageFormat Bitmap fileIMG00 FF FFIMM4D 5A 90ind41 4F 4C 49 44 58AOL client preferences/settingsfileISO43 44 30 30 31ISO-9660 CD Disc Image (Thissignature usually occurs atbyte 8001, 8801, or 9001.)ivr2E 52 45 43RealPlayer video file (V11 andlater)JAR4A 41 52 43 53 00JARCS compressed archivejar5F 27 A8 89JAR Archive Filejpg; jpeg FF D8 FFjpg; jpe; jpeg FF D8 FF E0 00JPG Graphic Filejpg; jpe; jpeg FF D8 FF FE 00JPG Graphic FileKGB4B 47 42 5F 61 72 63 68 20 2D KGB archiveKOZ49 44 33 03 00 00 00Sprint Music Store audio file(for mobile devices)LDB42 49 4Clha2D 6C 68 35 2D LHA Compressedlha; lzh[2 byte offset] 2D 6C 68Compressed archive fileLHP3F 5F 03lhp3F 5F 03 00Windows Help Filelib21 3C 61 72 63 68 3E 0A Unix archiver (ar) files andMicrosoft Program LibraryCommon Object File Format (COFF) LIB2A 24 20LIT49 54 4F 4C 49 54 4C 53Microsoft Reader eBook file LNK4C 00 00lnk4C 00 00 00Windows Shortcut (Link File)lnk4C 00 00 00 01 14 02Windows Link FileLNK4C 00 00 00 01 14 02 00Windows shortcut filelog2A 2A 2A 20 20 49 6E 73 74 61Symantec Wise Installer log file 6C 6C 61 74 69 6F 6E 20 5374 61 72 74 65 64 20lzh lh Lz compression filelwp57 6F 72 64 50 72 6F Lotus WordPro v9m3u23 45 58m4a00 00 00 20 66 74 79 70 4D 3441 20 00 00 00 00Apple Lossless Audio Codec filem4a; m4v00 00 00 20 66 74 79 70 4D 3441 20 00 00 00 00QuickTime M4A/M4V filemanifest3C 3F 78 6D 6C 20 76 65 72 7369 6F 6E 3D Windows Visual Stylesheet XML fileMAR4D 41 52 31 00Mozilla archiveMAR4D 41 52 43Microsoft/MSN MARC archive MAR4D 41 72 30 00MAr compressed archivemax D0 CF 11mdb00 01 00 00 53 74 61 6E 64 6172 64 20 4A 65 74 20 44 42Microsoft Access filemdb; mda; mde;mdt53 74 61 6E 64 61 72 64 20 4A MS AccessMDF00 FF FFmdf00 FF FF FF FF FF FF FF FF FFFF 00 00 02 00 01Alcohol 120% CD imagemdf01 0F 00 00Microsoft SQL Server 2000databaseMDI45 50Microsoft Document Imaging file MDS4D 45 44MID; MIDI4D 54 68 64Musical Instrument DigitalInterface (MIDI) sound filemkv1A 45 DF A3 93 42 82 88 6D 61Matroska stream file74 72 6F 73 6B 61MLS4D 49 4C 45 53Milestones project managementand scheduling software (Alsosee "MV2C" and "MV214"signatures)MLS4D 4C 53 57Skype localization data file MLS4D 56 32 31 34Milestones project managementand scheduling software (Alsosee "MILES" and "MV2C"signatures)MLS4D 56 32 43Milestones project managementand scheduling software (Alsosee "MILES" and "MV214"signatures)MMF4D 4D 4D 44 00 00Yamaha Corp. Synthetic musicMobile Application Format(SMAF) for multimedia files thatcan be played on hand-helddevices.Microsoft Money filemny00 01 00 00 4D 53 49 53 41 4D20 44 61 74 61 62 61 73 65MOV00 00 0FMOV00 00 77mov6D 6F 6F 76Quicktimemov6D 64 61 74QuickTime Moviemp0C ED Monochrome Picture TIFF bitmapfile (unconfirmed)MP349 44 33MPEG-1 Audio Layer 3 (MP3) audiofileMP3FF FB 50mp400 00 00 18 66 74 79 70 33 6770 35MPEG-4 video files MPA00 00 01mpg; mpeg00 00 01 B3MPEG Moviempg00 00 01 BA MPEGMSC3C 3F 78msc3C 3F 78 6D 6C 20 76 65 72 7369 6F 6E 3D 22 31 2E 30 223F 3E 0D 0A 3C 4D 4D 43 5F 436F 6E 73 6F 6C 65 46 69 6C 6520 43 6F 6E 73 6F 6C 65 5665 72 73 69 6F 6E 3D 22Microsoft Management Console Snap-in Control filemsi23 20Cerius2 fileMSV4D 53 5F 56 4F 49 43 45Sony Memory Stick CompressedVoice fileNES4E 45 53NLS C2 20 20nri0E 4E 65 72 6F 49 53 4F Nero CD Compilationntf1A 00 00Lotus Notes database template nsf; ntf1A 00 00 03 00 00Lotus Notes Database/Template nsf1A 00 00 03 00 00 11 00Notes Databasensf1A 00 00 04 00 00Lotus Notes databasentf30 31 4F 52 44 4E 41 4E 43 4520 53 55 52 56 45 59 20 2020 20 20 20 20National Transfer Format Map Fileobj4C 01Microsoft Common Object FileFormat (COFF) relocatableobject code file for an Intel 386or later/compatible processors OCX4D 5A ActiveX or OLE Custom Control OCX4D 5A 90OLB4D 5A OLE object libraryOLB4D 5A 90org; pfc41 4F 4C 56 4D 31 30 30AOL personal file cabinet (PFC)filepak1A 0B Compressed archive filePAT47 46 31 50 41 54 43 48Advanced Gravis Ultrasound patchfilePAT47 50 41 54GIMP (GNU Image ManipulationProgram) pattern filePBK5B 41 44PCB17 A1 50PCS0A 0501pcx0A nn 01 01ZSOFT Paintbrush file(where nn =0x02, 0x03, or 0x05)pcx0A 05 01 08PC Paintbrush(often associatedwith Quake Engine games)Palmpilot Database/Document File pdb[11 byte offset] 00 00 00 0000 00 00 00 00 00 00 00 0000 00 00 00 00 00 00 00 00 0000PDF25 50 44pdf; fdf25 50 44 46Adobe Portable Document Formatand Forms Document filepdf25 50 44 46 2D 31 2E Adobe AcrobatPDG48 48 02pf11 00 00 00 53 43 43 41Windows prefetch filepic01 00 00 00 01Unknown type picture filePJT00 00 07PLL24 53 6FPNG89 50 4EPNG89 50 4E 47png89 50 4E 47 0D 0A PNG Image Filepng89 50 4E 47 0D 0A 1A 0A PNG Image FilePPC52 65 63PPT D0 CF 11ppt[512 byte offset] 00 6E 1E F0PowerPoint presentationsubheader (MS Office)ppt[512 byte offset] 0F 00 E8 03PowerPoint presentationsubheader (MS Office)PPZ4D 53 43 46Powerpoint Packaged Presentation prc42 4F 4F 4B 4D 4F 42 49Palmpilot resource filePRG23 44 45ps25 21 50 53 2D 41 64 6F 62 65PostscriptPSD38 42 50psd38 42 50 53Adobe Photoshop image filepsp7E 42 4B 00PaintShop Pro Image Filepst21 42 44 4E Microsoft Outlook PersonalFolder filepwl E3 82 85 96Windows Passwordqbb45 86 00 00 06 00Intuit QuickBooks Backup file qdf AC 9E BD 8F Quickenqph03 00 00 00Quicken price history fileqt6D 64 61 74Quicktime Movie Fileqxd00 00 49 49 58 50 52Quark Express document (Intel &Motorola, respectively)qxd00 00 4D 4D 58 50 52ra2E 52 4D 46 00 00 00 12 00Real Audio filera; ram2E 72 61 FD Real Audio Filera2E 72 61 FD 00RealAudio streaming media file RAR52 61 72rar52 61 72 21RAR Archive FileRAW06 05 00reg52 45 47 45 44 49 54 34rgb01 DA 01 01 00 03Silicon Graphics RGB BitmapRM2E 52 4Drm; rmvb2E 52 4D 46Real Media streaming media file rpm ED AB EE DB RPM Archive FileRTD43 23 2B 44 A4 43 4D A5 48 64RagTime document file72RTF7B 5C 72rtf7B 5C 72 74 66Rich Text Format Filesav24 46 4C 32 40 28 23 29 20 53SPSS Data file50 53 53 20 44 41 54 41 2046 49 4C 45SBV46 45 44 46(Unknown file type)SCH2A 76 65scm80 53 43SH348 48 47 42 31Harvard Graphics presentationfileSHD4B 49 00 00Windows 9x printer spool filesit53 49 54 21Stuffit v1 Archive Filesit53 74 75 66 66 49 74Stuffit v5 Archive Filesle3A 56 45 52 53 49 4F 4E Surfplan kite project filesle41 43 76teganos Security Suite virtualsecure drivesly; srt; slt53 52 01 00SageFF FFsnm00 1E 84 90 00 00 00 00Netscape Communicator (v4) mailfolderSNP4D 53 43 46Microsoft Access Snapshot Viewerfilesol00 BF Adobe Flash shared object file .,Flash cookies)spl00 00 01 00Windows NT/2000/XP printer spoolfileSCR4D 5A Screen saverSUB FF FF FFSWF43 57 53Shockwave Flash file (v5+)SWF46 57 53Macromedia Shockwave Flashplayer filesxc calc OpenOffice Calcsxd draw OpenOffice Drawsxi impress OpenOffice Impresssxm math OpenOffice Mathsxw writer OpenOffice Writersyw41 4D 59 4F Harvard Graphics symbol graphic TAG00 00 02tar; cpio30 37 30 37 30 37CPIO Archive File1F 9D 90Compressed tape archive file tga00 00 10 00 00RLE压缩的前5字节TGA00 00 02tga00 00 02 00 00未压缩的前5字节TIF; TIFF49 20 49Tagged Image File Format file tif; tiff49 49 2A TIFF (Intel)tif; tiff49 49 2A 00Tagged Image File Format file(little endian, ., LSB firstin the byte; Intel)TIF; TIFF4D 4D 00 2A Tagged Image File Format file(big endian, ., LSB last inthe byte; Motorola)tif; tiff4D 4D 2A TIFF (Motorola)TIF; TIFF4D 4D 00 2B BigTIFF files; Tagged Image File Format files >4 GBTLB4D 53 46 54 02 00 01 00OLE, SPSS, or Visual C++ type library filetr101 10Novell LANalyzer capture file TST00 01 00TTF00 01 00ufa55 46 41UFA Archive FileVBX4D 5A VisualBASIC applicationVCD45 4E 54 52 59 56 43 44 02 0000 01 02 00 18 58VideoVCD (GNU VCDImager) filevcf42 45 47 49 4E 3A 56 43 41 5244 0D 0AvCard filevob00 00 01 BA DVD Video Movie File (video/dvd,video/mpeg)VXD, 3864D 5A Windows virtual device drivers WAV52 49 46wav57 41 56 45Wavewav57 41 56 45 66 6D 74Wave Fileswb200 00 02 00QuattroPro for WindowsSpreadsheet filewb3[24 byte offset] 3E 00 03 00FE FF 09 00 06Quatro Pro for Windows Notebook filewk1; wks20 00 60 40 60Lotus 123 v1 Worksheetwk100 00 02 00 06 04 06 00 08 0000 00 00 00Lotus 1-2-3 spreadsheet (v1) file wk300 00 1A 00 00 10 04 00Lotus 123 spreadsheet (v3) file wk4; wk500 00 1A 00 02 10 04 00Lotus 1-2-3 spreadsheet (v4, v5)filewks0E 57 4B 53DeskMate WorksheetWMA30 26 B2wmf01 00 09 00Graphics Metafilewmf01 00 09 00 00 03Windows Metadata file (Winformat)wmf02 00 09 00Graphics Metafilewmf D7 CD C6 9A Windows Meta FileWMV30 26 B2wp FF 57 50 43WordPerfect v5 or v6wpd FF 57 50 43WordPerfectwpg FF 57 50 47WordPerfect Graphicswri31 BE Microsoft Write fileWRI31 BE 00wri32 BE Microsoft Write filews1D 7D WordStar Version documentXBE58 42 45xdr3C BizTalk XML-Data Reduced Schemafilexls09 02 06 00 00 00 10 00 B9 045C 00MS Excel v2xls09 04 06 00 00 00 10 00 F6 055C 00MS Excel v4XLS D0 CF 11xls D0 CF 11 E0MS Excelxls[512 byte offset] 09 08 1000 00 06 05 00Excel spreadsheet subheader (MS Office)XML3C 3F 78xml3C 3F 78 6D 6C XML Documentxml FF FE 3C 00 52 00 4F 00 4F 0054 00 53 00 54 00 55 00 4200XML Document (ROOTSTUB)XMV00 50 01XSL FF FE 3Cxul72 73 69 6F 6E 3D 22 31 3C 3F XML User Interface Language file78 6D 6C 20 76 65 2E 30 223F 3Ez1F 9D TAR Compressed Archive FileZ1F 9D 8CZIP50 4B 03zip; jar; zipx50 4B 03 04ZIP Archivezip50 4B 30 30ZIP Archive (outdated)Zip50 4B 30 30 50 4B 03 04WINZIP Compressedzoo5A 4F 4F 20ZOO Archive FileSage Backup 1 SAGEBACKUP("3037", "CPIO Archive File"),("100", "ICON File"),("1F9D", "TAR Compressed Archive File"),FFD8FFFE00,.JPEG;.JPE;.JPG,"JPG Graphic File"FFD8FFE000,.JPEG;.JPE;.JPG,"JPG Graphic File"3961,.gif,"GIF 89A"3761,.gif,"GIF 87A"424D,.bmp,"Windows Bitmap"4D5A,.exe;;.386;.ax;.acm;.sys;.dll;.drv;.flt;.fon;.ocx;.scr;.lrc;.vxd ;.cpl;.x32,"Executable File"504B0304,.zip,"Zip Compressed"3A,t,""D0CF11E0A1B11AE1,.doc;.xls;.xlt;.ppt;.apr,"MS Compound Document v1 or Lotus Approach APR file"000,.emf,""03000000C466C456,.evt,""3F5F0300,.gid;.hlp;.lhp,"Windows Help File"1F8B08,.gz,"GZ Compressed File"6C65,.hqx,""0000010000,.ico,"Icon File"4C000000011402,.lnk,"Windows Link File",.pdf,"Adobe PDF File",.reg,""7B5C727466,.rtf,"Rich Text Format File"lh,.lzh,"Lz compression file"MThd,.mid,""0A050108,.pcx,"",.eps,"Adobe EPS File"2112,.ain,"AIN Archive File"1A02,.arc,"ARC/PKPAK Compressed 1"1A03,.arc,"ARC/PKPAK Compressed 2"1A04,.arc,"ARC/PKPAK Compressed 3"1A08,.arc,"ARC/PKPAK Compressed 4"1A09,.arc,"ARC/PKPAK Compressed 5"60EA,.arj,"ARJ Compressed",.avi,"Audio Video Interleave(AVI)"425A68,.bz;.bz2,"Bzip Archive",.cab,"Cabinet File"4C01,.obj,"Compiled Object Module"3037,.tar;.cpio,"CPIO Archive File"48,.cru;.crush,"CRUSH Archive File"3ADE68B1,.dcx,"DCX Graphic File"1F8B,.gz;.tar;.tgz,"Gzip Archive File",.hap,"HAP Archive File"3C68746D6C3E,.htm;.html,"HyperText Markup Language 1"3C48544D4C3E,.htm;.html,"HyperText Markup Language 2" 3C21444F4354,.htm;.html,"HyperText Markup Language 3" 100,.ico,"ICON File"5F27A889,.jar,"JAR Archive File"2D6C68352D,.lha,"LHA Compressed"600,.wk1;.wks,"Lotus 123 v1 Worksheet"00001A0007800100,.fm3,"Lotus 123 v3 FMT file"00001A0000100400,.wk3,"Lotus 123 v3 Worksheet" 200,.fmt,"Lotus 123 v4 FMT file"00001A0002100400,.wk4,"Lotus 123 v5"5B7665725D,.ami,"Lotus Ami Pro"1505052,.adx,"Lotus Approach ADX file"1A0000030000,.nsf;.ntf,"Lotus Notes Database/Template" 4D747064,.ds4,"Micrografix Designer 4"4D534346,.cab,"Microsoft CAB File Format"4D546864,.mid,"Midi Audio File"000001B3,.mpg;.mpeg,"MPEG Movie"00001000B9045C00,.xls,"MS Excel v2"00001000F6055C00,.xls,"MS Excel v4"7FFE340A,.doc,"MS Word"90FF,.doc,"MS Word "31BE000000AB0000,.doc,"MS Word for DOS "1A000000,.nsf,"Notes Database"7E424B00,.psp,"PaintShop Pro Image File"504B0304,.zip,"PKZIP Compressed"89504E470D0A,.png,"PNG Image File"6D646174,.mov,"QuickTime Movie"6D646174,.qt,"Quicktime Movie File",.rar,"RAR Archive File"2E7261FD,.ra;.ram,"Real Audio File"EDABEEDB,.rpm,"RPM Archive File"2E736E64,.au,"SoundMachine Audio File",.sit,"Stuffit v1 Archive File"664974,.sit,"Stuffit v5 Archive File"1F9D,.z,"TAR Compressed Archive File"49492A,.tif;.tiff,"TIFF(Intel)"4D4D2A,.tif;.tiff,"TIFF(Motorola)"554641,.ufa,"UFA Archive File"666D74,.wav,"Wave Files"D7CDC69A,.wmf,"Windows Meta File"4C000000,.lnk,"Windows Shortcut(Link File)"504B3030504B0304,.zip,"WINZIP Compressed"FF575047,.wpg,"WordPerfect Graphics"FF575043,.wp,"WordPerfect v5 or v6"3C3F786D6C,.xml,"XML Document"FFFE3C0052004F004F004200,.xml,"XML Document(ROOTSTUB)" 3C21454E,.dtd,"XML DTD"5A4F4F20,.zoo,"ZOO Archive File"。

wav文件头

一、各种WAV文件头格式WAV文件也分好几个种类，相应的非数据信息存储在文件头部分，以下是各种WAV文件头格式。

表18KHz采样、16比特量化的线性PCM语音信号的WAV文件头格式表（共44字节）表28KHz采样、8比特A律量化的PCM语音信号的WAV文件头格式表（共58字节）表38KHz采样、8比特U律量化的PCM语音信号的WAV文件头格式表（共58字节）表4ADPCM语音编码后的WAV文件头格式表（共90字节）表5GSM（Global System for Mobile Communication全球移动通信系统）语音编码后的WAV文件头格式表（共60字节）表6SBC（Sub-Band Coding子带编码）语音编码后的WAV文件头格式表（共58字节）表7CELP(Code Excited Linear Prediction码激励线性预测编码——近10年来最成功的语音编码算法)语音编码后的WAV文件头格式表（共58字节）概念1、读取WAV文件，填写WAVEFORMATEX结构WAVEFORMATEXtypedef struct{WORD wFormatTag;WORD nChannels;DWORD nSamplesPerSec;DWORD nAvgBytesPe rSec; WORD nBlockAlign;WORD wBitsPerSample;WORD cbSize;} WAVEFORMATEX;具体参数解释如下：wFormatTag：波形数据的格式，定义在MMREG.H文件中nChannels：波形数据的通道数：单声道或立体声nSamplesPerSec：采样率，对于PCM格式的波形数据，采样率有8.0 kHz,11.025kHz,22.05 kHz,44.1 kHz 等nAvgBytesPerSec：数据率，对于PCM格式的波形数据，数据率等于采样率乘以每样点字节数nBlockAlign：每个样点字节数wBitsPerSample：采样精度，对于PCM格式的波形数据，采样精度为8或16cbSize：附加格式信息的数据块大小概念2、定义设备头结构以下WAVEHDR定义了指向波形数据缓冲区的设备头。

公文写作文件版头

公文写作文件版头公文版头的作用在于体现了公文的严肃性、规范性和统一性，是公文写作中不能忽视的重要因素。

规范要求：公文的格式，分版头、主体、版记三部分，共由份号、密级和保密期限、紧急程度、发文机关标志、发文字号、签发人、标题、主送机关、正文、附件说明、发文机关署名、成文日期、印章、附注、附件、抄送机关、印发机关和印发日期、页码等18项要素组成。

版头部分置于公文首页红色分隔线（宽度同版心，即156mm）以上的各要素统称为版头。

包括份号、秘密等级和保密期限、紧急程度、发文机关标志、发文字号、签发人等要素。

扩展资料：发文机关标志是公文版头部分的核心，用套红大字居中印在公文首页上半部，字体要庄重、规范、美观、大小适度（一般应小于上级机关的字体大小）。

主要有两种形式：一是发文机关全称或者规范化简称加“文件”二字；二是发文机关全称或者规范化简称。

联合行文时，可并用联合发文机关名称，一般主办机关排列在前；也可单独用主办机关名称。

民族自治地方的公文，其发文机关标志可并用少数民族的文字和汉字印刷，少数民族的文字排在汉字的上方。

参考资料来源：中国共产党新闻网——第三节公文格式。

版头部分又称文头部分在行政机关公文首页，置于红色反线以上的各要素统称眉首。

版头部分通常由公文份数序号、秘密等级和保密期限、紧急程度、发文机关标识、发文字号、签发人等要素构成。

1.公文份数序号将同一文稿印刷若干份时每份公文的顺序编号。

如需标识公文份数序号，用阿拉伯数码顶格标识在版心左上角第一行。

一般适用于比较重要的公文。

2.秘密等级和保密期限秘密文件要注明密级，不涉及保密内容的普通文件，没有这个项目。

公文需要标识秘密等级，用3号黑体字，顶格标识在版心左上角第二行，两字之间空1字；如需同时标识秘密等级和保密期限，用3号黑体字，顶格标识在版心左上角第二行，秘密等级和保密期限之间用“★”隔开。

3.紧急程度紧急程度是对公文送达和办理时间的限度。

公文如需标识紧急程度，用3号黑体字，顶格标识在版心右上角第1行，两字之间空1字；如需同时标识秘密等级与紧急程度，秘密等级顶格标识在版心右上角第1行，紧急程度顶格标识在版心右上角第2行。

常见的文件头格式

常见的文件头格式文件头格式，也称为文件标记或文件签名，是一种用于标识文件类型的数据结构。

在计算机科学中，不同的文件类型由不同的文件头格式来标识。

常见的文件头格式有许多种，下面是一些常见类型的文件头格式：1. 文本文件：UTF-8：通常以 EF BB BF 开头。

UTF-8 是一种可变长度字符编码，用于表示 Unicode 字符。

UTF-16：通常以 FE FF 开头。

UTF-16 是一种 Unicode 字符编码。

ISO-8859-1：也称为 Latin-1，通常以 00 开头。

它是一种用于西欧语言的字符编码。

2. 图片文件：JPEG：以 FF D8 FF 开头。

JPEG 是一种常见的图像文件格式。

PNG：以 89 50 4E 47 0D 0A 1A 0A 开头。

PNG 是一种无损压缩的位图图形格式。

GIF：以 47 49 46 38 或 47 49 46 39 开头。

GIF 是一种基于 LZW 算法的连续色调无损压缩格式。

3. 音频文件：MP3：不同的编码可能有所不同，但常见的以 FF FB 开头。

MP3 是一种音频压缩格式。

WAV：通常以 52 49 46 46 开头。

WAV 是 Windows 操作系统下的音频文件格式。

4. 视频文件：AVI：通常以 52 49 46 46 开头。

AVI 是 Microsoft 开发的音频视频交错格式。

MP4：以 66 FF FF 或 00 FF FF 开头。

MP4 是一种音频和视频封装格式，常用于数字媒体播放。

5. 压缩文件：ZIP：以 50 4B 03 04 或 50 4B 05 06 开头。

ZIP 是用于数据压缩的归档文件格式。

RAR：以 52 61 72 开头。

RAR 是用于数据压缩的归档文件格式，由 WinRAR 公司开发。

6. 可执行文件：PE (Windows 可执行文件)：通常以 4D 5A 开头。

PE 是 Microsoft Windows 可执行文件的格式。

所有类型文件的文件头标志

各类文件的文件头标志1、从Ultra－edit-32中提取出来的JPEG (jpg)，文件头：FFD8FFPNG (png)，文件头：89504E47GIF (gif)，文件头：47494638TIFF (tif)，文件头：49492A00Windows Bitmap (bmp)，文件头：424DCAD (dwg)，文件头：41433130Adobe Photoshop (psd)，文件头：38425053Rich Text Format (rtf)，文件头：7B5C727466XML (xml)，文件头：3C3F786D6CHTML (html)，文件头：68746D6C3EEmail [thorough only] (eml)，文件头：44656C69766572792D646174653A Outlook Express (dbx)，文件头：CFAD12FEC5FD746FOutlook (pst)，文件头：2142444EMS Word/Excel (xls.or.doc)，文件头：D0CF11E0MS Access (mdb)，文件头：5374616E64617264204AWordPerfect (wpd)，文件头：FF575043Postscript (eps.or.ps)，文件头：252150532D41646F6265Adobe Acrobat (pdf)，文件头：255044462D312EQuicken (qdf)，文件头：AC9EBD8FWindows Password (pwl)，文件头：E3828596ZIP Archive (zip)，文件头：504B0304RAR Archive (rar)，文件头：52617221Wave (wav)，文件头：57415645AVI (avi)，文件头：41564920Real Audio (ram)，文件头：2E7261FDReal Media (rm)，文件头：2E524D46MPEG (mpg)，文件头：000001BAMPEG (mpg)，文件头：000001B3Quicktime (mov)，文件头：6D6F6F76Windows Media (asf)，文件头：3026B2758E66CF11 MIDI (mid)，文件头：4D5468642、从winhex中取出的文件头列表File Type ExtensionsHeaderJPEG jpg;jpeg 0xFFD8FFPNG png 0x89504E470D0A1A0AGIF gif GIF8TIFF tif;tiff 0x49492A00TIFF tif;tiff 0x4D4D002ABit map bmp BMAOL ART art 0x4A47040E000000AOL ART art 0x4A47030E000000PC Paintbrush pcx 0x0A050108Graphics Metafile wmf 0xD7CDC69AGraphics Metafile wmf 0x01000900Graphics Metafile wmf 0x02000900Enhanced Metafile emf 0x0100000058000000Corel Draw cdr CDRCAD dwg 0x41433130Adobe Photoshop psd 8BPSRich Text Format rtf rtfXML xmlHTML html;htm;php;php3;php4;phtml;shtml typeEmail eml Delivery-date:Outlook Express dbx 0xCFAD12FEOutlookpst!BDNMS Office/OLE2 doc;xls;dot;ppt;xla;ppa;pps;pot;msi;sdw;db 0xD0CF11E0A1B11AE1MS Access mdb;mda;mde;mdt Standard JWordPerfect wpd 0xFF575043OpenOffice Writer sxw writerOpenOffice Calc sxc calcOpenOffice Math sxm mathOpenOffice Impress sxi impressOpenOffice Draw sxd drawAdobe FrameMaker fm <MAKERFILEPostScript eps.or.ps;ps;eps %!PS-AdobeAdobe Acrobat pdf %PDF-1.Quicken qdf 0xAC9EBD8FQuickBooks Backup qbb 0x458600000600Sage sly.or.srt.or.slt;sly;srt;slt 0x53520100Sage Backup 1 SAGEBACKUPLotus WordPro v9 lwp 0x576F726450726FLotus 123 v9 123 0x00001A00051004Lotus 123 v5 wk4 0x00001A0002100400Lotus 123 v3 wk3 0x00001A0000100400Lotus 123 v1 wk1 0x2000604060Windows Password pwl 0xE3828596ZIP Archive zip;jar 0x504B0304ZIP Archive (outdated) zip 0x504B3030RAR Archive rar Rar!GZ Archive gz;tgz 0x1F8B08BZIP Archive bz2 BZhARJ Archive arj 0x60EA7-ZIP Archive 7z 7z集'Wave wav WAVEAVI avi AVIReal Audio ram;ra .ra?0Real Media rm .RMFMPEG mpg;mpeg 0x000001BAMPEG mpg;mpeg 0x000001B3Quicktime mov moovWindows Media asf 0x3026B2758E66CF11MIDI mid MThdWin32 Executable exe;dll;drv;vxd;sys;ocx;vbx MZWin16 Executable exe;dll;drv;vxd;sys;ocx;vbx MZELF Executable elf;; 0x7F454C4601010100各种文件类型文件头标志位详细列表FFD8FFFE00, .JPEG;.JPE;.JPG, "JPG Graphic File"FFD8FFE000, .JPEG;.JPE;.JPG, "JPG Graphic File"474946383961, .gif, "GIF 89A"474946383761, .gif, "GIF 87A"424D, .bmp, "Windows Bitmap"4D5A, .exe;.com;.386;.ax;.acm;.sys;.dll;.drv;.flt;.fon;.ocx;.scr;.lrc;.v xd;.cpl;.x32, "Executable File"504B0304, .zip, "Zip Compressed"3A42617365, .cnt, ""D0CF11E0A1B11AE1, .doc;.xls;.xlt;.ppt;.apr, "MS Compound Document v1 or Lotus Approach APR file"0100000058000000, .emf, ""03000000C466C456, .evt, ""3F5F0300, .gid;.hlp;.lhp, "Windows Help File"1F8B08, .gz, "GZ Compressed File"28546869732066696C65, .hqx, ""0000010000, .ico, "Icon File"4C000000011402, .lnk, "Windows Link File"25504446, .pdf, "Adobe PDF File"5245474544495434, .reg, ""7B5C727466, .rtf, "Rich Text Format File"lh, .lzh, "Lz compression file"MThd, .mid, ""0A050108, .pcx, ""25215053, .eps, "Adobe EPS File"2112, .ain, "AIN Archive File"1A02, .arc, "ARC/PKPAK Compressed 1"1A03, .arc, "ARC/PKPAK Compressed 2"1A04, .arc, "ARC/PKPAK Compressed 3"1A08, .arc, "ARC/PKPAK Compressed 4"1A09, .arc, "ARC/PKPAK Compressed 5"60EA, .arj, "ARJ Compressed"41564920, .avi, "Audio Video Interleave (AVI)"425A68, .bz;.bz2, "Bzip Archive"49536328, .cab, "Cabinet File"4C01, .obj, "Compiled Object Module"303730373037, .tar;.cpio, "CPIO Archive File" 4352555348, .cru;.crush, "CRUSH Archive File"3ADE68B1, .dcx, "DCX Graphic File"1F8B, .gz;.tar;.tgz, "Gzip Archive File"91334846, .hap, "HAP Archive File"3C68746D6C3E, .htm;.html, "HyperText Markup Language 1" 3C48544D4C3E, .htm;.html, "HyperText Markup Language 2" 3C21444F4354, .htm;.html, "HyperText Markup Language 3"100, .ico, "ICON File"5F27A889, .jar, "JAR Archive File"2D6C68352D, .lha, "LHA Compressed"20006040600, .wk1;.wks, "Lotus 123 v1 Worksheet"00001A0007800100, .fm3, "Lotus 123 v3 FMT file"00001A0000100400, .wk3, "Lotus 123 v3 Worksheet" 20006800200, .fmt, "Lotus 123 v4 FMT file"00001A0002100400, .wk4, "Lotus 123 v5"5B7665725D, .ami, "Lotus Ami Pro"300000041505052, .adx, "Lotus Approach ADX file"1A0000030000, .nsf;.ntf, "Lotus Notes Database/Template" 4D47582069747064, .ds4, "Micrografix Designer 4"4D534346, .cab, "Microsoft CAB File Format"4D546864, .mid, "Midi Audio File"000001B3, .mpg;.mpeg, "MPEG Movie"0902060000001000B9045C00, .xls, "MS Excel v2" 0904060000001000F6055C00, .xls, "MS Excel v4"7FFE340A, .doc, "MS Word"1234567890FF, .doc, "MS Word 6.0"31BE000000AB0000, .doc, "MS Word for DOS 6.0"1A00000300001100, .nsf, "Notes Database"7E424B00, .psp, "PaintShop Pro Image File"504B0304, .zip, "PKZIP Compressed"89504E470D0A, .png, "PNG Image File"6D646174, .mov, "QuickTime Movie"6D646174, .qt, "Quicktime Movie File"52617221, .rar, "RAR Archive File"2E7261FD, .ra;.ram, "Real Audio File"EDABEEDB, .rpm, "RPM Archive File"2E736E64, .au, "SoundMachine Audio File"53495421, .sit, "Stuffit v1 Archive File"53747566664974, .sit, "Stuffit v5 Archive File"1F9D, .z, "TAR Compressed Archive File"49492A, .tif;.tiff, "TIFF (Intel)"4D4D2A, .tif;.tiff, "TIFF (Motorola)"554641, .ufa, "UFA Archive File"57415645666D74, .wav, "Wave Files"D7CDC69A, .wmf, "Windows Meta File"4C000000, .lnk, "Windows Shortcut (Link File)"504B3030504B0304, .zip, "WINZIP Compressed"FF575047, .wpg, "WordPerfect Graphics"FF575043, .wp, "WordPerfect v5 or v6"3C3F786D6C, .xml, "XML Document"FFFE3C0052004F004F0054005300540055004200, .xml, "XML Document (ROOTSTUB)" 3C21454E54495459, .dtd, "XML DTD"5A4F4F20, .zoo, "ZOO Archive File"通过文件头标识判断图片格式最近在做东西的时候遇到了点问题，在加载图片的时候，加载失败，后缀都是jpg格式，但换个图片就可以了，为此，怀疑图片格式有问题，遂拖到UE里面查看它的16进制，果然，两个图片的文件头根本就不一样，这不是欺负人嘛，害我白白浪费了半天的时间，差点要重新编译内核。

各类文件的文件头标志

各类文件的文件头标志1、从Ultra－edit-32中提取出来的JPEG (jpg)，文件头：FFD8FFPNG (png)，文件头：89504E47GIF (gif)，文件头：47494638TIFF (tif)，文件头：49492A00Windows Bitmap (bmp)，文件头：424DCAD (dwg)，文件头：41433130Adobe Photoshop (psd)，文件头：38425053Rich Text Format (rtf)，文件头：7B5C727466XML (xml)，文件头：3C3F786D6CHTML (html)，文件头：68746D6C3EEmail [thorough only] (eml)，文件头：44656C69766572792D646174653AOutlook Express (dbx)，文件头：CFAD12FEC5FD746FOutlook (pst)，文件头：2142444EMS Word/Excel (xls.or.doc)，文件头：D0CF11E0MS Access (mdb)，文件头：5374616E64617264204A WordPerfect (wpd)，文件头：FF575043Postscript (eps.or.ps)，文件头：252150532D41646F6265Adobe Acrobat (pdf)，文件头：255044462D312EQuicken (qdf)，文件头：AC9EBD8FWindows Password (pwl)，文件头：E3828596ZIP Archive (zip)，文件头：504B0304RAR Archive (rar)，文件头：52617221Wave (wav)，文件头：57415645A VI (avi)，文件头：41564920Real Audio (ram)，文件头：2E7261FDReal Media (rm)，文件头：2E524D46MPEG (mpg)，文件头：000001BAMPEG (mpg)，文件头：000001B3Quicktime (mov)，文件头：6D6F6F76Windows Media (asf)，文件头：3026B2758E66CF11MIDI (mid)，文件头：4D5468642、从winhex中取出的文件头列表File Type ExtensionsHeaderJPEG jpg;jpeg 0xFFD8FFPNG png 0x89504E470D0A1A0AGIF gif GIF8TIFF tif;tiff 0x49492A00TIFF tif;tiff 0x4D4D002ABit map bmp BMAOL ART art 0x4A47040E000000AOL ART art 0x4A47030E000000PC Paintbrush pcx 0x0A050108Graphics Metafile wmf 0xD7CDC69AGraphics Metafile wmf 0x01000900Graphics Metafile wmf 0x02000900Enhanced Metafile emf 0x0100000058000000Corel Draw cdr CDRCAD dwg 0x41433130Adobe Photoshop psd 8BPSRich Text Format rtf rtfXML xmlHTML html;htm;php;php3;php4;phtml;shtml typeEmail eml Delivery-date:Outlook Express dbx 0xCFAD12FEOutlookpst!BDNMS Office/OLE2 doc;xls;dot;ppt;xla;ppa;pps;pot;msi;sdw;db 0xD0CF11E0A1B11AE1MS Access mdb;mda;mde;mdt Standard JWordPerfect wpd 0xFF575043OpenOffice Writer sxw writerOpenOffice Calc sxc calcOpenOffice Math sxm mathOpenOffice Impress sxi impressOpenOffice Draw sxd drawAdobe FrameMaker fm <MAKERFILEPostScript eps.or.ps;ps;eps %!PS-AdobeAdobe Acrobat pdf %PDF-1.Quicken qdf 0xAC9EBD8F QuickBooks Backup qbb 0x458600000600Sage sly.or.srt.or.slt;sly;srt;slt 0x53520100Sage Backup 1 SAGEBACKUPLotus WordPro v9 lwp 0x576F726450726FLotus 123 v9 123 0x00001A00051004Lotus 123 v5 wk4 0x00001A0002100400Lotus 123 v3 wk3 0x00001A0000100400Lotus 123 v1 wk1 0x2000604060Windows Password pwl 0xE3828596ZIP Archive zip;jar 0x504B0304ZIP Archive (outdated) zip 0x504B3030RAR Archive rar Rar!GZ Archive gz;tgz 0x1F8B08BZIP Archive bz2 BZhARJ Archive arj 0x60EA7-ZIP Archive 7z 7z集'Wave wav WAVEA VI avi AVIReal Audio ram;ra .ra?0Real Media rm .RMFMPEG mpg;mpeg 0x000001BAMPEG mpg;mpeg 0x000001B3Quicktime mov moovWindows Media asf 0x3026B2758E66CF11MIDI mid MThdWin32 Executable exe;dll;drv;vxd;sys;ocx;vbx MZWin16 Executable exe;dll;drv;vxd;sys;ocx;vbx MZELF Executable elf;; 0x7F454C4601010100各种文件类型文件头标志位详细列表FFD8FFFE00, .JPEG;.JPE;.JPG, "JPG Graphic File"FFD8FFE000, .JPEG;.JPE;.JPG, "JPG Graphic File" 474946383961, .gif, "GIF 89A"474946383761, .gif, "GIF 87A"424D, .bmp, "Windows Bitmap"4D5A, .exe;.com;.386;.ax;.acm;.sys;.dll;.drv;.flt;.fon;.ocx;.scr;.lrc;.vxd; .cpl;.x32, "Executable File"504B0304, .zip, "Zip Compressed"3A42617365, .cnt, ""D0CF11E0A1B11AE1, .doc;.xls;.xlt;.ppt;.apr, "MS Compound Document v1 or Lotus Approach APR file" 0100000058000000, .emf, ""03000000C466C456, .evt, ""3F5F0300, .gid;.hlp;.lhp, "Windows Help File"1F8B08, .gz, "GZ Compressed File"28546869732066696C65, .hqx, ""0000010000, .ico, "Icon File"4C000000011402, .lnk, "Windows Link File"25504446, .pdf, "Adobe PDF File"5245474544495434, .reg, ""7B5C727466, .rtf, "Rich Text Format File"lh, .lzh, "Lz compression file"MThd, .mid, ""0A050108, .pcx, ""25215053, .eps, "Adobe EPS File"2112, .ain, "AIN Archive File"1A02, .arc, "ARC/PKPAK Compressed 1"1A03, .arc, "ARC/PKPAK Compressed 2"1A04, .arc, "ARC/PKPAK Compressed 3"1A08, .arc, "ARC/PKPAK Compressed 4"1A09, .arc, "ARC/PKPAK Compressed 5"60EA, .arj, "ARJ Compressed"41564920, .avi, "Audio Video Interleave (AVI)"425A68, .bz;.bz2, "Bzip Archive"49536328, .cab, "Cabinet File"4C01, .obj, "Compiled Object Module"303730373037, .tar;.cpio, "CPIO Archive File"4352555348, .cru;.crush, "CRUSH Archive File"3ADE68B1, .dcx, "DCX Graphic File"1F8B, .gz;.tar;.tgz, "Gzip Archive File"91334846, .hap, "HAP Archive File"3C68746D6C3E, .htm;.html, "HyperText Markup Language 1"3C48544D4C3E, .htm;.html, "HyperText Markup Language 2"3C21444F4354, .htm;.html, "HyperText Markup Language 3"100, .ico, "ICON File"5F27A889, .jar, "JAR Archive File"2D6C68352D, .lha, "LHA Compressed"20006040600, .wk1;.wks, "Lotus 123 v1 Worksheet"00001A0007800100, .fm3, "Lotus 123 v3 FMT file"00001A0000100400, .wk3, "Lotus 123 v3 Worksheet" 20006800200, .fmt, "Lotus 123 v4 FMT file"00001A0002100400, .wk4, "Lotus 123 v5"5B7665725D, .ami, "Lotus Ami Pro"300000041505052, .adx, "Lotus Approach ADX file"1A0000030000, .nsf;.ntf, "Lotus Notes Database/Template"4D47582069747064, .ds4, "Micrografix Designer 4"4D534346, .cab, "Microsoft CAB File Format"4D546864, .mid, "Midi Audio File"000001B3, .mpg;.mpeg, "MPEG Movie"0902060000001000B9045C00, .xls, "MS Excel v2" 0904060000001000F6055C00, .xls, "MS Excel v4"7FFE340A, .doc, "MS Word"1234567890FF, .doc, "MS Word 6.0"31BE000000AB0000, .doc, "MS Word for DOS 6.0"1A00000300001100, .nsf, "Notes Database"7E424B00, .psp, "PaintShop Pro Image File"504B0304, .zip, "PKZIP Compressed"89504E470D0A, .png, "PNG Image File"6D646174, .mov, "QuickTime Movie"6D646174, .qt, "Quicktime Movie File"52617221, .rar, "RAR Archive File"2E7261FD, .ra;.ram, "Real Audio File"EDABEEDB, .rpm, "RPM Archive File"2E736E64, .au, "SoundMachine Audio File"53495421, .sit, "Stuffit v1 Archive File"53747566664974, .sit, "Stuffit v5 Archive File"1F9D, .z, "TAR Compressed Archive File"49492A, .tif;.tiff, "TIFF (Intel)"4D4D2A, .tif;.tiff, "TIFF (Motorola)"554641, .ufa, "UFA Archive File"57415645666D74, .wav, "Wave Files"D7CDC69A, .wmf, "Windows Meta File"4C000000, .lnk, "Windows Shortcut (Link File)"504B3030504B0304, .zip, "WINZIP Compressed"FF575047, .wpg, "WordPerfect Graphics"FF575043, .wp, "WordPerfect v5 or v6"3C3F786D6C, .xml, "XML Document"FFFE3C0052004F004F0054005300540055004200, .xml, "XML Document (ROOTSTUB)"3C21454E54495459, .dtd, "XML DTD"5A4F4F20, .zoo, "ZOO Archive File"通过文件头标识判断图片格式最近在做东西的时候遇到了点问题，在加载图片的时候，加载失败，后缀都是jpg格式，但换个图片就可以了，为此，怀疑图片格式有问题，遂拖到UE里面查看它的16进制，果然，两个图片的文件头根本就不一样，这不是欺负人嘛，害我白白浪费了半天的时间，差点要重新编译内核。

ELF文件格式分析

ELF文件格式分析ELF（Executable and Linkable Format）是一种常见的可执行文件格式，用于在UNIX和类UNIX系统上存储和执行程序。

在本文中，我们将详细分析ELF文件格式的结构和各个部分的作用。

首先是标识部分，它占据ELF文件的最开始位置，有以下几个字段：1. Magic Number：ELF文件的前四个字节，用于识别文件类型。

对于32位系统，它的值是0x7F、'E'、'L'和'F'；对于64位系统，它的值是0x7F、'E'、'L'和'F'以及0x022.类型：指定了ELF文件的类型，比如可执行文件、目标文件、共享库等等。

3.类型机器：指定了目标机器的体系结构，如x86、ARM等等。

4.版本：指定了ELF文件的版本号。

5.入口点：对于可执行文件，指定程序的入口点。

6.程序头表和节头表的偏移地址和大小。

接下来是文件头部分，它描述了ELF文件的整体结构和布局：1.类型：表示ELF文件的类型，如可重定位文件、可执行文件、共享目标文件等。

2.目标机器：标识目标机器的类型。

3.版本：指定了ELF文件的版本号。

4.入口点：指定程序的入口点。

5.程序头表偏移地址和节头表偏移地址。

6.程序头表项的大小、数量和节头表项的大小、数量。

7.字符串表索引，用于找到文件中的字符串。

最后是节头表部分，它包含了所有节（Section）的相关信息，比如代码段、数据段等等。

每个节头表项包含以下字段：1.节的名称：用于标识节的名称。

2.节的类型：描述节的属性，如代码段、数据段、符号表等。

3.节的标志：描述节的属性，如可写、可执行等。

4.节的虚拟地址：指定节在内存中的虚拟地址。

5.节的文件偏移地址：指定节在文件中的偏移地址。

6.节的大小：指定节的大小。

7.链接和信息：用于指定其他与节相关的信息。

通过分析ELF文件的结构，我们可以获得有关程序入口点、机器类型、节的信息等重要的元数据。

1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。