各类文件的文件头标志

1、各类文件的文件头标志一、从 Ultraedit-32 中提掏出来的JPEG (jpg) ，文件头：FFD8FF PNG (png)，文件头：89504E47 GIF (gif) ，文件头：TIFF (tif) ，文件头：49492A00Windows Bitmap (bmp)，文件头：424D CAD (dwg)，文件头：Adobe Photoshop (psd)，文件头：Rich Text Format (rtf)，文件头：7B5C727466 XML (xml)，文件头：3C3F786D6CHTML (html)，文件头：68746D6C3EEmailthoroughonly(eml)，文

2、件头44656C792D646174653AOutlook Express (dbx)，文件头：CFAD12FEC5FD746F Outlook (pst)，文件头：2142444EMS Word/Excel ，文件头：D0CF11E0MS Access (mdb)，文件头：5374616E64617264204A WordPerfect (wpd)，文件头：FF575043Postscript ， 文 件 头 ：2D41646F6265 Adobe Acrobat (pdf)，文件头：2D312E Quicken (qdf)，文件头：AC9EBD8FWindows Password (pwl

3、)，文件头：E3828596 ZIP Archive (zip)，文件头：504B0304RAR Archive (rar)，文件头： Wave (wav)，文件头：AVI (avi)，文件头：Real Audio (ram)，文件头：2E7261FD Real Media (rm)，文件头：2E524D46 MPEG (mpg)， 文 件 头 ：000001BA MPEG (mpg)， 文 件 头 ：000001B3 Quicktime (mov)，文件头：6D6F6F76Windows Media (asf)，文件头：3026B2758E66CF11 MIDI (mid)，文件头：4D54

4、6864二、从 winhex 中掏出的文件头列表File Type ExtensionsHeader JPEG jpg;jpeg 0 xFFD8FFPNG png 0 x89504E470D0A1A0A GIF gif GIF8TIFF tif;tiff 0 x49492A00 TIFF tif;tiff0 x4D4D002A Bit map bmpBMAOL ART art 0 x4A47040E000000 AOL ART art 0 x4A47030E000000PC Paintbrush pcx 0 x0A050108 Graphics Metafile wmf 0 xD7CDC69A

5、 Graphics Metafile wmf 0 x01000900 Graphics Metafile wmf 0 x02000900 Enhanced Metafile emf 0 x000Corel Draw cdr CDR CAD dwg 0 xAdobe Photoshop psd 8BPS Rich Text Format rtf rtfXML xmlHTML html;htm;php;php3;php4;phtml;shtml type Email eml Delivery-date:Outlook Express dbx 0 xCFAD12FE Outlookpst!BDNMS

6、 Office/OLE2 doc;xls;dot;ppt;xla;ppa;pps;pot;msi;sdw;db 0 xD0CF11E0A1B11AE1MS Access mdb;mda;mde;mdt Standard J WordPerfect wpd 0 xFF575043 OpenOffice Writer sxw writerOpenOffice Calc sxc calcOpenOffice Math sxm math OpenOffice Impress sxi impress OpenOffice Draw sxd drawAdobe FrameMaker fmMAKERFILE

7、 PostScript%!PS-AdobeAdobe Acrobat pdf %PDF-1. Quicken qdf 0 xAC9EBD8F QuickBooks Backup qbb0 x0600 Sage0 xSage Backup 1 SAGEBACKUPLotus WordPro v9 lwp 0 x576F726450726F Lotus 123 v9 123 0 x00001A00051004 Lotus 123 v5 wk4 0 x00001A0002100400 Lotus 123 v3 wk3 0 x00001A0000100400Lotus 123 v1 wk1 0 x60

8、Windows Password pwl 0 xE3828596 ZIP Archive zip;jar 0 x504B0304ZIP Archive (outdated) zip 0 x504B3030 RAR Archive rar Rar!GZ Archive gz;tgz 0 x1F8B08 BZIP Archive bz2 BZhARJ Archive arj0 x60EA 7-ZIPArchive7z7zWAVEAVI avi AVIReal Audio ram;ra .ra?0 Real Media rm .RMFMPEG mpg;mpeg 0 x000001BA MPEG mp

9、g;mpeg 0 x000001B3 Quicktime mov moovWindows Media asf0 x3026B2758E66CF11 MIDI midMThdWin32 Executable exe;dll;drv;vxd;sys;ocx;vbxMZ Win16 Executable exe;dll;drv;vxd;sys;ocx;vbxMZ ELF Executable elf;0 x7F454C00各类文件类型文件头标志位详细列表FFD8FFFE00, .JPEG;.JPE;.JPG, JPG Graphic File FFD8FFE000, .JPEG;.JPE;.JPG,

10、 JPG GraphicFile 3961, .gif, GIF89A3761, .gif, GIF87A424D, .bmp, Windows Bitmap4D5A, .exe;.386;.ax;.acm;.sys;.dll;.drv;.flt;.fon;.ocx;.scr;.lrc;.vxd;.cpl;.x32, Executable File 504B0304, .zip, Zip Compressed 3A, t, D0CF11E0A1B11AE1, .doc;.xls;.xlt;.ppt;.apr, MS Compound Document v1 or Lotus Approach

11、APR file000, .emf, 03000000C466C456, .evt, 3F5F0300, .gid;.hlp;.lhp, Windows Help File 1F8B08, .gz, GZ Compressed File6C65, .hqx, 0000010000, .ico, Icon File 4C000000011402, .lnk, Windows Link File, .pdf, Adobe PDF File, .reg, 7B5C727466, .rtf, Rich Text Format File lh, .lzh, Lz compression fileMThd

12、, .mid, 0A050108, .pcx, , .eps, Adobe EPS File 2112, .ain, AIN Archive File1A02, .arc, ARC/PKPAK Compressed 1 1A03, .arc, ARC/PKPAK Compressed 21A04, .arc, ARC/PKPAK Compressed3 1A08, .arc, ARC/PKPAK Compressed4 1A09, .arc, ARC/PKPAK Compressed5 60EA, .arj, ARJCompressed, .avi, Audio Video Interleav

13、e (AVI) 425A68, .bz;.bz2, Bzip Archive, .cab, Cabinet File4C01, .obj, Compiled ObjectModule 3037, .tar;.cpio, CPIO Archive File 48, .cru;.crush, CRUSH Archive File 3ADE68B1, .dcx, DCX Graphic File 1F8B, .gz;.tar;.tgz, Gzip ArchiveFile, .hap, HAP Archive File3C68746D6C3E, .htm;.html, HyperText Markup

14、 Language1 3C48544D4C3E, .htm;.html, HyperText Markup Language2 3C21444F4354, .htm;.html, HyperText Markup Language 3 100, .ico, ICONFile5F27A889, .jar, JAR Archive File 2D6C68352D, .lha, LHA Compressed 600, .wk1;.wks, Lotus 123 v1 Worksheet00001A0007800100, .fm3, Lotus 123 v3 FMT file00001A00001004

15、00, .wk3, Lotus 123 v3Worksheet 200, .fmt, Lotus 123 v4 FMT file 00001A0002100400, .wk4, Lotus 123v55B7665725D, .ami, Lotus Ami Pro 1505052, .adx, Lotus Approach ADXfile1A0000030000, .nsf;.ntf, Lotus NotesDatabase/Template 4D747064, .ds4, Micrografix Designer44D534346, .cab, Microsoft CAB FileFormat

16、 4D546864, .mid, Midi Audio File 000001B3, .mpg;.mpeg, MPEG Movie 00001000B9045C00, .xls, MS Excelv200001000F6055C00, .xls, MS Excel v47FFE340A, .doc, MS Word90FF, .doc, MS Word 31BE000000AB0000, .doc, MS Word for DOS 1A000000, .nsf, Notes Database 7E424B00, .psp, PaintShop Pro Image File 504B0304,

17、.zip, PKZIP Compressed 89504E470D0A, .png, PNG Image File 6D646174, .mov, QuickTime Movie 6D646174, .qt, Quicktime Movie File, .rar, RAR Archive File2E7261FD, .ra;.ram, Real Audio File EDABEEDB, .rpm, RPM Archive File 2E736E64, .au, SoundMachine Audio File, .sit, Stuffit v1 Archive File 664974, .sit

18、, Stuffit v5 Archive File1F9D, .z, TAR Compressed Archive File 49492A, .tif;.tiff, TIFF (Intel)4D4D2A, .tif;.tiff, TIFF (Motorola) 554641, .ufa, UFA Archive File 666D74, .wav, Wave FilesD7CDC69A, .wmf, Windows Meta File 4C000000, .lnk, Windows Shortcut (Link File) 504B3030504B0304, .zip, WINZIP Comp

19、ressed FF575047, .wpg, WordPerfect Graphics FF575043, .wp, WordPerfect v5 or v6 3C3F786D6C, .xml, XML DocumentFFFE3C0052004F004F004200,.xml,XML(ROOTSTUB)3C21454E, .dtd, XML DTD5A4F4F20, .zoo, ZOO Archive File通过文件头标识判定图片格式加载失败，后缀都是jpgUE 里面查看它的 16 进制，果然，两下面转帖是不同图片的文件头标志：标识来识别图片格式。JPG文件头标识 (2bytes)$ff$d8(SOI(JPEG 文件标识)文件终止标识 (2bytes)$ff$d9(EOI)- 未紧缩的前5字节00 00 02 0000-RLE紧缩的前5字节00 00 10 0000文件头标识 (8bytes)89 50 4E 47 0D 0A 1A0A- 文件头标识 (6bytes)47 49 46 38 39(37)61GIF89(7)a- 文件头标识(2 bytes)42 4DBM- 文件头标识(1 bytes)0A- 文件头标识(2 bytes)4D 4D 或 4949- 文件头标识 (8bytes)00 00 01 00 01 00 2020- 文件头标识(8 byte