文件头 file signatures
文件头 file signatures
图片类
| 文件类型 | 后缀 | 文件头 | 对应字符 |
|---|---|---|---|
| JPEG raw or in the JFIF or Exif file format | jpg | FF D8 FF E0 | ÿØÿà |
| JPEG raw | jpg jepg | FF D8 FF DB | ÿØÿÛ |
| JPEG raw | jpg jepg | FF D8 FF EE | ÿØÿî |
| JFIF | jpg jepg | FF D8 FF E0 00 10 4A 4649 46 00 01 | ÿØÿà␀␐JFIF␀␁ |
| Exif 文件格式 | jpg jepg | FF D8 FF E1 ?? ?? 45 7869 66 00 00 | ÿØÿá??Exif␀␀ |
| PNG | png | 89 50 4E 47 0D 0A 1A 0A | ‰PNG␍␊␚␊ |
| GIF | gif | 47 49 46 38 37 61 47 49 46 38 39 61 |
GIF87a GIF89a |
| Tagged Image File Format (TIFF) | tif tiff |
49 49 2A 00 (little-endian) 4D 4D 00 2A (big-endian) |
II␀ MM␀ |
| Computer icon | ico | 00 00 01 00 | ␀␀␁␀ |
| Adobe Photoshop | psd | 38425053 | 8BPS |
| BMP 文件 | bmp dib |
42 4D | BM |
压缩包类
| 文件类型 | 后缀 | 文件头 | 对应字符 |
|---|---|---|---|
| ZIP Archive和基于它的格式，如EPUB、JAR、ODF、OOXML | zip aar apk docx epub ipa jar kmz maff msix odp ods odt pk3 pk4 pptx usdz vsdx xlsx xpi |
50 4B 03 04 50 4B 05 06 (empty archive) 50 4B 07 08 (spanned archive) |
PK␃␄ PK␅␆ PK␇␈ |
| RAR Archive | rar | 52 61 72 21 1A 07 (01) 00 | Rar! Rar! |
| GZIP compressed file | gz tar.gz |
1F 8B | ␟‹ |
| XZ 压缩 | xz tar.xz |
FD 37 7A 58 5A 00 | ý7zXZ␀ |
| 7-Zip | 7z | 37 7A BC AF 27 1C | 7z¼¯'␜ |
| tar archive | tar | 75 73 74 61 72 00 30 30 75 73 74 61 72 20 20 00 |
ustar␀00 ustar␠␠␀ |
| Amazon Kindle Update Package | bin | 53 50 30 31 | SP01 |
| LZH 算法的压缩文件 | z tar.z |
1F 9D 1F A0 |
␟□ ␟⍽ |
执行程序类
| 文件类型 | 后缀 | 文件头 | 对应字符 |
|---|---|---|---|
| DOS MZ 可执行文件（包括 NE 和 PE） | exe scr sys dll fon cpl iec ime rs tsp mz |
4D 5A | MZ |
| DOS ZM 可执行文件（罕见） | exe | 5A 4D | ZM |
| 可执行和可链接格式 (linux 执行文件) | 7F 45 4C 46 | ␡ELF | |
| Java 类文件，Mach-O Fat Binary | class | CA FE BA BE | Êþº¾ |
| Google Chrome 扩展程序 | crx | 43 72 32 34 | Cr24 |
| linux deb file | deb | 21 3C 61 72 63 68 3E 0A | ! |
音视频类
| 文件类型 | 后缀 | 文件头 | 对应字符 |
|---|---|---|---|
| Wave | wav | 57415645 | WAVE |
| AVI | avi | 52 49 46 46 ?? ?? ?? ??41 56 49 20 | RIFF????AVI␠ |
| Quicktime | mov | 6D6F6F76 | moov |
| MPEG-1 Layer 3 file | mp3 | FF FB FF F3 FF F2 |
ÿû ÿó ÿò |
| MP3 - ID3v2 | 49 44 33 | ID3 | |
| FLAC | flac | 66 4C 61 43 | fLaC |
| Windows Media | asf | 3026B2758E66CF11 | 0&²ufÏ |
| MIDI | mid | 4D546864 | MThd |
| MPEG-4 | mp4 | 66 74 79 70 69 73 6F 6D | ftypisom |
其余文件头
| 文件类型 | 后缀 | 文件头 | 对应字符 |
|---|---|---|---|
| PCAP wareshark数据帧 | pcapng | 0A 0D 0D 0A | ␊␍␍␊ |
| SQLite Database | sqlitedb sqlite db |
53 51 4C 69 74 65 20 66 6F 72 6D 61 74 20 33 00 |
SQLite format 3␀ |
| Adobe Acrobat | 25 50 44 46 2D | %PDF-1. | |
| XML | xml | 3C 3F 78 6D 6C 20 | <?xml␠ |
| 3C 00 3F 00 78 00 6D 00 6C 00 20 | <␀?␀x␀m␀l␀␠␀ | ||
| 00 3C 00 3F 00 78 6D 00 6C 00 20 | ␀<␀?␀x␀m␀l␀␠ | ||
| 3C 00 00 00 3F 00 00 00 78 00 00 00 6D 00 00 00 6C 00 00 00 20 00 00 00 | <␀␀␀?␀␀␀x␀␀␀m␀␀␀l␀␀␀␠␀␀␀ | ||
| 00 00 00 3C 00 00 00 3F00 00 00 78 00 00 00 6D00 00 00 6C 00 00 00 20 | ␀␀␀<␀␀␀?␀␀␀x␀␀␀m␀␀␀l␀␀␀␠ | ||
| 4C 6F A7 94 93 40 | Lo§”“@ | ||
| HTML | html | 68746D6C3E | html> |
| WebAssembly | wasm | 00 61 73 6D | ␀asm |
| MS Office Word/Excel | doc xls ppt msi msg |
D0 CF 11 E0 A1 B1 1A E1 | ÐÏ␑ࡱ␚á |
| Windows Bitmap | bmp | 424D | BM |
| CAD | dwg | 41433130 | AC10 |
| RCFile | rc | 53 45 51 36 | SEQ6 |
| Rich Text Format | rtf | 7B5C727466 | {\rtf |
| Email [thorough only] | eml | 44656C69766572792D646174653A | Delivery-date: |
| Outlook Express | dbx | CFAD12FEC5FD746F | ÏþÅýto |
| Outlook | pst | 2142444E | !BDN |
| MS Access | mdb | 5374616E64617264204A | Standard J |
| WordPerfect | wpd | FF575043 | ÿWPC |
| Quicken | qdf | AC9EBD8F | ¬½ |
| Windows Password | pwl | E3828596 | ã |
| Real Audio | ram | 2E7261FD | .raý |
| Real Media | rm | 2E524D46 | .RMF |
| MPEG | mpg | 000001BA | º |
| MPEG | mpg | 000001B3 | ³ |
