文件頭標志大全

1、各類文件的文件頭標志 參見  擴展名文件頭標識（HEX）文件描述12300 00 1A 00 05 10 04Lotus 1-2-3 spreadsheet (v9) file3gg; 3gp; 3g200 00 00 nn 66 74 79 70 33 67 703rd Generation Partnership Project 3GPP (nn=0x14)   and 3GPP2 (nn=0x20) multimedia files7z37 7A BC AF 27 1C7-ZIP compressed fileaba00 01 42 41Palm Addre

2、ss Book Archive fileabi41 4F 4C 49 4E 44 45 58AOL address book index fileaby; idx41 4F 4C 44 42AOL database files: address book (ABY) and user   configuration data (MAIN.IDX)accdb00 01 00 00 53 74 61 6E 64 61 72 64 20 41 43 45 20   44 42Microsoft Access 2007 fileACM4D 5AMS audio compressio

3、n manager driverADF44 4F 53Amiga disk fileadx03 00 00 00 41 50 50 52Lotus Approach ADX fileAIFF46 4F 52 4D 00Audio Interchange Fileain21 12AIN Compressed Archive Fileami5B 76 65 72 5DLotus Ami Proamr23 21 41 4D 52Adaptive Multi-Rate ACELP (Algebraic Code Excited   Linear Prediction) Codec, comm

4、only audio format with GSM cell phonesANI52 49 46 46API4D 5A 90 00 03 00 00 00Acrobat plug-inarc1A 0xLH archive file, old version(where x = 0x2, 0x3,   0x4, 0x8 or 0x9 for types 1-5, respectively)arc41 72 43 01FreeArc compressed filearj60 EAARJ Compressed ArchiveARJ60 EA 27ART4A 47 03 0E 00 00

5、00AOL ART fileART4A 47 04 0E 00 00 00AOL ART fileasf30 26 B2 75 8E 66 CF 11Windows Mediaasf; wma; wmv30 26 B2 75 8E 66 CF 11 A6 D9 00 AA 00 62 CE 6CMicrosoft Windows Media Audio/Video File(Advanced   Streaming Format)asx3CAdvanced Stream redirector fileau2E 73 6E 64SoundMachine Audio FileNeXT/S

6、un Microsystems -Law audio fileavi41 56 49 20Audio Video Interleave (AVI)AX4D 5ALibrary cache fileAX4D 5A 90 00 03 00 00 00DirectShow filterbag41 4F 4C 20 46 65 65 64 62 61 67AOL and AIM buddy list fileBAS20 20 20bin42 4C 49 32 32 33 51Thomson Speedtouch series WLAN router firmwarebmp42 4DWindows Bi

7、tmapBMP42 4D 3Ebz; bz242 5A 68BZIP ArchiveBZ2; TAR.BZ2; TBZ2; TB242 5A 68bzip2 compressed archiveCAB49 53 63CAB; HDR49 53 63 28Install Shield v5.x or 6.x compressed fileCAB4D 53 43 46Microsoft CAB File Formatcat30Microsoft security catalog fileCBD43 42 46 49 4C 45WordPerfect dictionary file (unconfi

8、rmed)CCD5B 43 6CcdrCDRCorel DrawCDR45 4C 49 54 45 20 43 6F 6D 6D 61 6E 64 65 72 20Elite Plus Commander saved game fileCDR, DVF4D 53 5F 56 4F 49 43 45Sony Compressed Voice FileCHI; CHM49 54 53 46Microsoft Compiled HTML Help FileCHM49 54 53CLB43 4D 58 31Corel Binary metafileCLB43 4F 4D 2BCOM+ Catalog

9、filecnt3A 42 61 73 65COM, DLL, DRV, EXE, PIF, QTS, QTX, SYS4D 5AWindows/DOS executable fileCOM4D 5A EECOME9 3B 03CPE46 41 58 43 4F 56 45 52 2D 56 45 52Microsoft Fax Cover SheetCPL4D 5AControl panel applicationCPT43 50 54 37 46 49 4C 45Corel Photopaint fileCPT43 50 54 46 49 4C 45Corel Photopaint file

10、CPX5B 57 69cru; crush43 52 55 53 48CRUSH Archive FileCRU43 52 55 53 48 20 76Crush compressed archiveCRW49 49 1A 00 00 00 48 45 41 50 43 43 44 52 02 00Canon digital camera RAW fileCTF43 61 74 61 6C 6F 67 20 33 2E 30 30 00WhereIsIt Catalog fileCUR00 00 02 00 01 00 20 20Windows cursor filedat03MapInfo

11、Native Data Formatdat1A 52 54 53 20 43 4F 4D 50 52 45 53 53 45 44 20 49   4D 41 47 45 20 56 31 2E 30 1ARuntime Software disk imagedat41 56 47 36 5F 49 6E 74 65 67 72 69 74 79 5F 44 61   74 61 62 61 73 65AVG6 Integrity database fileDAT43 52 45 47Windows 9x registry hiveDAT43 6C 69 65 6E 74

12、20 55 72 6C 43 61 63 68 65 20 4D   4D 46 20 56 65 72 20IE History DAT fileDAT45 52 46 53 53 41 56 45 44 41 54 41 46 49 4C 45Kroll EasyRecovery Saved Recovery State fileDAT49 6E 6E 6F 20 53 65 74 75 70 20 55 6E 69 6E 73 74   61 6C 6C 20 4C 6F 67 20 28 62 29Inno Setup Uninstall Log filedb00

13、06 15 61 00 00 00 02 00 00 04 D2 00 00 10 00Netscape Navigator (v4) database fileDB44 42 46 48Palm Zire photo databasedb08dBASE IV or dBFast configuration filedb303dBASE III filedb404dBASE IV data filedba00 01 42 44Palm DateBook Archive filedbxCF AD 12 FEdbxCF AD 12 FE C5 FD 74 6FOutlook Expressdci3

14、C 21 64 6F 63 74 79 70AOL HTML mail filedcx3A DE 68 B1DCX Graphic FileDDB00 01 00dib42 4Ddevice-independent bitmap imageDLL4D 5A 90DMP4D 44 4D 50 93 A7Windows minidump fileDMS44 4D 53 21Amiga DiskMasher compressed archivedoc0D 44 4F 43DeskMate Document filedoc12 34 56 78 90 FFMS Word 6.0doc31 BE 00

15、00 00 AB 00 00MS Word for DOS 6.0doc7F FE 34 0AMS Worddot; ppt; xla; ppa; pps; pot; msi; sdw; dbD0 CF 11 E0MS Office/OLE2doc; dot; xls; xlt; xla; ppt; apr ;ppa; pps; pot; msi;   sdw; dbD0 CF 11 E0 A1 B1 1A E1MS Compound Document v1 or Lotus Approach APR fileDPL4D 5A 50DRV4D 5A 16drw07A common s

16、ignature and file extension for many   drawing programs.drw01 FF 02 04 03 02Micrografx vector graphic fileds44D 47 58 20 69 74 70 64Micrografix Designer 4DSN4D 56CD Stomper Pro label filedsp23 20 4D 69 63 72 6F 73 6F 66 74 20 44 65 76 6 56C   6F 70 65 72 20 53 74 75 64 69 6FMicrosoft Devel

17、oper Studio project filedss02 64 73 73Digital Speech Standard (Olympus, Grundig, &   Phillips)dtd07 64 74 32 64 64 74 64DesignTools 2D Design filedtd3C 21 45 4E 54 49 54 59XML DTDDVR44 56 44DVR-Studio stream filedwg41 43 31dwg41 43 31 30Generic AutoCAD drawingNOTES on AutoCAD file headers:

18、The 0x41-43-31-30   (AC10) is a generic header, occupying the first four bytes in the file. The   next two bytes give further indication about the version or subtype:0x30-32 (02) AutoCAD R2.50x30-33 (03) AutoCAD R2.60x30-34 (04) AutoCAD R90x30-36 (06) AutoCAD R100x30-39 (09) AutoCAD R11/R1

19、20x31-30 (10) AutoCAD R13 (subtype 10)0x31-31 (11) AutoCAD R13 (subtype 11)0x31-32 (12) AutoCAD R13 (subtype 12)0x31-33 (13) AutoCAD R14 (subtype 13)0x31-34 (14) AutoCAD R14 (subtype 14)0x31-35 (15) AutoCAD R20000x31-38 (18) AutoCAD R20040x32-31 (21) AutoCAD R2007Enn (where nn are numbers)45 56 46En

20、Case evidence fileECO2A 50 52elf7F 45 4C 46 01 01 01 00ELF Executableemf01 00 00 00 58 00 00 00Extended (Enhanced) Windows Metafile Format, printer   spool fileeml44 65 6C 69 76 65 72 79 2D 64 61 74 65 3AEmailEML46 72 6F 6D 20 20 20A commmon file extension for e-mail files.   Signatures sh

21、own here are for Netscape, Eudora, and a generic signature,   respectively. EML is also used by Outlook Express and QuickMail.EML46 72 6F 6D 20 3F 3F 3FA commmon file extension for e-mail files.   Signatures shown here are for Netscape, Eudora, and a generic signature,   respectively.

22、 EML is also used by Outlook Express and QuickMail.EML46 72 6F 6D 3A 20A commmon file extension for e-mail files.   Signatures shown here are for Netscape, Eudora, and a generic signature,   respectively. EML is also used by Outlook Express and QuickMail.EML52 65 63enc00 5C 41 B1 FFMujahid

23、een Secrets 2 encrypted fileenl32 byte offset 40 40 40 20 00 00 40 40 40 40EndNote Library Fileeps25 21 50 53Adobe EPS Fileeps25 21 50 53 2D 41 64 6F 62 65Postscripteps25 21 50 53 2D 41 64 6F 62 65 2D 33 2E 30 20 45 50   53 46 2D 33 20 30Adobe encapsulated PostScript file (If this   signat

24、ure is not at the immediate beginning of the file, it will occur early in   the file, commonly at byte offset 30)EPSC5 D0 D3eth1A 35 01 00GN Nettest WinPharoah capture fileevt30 00 00 00 4C 66 4C 65Windows Event Viewer fileevt03 00 00 00 C4 66 C4 56EVTX45 6C 66 46 69 6C 65 00Windows Vista event

25、 log fileexe; dll; drv; vxd; sys; ocx; vbx4D 5AWin32 Executableexe; dll; drv; vxd; sys; ocx; vbx4D 5AWin16 Executableexe; com; 386; ax; acm; sys; dll; drv; flt; fon; ocx;   scr; lrc; vxd; cpl; x324D 5AExecutable FileEXE, DLL, OCX, OLB, IMM, IME4D 5A 90fli00 11 AFFLIC Animation fileflt00 01 01Op

26、enFlight 3D fileFLT4D 5A 90 00 03 00 00 00Audition graphic filter file (Adobe)FLV46 4C 56 01Flash video filefm3C 4D 61 6B 65 72 46 69 6C 65 20Adobe FrameMaker filefm300 00 1A 00 07 80 01 00Lotus 123 v3 FMT filefmt20 00 68 00 20 0Lotus 123 v4 FMT fileFNT43 48 41FON4D 5AFont fileGBC87 F5 3Egid3F 5F 03

27、 00Windows Help Index FileGID4C 4E 02 00Windows Help index fileGIF47 49 46 38gif47 49 46 38 37 61Graphics interchange format file (GIF 87A)gif47 49 46 38 39 61Graphics interchange format file (GIF89A)GTD7B 50 72GX247 58 32Show Partner graphics file (not confirmed)gz; tar; tgz1F 8BGzip Archive Filegz

28、; tgz1F 8B 08GZ Compressed Filehap91 33 48 46HAP Archive FileHDMP4D 44 4D 50 93 A7Windows heap dump filehdr23 3F 52 41 44 49 41 4E 43 45 0Aadiance High Dynamic Range image fileHLP3F 5F 03hlp3F 5F 03 00Windows Help fileHLP4C 4E 02 00Windows Help filehlp7 byte offset 00 00 FF FF FF FFWindows Help file

29、hqx28 54 68 69 73 20 66 69 6C 65Macintosh BinHex 4 Compressed Archivehqx28 54 68 69 73 20 66 69 6C 65 20 6D 75 73 74 20 62   65 20 63 6F 6E 76 65 72 74 65 64 20 77 69 74 68 20 42 69 6E 48 65 78 20Macintosh BinHex 4 Compressed ArchiveHTM3C 21 44htm; html3C 21 44 4F 43 54HyperText Markup Language

30、 3htm; html3C 48 54 4D 4C 3EHyperText Markup Language 2htm; html3C 68 74 6D 6C 3EHyperText Markup Language 1html68 74 6D 6C 3EHTMLico00 00 01 00 00Icon Fileico00 00 01 00 01 00 20 20Icon FileIFF46 4F 52 4DIFO44 56 44DVD info fileIME4D 5A 90img00 01 00 08 00 01 00 01 01Ventura Publisher/GEM VDI Image

31、 Format Bitmap fileIMG00 FF FFIMM4D 5A 90ind41 4F 4C 49 44 58AOL client preferences/settings file (MAIN.IND)ISO43 44 30 30 31ISO-9660 CD Disc Image (This signature usually   occurs at byte 8001, 8801, or 9001.)ivr2E 52 45 43RealPlayer video file (V11 and later)JAR4A 41 52 43 53 00JARCS compress

32、ed archivejar5F 27 A8 89JAR Archive Filejpg; jpegFF D8 FFjpg; jpe; jpegFF D8 FF E0 00JPG Graphic Filejpg; jpe; jpegFF D8 FF FE 00JPG Graphic FileKGB4B 47 42 5F 61 72 63 68 20 2DKGB archiveKOZ49 44 33 03 00 00 00Sprint Music Store audio file (for mobile devices)LDB42 49 4Clha2D 6C 68 35 2DLHA Compres

33、sedlha; lzh2 byte offset 2D 6C 68Compressed archive fileLHP3F 5F 03lhp3F 5F 03 00Windows Help Filelib21 3C 61 72 63 68 3E 0AUnix archiver (ar) files and Microsoft Program   Library Common Object File Format (COFF)LIB2A 24 20LIT49 54 4F 4C 49 54 4C 53Microsoft Reader eBook fileLNK4C 00 00lnk4C 0

34、0 00 00Windows Shortcut (Link File)lnk4C 00 00 00 01 14 02Windows Link FileLNK4C 00 00 00 01 14 02 00Windows shortcut filelog2A 2A 2A 20 20 49 6E 73 74 61 6C 6C 61 74 69 6F 6E   20 53 74 61 72 74 65 64 20Symantec Wise Installer log filelzhlhLz compression filelwp57 6F 72 64 50 72 6FLotus WordPr

35、o v9m3u23 45 58m4a00 00 00 20 66 74 79 70 4D 34 41 20 00 00 00 00Apple Lossless Audio Codec filem4a; m4v00 00 00 20 66 74 79 70 4D 34 41 20 00 00 00 00QuickTime M4A/M4V filemanifest3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3DWindows Visual Stylesheet XML fileMAR4D 41 52 31 00Mozilla archiveMAR4D 41 52

36、43Microsoft/MSN MARC archiveMAR4D 41 72 30 00MAr compressed archivemaxD0 CF 11mdb00 01 00 00 53 74 61 6E 64 61 72 64 20 4A 65 74 20   44 42Microsoft Access filemdb; mda; mde; mdt53 74 61 6E 64 61 72 64 20 4AMS AccessMDF00 FF FFmdf00 FF FF FF FF FF FF FF FF FF FF 00 00 02 00 01Alcohol 120% CD im

37、agemdf01 0F 00 00Microsoft SQL Server 2000 databaseMDI45 50Microsoft Document Imaging fileMDS4D 45 44MID; MIDI4D 54 68 64Musical Instrument Digital Interface (MIDI) sound   filemkv1A 45 DF A3 93 42 82 88 6D 61 74 72 6F 73 6B 61Matroska stream fileMLS4D 49 4C 45 53Milestones v1.0 project managem

38、ent and scheduling   software (Also see "MV2C" and "MV214" signatures)MLS4D 4C 53 57Skype localization data fileMLS4D 56 32 31 34Milestones v2.1b project management and scheduling   software (Also see "MILES" and "MV2C" signatures)MLS4D 56 32 43Miles

39、tones v2.1a project management and scheduling   software (Also see "MILES" and "MV214" signatures)MMF4D 4D 4D 44 00 00Yamaha Corp. Synthetic music Mobile Application   Format (SMAF) for multimedia files that can be played on hand-held devices.mny00 01 00 00 4D 53 49 53

40、41 4D 20 44 61 74 61 62 61   73 65Microsoft Money fileMOV00 00 0FMOV00 00 77mov6D 6F 6F 76Quicktimemov6D 64 61 74QuickTime Moviemp0C EDMonochrome Picture TIFF bitmap file (unconfirmed)MP349 44 33MPEG-1 Audio Layer 3 (MP3) audio fileMP3FF FB 50mp400 00 00 18 66 74 79 70 33 67 70 35MPEG-4 video f

41、ilesMPA00 00 01mpg; mpeg00 00 01 B3MPEG Moviempg00 00 01 BAMPEGMSC3C 3F 78msc3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 2E   30 22 3F 3E 0D 0A 3C 4D 4D 43 5F 43 6F 6E 73 6F 6C 65 46 69 6C 65 20 43 6F 6E   73 6F 6C 65 56 65 72 73 69 6F 6E 3D 22Microsoft Management Console Snap-in Contr

42、ol filemsi23 20Cerius2 fileMSV4D 53 5F 56 4F 49 43 45Sony Memory Stick Compressed Voice fileNES4E 45 53NLSC2 20 20nri0E 4E 65 72 6F 49 53 4FNero CD Compilationntf1A 00 00Lotus Notes database templatensf; ntf1A 00 00 03 00 00Lotus Notes Database/Templatensf1A 00 00 03 00 00 11 00Notes Databasensf1A 0

43、0 00 04 00 00Lotus Notes databasentf30 31 4F 52 44 4E 41 4E 43 45 20 53 55 52 56 45 59   20 20 20 20 20 20 20National Transfer Format Map Fileobj4C 01Microsoft Common Object File Format (COFF)   relocatable object code file for an Intel 386 or later/compatible processorsOCX4D 5AActiveX or

44、OLE Custom ControlOCX4D 5A 90OLB4D 5AOLE object libraryOLB4D 5A 90org; pfc41 4F 4C 56 4D 31 30 30AOL personal file cabinet (PFC) filepak1A 0BCompressed archive filePAT47 46 31 50 41 54 43 48Advanced Gravis Ultrasound patch filePAT47 50 41 54GIMP (GNU Image Manipulation Program) pattern filePBK5B 41

45、44PCB17 A1 50PCS0A 05 01            pcx0A nn 01 01ZSOFT Paintbrush file(where nn = 0x02, 0x03, or   0x05)pcx0A 05 01 08PC Paintbrush(often associated with Quake Engine   games)pdb11 byte offset 00 00 00 00 00 00 00 00 00 00 00 00

46、  00 00 00 00 00 00 00 00 00 00 00 00Palmpilot Database/Document FilePDF25 50 44pdf; fdf25 50 44 46Adobe Portable Document Format and Forms Document   filepdf25 50 44 46 2D 31 2EAdobe AcrobatPDG48 48 02pf11 00 00 00 53 43 43 41Windows prefetch filepic01 00 00 00 01Unknown type picture file

47、PJT00 00 07PLL24 53 6FPNG89 50 4EPNG89 50 4E 47png89 50 4E 47 0D 0APNG Image Filepng89 50 4E 47 0D 0A 1A 0APNG Image FilePPC52 65 63PPTD0 CF 11ppt512 byte offset 00 6E 1E F0PowerPoint presentation subheader (MS Office)ppt512 byte offset 0F 00 E8 03PowerPoint presentation subheader (MS Office)PPZ4D 5

48、3 43 46Powerpoint Packaged Presentationprc42 4F 4F 4B 4D 4F 42 49Palmpilot resource filePRG23 44 45ps25 21 50 53 2D 41 64 6F 62 65PostscriptPSD38 42 50psd38 42 50 53Adobe Photoshop image filepsp7E 42 4B 00PaintShop Pro Image Filepst21 42 44 4EMicrosoft Outlook Personal Folder filepwlE3 82 85 96Windo

49、ws Passwordqbb45 86 00 00 06 00Intuit QuickBooks Backup fileqdfAC 9E BD 8FQuickenqph03 00 00 00Quicken price history fileqt6D 64 61 74Quicktime Movie Fileqxd00 00 49 49 58 50 52Quark Express document (Intel & Motorola,   respectively)qxd00 00 4D 4D 58 50 52ra2E 52 4D 46 00 00 00 12 00Real A

50、udio filera; ram2E 72 61 FDReal Audio Filera2E 72 61 FD 00RealAudio streaming media fileRAR52 61 72rar52 61 72 21RAR Archive FileRAW06 05 00reg52 45 47 45 44 49 54 34rgb01 DA 01 01 00 03Silicon Graphics RGB BitmapRM2E 52 4Drm; rmvb2E 52 4D 46Real Media streaming media filerpmED AB EE DBRPM Archive F

51、ileRTD43 23 2B 44 A4 43 4D A5 48 64 72RagTime document fileRTF7B 5C 72rtf7B 5C 72 74 66Rich Text Format Filesav24 46 4C 32 40 28 23 29 20 53 50 53 53 20 44 41 54   41 20 46 49 4C 45SPSS Data fileSBV46 45 44 46(Unknown file type)SCH2A 76 65scm80 53 43SH348 48 47 42 31Harvard Graphics presentatio

52、n fileSHD4B 49 00 00Windows 9x printer spool filesit53 49 54 21Stuffit v1 Archive Filesit53 74 75 66 66 49 74Stuffit v5 Archive Filesle3A 56 45 52 53 49 4F 4ESurfplan kite project filesle41 43 76teganos Security Suite virtual secure drivesly; srt; slt53 52 01 00Sage sly.or.srt.or.sltSMD00 FF FFsnm00

53、 1E 84 90 00 00 00 00Netscape Communicator (v4) mail folderSNP4D 53 43 46Microsoft Access Snapshot Viewer filesol00 BFAdobe Flash shared object file (e.g., Flash cookies)spl00 00 01 00Windows NT/2000/XP printer spool fileSCR4D 5AScreen saverSUBFF FF FFSWF43 57 53Shockwave Flash file (v5+)SWF46 57 53

54、Macromedia Shockwave Flash player filesxccalcOpenOffice CalcsxddrawOpenOffice DrawsxiimpressOpenOffice ImpresssxmmathOpenOffice MathsxwwriterOpenOffice Writersyw41 4D 59 4FHarvard Graphics symbol graphicTAG00 00 02tar; cpio30 37 30 37 30 37CPIO Archive Filetar.z1F 9D 90Compressed tape archive filetga00 00 10 00 00RLE壓縮的前5字節(jié)TG