文件头笔记

文件类型 文件头 特征值
JPEG (jpg) FFD8FF ÿØÿà
PNG (png) 89504E47 PNG
GIF (gif) 47494638 GIF89a (GIF87a)
ZIP Archive (zip) 504B0304 PK
TIFF (tif) 49492A00 II*
Windows Bitmap (bmp) 424D BM
RAR Archive (rar) 52617221 Rar!
Wave (wav) 57415645 WAVE
AVI (avi) 41564920 AVI
MPEG (mpg) 音频数据和视频数据 000001BA
MPEG (mpg) 视频数据 000001B3
7Z 377ABCAF271C 7z¼¯'
CAD (dwg) 41433130 AC10
Adobe Photoshop (psd) 38425053 8BPS
Rich Text Format (rtf) 7B5C727466 {\rtf
XML (xml) 3C3F786D6C <?xml
Email [thorough only] (eml) 44656C69766572792D646174653A Delivery-date:
Outlook Express (dbx) CFAD12FEC5FD746F
Outlook (pst) 2142444E !BDN
MS Word/Excel (xls / doc) D0CF11E0
MS Access (mdb) 5374616E64617264204A Standard J
WordPerfect(wpd) FF575043 ÿWPC
Adobe Acrobat (pdf) 255044462D312E %PDF
Quicken (qdf) AC9EBD8F
Windows Password (pwl) E3828596
Real Audio (ram) 2E7261FD .raý
Real Media (rm) 2E524D46 .RMF
Quicktime (mov) 6D6F6F76 moov
Windows Media (asf) 3026B2758E66CF11
MIDI (mid) 4D546864 MThd
Win PE 4D5A MZ
ELF 7F 45 4C 46 .ELF
VMDK 4B 44 4D KDM
Java-class CA FE BA BE Êþº¾
Postscript (eps / ps) 252150532D41646F6265 %!PS-Adobe
m4a 00 00 00 18 66 74 79 70 6D 70 34 32 ....ftypmp42
m4a; m4v 00 00 00 20 66 74 79 70 4D 34 41 20 00 00 00 00