常见文件特征 - Githubissues

yuanrui / blog

Some notes.

http://yuanrui.github.io

3 stars 0 forks source link

常见文件特征 #18

Open yuanrui opened 6 years ago

yuanrui commented 6 years ago

文件描述	HEX	文件扩展名	文件分类
JPEG2000 image files	00 00 00 0C 6A 50 20 20	JP2	Picture
3GPP multimedia files	00 00 00 14 66 74 79 70	3GP	Multimedia
MPEG-4 v1	00 00 00 14 66 74 79 70 69 73 6F 6D	MP4	Multimedia
3rd Generation Partnership Project 3GPP	00 00 00 14 66 74 79 70	3GG\|3GP\|3G2	Multimedia
Windows Disk Image	00 00 00 00 14 00 00 00	TBI	Windows
MPEG-4 video_1	00 00 00 18 66 74 79 70	3GP5\|M4V\|MP4	Multimedia
MPEG-4 video_2	00 00 00 1C 66 74 79 70	MP4	Multimedia
3GPP2 multimedia files	00 00 00 20 66 74 79 70	3GP	Multimedia
Apple audio and video	00 00 00 20 66 74 79 70 4D 34 41	M4A	Multimedia
3rd Generation Partnership Project 3GPP2	00 00 00 20 66 74 79 70	3GG\|3GP\|3G2	Multimedia
Windows icon\|printer spool file	00 00 01 00	ICO\|SPL	Windows
MPEG video file	00 00 01 B3	MPG	Multimedia
DVD video file	00 00 01 BA	MPG\|VOB	Multimedia
Windows cursor	00 00 02 00	CUR	Windows
Compucon-Singer embroidery design file	00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00	XXX	Miscellaneous
QuattroPro spreadsheet	00 00 02 00	WB2	Spreadsheet
Lotus 1-2-3 (v1)	00 00 02 00 06 04 06 00	WK1	Spreadsheet
Lotus 1-2-3 (v3)	00 00 1A 00 00 10 04 00	WK3	Spreadsheet
Lotus 1-2-3 (v4\|v5)	00 00 1A 00 02 10 04 00	WK4\|WK5	Spreadsheet
Lotus 1-2-3 (v9)	00 00 1A 00 05 10 04	123	Spreadsheet
Quark Express (Intel)	00 00 49 49 58 50 52	QXD	Presentation
Quark Express (Motorola)	00 00 4D 4D 58 50 52	QXD	Presentation
TrueType font file	00 01 00 00 00	TTF	Windows
Microsoft Money file	00 01 00 00 4D 53 49 53 41 4D 20 44 61 74 61 62 61 73 65	MNY	Finance
Microsoft Access 2007	00 01 00 00 53 74 61 6E 64 61 72 64 20 41 43 45 20 44 42	ACCDB	Database
Microsoft Access	00 01 00 00 53 74 61 6E 64 61 72 64 20 4A 65 74 20 44 42	MDB	Database
Palm Address Book Archive	00 01 42 41	ABA	Mobile
Palm DateBook Archive	00 01 42 44	DBA	Mobile
Netscape Navigator (v4) database	00 06 15 61 00 00 00 02 00 00 04 D2 00 00 10 00	DB	Network
Mbox table of contents file	00 0D BB A0	(none)	E-mail
FLIC animation	00 11	FLI	Miscellaneous
BIOS details in RAM	00 14 00 00 01 02	(none)	Windows
Netscape Communicator (v4) mail folder	00 1E 84 90 00 00 00 00	SNM	Email
Firebird and Interbase database files	01 00 39 30	FDB\|GDB	Database
The Bat! Message Base Index	01 01 47 19 A4 00 00 00 00 00 00 00	TBI	Email
SQL Data Base	01 0F 00 00	MDF	Database
Novell LANalyzer capture file	01 10	TR1	Network
Silicon Graphics RGB Bitmap	01 DA 01 01 00 03	RGB	Picture
Micrografx vector graphic file	01 FF 02 04 03 02	DRW	Picture
Digital Speech Standard file	02 64 73 73	DSS	Multimedia
MapInfo Native Data Format	03	DAT	Navigation
dBASE III file	03	DB3	Database
Quicken price history	03 00 00 00	QPH	Finance
Approach index file	03 00 00 00 41 50 50 52	ADX	Database
dBASE IV file	04	DB4	Database
INFO2 Windows recycle bin_1	04 00 00 00	(none)	Windows
INFO2 Windows recycle bin_2	05 00 00 00	(none)	Windows
Generic drawing programs	07	DRW	Presentation
SkinCrafter skin	07 53 4B 46	SKF	Miscellaneous
DesignTools 2D Design file	07 64 74 32 64 64 74 64	DTD	Miscellaneous
dBASE IV or dBFast configuration file	08	DB	Database
ZSOFT Paintbrush file_1	0A 02 01 01	PCX	Presentation
ZSOFT Paintbrush file_2	0A 03 01 01	PCX	Presentation
ZSOFT Paintbrush file_3	0A 05 01 01	PCX	Presentation
MultiBit Bitcoin wallet file	0A 16 6F 72 67 2E 62 69 74 63 6F 69 6E 2E 70 72	WALLET	e-money
Monochrome Picture TIFF bitmap	0C ED	MP	Picture
DeskMate Document	0D 44 4F 43	DOC	Word processing suite
Nero CD compilation	0E 4E 65 72 6F 49 53 4F	NRI	Miscellaneous
DeskMate Worksheet	0E 57 4B 53	WKS	Word processing suite
Easy CD Creator 5 Layout file	10 00 00 00	CL5	Utility
Windows prefetch file	11 00 00 00 53 43 43 41	PF	Windows
Lotus Notes database template	1A 00 00	NTF	Spreadsheet
Lotus Notes database	1A 00 00 04 00 00	NSF	Spreadsheet
LH archive (old vers.\|type 1)	1A 02	ARC	Compressed archive
LH archive (old vers.\|type 2)	1A 03	ARC	Compressed archive
LH archive (old vers.\|type 3)	1A 04	ARC	Compressed archive
LH archive (old vers.\|type 4)	1A 08	ARC	Compressed archive
LH archive (old vers.\|type 5)	1A 09	ARC	Compressed archive
Compressed archive file	1A 0B	PAK	Compressed archive
WinPharoah capture file	1A 35 01 00	ETH	Network
WebM video file	1A 45 DF A3	WEBM	Multimedia
Matroska stream file	1A 45 DF A3 93 42 82 88	MKV	Multimedia
Runtime Software disk image	1A 52 54 53 20 43 4F 4D	DAT	Miscellaneous
WordStar Version 5.0\|6.0 document	1D 7D	WS	Word processing suite
GZIP archive file	1F 8B 08	GZ	Compressed archive
VLC Player Skin file	1F 8B 08	VLT	Miscellaneous
Compressed tape archive_1	1F 9D 90	TAR.Z	Compressed archive
Compressed tape archive_2	1F A0	TAR.Z	Compressed archive
MapInfo Sea Chart	21	BSB	Navigation
AIN Compressed Archive	21 12	AIN	Compressed archive
Unix archiver (ar)\|MS Program Library Common Object File Format (COFF)	21 3C 61 72 63 68 3E 0A	LIB	Compressed archive
Microsoft Outlook Exchange Offline Storage Folder	21 42 44 4E	OST	Email
Cerius2 file	23 20	MSI	Miscellaneous
VMware 4 Virtual Disk description	23 20 44 69 73 6B 20 44	VMDK	Miscellaneous
MS Developer Studio project file	23 20 4D 69 63 72 6F 73	DSP	Programming
Adaptive Multi-Rate ACELP Codec (GSM)	23 21 41 4D 52	AMR	Multimedia
Skype audio compression	23 21 53 49 4C 4B 0A	SIL	Multimedia
Radiance High Dynamic Range image file	23 3F 52 41 44 49 41 4E	HDR	Picture
Brother-Babylock-Bernina Home Embroidery	23 50 45 43 30 30 30 31	PEC	Miscellaneous
Brother-Babylock-Bernina Home Embroidery	23 50 45 53 30	PES	Miscellaneous
SPSS Data file	24 46 4C 32 40 28 23 29	SAV	Miscellaneous
Encapsulated PostScript file	25 21 50 53 2D 41 64 6F	EPS	Word processing suite
PDF file	25 50 44 46	PDF\|FDF	Word processing suite
Fuzzy bitmap (FBM) file	25 62 69 74 6D 61 70	FBM	Picture
BinHex 4 Compressed Archive	28 54 68 69 73 20 66 69	HQX	Compressed archive
Symantec Wise Installer log	2A 2A 2A 20 20 49 6E 73	LOG	Miscellaneous
RealPlayer video file (V11+)	2E 52 45 43	IVR	Multimedia
RealMedia streaming media	2E 52 4D 46	RM\|RMVB	Multimedia
RealAudio file	2E 52 4D 46 00 00 00 12	RA	Multimedia
RealAudio streaming media	2E 72 61 FD 00	RA	Multimedia
NeXT\|Sun Microsystems audio file	2E 73 6E 64	AU	Multimedia
Thunderbird\|Mozilla Mail Summary File	2F 2F 20 3C 21 2D 2D 20 3C 6D 64 62 3A 6D 6F 72 6B 3A 7A	MSF	E-mail
MS security catalog file	30	CAT	Windows
Windows Event Viewer file	30 00 00 00 4C 66 4C 65	EVT	Windows
Windows Media Audio\|Video File	30 26 B2 75 8E 66 CF 11	ASF\|WMA\|WMV	Multimedia
National Transfer Format Map	30 31 4F 52 44 4E 41 4E	NTF	Miscellaneous
cpio archive	30 37 30 37 30	(none)	Compressed archive
MS Write file_1	31 BE	WRI	Word processing suite
MS Write file_2	32 BE	WRI	Word processing suite
Pfaff Home Embroidery	32 03 10 00 00 00 00 00 00 00 80 00 00 00 FF 00	PCS	Miscellaneous
Tcpdump capture file	34 CD B2 A1	(none)	Network
7-Zip compressed file	37 7A BC AF 27 1C	7Z	Compressed archive
zisofs compressed file	37 E4 53 96 C9 DB D6 07	(none)	Compressed archive
Photoshop image	38 42 50 53	PSD	Picture
Surfplan kite project file	3A 56 45 52 53 49 4F 4E	SLE	Miscellaneous
Advanced Stream Redirector	3C	ASX	Multimedia
BizTalk XML-Data Reduced Schema	3C	XDR	Miscellaneous
AOL HTML mail	3C 21 64 6F 63 74 79 70	DCI	Email
Windows Visual Stylesheet	3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D	MANIFEST	Programming
User Interface Language	3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 2E 30 22 3F 3E	XML	Miscellaneous
MMC Snap-in Control file	3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 2E 30 22 3F 3E 0D 0A 3C 4D 4D 43 5F 43 6F 6E 73 6F 6C 65 46 69 6C 65 20 43 6F 6E 73 6F 6C 65 56 65 72 73 69 6F 6E 3D 22	MSC	Windows
Csound music	3C 43 73 6F 75 6E 64 53 79 6E 74 68 65 73 69 7A	CSD	Multimedia
Adobe FrameMaker	3C 4D 61 6B 65 72 46 69	FM\|MIF	Presentation
GPS Exchange (v1.1)	3C 67 70 78 20 76 65 72 73 69 6F 6E 3D 22 31 2E	GPX	Navigation
BASE85 file	3C 7E 36 3C 5C 25 5F 30 67 53 71 68 3B	B85	Word processing
Windows Help file_2	3F 5F 03 00	GID\|HLP	Windows
Generic AutoCAD drawing	41 43 31 30	DWG	Presentation
Steganos virtual secure drive	41 43 76	SLE	Miscellaneous
AOL parameter\|info files	41 43 53 44	(none)	Network
Harvard Graphics symbol graphic	41 4D 59 4F	SYW	Presentation
AOL config files	41 4F 4C	ABI\|ABY\|BAG\|IDX\|IND\|PFC	Network
AOL and AIM buddy list	41 4F 4C 20 46 65 65 64	BAG	Network
AOL address book	41 4F 4C 44 42	ABY	Network
AOL user configuration	41 4F 4C 44 42	IDX	Network
AOL client preferences\|settings file	41 4F 4C 49 44 58	IND	Network
AOL address book index	41 4F 4C 49 4E 44 45 58	ABI	Network
AOL personal file cabinet	41 4F 4C 56 4D 31 30 30	ORG\|PFC	Network
AVG6 Integrity database	41 56 47 36 5F 49 6E 74	DAT	Database
FreeArc compressed file	41 72 43 01	ARC	Compressed archive
NTFS MFT (BAAD)	42 41 41 44	(none)	Windows
vCard	42 45 47 49 4E 3A 56 43	VCF	Miscellaneous
Speedtouch router firmware	42 4C 49 32 32 33	BIN\|BLI\|RBI	Network
Bitmap image	42 4D	BMP\|DIB	Picture
Palmpilot resource file	42 4F 4F 4B 4D 4F 42 49	PRC	Mobile
Better Portable Graphics	42 50 47 FB	BPG	Multimedia
bzip2 compressed archive	42 5A 68	BZ2\|TAR.BZ2\|TBZ2\|TB2	Compressed archive
Puffer ASCII encrypted archive	42 65 67 69 6E 20 50 75 66 66 65 72	APUF	Encryption
Blink compressed archive	42 6C 69 6E 6B	BLI	Compressed archive
RagTime document	43 23 2B 44 A4 43 4D A5	RTD	Word processing suite
WordPerfect dictionary	43 42 46 49 4C 45	CBD	Word processing suite
ISO-9660 CD Disc Image	43 44 30 30 31	ISO	Miscellaneous
Compressed ISO CD image	43 49 53 4F	CSO	Miscellaneous
Windows 7 thumbnail	43 4D 4D 4D 15 00 00 00	DB	Windows
Corel Binary metafile	43 4D 58 31	CLB	Miscellaneous
COM+ Catalog	43 4F 4D 2B	CLB	Miscellaneous
VMware 3 Virtual Disk	43 4F 57 44	VMDK	Miscellaneous
Corel Photopaint file_1	43 50 54 37 46 49 4C 45	CPT	Presentation
Corel Photopaint file_2	43 50 54 46 49 4C 45	CPT	Presentation
Win9x registry hive	43 52 45 47	DAT	Windows
Crush compressed archive	43 52 55 53 48 20 76	CRU	Compressed archive
Shockwave Flash file	43 57 53	SWF	Multimedia
Calculux Indoor lighting project file	43 61 6C 63 75 6C 75 78 20 49 6E 64 6F 6F 72 20	CIN	Application
WhereIsIt Catalog	43 61 74 61 6C 6F 67 20	CTF	Miscellaneous
IE History file	43 6C 69 65 6E 74 20 55	DAT	Network
Creative Voice	43 72 65 61 74 69 76 65 20 56 6F 69 63 65 20 46	VOC	Multimedia
DAX Compressed CD image	44 41 58 00	DAX	Miscellaneous
Palm Zire photo database	44 42 46 48	DB	Mobile
Amiga DiskMasher compressed archive	44 4D 53 21	DMS	Compressed archive
Amiga disk file	44 4F 53	ADF	Miscellaneous
DVR-Studio stream file	44 56 44	DVR	Multimedia
DVD info file	44 56 44	IFO	Multimedia
Elite Plus Commander game file	45 4C 49 54 45 20 43 6F	CDR	Miscellaneous
VideoVCD\|VCDImager file	45 4E 54 52 59 56 43 44	VCD	Miscellaneous
EasyRecovery Saved State file	45 52 46 53 53 41 56 45	DAT	Miscellaneous
DST Compression	44 53 54 62	DST	Compressed archive
MS Document Imaging file	45 50	MDI	Word processing suite
Expert Witness Compression Format	45 56 46 09 0D 0A FF 00	E01	Miscellaneous
EnCase Evidence File Format V2	45 56 46 32 0D 0A 81	Ex01	Miscellaneous
Windows Vista event log	45 6C 66 46 69 6C 65 00	EVTX	Windows
QuickBooks backup	45 86 00 00 06 00	QBB	Finance
MS Fax Cover Sheet	46 41 58 43 4F 56 45 52	CPE	Miscellaneous
Fiasco database definition file	46 44 42 48 00	FDB	Database
NTFS MFT (FILE)	46 49 4C 45	(none)	Windows
Flash video file	46 4C 56	FLV	Multimedia
Audio Interchange File	46 4F 52 4D 00	AIFF	Multimedia
DAKX Compressed Audio	46 4F 52 4D 00	DAX	Multimedia
Shockwave Flash player	46 57 53	SWF	Multimedia
Generic e-mail_2	46 72 6F 6D	EML	Email
GIF file	47 49 46 38	GIF	Picture
GIMP pattern file	47 50 41 54	PAT	Picture
Show Partner graphics file	47 58 32	GX2	Picture
Genetec video archive	47 65 6E 65 74 65 63 20 4F 6D 6E 69 63 61 73 74	G64	Multimedia
SAS Transport dataset	48 45 41 44 45 52 20 52 45 43 4F 52 44 2A 2A 2A	XPT	Statistics
Harvard Graphics presentation file	48 48 47 42 31	SH3	Presentation
TIFF file_1	49 20 49	TIF\|TIFF	Picture
MP3 audio file	49 44 33	MP3	Multimedia
Sprint Music Store audio	49 44 33 03 00 00 00	KOZ	Multimedia
Canon RAW file	49 49 1A 00 00 00 48 45	CRW	Picture
TIFF file_2	49 49 2A 00	TIF\|TIFF	Picture
Windows 7 thumbnail_2	49 4D 4D 4D 15 00 00 00	DB	Windows
Install Shield compressed file	49 53 63 28	CAB\|HDR	Compressed archive
MS Reader eBook	49 54 4F 4C 49 54 4C 53	LIT	Miscellaneous
MS Compiled HTML Help File	49 54 53 46	CHI\|CHM	Windows
Inno Setup Uninstall Log	49 6E 6E 6F 20 53 65 74	DAT	Miscellaneous
Inter@ctive Pager Backup (BlackBerry file	49 6E 74 65 72 40 63 74 69 76 65 20 50 61 67 65	IPD	Mobile
JARCS compressed archive	4A 41 52 43 53 00	JAR	Compressed archive
AOL ART file_1	4A 47 03 0E	JG	Picture
AOL ART file_2	4A 47 04 0E	JG	Picture
VMware 4 Virtual Disk	4B 44 4D	VMDK	Miscellaneous
KGB archive	4B 47 42 5F 61 72 63 68	KGB	Compressed archive
Win9x printer spool file	4B 49 00 00	SHD	Windows
KWAJ (compressed) file	4B 57 41 4A 88 F0 27 D1	(none)	Compressed archive
Windows shortcut file	4C 00 00 00 01 14 02 00	LNK	Windows
MS COFF relocatable object code	4C 01	OBJ	Windows
Tajima emboridery	4C 41 3A	DST	Miscellaneous
Windows help file_3	4C 4E 02 00	GID\|HLP	Windows
Logical File Evidence Format	4C 56 46 09 0D 0A FF 00	E01	Miscellaneous
Merriam-Webster Pocket Dictionary	4D 2D 57 20 50 6F 63 6B	PDB	Miscellaneous
Mozilla archive	4D 41 52 31 00	MAR	Network
Microsoft\|MSN MARC archive	4D 41 52 43	MAR	Compressed archive
MAr compressed archive	4D 41 72 30 00	MAR	Compressed archive
TargetExpress target file	4D 43 57 20 54 65 63 68 6E 6F 67 6F 6C 69 65 73	MTE	Miscellaneous
Windows dump file	4D 44 4D 50 93 A7	DMP\|HDMP	Windows
Milestones project management file	4D 49 4C 45 53	MLS	Miscellaneous
Skype localization data file	4D 4C 53 57	MLS	Network
TIFF file_3	4D 4D 00 2A	TIF\|TIFF	Picture
TIFF file_4	4D 4D 00 2B	TIF\|TIFF	Picture
Yamaha Synthetic music Mobile Application Format	4D 4D 4D 44 00 00	MMF	Multimedia
VMware BIOS state file	4D 52 56 4E	NVRAM	Miscellaneous
Microsoft cabinet file	4D 53 43 46	CAB	Windows
Powerpoint Packaged Presentation	4D 53 43 46	PPZ	Presentation
MS Access Snapshot Viewer file	4D 53 43 46	SNP	Database
OLE\|SPSS\|Visual C++ library file	4D 53 46 54 02 00 01 00	TLB	Programming
Microsoft Windows Imaging Format	4D 53 57 49 4D	WIM	Picture
Sony Compressed Voice File	4D 53 5F 56 4F 49 43 45	CDR\|DVF\|MSV	Multimedia
MIDI sound file	4D 54 68 64	MID\|MIDI	Multimedia
Yamaha Piano	4D 54 68 64	PCS	Multimedia
CD Stomper Pro label file	4D 56	DSN	Miscellaneous
Milestones project management file_1	4D 56 32 31 34	MLS	Miscellaneous
Milestones project management file_2	4D 56 32 43	MLS	Miscellaneous
Windows\|DOS executable file	4D 5A	COM\|DLL\|DRV\|EXE\|PIF\|QTS\|QTX\|SYS	Windows
MS audio compression manager driver	4D 5A	ACM	Multimedia
Library cache file	4D 5A	AX	Windows
Control panel application	4D 5A	CPL	Windows
Font file	4D 5A	FON	Windows
ActiveX\|OLE Custom Control	4D 5A	OCX	Windows
OLE object library	4D 5A	OLB	Windows
Screen saver	4D 5A	SCR	Windows
VisualBASIC application	4D 5A	VBX	Programming
Windows virtual device drivers	4D 5A	VXD\|386	Windows
Acrobat plug-in	4D 5A 90 00 03 00 00 00	API	Word processing suite
DirectShow filter	4D 5A 90 00 03 00 00 00	AX	Miscellaneous
Audition graphic filter	4D 5A 90 00 03 00 00 00	FLT	Miscellaneous
ZoneAlam data file	4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF	ZAP	Miscellaneous
MS C++ debugging symbols file	4D 69 63 72 6F 73 6F 66 74 20 43 2F 43 2B 2B 20	PDB	Programming
Visual Studio .NET file	4D 69 63 72 6F 73 6F 66 74 20 56 69 73 75 61 6C	SLN	Programming
VMapSource GPS Waypoint Database	4D 73 52 63 66	GDB	Navigation
TomTom traffic data	4E 41 56 54 52 41 46 46	DAT	Navigation
MS Windows journal	4E 42 2A 00	JNT\|JTP	Windows
NES Sound file	4E 45 53 4D 1A 01	NSF	Multimedia
National Imagery Transmission Format file	4E 49 54 46 30	NTF	Picture
Agent newsreader character map	4E 61 6D 65 3A 20	COD	Miscellaneous
1Password 4 Cloud Keychain	4F 50 43 4C 44 41 54	attachment	Encryption
Psion Series 3 Database	4F 50 4C 44 61 74 61 62	DBF	Database
Ogg Vorbis Codec compressed file	4F 67 67 53 00 02 00 00	OGA\|OGG\|OGV\|OGX	Multimedia
Visio\|DisplayWrite 4 text file	4F 7B	DW4	Presentation
Quicken QuickFinder Information File	50 00 00 00 20 00 00 00	IDX	Finance
Portable Graymap Graphic	50 35 0A	PGM	Picture
Quake archive file	50 41 43 4B	PAK	Compressed archive
Windows memory dump	50 41 47 45 44 55	DMP	Windows
PAX password protected bitmap	50 41 58	PAX	Picture
PestPatrol data\|scan strings	50 45 53 54	DAT	Miscellaneous
PGP disk image	50 47 50 64 4D 41 49 4E	PGD	Compressed archive
ChromaGraph Graphics Card Bitmap	50 49 43 54 00 08	IMG	Picture
PKZIP archive_1	50 4B 03 04	ZIP	Compressed archive
MacOS X Dashboard Widget	50 4B 03 04	ZIP	MacOS
MS Office Open XML Format Document	50 4B 03 04	DOCX\|PPTX\|XLSX	Word processing suite
Java archive_1	50 4B 03 04	JAR	Programming
Google Earth session file	50 4B 03 04	KMZ	Navigation
KWord document	50 4B 03 04	KWD	Word processing suite
OpenDocument template	50 4B 03 04	ODT\|ODP\|OTT	Word processing suite
OpenOffice documents	50 4B 03 04	SXC\|SXD\|SXI\|SXW	Word processing suite
StarOffice spreadsheet	50 4B 03 04	SXC	Spreadsheet
Windows Media compressed skin file	50 4B 03 04	WMZ	Windows
Mozilla Browser Archive	50 4B 03 04	XPI	Network
XML paper specification file	50 4B 03 04	XPS	Word processing suite
eXact Packager Models	50 4B 03 04	XPT	Miscellaneous
Open Publication Structure eBook	50 4B 03 04 0A 00 02 00	EPUB	Compressed archive
ZLock Pro encrypted ZIP	50 4B 03 04 14 00 01 00	ZIP	Compressed archive
MS Office 2007 documents	50 4B 03 04 14 00 06 00	DOCX\|PPTX\|XLSX	Word processing suite
Java archive_2	50 4B 03 04 14 00 08 00	JAR	Programming
PKZIP archive_2	50 4B 05 06	ZIP	Compressed archive
PKZIP archive_3	50 4B 07 08	ZIP	Compressed archive
Windows Program Manager group file	50 4D 43 43	GRP	Windows
Norton Disk Doctor undo file	50 4E 43 49 55 4E 44 4F	DAT	Miscellaneous
Microsoft Windows User State Migration Tool	50 4D 4F 43 43 4D 4F 43	PMOCCMOC	Windows
Puffer encrypted archive	50 55 46 58	PUF	Encryption
Qcow Disk Image	51 46 49	QEMU	Miscellaneous
Quicken data file	51 57 20 56 65 72 2E 20	ABD\|QSD	Finance
Shareaza (P2P) thumbnail	52 41 5A 41 54 44 42 31	DAT	Network
WinNT Registry\|Registry Undo files	52 45 47 45 44 49 54	REG\|SUD	Windows
Antenna data file	52 45 56 4E 55 4D 3A 2C	AD	Miscellaneous
Windows animated cursor	52 49 46 46	ANI	Windows
Corel Presentation Exchange metadata	52 49 46 46	CMX	Presentation
CorelDraw document	52 49 46 46	CDR	Presentation
Video CD MPEG movie	52 49 46 46	DAT	Multimedia
Micrografx Designer graphic	52 49 46 46	DS4	Picture
4X Movie video	52 49 46 46	4XM	Multimedia
Resource Interchange File Format	52 49 46 46	AVI\|CDA\|QCP\|RMI\|WAV\|WEBP	Multimedia
WinNT Netmon capture file	52 54 53 53	CAP	Network
WinRAR compressed archive	52 61 72 21 1A 07 00	RAR	Compressed archive
Generic e-mail_1	52 65 74 75 72 6E 2D 50	EML	Email
Underground Audio	53 43 48 6C	AST	Multimedia
Img Software Bitmap	53 43 4D 49	IMG	Picture
SMPTE DPX (big endian)	53 44 50 58	SDPX	Picture
Harvard Graphics presentation	53 48 4F 57	SHW	Presentation
Sietronics CPI XRD document	53 49 45 54 52 4F 4E 49	CPI	Miscellaneous
Flexible Image Transport System (FITS) file	53 49 4D 50 4C 45 20 20 3D 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54	FITS	multimedia
StuffIt archive	53 49 54 21 00	SIT	Compressed archive
SmartDraw Drawing file	53 4D 41 52 54 44 52 57	SDR	Presentation
StorageCraft ShadownProtect backup file	53 50 46 49 00	SPF	Backup
MultiBit Bitcoin blockchain file	53 50 56 42	SPVB	e-money
SQLite database file	53 51 4C 69 74 65 20 66 6F 72 6D 61 74 20 33 00	DB	Database
DB2 conversion file	53 51 4C 4F 43 4F 4E 56	CNV	Database
QBASIC SZDD file	53 5A 20 88 F0 27 33 D1	(none)	Compressed archive
SZDD file format	53 5A 44 44 88 F0 27 33	(none)	Compressed archive
StuffIt compressed archive	53 74 75 66 66 49 74 20	SIT	Compressed archive
SuperCalc worksheet	53 75 70 65 72 43 61 6C	CAL	Spreadsheet
Wii-GameCube	54 48 50 00	THP	Multimedia
GNU Info Reader file	54 68 69 73 20 69 73 20	INFO	Programming
Unicode extensions	55 43 45 58	UCE	Windows
UFA compressed archive	55 46 41 C6 D2 C1	UFA	Compressed archive
UFO Capture map file	55 46 4F 4F 72 62 69 74	DAT	Miscellaneous
Visual C PreCompiled header	56 43 50 43 48 30	PCH	Programming
Visual Basic User-defined Control file	56 45 52 53 49 4F 4E 20	CTL	Programming
MapInfo Interchange Format file	56 65 72 73 69 6F 6E 20	MIF	Miscellaneous
Walkman MP3 file	57 4D 4D 50	DAT	Multimedia
WordStar for Windows file	57 53 32 30 30 30	WS2	Word processing suite
Lotus WordPro file	57 6F 72 64 50 72 6F	LWP	Word processing suite
Exchange e-mail	58 2D	EML	Email
Packet sniffer files	58 43 50 00	CAP	Network
XPCOM libraries	58 50 43 4F 4D 0A 54 79	XPT	Programming
SMPTE DPX file (little endian)	58 50 44 53	DPX	Picture
MS Publisher	58 54	BDR	Word processing suite
ZOO compressed archive	5A 4F 4F 20	ZOO	Compressed archive
Macromedia Shockwave Flash	5A 57 53	SWF	Multimedia
MS Exchange configuration file	5B 47 65 6E 65 72 61 6C	ECF	Email
Visual C++ Workbench Info File	5B 4D 53 56 43	VCW	Programming
Dial-up networking file	5B 50 68 6F 6E 65 5D	DUN	Network
Lotus AMI Pro document_1	5B 56 45 52 5D	SAM	Word processing suite
VocalTec VoIP media file	5B 56 4D 44 5D	VMD	Multimedia
Microsoft Code Page Translation file	5B 57 69 6E 64 6F 77 73	CPX	Windows
Flight Simulator Aircraft Configuration	5B 66 6C 74 73 69 6D 2E	CFG	Games
WinAmp Playlist	5B 70 6C 61 79 6C 69 73 74 5D	PLS	Audio
Lotus AMI Pro document_2	5B 76 65 72 5D	SAM	Word processing suite
Husqvarna Designer	5D FC C8 00	HUS	Miscellaneous
Jar archive	5F 27 A8 89	JAR	Miscellaneous
EnCase case file	5F 43 41 53 45 5F	CAS\|CBK	Miscellaneous
Compressed archive file	60 EA	ARJ	Compressed archive
UUencoded file	62 65 67 69 6E	(none)	Compressed archive
UUencoded BASE64 file	62 65 67 69 6E 2D 62 61 73 65 36 34	b64	Compressed archive
Binary property list (plist)	62 70 6C 69 73 74	(none)	System
Apple Core Audio File	63 61 66 66	CAF	Multimedia
Virtual PC HD image	63 6F 6E 65 63 74 69 78	VHD	Miscellaneous
Photoshop Custom Shape	63 75 73 68 00 00 00 02	CSH	Miscellaneous
Intel PROset\|Wireless Profile	64 00 00 00	P10	Network
Dalvik (Android) executable file	64 65 78 0A	dex	Mobile
Audacity audio file	64 6E 73 2E	AU	Multimedia
MS Visual Studio workspace file	64 73 77 66 69 6C 65	DSW	Programming
WinNT printer spool file	66 49 00 00	SHD	Windows
Free Lossless Audio Codec file	66 4C 61 43 00 00 00 22	FLAC	Multimedia
Win2000\|XP printer spool file	67 49 00 00	SHD	Windows
GIMP file	67 69 6d 70 20 78 63 66	XCF	Picture
Win Server 2003 printer spool file	68 49 00 00	SHD	Windows
Skype user data file	6C 33 33 6C	DBB	Network
MultiBit Bitcoin wallet information	6D 75 6C 74 69 42 69 74 2E 69 6E 66 6F	INFO	E-money
SMS text (SIM)	6F 3C	(none)	Mobile
1Password 4 Cloud Keychain encrypted data	6F 70 64 61 74 61 30 31	(none)	Encryption
WinNT registry file	72 65 67 66	DAT	Windows
Sonic Foundry Acid Music File	72 69 66 66	AC	Multimedia
RealMedia metafile	72 74 73 70 3A 2F 2F	RAM	Multimedia
Allegro Generic Packfile (compressed)	73 6C 68 21	DAT	Miscellaneous
Allegro Generic Packfile (uncompressed)	73 6C 68 2E	DAT	Miscellaneous
PalmOS SuperMemo	73 6D 5F	PDB	Mobile
CALS raster bitmap	73 72 63 64 6F 63 69 64	CAL	Picture
PowerBASIC Debugger Symbols	73 7A 65 7A	PDB	Programming
OpenEXR bitmap image	76 2F 31 01	EXR	Picture
Qimage filter	76 32 30 30 33 2E 31 30	FLT	Miscellaneous
MacOS X image file	78 01 73 0D 62 62 60	DMG	MacOS
eXtensible ARchive file	78 61 72 21	XAR	Compressed archive
ZoomBrowser Image Index	7A 62 65 78	INFO	Miscellaneous
Windows application log	7B 0D 0A 6F 20	LGC\|LGD	Windows
MS WinMobile personal note	7B 5C 70 77 69	PWI	Mobile
Rich Text Format	7B 5C 72 74 66 31	RTF	Word processing suite
Huskygram Poem or Singer embroidery	7C 4B C3 74 E1 C8 53 A4 79 B9 01 1D FC 4F DD 13	CSD	Miscellaneous
Corel Paint Shop Pro image	7E 42 4B 00	PSP	Presentation
Digital Watchdog DW-TP-500G audio	7E 74 2C 01 50 70 02 4D 52	IMG	Audio
ELF executable	7F 45 4C 46	(none)	Linux/Unix
Relocatable object code	80	OBJ	Windows
Dreamcast audio	80 00 00 20 03 12 04	ADX	Multimedia
Kodak Cineon image	80 2A 5F D7	CIN	Picture
Outlook Express address book (Win95)	81 32 84 C1 85 05 D0 11	WAB	Email
WordPerfect text	81 CD AB	WPF	Word processing suite
PNG image	89 50 4E 47 0D 0A 1A 0A	PNG	Picture
MS Answer Wizard	8A 01 09 00 00 00 E1 08	AW	Windows
Hamarsoft compressed archive	91 33 48 46	HAP	Compressed archive
PGP secret keyring_1	95 00	SKR	Miscellaneous
PGP secret keyring_2	95 01	SKR	Miscellaneous
JBOG2 image file	97 4A 42 32 0D 0A 1A 0A	JB2	Picture
GPG public keyring	99	GPG	Miscellaneous
PGP public keyring	99 01	PKR	Miscellaneous
Outlook address file	9C CB CB 8D 13 75 D2 11	WAB	Email
tcpdump (libpcap) capture file	A1 B2 C3 D4	(none)	Network
Extended tcpdump (libpcap) capture file	A1 B2 CD 34	(none)	Network
Access Data FTK evidence	A9 0D 00 00 00 00 00 00	DAT	Miscellaneous
Quicken data	AC 9E BD 8F 00 00	QDF	Finance
Java serialization data	AC ED	(none)	Programming
BGBlitz position database file	AC ED 00 05 73 72 00 12	PDB	Miscellaneous
Win95 password file	B0 4D 46 43	PWL	Windows
PCX bitmap	B1 68 DE 3A	DCX	Presentation
Acronis True Image	B4 6E 68 44	TIB	Miscellaneous
Windows calendar	B5 A2 B0 B3 B3 B0 A5 B5	CAL	Windows
MS Write file_3	BE 00 00 00 AB	WRI	Word processing suite
Palm Desktop DateBook	BE BA FE CA 0F 50 61 6C 6D 53 47 20 44 61 74 61	DAT	Mobile
MS Agent Character file	C3 AB CD AB	ACS	Windows
Adobe encapsulated PostScript	C5 D0 D3 C6	EPS	Word processing suite
Jeppesen FliteLog file	C8 00 79 00	LBK	Miscellaneous
Java bytecode	CA FE BA BE	CLASS	Programming
NAV quarantined virus file	CD 20 AA AA 02 00 00 00	(none)	Miscellaneous
Java Cryptography Extension keystore	CE CE CE CE	JCEKS	Encryption
OS X ABI Mach-O binary (32-bit reverse)	CE FA ED FE	(none)	Programming
Perfect Office document	CF 11 E0 A1 B1 1A E1 00	DOC	Word processing suite
Outlook Express e-mail folder	CF AD 12 FE	DBX	Email
OS X ABI Mach-O binary (64-bit reverse)	CF FA ED FE	(none)	Programming
Microsoft Office document	D0 CF 11 E0 A1 B1 1A E1	DOC\|DOT\|PPS\|PPT\|XLA\|XLS\|WIZ	Word processing suite
CaseWare Working Papers	D0 CF 11 E0 A1 B1 1A E1	AC_	Miscellaneous
Access project file	D0 CF 11 E0 A1 B1 1A E1	ADP	Database
Lotus\|IBM Approach 97 file	D0 CF 11 E0 A1 B1 1A E1	APR	Database
MSWorks database file	D0 CF 11 E0 A1 B1 1A E1	DB	Database
Microsoft Common Console Document	D0 CF 11 E0 A1 B1 1A E1	MSC	Windows
Microsoft Installer package	D0 CF 11 E0 A1 B1 1A E1	MSI	Windows
Minitab data file	D0 CF 11 E0 A1 B1 1A E1	MTW	Miscellaneous
Developer Studio File Options file	D0 CF 11 E0 A1 B1 1A E1	OPT	Programming
MS Publisher file	D0 CF 11 E0 A1 B1 1A E1	PUB	Word processing suite
Revit Project file	D0 CF 11 E0 A1 B1 1A E1	RVT	Miscellaneous
Visual Studio Solution User Options file	D0 CF 11 E0 A1 B1 1A E1	SOU	Programming
SPSS output file	D0 CF 11 E0 A1 B1 1A E1	SPO	Miscellaneous
Visio file	D0 CF 11 E0 A1 B1 1A E1	VSD	Miscellaneous
MSWorks text document	D0 CF 11 E0 A1 B1 1A E1	WPS	Word processing suite
WinPharoah filter file	D2 0A 00 00	FTR	Network
AOL history\|typed URL files	D4 2A	ARL\|AUT	Network
WinDump (winpcap) capture file	D4 C3 B2 A1	(none)	Network
Windows graphics metafile	D7 CD C6 9A	WMF	Windows
Word 2.0 file	DB A5 2D 00	DOC	Word processing
Corel color palette	DC DC	CPL	Presentation
eFax file	DC FE	EFX	Miscellaneous
Amiga icon	E3 10 00 01 00 00 00 00	INFO	Miscellaneous
Win98 password file	E3 82 85 96	PWL	Windows
MS OneNote note	E4 52 5C 7B 8C D8 A7 4D	ONE	Miscellaneous
Windows executable file_1	E8	COM\|SYS	Windows
Windows executable file_2	E9	COM\|SYS	Windows
Windows executable file_3	EB	COM\|SYS	Windows
GEM Raster file	EB 3C 90 2A	IMG	Picture
BitLocker boot sector (Vista)	EB 52 90 2D 46 56 45 2D	(none)	Windows
BitLocker boot sector (Win7)	EB 58 90 2D 46 56 45 2D	(none)	Windows
RedHat Package Manager	ED AB EE DB	RPM	Compressed archive
UTF8 file	EF BB BF	(none)	Windows
FAT12 File Allocation Table	F0 FF FF	(none)	Windows
FAT16 File Allocation Table	F8 FF FF FF	(none)	Windows
FAT32 File Allocation Table_1	F8 FF FF 0F FF FF FF 0F	(none)	Windows
FAT32 File Allocation Table_2	F8 FF FF 0F FF FF FF FF	(none)	Windows
Bitcoin-Qt blockchain block file	F9 BE B4 D9	DAT	E-money
XZ archive	FD 37 7A 58 5A 00	XZ	Compressed archive
OS X ABI Mach-O binary (32-bit)	FE ED FA CE	(none)	Programming
OS X ABI Mach-O binary (64-bit)	FE ED FA CF	(none)	Programming
JavaKeyStore	FE ED FE ED	(none)	Programming
Symantex Ghost image file	FE EF	GHO\|GHS	Compressed archive
UTF-16\|UCS-2 file	FE FF	(NONE)	Windows
Windows executable	FF	SYS	Windows
Works for Windows spreadsheet	FF 00 02 00 04 04 05 54	WKS	Spreadsheet
QuickReport Report	FF 0A 00	QRP	Financial
Windows international code page	FF 46 4F 4E 54	CPI	Windows
Keyboard driver file	FF 4B 45 59 42 20 20 20	SYS	Windows
WordPerfect text and graphics	FF 57 50 43	WP\|WPD\|WPG\|WPP\|WP5\|WP6	Word processing suite
JPEG\|EXIF\|SPIFF images	FF D8 FF	JFIF\|JPE\|JPEG\|JPG	Pictures
MPEG-4 AAC audio	FF F1	AAC	Audio
MPEG-2 AAC audio	FF F9	AAC	Audio
Windows Registry file	FF FE	REG	Windows
UTF-32\|UCS-2 file	FF FE	(NONE)	Windows
UTF-32\|UCS-4 file	FF FE 00 00	(NONE)	Windows
MSinfo file	FF FE 23 00 6C 00 69 00	MOF	Windows
DOS system driver	FF FF FF FF	SYS	Windows

数据来源及参考链接: https://www.garykessler.net/library/file_sigs.html https://en.wikipedia.org/wiki/List_of_file_signatures http://mark0.net/soft-trid-deflist-p.html