admin 管理员组

文章数量: 1086019


2024年4月19日发(作者:ntuz 事务回滚)

1、从 Ultra - edit-32 中提取出来的

- ]0 v* 7 L+ p

JPEG (jpg) ,文件头: FFD8FF

6 U" b2 ?) ~; u: S0 a. R 1 c# B: S

. W7 B" m: Y2 s $ t1 g. u

PNG (png) ,文件头: 89504E47 GIF (gif) ,文件头: 47494638

1 k3 u0 i 8 g. y- U1 G

TIFF (tif) ,文件头: 49492A00 Windows Bitmap (bmp) ,文件头: 424D

3 P' s2 Z, t1 F; *

|1 T

CAD (dwg) ,文件头: 41433130

8 m9 j% v9 x/ S' ]7 U" z& y9 X+ a

Adobe Photoshop (psd) ,文件头:

38425053

: E2 Z& R4 F. n1 y

Rich Text Format (rtf) ,文件头: 7B5C727466

XML (xml),文件头:3C3F786D6C %-

HTML (html) ,文件头: 68746D6C3E

6 F: u! i$ y+ W1 F8 x f$ E

Email [thorough only] (eml) ,文件头: 44656C69766572792D646174653A

Outlook Express (dbx) ,文件头: CFAD12FEC5FD746F

Outlook (pst) ,文件头: 2142444E

MS Word/Excel () ,文件头: D0CF11E0

& @3 X& k$ T 7 r$ ~# _* E% B# o

MS Access (mdb) ,文件头: 5374616E64617264204A

3 O1 r, C; s3 s! O, Z- Y! a

WordPerfect (wpd) ,文件

头: FF575043

2 [0 v) j" I8 C& X! {

Postscript () ,文件头: 252150532D41646F6265

Adobe Acrobat (pdf) ,文件头: 255044462D312E

4 s8 D9 F* U / Y6 o+ J6 {

Quicken (qdf) ,文件头:

AC9EBD8F

1 ]' T) V+

Windows Password (pwl),文件头:E3828596

ZIP Archive (zip) ,文件头: 504B0304

RAR Archive (rar),文件头:52617221

Wave (wav) ,文件头: 57415645

AVI (avi) ,文件头: 41564920

Real Audio (ram) ,文件头: 2E7261FD

Real Media (rm) ,文件头: 2E524D46

MPEG (mpg) ,文件头: 000001BA

1 h: ?! r) T& B7 z

MPEG (mpg) ,文件头: 000001B3

Quicktime (mov) ,文件头: 6D6F6F76

Windows Media (asf),文件头:3026B2758E66CF11

MIDI (mid) ,文件头: 4D546864

#

二、从 winhex 中取出的文件头列表

File

JPEG

PNG

GIF

TIFF

TIFF

Bit map

AOL ART

AOL ART

Type

jpg;jpeg

png

gif

tif;tiff

tif;tiff

bmp

art

art

ExtensionsHeader

0xFFD8FF

4 G4 X" s( j 5 D( w% v

0x89504E470D0A1A0A

d3 X+ M+ N- [& X8 @

" |( Z# {" R1

GIF8

0x49492A00

0x4D4D002A

BM

0x4A47040E000000

0x4A47030E000000

&@

.…一

PC Paintbrush

pcx

0x0A050108 .....

0xD7CDC69A

0x01000900

0x02000900

0x0000

CDR

) q7 k- f1 R$ i4 E& E

# Y$ Y% [: s' Q

Graphics Metafile

wmf

Graphics Metafile

wmf

Graphics Metafile

Enhanced Metafile

Corel Draw

wmf

emf

cdr

CAD

dwg

0x41433130

8BPS

3 X4 s 2 x; F7 S' c

Adobe Photoshop

Rich Text Format

XML

HTML

Email

psd

rtf

xml

html;htm;php;php3;php4;phtml;shtml

eml

dbx

rtf

6 k' Y% K$ X2 O: a" e

type

& v ; e# a0 z 2 Q2 l, U" W

Delivery-date:

0xCFAD12FE

Outlook Express

Outlookpst!BDN

MS Office/OLE2

MS Access

WordPerfect

doc;xls;dot;ppt;xla;ppa;pps;pot;msi;sdw;db

0xD0CF11E0A1B11AE1

Standard J

0xFF575043

writer

6 n# Q [1 r" O" x- h# c, $ {

mdb;mda;mde;mdt

wpd

sxw

OpenOffice Writer

OpenOffice Calc

sxc

sxm

calc

. q& F4 j 1 ~ % K8 J% v ! Q* C

OpenOffice Math

OpenOffice Impress

math

+ Z {$ Z, p& q 4 _6 T 1 a$ c 5 E! I

sxi

sxd

impress

draw

1 Y* d% W7 h& g! V

OpenOffice Draw

Adobe FrameMaker

( Z! u% B, k & @6 j

fm

;ps;eps

# b- Q2 z, p* S5 P* D

0 H

PostScript

Adobe Acrobat

Quicken

%!PS-Adobe

%PDF-1.

' m9 c) ?! D' b8 g0 M- d1 T

pdf

qdf

qbb

4 {, e' l1 J$ S7 G7 M0 ~. o* C & g) k

0xAC9EBD8F

$ v5 m {( B6 z

QuickBooks Backup

0x458600000600

0x53520100

SAGEBACKUP

0x576F726450726F

0x00001A00051004

0x00001A

0x00001A

0x2000604060

Sage

;sly;srt;slt

1

Sage Backup

Lotus WordPro v9

lwp

123

Lotus 123 v9

Lotus 123 v5

wk4

wk3

Lotus 123 v3

Lotus 123 v1

wk1

pwl

) w7 {8 v7 B0 o- r

Windows Password

ZIP Archive

0xE3828596

0x504B0304

{" {/ d) , c

1 g3 h'

zip;jar

zip

ZIP Archive (outdated)

RAR Archive

0x504B3030

Rar!

0x1F8B08

rar

gz;tgz

GZ Archive

BZIP Archive

5 G3 ~ % a, a( x$ l+ B

bz2

arj

BZh

0x60EA

■7—隹 1

7z 集 '

WAVE

AVI

ARJ Archive

7-ZIP Archive

Wave

AVI

7z

wav

avi

Real Audio

Real Media

MPEG

MPEG

Quicktime

Windows Media

MIDI

Win32 Executable

Win16 Executable

ram;ra

rm

mpg;mpeg

mpg;mpeg

mov

asf

mid

exe;dll;drv;vxd;sys;ocx;vbx

exe;dll;drv;vxd;sys;ocx;vbx

.ra?0

.RMF

0x000001BA

# L. w& P: P! ]: F; F 2 i

0x000001B3

moov …

0x3026B2758E66CF11

MThd

MZ

MZ

0 Y; q; ]* 9 V" A

ELF Executable elf;;

常见文件的文件头

jpg: 255,216

gif: 71,73

bmp: 66,77

png: 137,80

doc: 208,207

docx: 80,75

xls: 208,207

xlsx: 80,75

js: 239,187

swf: 67,87

txt: 70,67

mp3: 73,68

wma: 48,38

mid: 77,84

rar: 82,97

zip: 80,75

xml:

60,63

用文件头判断。直接读取文件的前几个字节。

常用文件的文件头如下

(16

进制

)

JPEG (jpg)

,文件头:

FFD8FF

PNG (png)

,文件头:

89504E47

GIF (gif)

,文件头:

47494638

TIFF (tif)

,文件头:

49492A00

Windows Bitmap (bmp)

,文件头:

424D

CAD (dwg)

,文件头:

41433130

Adobe Photoshop (psd)

,文件头:

38425053

Rich Text Format (rtf)

,文件头:

7B5C727466

XML (xml)

,文件头:

3C3F786D6C

0x7F454C4601010100

HTML (html)

,文件头:

68746D6C3E

Email [thorough only] (eml)

,文件头:

44656C69766572792D646174653A Outlook

Express (dbx)

,文件头:

CFAD12FEC5FD746F

Outlook (pst)

,文件头:

2142444E

MS Word/Excel ()

,文件头:

D0CF11E0

MS Access (mdb)

,文件头:

5374616E64617264204A

WordPerfect (wpd)

,文件头:

FF575043

Postscript ()

,文件头:

252150532D41646F6265

Adobe Acrobat (pdf)

,文件头:

255044462D312E

Quicke n (qdf)

,文件头:

AC9EBD8F

Windows Password (pwl)

,文件头:

E3828596

ZIP Archive (zip)

,文件头:

504B0304

RAR Archive (rar)

,文件头:

52617221

Wave (wav)

,文件头:

57415645

AVI (avi)

,文件头:

41564920

Real Audio (ram)

,文件头:

2E726

D

Real Media (rm)

,文件头:

2E524D46

MPEG (mpg)

,文件头:

000001BA

MPEG (mpg)

,文件头:

000001B3

Quicktime (mov)

,文件头:

6D6F6F76

Windows Media (asf)

,文件头:

3026B2758E66CF11

MIDI (mid)

,文件头:

4D546864


本文标签: 文件 事务 提取 出来 判断