跳至主要內容

文件头魔数

bincooo小于 1 分钟

文件头魔数

HexEdopen in new window

  • 很多类型的文件,其起始的几个字节的内容是固定的(或是有意填充,或是本就如此)。

  • 根据这几个字节的内容就可以确定文件类型,因此这几个字节的内容被称为魔数 (magic number)。

file typesuffixmagic
JPEGjpg;jpeg0xFFD8FF
PNGpng0x89504E470D0A1A0A
GIFgifGIF8
TIFFtif;tiff0x49492A00
TIFFtif;tiff0x4D4D002A
AOL ARTart0x4A47040E000000
AOL ARTart0x4A47030E000000
PC Paintbrushpcx0x0A050108
Graphics Metafilewmf0xD7CDC69A
Graphics Metafilewmf0x01000900
Graphics Metafilewmf0x02000900
Enhanced Metafileemf0x0100000058000000
CADdwg0x41433130
Outlook Expressdbx0xCFAD12FE
MS Office/OLE2doc;xls;dot;ppt;xla;ppa;pps;pot;msi;sdw;db0xD0CF11E0A1B11AE1
WordPerfectwpd0xFF575043
Quickenqdf0xAC9EBD8F
QuickBooks Backupqbb0x458600000600
Sagesly.or.srt.or.slt;sly;srt;slt0x53520100
Lotus WordPro v9lwp0x576F726450726F
Lotus 123 v91230x00001A00051004
Lotus 123 v5wk40x00001A0002100400
Lotus 123 v3wk30x00001A0000100400
Lotus 123 v1wk10x2000604060
Windows Passwordpwl0xE3828596
ZIP Archivezip;jar0x504B0304
ZIP Archive (outdated)zip0x504B3030
GZ Archivegz;tgz0x1F8B08
ARJ Archivearj0x60EA
MPEGmpg;mpeg0x000001BA
MPEGmpg;mpeg0x000001B3
Windows Mediaasf0x3026B2758E66CF11
ELF Executableelf;;0x7F454C4601010100
Java-Classclass0xCAFEBASE