我们在做ctf时，经常需要辨认各种文件头，跟大家分享一下一些常见的文件头。
| 扩展名 | 文件头标识（HEX） | 文件描述 |
| 123 | 00 00 1A 00 05 10 04 | Lotus 1-2-3 spreadsheet (v9) file |
| 3gg; 3gp; 3g2 | 00 00 00 nn 66 74 79 70 33 67 70 | 3rd Generation Partnership Project 3GPP (nn=0x14) and 3GPP2 (nn=0x20) multimedia files |
| 7z | 37 7A BC AF 27 1C | 7-ZIP compressed file |
| aba | 00 01 42 41 | Palm Address Book Archive file |
| abi | 41 4F 4C 49 4E 44 45 58 | AOL address book index file |
| aby; idx | 41 4F 4C 44 42 | AOL database files: address book (ABY) and user configuration data (MAIN.IDX) |
| accdb | 00 01 00 00 53 74 61 6E 64 61 72 64 20 41 43 45 20 44 42 | Microsoft Access 2007 file |
| ACM | 4D 5A | MS audio compression manager driver |
| ADF | 44 4F 53 | Amiga disk file |
| adx | 03 00 00 00 41 50 50 52 | Lotus Approach ADX file |
| AIFF | 46 4F 52 4D 00 | Audio Interchange File |
| ain | 21 12 | AIN Compressed Archive File |
| ami | 5B 76 65 72 5D | Lotus Ami Pro |
| amr | 23 21 41 4D 52 | Adaptive Multi-Rate ACELP (Algebraic Code Excited Linear Prediction) Codec, commonly audio format with GSM cell phones |
| ANI | 52 49 46 46 | |
| API | 4D 5A 90 00 03 00 00 00 | Acrobat plug-in |
| arc | 1A 0x | LH archive file, old version(where x = 0x2, 0x3, 0x4, 0x8 or 0x9 for types 1-5, respectively) |
| arc | 41 72 43 01 | FreeArc compressed file |
| arj | 60 EA | ARJ Compressed Archive |
| ARJ | 60 EA 27 | |
| ART | 4A 47 03 0E 00 00 00 | AOL ART file |
| ART | 4A 47 04 0E 00 00 00 | AOL ART file |
| asf | 30 26 B2 75 8E 66 CF 11 | Windows Media |
| asf; wma; wmv | 30 26 B2 75 8E 66 CF 11 A6 D9 00 AA 00 62 CE 6C | Microsoft Windows Media Audio/Video File(Advanced Streaming Format) |
| asx | 3C | Advanced Stream redirector file |
| au | 2E 73 6E 64 | SoundMachine Audio File NeXT/Sun Microsystems μ-Law audio file |
| avi | 41 56 49 20 | Audio Video Interleave (AVI) |
| AX | 4D 5A | Library cache file |
| AX | 4D 5A 90 00 03 00 00 00 | DirectShow filter |
| bag | 41 4F 4C 20 46 65 65 64 62 61 67 | AOL and AIM buddy list file |
| BAS | 20 20 20 | |
| bin | 42 4C 49 32 32 33 51 | Thomson Speedtouch series WLAN router firmware |
| bmp | 42 4D | Windows Bitmap |
| BMP | 42 4D 3E | |
| bz; bz2 | 42 5A 68 | BZIP Archive |
| BZ2; TAR.BZ2; TBZ2; TB2 | 42 5A 68 | bzip2 compressed archive |
| CAB | 49 53 63 | |
| CAB; HDR | 49 53 63 28 | Install Shield v5.x or 6.x compressed file |
| CAB | 4D 53 43 46 | Microsoft CAB File Format |
| cat | 30 | Microsoft security catalog file |
| CBD | 43 42 46 49 4C 45 | WordPerfect dictionary file (unconfirmed) |
| CCD | 5B 43 6C | |
| cdr | CDR | Corel Draw |
| CDR | 45 4C 49 54 45 20 43 6F 6D 6D 61 6E 64 65 72 20 | Elite Plus Commander saved game file |
| CDR, DVF | 4D 53 5F 56 4F 49 43 45 | Sony Compressed Voice File |
| CHI; CHM | 49 54 53 46 | Microsoft Compiled HTML Help File |
| CHM | 49 54 53 | |
| CLB | 43 4D 58 31 | Corel Binary metafile |
| CLB | 43 4F 4D 2B | COM+ Catalog file |
| cnt | 3A 42 61 73 65 | |
| COM, DLL, DRV, EXE, PIF, QTS, QTX, SYS | 4D 5A | Windows/DOS executable file |
| COM | 4D 5A EE | |
| COM | E9 3B 03 | |
| CPE | 46 41 58 43 4F 56 45 52 2D 56 45 52 | Microsoft Fax Cover Sheet |
| CPL | 4D 5A | Control panel application |
| CPT | 43 50 54 37 46 49 4C 45 | Corel Photopaint file |
| CPT | 43 50 54 46 49 4C 45 | Corel Photopaint file |
| CPX | 5B 57 69 | |
| cru; crush | 43 52 55 53 48 | CRUSH Archive File |
| CRU | 43 52 55 53 48 20 76 | Crush compressed archive |
| CRW | 49 49 1A 00 00 00 48 45 41 50 43 43 44 52 02 00 | Canon digital camera RAW file |
| CTF | 43 61 74 61 6C 6F 67 20 33 2E 30 30 00 | WhereIsIt Catalog file |
| CUR | 00 00 02 00 01 00 20 20 | Windows cursor file |
| dat | 03 | MapInfo Native Data Format |
| dat | 1A 52 54 53 20 43 4F 4D 50 52 45 53 53 45 44 20 49 4D 41 47 45 20 56 31 2E 30 1A | Runtime Software disk image |
| dat | 41 56 47 36 5F 49 6E 74 65 67 72 69 74 79 5F 44 61 74 61 62 61 73 65 | AVG6 Integrity database file |
| DAT | 43 52 45 47 | Windows 9x registry hive |
| DAT | 43 6C 69 65 6E 74 20 55 72 6C 43 61 63 68 65 20 4D 4D 46 20 56 65 72 20 | IE History DAT file |
| DAT | 45 52 46 53 53 41 56 45 44 41 54 41 46 49 4C 45 | Kroll EasyRecovery Saved Recovery State file |
| DAT | 49 6E 6E 6F 20 53 65 74 75 70 20 55 6E 69 6E 73 74 61 6C 6C 20 4C 6F 67 20 28 62 29 | Inno Setup Uninstall Log file |
| db | 00 06 15 61 00 00 00 02 00 00 04 D2 00 00 10 00 | Netscape Navigator (v4) database file |
| DB | 44 42 46 48 | Palm Zire photo database |
| db | 08 | dBASE IV or dBFast configuration file |
| db3 | 03 | dBASE III file |
| db4 | 04 | dBASE IV data file |
| dba | 00 01 42 44 | Palm DateBook Archive file |
| dbx | CF AD 12 FE | |
| dbx | CF AD 12 FE C5 FD 74 6F | Outlook Express |
| dci | 3C 21 64 6F 63 74 79 70 | AOL HTML mail file |
| dcx | 3A DE 68 B1 | DCX Graphic File |
| DDB | 00 01 00 | |
| dib | 42 4D | device-independent bitmap image |
| DLL | 4D 5A 90 | |
| DMP | 4D 44 4D 50 93 A7 | Windows minidump file |
| DMS | 44 4D 53 21 | Amiga DiskMasher compressed archive |
| doc | 0D 44 4F 43 | DeskMate Document file |
| doc | 12 34 56 78 90 FF | MS Word 6.0 |
| doc | 31 BE 00 00 00 AB 00 00 | MS Word for DOS 6.0 |
| doc | 7F FE 34 0A | MS Word |
| dot; ppt; xla; ppa; pps; pot; msi; sdw; db | D0 CF 11 E0 | MS Office/OLE2 |
| doc; dot; xls; xlt; xla; ppt; apr ;ppa; pps; pot; msi; sdw; db | D0 CF 11 E0 A1 B1 1A E1 | MS Compound Document v1 or Lotus Approach APR file |
| DPL | 4D 5A 50 | |
| DRV | 4D 5A 16 | |
| drw | 07 | A common signature and file extension for many drawing programs. |
| drw | 01 FF 02 04 03 02 | Micrografx vector graphic file |
| ds4 | 4D 47 58 20 69 74 70 64 | Micrografix Designer 4 |
| DSN | 4D 56 | CD Stomper Pro label file |
| dsp | 23 20 4D 69 63 72 6F 73 6F 66 74 20 44 65 76 6 56C 6F 70 65 72 20 53 74 75 64 69 6F | Microsoft Developer Studio project file |
| dss | 02 64 73 73 | Digital Speech Standard (Olympus, Grundig, & Phillips) |
| dtd | 07 64 74 32 64 64 74 64 | DesignTools 2D Design file |
| dtd | 3C 21 45 4E 54 49 54 59 | XML DTD |
| DVR | 44 56 44 | DVR-Studio stream file |
| dwg | 41 43 31 | |
| dwg | 41 43 31 30 | Generic AutoCAD drawing NOTES on AutoCAD file headers: The 0x41-43-31-30 (AC10) is a generic header, occupying the first four bytes in the file. The next two bytes give further indication about the version or subtype: 0x30-32 (02) — AutoCAD R2.5 0x30-33 (03) — AutoCAD R2.6 0x30-34 (04) — AutoCAD R9 0x30-36 (06) — AutoCAD R10 0x30-39 (09) — AutoCAD R11/R12 0x31-30 (10) — AutoCAD R13 (subtype 10) 0x31-31 (11) — AutoCAD R13 (subtype 11) 0x31-32 (12) — AutoCAD R13 (subtype 12) 0x31-33 (13) — AutoCAD R14 (subtype 13) 0x31-34 (14) — AutoCAD R14 (subtype 14) 0x31-35 (15) — AutoCAD R2000 0x31-38 (18) — AutoCAD R2004 0x32-31 (21) — AutoCAD R2007 |
| Enn (where nn are numbers) | 45 56 46 | EnCase evidence file |
| ECO | 2A 50 52 | |
| elf | 7F 45 4C 46 01 01 01 00 | ELF Executable |
| emf | 01 00 00 00 58 00 00 00 | Extended (Enhanced) Windows Metafile Format, printer spool file |
| eml | 44 65 6C 69 76 65 72 79 2D 64 61 74 65 3A | |
| EML | 46 72 6F 6D 20 20 20 | A commmon file extension for e-mail files. Signatures shown here are for Netscape, Eudora, and a generic signature, respectively. EML is also used by Outlook Express and QuickMail. |
| EML | 46 72 6F 6D 20 3F 3F 3F | A commmon file extension for e-mail files. Signatures shown here are for Netscape, Eudora, and a generic signature, respectively. EML is also used by Outlook Express and QuickMail. |
| EML | 46 72 6F 6D 3A 20 | A commmon file extension for e-mail files. Signatures shown here are for Netscape, Eudora, and a generic signature, respectively. EML is also used by Outlook Express and QuickMail. |
| EML | 52 65 63 | |
| enc | 00 5C 41 B1 FF | Mujahideen Secrets 2 encrypted file |
| enl | [32 byte offset] 40 40 40 20 00 00 40 40 40 40 | EndNote Library File |
| eps | 25 21 50 53 | Adobe EPS File |
| eps | 25 21 50 53 2D 41 64 6F 62 65 | Postscript |
| eps | 25 21 50 53 2D 41 64 6F 62 65 2D 33 2E 30 20 45 50 53 46 2D 33 20 30 | Adobe encapsulated PostScript file (If this signature is not at the immediate beginning of the file, it will occur early in the file, commonly at byte offset 30) |
| EPS | C5 D0 D3 | |
| eth | 1A 35 01 00 | GN Nettest WinPharoah capture file |
| evt | 30 00 00 00 4C 66 4C 65 | Windows Event Viewer file |
| evt | 03 00 00 00 C4 66 C4 56 | |
| EVTX | 45 6C 66 46 69 6C 65 00 | Windows Vista event log file |
| exe; dll; drv; vxd; sys; ocx; vbx | 4D 5A | Win32 Executable |
| exe; dll; drv; vxd; sys; ocx; vbx | 4D 5A | Win16 Executable |
| exe; com; 386; ax; acm; sys; dll; drv; flt; fon; ocx; scr; lrc; vxd; cpl; x32 | 4D 5A | Executable File |
| EXE, DLL, OCX, OLB, IMM, IME | 4D 5A 90 | |
| fli | 00 11 AF | FLIC Animation file |
| flt | 00 01 01 | OpenFlight 3D file |
| FLT | 4D 5A 90 00 03 00 00 00 | Audition graphic filter file (Adobe) |
| FLV | 46 4C 56 01 | Flash video file |
| fm | 3C 4D 61 6B 65 72 46 69 6C 65 20 | Adobe FrameMaker file |
| fm3 | 00 00 1A 00 07 80 01 00 | Lotus 123 v3 FMT file |
| fmt | 20 00 68 00 20 0 | Lotus 123 v4 FMT file |
| FNT | 43 48 41 | |
| FON | 4D 5A | Font file |
| GBC | 87 F5 3E | |
| gid | 3F 5F 03 00 | Windows Help Index File |
| GID | 4C 4E 02 00 | Windows Help index file |
| GIF | 47 49 46 38 | |
| gif | 47 49 46 38 37 61 | Graphics interchange format file (GIF 87A) |
| gif | 47 49 46 38 39 61 | Graphics interchange format file (GIF89A) |
| GTD | 7B 50 72 | |
| GX2 | 47 58 32 | Show Partner graphics file (not confirmed) |
| gz; tar; tgz | 1F 8B | Gzip Archive File |
| gz; tgz | 1F 8B 08 | GZ Compressed File |
| hap | 91 33 48 46 | HAP Archive File |
| HDMP | 4D 44 4D 50 93 A7 | Windows heap dump file |
| hdr | 23 3F 52 41 44 49 41 4E 43 45 0A | adiance High Dynamic Range image file |
| HLP | 3F 5F 03 | |
| hlp | 3F 5F 03 00 | Windows Help file |
| HLP | 4C 4E 02 00 | Windows Help file |
| hlp | [7 byte offset] 00 00 FF FF FF FF | Windows Help file |
| hqx | 28 54 68 69 73 20 66 69 6C 65 | Macintosh BinHex 4 Compressed Archive |
| hqx | 28 54 68 69 73 20 66 69 6C 65 20 6D 75 73 74 20 62 65 20 63 6F 6E 76 65 72 74 65 64 20 77 69 74 68 20 42 69 6E 48 65 78 20 | Macintosh BinHex 4 Compressed Archive |
| HTM | 3C 21 44 | |
| htm; html | 3C 21 44 4F 43 54 | HyperText Markup Language 3 |
| htm; html | 3C 48 54 4D 4C 3E | HyperText Markup Language 2 |
| htm; html | 3C 68 74 6D 6C 3E | HyperText Markup Language 1 |
| html | 68 74 6D 6C 3E | HTML |
| ico | 00 00 01 00 00 | Icon File |
| ico | 00 00 01 00 01 00 20 20 | Icon File |
| IFF | 46 4F 52 4D | |
| IFO | 44 56 44 | DVD info file |
| IME | 4D 5A 90 | |
| img | 00 01 00 08 00 01 00 01 01 | Ventura Publisher/GEM VDI Image Format Bitmap file |
| IMG | 00 FF FF | |
| IMM | 4D 5A 90 | |
| ind | 41 4F 4C 49 44 58 | AOL client preferences/settings file (MAIN.IND) |
| ISO | 43 44 30 30 31 | ISO-9660 CD Disc Image (This signature usually occurs at byte 8001, 8801, or 9001.) |
| ivr | 2E 52 45 43 | RealPlayer video file (V11 and later) |
| JAR | 4A 41 52 43 53 00 | JARCS compressed archive |
| jar | 5F 27 A8 89 | JAR Archive File |
| jpg; jpeg | FF D8 FF | |
| jpg; jpe; jpeg | FF D8 FF E0 00 | JPG Graphic File |
| jpg; jpe; jpeg | FF D8 FF FE 00 | JPG Graphic File |
| KGB | 4B 47 42 5F 61 72 63 68 20 2D | KGB archive |
| KOZ | 49 44 33 03 00 00 00 | Sprint Music Store audio file (for mobile devices) |
| LDB | 42 49 4C | |
| lha | 2D 6C 68 35 2D | LHA Compressed |
| lha; lzh | [2 byte offset] 2D 6C 68 | Compressed archive file |
| LHP | 3F 5F 03 | |
| lhp | 3F 5F 03 00 | Windows Help File |
| lib | 21 3C 61 72 63 68 3E 0A | Unix archiver (ar) files and Microsoft Program Library Common Object File Format (COFF) |
| LIB | 2A 24 20 | |
| LIT | 49 54 4F 4C 49 54 4C 53 | Microsoft Reader eBook file |
| LNK | 4C 00 00 | |
| lnk | 4C 00 00 00 | Windows Shortcut (Link File) |
| lnk | 4C 00 00 00 01 14 02 | Windows Link File |
| LNK | 4C 00 00 00 01 14 02 00 | Windows shortcut file |
| log | 2A 2A 2A 20 20 49 6E 73 74 61 6C 6C 61 74 69 6F 6E 20 53 74 61 72 74 65 64 20 | Symantec Wise Installer log file |
| lzh | lh | Lz compression file |
| lwp | 57 6F 72 64 50 72 6F | Lotus WordPro v9 |
| m3u | 23 45 58 | |
| m4a | 00 00 00 20 66 74 79 70 4D 34 41 20 00 00 00 00 | Apple Lossless Audio Codec file |
| m4a; m4v | 00 00 00 20 66 74 79 70 4D 34 41 20 00 00 00 00 | QuickTime M4A/M4V file |
| manifest | 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D | Windows Visual Stylesheet XML file |
| MAR | 4D 41 52 31 00 | Mozilla archive |
| MAR | 4D 41 52 43 | Microsoft/MSN MARC archive |
| MAR | 4D 41 72 30 00 | MAr compressed archive |
| max | D0 CF 11 | |
| mdb | 00 01 00 00 53 74 61 6E 64 61 72 64 20 4A 65 74 20 44 42 | Microsoft Access file |
| mdb; mda; mde; mdt | 53 74 61 6E 64 61 72 64 20 4A | MS Access |
| MDF | 00 FF FF | |
| mdf | 00 FF FF FF FF FF FF FF FF FF FF 00 00 02 00 01 | Alcohol 120% CD image |
| mdf | 01 0F 00 00 | Microsoft SQL Server 2000 database |
| MDI | 45 50 | Microsoft Document Imaging file |
| MDS | 4D 45 44 | |
| MID; MIDI | 4D 54 68 64 | Musical Instrument Digital Interface (MIDI) sound file |
| mkv | 1A 45 DF A3 93 42 82 88 6D 61 74 72 6F 73 6B 61 | Matroska stream file |
| MLS | 4D 49 4C 45 53 | Milestones v1.0 project management and scheduling software (Also see "MV2C" and "MV214" signatures) |
| MLS | 4D 4C 53 57 | Skype localization data file |
| MLS | 4D 56 32 31 34 | Milestones v2.1b project management and scheduling software (Also see "MILES" and "MV2C" signatures) |
| MLS | 4D 56 32 43 | Milestones v2.1a project management and scheduling software (Also see "MILES" and "MV214" signatures) |
| MMF | 4D 4D 4D 44 00 00 | Yamaha Corp. Synthetic music Mobile Application Format (SMAF) for multimedia files that can be played on hand-held devices. |
| mny | 00 01 00 00 4D 53 49 53 41 4D 20 44 61 74 61 62 61 73 65 | Microsoft Money file |
| MOV | 00 00 0F | |
| MOV | 00 00 77 | |
| mov | 6D 6F 6F 76 | Quicktime |
| mov | 6D 64 61 74 | QuickTime Movie |
| mp | 0C ED | Monochrome Picture TIFF bitmap file (unconfirmed) |
| MP3 | 49 44 33 | MPEG-1 Audio Layer 3 (MP3) audio file |
| MP3 | FF FB 50 | |
| mp4 | 00 00 00 18 66 74 79 70 33 67 70 35 | MPEG-4 video files |
| MPA | 00 00 01 | |
| mpg; mpeg | 00 00 01 B3 | MPEG Movie |
| mpg | 00 00 01 BA | MPEG |
| MSC | 3C 3F 78 | |
| msc | 3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 2E 30 22 3F 3E 0D 0A 3C 4D 4D 43 5F 43 6F 6E 73 6F 6C 65 46 69 6C 65 20 43 6F 6E 73 6F 6C 65 56 65 72 73 69 6F 6E 3D 22 | Microsoft Management Console Snap-in Control file |
| msi | 23 20 | Cerius2 file |
| MSV | 4D 53 5F 56 4F 49 43 45 | Sony Memory Stick Compressed Voice file |
| NES | 4E 45 53 | |
| NLS | C2 20 20 | |
| nri | 0E 4E 65 72 6F 49 53 4F | Nero CD Compilation |
| ntf | 1A 00 00 | Lotus Notes database template |
| nsf; ntf | 1A 00 00 03 00 00 | Lotus Notes Database/Template |
| nsf | 1A 00 00 03 00 00 11 00 | Notes Database |
| nsf | 1A 00 00 04 00 00 | Lotus Notes database |
| ntf | 30 31 4F 52 44 4E 41 4E 43 45 20 53 55 52 56 45 59 20 20 20 20 20 20 20 | National Transfer Format Map File |
| obj | 4C 01 | Microsoft Common Object File Format (COFF) relocatable object code file for an Intel 386 or later/compatible processors |
| OCX | 4D 5A | ActiveX or OLE Custom Control |
| OCX | 4D 5A 90 | |
| OLB | 4D 5A | OLE object library |
| OLB | 4D 5A 90 | |
| org; pfc | 41 4F 4C 56 4D 31 30 30 | AOL personal file cabinet (PFC) file |
| pak | 1A 0B | Compressed archive file |
| PAT | 47 46 31 50 41 54 43 48 | Advanced Gravis Ultrasound patch file |
| PAT | 47 50 41 54 | GIMP (GNU Image Manipulation Program) pattern file |
| PBK | 5B 41 44 | |
| PCB | 17 A1 50 | |
| PCS | 0A 05 01 | |
| pcx | 0A nn 01 01 | ZSOFT Paintbrush file(where nn = 0x02, 0x03, or 0x05) |
| pcx | 0A 05 01 08 | PC Paintbrush(often associated with Quake Engine games) |
| pdb | [11 byte offset] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | Palmpilot Database/Document File |
| 25 50 44 | ||
| pdf; fdf | 25 50 44 46 | Adobe Portable Document Format and Forms Document file |
| 25 50 44 46 2D 31 2E | Adobe Acrobat | |
| PDG | 48 48 02 | |
| pf | 11 00 00 00 53 43 43 41 | Windows prefetch file |
| pic | 01 00 00 00 01 | Unknown type picture file |
| PJT | 00 00 07 | |
| PLL | 24 53 6F | |
| PNG | 89 50 4E | |
| PNG | 89 50 4E 47 | |
| png | 89 50 4E 47 0D 0A | PNG Image File |
| png | 89 50 4E 47 0D 0A 1A 0A | PNG Image File |
| PPC | 52 65 63 | |
| PPT | D0 CF 11 | |
| ppt | [512 byte offset] 00 6E 1E F0 | PowerPoint presentation subheader (MS Office) |
| ppt | [512 byte offset] 0F 00 E8 03 | PowerPoint presentation subheader (MS Office) |
| PPZ | 4D 53 43 46 | Powerpoint Packaged Presentation |
| prc | 42 4F 4F 4B 4D 4F 42 49 | Palmpilot resource file |
| PRG | 23 44 45 | |
| ps | 25 21 50 53 2D 41 64 6F 62 65 | Postscript |
| PSD | 38 42 50 | |
| psd | 38 42 50 53 | Adobe Photoshop image file |
| psp | 7E 42 4B 00 | PaintShop Pro Image File |
| pst | 21 42 44 4E | Microsoft Outlook Personal Folder file |
| pwl | E3 82 85 96 | Windows Password |
| qbb | 45 86 00 00 06 00 | Intuit QuickBooks Backup file |
| qdf | AC 9E BD 8F | Quicken |
| qph | 03 00 00 00 | Quicken price history file |
| qt | 6D 64 61 74 | Quicktime Movie File |
| qxd | 00 00 49 49 58 50 52 | Quark Express document (Intel & Motorola, respectively) |
| qxd | 00 00 4D 4D 58 50 52 | |
| ra | 2E 52 4D 46 00 00 00 12 00 | Real Audio file |
| ra; ram | 2E 72 61 FD | Real Audio File |
| ra | 2E 72 61 FD 00 | RealAudio streaming media file |
| RAR | 52 61 72 | |
| rar | 52 61 72 21 | RAR Archive File |
| RAW | 06 05 00 | |
| reg | 52 45 47 45 44 49 54 34 | |
| rgb | 01 DA 01 01 00 03 | Silicon Graphics RGB Bitmap |
| RM | 2E 52 4D | |
| rm; rmvb | 2E 52 4D 46 | Real Media streaming media file |
| rpm | ED AB EE DB | RPM Archive File |
| RTD | 43 23 2B 44 A4 43 4D A5 48 64 72 | RagTime document file |
| RTF | 7B 5C 72 | |
| rtf | 7B 5C 72 74 66 | Rich Text Format File |
| sav | 24 46 4C 32 40 28 23 29 20 53 50 53 53 20 44 41 54 41 20 46 49 4C 45 | SPSS Data file |
| SBV | 46 45 44 46 | (Unknown file type) |
| SCH | 2A 76 65 | |
| scm | 80 53 43 | |
| SH3 | 48 48 47 42 31 | Harvard Graphics presentation file |
| SHD | 4B 49 00 00 | Windows 9x printer spool file |
| sit | 53 49 54 21 | Stuffit v1 Archive File |
| sit | 53 74 75 66 66 49 74 | Stuffit v5 Archive File |
| sle | 3A 56 45 52 53 49 4F 4E | Surfplan kite project file |
| sle | 41 43 76 | teganos Security Suite virtual secure drive |
| sly; srt; slt | 53 52 01 00 | Sage sly.or.srt.or.slt |
| SMD | 00 FF FF | |
| snm | 00 1E 84 90 00 00 00 00 | Netscape Communicator (v4) mail folder |
| SNP | 4D 53 43 46 | Microsoft Access Snapshot Viewer file |
| sol | 00 BF | Adobe Flash shared object file (e.g., Flash cookies) |
| spl | 00 00 01 00 | Windows NT/2000/XP printer spool file |
| SCR | 4D 5A | Screen saver |
| SUB | FF FF FF | |
| SWF | 43 57 53 | Shockwave Flash file (v5+) |
| SWF | 46 57 53 | Macromedia Shockwave Flash player file |
| sxc | calc | OpenOffice Calc |
| sxd | draw | OpenOffice Draw |
| sxi | impress | OpenOffice Impress |
| sxm | math | OpenOffice Math |
| sxw | writer | OpenOffice Writer |
| syw | 41 4D 59 4F | Harvard Graphics symbol graphic |
| TAG | 00 00 02 | |
| tar; cpio | 30 37 30 37 30 37 | CPIO Archive File |
| tar.z | 1F 9D 90 | Compressed tape archive file |
| tga | 00 00 10 00 00 | RLE压缩的前5字节 |
| TGA | 00 00 02 | |
| tga | 00 00 02 00 00 | 未压缩的前5字节 |
| TIF; TIFF | 49 20 49 | Tagged Image File Format file |
| tif; tiff | 49 49 2A | TIFF (Intel) |
| tif; tiff | 49 49 2A 00 | Tagged Image File Format file (little endian, i.e., LSB first in the byte; Intel) |
| TIF; TIFF | 4D 4D 00 2A | Tagged Image File Format file (big endian, i.e., LSB last in the byte; Motorola) |
| tif; tiff | 4D 4D 2A | TIFF (Motorola) |
| TIF; TIFF | 4D 4D 00 2B | BigTIFF files; Tagged Image File Format files >4 GB |
| TLB | 4D 53 46 54 02 00 01 00 | OLE, SPSS, or Visual C++ type library file |
| tr1 | 01 10 | Novell LANalyzer capture file |
| TST | 00 01 00 | |
| TTF | 00 01 00 | |
| ufa | 55 46 41 | UFA Archive File |
| VBX | 4D 5A | VisualBASIC application |
| VCD | 45 4E 54 52 59 56 43 44 02 00 00 01 02 00 18 58 | VideoVCD (GNU VCDImager) file |
| vcf | 42 45 47 49 4E 3A 56 43 41 52 44 0D 0A | vCard file |
| vob | 00 00 01 BA | DVD Video Movie File (video/dvd, video/mpeg) |
| VXD, 386 | 4D 5A | Windows virtual device drivers |
| WAV | 52 49 46 | |
| wav | 57 41 56 45 | Wave |
| wav | 57 41 56 45 66 6D 74 | Wave Files |
| wb2 | 00 00 02 00 | QuattroPro for Windows Spreadsheet file |
| wb3 | [24 byte offset] 3E 00 03 00 FE FF 09 00 06 | Quatro Pro for Windows 7.0 Notebook file |
| wk1; wks | 20 00 60 40 60 | Lotus 123 v1 Worksheet |
| wk1 | 00 00 02 00 06 04 06 00 08 00 00 00 00 00 | Lotus 1-2-3 spreadsheet (v1) file |
| wk3 | 00 00 1A 00 00 10 04 00 | Lotus 123 spreadsheet (v3) file |
| wk4; wk5 | 00 00 1A 00 02 10 04 00 | Lotus 1-2-3 spreadsheet (v4, v5) file |
| wks | 0E 57 4B 53 | DeskMate Worksheet |
| WMA | 30 26 B2 | |
| wmf | 01 00 09 00 | Graphics Metafile |
| wmf | 01 00 09 00 00 03 | Windows Metadata file (Win 3.x format) |
| wmf | 02 00 09 00 | Graphics Metafile |
| wmf | D7 CD C6 9A | Windows Meta File |
| WMV | 30 26 B2 | |
| wp | FF 57 50 43 | WordPerfect v5 or v6 |
| wpd | FF 57 50 43 | WordPerfect |
| wpg | FF 57 50 47 | WordPerfect Graphics |
| wri | 31 BE | Microsoft Write file |
| WRI | 31 BE 00 | |
| wri | 32 BE | Microsoft Write file |
| ws | 1D 7D | WordStar Version 5.0/6.0 document |
| XBE | 58 42 45 | |
| xdr | 3C | BizTalk XML-Data Reduced Schema file |
| xls | 09 02 06 00 00 00 10 00 B9 04 5C 00 | MS Excel v2 |
| xls | 09 04 06 00 00 00 10 00 F6 05 5C 00 | MS Excel v4 |
| XLS | D0 CF 11 | |
| xls | D0 CF 11 E0 | MS Excel |
| xls | [512 byte offset] 09 08 10 00 00 06 05 00 | Excel spreadsheet subheader (MS Office) |
| XML | 3C 3F 78 | |
| xml | 3C 3F 78 6D 6C | XML Document |
| xml | FF FE 3C 00 52 00 4F 00 4F 00 54 00 53 00 54 00 55 00 42 00 | XML Document (ROOTSTUB) |
| XMV | 00 50 01 | |
| XSL | FF FE 3C | |
| xul | 72 73 69 6F 6E 3D 22 31 3C 3F 78 6D 6C 20 76 65 2E 30 22 3F 3E | XML User Interface Language file |
| z | 1F 9D | TAR Compressed Archive File |
| Z | 1F 9D 8C | |
| ZIP | 50 4B 03 | |
| zip; jar; zipx | 50 4B 03 04 | ZIP Archive |
| zip | 50 4B 30 30 | ZIP Archive (outdated) |
| Zip | 50 4B 30 30 50 4B 03 04 | WINZIP Compressed |
| zoo | 5A 4F 4F 20 | ZOO Archive File |