SLTechnology News&Howtos › Network Security ›

Comparison of file header features

Shulou Source: shulou.com Published: 2022-06-01 04:26:41 10月04日 Update

Provided by a colleague.

Many times we need to determine the file format through hexadecimal, this time we need to look at the file header.

JPEG (jpg), header: FFD8FF

PNG (png), header: 89504E47

GIF (gif), header: 47494638

TIFF (tif), header: 49492A00

Windows Bitmap (bmp), header: 424D

CAD (dwg), header: 41433130

Adobe Photoshop (psd), header: 38425053

Rich Text Format (rtf), header: 7B5C727466

XML (xml), header: 3C3F786D6C

HTML (html), header: 68746D6C3E

Email [thorough only] (eml), header: 44656C69766572792D646174653A

Outlook Express (dbx), header: CFAD12FEC5FD746F

Outlook (pst), header: 2142444E

MS Word/Excel (xls.or.doc), header: D0CF11E0

MS Access (mdb), header: 5374616E64617264204A

WordPerfect (wpd), header: FF575043

Postscript (eps.or.ps), header: 252150532D41646F6265

Adobe Acrobat (pdf), header: 255044462D312E

Quicken (qdf), header: AC9EBD8F

Windows Password (pwl), header: E3828596

ZIP Archive (zip), header: 504B0304

RAR Archive (rar), header: 52617221

Wave (wav), header: 57415645

AVI (avi), header: 41564920

Real Audio (ram), header: 2E7261FD

Real Media (rm), header: 2E524D46

MPEG (mpg), header: 000001BA

MPEG (mpg), header: 000001B3

Quicktime (mov), header: 6D6F6F76

Windows Media (asf), header: 3026B2758E66CF11

MIDI (mid), header: 4D546864