https://blog.csdn.net/GerZhouGengCheng/article/details/125236371
文件签名 说的就是 二进制的 文件头 或文件尾,, 是用来表示文件类型的。
比如 JPG文件的二进制开头是 FF D8 FF ,这就是它的文件签名。 修改了这个会导致文件打不开,实现隐藏的目的。
所以文件签名修复,就是 推测文件头,并修复其二进制信息,使得其还原成其本来的类型,能用对应的工具打开。
更新于2022-06-11
这是一个文件签名列表,用于识别或验证文件内容的数据。此类签名也称为幻数或魔术字节。
许多文件格式不打算作为文本阅读。如果这样的文件不小心被视为文本文件,其内容将难以理解。但是,有时文件签名在解释为文本时可以被识别。ISO 8859-1列显示了文件签名在解释为常见ISO 8859-1编码中的文本时的显示方式,不可打印字符表示为控制代码缩写或符号,或可用的代码页 1252 字符,或其他框。在某些情况下,为了清楚起见,空格字符显示为 ␠。
| Hex signature | ISO 8859-1 | Offset | Extension | Description |
| 23 21
| #!
| 0 | | Script or data to be passed to the program following the shebang (#!) |
| D4 C3 B2 A1
(little-endian) | Ôò¡
| 0 | pcap | Libpcap File Format[1] |
| A1 B2 C3 D4
(big-endian) | ¡²ÃÔ
|
| 4D 3C B2 A1
(little-endian) | M<²¡
| 0 | pcap | Libpcap File Format (nanosecond-resolution)[1] |
| A1 B2 3C 4D
(big-endian) | ¡²<M
|
| 0A 0D 0D 0A
| ␊␍␍␊
| 0 | pcapng | PCAP Next Generation Dump File Format[2] |
| ED AB EE DB
| í«îÛ
| 0 | rpm | RedHat Package Manager (RPM) package [3] |
| 53 51 4C 69 74 65 20 66 6F 72 6D 61 74 20 33 00
| SQLite format 3␀
| 0 | sqlitedb
sqlite
db | SQLite Database [4] |
| 53 50 30 31
| SP01
| 0 | bin | Amazon Kindle Update Package [5] |
| 00
| ␀
| 0 | PIC
PIF
SEA
YTR | IBM Storyboard bitmap file
Windows Program Information File
Mac Stuffit Self-Extracting Archive
IRIS OCR data file |
| 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
| ␀␀␀␀␀␀␀␀ ␀␀␀␀␀␀␀␀ ␀␀␀␀␀␀␀␀
| 11 | PDB | PalmPilot Database/Document File |
| BE BA FE CA
| ¾ºþÊ
| 0 | DBA | Palm Desktop Calendar Archive |
| 00 01 42 44
| ␀␁BD
| 0 | DBA | Palm Desktop To Do Archive |
| 00 01 44 54
| ␀␁DT
| 0 | TDA | Palm Desktop Calendar Archive |
| 54 44 46 24
| TDF$
| 0 | TDFSDI0001| 0 | | [System Deployment Image](https://en.wikipedia.org/wiki/System_Deployment_Image "System Deployment Image"), a disk image format used by [Microsoft](https://en.wikipedia.org/wiki/Microsoft "Microsoft") | |
4F 67 67 53|
OggS| 0 | ogg oga ogv | [Ogg](https://en.wikipedia.org/wiki/Ogg "Ogg"), an [open source](https://en.wikipedia.org/wiki/Open-source_license "Open-source license") media container format | |
38 42 50 53|
8BPS| 0 | psd | Photoshop Document file, [Adobe Photoshop](https://en.wikipedia.org/wiki/Adobe_Photoshop "Adobe Photoshop")'s native file format | |
52 49 46 46 ?? ?? ?? ??
57 41 56 45|
RIFF????WAVE| 0 | wav | [Waveform Audio File Format](https://en.wikipedia.org/wiki/Waveform_Audio_File_Format "Waveform Audio File Format") | |
52 49 46 46 ?? ?? ?? ??
41 56 49 20|
RIFF????AVI␠| 0 | avi | [Audio Video Interleave](https://en.wikipedia.org/wiki/Audio_Video_Interleave "Audio Video Interleave") video format | |
FF FBFF F3
FF F2
|
ÿûÿó
ÿò
| 0 | mp3 | [MPEG-1 Layer 3](https://en.wikipedia.org/wiki/MPEG-1_Layer_3 "MPEG-1 Layer 3") file without an [ID3](https://en.wikipedia.org/wiki/ID3 "ID3") tag or with an [ID3v](https://en.wikipedia.org/wiki/ID3 "ID3")1 tag (which is appended at the end of the file) | |
49 44 33|
ID3| 0 | mp3 | [MP3](https://en.wikipedia.org/wiki/MP3 "MP3") file with an ID3v2 container | |
42 4D|
BM| 0 | bmp dib | [BMP](https://en.wikipedia.org/wiki/BMP_file_format "BMP file format") file, a [bitmap](https://en.wikipedia.org/wiki/Bitmap "Bitmap") format used mostly in the [Windows](https://en.wikipedia.org/wiki/Windows "Windows") world | |
43 44 30 30 31|
CD001| 0x8001 0x8801 0x9001 | iso | [ISO9660](https://en.wikipedia.org/wiki/ISO9660 "ISO9660") CD/DVD image file<sup>[[26]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-26)</sup> | |
53 49 4D 50 4C 45 20 20
3D 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20
20 20 20 20 20 54|
SIMPLE␠␠
=␠␠␠␠␠␠␠
␠␠␠␠␠␠␠␠
␠␠␠␠␠T| 0 | fits | Flexible Image Transport System ([FITS](https://en.wikipedia.org/wiki/FITS "FITS"))<sup>[[27]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-27)</sup> | |
66 4C 61 43|
fLaC| 0 | flac | [Free Lossless Audio Codec](https://en.wikipedia.org/wiki/Free_Lossless_Audio_Codec "Free Lossless Audio Codec")<sup>[[28]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-28)</sup> | |
4D 54 68 64|
MThd| 0 | mid midi | [MIDI sound file](https://en.wikipedia.org/wiki/MIDI#Standard_MIDI_files "MIDI")<sup>[[29]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-29)</sup> | |
D0 CF 11 E0 A1 B1 1A E1|
ÐÏ␑ࡱ␚á| 0 | doc xls ppt msi msg | [Compound File Binary Format](https://en.wikipedia.org/wiki/Compound_File_Binary_Format "Compound File Binary Format"), a container format defined by Microsoft COM. It can contain the equivalent of files and directories. It is used by [Windows Installer](https://en.wikipedia.org/wiki/Windows_Installer "Windows Installer") and for documents in older versions of [Microsoft Office](https://en.wikipedia.org/wiki/Microsoft_Office "Microsoft Office").<sup>[[30]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-30)</sup> It can be used by other programs as well that rely on the COM and OLE API's. | |
64 65 78 0A 30 33 35 00|
dex␊035␀| 0 | dex | [Dalvik](https://en.wikipedia.org/wiki/Dalvik_%28software%29 "Dalvik (software)") Executable | |
4B 44 4D|
KDM| 0 | vmdk | VMDK files<sup>[[31]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-31)</sup><sup>[[32]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-32)</sup> | |
43 72 32 34|
Cr24| 0 | crx | [Google Chrome](https://en.wikipedia.org/wiki/Google_Chrome "Google Chrome") extension<sup>[[33]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-33)</sup> or packaged app<sup>[[34]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-34)</sup> | |
41 47 44 33|
AGD3| 0 | fh8 | [FreeHand](https://en.wikipedia.org/wiki/Adobe_FreeHand "Adobe FreeHand") 8 document<sup>[[35]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-35)</sup><sup>[[36]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-36)</sup><sup>[[37]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-37)</sup> | |
05 07 00 00 42 4F 42 4F
05 07 00 00 00 00 00 00
00 00 00 00 00 01|
␅␇␀␀BOBO
␅␇␀␀␀␀␀␀
␀␀␀␀␀␁| 0 | cwk | [AppleWorks](https://en.wikipedia.org/wiki/AppleWorks "AppleWorks") 5 document | |
06 07 E1 00 42 4F 42 4F
06 07 E1 00 00 00 00 00
00 00 00 00 00 01|
␆␇á␀BOBO
␆␇á␀␀␀␀␀
␀␀␀␀␀␁| 0 | cwk | [AppleWorks](https://en.wikipedia.org/wiki/AppleWorks "AppleWorks") 6 document | |
45 52 02 00 00 00|
ER␂␀␀␀| 0 | toast | [Roxio Toast](https://en.wikipedia.org/wiki/Roxio_Toast "Roxio Toast") disc image file | |
8B 45 52 02 00 00 00|
‹ER␂␀␀␀| |
6B 6F 6C 79|
koly| end–512 | dmg | [Apple Disk Image](https://en.wikipedia.org/wiki/Apple_Disk_Image "Apple Disk Image") file | |
78 61 72 21|
xar!| 0 | xar | [eXtensible ARchive](https://en.wikipedia.org/wiki/Xar_%28archiver%29 "Xar (archiver)") format<sup>[[38]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-38)</sup> | |
50 4D 4F 43 43 4D 4F 43|
PMOCCMOC| 0 | dat | Windows Files And Settings Transfer Repository<sup>[[39]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-39)</sup> See also USMT 3.0 (Win XP)<sup>[[40]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-40)</sup> and USMT 4.0 (Win 7)<sup>[[41]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-41)</sup> User Guides | |
4E 45 53 1A|
NES␚| 0 | nes | Nintendo Entertainment System ROM file<sup>[[42]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-42)</sup> | |
75 73 74 61 72 00 30 3075 73 74 61 72 20 20 00
|
ustar␀00ustar␠␠␀
| 257 | tar | [tar archive](https://en.wikipedia.org/wiki/Tar_%28computing%29 "Tar (computing)")<sup>[[43]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-43)</sup> | |
4F 41 52 ??|
OAR?| 0 | oar | OAR file archive format, where ?? is the format version. | |
74 6F 78 33|
tox3| 0 | tox | Open source portable voxel file<sup>[[44]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-44)</sup> | |
4D 4C 56 49|
MLVI| 0 | MLV | [Magic Lantern](https://en.wikipedia.org/wiki/Magic_Lantern_%28firmware%29 "Magic Lantern (firmware)") Video file<sup>[[45]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-45)</sup> | |
44 43 4D 01 50 41 33 3050 41 33 30
|
DCM␁PA30PA30
| 0 | | Windows Update [Binary Delta Compression](https://en.wikipedia.org/wiki/Binary_delta_compression "Binary delta compression") file<sup>[[46]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-46)</sup> | |
37 7A BC AF 27 1C|
7z¼¯'␜| 0 | 7z | 7-Zip File Format | |
1F 8B|
␟‹| 0 | gz tar.gz | [GZIP](https://en.wikipedia.org/wiki/GZIP "GZIP") compressed file<sup>[[47]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-47)</sup> | |
FD 37 7A 58 5A 00|
ý7zXZ␀| 0 | xz tar.xz | [XZ](https://en.wikipedia.org/wiki/XZ_Utils "XZ Utils") compression utility using [LZMA2](https://en.wikipedia.org/wiki/Lempel%E2%80%93Ziv%E2%80%93Markov_chain_algorithm "Lempel–Ziv–Markov chain algorithm") compression | |
04 22 4D 18|
␄"M␘| 0 | lz4 | [LZ4 Frame Format](https://en.wikipedia.org/wiki/LZ4_%28compression_algorithm%29 "LZ4 (compression algorithm)")<sup>[[48]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-48)</sup> Remark: LZ4 block format does not offer any magic bytes.<sup>[[49]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-49)</sup> | |
4D 53 43 46|
MSCF| 0 | cab | Microsoft Cabinet file | |
53 5A 44 44 88 F0 27 33|
SZDDˆð'3| 0 | ??_ | Microsoft compressed file in [Quantum](https://en.wikipedia.org/wiki/Data_compression "Data compression") format, used prior to Windows XP. File can be decompressed using Extract.exe or Expand.exe distributed with earlier versions of Windows. After compression, the last character of the original filename extension is replaced with an [underscore](https://en.wikipedia.org/wiki/Underscore "Underscore"), e.g. ‘Setup.exe’ becomes ‘Setup.ex_’. | |
46 4C 49 46|
FLIF| 0 | flif | [Free Lossless Image Format](https://en.wikipedia.org/wiki/Free_Lossless_Image_Format "Free Lossless Image Format") | |
1A 45 DF A3|
␚Eߣ| 0 | mkv mka mks mk3d webm | [Matroska](https://en.wikipedia.org/wiki/Matroska "Matroska") media container, including [WebM](https://en.wikipedia.org/wiki/WebM "WebM") | |
4D 49 4C 20|
MIL␠| 0 | stg | "SEAN : Session Analysis" Training file. Also used in compatible software "Rpw : [Rowperfect](https://en.wikipedia.org/wiki/Rowperfect "Rowperfect") for Windows" and "RP3W : ROWPERFECT3 for Windows". | |
41 54 26 54 46 4F 52 4D
?? ?? ?? ?? 44 4A 56|
AT&TFORM????DJV| 0 | djvu djv | [DjVu](https://en.wikipedia.org/wiki/DjVu "DjVu") document The following byte is either
55(
U) for single-page or
4D(
M) for multi-page documents. | |
30 82|
0‚| 0 | der | DER encoded X.509 certificate | |
44 49 43 4D|
DICM| 128 | dcm | [DICOM Medical File Format](https://en.wikipedia.org/wiki/DICOM "DICOM") | |
77 4F 46 46|
wOFF| 0 | woff | [WOFF File Format 1.0](https://www.w3.org/TR/2012/REC-WOFF-20121213/) | |
77 4F 46 32|
wOF2| 0 | woff2 | [WOFF File Format 2.0](https://www.w3.org/TR/WOFF2/) | |
3C 3F 78 6D 6C 20|
<?xml␠| 0 after BOM | xml | [eXtensible Markup Language](https://en.wikipedia.org/wiki/XML "XML")<sup>[[20]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-XML-20)</sup><sup>[[50]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-50)</sup> | |
3C 00 3F 00 78 00 6D 00
6C 00 20|
<␀?␀x␀m␀l␀␠␀| |
00 3C 00 3F 00 78 00 6D
00 6C 00 20|
␀<␀?␀x␀m␀l␀␠| |
3C 00 00 00 3F 00 00 00
78 00 00 00 6D 00 00 00
6C 00 00 00 20 00 00 00|
<␀␀␀?␀␀␀
x␀␀␀m␀␀␀
l␀␀␀␠␀␀␀| |
00 00 00 3C 00 00 00 3F
00 00 00 78 00 00 00 6D
00 00 00 6C 00 00 00 20|
␀␀␀<␀␀␀?
␀␀␀x␀␀␀m
␀␀␀l␀␀␀␠| |
4C 6F A7 94 93 40|
Lo§”“@| |
00 61 73 6D|
␀asm| 0 | wasm | [WebAssembly](https://en.wikipedia.org/wiki/WebAssembly "WebAssembly") binary format<sup>[[51]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-51)</sup> | |
CF 84 01|
Ï„␁| 0 | lep | [Lepton](https://blog.csdn.net/w/index.php?title=Lepton_image_compression_format&action=edit&redlink=1 "Lepton image compression format (page does not exist)") compressed JPEG image<sup>[[52]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-52)</sup> | |
43 57 53|
CWS| 0 | swf | [Adobe Flash](https://en.wikipedia.org/wiki/Adobe_Flash "Adobe Flash") .swf | |
46 57 53|
FWS| |
21 3C 61 72 63 68 3E 0A|
!<arch>␊| 0 | deb | linux deb file | |
52 49 46 46 ?? ?? ?? ??
57 45 42 50|
RIFF????WEBP| 0 | webp | Google WebP image file, where ?? ?? ?? ?? is the file size. More information on [WebP File Header](https://developers.google.com/speed/webp/docs/riff_container#webp_file_header) | |
27 05 19 56|
'␅␙V| 0 | | U-Boot / uImage. [Das U-Boot](https://en.wikipedia.org/wiki/Das_U-Boot "Das U-Boot") Universal Boot Loader.<sup>[[53]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-53)</sup> | |
7B 5C 72 74 66 31|
{\rtf1| 0 | rtf | Rich Text Format | |
54 41 50 45|
TAPE| 0 | | [Microsoft Tape Format](https://en.wikipedia.org/wiki/Microsoft_Tape_Format "Microsoft Tape Format") | |
47|
G| 0 0xBC 0x178 ... (every 188th byte) | ts tsv tsa mpg mpeg | MPEG Transport Stream (MPEG-2 Part 1)<sup>[[54]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-54)</sup> | |
00 00 01 BA|
␀␀␁º| 0 | m2p vob mpg mpeg | MPEG Program Stream (MPEG-1 Part 1 (essentially identical) and MPEG-2 Part 1) | |
00 00 01 B3|
␀␀␁³| 0 | mpg mpeg | MPEG-1 video and MPEG-2 video (MPEG-1 Part 2 and MPEG-2 Part 2) | |
66 74 79 70 69 73 6F 6D|
ftypisom| 4 | mp4 | ISO Base Media file (MPEG-4) | |
78 01|
x␁| 0 | zlib | No Compression (no preset dictionary) | |
78 5E|
x^| Best speed (no preset dictionary) | |
78 9C|
xœ| Default Compression (no preset dictionary) | |
78 DA|
xÚ| Best Compression (no preset dictionary) | |
78 20|
x␠| No Compression (with preset dictionary) | |
78 7D|
x}| Best speed (with preset dictionary) | |
78 BB|
x»| Default Compression (with preset dictionary) | |
78 F9|
xù| Best Compression (with preset dictionary) | |
62 76 78 32|
bvx2| 0 | lzfse | LZFSE - Lempel-Ziv style data compression algorithm using Finite State Entropy coding. OSS by Apple.<sup>[[55]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-55)</sup> | |
4F 52 43|
ORC| 0 | orc | [Apache ORC](https://en.wikipedia.org/wiki/Apache_ORC "Apache ORC") (Optimized Row Columnar) file format | |
4F 62 6A 01|
Obj␁| 0 | avro | [Apache Avro](https://en.wikipedia.org/wiki/Apache_Avro "Apache Avro") binary file format | |
53 45 51 36|
SEQ6| 0 | rc | [RCFile](https://en.wikipedia.org/wiki/RCFile "RCFile") columnar file format | |
65 87 78 56|
e‡xV| 0 | p25 obt | PhotoCap Object Templates | |
55 55 AA AA|
UUªª| 0 | pcv | PhotoCap Vector | |
78 56 34|
xV4| 0 | pbt pdt pea peb pet pgt pict pjt pkt pmt | PhotoCap Template | |
50 41 52 31|
PAR1| 0 | | [Apache Parquet](https://en.wikipedia.org/wiki/Apache_Parquet "Apache Parquet") columnar file format | |
45 4D 58 32|
EMX2| 0 | ez2 | [Emulator Emaxsynth](https://en.wikipedia.org/wiki/E-mu_Emax "E-mu Emax") samples | |
45 4D 55 33|
EMU3| 0 | ez3 iso | [Emulator III](https://en.wikipedia.org/wiki/E-mu_Emulator#The_Emulator_III "E-mu Emulator") synth samples | |
1B 4C 75 61|
␛Lua| 0 | luac | [Lua](https://en.wikipedia.org/wiki/Lua_%28programming_language%29 "Lua (programming language)") [bytecode](https://en.wikipedia.org/wiki/Bytecode "Bytecode")<sup>[[56]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-56)</sup> | |
62 6F 6F 6B 00 00 00 00
6D 61 72 6B 00 00 00 00|
book␀␀␀␀mark␀␀␀␀| 0 | alias | macOS file Alias<sup>[[57]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-57)</sup> ([Symbolic link](https://en.wikipedia.org/wiki/Symbolic_link "Symbolic link")) | |
5B 5A 6F 6E 65 54 72 61
6E 73 66 65 72 5D|
[ZoneTransfer]| 0 | Identifier | Microsoft Zone Identifier for [URL Security Zones](https://technet.microsoft.com/en-us/windows/ms537183%28v=vs.60%29)<sup>[[58]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-58)</sup> | |
52 65 63 65 69 76 65 64
3A|
Received:| 0 | eml | Email Message var5<sup>[*[citation needed](https://en.wikipedia.org/wikihttps://en.wikipedia.org/wikipedia:Citation_needed "Wikipedia:Citation needed")*]</sup> | |
20 02 01 62 A0 1E AB 07
02 00 00 00|
␠␂␁b⍽␞«␇␂␀␀␀| 0 | tde | Tableau Datasource | |
37 48 03 02 00 00 00 00
58 35 30 39 4B 45 59|
7H␃␂␀␀␀␀X509KEY| 0 | kdb | KDB file | |
85 ?? ?? 03|
…??␃| 0 | pgp | PGP file <sup>[[59]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-59)</sup> | |
28 B5 2F FD|
(µ/ý| 0 | zst | [Zstandard](https://en.wikipedia.org/wiki/Zstandard "Zstandard") compressed file<sup>[[60]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-60)</sup><sup>[[61]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-61)</sup> | |
52 53 56 4B 44 41 54 41|
RSVKDATA| 0 | rs | QuickZip rs compressed archive<sup>[[62]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-62)</sup><sup>[[63]](https://blog.csdn.net/GerZhouGengCheng/article/details/125236371#cite_note-63)</sup> | |
3A 29 0A|
:)␊| 0 | sml | [Smile](https://en.wikipedia.org/wiki/Smile_%28data_interchange_format%29 "Smile (data interchange format)") file | |
4A 6F 79 21|
Joy!| 0 | | [Preferred Executable Format](https://en.wikipedia.org/wiki/Preferred_Executable_Format "Preferred Executable Format") | |
31 0A 30 30|
1␊00| 0 | srt | [SubRip](https://en.wikipedia.org/wiki/SubRip "SubRip") File | |
34 12 AA 55|
4␒ªU| 0 | vpk | VPK file, used to store game data for some [Source Engine](https://en.wikipedia.org/wiki/Source_Engine "Source Engine") games | |
2A 2A 41 43 45 2A 2A|
ACE| 0 | ace | [ACE (compressed file format)](https://en.wikipedia.org/wiki/ACE_%28compressed_file_format%29 "ACE (compressed file format)")<sup>[*[citation needed](https://en.wikipedia.org/wikihttps://en.wikipedia.org/wikipedia:Citation_needed "Wikipedia:Citation needed")*]</sup> | |
60 EA| ``ê
| 0 | arj | ARJ |
| 49 53 63 28
| ISc(
| 0 | cab | InstallShield CAB Archive File |
| 4B 57 41 4A
| KWAJ
| 0 | ??_ | Windows 3.1x Compressed File |
| 53 5A 44 44
| SZDD
| 0 | ??_ | Windows 9x Compressed File |
| 5A 4F 4F
| ZOO
| 0 | zoo | Zoo (file format) |
| 50 31 0A
| P1␊
| 0 | pbm | Portable bitmap |
| 50 32 0A
| P2␊
| 0 | pgm | Portable Gray Map |
| 50 33 0A
| P3␊
| 0 | ppm | Portable Pixmap |
| D7 CD C6 9A
| ×ÍÆš
| 0 | wmf | Windows Metafile |
| 67 69 6D 70 20 78 63 66
| gimp xcf
| 0 | xcf | XCF (file format) |
| 2F 2A 20 58 50 4D 20 2A 2F
| /* XPM */
| 0 | xpm | X PixMap |
| 41 46 46
| AFF
| 0 | aff | Advanced Forensics Format |
| 45 56 46 32
| EVF2
| 0 | Ex01 | EnCase EWF version 2 format |
| 45 56 46
| EVF
| 0 | e01 | EnCase EWF version 1 format |
| 51 46 49
| QFI
| 0 | qcow | qcow file format |
| 52 49 46 46 ?? ?? ?? ?? 41 43 4F 4E
| RIFF????ACON
| 0 | ani | Animated cursor |
| 52 49 46 46 ?? ?? ?? ?? 43 44 44 41
| RIFF????CDDA
| 0 | cda | .cda file |
| 52 49 46 46 ?? ?? ?? ?? 51 4C 43 4D
| RIFF????QLCM
| 0 | qcp | Qualcomm PureVoice file format |
| 52 49 46 58 ?? ?? ?? ?? 46 47 44 4D
(big-endian) | RIFX????FGDM
| 0 | dcr | Adobe Shockwave[64][65][66] |
| 58 46 49 52 ?? ?? ?? ?? 4D 44 47 46
(little-endian) | XFIR????MDGF
|
| 52 49 46 58 ?? ?? ?? ?? 4D 56 39 33
(big-endian) | RIFX????MV93
| 0 | dir
dxr
drx | Macromedia Director file format[67][65][66] |
| 58 46 49 52 ?? ?? ?? ?? 33 39 56 4D
(little-endian) | XFIR????39VM
|
| 46 4C 56
| FLV
| 0 | flv | Flash Video file |
| 3C 3C 3C 20 4F 72 61 63 6C 65 20 56 4D 20 56 69 72 74 75 61 6C 42 6F 78 20 44 69 73 6B 20 49 6D 61 67 65 20 3E 3E 3E
| <<< Orac le VM Vi rtualBox Disk Im age >>>
| 0 | vdi | VirtualBox Virtual Hard Disk file format |
| 63 6F 6E 6E 65 63 74 69 78
| connectix
| 0 | vhd | Windows Virtual PC Virtual Hard Disk file format |
| 76 68 64 78 66 69 6C 65
| vhdxfile
| 0 | vhdx | Windows Virtual PC Windows 8 Virtual Hard Disk file format |
| 49 73 5A 21
| IsZ!
| 0 | isz | Compressed ISO image |
| 44 41 41
| DAA
| 0 | daa | Direct Access Archive PowerISO |
| 4C 66 4C 65
| LfLe
| 0 | evt | Windows Event Viewer file format |
| 50 4D 43 43
| PMCC
| 0 | grp | Windows 3.x Program Manager Program Group file format |
| 4B 43 4D 53
| KCMS
| 0 | icm | ICC profile |
| 72 65 67 66
| regf
| 0 | dat | Windows Registry file |
| 21 42 44 4E
| !BDN
| 0 | pst | Microsoft Outlook Personal Storage Table file |
| 44 52 41 43 4F
| DRACO
| 0 | drc | 3D model compressed with Google Draco[68] |
| 47 52 49 42
| GRIB
| 0 | grib
grib2 | Gridded data (commonly weather observations or forecasts) in the WMO GRIB or GRIB2 format[69] |
| 42 4C 45 4E 44 45 52
| BLENDER
| 0 | blend | Blender File Format[70] |
| 00 00 00 0C 4A 58 4C 20 0D 0A 87 0A
| ␀␀␀␌JXL␠␍␊‡␊
| 0 | jxl | Image encoded in the JPEG XL format[71] |
| FF 0A
| ÿ␊
|
| 00 01 00 00 00
| ␀␁␀␀␀
| 0 | ttf
tte
dfont | TrueType font |
| 4F 54 54 4F
| OTTO
| 0 | otf | OpenType font[72] |
| 23 25 4D 6F 64 75 6C 65
| #%Module
| 0 | | Modulefile for Environment Modules[73] |
| 4D 53 57 49 4D 00 00 00 D0 00 00 00 00
| MSWIM␀␀␀Ð␀␀␀␀
| 0 | wim
swm
esd | Windows Imaging Format file |
| 21 2D 31 53 4C 4F 42 1F
| !-1SLOB␟
| 0 | slob | Slob (sorted list of blobs) is a read-only, compressed data store with dictionary-like interface[74] |
| AC ED
| | 0 | | Serialized Java Data[75] |