Description Extensions Header Offset Footer Default in KB
JPEG jpg;jpeg \xFF\xD8\xFF[\xDB\xE0\xE1\xEB\xEE\xFE\xC4] 0
PNG png \x89PNG\x0D\x0A\x1A\x0A 0 \x49\x45\x4E\x44\xAE\x42\x60\x82
GIF gif GIF8[79]a 0
TIFF tif;tiff (\x49\x49\x2A\x00)|(\x4D\x4D\x00\x2A) 0
MSO Document Image mdi EP\*\x00 0
MS Windows Journal jnt;jtp NB\x2A\x00 0
Bitmap bmp;dib BM.....\x00.\x00....[\x0C\x28\x6C\x7C]\x00 0
AOL ART art \x4A\x47[\x03\x04]\x0E\x00\x00\x00 0
PC Paintbrush pcx \x0A\x05\x01\x08 0
Paint Shop Pro psp (Paint Shop Pro I)|(~BK\x00) 0
High Dynamic Range hdr \#\?RADIANCE 0
Canon RAW crw HEAPCCDR 6
Adobe Photoshop psd 8BPS\x00\x01\x00\x00\x00\x00\x00\x00 0
Graphics Metafile wmf (\xD7\xCD\xC6\x9A)|([\x01\x02]\x00\x09\x00) 0
Enhanced Metafile emf EMF\x00\x00\x01\x00 40
Corel Photopaint cpt CPTFILE 0
Corel Photopaint cpt CPT7FILE 0
Corel Draw cdr CDR 8
Corel Binary Metafile cmx CMX1 8
CAD dwg AC10 0
Rich Text Format rtf \{\\rtf 0
HTML/XML html;htm;php;php3;php4;phtml;shtml;xml;xsd;msc ([\x0D\x0A]{0,9}((<[hH][tT][mM][lL])|(<![dD][oO][cC][tT][yY][pP])|(<!--)|(<\?xml)|(<xs:schema)))|(\xEF\xBB\xBF\x3C)|(\xFF\xFE\x3C\x00) 0
MS Internet Explorer cache dat Client UrlCache 0
AOL PFC pfc;org AOLVM100 0
Mailbox mbox;mbs From 0
Outlook Express dbx \xCF\xAD\x12\xFE 0
Outlook pst;ost !BDN 0
OE addr. book wab \x9C\xCB\xCB\x8D\x13\x75\xD2\x11\x91\x58\x00\xC0\x4F\x79\x56\xA4 0
OE addr. book (Win95) wab \x81\x32\x84\xC1\x85\x05\xD0\x11\xB2\x90\x00\xAA\x00\x3C\xF6\x76 0
vCard vcf BEGIN:VCARD 0 END:VCARD 1
Virtual Calendar File vcs;ics BEGIN:[vV]C[aA][lL][eE][nN][dD][aA][rR] 0
MS Office/OLE2 ole2;doc;xls;dot;ppt;xla;ppa;pps;pot;msi;sdw;db;vsd;msg \xD0\xCF\x11\xE0\xA1\xB1\x1A\xE1 0
MS Office 2007 docx;xlsx;pptx _Types\]\.xml 38
MS Access mdb;mda;mde;mdt;fdb Standard J 4
MS Access 2007 accdb \x00\x01\x00\x00Standard ACE DB 0
MS Money mny \x00\x01\x00\x00MSISAM 0
KWord kwd KOffice application/x-kword 10
RagTime Document rtd \x43\x23\x2B\x44\xA4\x43\x4D\xA5\x48\x64\x72 0
WordPerfect wpd;wp;wp5;wp6;wpp \xFFWPC 0
MS Write wri \x31\xBE\x00\x00\x00\xAB\x00\x00\x00\x00\x00\x00 0
MS Write wri \x32\xBE\x00\x00\x00\xAB\x00\x00\x00\x00\x00\x00 0
MS OneNote one \xE4\x52\x5C\x7B\x8C\xD8\xA7\x4D\xAE\xB1\x53\x78\xD0\x29\x96\xD3 0
OpenOffice Writer sxw;sxg sun\.xml\.writer 54
OpenOffice Calc sxc;stc sun\.xml\.calc 54
OpenOffice Math sxm sun\.xml\.math 54
OpenOffice Impress sxi sun\.xml\.impress 54
OpenOffice Draw sxd;std sun\.xml\.draw 54
OpenOffice 2 Writer ott document\.text-templ 64
OpenOffice 2 Writer odt document\.text 64
OpenOffice 2 Calc ots document\.spreadsheet-templ 64
OpenOffice 2 Calc ods document\.spreads 64
OpenOffice 2 Base odb vnd\.sun\.xml\.base 50
OpenOffice 2 Draw odg document\.graphic 64
OpenOffice 2 Math odf document\.formula 64
OpenOffice 2 Impress odp document\.present 64
Quattro Pro Notebook 6.0 wb2 \x00\x00\x02\x00\x02\x10\xC9\x00\x02\x00\x00\x06 0
PostScript/Adobe ps;eps;ai %!PS-Adobe 0
Adobe FrameMaker fm <MakerFile 0
Adobe Acrobat pdf %PDF\x2D1\x2E 0
Quicken qdf \xAC\x9E\xBD\x8F 0
Quicken qsd QW Ver\. 0
QuickBooks Backup qbb \x45\x86\x00\x00\x06\x00 0
Sage sly.or.srt.or.slt;sly;srt;slt \x53\x52\x01\x00 0
Lotus WordPro v9 lwp WordPro 0
Lotus Ami Pro ami;sam \[ver\] 0
Lotus 123 v9 123 \x00\x00\x1A\x00\x05\x10\x04 0
Lotus 123 v3-5 wk3;wk4;wk5 \x00\x00\x1A\x00[\x00\x02]\x10\x04\x00 0
Lotus 123 v1 wk1 \x20\x00\x60\x40\x60 0
Lotus Notes nsf;ntf \x1A\x00\x00[\x03\x04]\x00\x00 0
Zip Archive zip;jar;xps (PK\x03\x04)|(PK00)|(PK\x05\x06) 0
Jar Archive jar \x5F\x27\xA8\x89 0
RAR Archive rar Rar!\x1a\x07\x00 0
Tar/PAX Archive tar;pax ustar 257
KGB Archive kgb KGB_arch - 0
GZip Archive gz;tgz \x1F\x8B\x08[\x00\x08]....[\x00\x02\x04][\x00-\x12\xFF] 0
BZip Archive bz2 BZ[0h]#\x31\x41\x59\x26 0
ARJ Archive arj \x60\xEA......\x10\x00\x02 0
7-Zip Archive 7z 7z\xBC\xAF\x27 0
Mac Stuffit Self-Extracting Archive sea APPLaust! 65
ACE Archive ace \*\*ACE\*\* 7
BinHex 4.0 hqx must be converted with BinHex 11
Virtual HD vhd conectix 0
Ghost Image gho;ghs \xFE\xEF\x01[\x00-\x03]....[\x00\x01][\x00\x01] 0
Acronis True Image file tib \xB4\x6E\x68\x44 0
Nero CD Compilation nri \x0E\x4E\x65\x72\x6F\x49\x53\x4F\x30 0 \x00LFDU[^\x00]*
Alcohol 120% CD Image mdf \x00\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF\x00\x00\x02\x00\x01 0
Wave wav WAVEfmt 8
MP3 ID3 v2/3/4 mp3 ID3[\x02-\x04]\x00\x00\x00 0
OGG Vorbis ogg OggS\x00 0
Audacity au dns\.\x5c 0
AVI avi AVI LIST 8 10000
4X Movie 4xm 4XMVLIST 8
Windows Media asf;wmv;wma \x30\x26\xB2\x75\x8E\x66\xCF\x11\xA6\xD9\x00\xAA\x00\x62\xCE\x6C 0 10000
MediaPlayer Playlist wpl <\?wpl version= 0
Real Audio ram;ra \.ra� 0
Real Media rm;rmvb \.RMF 0 10000
QuickTime Movie mov moov 4 10000
QuickTime 3GP 3gp ftypisom 4
QuickTime 3GP 3gp ftyp3gp 4
QuickTime 3GP 3gp ftypmmp4 4
QuickTime M4A m4a ftypM4A\x20 4
QuickTime M4V m4v ftypM4V\x20 4
QuickTime MP4 mp4 ftypmp41 4
QuickTime MP4 mp4 ftypmp42 4
Matroska mkv matroska 8
Flash Video flv FLV\x01\x05 0 10000
MIDI mid MThd 0 250
Win9x Registry registry CREG 0
WinNT Registry registry regf 0
Windows Password pwl \xE3\x82\x85\x96 0
Windows Event Log evt \x30\x00\x00\x00LfLe 0
Vista Event Logs evtx ElfFile 0
EFS Private Key file efs;; \x02\x00\x00\x00\x00\x00\x00\x00[^\x00]\x00\x00\x00.\x00\x00\x00..\x00\x00..\x00\x00..\x00\x00\x14\x00 0 1
EFS Master Key file efs;; \x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00[0-9a-f]\x00[0-9a-f]\x00 0 1
Printer Spool 9x shd \x4B\x49\x00\x00..\x00\x00..\x00\x00..\x00\x00 0 1
Printer Spool NT shd \x66\x49\x00\x00......\x00\x00.\x00\x00\x00 0 1
Printer Spool W2K/XP shd \x67\x49\x00\x00.\x00\x00\x00......\x00\x00.\x00\x00\x00 0 4
Printer Spool 2003 shd \x68\x49\x00\x00.\x00\x00\x00......\x00\x00.\x00\x00\x00 0 4
Printer Spool NT/2K/XP spl \x00\x00\x01\x00..\x00\x00\x10\x00\x00\x00..\x00\x00 0
Windows Pagedump dmp PAGEDUMP 0
Heap dump file hdmp MDMP 0
NTFS $LogFile $LogFile;; RSTR\x1E\x00\x09\x00 0 65536
Windows Prefetch pf [\x11\x17]\x00\x00\x00SCCA 0
Task Scheduler job ((\x47\x04)|(\x01\x05))\x01\x00................\x46\x00 0 1
Windows Shortcut lnk \x4C\x00\x00\x00\x01\x14\x02\x00\x00\x00\x00\x00\xC0\x00\x00\x00\x00\x00\x00\x46 0 3
Internet Shortcut url \[InternetShortcut\] 0 1
Internet Shortcut url \[DEFAULT\]\x0D\x0ABASEURL 0 1
Ubuntu Trash trashinfo \[Trash Info\]\x0A 0
KDE cache kdecache 7\x0Ahttp:// 0
Compiled HTML chm;chi ITSF\x03\x00\x00\x00 0
Windows Help hlp;gid (\x3F\x5F\x03\x00)|(\x4C\x4E\x02\x00) 0
MS Help 2.0 its;lit ITOLITLS 0
Windows Exec. exe;dll;drv;vxd;sys;ocx;vbx;com;fon MZ.[\x00-\x02].[\x00-\x02] 0
ELF Object o;ko \x7FELF\x01\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01 0
ELF Executable elf \x7FELF\x01\x01\x01\x00.......\x00\x02 0
ELF Shared Object so \x7FELF\x01\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03 0
PGP pubring pkr;gpg \x99\x01\xA2\x04 0
PGP secring skr \x95\x01\xCF\x04 0
Steganos Safe sle ACL[2-5]\x00 0
PGP Safe pgd PGPdMAIN\x60\x01\x00 0
MS/MSN MARC archive mar MARC\x03 0
Compact Disc Digital Audio (CD-DA) file cda RIFF....CDDAfmt 0
没有合适的资源?快使用搜索试试~ 我知道了~
Winhex Template 78项常见WinHex模板
共78个文件
tpl:74个
txt:4个
5星 · 超过95%的资源 需积分: 50 255 下载量 61 浏览量
2013-01-13
11:09:41
上传
评论 5
收藏 56KB ZIP 举报
温馨提示
使用WinHex可以对二进制信息进行快速分析,本资源包含78项常用的分析模版,包括文件系统NTFS/FAT,磁盘分区表,USB描述符,常见文件格式等。
资源推荐
资源详情
资源评论
收起资源包目录
winhex-tpl.zip (78个子文件)
tpl
UFS directory entry LE.tpl 368B
File Type Signatures Search.txt 7KB
UFS2 Superblock BE.tpl 3KB
Boot Sector FAT32.tpl 1KB
Boot Sector NTFS.tpl 2KB
FSINFO_Sector.tpl 712B
UFS1 Superblock BE.tpl 3KB
POS_File_Format_1.1.tpl 720B
FAT Directory Entry.tpl 912B
Palm PDB 6 records.tpl 4KB
UFS2 Inode BE.tpl 1015B
ZIP_Central_Directory_Structure.tpl 908B
Ext Inode.tpl 1KB
Boot Sector FAT.tpl 1KB
HFSPlus_Index_Node.tpl 545B
EVT_Cursor.tpl 741B
HFS+ Volume Header.tpl 2KB
CDFS Path Tables Ascii.tpl 614B
Dalet BWF file header.txt 3KB
Palm PDB.tpl 2KB
AFP_Structured_Fields.tpl 940B
NTFS Data Runs.tpl 1KB
Dalet VOL file header.txt 695B
EVT_Header.tpl 988B
FAT32_Entry.tpl 561B
CDFS Directory Entry Unicode.tpl 1KB
NTFS FILE Record.tpl 2KB
BCF配置文件.tpl 139B
UFS1 Cylinder Group Descriptor LE.tpl 1KB
USB Interface Desc.tpl 288B
Reiser4 Superblock.tpl 1013B
CDFS Directory Entry Ascii.tpl 1KB
UFS1 Inode BE.tpl 692B
Reiser4 Stat Data.tpl 2KB
UFS directory entry BE.tpl 377B
Reiser4 Directory Entries.tpl 1KB
Reiser4 Item Header Small.tpl 1KB
HFSPlus_Volume_Header.tpl 2KB
LNK FILE Record.tpl 2KB
TIFF File Format.tpl 1KB
CDFS Path Tables Unicode.tpl 631B
TCF Cell File header.tpl 2KB
ZIP_Local_File_Header_Structure.tpl 759B
TCF Header.tpl 853B
HFSPlus_Catalog_Key.tpl 2KB
UFS2 Superblock LE.tpl 3KB
TCF Point.tpl 348B
Reiser Superblock.tpl 1KB
Master Boot Record.tpl 1KB
FAT LFN Entry.tpl 711B
UFS1 Inode LE.tpl 683B
Reiser4 Item Header Large.tpl 1KB
Ext Directory Entry.tpl 586B
Ext Group Descriptor.tpl 453B
USB Device Desc.tpl 370B
UFS2 Inode LE.tpl 1006B
ZIP.tpl 3KB
WAVPCM.tpl 955B
JFS Superblock.tpl 1KB
POS_File_Format_2.0.tpl 775B
Ext Superblock.tpl 3KB
SFF_File_Format.tpl 1KB
Non-Unicode LNK FILE Record.tpl 2KB
HFSPlus_B-Tree_Header.tpl 1KB
UFS1 Superblock LE.tpl 3KB
BMP.tpl 947B
TIFF File IFD.tpl 691B
UFS1 Cylinder Group Descriptor BE.tpl 1KB
UFS2 Cylinder Group Descriptor BE.tpl 1011B
EVT_Event.tpl 2KB
ZIP_End_of_Central_Dir_Structure.tpl 651B
USB Config Desc.tpl 551B
CDFS Volume Descriptor.tpl 3KB
Reiser4 Node Header.tpl 561B
FAT16_Entry.tpl 528B
Dalet SND file header.txt 763B
UFS2 Cylinder Group Descriptor LE.tpl 1002B
ZIP_Data_Descriptor_Structure.tpl 406B
共 78 条
- 1
iamabadguy
- 粉丝: 3
- 资源: 1
上传资源 快速赚钱
- 我的内容管理 展开
- 我的资源 快来上传第一个资源
- 我的收益 登录查看自己的收益
- 我的积分 登录查看自己的积分
- 我的C币 登录后查看C币余额
- 我的收藏
- 我的下载
- 下载帮助
安全验证
文档复制为VIP权益,开通VIP直接复制
信息提交成功
- 1
- 2
- 3
- 4
- 5
前往页