// REFERENCE

CAB (Windows Cabinet) signature

Signature (hex): 4D 53 43 46 (MSCF) Medium risk

A Windows Cabinet (.cab) starts with 4D 53 43 46 (MSCF). It's used in installers and updates, and also as a malware container in phishing campaigns.

Related tools

Work with this in:

Related

Signatures verifiable with CyberEscudo's magic-bytes identifier. Educational content.