// REFERENCE
DOCX/XLSX/PPTX signature
Signature (hex): 50 4B 03 04 (PK, ZIP)
Medium risk
Modern Office documents (OOXML) are ZIP: they start with 50 4B 03 04. The extension isn't enough to tell a DOCX from a ZIP; you must look inside. They can also carry macros (.docm).
Related tools
Work with this in:
Related
pdf
PDF signature ole
OLE2 signature (legacy DOC/XLS/PPT/MSI) rtf
RTF signature epub
EPUB signature odt
OpenDocument (ODT/ODS/ODP) signature ps
PostScript (PS/EPS) signature
PDF signature ole
OLE2 signature (legacy DOC/XLS/PPT/MSI) rtf
RTF signature epub
EPUB signature odt
OpenDocument (ODT/ODS/ODP) signature ps
PostScript (PS/EPS) signature
Signatures verifiable with CyberEscudo's magic-bytes identifier. Educational content.