// REFERENCE
LNK shortcut signature
Signature (hex): 4C 00 00 00
High risk
A Windows shortcut (.lnk) starts with 4C 00 00 00. Malicious LNKs are a heavily used phishing vector: they look like a document but launch hidden commands.
Related tools
Work with this in:
Related
exe
EXE/DLL (PE) signature elf
ELF (Linux) signature macho
Mach-O (macOS) signature class
Java .class signature dex
DEX (Android) signature wasm
WebAssembly signature
EXE/DLL (PE) signature elf
ELF (Linux) signature macho
Mach-O (macOS) signature class
Java .class signature dex
DEX (Android) signature wasm
WebAssembly signature
Signatures verifiable with CyberEscudo's magic-bytes identifier. Educational content.