// REFERENCE

Mach-O (macOS) signature

Signature (hex): FE ED FA CE / CF High risk

A macOS executable (Mach-O) starts with FE ED FA CE (32-bit) or FE ED FA CF (64-bit). «Universal» binaries use CA FE BA BE, which collides with Java's signature.

Related tools

Work with this in:

Related

Signatures verifiable with CyberEscudo's magic-bytes identifier. Educational content.