// REFERENCE

ZIP signature

Signature (hex): 50 4B 03 04 (PK..) Medium risk

A ZIP starts with 50 4B 03 04 (PK). Note: DOCX, XLSX, JAR, APK and EPUB are also ZIP inside, so they share the signature. Watch for zip bombs and malicious paths (zip slip).

Related tools

Work with this in:

Related

Signatures verifiable with CyberEscudo's magic-bytes identifier. Educational content.