// REFERENCE
🧬 File signatures (magic bytes)
The hex signature that identifies each format by its content (not its extension), its type and its risks.
// Images
png
PNG signature jpg
JPG/JPEG signature gif
GIF signature bmp
BMP signature webp
WebP signature tiff
TIFF signature ico
ICO signature psd
PSD (Photoshop) signature svg
SVG signature heic
HEIC/HEIF signature avif
AVIF signature icns
ICNS (macOS icon) signature cr2
Canon RAW (CR2) signature
PNG signature jpg
JPG/JPEG signature gif
GIF signature bmp
BMP signature webp
WebP signature tiff
TIFF signature ico
ICO signature psd
PSD (Photoshop) signature svg
SVG signature heic
HEIC/HEIF signature avif
AVIF signature icns
ICNS (macOS icon) signature cr2
Canon RAW (CR2) signature
// Documents
pdf
PDF signature ole
OLE2 signature (legacy DOC/XLS/PPT/MSI) docx
DOCX/XLSX/PPTX signature rtf
RTF signature epub
EPUB signature odt
OpenDocument (ODT/ODS/ODP) signature ps
PostScript (PS/EPS) signature chm
CHM help file signature
PDF signature ole
OLE2 signature (legacy DOC/XLS/PPT/MSI) docx
DOCX/XLSX/PPTX signature rtf
RTF signature epub
EPUB signature odt
OpenDocument (ODT/ODS/ODP) signature ps
PostScript (PS/EPS) signature chm
CHM help file signature
// Archives & packages
zip
ZIP signature gzip
GZIP signature bzip2
BZIP2 signature xz
XZ signature 7z
7z signature rar
RAR signature tar
TAR signature deb
DEB signature rpm
RPM signature iso
ISO signature cab
CAB (Windows Cabinet) signature zstd
Zstandard (zst) signature lz4
LZ4 signature z
compress (.Z) signature wim
WIM (Windows Imaging) signature
ZIP signature gzip
GZIP signature bzip2
BZIP2 signature xz
XZ signature 7z
7z signature rar
RAR signature tar
TAR signature deb
DEB signature rpm
RPM signature iso
ISO signature cab
CAB (Windows Cabinet) signature zstd
Zstandard (zst) signature lz4
LZ4 signature z
compress (.Z) signature wim
WIM (Windows Imaging) signature
// Executables & code
exe
EXE/DLL (PE) signature elf
ELF (Linux) signature macho
Mach-O (macOS) signature class
Java .class signature dex
DEX (Android) signature wasm
WebAssembly signature lnk
LNK shortcut signature swf
Flash SWF signature crx
Chrome extension (CRX) signature jar
JAR (Java) signature
EXE/DLL (PE) signature elf
ELF (Linux) signature macho
Mach-O (macOS) signature class
Java .class signature dex
DEX (Android) signature wasm
WebAssembly signature lnk
LNK shortcut signature swf
Flash SWF signature crx
Chrome extension (CRX) signature jar
JAR (Java) signature
// Audio & video
mp3
MP3 signature mp4
MP4 signature avi
AVI signature mkv
MKV/WebM signature wav
WAV signature flac
FLAC signature ogg
OGG signature flv
Flash Video (FLV) signature midi
MIDI signature aiff
AIFF signature asf
ASF/WMV/WMA signature
MP3 signature mp4
MP4 signature avi
AVI signature mkv
MKV/WebM signature wav
WAV signature flac
FLAC signature ogg
OGG signature flv
Flash Video (FLV) signature midi
MIDI signature aiff
AIFF signature asf
ASF/WMV/WMA signature
// Data & forensics
sqlite
SQLite database signature pcap
PCAP capture signature pcapng
PCAPNG capture signature torrent
.torrent signature eml
EML email signature woff2
WOFF2 font signature ttf
TTF font signature otf
OTF font signature woff
WOFF font signature regf
Registry hive (regf) signature evtx
Event log (EVTX) signature kdbx
KeePass database (KDBX) signature der
DER certificate signature
SQLite database signature pcap
PCAP capture signature pcapng
PCAPNG capture signature torrent
.torrent signature eml
EML email signature woff2
WOFF2 font signature ttf
TTF font signature otf
OTF font signature woff
WOFF font signature regf
Registry hive (regf) signature evtx
Event log (EVTX) signature kdbx
KeePass database (KDBX) signature der
DER certificate signature
Signatures verifiable with CyberEscudo's magic-bytes identifier. Educational content.