File Signatures and Magic Bytes: Trust the Header, Not the Extension
Summary
An extension is a label anyone can change; the first bytes of a file are much harder to fake. A practical guide to magic bytes, extension spoofing, polyglots, container formats like OOXML, ISO and LNK, and carving files out of raw data.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data