New Windows Tool Detects Disguised Malware by Reading File Signatures

A developer has built a Windows application that identifies a file's true type by reading its opening bytes, rather than trusting its extension. The tool compares a file's actual binary signature — such as 'MZ' for executables or '%PDF-' for PDFs — against its claimed extension to flag mismatches and potential dangers. It can also identify files with no extension at all by scoring content features, and sorts flagged files in a dropped folder by threat level. Built in Python using only standard libraries, the app runs entirely offline and never transmits file data externally. It is available exclusively through the Microsoft Store.