# file
> Determine file type and MIME type using magic bytes

**Category:** [[categories/examine-static-properties-general|Examine Static Properties > General]] | **Tier:** Rich (FOR610)
**Docs:** [https://docs.remnux.org/discover-the-tools/examine+static+properties/general](https://docs.remnux.org/discover-the-tools/examine+static+properties/general)

## Usage
```bash
file specimen.exe
file document.doc
```

## Recipes
- [[recipes/email-attachment-extraction|Extract and Triage Email Attachments]]

## Workflows
- [[workflows/static-analysis-workflow|Static Properties Analysis]] — Step 1: File Identification & Hashing
- [[workflows/document-analysis-workflow|Malicious Document Analysis]] — Step 1: Format Identification
- [[workflows/android-analysis-workflow|Android Malware Analysis]] — Step 1: APK Triage
- [[workflows/java-analysis-workflow|Java Malware Analysis]] — Step 1: Archive Inspection
- [[workflows/email-analysis-workflow|Email & Phishing Analysis]] — Step 3: Attachment Triage

## Related Tools
- [[tools/7-zip|7-Zip]] — Compress and decompress files using a variety of algorithms.
- [[tools/binwalk|binwalk]] — Analyze and extract embedded files and firmware images
- [[tools/bulk-extractor|bulk-extractor]] — Extract interesting strings from binary files.
- [[tools/clamav|ClamAV]] — Open-source antivirus — scan files for known malware signatu
- [[tools/diec|diec]] — Detect packers, compilers, and tools used to create executab

## FOR610
**Labs:** 3.4, 3.5
**Sections:** 3

#file-identification #triage