100% Private Local Memory
Zero server uploads. All file analysis runs entirely in your browser using WebAssembly and WebWorkers. Your files never leave your device — perfect for sensitive or confidential data.
Upload up to 100 files of any type. Our engine reads the magic bytes, verifies header structures, checks CRC32 checksums, and runs GPU decode tests to confirm that each file is exactly what it claims to be. Supports 300+ formats across 7 major categories. 100% private, no uploads. Free & unlimited.
ImageVixo Validator Studio is a powerful, browser‑based file integrity verification tool. It reads the magic bytes (file signatures) of any file, analyses its internal structure, validates CRC32 checksums, and tests decodability with GPU‑accelerated rendering. Supports over 300 file extensions across 7 major categories (Image, Document, Archive, Audio, Video, Font, Code & Executables). 100% local, no uploads, complete privacy.
Zero server uploads. All file analysis runs entirely in your browser using WebAssembly and WebWorkers. Your files never leave your device — perfect for sensitive or confidential data.
From image and document standards to archives, audio, video, web fonts, and compiled binaries — detect and verify file types by their physical magic byte headers.
Reads the first and last 64KB byte signatures, verifies PNG/APNG CRC32 checksums, checks JPEG SOI/EOI markers, and tests GPU decodability to detect tampering.
Validate up to 100 files at once. Get a detailed integrity report for each, with clear pass/fail status and format mismatch warnings. Export reports for auditing.
When a file's extension doesn't match its magic bytes, the tool suggests the correct extension and offers an auto‑fix option to rename or transcode the file to the proper format.
Every validation step is logged: header bytes, chunk structure, CRC matches, decode status. Perfect for forensic analysis and quality assurance.
Every file undergoes a non‑blocking, asynchronous 5‑step verification that combines signature analysis, structural integrity, renderability, and security checks:
Reads the first 64KB (and last 64KB for tail markers) to detect the actual file format via magic bytes (e.g., 89 50 4E 47 for PNG, FF D8 for JPEG, %PDF for PDF). It then compares this detected format against the claimed extension using a large family map.
Performs format‑specific container validation: validates PNG IHDR chunks and CRC32 checksums; verifies JPEG SOI (FFD8) and EOI (FFD9) markers; checks ZIP End of Central Directory signatures; confirms PDF %%EOF trailers; and verifies GIF terminal 0x3B bytes.
Attempts to load or parse the file using browser APIs: createImageBitmap() for images; FontFace.load() for typography fonts; and DOMParser for HTML, XML, and SVG to catch syntax and markup errors.
Flags dangerous anomalies and security threats: detects disguised executable payloads (e.g., an executable claiming to be a .jpg but detected as EXE_DLL) and uncovers malicious extension spoofing.
Aggregates all previous audit stages to produce a final pass/fail status. The UI displays an audit log with "Verified" or "Warning" badges on each file card, allowing you to block malicious files, identify corrupt archives, and auto-fix extension names.
The validator engine covers over 300 file extensions across 7 major functional categories:
| Category | Total Supported Extensions & Codecs | Key Magic Bytes & Signatures Checked | Validation Checks Performed |
|---|---|---|---|
| Image | jpg, jpeg, jpe, jfif, pjpeg, pjp, png, apng, gif, webp, avif, avifs, bmp, dib, rle, tif, tiff, svg, svgz, ico, cur, icns, heic, heics, heif, heifs, jp2, j2k, jpf, jpx, jpm, jxr, wdp, hdp, dds, psd, psb, xcf, kra, ora, raw, dng, cr2, cr3, nef, nrw, arw, srf, sr2, orf, rw2, raf, pef, srw, 3fr, iiq, mos, mef, mrw, erf, x3f, bay, cine, qtk, pnm, pbm, pgm, ppm, pam, xbm, xpm |
89 50 4E 47, FF D8, 47 49 46, 52 49 46 46, ftyp |
IHDR CRC32, SOI/EOI Markers, VP8X, GPU Decodability |
| Document | pdf, txt, text, rtf, doc, dot, docx, dotx, docm, dotm, odt, ott, pages, wps, wpd, pdfa, csv, tsv, xls, xlt, xlsx, xlsm, xltx, xltm, xlsb, ods, ots, numbers, ppt, pot, pps, pptx, potx, ppsx, pptm, potm, ppsm, odp, otp, key, epub, mobi, azw, azw3, djvu, djv, xps, oxps, tex, latex, md, markdown |
%PDF, 7B 5C 72 74 66, 50 4B 03 04, D0 CF 11 E0 |
Trailer EOF Checks, OLE2 Structure, ZIP Package Audit |
| Archive | zip, zipx, rar, 7z, tar, gz, tgz, bz, bz2, tbz, tbz2, xz, txz, lz, lzma, z, zst, tz, iso, cab, arj, ace, jar, war, ear, apk, aab, ipa, deb, rpm, pkg, msi, cpio, pax, arc, sit, sitx, dmg, img, vhd, vhdx, vmdk, qcow, qcow2, wim, swm |
50 4B 03 04, 52 61 72 21, 37 7A BC AF, 1F 8B |
Central Directory Headers, Tar Checksums, GZIP Magic |
| Audio | mp3, mp2, mp1, aac, m4a, m4b, m4p, wav, wave, aiff, aif, aifc, flac, ogg, oga, opus, wma, amr, awb, mid, midi, rmi, kar, ra, rm, au, snd, ac3, eac3, dts, dsf, dff, ape, wv, tta, spx, caf, voc, 8svx, it, mod, s3m, xm, mptm, umx |
49 44 33, 66 4C 61 43, 4F 67 67 53, 52 49 46 46 |
ID3 Frame Check, FLAC Headers, Ogg Page Sync |
| Video | mp4, m4v, mov, qt, avi, mkv, webm, wmv, asf, flv, f4v, f4p, f4a, f4b, mpg, mpeg, mpe, mpv, m2v, m2ts, mts, ts, vob, ogv, 3gp, 3g2, rmvb, divx, xvid, mxf, amv, nsv, roq, drc, gxf, y4m |
ftyp, 1A 45 DF A3, 30 26 B2 75, 46 4C 56 |
EBML Matroska Headers, MOOV Atom Verification |
| Font | ttf, otf, ttc, otc, woff, woff2, eot, pfa, pfb, pfm, afm, bdf, pcf, snf, fnt, fon, suit, dfont |
00 01 00 00, 4F 54 54 4F, 77 4F 46 46, 77 4F 46 32 |
FontFace API Load Test, Table Directory Validation |
| Code & Executables | html, htm, shtml, xhtml, css, scss, sass, less, js, mjs, cjs, jsx, ts, tsx, json, jsonc, json5, xml, xsd, xsl, xslt, yaml, yml, toml, ini, cfg, conf, properties, env, log, sql, graphql, gql, php, phtml, asp, aspx, jsp, vue, svelte, astro, py, pyw, java, class, c, cpp, cxx, h, hpp, cs, go, rs, rb, pl, pm, swift, kt, kts, dart, lua, r, m, sh, bash, zsh, fish, ps1, bat, cmd, dockerfile, makefile, cmake, exe, dll, sys, elf, so |
4D 5A, 7F 45 4C 46, CA FE BA BE, <!DOCTYPE |
PE/COFF Headers, ELF Headers, DOMParser XML Syntax |
Ensure your files are legitimate in four easy steps:
Drag & drop up to 100 files or choose a folder — any file type is accepted.
The tool automatically scans each file's magic bytes, structure, CRC, and decodability.
Inspect the detailed report for each file in the sidebar: valid/invalid status and warnings.
Export the validation report or use the auto‑fix feature to correct mislabeled extensions.
Common questions about ImageVixo Validator Studio:
Yes, it is completely free with no limits. All processing happens in your browser.
No. Everything runs locally in your browser using WebAssembly and WebWorkers. Your files never leave your device.
Magic bytes are the first few bytes of a file that identify its actual format. The validator reads these to verify that the file extension matches the real content, helping detect tampering or mislabeling.
Over 300 formats across images, documents, archives, audio, video, fonts, code, and more. The validator can inspect the magic bytes and structure of each.
Yes, you can upload up to 100 files at once and receive a detailed integrity report for each.
Yes. It can suggest the correct extension and, if you enable auto‑fix, it can automatically rename or transcode the file to the proper format.