{"success":true,"data":{"ext":"ppa","name":"PPA","description":"PPA is a Microsoft PowerPoint add-in file format developed by Microsoft for extending the application with custom commands, macros, and automation. It is used with PowerPoint presentations and related Office workflows to provide reusable functionality through add-ins and tools. PPA is a legacy format based on older Microsoft Office container technology; it is generally safe to open, but like other macro-enabled files it should be trusted only from verified sources.","mime":["application/vnd.ms-powerpoint"],"risk_level":"Safe","signatures":[{"hex":"D0 CF 11 E0 A1 B1 1A E1","offset":0,"sources":[{"name":"Apache Tika","url":"https://raw.githubusercontent.com/apache/tika/main/tika-core/src/main/resources/org/apache/tika/mime/tika-mimetypes.xml"}]}],"related":["pot","pps","ppt","ppz"],"usage":{"python":"def is_ppa(file_path: str) -> bool:\n    \"\"\"Check if file is a valid PPA by magic bytes.\"\"\"\n    signature = bytes([0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1])\n    with open(file_path, \"rb\") as f:\n        return f.read(8) == signature","node":"function isPPA(buffer: Buffer): boolean {\n  const signature = Buffer.from([0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1]);\n  return buffer.subarray(0, 8).equals(signature);\n}","go":"func IsPPA(data []byte) bool {\n    signature := []byte{0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}\n    if len(data) < 8 {\n        return false\n    }\n    return bytes.Equal(data[:8], signature)\n}"},"category":"Office"}}