{"success":true,"data":{"ext":"ppt","name":"PowerPoint presentation subheader","description":"PowerPoint presentation subheader identifies legacy Microsoft PowerPoint files based on the OLE Compound File format, created by Microsoft for its office document architecture. It is used for PowerPoint presentations and related Office 97–2003 documents stored in the older binary format. This format is obsolete in favor of Office Open XML, and files from untrusted sources should still be handled cautiously because legacy Office documents can contain macros or embedded objects.","mime":["application/vnd.ms-powerpoint"],"risk_level":"Safe","signatures":[{"hex":"D0 CF 11 E0 A1 B1 1A E1","offset":0,"sources":[{"name":"Apache Tika","url":"https://raw.githubusercontent.com/apache/tika/main/tika-core/src/main/resources/org/apache/tika/mime/tika-mimetypes.xml"},{"name":"Wikipedia","url":"https://en.wikipedia.org/wiki/List_of_file_signatures"},{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]},{"hex":"00 6E 1E F0","offset":512,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]},{"hex":"0F 00 E8 03","offset":512,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]},{"hex":"A0 46 1D F0","offset":512,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]},{"hex":"FD FF FF FF 00 00","offset":512,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]}],"related":["pot","pps","key","odp","otp","pptx"],"usage":{"python":"def is_ppt(file_path: str) -> bool:\n    \"\"\"Check if file is a valid PPT by magic bytes.\"\"\"\n    signature = bytes([0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1])\n    with open(file_path, \"rb\") as f:\n        return f.read(8) == signature","node":"function isPPT(buffer: Buffer): boolean {\n  const signature = Buffer.from([0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1]);\n  return buffer.subarray(0, 8).equals(signature);\n}","go":"func IsPPT(data []byte) bool {\n    signature := []byte{0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}\n    if len(data) < 8 {\n        return false\n    }\n    return bytes.Equal(data[:8], signature)\n}"},"category":"Office"}}