PowerPoint presentation subheader (.ppt)
.ppt file signature | application/vnd.ms-powerpoint
An Object Linking and Embedding (OLE) Compound File (CF) (i.e.,OLECF)file format, known asCompound Binary File formatby Microsoft, used byMicrosoft Office 97-2003 applications (Word, Powerpoint, Excel, Wizard). Part ofMicrosoft'sStructured Storage (MSS)architecture for Component Object Model (COM)-basedoperating systems.[See also Excel, Outlook, PowerPoint, and Word "subheaders" at byte offset 512 (0x200).]There appear to several subheader formats and a dearth of documentation.There have been re
Magic Bytes
Offset 0
D0 CF 11 E0 A1 B1 1A E1
Sources: Apache Tika, Wikipedia, Gary Kessler
All Known Signatures
6 signature variants are documented for .ppt files across multiple sources.
| Hex Signature | Offset | Sources |
|---|---|---|
| D0 CF 11 E0 A1 B1 1A E1 | 0 | Apache Tika, Wikipedia, Gary Kessler |
| 51 20 BE FF E0 6E 1E F0 | 0 | Gary Kessler |
| 51 20 BE FF E0 00 E8 03 | 0 | Gary Kessler |
| 51 20 BE FF EA 46 1D F0 | 0 | Gary Kessler |
| CF FA ED FE | 0 | Gary Kessler |
| 51 20 BE FF EF FF FF FF 00 00 | 0 | Gary Kessler |
Extension
.ppt
MIME Type
application/vnd.ms-powerpoint
Byte Offset
0
Risk Level
Safe
Validation Code
How to validate .ppt files in Python
def is_ppt(file_path: str) -> bool:
"""Check if file is a valid PPT by magic bytes."""
signature = bytes([0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1])
with open(file_path, "rb") as f:
return f.read(8) == signatureHow to validate .ppt files in Node.js
function isPPT(buffer: Buffer): boolean {
const signature = Buffer.from([0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1]);
return buffer.subarray(0, 8).equals(signature);
}How to validate .ppt files in Go
func IsPPT(data []byte) bool {
signature := []byte{0xD0, 0xCF, 0x11, 0xE0, 0xA1, 0xB1, 0x1A, 0xE1}
if len(data) < 8 {
return false
}
return bytes.Equal(data[:8], signature)
}API Endpoint
/api/v1/ppt
curl https://filesignature.org/api/v1/ppt
See the full API documentation for all endpoints and parameters.
Frequently Asked Questions
What is a .ppt file?
A .ppt file is a PowerPoint presentation subheader file. An Object Linking and Embedding (OLE) Compound File (CF) (i.e.,OLECF)file format, known asCompound Binary File formatby Microsoft, used byMicrosoft Office 97-2003 applications (Word, Powerpoint, Excel, Wizard). Part ofMicrosoft'sStructured Storage (MSS)architecture for Component Object Model (COM)-basedoperating systems.[See also Excel, Outlook, PowerPoint, and Word "subheaders" at byte offset 512 (0x200).]There appear to several subheader formats and a dearth of documentation.There have been re
What are the magic bytes for .ppt files?
The magic bytes for PowerPoint presentation subheader files are D0 CF 11 E0 A1 B1 1A E1 at byte offset 0. These bytes uniquely identify the file format regardless of the file extension.
How do I validate a .ppt file?
To validate a .ppt file, read the first bytes of the file and compare them against the known magic bytes (D0 CF 11 E0 A1 B1 1A E1) at offset 0. This is more reliable than checking the file extension alone, as extensions can be renamed.
What is the MIME type for .ppt files?
The primary MIME type for .ppt files is application/vnd.ms-powerpoint.
Is it safe to open .ppt files?
PowerPoint presentation subheader (.ppt) files are generally safe to open. They are classified as low risk because they primarily contain data rather than executable code. However, always ensure files come from a trusted source.