Solved

.doc, .xls, .ppt Magic Bytes?

Posted on 2006-10-27
3
1,170 Views
Last Modified: 2008-01-09
Does anyone know the true "magic bytes" for .doc, .xls and .ppt.

I have come across the following:

.ppt: d0cf11e0a1b11ae100000000
.xls:  d0cf11e0a1b11ae100
.doc: d0cf11e0a1b11ae1

The problem with those magic bytes is that both xls and ppt's have the extra zeros on the end too.

I have also seen:

fdff at offset 512

this is also common to all office documents.


How can I tell the difference between .doc, .xls and .ppt?

And soon coming with office 2k7 .docx, .xlsx, .pptx?

Thanks

Matt
0
Comment
Question by:essentialtalk
3 Comments
 
LVL 6

Accepted Solution

by:
SCDMETA earned 500 total points
ID: 17824502
1) Could you use the extension?

2) http://www.wotsit.org/default.asp 
Might be a good resource for you.

3) http://www.google.com/codesearch?hl=en&lr=&q=d0cf11e0&btnG=Search

This is a google code search for the OLE signature.  You might be able to find some more magic bytes (or references) by looking at existing code.

Good luck
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Entering a date in Microsoft Access can be tricky. A typo can cause month and day to be shuffled, entering the day only causes an error, as does entering, say, day 31 in June. This article shows how an inputmask supported by code can help the user a…
If you’re thinking to yourself “That description sounds a lot like two people doing the work that one could accomplish,” you’re not alone.
An introduction to basic programming syntax in Java by creating a simple program. Viewers can follow the tutorial as they create their first class in Java. Definitions and explanations about each element are given to help prepare viewers for future …
In this fifth video of the Xpdf series, we discuss and demonstrate the PDFdetach utility, which is able to list and, more importantly, extract attachments that are embedded in PDF files. It does this via a command line interface, making it suitable …

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now