Does anyone know the true "magic bytes" for .doc, .xls and .ppt.
I have come across the following:
The problem with those magic bytes is that both xls and ppt's have the extra zeros on the end too.
I have also seen:
fdff at offset 512
this is also common to all office documents.
How can I tell the difference between .doc, .xls and .ppt?
And soon coming with office 2k7 .docx, .xlsx, .pptx?