// REFERENCE
OLE2 signature (legacy DOC/XLS/PPT/MSI)
Signature (hex): D0 CF 11 E0 A1 B1 1A E1
High risk
Microsoft's OLE2 container starts with D0 CF 11 E0 A1 B1 1A E1. It's shared by legacy .doc, .xls, .ppt and .msi. The classic home of malicious macros.
Related tools
Work with this in:
Related
pdf
PDF signature docx
DOCX/XLSX/PPTX signature rtf
RTF signature epub
EPUB signature odt
OpenDocument (ODT/ODS/ODP) signature ps
PostScript (PS/EPS) signature
PDF signature docx
DOCX/XLSX/PPTX signature rtf
RTF signature epub
EPUB signature odt
OpenDocument (ODT/ODS/ODP) signature ps
PostScript (PS/EPS) signature
Signatures verifiable with CyberEscudo's magic-bytes identifier. Educational content.