-
Notifications
You must be signed in to change notification settings - Fork 567
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
clsid - add CLSIDs #861
Comments
FYI the table on JustArchive had some details kept hidden in the comments for weird reasons ?
|
More CLSIDs from AssemblyLine: https://github.com/CybercentreCanada/assemblyline-base/blob/3c2509e2618fb5d55827f6c80ca7f3419cda4de7/assemblyline/common/identify_defaults.py#L2 OLE_CLSID_GUIDs = {
# GUID v0 (0)
"00020803-0000-0000-C000-000000000046": "document/office/word", # "MS Graph Chart"
"00020900-0000-0000-C000-000000000046": "document/office/word", # "MS Word95"
"00020901-0000-0000-C000-000000000046": "document/office/word", # "MS Word 6.0 - 7.0 Picture"
"00020906-0000-0000-C000-000000000046": "document/office/word", # "MS Word97"
"00020907-0000-0000-C000-000000000046": "document/office/word", # "MS Word"
"00020C01-0000-0000-C000-000000000046": "document/office/excel", # "Excel"
"00020821-0000-0000-C000-000000000046": "document/office/excel", # "Excel"
"00020820-0000-0000-C000-000000000046": "document/office/excel", # "Excel97"
"00020810-0000-0000-C000-000000000046": "document/office/excel", # "Excel95"
"00021a14-0000-0000-C000-000000000046": "document/office/visio", # "Visio"
"0002CE02-0000-0000-C000-000000000046": "document/office/equation", # "MS Equation 3.0"
"0003000A-0000-0000-C000-000000000046": "document/office/paintbrush", # "Paintbrush Picture",
"0003000C-0000-0000-C000-000000000046": "document/office/package", # "Package"
"000C1084-0000-0000-C000-000000000046": "document/installer/windows", # "Installer Package (MSI)"
"00020D0B-0000-0000-C000-000000000046": "document/office/email", # "MailMessage"
# GUID v1 (Timestamp & MAC-48)
"29130400-2EED-1069-BF5D-00DD011186B7": "document/office/wordpro", # "Lotus WordPro"
"46E31370-3F7A-11CE-BED6-00AA00611080": "document/office/word", # "MS Forms 2.0 MultiPage"
"5512D110-5CC6-11CF-8D67-00AA00BDCE1D": "document/office/word", # "MS Forms 2.0 HTML SUBMIT"
"5512D11A-5CC6-11CF-8D67-00AA00BDCE1D": "document/office/word", # "MS Forms 2.0 HTML TEXT"
"5512D11C-5CC6-11CF-8D67-00AA00BDCE1D": "document/office/word", # "MS Forms 2.0 HTML Hidden"
"64818D10-4F9B-11CF-86EA-00AA00B929E8": "document/office/powerpoint", # "MS PowerPoint Presentation"
"64818D11-4F9B-11CF-86EA-00AA00B929E8": "document/office/powerpoint", # "MS PowerPoint Presentation"
"11943940-36DE-11CF-953E-00C0A84029E9": "document/office/word", # "MS Photo Editor 3.0 Photo"
"B801CA65-A1FC-11D0-85AD-444553540000": "document/pdf", # "Adobe Acrobat Document"
"A25250C4-50C1-11D3-8EA3-0090271BECDD": "document/office/wordperfect", # "WordPerfect Office"
"C62A69F0-16DC-11CE-9E98-00AA00574A4F": "document/office/word", # "Microsoft Forms 2.0 Form"
"F4754C9B-64F5-4B40-8AF4-679732AC0607": "document/office/word", # Word.Document.12
"BDD1F04B-858B-11D1-B16A-00C0F0283628": "document/office/word", # Doc (see CVE2012-0158)
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
List from http://justsolve.archiveteam.org/wiki/Microsoft_Compound_File :
The text was updated successfully, but these errors were encountered: