Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

unknown CLSID 00020907-0000-0000-C000-000000000046 #571

Closed
TAbdiukov opened this issue May 14, 2020 · 2 comments
Closed

unknown CLSID 00020907-0000-0000-C000-000000000046 #571

TAbdiukov opened this issue May 14, 2020 · 2 comments
Assignees
@decalage2
Labels
clsid common.clsid module 👍 enhancement
Milestone
oletools 0.56

Comments

@TAbdiukov
Copy link

TAbdiukov commented May 14, 2020 •
edited
Loading

rtfobj 0.55 on Python 3.7.7 - http://decalage.info/python/oletools

=============================================================
File: '1.rtf' - size: 7291421 bytes
---+----------+----------------------------------------------
id |index     |OLE Object
---+----------+----------------------------------------------
0  |0009D07Ch |format_id: 2 (Embedded)
   |          |class name: b'Word.Picture.8'
   |          |data size: 617984
   |          |MD5 = '6d28502bc910a34a3eb04bb31fa5504b'
   |          |CLSID: 00020907-0000-0000-C000-000000000046
   |          |unknown CLSID (please report at
   |          |https://github.com/decalage2/oletools/issues)
---+----------+----------------------------------------------
1  |0041E024h |format_id: 2 (Embedded)
   |          |class name: b'Word.Picture.8'
   |          |data size: 350208
   |          |MD5 = 'dec57f7db29f3c250bdca3ad2c2cf57d'
   |          |CLSID: 00020907-0000-0000-C000-000000000046
   |          |unknown CLSID (please report at
   |          |https://github.com/decalage2/oletools/issues)
---+----------+----------------------------------------------
2  |005E8303h |format_id: 2 (Embedded)
   |          |class name: b'Word.Picture.8'
   |          |data size: 115712
   |          |MD5 = 'abb256cc077971a0345b499f45079471'
   |          |CLSID: 00020907-0000-0000-C000-000000000046
   |          |unknown CLSID (please report at
   |          |https://github.com/decalage2/oletools/issues)
---+----------+----------------------------------------------
3  |0067CC0Ah |format_id: 2 (Embedded)
   |          |class name: b'Word.Picture.8'
   |          |data size: 72192
   |          |MD5 = '2a345aaf5c2e04bc5b05f578ddd42ad8'
   |          |CLSID: 00020907-0000-0000-C000-000000000046
   |          |unknown CLSID (please report at
   |          |https://github.com/decalage2/oletools/issues)
---+----------+----------------------------------------------

Just a common PNG picture. File attached: rus.zip
@decalage2
Copy link
Owner

Thanks, this is the CLSID for "Microsoft Word Picture": https://uuid.pirate-server.com/00020907-0000-0000-c000-000000000046
I'll add it for the next release.

@decalage2 decalage2 self-assigned this May 14, 2020
@decalage2 decalage2 added 👍 enhancement clsid common.clsid module labels May 14, 2020
@decalage2 decalage2 added this to the oletools 0.56 milestone May 14, 2020
@TAbdiukov
Copy link
Author

👍

c-rosenberg pushed a commit to HeinleinSupport/oletools that referenced this issue Sep 16, 2020
@decalage2 @c-rosenberg
clsid: added Microsoft Word Picture (fixes decalage2#571)
6771bc5
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@decalage2 decalage2

Labels
clsid common.clsid module 👍 enhancement
Projects
None yet
Milestone
oletools 0.56
Development

No branches or pull requests
2 participants
@decalage2 @TAbdiukov