oledump Indicators
2020-11-15 22:51:37 Author: blog.didierstevens.com(查看原文) 阅读量:323 收藏

Sunday 15 November 2020

oledump Indicators

Each stream and storage can have an indicator in oledump.py‘s output:

You’ll probably know M and m: they are indicators that appear often.

Here is an overview of all possible indicators:

  • M: Macro (attributes and code)
  • m: macro (attributes without code)
  • E: Error (code that throws an error when decompressed)
  • !: Unusual macro (code without attributes)
  • O: object (embedded file)
  • .: storage
  • R: root entry

Leave a Comment »

No comments yet.

RSS feed for comments on this post. TrackBack URI

Leave a Reply (comments are moderated)

This site uses Akismet to reduce spam. Learn how your comment data is processed.


文章来源: https://blog.didierstevens.com/2020/11/15/oledump-indicators/
如有侵权请联系:admin#unsafe.sh