unknown CLSID 00020907-0000-0000-C000-000000000046

[TAbdiukov]

rtfobj 0.55 on Python 3.7.7 - http://decalage.info/python/oletools

=============================================================
File: '1.rtf' - size: 7291421 bytes
---+----------+----------------------------------------------
id |index     |OLE Object
---+----------+----------------------------------------------
0  |0009D07Ch |format_id: 2 (Embedded)
   |          |class name: b'Word.Picture.8'
   |          |data size: 617984
   |          |MD5 = '6d28502bc910a34a3eb04bb31fa5504b'
   |          |CLSID: 00020907-0000-0000-C000-000000000046
   |          |unknown CLSID (please report at
   |          |https://github.com/decalage2/oletools/issues)
---+----------+----------------------------------------------
1  |0041E024h |format_id: 2 (Embedded)
   |          |class name: b'Word.Picture.8'
   |          |data size: 350208
   |          |MD5 = 'dec57f7db29f3c250bdca3ad2c2cf57d'
   |          |CLSID: 00020907-0000-0000-C000-000000000046
   |          |unknown CLSID (please report at
   |          |https://github.com/decalage2/oletools/issues)
---+----------+----------------------------------------------
2  |005E8303h |format_id: 2 (Embedded)
   |          |class name: b'Word.Picture.8'
   |          |data size: 115712
   |          |MD5 = 'abb256cc077971a0345b499f45079471'
   |          |CLSID: 00020907-0000-0000-C000-000000000046
   |          |unknown CLSID (please report at
   |          |https://github.com/decalage2/oletools/issues)
---+----------+----------------------------------------------
3  |0067CC0Ah |format_id: 2 (Embedded)
   |          |class name: b'Word.Picture.8'
   |          |data size: 72192
   |          |MD5 = '2a345aaf5c2e04bc5b05f578ddd42ad8'
   |          |CLSID: 00020907-0000-0000-C000-000000000046
   |          |unknown CLSID (please report at
   |          |https://github.com/decalage2/oletools/issues)
---+----------+----------------------------------------------

Just a common PNG picture. File attached: rus.zip

[decalage2]

Thanks, this is the CLSID for "Microsoft Word Picture": https://uuid.pirate-server.com/00020907-0000-0000-c000-000000000046
I'll add it for the next release.

[TAbdiukov]

👍