diff --git a/oletools/oledir.py b/oletools/oledir.py index 6ce78cd..4c3154b 100644 --- a/oletools/oledir.py +++ b/oletools/oledir.py @@ -120,9 +120,24 @@ STATUS_COLORS = { } KNOWN_CLSIDS = { - '00020906-0000-0000-C000-000000000046': 'MS Word', + # MS Office files + '00020906-0000-0000-C000-000000000046': 'Microsoft Word 97-2003 Document', + # OLE Objects '0002CE02-0000-0000-C000-000000000046': 'MS Equation Editor (may trigger CVE-2017-11882)', + # OLE Links '00000300-0000-0000-C000-000000000046': 'StdOleLink (embedded OLE object)', + # Monikers + '00000303-0000-0000-C000-000000000046': 'File Moniker', + '00000304-0000-0000-C000-000000000046': 'Item Moniker', + '00000305-0000-0000-C000-000000000046': 'Anti Moniker', + '00000306-0000-0000-C000-000000000046': 'Pointer Moniker', + '00000308-0000-0000-C000-000000000046': 'Packager Moniker', + '00000309-0000-0000-C000-000000000046': 'Composite Moniker', + '0000031a-0000-0000-C000-000000000046': 'Class Moniker', + '0002034c-0000-0000-C000-000000000046': 'OutlookAttachMoniker', + '0002034e-0000-0000-C000-000000000046': 'OutlookMessageMoniker', + '79EAC9E0-BAF9-11CE-8C82-00AA004BA90B': 'URL Moniker', + 'ECABB0C7-7F19-11D2-978E-0000F8757E2A': 'SOAP Moniker', }