Module malwaredb_types::doc::office95

MS Office “DOCFILE” parsing

Structs

• Clsid
  Clsid is the UUID which matches a Docfile subtype, and the first three segments could be in big or little endian, so we have to check both http://fileformats.archiveteam.org/wiki/Microsoft_Compound_File
• Office95
  A struct representing the older Microsoft Office format, Office95, aka Docfile.

Enums

• ClsidType
  UUID file type, of which only a subset is of interest This is how we can filter out container formats, like .msi (installer) files.