Microsoft Forms 2.1 DataObject

1c3b4210-f441-11ce-b9ea-00aa006b1a69
Microsoft Forms 2.1 DataObject

1c3b4210-f441-11ce-b9ea-00aa006b1a69 1995-09-21 18:12:52⋮20240· 4f10 Microsoft Forms 2.1 DataObject

CLSID

Version	1
Variant	specified in RFC 4122
urn	urn:uuid:1c3b4210-f441-11ce-b9ea-00aa006b1a69
Hexdump	1c3b4210f44111ceb9ea00aa006b1a69
Bytes	␜;B␐⌠A␑╬╣Ω␀¬␀k␚i
Clock ID	14826
Clock ID (hex)	0x39ea
Timestamp, RFC	1995-09-21 18:12:52
Timestamp, MS	2013-12-08 18:12:52
Timestamp, UNIX	2382-12-08 18:12:52
Raw hex timestamp	0x1cef4411c3b4210
Raw timestamp	130309999724020240
Sub-millisecond timestamp	20240
MAC Address	00aa006b1a69
is_local bit	False
is_multicast bit	False
MAC Manufacturer	Intel
UUIDv1	timestamp + clock_id + version (1) + node ID (MAC)
MAC Date	1998-09-25, wireshark.org, 00aa00/24

UUID registration form :

Microsoft Forms 2.1 DataObject

w8ex86o2013 vault7wiki InProcServer32:C:\Windows\system32\FM20.DLL

1 cia vault7 pushes

Microsoft Forms 2.1 DataObject

w7px86o2010 vault7wiki InProcServer32:C:\Windows\system32\FM20.DLL

0 cia vault7 pushes

CLSID Microsoft Forms 2.1 DataObject

from https://montcs.bloomu.edu/~bobmon/DigFor/2012.HTCIA-conference/HTCIA-HBGary/HTCIA/Responder/Responder%202/Program%20Files/COMdata.txt

0 website author

Microsoft Forms 2.1 DataObject

RFCTIM
from https://misc.daniel-marschall.de/projects/guid_analysis/guid.txt

0 autopush - dmde

Microsoft Forms 2.1 DataObject

can be used to access clipboard data
(Malwrologist @DissectMalware)

0 DissectMalware

MSI:CAR TOOLS version 1.0 by Rayan Electronic

-2 autopush - heh :D

MSI:PowerDesign 2.0 version 2.0 by GE Energy – Industrial solutions

-2 autopush - heh :D

MSI:ProVPN version 1.0.0 by VPNIZ

-2 autopush - heh :D

1c3b4210-f441-11ce-b9ea-00aa006b1a69Microsoft Forms 2.1 DataObject