2024-01-02: Site is back on track, self-hosted on a rpi because you get the Internet you fund. 2025-02-06: Oh well, some power grid issues caused the rpi to reboot, I really should configure uwsgi to restart automatically --'
| Version | 1 |
| Variant | specified in RFC 4122 |
| urn | urn:uuid:73fddc80-aea9-101a-98a7-00aa00374959 |
| Hexdump | 73fddc80aea9101a98a700aa00374959 |
| Bytes | s²▄Ç«⌐␐␚ÿº␀¬␀7IY |
| Clock ID | 6311 |
| Clock ID (hex) | 0x18a7 |
| Timestamp, RFC | 1606-08-02 14:00:21 |
| Timestamp, MS | 1624-10-19 14:00:21 |
| Timestamp, UNIX | 1993-10-19 14:00:21 |
| Raw hex timestamp | 0x1aaea973fddc80 |
| Raw timestamp | 7510392213200000 |
| Sub-millisecond timestamp | 0 |
| MAC Address | 00aa00374959 |
| is_local bit | False |
| is_multicast bit | False |
| MAC Manufacturer | Intel |
| UUIDv1 | timestamp + clock_id + version (1) + node ID (MAC) |
| MAC Date | 1998-09-25, wireshark.org, 00aa00/24 |
w71ux64o2010 vault7wiki InProcServer32:
w81x64o2013 vault7wiki InProcServer32:
w8ex86o2013 vault7wiki InProcServer32:
w7px86o2010 vault7wiki InProcServer32:
CLSID,
AppID: {fd6c8b29-e936-4a61-8da6-b0c12ad3ba00}
LocalizedString: @C:\Program Files\Windows NT\Accessories\WORDPAD.EXE,-209
DefaultIcon.: "C:\Program Files\Windows NT\Accessories\WORDPAD.EXE",1
InprocHandler32.: ole32.dll
LocalServer32.: "C:\Program Files\Windows NT\Accessories\WORDPAD.EXE"
MiscStatus.: 0
PersistentHandler.: {2e2294a9-50d7-4fe7-a09f-e6492e185884}
ProgId.: WordPad.Document.1
from https://montcs.bloomu.edu/~bobmon/DigFor/2012.HTCIA-conference/HTCIA-HBGary/HTCIA/Responder/Responder%202/Program%20Files/COMdata.txt
RFCTIM from https://misc.daniel-marschall.de/projects/guid_analysis/guid.txt
Windows 98 Registry object: reg-clsid name: WordPad — dokument key: None from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-win98.xml
Windows Vista Registry object: reg-clsid name: WordPad Document key: None from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml
HKCR,Wordpad.Document.1\CLSID,,,{73FDDC80-AEA9-101A-98A7-00AA00374959}
in ./WINDOWS/INF/WORDPAD.INF:140
HKCR,rtffile\CLSID,,,{73FDDC80-AEA9-101A-98A7-00AA00374959}
in ./WINDOWS/INF/WORDPAD.INF:147
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\DefaultIcon,,,"%24%\%PROGRAMF%\%ACCESSOR%\WORDPAD.EXE,0"
in ./WINDOWS/INF/WORDPAD.INF:149
HKCR,wrifile\CLSID,,,{73FDDC80-AEA9-101A-98A7-00AA00374959}
in ./WINDOWS/INF/WORDPAD.INF:155
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959},,,%WORDPAD_DOC%
in ./WINDOWS/INF/WORDPAD.INF:160
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\DefaultIcon,,,"%24%\%PROGRAMF%\%ACCESSOR%\WORDPAD.EXE,1"
in ./WINDOWS/INF/WORDPAD.INF:161
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\LocalServer32,,,"%24%\%PROGRAMF%\%ACCESSOR%\WORDPAD.EXE"
in ./WINDOWS/INF/WORDPAD.INF:162
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\ProgId,,,WordPad.Document.1
in ./WINDOWS/INF/WORDPAD.INF:163
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\MiscStatus,,,0
in ./WINDOWS/INF/WORDPAD.INF:164
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\AuxUserType\3,,,"%WORDPAD_LINK%"
in ./WINDOWS/INF/WORDPAD.INF:165
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\AuxUserType\2,,,"%WORDPAD_DOC%"
in ./WINDOWS/INF/WORDPAD.INF:166
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\Insertable,,,
in ./WINDOWS/INF/WORDPAD.INF:167
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\verb\1,,,"%OPEN%,0,2"
in ./WINDOWS/INF/WORDPAD.INF:168
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\verb\0,,,"%EDIT%,0,2"
in ./WINDOWS/INF/WORDPAD.INF:169
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\InprocHandler32,,,ole32.dll
in ./WINDOWS/INF/WORDPAD.INF:170
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\DataFormats\PriorityCacheFormats,"Rich Text Format",,""
in ./WINDOWS/INF/WORDPAD.INF:171
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\LocalServer
in ./WINDOWS/INF/WORDPAD.INF:196
HKCR,CLSID\{73FDDC80-AEA9-101A-98A7-00AA00374959}\InprocHandler
in ./WINDOWS/INF/WORDPAD.INF:197
w10.clsid AppID:{fd6c8b29-e936-4a61-8da6-b0c12ad3ba00} LocalizedString:@C:\Program Files\Windows NT\Accessories\WORDPAD.EXE,-209