| Version | 1 |
| Variant | specified in RFC 4122 |
| urn | urn:uuid:ecabafc6-7f19-11d2-978e-0000f8757e2a |
| Hexdump | ecabafc67f1911d2978e0000f8757e2a |
| Bytes | ∞½»╞␙␑╥ùÄ␀␀°u~* |
| Clock ID | 6030 |
| Clock ID (hex) | 0x178e |
| Timestamp, RFC | 1998-11-18 19:07:26 |
| Timestamp, MS | 2017-02-04 19:07:26 |
| Timestamp, UNIX | 2386-02-04 19:07:26 |
| Raw hex timestamp | 0x1d27f19ecabafc6 |
| Raw timestamp | 131307088468750278 |
| Sub-millisecond timestamp | 50278 |
| MAC Address | 0000f8757e2a |
| is_local bit | False |
| is_multicast bit | False |
| MAC Manufacturer | DigitalE |
| UUIDv1 | timestamp + clock_id + version (1) + node ID (MAC) |
| MAC Date | 1998-04-22, deepmac.org, 0000f8/24 |
w10.clsid
w81x64o2013 vault7wiki InProcServer32:C:\Windows\System32\comsvcs.dll
w8ex86o2013 vault7wiki InProcServer32:C:\Windows\System32\comsvcs.dll
w7px86o2010 vault7wiki InProcServer32:C:\Windows\system32\comsvcs.dll
CLSID, InprocServer32.: C:\Windows\system32\comsvcs.dll InprocServer32.ThreadingModel: Both ProgID.: new
from https://montcs.bloomu.edu/~bobmon/DigFor/2012.HTCIA-conference/HTCIA-HBGary/HTCIA/Responder/Responder%202/Program%20Files/COMdata.txt
RFCTIM from https://misc.daniel-marschall.de/projects/guid_analysis/guid.txt
Windows Vista Registry
object: reg-clsid
name: New Moniker
key: None
inproc-server : {
"file": "C:\\Windows\\system32\\comsvcs.dll",
"product-version": "6.0.6000.16386",
"product": "Microsoft\u00ae Windows\u00ae Operating System"
}
from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml
CLSID from https://github.com/decalage2/oletools/blob/master/oletools/common/clsid.py