But on looking at the content, it seems they are unrelated. It’s interesting that there are four benign hits submitted in the same timeframe. No Macros, all different submitters, different contentĪll contain original base64 string except two which had macros stripped and one outlier I can divide them into the following categories: Category I’ll triage those by downloading them and looking at their code. If I limit the search to docs ( metadata:"Hamill" tag:doc), then I get 59 hits over the last 90 days (as far back as I can look without a retro hunt). I looked at a couple, and they seemed innocuous. The results are largely docs since 20 May, but many pdfs, and some zips and other things going further back. It’s more than the seed, but not so many that it’s clearly just pulling unrelated documents together. I see a few fields that look interesting and worth pivoting on, such as author, company, and manager: Fieldġ32 is an interesting result. I can see this same data (and more) on the details tab in VT: It will read and write maker notes of most popular digital cameras, allow for numerous output formatting options (including tab-delimited, HTML, XML and JSON) along with multilingual output, as well as the ability to quickly extract thumbnail images, preview images, and large JPEG images directly from RAW files.ĮxifTool also can geotag images from GPS track log files (with time drift correction), generate track logs from geotagged images, fix image timestamps, rename files organizing them in directories (by date or by any other meta-information), copy/delete meta information between files (even different-format files), and read/write structured XMP information.$ exiftool cdc216f48ec57a6c822139b6534330e8feea8b7bc83ad85614fa52ca372413c2įile Name : cdc216f48ec57a6c822139b6534330e8feea8b7bc83ad85614fa52ca372413c2įile Modification Date/Time : 2019:05:20 05:57:46-07:00įile Access Date/Time : 2019:05:20 05:57:44-07:00įile Inode Change Date/Time : 2019:05:20 05:57:46-07:00Ĭomp Obj User Type : Microsoft Word 97-2003 DocumentĬomments : Small Soft Shirt systems RepresentativeĬode Page : Windows Latin 1 (Western European)
This highly customizable tool allows a great deal of personalization and offers fast and flexible features that will make it usable in almost any situation. It supports many different metadata formats including EXIF, GPS, IPTC, XMP, JFIF, GeoTIFF, ICC Profile, Photoshop IRB, FlashPix, AFCP, and ID3, as well as the maker notes of many digital cameras by Canon, Casio, FLIR, FujiFilm, GE, HP, JVC/Victor, Kodak, Leaf, Nikon, Nintendo, Minolta/Konica-Minolta, Olympus/Epson, Panasonic/Leica, Pentax/Asahi, Phase One, Reconyx, Ricoh, Samsung, Sanyo, Sigma/Foveon, and Sony. ExifTool is a free command-line application for reading, writing and editing meta information in a wide variety of files.
0 kommentar(er)
