View Issue Details

IDProjectCategoryView StatusLast Update
0000417fileGeneralpublic2023-01-24 20:46
Reporterrebus Assigned Tochristos  
PrioritynormalSeverityfeatureReproducibilityalways
Status resolvedResolutionfixed 
Product Version5.42 
Fixed in Version5.45 
Summary0000417: filetype for Microsoft OneNote files is not detected
DescriptionFile utility currently doesn't recognize the format of the OneNote files from Microsoft . As it starts to be used as a vector for spreading malware is becomes interesting to have the recognition for the format in the file utility.
Steps To Reproduce$ file test.one
test.one: data

Additional InformationOneNote files start with the magic bytes:
- E4525C7B8CD8A74DAEB15378D02996D3 - for .one file = GUID {7B5C52E4-D88C-4DA7-AEB1-5378D02996D3} as specified by MS-ONESTORE - https://learn.microsoft.com/en-us/openspecs/office_file_formats/ms-onestore/405b958b-4cb7-4bac-81cc-ce0184249670

- A12FFF43D9EF764C9EE210EA5722765F - for the .onetoc2 filetype = GUID {43FF2FA1-EFD9-4C76-9EE2-10EA5722765F} as specified by the MS-ONESTORE and ONETOC2 - https://learn.microsoft.com/en-us/openspecs/office_file_formats/ms-onestore/2b394c6b-8788-441f-b631-da1583d772fd

Mime type should be probably "application/onenote".


Tagsmagic

Activities

christos

2023-01-24 20:46

manager   ~0003893

Added, thanks!

Issue History

Date Modified Username Field Change
2023-01-17 01:29 rebus New Issue
2023-01-17 01:29 rebus Tag Attached: magic
2023-01-24 20:46 christos Assigned To => christos
2023-01-24 20:46 christos Status new => assigned
2023-01-24 20:46 christos Status assigned => resolved
2023-01-24 20:46 christos Resolution open => fixed
2023-01-24 20:46 christos Fixed in Version => 5.45
2023-01-24 20:46 christos Note Added: 0003893