decalage2/oletools

clsid/ftguess: add ZED container format

decalage2 opened this issue · 0 comments

Add CLSID 00000FE0-8804-4CA8-8868-36F59DEFD14D
Also ZED containers always have a stream named "5haaaaqaIekzeecnWj31zxh0Nc", which could be checked in ftguess for better identification.
Source: https://filext.com/file-extension/ZED - https://www.zedencrypt.com
ZED containers are encrypted.