Hi Tim, when you say detection, you mean the type of OLE document? , e.g. word, excel, powerpoint ...
Instead of reading the directory entries, you could also read the storage_clsid of the root record. But I haven't checked yet, where this information is located in the file. Andi
signature.asc
Description: OpenPGP digital signature
