Hi,
Can someone help me understand what file types these odttf files are,
and how to read/process them from the command-line in Linux? They
don't appear to be ODT/opendoc files...
# unzip -v ReceiptCopy.xps
Archive: ReceiptCopy.xps
Length Method Size Cmpr Date Time CRC-32 Name
-------- ------ ------- ---- ---------- ----- -------- ----
1114 Defl:S 369 67% 01-01-1980 00:00 69806908 [Content_Types].xml
567 Defl:S 262 54% 01-01-1980 00:00 3d240957 _rels/.rels
3035 Stored 3035 0% 01-01-1980 00:00 ac45855a
docProps/thumbnail.jpeg
564 Defl:S 302 47% 01-01-1980 00:00 9cb7485f docProps/core.xml
287 Defl:S 201 30% 01-01-1980 00:00 87cc1f54
Documents/1/_rels/FixedDoc.fdoc.rels
320 Defl:S 169 47% 01-01-1980 00:00 995f1f4a FixedDocSeq.fdseq
527552 Defl:N 175690 67% 01-01-1980 00:00 29acb8c5
Resources/35C561F7-7839-2B70-8645-C6316E7C7171.odttf
61580 Defl:N 28219 54% 01-01-1980 00:00 1913bf31
Resources/36B649E7-77A2-20FE-FC19-80636F6E6148.odttf
266980 Defl:N 107750 60% 01-01-1980 00:00 3e418bc1
Resources/71CF76BB-7E19-70D9-3161-0E48B6763460.odttf
1184 Defl:S 371 69% 01-01-1980 00:00 e6f3d9ce
Documents/1/Pages/_rels/1.fpage.rels
282 Defl:S 160 43% 01-01-1980 00:00 e61ebc08
Documents/1/FixedDoc.fdoc
386 Defl:N 188 51% 01-01-1980 00:00 90f4368e
Documents/1/Structure/DocStructure.struct
46506 Defl:N 2929 94% 01-01-1980 00:00 365034a9
Documents/1/Pages/1.fpage
8258 Stored 8258 0% 01-01-1980 00:00 4fa38f20
Resources/Images/image_0.jpg
290 Stored 290 0% 01-01-1980 00:00 ec086686
Resources/Images/image_1.png
481 Stored 481 0% 01-01-1980 00:00 389453a4
Resources/Images/image_2.png
4394 Defl:N 376 91% 01-01-1980 00:00 b1e0312e
Documents/1/Structure/Fragments/1.frag
-------- ------- --- -------
923780 329050 64% 17 files
Thanks,
Alex
On Thu, Aug 16, 2018 at 9:21 PM Alex <mysqlstud...@gmail.com> wrote:
>
> Hi,
> Another XPS phish that made it through the filters, is not tagged by
> clamav, and for some reason was not blocked by amavisd outright after
> adding odttf to the file type banned list.
>
> https://pastebin.com/u9tRFakz
>
> Hundreds of others were, however. What's different?
