Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: InfoSec Handlers Diary Blog - Internet Storm Center Diary 2018-07-04 InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

XPS Metadata

Published: 2018-07-04
Last Updated: 2018-07-04 22:09:46 UTC
by Didier Stevens (Version: 1)
0 comment(s)

To answer a question I was asked recently: XPS documents contain metadata too.

As mentioned in diary entry Analyzing XPS files, XPS files follow the Open Packaging Conventions specification. They contain file _rels/.rels (looking inside with zipdump.py):

Making it more readable with xmldump.py:

File _rels/.rels informs us that docProps files contain metadata.

 

 

Didier Stevens
Senior handler
Microsoft MVP
blog.DidierStevens.com DidierStevensLabs.com

Keywords: metadata xps
0 comment(s)
Diary Archives