Commit 05532922f96962a67720260a76159d3c5da5c138
1 parent
8dbe9228
mraptor: added detection of the "_OnConnecting" trigger (as in #528)
Showing
1 changed file
with
2 additions
and
2 deletions
oletools/mraptor.py
| ... | ... | @@ -61,7 +61,7 @@ http://www.decalage.info/python/oletools |
| 61 | 61 | # 2019-04-04 v0.54 PL: - added ExecuteExcel4Macro, ShellExecuteA, XLM keywords |
| 62 | 62 | # 2019-11-06 v0.55 PL: - added SetTimer |
| 63 | 63 | |
| 64 | -__version__ = '0.55' | |
| 64 | +__version__ = '0.55.2' | |
| 65 | 65 | |
| 66 | 66 | #------------------------------------------------------------------------------ |
| 67 | 67 | # TODO: |
| ... | ... | @@ -121,7 +121,7 @@ re_autoexec = re.compile(r'(?i)\b(?:Auto(?:Exec|_?Open|_?Close|Exit|New)' + |
| 121 | 121 | r'|DocumentComplete|DownloadBegin|DownloadComplete|FileDownload' + |
| 122 | 122 | r'|NavigateComplete2|NavigateError|ProgressChange|PropertyChange' + |
| 123 | 123 | r'|SetSecureLockIcon|StatusTextChange|TitleChange|MouseMove' + |
| 124 | - r'|MouseEnter|MouseLeave))|Auto_Ope\b') | |
| 124 | + r'|MouseEnter|MouseLeave|OnConnecting))|Auto_Ope\b') | |
| 125 | 125 | # TODO: "Auto_Ope" is temporarily here because of a bug in plugin_biff, which misses the last byte in "Auto_Open"... |
| 126 | 126 | |
| 127 | 127 | # MS-VBAL 5.4.5.1 Open Statement: | ... | ... |