From 05532922f96962a67720260a76159d3c5da5c138 Mon Sep 17 00:00:00 2001 From: decalage2 Date: Mon, 27 Jan 2020 22:02:36 +0100 Subject: [PATCH] mraptor: added detection of the "_OnConnecting" trigger (as in #528) --- oletools/mraptor.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/oletools/mraptor.py b/oletools/mraptor.py index 4a4b741..5f69112 100644 --- a/oletools/mraptor.py +++ b/oletools/mraptor.py @@ -61,7 +61,7 @@ http://www.decalage.info/python/oletools # 2019-04-04 v0.54 PL: - added ExecuteExcel4Macro, ShellExecuteA, XLM keywords # 2019-11-06 v0.55 PL: - added SetTimer -__version__ = '0.55' +__version__ = '0.55.2' #------------------------------------------------------------------------------ # TODO: @@ -121,7 +121,7 @@ re_autoexec = re.compile(r'(?i)\b(?:Auto(?:Exec|_?Open|_?Close|Exit|New)' + r'|DocumentComplete|DownloadBegin|DownloadComplete|FileDownload' + r'|NavigateComplete2|NavigateError|ProgressChange|PropertyChange' + r'|SetSecureLockIcon|StatusTextChange|TitleChange|MouseMove' + - r'|MouseEnter|MouseLeave))|Auto_Ope\b') + r'|MouseEnter|MouseLeave|OnConnecting))|Auto_Ope\b') # TODO: "Auto_Ope" is temporarily here because of a bug in plugin_biff, which misses the last byte in "Auto_Open"... # MS-VBAL 5.4.5.1 Open Statement: -- libgit2 0.21.4