Peter M. Groen / oletools

Commit 82dd352fc6508e6253507b01fbc0a33120196573

Authored by Philippe Lagadec
Committed by GitHub
2 parents 2aa07c12 991de023

Merge pull request #528 from mlodic/master 

added new Autorun method OnConnecting
Inline Side-by-side
Showing 1 changed file with 1 additions and 1 deletions
oletools/olevba.py
  View file @82dd352
@@ -646,7 +646,7 @@ AUTOEXEC_KEYWORDS_REGEX = { @@ -646,7 +646,7 @@ AUTOEXEC_KEYWORDS_REGEX = {
646 r'\w+_FileDownload', r'\w+_NavigateComplete2', r'\w+_NavigateError', 646 r'\w+_FileDownload', r'\w+_NavigateComplete2', r'\w+_NavigateError',
647 r'\w+_ProgressChange', r'\w+_PropertyChange', r'\w+_SetSecureLockIcon', 647 r'\w+_ProgressChange', r'\w+_PropertyChange', r'\w+_SetSecureLockIcon',
648 r'\w+_StatusTextChange', r'\w+_TitleChange', r'\w+_MouseMove', r'\w+_MouseEnter', 648 r'\w+_StatusTextChange', r'\w+_TitleChange', r'\w+_MouseMove', r'\w+_MouseEnter',
649 - r'\w+_MouseLeave', r'\w+_Layout'), 649 + r'\w+_MouseLeave', r'\w+_Layout', r'\w+_OnConnecting'),
650 } 650 }
651 651
652 # Suspicious Keywords that may be used by malware 652 # Suspicious Keywords that may be used by malware