Commit a854e61e56efd70627750ca054a78901d9284c26
Merge branch 'pull/591'
# Conflicts: # oletools/olevba.py
Showing
1 changed file
with
2 additions
and
2 deletions
oletools/olevba.py
| ... | ... | @@ -664,8 +664,8 @@ SUSPICIOUS_KEYWORDS = { |
| 664 | 664 | #TODO: use regex to support variable whitespaces |
| 665 | 665 | #http://www.certego.net/en/news/advanced-vba-macros/ |
| 666 | 666 | 'May read system environment variables': |
| 667 | - ('Environ','Win32_Environment','Environment','ExpandEnvironmentStrings','HKCU\Environment', | |
| 668 | - 'HKEY_CURRENT_USER\Environment'), | |
| 667 | + ('Environ','Win32_Environment','Environment','ExpandEnvironmentStrings','HKCU\\Environment', | |
| 668 | + 'HKEY_CURRENT_USER\\Environment'), | |
| 669 | 669 | 'May open a file': |
| 670 | 670 | ('Open',), |
| 671 | 671 | 'May write to a file (if combined with Open)': | ... | ... |