#550 new encrypted document mimetype

TheHive-Project · Oct 21, 2019 · 0221f9c · 0221f9c
1 parent 5586743
commit 0221f9c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/analyzers/FileInfo/submodules/submodule_oletools.py b/analyzers/FileInfo/submodules/submodule_oletools.py
@@ -30,7 +30,8 @@ def check_file(self, **kwargs):
                 'PPTX'
             ] or (kwargs.get('mimetype').startswith("application/vnd.openxmlformats-officedocument") or
                  kwargs.get('mimetype').startswith("application/encrypted") or
-                 kwargs.get('mimetype').startswith("application/vnd.ms-")
+                 kwargs.get('mimetype').startswith("application/vnd.ms-") or
+                 kwargs.get('mimetype').startswith("application/msword")
             ):
                 if kwargs.get('mimetype').startswith("application/encrypted") and not is_encrypted(kwargs.get('file')):
                     return False