From e7aeb0ff7f388009ae48e336d9a8c7e75a2e6da0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=A9r=C3=B4me=20Leonard?= Date: Sat, 7 Mar 2020 08:19:57 +0100 Subject: [PATCH] #705 add known mimetype --- analyzers/FileInfo/submodules/submodule_oletools.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/analyzers/FileInfo/submodules/submodule_oletools.py b/analyzers/FileInfo/submodules/submodule_oletools.py index 4c0f2bab1..9dfb1ad08 100644 --- a/analyzers/FileInfo/submodules/submodule_oletools.py +++ b/analyzers/FileInfo/submodules/submodule_oletools.py @@ -31,7 +31,8 @@ def check_file(self, **kwargs): ] or (kwargs.get('mimetype').startswith("application/vnd.openxmlformats-officedocument") or kwargs.get('mimetype').startswith("application/encrypted") or kwargs.get('mimetype').startswith("application/vnd.ms-") or - kwargs.get('mimetype').startswith("application/msword") + kwargs.get('mimetype').startswith("application/msword") or + kwargs.get('mimetype').startswith("Composite Document File V2 Document") ): if kwargs.get('mimetype').startswith("application/encrypted") and not is_encrypted(kwargs.get('file')): return False