From 1d012c71f05cbca8854465190bb98676a3b303b3 Mon Sep 17 00:00:00 2001 From: bit111 Date: Fri, 12 May 2017 11:48:10 +0200 Subject: [PATCH] improved WSF file type recognition --- analyzer/windows/lib/core/packages.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/analyzer/windows/lib/core/packages.py b/analyzer/windows/lib/core/packages.py index 11e92452a..26a9c6c43 100644 --- a/analyzer/windows/lib/core/packages.py +++ b/analyzer/windows/lib/core/packages.py @@ -68,7 +68,7 @@ def choose_package(file_type, file_name, exports): return "html" elif file_name.endswith(".hta"): return "hta" - elif file_name.endswith(".wsf") or file_type == "XML document text": + elif ( "XML DOCUMENT" in file_type.upper() or "HTML DOCUMENT" in file_type.upper() or "DATA" in file_type.upper() ) and "wsf" in file_name: return "wsf" elif "HTML" in file_type: return "html"