Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Office 365 / Office 2021 not present in ReplaceOfficeVersionInVBAProject #53

Open
strictlymike opened this issue Jul 30, 2022 · 0 comments

Comments

@strictlymike
Copy link

I noted that 32-bit Office 365 saves macro documents with a VBA Project version of B2 00, which I didn't expect because I thought it to be associated with 2016x64 and 2019x64:
https://github.com/outflanknl/EvilClippy/blob/master/evilclippy.cs#L508

Didier Stevens wrote about this phenomenon and didn't seem to reach a conclusion on why this is:
https://isc.sans.edu/diary/Office+2021%3A+VBA+Project+Version/28150

I would have simply guessed that the same p-code compiler was carried forward from 2019, but if that were true, I would have expected the version to be AF 00 like the other recent 32-bit versions instead of the version number that has been associated with 64-bit.

By way of letting you know that O365/Office 2021 is absent from the list of valid Office versions in your switch construct, I thought I would ask if you've encountered this too and learned anything about it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant