olevba: detect more ActiveX triggers

[decalage2]

See a number of examples on those posts: https://www.whiteoaksecurity.com/blog/2020-3-11-alternative-execution-a-macro-saga-part-1/ https://www.whiteoaksecurity.com/blog/2020-3-17-alternative-execution-a-macro-saga-part-2/ https://www.whiteoaksecurity.com/blog/2020-3-26-alternative-execution-a-macro-saga-part-3/ https://www.whiteoaksecurity.com/blog/2020-7-13-alternative-execution-a-macro-saga-part-4/ https://www.whiteoaksecurity.com/blog/2020-8-3-alternative-execution-a-macro-saga-part-5/ https://www.whiteoaksecurity.com/blog/alternative-execution-a-macro-saga-part-6/ https://www.whiteoaksecurity.com/blog/alternative-execution-a-macro-saga-part-7/