mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
a718dbf74a
Standardize db/MSDOS filenames by adding type prefixes (compiler_, cryptor_, protector_, sfx_, other_PK_). Rename multiple detection rule files accordingly. Also normalize file modes for protector_DAEMON_Protect.2.sg and sfx_Disk_eXPress.1.sg (100755 -> 100644) and apply minor formatting/whitespace normalization; no detection logic changes.
25 lines
No EOL
1.1 KiB
JavaScript
25 lines
No EOL
1.1 KiB
JavaScript
// Detect It Easy: detection rule file
|
|
// Author: hypn0 <hypn0@mail.ru>
|
|
|
|
meta("protector", "Crypt by LightShow //ECLIPSE");
|
|
|
|
function detect() {
|
|
if (MSDOS.compareEP("e9$$$$eb$$8cc8fa8ed0bc....fb8cc0bb....83e8..8ed833f64b8ccd8cc02ea3....33c08ec026a1....2ea3....26a1")) {
|
|
sVersion = "1.21";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("eb$$8cc883e8..8ed833f68ccb8cc02ea3....2bc08ec08bf8b9....26ff36....26ff36....26894d..26895d..b9")) {
|
|
sVersion = "1.15";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("e9$$$$eb$$8cc8fa8ed0bc....8cc0bb....83e8..8ed833f64b8ccd8cc02ea3....5333c08ec0268c0e....26c706........1f")) {
|
|
sVersion = "1.20";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("eb$$8cc8fa8ed0bc....fb8cc0bb....83e8..8ed833f64b8ccd8cc02ea3....33c08ec026a1....2ea3....26a1")) {
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("eb$$2e8b36....2e8974..8ccb8cc02e8944..2bc08ec08ed88bf82e8b4c..81c1....6a..ff36....ff36....894d..895d")) {
|
|
sVersion = "1.11";
|
|
sOptions = "1994";
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |