mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
5819fc9bdb
Renamed and reorganized numerous rule files in db/PE and db/MSDOS to use consistent prefixes (e.g., compiler_, installer_, packer_, etc.) and moved some files to db_extra. Also deleted the obsolete IBM_VisualAge_PL_I.6.sg file. This improves maintainability and clarity of the rule database.
12 lines
No EOL
365 B
JavaScript
12 lines
No EOL
365 B
JavaScript
// Detect It Easy: detection rule file
|
|
// Author: hypn0 <hypn0@mail.ru>
|
|
|
|
meta("installer", "Chaos Software installer");
|
|
|
|
function detect() {
|
|
if (PE.compareEP("4883ec..e8$$$$$$$$48895c24..574883ec..488b..........48836424....48bf................483bc774") && PE.compareOverlay("276327631226097513180178")) {
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |