Detect-It-Easy/db/COM/R-Crypt.2.sg
2024-11-12 20:11:38 +03:00

19 lines
No EOL
617 B
JavaScript
Executable file

// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>
init("protector", "R-Crypt");
function detect() {
if (Binary.compare("e9$$$$68....60bf....b9....b0..2e3005fec047e2..61c706........c606")) {
sVersion = "0.91";
bDetected = true;
} else if (Binary.compare("e9$$$$68....60bf....b9....b0..2e300547fec0e2..61c706........c606")) {
sVersion = "0.93";
bDetected = true;
} else if (Binary.compare("e9$$$$bf....57b9....c705....c645....8135....4747e2..33ffc3")) {
sVersion = "0.92";
bDetected = true;
}
return result();
}