mirror of
https://github.com/horsicq/Detect-It-Easy.git
synced 2026-06-24 01:54:08 +00:00
50 lines
No EOL
2 KiB
JavaScript
Executable file
50 lines
No EOL
2 KiB
JavaScript
Executable file
// Detect It Easy: detection rule file
|
|
// Author: hypn0 <hypn0@mail.ru>
|
|
|
|
init("protector", "Trap");
|
|
|
|
function detect() {
|
|
if (MSDOS.compareEP("e800005b83c3..908bd3e8$$$$5b2e803f..74..90908bdab9....eb")) {
|
|
sVersion = "1.21";
|
|
sOptions = "by Christoph Gabler";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("8cd0bb....8ed333c98ed0b9....eb$$e2..33d2")) {
|
|
sVersion = "1.18";
|
|
sOptions = "by Christoph Gabler";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("8cd0bb....8ed333d28ed0b9....eb$$e2..33d2")) {
|
|
sVersion = "1.x";
|
|
sOptions = "by Christoph Gabler";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("b9....eb$$e2$$eb..90cd20e2")) {
|
|
sVersion = "1.15";
|
|
sOptions = "by Christoph Gabler";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("e800005b83c3..908bd3e8$$$$5b2e803f..74..90908bdab9....2ec0")) {
|
|
sVersion = "1.20";
|
|
sOptions = "1998 by Christoph Gabler";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("05....eb$$bb....81ebfa..85f9eb$$eb$$39fbeb")) {
|
|
sVersion = "1.22";
|
|
sOptions = "by Christoph Gabler";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("81ea....eb$$b9....81c1....39d0bb....85c3b9....f505....bb....ba....81c2")) {
|
|
sVersion = "1.23";
|
|
sOptions = "by Christoph Gabler";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("eb$$39c281c3....eb$$81c3....39cc81ea....39e2b9....85da39e9eb")) {
|
|
sVersion = "1.24";
|
|
sOptions = "by Christoph Gabler";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("8cd1ba....8ed233d28ed18bcaeb")) {
|
|
sVersion = "1.13";
|
|
sOptions = "by Christoph Gabler";
|
|
bDetected = true;
|
|
} else if (MSDOS.compareEP("e8$$$$5d81ed....458cd68bfc0f23c70f23ceb0..e6..fa0e17")) {
|
|
sVersion = "1.26b1";
|
|
sOptions = "2000 by Christoph Gabler";
|
|
bDetected = true;
|
|
}
|
|
|
|
return result();
|
|
} |