Update detection and some strings
This commit is contained in:
parent
4cca5190da
commit
8ec3da7080
|
@ -72,8 +72,8 @@ namespace de4dot.deobfuscators.Unknown {
|
||||||
|
|
||||||
string scanTypes() {
|
string scanTypes() {
|
||||||
foreach (var type in module.Types) {
|
foreach (var type in module.Types) {
|
||||||
if (type.FullName == "BabelAttribute")
|
if (type.FullName == "BabelAttribute" || type.FullName == "BabelObfuscatorAttribute")
|
||||||
return "Babel .NET";
|
return "Babel Obfuscator";
|
||||||
if (type.Namespace == "___codefort")
|
if (type.Namespace == "___codefort")
|
||||||
return "CodeFort";
|
return "CodeFort";
|
||||||
if (type.FullName == "____KILL")
|
if (type.FullName == "____KILL")
|
||||||
|
@ -81,7 +81,7 @@ namespace de4dot.deobfuscators.Unknown {
|
||||||
if (type.FullName == "CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute")
|
if (type.FullName == "CryptoObfuscator.ProtectedWithCryptoObfuscatorAttribute")
|
||||||
return "Crypto Obfuscator";
|
return "Crypto Obfuscator";
|
||||||
if (type.FullName.Contains("ObfuscatedByGoliath"))
|
if (type.FullName.Contains("ObfuscatedByGoliath"))
|
||||||
return "Goliath .NET";
|
return "Goliath .NET Obfuscator";
|
||||||
if (type.FullName == "Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode")
|
if (type.FullName == "Xenocode.Client.Attributes.AssemblyAttributes.ProcessedByXenocode")
|
||||||
return "Xenocode";
|
return "Xenocode";
|
||||||
if (type.FullName == "ZYXDNGuarder")
|
if (type.FullName == "ZYXDNGuarder")
|
||||||
|
@ -91,7 +91,7 @@ namespace de4dot.deobfuscators.Unknown {
|
||||||
if (type.Name.Contains("();\t"))
|
if (type.Name.Contains("();\t"))
|
||||||
return "Manco .NET Obfuscator";
|
return "Manco .NET Obfuscator";
|
||||||
if (Regex.IsMatch(type.FullName, @"^EMyPID_\d+_$"))
|
if (Regex.IsMatch(type.FullName, @"^EMyPID_\d+_$"))
|
||||||
return "BitHelmet";
|
return "BitHelmet Obfuscator";
|
||||||
if (type.FullName == "NineRays.Decompiler.NotDecompile")
|
if (type.FullName == "NineRays.Decompiler.NotDecompile")
|
||||||
return "Spices.Net Obfuscator";
|
return "Spices.Net Obfuscator";
|
||||||
if (type.FullName == "YanoAttribute")
|
if (type.FullName == "YanoAttribute")
|
||||||
|
|
Loading…
Reference in New Issue
Block a user