Add GP-Install detection (fixes #99)

This commit is contained in:
Matt Nadareski
2025-09-07 11:04:28 -04:00
parent fa67d370c0
commit 0d371d0f3c
2 changed files with 23 additions and 0 deletions

View File

@@ -0,0 +1,22 @@
using BinaryObjectScanner.Interfaces;
using SabreTools.Serialization.Wrappers;
namespace BinaryObjectScanner.Packer
{
/// <summary>
/// GP-Install
/// </summary>
public class GPInstall : IExecutableCheck<PortableExecutable>
{
/// <inheritdoc/>
public string? CheckExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// <see href="https://www.virustotal.com/gui/file/0e0a93cba8163cef9c979cbb49a6f15604956b9441aba6fb9e9f0c6897cc73ed/details"/>
var name = pex.FileDescription;
if (name.OptionalContains("GP-Install"))
return "GP-Install";
return null;
}
}
}

View File

@@ -154,6 +154,7 @@ Below is a list of executable packers detected by BinaryObjectScanner. The three
| EXE Stealth | Yes | No | No | |
| Gentee Installer | Yes | No | No | |
| GkWare SFX | Yes | No | No | |
| GP-Install | Yes | No | No | |
| HyperTech CrackProof | Yes | No | No | |
| Inno Setup | Yes | No | No | |
| InstallAnywhere | Yes | No | No | |