SabreTools/BinaryObjectScanner
1
0
Fork 0
mirror of https://github.com/SabreTools/BinaryObjectScanner.git synced 2026-07-11 19:36:48 +00:00
Code Issues 295 Packages Projects Releases 20 Wiki Activity

Add support for Intel Installation Framework detection (#57)

Browse Source 
* Add support for Intel Installation Framework detection

* Address reviews
This commit is contained in:
SilasLaspada
2021-08-23 23:56:31 -06:00
committed by GitHub
parent 04651d46d8
commit 3dcce8a8ac
2 changed files with 33 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
BurnOutSharp/PackerType/IntelInstallationFramework.cs Normal file
View File

@@ -0,0 +1,32 @@
using System;
namespace BurnOutSharp.PackerType
{
// TODO: Add extraction, seems to primarily use MSZip compression.
public class IntelInstallationFramework : IContentCheck
{
/// <inheritdoc/>
public string CheckContents(string file, byte[] fileContent, bool includePosition = false)
{
var fvinfo = Utilities.GetFileVersionInfo(file);
string name = fvinfo?.FileDescription.Trim();
if (!string.IsNullOrWhiteSpace(name)
&& (name.Equals("Intel(R) Installation Framework", StringComparison.OrdinalIgnoreCase)
|| name.Equals("Intel Installation Framework", StringComparison.OrdinalIgnoreCase)))
{
return $"Intel Installation Framework {Utilities.GetFileVersion(file)}";
}
name = fvinfo?.ProductName.Trim();
if (!string.IsNullOrWhiteSpace(name)
&& (name.Equals("Intel(R) Installation Framework", StringComparison.OrdinalIgnoreCase)
|| name.Equals("Intel Installation Framework", StringComparison.OrdinalIgnoreCase)))
{
return $"Intel Installation Framework {Utilities.GetFileVersion(file)}";
}
return null;
}
}
}

1
README.md
View File

@@ -95,6 +95,7 @@ Below is a list of the executable packers that can be detected using this code:
- EXE Stealth
- Inno Setup
- Installer VISE
- Intel Installation Framework
- Microsoft CAB SFX
- NSIS
- PECompact