From e469dc38bf5a45075f173c5fd5b6995453e3fcae Mon Sep 17 00:00:00 2001 From: TheRogueArchivist <24215969+TheRogueArchivist@users.noreply.github.com> Date: Tue, 2 Apr 2024 22:57:23 -0600 Subject: [PATCH] Fix Roxxe false positive (#294) --- BinaryObjectScanner/Protection/Roxxe.cs | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/BinaryObjectScanner/Protection/Roxxe.cs b/BinaryObjectScanner/Protection/Roxxe.cs index 6f957487..50ffac89 100644 --- a/BinaryObjectScanner/Protection/Roxxe.cs +++ b/BinaryObjectScanner/Protection/Roxxe.cs @@ -47,8 +47,9 @@ namespace BinaryObjectScanner.Protection if (strs.Any(s => s.Contains("CommonPRRT"))) return "Roxxe (Possibly remnants)"; - if (strs.Any(s => s.Contains("roxe"))) - return "Roxxe (Possibly remnants)"; + // Currently overmatches, will likely be a viable check when better Delphi executable parsing is available. + // if (strs.Any(s => s.Contains("roxe"))) + // return "Roxxe (Possibly remnants)"; } return null;