-
After/while installing strawberry-perl-5.40.0.1-64bit.msi the perlglob.exe is detected and deleted because of Trojan.Win32.Imphash.TC.1c11LOCp
![perldetails2](https://github.com/user-attachments/as…
-
When trying to load the Loki Yara rule set, I've noticed that they will not load because of the unsupported imphash value, potentially because the cb-yara-connector is based on an older yara version. …
-
Hi,
Having a database to resolve ordinal imports is nice but if you consider this to calculate imphash, other software should use the same database in order to match imphashes correctly. Another prob…
-
imphash is an effective way to identify binary files. In yarGen, I see imphash generated for pe file. But, why do generate imphash for elf files?
how to generate imphash for elf files by python?
-
Linux Build (Debian 9, Debian 10 and Ubuntu 20.04)
When following the instructions to use ./configure --without-crypto
Result = Not being able to use rules with HASH and/or IMPHASH.
I have suces…
-
For example:
```powershell
PS C:\Users\JJTech\Downloads\unwanted-program-removal-tool-main\unwanted-program-removal-tool-main> py .\scanner.py
------ The Unwanted Program Removal tool ------
Creat…
-
Calling get_imphash yields on 3.5:
`TypeError: a bytes-like object is required, not 'str'` in line 3623.
Tried to change the code a bit to make it work, but I got different results in python 2.7 and i…
-
The latest version of yara-python is unable to compile rules with pe.imphash():
```python
# reproduce.py
import yara
print(yara.YARA_VERSION)
rule = yara.compile(source='import "pe" rule …
-
I upgraded yara-python from 3.5.0 to 3.6.3 and noticed errors if conditions contain a `hash.md5` statement.
```
invalid field name "md5"
```
In version 3.5.0, the `pe.imphash` wasn't availabl…
-
having been privy to a lot of the imphash development over recent years, a point of friction was that the initial research and discussion was around a specific python implementation. its usage gained …