Neo23x0 / Loki

Loki - Simple IOC and YARA Scanner
https://www.nextron-systems.com/compare-our-scanners/
GNU General Public License v3.0
3.4k stars 583 forks source link

windows 11 with office 2021 scan report unexpected file size OUTLOOK.EXE & wininit.exe #220

Closed eyaladmin closed 2 years ago

eyaladmin commented 2 years ago

Hi

For your information only. It could be that the Yara is not up to date with the latestt windows and office files.

The Virtus Total shows 0% detections and the file is self-singed

Let me know if you need me to upload the files

about the "Directory walk error" in the picturerr, I think this path is too long to scan.

Thank you very much

Screenshot 2022-10-09 134527 Screenshot 2022-10-09 134446 Loki Screenshot 2022-10-09 133947

Neo23x0 commented 2 years ago

fixed with https://github.com/Neo23x0/signature-base/commit/dce55d6e708a44d070e232e7bca17a54646d4ae9