Hi everyone,
This is a good question. I was curious what kind of signatures has
safebrowsing.cvd.
I've also used something like "sigtool --unpack=safebrowsing.cvd -u
somefile"
Looking inside of "somefile" i see something like:
S2:F:0001a4b9be5221cffadca82be04f8909357495f2d7fa6e038e5443444d581be8
S2:F:00042c895c912fd567afa35450cfe5d321d0d68eb3833156925c4e27d2c29aa2
S2:F:0006d4dcb0d939d725e676a9e68aaeb303e04478e6861d2a77469d1b6a0a0f7d
So basically i cannot run something like : "sigtool
--find-sigs=signature | sigtool --decode-sigs" to see the exact code of
the signature because the name are the same, in this case "S2".
I am missing something ?
There is way to see this or those are somehow encrypted ? I see that
during the unpacking another file called safebrowsing.info is created
and this one holds a signature inside.
---
Best regards,
Iulian Stan
On 2020-08-31 07:24, Arnaud Jacques wrote:
Hello Jack,
sigtool --unpack-current=daily
Le 31/08/2020 à 05:27, Gao Hui via clamav-users a écrit :
Hey folks,
I am studying the ClamAV recently and I am trying to see how the
database works. So, is there anyway to see how's the data looks like
in the .cvd file? Or how can I open the .cvd file in plantext?
Thanks
Jack
_______________________________________________
clamav-users mailing list
[email protected]
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
--
Cordialement / Best regards,
Arnaud Jacques
Gérant de SecuriteInfo.com
Téléphone : +33-(0)3.60.47.09.81
E-mail : [email protected]
Site web : https://www.securiteinfo.com
Facebook :
https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : @SecuriteInfoCom
Signatures for ClamAV antivirus : http://ow.ly/LqfdL
_______________________________________________
clamav-users mailing list
[email protected]
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
_______________________________________________
clamav-users mailing list
[email protected]
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
