diff --git a/sflock/ident.py b/sflock/ident.py index c0fd6c1..fd09c52 100644 --- a/sflock/ident.py +++ b/sflock/ident.py @@ -308,9 +308,6 @@ def sct(f): def xxe(f): - if is_executable(f): - return None - STRINGS = [ b"XXEncode", b"begin", @@ -326,9 +323,6 @@ def xxe(f): def hta(f): - if is_executable(f): - return None - STRINGS = [ b"", b"", @@ -444,9 +435,6 @@ def office_ole(f): def powershell(f): - if is_executable(f): - return None - POWERSHELL_STRS = [ b"$PSHOME", b"Get-WmiObject", @@ -469,9 +457,6 @@ def powershell(f): def javascript(f): - if is_executable(f): - return None - JS_STRS = [ b"var ", b"function ", @@ -497,18 +482,12 @@ def javascript(f): def wsf(f): - if is_executable(f): - return None - match = re.search(b'