Merge pull request Neo23x0#125 from Karneades/patch-1

Remove duplicate condition in gen_ransomware_command_lines.yar
bboosz · Jun 2, 2021 · 68dc4e5 · 68dc4e5
2 parents f96f189 + 934f10d
commit 68dc4e5
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/yara/gen_ransomware_command_lines.yar b/yara/gen_ransomware_command_lines.yar
@@ -50,7 +50,6 @@ rule ransomware_command_lines
                 or ( $e_powershell and $p_win32_shadowcopy)
                 or ( $e_powershell and 1 of ($p_ps_version*))
                 or ( $e_powershell and 1 of ($p_ps_enc*) and 1 of ($p_ps_cmds*))
-                or ( $e_powershell and $p_win32_shadowcopy)
             )
         
 }