Enum malwaredb_types::KnownType

pub enum KnownType<'a> {
    ELF(Elf<'a>),
    EXE(EXE<'a>),
    MachO(Macho<'a>),
    FatMachO(FatMacho<'a>),
    Office95(Office95<'a>),
    PDF(PDF<'a>),
    RTF(Rtf<'a>),
    Unknown,
}

Variants

ELF(Elf<'a>)

Linux, *BSD, Haiku, etc binaries

EXE(EXE<'a>)

Windows, DOS, OS/2 Executables. Anything ending with:

• .cpl
• .dll
• .exe
• .ocx
• .sys

MachO(Macho<'a>)

Single architecture macOS (and derivatives) binaries

FatMachO(FatMacho<'a>)

Multiple architecture macOS (and derivatives) binaries

Office95(Office95<'a>)

Microsoft Office Compound Document Format

PDF(PDF<'a>)

Adobe PDF document

RTF(Rtf<'a>)

Rich Text File

Unknown

Files for which we don’t have an analytic or feature extractor, or are of an unknown type

Implementations

impl<'a> KnownType<'a>

pub fn new(data: &'a [u8]) -> Result<Self>

pub fn is_exec(&self) -> bool

pub fn is_doc(&self) -> bool

pub fn created(&self) -> Option<DateTime<Utc>>

pub fn exec(self) -> Option<Box<dyn ExecutableFile + Send + 'a>>

pub fn children(&self) -> Option<Vec<KnownType<'_>>>

pub fn contents(&self) -> Option<&'a [u8]>

pub fn doc(self) -> Option<Box<PDF<'a>>>