// Detect It Easy: detection rule file
// Author: hypn0 <hypn0@mail.ru>

meta("installer", "Microsoft Compound-based installer (MSI)");

function detect() {
    if (PE.compareEP("558becb9........6a..6a..4975..51535657b8........e8........33c05568........64ff3064892033c05568") &&
        PE.compareOverlay("d0cf11e0a1b11ae1")) {
        bDetected = true;
    }

    return result();
}