conditions: &[CheckItem{offs: 0, cond: &CC::Str(b"DKIF\x00\x00")},
CheckItem{offs: 6, cond: &CC::Ge(Arg::U16LE(32))}],
},
+ DetectConditions {
+ demux_name: "arxel-cnm",
+ extensions: ".cnm",
+ conditions: &[CheckItem{offs: 0, cond: &CC::Str(b"CNM UNR\x00")}],
+ },
DetectConditions {
demux_name: "fcmp",
extensions: ".cmp",