add some more rat matchers

Author: KTibow

src/lib/analysis/runAnalysis.ts

@@ -44,6 +44,7 @@ const prescan = (zip: JSZip & JSZip.JSZipObject, files: string[], state: Analysi
     { name: "SBFT", pattern: "com/sbft" },
     { name: "MacroMod", pattern: "com/macromod" },
     { name: "Quanity", pattern: "com/quantiy" },
+    { name: "Dreamys", pattern: "studio/dreamys/Rat" },
     { name: "DogeRat", pattern: "vytal/should/kill/himself" },
     { name: "SchubiRat", pattern: "dev/schubilegend" },
   ];
@@ -63,6 +64,9 @@ const scan = (file: string, contents: string, state: Analysis) => {
     if (contents.includes("EncryptionMethod1337") || quantiyState.test(contents)) {
       state.flagged = { name: "Quantiy", file };
     }
+    if (contents.includes("ZHVwZXV0aWxz")) {
+      state.flagged = { name: "Dupeutils", file };
+    }
   }
   if (/(?=[Il]{9,})(?:(?:I+l+)+I+)/.test(contents)) {
     state.obfuscation["Obfuscator Bozar"] = {