Need help understanding source of bytepattern signature for .Net Reactor about detect-it-easy HOT 2 CLOSED

Hello, it's just a signature from protected files(.Net Reactor 4.8-4.9). If you need examples with this signature I could send you the files.
DiE has signatures from many contributors, Let us know if you have another ideas how to detect .Net Reactor.

from detect-it-easy.

Hello,

Thank you very much for you response.

I am looking into how these samples are detected and looking at that byte-pattern I can't associate it to anything meaningful in the PE or .Net Assembly. Ie no file structure.

My guess at this point is that it is just used by reactor to mark the file some how. Maybe for licensing purposes?

I was just curious if anyone knew the significance of those bytes.

Thanks!

from detect-it-easy.