Duplicate filenames with different case break repo on Windows

[jakubkroustek]

Hi (@t4d I guess],

Please double check these two rule-sets:

• PK_WhatsApp_arpantek.yar
• PK_Whatsapp_Arpantek.yar

1. (lower-priority) They target the same threat, so it makes sense to unify them, although you might want to confirm there is no subtle behavioral difference.
2. (higher-priority) Their file names differ only by case. On Windows, which uses a case-insensitive filesystem, only one of these files can exist. This results in git permanently showing unstaged changes, which blocks any attempt to pull updates:

error: cannot pull with rebase: You have unstaged changes.

Suggested fix: Remove one of the duplicate files.
This was introduced in commit ad745b5 (Rules 20240805).

Thanks,
Jakub

[t4d]

Hi @jakubkroustek, Thank you for the issue, Indeed I will rename the newer one. I will then test these two files on a dataset of files to determine whether or not they trigger the same phishing kits. I'll let you know. Thank you!