confirm valid nmap

This rule identifies a specific version of the Nmap executable by verifying the file's hash (MD5), the PE machine type, the linker version, and the existence of a specific section header. It is designed to confirm the integrity or identity of an authorized Nmap binary on Windows systems.