Item :

Download link

Date

Please do not distribute on Forums

Exeinfo Pe v. 0.0.8.6

1201 / 177 signatures

( Ext_detector  ver.0.7.3.5   )

userdb.txt : 4460

Please do not distribute on Forums

Download link

many changes , signatures updated , and few hidden options

NET_GUI changed items visible
added support for 5,6 NET Streams - view streams enabled

.NET Bug fixed

user skin bug fixed


-  extra exe added for Windows XP 

- more
 

02.09.2024

Exeinfo Pe v. 0.0.8.6 Beta - Nag  !!!

1200 / 175 signatures

( Ext_detector  ver.0.7.3.5   )

userdb.txt : 4460

Download link

many changes , signatures updated , and few hidden options

fixed : 1199.XerinFuscator v.1.0.0

NET_GUI changed visible
added support for 5,6 NET Streams - view streams enabled

added detector zip sfx : Beijing JJJsafe Technology - unpack problem Xpack mode

added better password detector for .7z files AES and AES*

added to .7z archives ZS compressions detector - not supported with std 7zip Archiver
( Zstd , Liz, LZ5, Brotoli )
 

console mode .7z ZS mode unpacker

-  Windows XP  not supported

- more
 

15.08.2024

Exeinfo Pe v. 0.0.8.5 

1192 / 173 signatures

( Ext_detector  ver.0.7.2.8   )

userdb.txt : 4457

Download link

- many updates and fixes , more inteli warnings on .NET files
- added detector for : Virbox Protector v.3.3.x -3.x.x ttp://appsecurity.virbox.com ( Windows & Linux only )

- included version for Windows XP :

exeinfope_Win_XP.exe

- much more and not tested !

- more
 

06.06.2024

Exeinfo Pe v. 0.0.8.4 

1191 / 173 signatures

( Ext_detector  ver.0.7.2.8   )

userdb.txt : 4457

Download link

strong update - .NET inteli infos added

Warning : This version work with Windows XP only after patch !

added to Version info : ISInternalVersion = 27.0.58
update and detect : v9.0 InstallAware Virtualization
951. .NET compiler - unknown structure - strange [ Native EntryPoint - NSTD Struct is OK ]
fix ver.detector up to 90% (for files over 2 MB ) .NET + dotfuscator - PreEmpire Solutions v1.2 - 7.1
fix for 2019 ver.1083.Eazfuscator.NET v2019.x
update to v.2015 8011.*Unknown DLL , A1 00 30 x [ BoxedApp SDK32 - 2021 ]
added 988.SSE Setup 10.7 - xx.x ( 7-Zip sfx
added NOT EXE - .txt UTF-16 (LE) + Hidden .exe PE file at offset 0040
added generic : on 8011.,8010. x64 LLVM compiler : clang version 18.1.2
Sections GUI scan added detector : LLVM compiler Clang ver.18.1.1 (MSC++14)
Disable Warning - if exe Pe Magic=0107 ROM DATA
detect dll files 5144. x64 Microsoft VC++ 14.29 DLL [ CPU : AA64 ARMv8 ]
fixed updated : 472.Autoit v3.3.x.x
fixed : Hamrick Software - VueScan
update 1123.[ Rust Compiler v1.60.x - 1.77.0 ]
update and fixed detector 1031.Advanced BAT to EXE Converter [ v.4.61 ] 2017-2024
fixed 798.Advanced Installer Web/Next [ v.21.5.x ] 2003-2024 - www.caphyon.com
update MS linker to 14.39 x86 x64
Compiler Detector fixed : x86 and x64 MingWin32 Free Pascal / MinGW-w64
fixed NOT EXE - .ZIP archive - [ Mode Unknown : 5Fh ] to : NOT EXE - .ZIP archive - [ XZ Compression ]
added .NET x86 if sign 080; x64 with zero EP Warning : NET Streams: 6 ...
fixed version : 1038.MINGW32 Cygwin family [exe] msys-2.0 GCC: (GNU) [v0.2.0]
added Visual C# / Basic.NET - DLL [ VMProtect SDK32 .NET - 2023 ]


- much more and not tested !

- more
 

18.04.2024

Exeinfo Pe v. 0.0.8.4 

1188 / 171 signatures

( Ext_detector  ver.0.7.2.8   )

userdb.txt : 4457

Warning : This version work with Windows XP only after patch !

Last news - only in this version :

fixed : Obsidium v1.5 - 1.8 - [ v.1.8.2.1-2 - option : Def. MZ Head ]
added : detector for DLL 32/64 bit : [ plugin for : AutoPlay Media Studio ]
added detector for DLL 64bit : [ .PYD Python C Extensions library ]
fixed : Embarcadero Delphi version show x64
update to v1.77 : 1123.Rust Compiler v1.60.x - www.rust-lang.org
added : console mode : unpack all exe files and Inno script from InnoSetup installer : exeinfope.exe file_name /unp-inno-exe
fixed : if Themida protector , result : Themida - Winlicense , if Winlicense result : Winlicense - Themida
added : Skater v24.2.0.51 2024
Added : Delphi version resolver : XE7,Sydney,Rio,Alexandria,Yukon,Tokyo,Berlin
added : DLL [ VMProtect SDK32 .NET - 2023 ]
fixed : version :1038.MINGW32 Cygwin family [exe] msys-2.0 GCC: (GNU) [v10.2.0]
added : .NET 32 if sign. 080 Warning : NET Streams: 6 ...
added : detector 7z Bandizip sfx
fixed : .zip added 5F ( Bandizip ) NOT EXE - .ZIP archive - [ Mode Unknown : 5Fh ] to : NOT EXE - .ZIP archive - [ XZ Compression ]
fixed : Compiler Detector x86 and x64 MingWin32 Free Pascal / MinGW-w64
update : MSC++ linker to 14.39
fix for 599.Advanced Installer [ v21.5.x ] - 2003-2024
update and fixed detector 1031.Advanced BAT to EXE Converter [ v.4.61 ] 2017-2024
fixed/updated : 472.Autoit v3.3.0.0 x64 - Autoit v3.3.6.1
fixed : 599.Advanced Installer [ v.15.5.x ] - 2003-2024
fixed : and debug info added 5144. x64 Microsoft VC++ 14.39 exe [ CPU : AA64 ARMv8 ]
added : 068.x64 Sfx 7z GUI 22.01 ZS v1.5.5 R3 GUI - 2023 Tino Reichardt
Disable Warning - if exe Pe Magic=0107 ROM DATA
Sections GUI scan added detector : LLVM compiler Clang ver.18.1.1 (MSC++14)
added : partial detector generic on 8011.,8010.sign x64 LLVM compiler : clang version 18.1.2
added : ( exe od offset 0040 , Busy21.exe v21.0 https://busy.in ) NOT EXE - .txt UTF-16 (LE) + Hidden .exe PE file at offset 0040
added : 724. NOT EXE - (.) Win PE 32/64 File ( .exe Crypted with : ADD 05 )
- .NET files scan changed , many .NET false detection fixed
- added .NET ConfuserEx structure [ mutation / mod -> Packed Generic Unknown ]

- much more and not tested !!!

- Buffer for exe file : 336 MB

- more
 

01.04.2024

Exeinfo Pe v. 0.0.8.4 Alpha

1187 / 169 signatures

( Ext_detector  ver.0.7.2.3   )

userdb.txt : 4455

- .NET files scan changed , many .NET false detection fixed
- Delphi version resolver Added :
Delphi v12 Yukon,
Delphi v11.0 Alexandria,
Delphi v10.4 Rio,
Delphi v10.4 Sydney,
Delphi XE7 - v10.4,
Delphi v10.1 Berlin
- update Skater added v24.2.0.51 2024 - Skater_NET_Obfuscator
- added console mode :
unpack all *.exe files and script file from : InnoSetup installer
( work only if you don't have installed Inno Extractor - Exeinfo Pe internal unpacker )
parameter example : exeinfope.exe file_name /unp-inno-exe
- Rust Compiler v1.76 update
- added detector for DLL 64bit : [ .PYD Python C Extensions library ]
- added detector for DLL 32bit : [ plugin for : AutoPlay Media Studio ] v8.5 http://www.indigorose.com
- fixed Obsidium v1.5 - 1.8 - [ v.1.8.2.1-2 - option : Def. MZ Head ]
- fixed Themida - Winlicense
- added .NET ConfuserEx structure [ mutation / mod -> Packed Generic Unknown ]

- much more and not tested !!!

- Buffer for exe file : 336 MB

- more
 

22.02.2024

Exeinfo Pe v. 0.0.8.3

1183 / 169 signatures

( Ext_detector  ver.0.7.2.3   )

userdb.txt : 4455

- fixed VMProtect 3.6
- Ripper .7z xor FF - fixed , detect crypted 7z v.0.4 in Advanced Installer
- fixed NOT EXE - .7z Archive v0.3/4 ( Crypted with : xor FF )
- fixed 1157.InstallForge Setup v.1.4.2
- fixed NOT EXE - .jpg picture (.MPO bug if first section Exif )
- added console mode ( pack / unpack with lzma )
Lzma packer :
exeinfope.exe FileName /plzma - pack file with lzma packer ( 7z compatible )
Lzma unpacker :
exeinfope.exe FileName /ulzma - unpack file with lzma packer
- Visual Studio 2022 update linker 14.38
- Buffer for exe file : 336 MB
- more
 

- more
 

11.02.2024

 Test version  Alpha II

Exeinfo Pe v. 0.0.8.3 Alpha II

1180 / 168 signatures

( Ext_detector  ver.0.7.1.8   )

userdb.txt : 4455

please check news directory !

- Ripped data save to Directories : ex. : !Rip_zip_file_name\
- www address menu - changed items from Result
- 7z more detections
- lzma packer unpacker : file names fix
- fix for VMprotect v3.5+
- fix ScriptCryptor (js/vbs/+exe)
- Inno script fix for big files
- more
 

20.01.2024

Exeinfo Pe v. 0.0.8.3 Alpha I

1178 / 166 signatures

( Ext_detector  ver.0.7.1.8   )

userdb.txt : 4455

please check news directory !

Inno script unpacker - internal +

7z - added compression info + Better detect passworded 7z

Added pack .lzma , .lzma Undetectable , .lzma unpacker

config : added [Internet Browset ] change to user path

Viewer : added [ Save to File - window log ]
 

12.01.2024

Exeinfo Pe v. 0.0.8.2 (III)

1176 / 166 signatures

! ONLY EXE FILE !

Inno script unpacker - internal

7z - added compression info

many Bugs - do not distribute

Exeinfo Pe is strong under construction !!!!

24.11.2023

 Test version  Alpha- Beta

Exeinfo Pe v. 0.0.8.2 (I)

1175 / 165 signatures

( Ext_detector  ver.0.7.1.8   )

userdb.txt : 4455

- Wow64 Disable File directory redirect ( Exeinfo Pe is 32 bit app. )

[new option in Config GUI ]

- inno setup script view  ( tmp. - if you have installed Inno Extractor in default path )
- and others


Buffer for exe file : 303 MB

many Bugs - do not distribute !!!!

08.11.2023

 Test version

Exeinfo Pe v. 0.0.8.1 II

1173 / 165 signatures

( Ext_detector  ver.0.7.1.4   )

userdb.txt : 4455

NOT EXE - .jpg comment fixed bug
added : NOT EXE - .MPO - 3D Stereoscopic Picture
fixed 685. x64 - Squeez Sqx Archive Selfextractor / added cpu : x64 Microsoft VC++ 14.24 exe [ CPU : AA64 ARMv8 ]
fixed 918.Launch4j-3.x
fixed NOT EXE - .Zip Arch. - .msix/appv [ Generic detector MSIX Windows app package ]
added NOT EXE - .Zip Arch. - .msixbundle [ Generic detector Win10 MSIXBundle Windows app package ]
changed : DOS exe 8 bit / 16 bit info

Buffer for exe file : 303 MB

Small update !

 

06.10.2023

Ext_detector.dll

for : Exeinfo Pe   &   Xor Data Uncrypter

version 0.7.1.8

LAST SIGNATURES :

711. NOT EXE - .m4s MPEG-DASH Video Segment Moving Picture Experts Group
712. NOT EXE - .heic image picture - H.265/HEVC codec ( need : Microsoft's HEIF Image Extensions )
713. NOT EXE - .dz Dzip ( zlib packed files : xx ) Speed Demos Archive - http://speeddemosarchive.com/dzip
714. NOT EXE - .hli UniLink v1.13 ( #hash# linker file ) - http://unilinker.com
715. NOT EXE - .ejpg Encrypted JPEG bitmap
716. NOT EXE - .empo Encrypted Multi-Picture Object jpg bitmap
717. NOT EXE - .pl Photolist file format multi jpg picture by Filefrend 2016
718. NOT EXE - .epl Encrypted Photolist file format multi picture [ files : xxx ]
 

Old .sqx signature - added compression info / crypted info
 

30.09.2023

 Test version

Exeinfo Pe v. 0.0.8.1

1173 / 164 signatures

( Ext_detector  ver.0.7.1.4 !  )

userdb.txt : 4455

update to ver.45.5 :   1156.PUP/PUA - Softonic Downloader
fixed :
589.Generic - Free Pascal compiler (MinGW/FPC) familly
NOT EXE - .vcproj Visual Studio C++ Project v8.0-9.0
NOT EXE - .PDF format ( ver.1.6 ) - [ *ENCRYPTED ]
5138. x64 NET IntelliLock v.1.5 - 3.0 ( .NET Reactor 6.x ) - for DLL 00 EP
5088. x64 Java installer v.11-20.0 offline/online
673.Sun Java Installer v8.0.x
added NOT EXE - .cbproj Radstudio ( C++ Builder )
NOT EXE - .Zip Arch. - .msixbundle
NOT EXE - .Zip Arch. - .msix/appv
Detector for Dos , win 32 , win 64 - UniLink creator
added : over 100 mb info in zip and rar files



and other
 

28.07.2023

 Test version

Exeinfo Pe v. 0.0.8.0

1172 / 162 signatures

( Ext_detector  ver.0.7.1.2 !!!  )

userdb.txt : 4455

- NON exe file format many fixes , mp4 , jpg , pdf, img/EXT2/3/4 Linux extended file system image
- add size on mp4/avif - file ( MPEG 4 container H.265 ) - [ 2048 x 1536 ]
- jpg file added GPS - data detector !
- added NSIS Installer Nullsoft NSTD detector for GCC compiler
- fixed result for NSIS exe if file size over 1 GB
- update C++ MS linker to 14.36 x86/x64
- Zip ripper fixed
- added detector on Linux ELF files for hidden : .SQUASHFS image files
- x64 - MinGW-w64 GCC: (GNU) version detector fix
- added New to Compiler detector menu for : GCC GNU v11/MinGW-W64 v4/MSYS v12 - 32/64 compiler

and other detection fixes

small visible on GUI

and other
 

28.07.2023

Ext_detector.dll

for : Exeinfo Pe   &   Xor Data Uncrypter

version 0.7.1.0

LAST SIGNATURES :

690. NOT EXE - .JB2$ bitmap picture - stream without file header ! - Joint Bi-level Image 691. NOT EXE - (.) Win PE File Crypted with XOR FF (exe/dll/ocx/sys)
692. NOT EXE - (.) Win PE File Crypted with XOR 77h (exe/dll/ocx/sys)
693. NOT EXE - .apmx86/64 API Monitor v2 log file - www.rohitab.com
694. NOT EXE - .loov AV Database - Smadav 2022 v14.x - www.smadav.net
695. NOT EXE - .dat Zillya Antivirus Bases 2.0.0 - http://zillya.com
696. NOT EXE - (.) PA19 Binary Delta Compression (BDC) Technology
697. NOT EXE - .dat ZPKG packet data ( *Zillya Antivirus - http://zillya.com )
698. NOT EXE - .bin MTK_BLOADER [ v.xx ] binary file - 2021, MediaTek Inc.
699. NOT EXE - .bin MediaTek firmware binary file - wikipedia.org/wiki/MediaTek -            2021, MediaTek Inc. http://spflashtools.com/category/windows
700. NOT EXE - .txt END USER LICENSE - text file
701. NOT EXE - .ovl VMWare v12-17 Installation Launcher data ( overlay from exe )
702. NOT EXE - (.) Edge WebCache data file - microsoft.com
703. NOT EXE - .FIR Canon Digital camera firmware file [ v.1.x.x ] - www.canon.com
704. NOT EXE - .jxl JPEG XL royalty free raster graphics ( Exif sign. ) ( lossy / lossless ) 705. NOT EXE - .jxl JPEG XL royalty free raster graphics  [ 70% detector only ]
706. NOT EXE - .wp2 WebP2 bitmap picture experimental format

707. NOT EXE - .fas FASM v1.73 ( x86/x64 ) symbols data - - http://flatassembler.net  708. NOT EXE - .obj CodeVisionAVR V2/3 C lang. object file - www.hpinfotech.com
709. NOT EXE - .prj CodeVisionAVR V3 C lang. project file - www.hpinfotech.com
710. NOT EXE - .o Xojo object - REALbasic Binary File - www.xojo.com
 

12.07.2023

 Test version II

Exeinfo Pe v. 0.0.7.8

1169 / 161 signatures

( Ext_detector  ver.0.7.0.7 !!!  )

userdb.txt : 4455

console mode fixed - window no flash

- many fixes VMP 3.6 - 3.7 and other
- added more inteli hints
- fixed : Inno Setup Un/Installer
- update 1000.[ MS BoxStub Installer v17.x ]
- update : 1083.Eazfuscator.NET v2020.x - 2023.2

- fixed apng detected as png ( if .png file 20 mb )
- fixed .APNG file format - more frames : 323

- fix : 5036. x64 - Embarcadero Technologies Inc. clang version 5.0.2 (36917.e4aabb3.b018c58) (based on LLVM 5.0.2)
- fix detection for 15 sections Dll :
5040. x64 Lazarus v1-2.2 / FPC v2-3 [ v3.2.2 ] for x86_64 - [ Dll ] 

- added x64 / x86 [ python core ] x64 Microsoft Visual C++ v14.34
- update detector : 1091.PUP/PUA Asystent pobierania - komputerswiat/dobreprogramy

and other
 

23.05.2023

 Test version

Exeinfo Pe v. 0.0.7.8

1167 / 161 signatures

( Ext_detector  ver.0.6.9.6  )

userdb.txt : 4453

many fixed for test

console mode fixed - window no flash

Now detect All exe xor-ed -combination on binary files*

fix and update 32/64 : VMware/BitRock InstallBuilder ver: 22.x

fixed console mode option '/se' scan with external signatures userdb.txt

added detection :
925.Make SFX v5.x http://74.cz

NOT EXE - .ZIP archive - .appxbundle Windows 8.1 App Bundle

851.VirtualBox Installer [v.7.00.6 ] 2023

[ Sfx Easy 7-Zip 0.1.6 James Hoo

added 32/64 & update :
[ Update Tool ] - x64 Microsoft Visual C++ v14.34

update EP
VMProtect v.3.6.0 - 3.7.3 2022 [ Exe , Option : packed ]

now detect v.23
1054.Yandex browser installer v19 - 23.x full

update detector
970.Google UPDATE (MS Edge/Chrome) Update Setup Installer

added only x86 stub : [ Opera 2023 Installer ]

fixed : x64 for Alexandria ver35
5012.x64 Embarcadero Delphi compiler

added signatures :

5150. x64 .NET - DNGuard HVM v4.20 by ZiYuXuan Studio - 2022.11 - www.dnguard.net - stub : EP=0000
5151. x64 DLL from : Microsoft AppStore ( Export : RHBinder__ShimExeMain ) - stub : NSTD MSV C++ built by: PROJECTNREL
5152. x64 EXE from : Microsoft AppStore ( exe run dll -> RHBinder__ShimExeMain ) - stub : NSTD MSV C++ built by: PROJECTNREL
5153. x64 Baymax Patch Tools v3.1.0 - 3.x 2023.01 by Nisy/PYG www.chinapyg.com - stub : Microsoft Visual C++ v.9.00 & UPX Stub
5154. x64 Microsoft Visual C++ v14.16 - 2017 - DLL ( push rbx , DisableThreadLib.Cs. )
5155. x64 Yano v1.0.15.0 ntoolbox.bom/yano 2012 obsolete! - stub : x64 .NET exe file : 00 Entry Point
5156. x64 ArmDot 2023 v3.0.0 - www.armdot.com ( protector/license creator ) - stub : x64 .NET DLL with : 00 Entry Point - CPU : AMD64
5157. x64 GO Programming Language - Compiler v1.19.7
5158. x64 - DLL to EXE converter v1.1 - for 32 & 64 bit DLLs - 2018-10-10
5159. x64 .NET - DLL to EXE converter v1.1 - for 32 & 64 bit DLLs - 2018-10-10
5160. x64 .NET IntelliLock 2.9 - 3.0 ( unreg.js script ) .NET Reactor

and x86 signatures :

1155.ArmDot 2023 v3.0.0 - www.armdot.com ( protector/license creator ) - stub : MS Visual C# / Basic.NET
1156.[ PUP/PUA - Softonic Downloader v6.4x 2022 ] - Inno Setup Module 5 SFX - [ v.6.1.0 ]
1157.InstallForge Setup v.1.4.2 ( free ) 2007-2020 - http://installforge.net - stub : PureBasic v4.20 - v6.0
1158.[ A.S.L - NSIS Setup Protector ver.0.01 ] - Nullsoft Install System v2.xx - 3.0 / v.2.12
1159..NET exe bytepress v1.0.0.2 by Adam Roach - http://github.com/roachadam/bytepress ( Mode : lzma/gzip/quickLz )
1160..NET Bat2Exe v2.1 ( 17.11.2021 ) - http://github.com/dehoisted
1161.[ Overlay crypted PUP/PUA - Unknown Pack ] - Generic : Installer Nullsoft PiMP Stub / v.20-Sep-2022.cvs
1162.Generic new : AVAST/AVG Software Sfx installer v23.x 2023 - www.avast.com - stub : NSTD MS VC++ 14.x
1163.x86/x64 Chromium Installer v.113.x - 2023 - stub : Microsoft Visual C++ v.14 - 2015 ( NSTD ) microsoft.com
1164.x86/x64 Generic/Modded : Chromium Installer v.xx - 2023 - stub : Microsoft Visual C++ v.14 - 2015 ( NSTD ) microsoft.com ( ex.Maxton )
1165.x86 - DLL to EXE converter v1.1 - for 32 & 64 bit DLLs - 2018-10-10
1166.Adobe Installer downloader v2.11.0.30 - upx stub 3.91
1167..NET IntelliLock 2.9 - 3.0 ( unreg.js script ) .NET Reactor
 

25.03.2023

 Test version 5

Exeinfo Pe v. 0.0.7.7 V

115x / 15x signatures

userdb.txt : 4453

.NET - Babel v9.x updated , IntelliLock 3.0

console mode fixed - window no flash

overlay xor - changed ! , you can use on non executable files ( un-xor binary file )

fix : 426.Themida & WinLicense 2.0 - 2.4.6 - struct (Hide from PE scanners II-V)

Config - if set to English , I delete config lng file for external language like : Chinese.lng

added on MSV C++ for PUA App. : [ WARNING : File use VirtualProtect ]

update [ 7-zip SFX stub ] [ v22.01 Con - GENUINE Stub ]

1145.[ BoxedApp SDK32 - 2018-2021 ] DLL library - www.boxedapp.com

All signs : imptoved VMProtect 3.5.x - 3.6.x - x86 & x64 - Strong detection POWER !

fix 797.DeployLX Software Protection System - Codeveil 5.x for .NET

added
800.[ NETSecureFake Signature ! ] .NET + dotfuscator - PreEmpire Solutions

fixed Non exe - .h264 movie detector

18.03.2023

 Test version

Exeinfo Pe v. 0.0.7.7

1156 / 157 signatures

userdb.txt : 4453

- Strong update .NET obfuscator x86 / x64 ,

fixed fake detection !

- added for test : x64 ArmDot 2023 v3.0.0 - www.armdot.com

( I have trial version only )


IF result is :  Sign. for DLL : RustemSoft Skater .NET Obfusc.

on EXE file , you can change this result :

Click on Main form [ < ] Button

Exeinfo ignore this detection.
 

many NON EXE detection added
 

28.01.2023

 Test version

Exeinfo Pe v. 0.0.7.6

1150 / 151 signatures

userdb.txt : 4451

fixed : NET Skater Obfuscator results :

if obfuscation method  is identical

16.01.2023

Can generate NET results :

Skater : if obfuscation method  is identical

Test version

Exeinfo Pe v. 0.0.7.5

1141 / 146 signatures

userdb.txt : 4451

signatures update

- Strong update .NET obfuscator x86 / x64 !!!
- DLL Characteristics GUI updated
- Added .jp2 jpeg2000 Ripper ( for .pdf files )
- fixed : x64 GO Programming Language
- 5045.x64 - AutoIt [ v3.3.14.5 ]
5045.x64 - AutoIt [ v3.3.16 2022.09 ]
- 5012.x64 Embarcadero Delphi NSTD
- 5035.x64 Paquet Builder v21.0.0
- 016.PEcompact ver.3.02.2
update : 5076.[ x64 Enigma ver.5.x - 7.0 ]
update ver.VMProtect v.3.5.1 - 3.7.3 2022
fixed & upd.723.Ahk2Exe for AutoHotkey [ v1.1.36.02 ]
added v10 : 588.Enigma Virtual Box - v10.00 (2022.12.14)
fix detector :
5135.x64 VMProtect v.3.6.0 - 3.7.3 2022
added new version :
1021.InstallAware Virtualization v6 ( BoxedApp packer v2.x - 14.0 )
1021.BoxedApp Packer 2018 / 2019 14.0
added x64 : [ ESET module MZ-Header ]
added v5 generic :
760.Generic Crypto Obfuscator For .Net v5 - LogicNP Software
added tampared exe :
Windows PE exe for .NET / GNU compiler but no "PE" tampared/compr.
Windows PE exe compressed LZ77
fix : NOT EXE - .dex - Dalvik Executable v5.0 - 9.0



 

25.12.2022

Test version

Exeinfo Pe v. 0.0.7.4

1141 / 144 signatures

userdb.txt : 4450

signatures update

File Characteristics GUI updated items :

 0020 : Handle a high entropy 64 bit VA

added .NET RES in > 20 kb - search : [ .GZ archive inside - try Ripper ]

fix 961.[ Enigma new ver.5.x - 6.80.x ] -[ DotFix NiceProtect - 6.x ]

Added version detector : 599.Advanced Installer [ v7.x - v19.x ]

599. added detection v32
InstallAware for Windows Installer [ v32 X15 2022 ]

fix for dll : 147.Open WATCOM C/C++32

NOT Win EXE - .o - ELF  WATCOM C/C++32 v2.0

added detector : 067.Rar Sfx Archive [ MESSAGES OVL ] , Overlay

update : 5044. x64 Rar Sfx Archive v6.xx - 6.20

added double app dos/windows in one : *Unknown exe

added :  NOT EXE - .nrproj .NET Reactor Project xml file

- Strong update version , fixed old detection !

- Do not Distribute only for test .NET exe diagnose many changes

- added plugin : wwwHelper v0.2
updated www links for unpackers
 

06.11.2022

Exeinfo Pe v. 0.0.7.3 II

1134 / 139 signatures

userdb.txt : 4447

NOT compatible with - Arabic Windows 10 !

signatures update

added x64 only if EP=0000 .NET Reactor 6.x - www.eziriz.com

added on 32 bit .NET

[ WARNING : .NET Reactor ? AntiDebug option detected* ]

645. .NET Reactor v.6.8.0.0 Native Method (.NET / MS C++ stub 9.0 )

.NET exe changes !!!

and other

detect flipped zip files
 

22.09.2022

Test version

Exeinfo Pe v. 0.0.7.3

1132 / 138 signatures

userdb.txt : 4447

NOT compatible with - Arabic Windows 10 !

signatures update

added Flip EOF to offset 0000 - binary file tool

added Fake detector for : 800..NET + dotfuscator - PreEmpire Solutions

fix : 5096. x64 Eazfuscator.NET v2022.1

fix For : Inx .NET Protector & Obfuscator ( Strong ConfuserEx Mod )

and others

29.08.2022

PDF , doc

  and

picture hints

update hints

ExeinfoPe_documents.zip

15.03.2023

updated !

7.5 MB

Test version

Exeinfo Pe v. 0.0.7.2

1126 / 136 signatures

NOT compatible with - Arabic Windows 10 !!!

this version try detect x64 dotfuscator

VMProtect v.3.6.1 2022

fix : x64  .NET + dotfuscator - PreEmpire Solutions v1.2 - 6.5.x

update :
1085.Code Virtualizer v3.0.8.0 - 3.1.3.0

added
5131. x64 InstallShield [ 2014-2021 Pro Unicode v21.00-27.00 ]

and others

23.07.2022

Update file ,

main exe only + dll !

Exeinfo Pe v. 0.0.7.1 AR

1124 / 134 signatures

This version is compatible with - Arabic Windows 10

this version try detect x64 dotfuscator

VMProtect v.3.5.1 2021

CPU Bug fixed

Autoit 3 ver. fix

fix : 800. .NET + dotfuscator - PreEmpire Solutions v1.2 - 6.5.x

info : Deleted Address Converter GUI - crash on Arabic Windows
 

27.06.2022

Update file ,

main exe only !

Exeinfo Pe v. 0.0.7.1 Test

1124 / 132 signatures

fixed :
5074. x64 Qt Installer v2.0.0 - x.x.x
fix [ Virtualbox.org Header ] 32 / 64
x64 - Qt [v.601.34] DLL - App.dev.framework
5043.structure : x64 VMProtect v.3.0x
800..NET + dotfuscator - PreEmpire Solutions v1.2 - 6.4.x

added :
5129. x64 VMProtect v3.x Minim. section
935.VMProtect v3.00 - 3.5.0 [ option : not packed - First section Delphi ]
769.InstallShield [ 2021 Pro Unic. v27.0.122 ]
1124..NET + dotfuscator - PreEmpire Solutions v6.5.x [ 6.5.0 ]
5131. x64 InstallShield [ 2014-2021 Pro Unicode v21.00-27.00 ]

update 32/64
Autoit3 [ v3.3.3.16 ]

fix : Run Uniextract v2
Long directory names with space bar

Exeinfo size = -100 kb

and other fixes
 

16.06.2022

update only , no Extra directory

Exeinfo Pe v. 0.0.7.0

1123 / 129 signatures

( Ext_detector  ver.0.6.6.5  )

userdb.txt : 4447
 

minimum files

S.Info : Bios date added

for testers only - with Nag screen

 

08.05.2022

update only , no Extra directory

Exeinfo Pe v. 0.0.6.9 III

1120 / 127 signatures

( Ext_detector  ver.0.6.4.8  )

userdb.txt : 4447
 

 added Delphi v11.0 Alexandria detector  x86

for test video card detector !!!

many changes and fixes old signatures

for test

 

08.04.2022

Exeinfo Pe v. 0.0.6.9

1118 / 127 signatures

( Ext_detector  ver.0.6.4.4  )

userdb.txt : 4446
 

updates info inside : file_id.diz  text file

many changes :

 internal skin changed
About www links changed
Buffer for exe file = 300 MB
 

20.02.2022

Exeinfo Pe v. 0.0.6.8 II fix

1110 / 122 signatures

( Ext_detector  ver.0.6.3.7  )

userdb.txt : 4441
 

 info : many changes

added .xls - MS Strong Crypted detector
added .msi encrypted Strong
added .avif picture in mp4 container
PDF crypro detector fix
JPG ripper progress 32bit fixed
added : 5022. .NET x64 {SmartAssembly} Obfuscator [ v8.1.0.4892 ]

added PreScan : [ SmartAssembly PACK ] detect packed data x64 and x86 if packed data used !

added :
1108.Agile.NET v6.6.0.12 - NET protector - www.secureteam.net - stub : .NET compiler
1109.VMProtect v.3.5.1 2021 [ Exe/DLL , Option : packed / not packed] - www.vmpsoft.com

5116. x64 ( MS Visual Basic 2005 - .NET ) ILProtector Version 2.0.22.17 - (c) 2021, VgrSoft http://vgrsoft.net *ACM
5117. x64 Spices.Net v5.17 - 5.21.6 2018-2021 ( Obfuscator ) - www.9Rays.Net - stub :.NET
5118. x64 Agile.NET v6.6.0.12 - NET protector - www.secureteam.net - stub : x64 - .NET
5119. x64 VMProtect v.3.5.1 2021 [ option : packed / not packed ] - www.vmpsoft.com
5120. x64 VMProtect v.3.00 - 3.5.1 [ packed struct ] - www.vmpsoft.com , stub : .NET 64 bit DLL with 0000 Entry Point , x86 I not detect
5121. x64 VMProtect v.3.00 - 3.5.1 [ not packed struct ] - www.vmpsoft.com , stub : .NET 64 bit DLL with 0000 Entry Point , x86 I not detect

fixed .NET Babel , .NET VMProtect

added 066.Zip Sfx Archive - [ F-Secure Detection Tool - downloader ]

and other fixes
 

30.01.2022

Exeinfo Pe v. 0.0.6.8

1107 / 116 signatures

( Ext_detector  ver.0.6.3.7  )

userdb.txt : 4441
 

 info : updates old signatures

fixed , Two internal skins removed

NoN exe files : added .xls - MS Strong Crypted detector
 

22.12.2021

Exeinfo Pe v. 0.0.6.8 Demo

1107 / 116 signatures

( Ext_detector  ver.0.6.3.4  )

userdb.txt : 4441
 

 info : many changes and updates old signatures

fix : 800..NET - dotfuscator - PreEmpire Solutions v.1.2 - 6.0

[ Electron installer application - http://electronjs.org ]

.XZ Ripper added , Ask : 10,20,40,65,100 = continue ripping

added :
1107.GO Programming Language - Compiler v.1.17.x

1103.VMProtect v.3.5.0 [ Delphi XE code not packed

update ver.detector : 1064.[ PyInstaller v.4.5 - 2005–2021 ]

PreScan : added for x64 C++ v14 section .retplne

Uniextract run changed to v2.0 - https://github.com/Bioruebe/UniExtract2#download
( from shell integration )

and other for test ( NAG )

 

14.11.2021

Exeinfo Pe v. 0.0.6.7 Test

1102 / 114 signatures

( Ext_detector  ver.0.6.1.9  )

userdb.txt : 4439
 

 info : many changes and updates old signatures

x64 fixed wrong detection VMProtect fixed to Obsidium

detector added : Obsidium x64 [option : MZ org. ]

added pdf crypter ( dor Pdfsecure )
NOT EXE - its .PDF (v.1.7) format - [ PACKED .zlib ] [ ENCR ]

Enabled png , jpg , gif ripper on files bigger then buffer

Big file loading changed - F11 work on file header detection ,

I loading 256 kb of file at offset 0000

PreScan : added for Embar Delphi 10.1 - 10.4 : Embarc.32 not packed sec.II
added detector DLL 32/64

added
[ VMProtect SDK 32 - www.vmpsoft.com ] Microsoft Visual C++ v.14.0

and other user fixes

 

12.10.2021

Exeinfo Pe v. 0.0.6.7 Test

1097 / 108 signatures

( Ext_detector  ver.0.6.1.9  )

userdb.txt : 4439
 

 info : many changes and updates old signatures

 added detector DLL 32/64 [ VMProtect SDK - www.vmpsoft.com ]
added pdf crypter Encrypted - passworded type : xx
Enabled png , jpg , gif  Ripper on files bigger then buffer
PreScan :

added for Embarcadero Delphi 10.1 - 10.4 : Embarc.32 not packed sec.II

x64 fixed wrong detection VMProtect fixed to Obsidium

added Obsidium x64 [option : MZ org. ]

and other user fixes



and other user fixes

 

03.09.2021

Inno Extractor  v.5.3.0.190 Free

A.S.L Edition

 You can unpack this instalation !

Download link

  This is Installer - not  portable version ! 

Created

30.08.2021

Exeinfo Pe v. 0.0.6.6

1096 / 107 signatures

( Ext_detector  ver.0.6.1.6  )

userdb.txt : 4438
 

 info : many changes and updates old signatures

 DLL fix : 5047. x64 Themida & WinLicense 2.0 - 2.4.6.0
DLL fix : 230.[section protection] VMProtect v.1.25
add : x64 added [ WinLicense SDK used for Trial ] x64 MS Visual C++
add : .NET ConfuserEx v1.6.x MOD [ v1.6.0-alpha ] - x86 / x64
add : 5105. x64 .NET ConfuserEx v0.3 - 1.0
add : .NET - modded ConfuserEX not Smartassembly [canary]
add : 900.Obsidium [ v.1.7.1.4 ]
add : Obfuscated : Babel v9.3 - 9.7 2021
add : 655.[ 7-zip SFX stub ] [ v21.01 - GENUINE Stub ]
add : for x86 : 080. .NET [ Web Downloader Installer ]
upd. 906.InstallAware for Windows Installer [ v30 X13 ]
fix : 800. .NET - dotfuscator - PreEmpire Solutions v.5.0
fix : 1079.Babel v9.3.3.1 - 9.7.3 (2020-21)
fix : 946.ESET Live Installer [ v10 ]
fix : 960.(Nstd) Radstudio v10.x ESD ( C++ Builder 10.1 - 10.4 )
fix : 963.Comodo installer - 7-zip.Sfx
fix : 771.InstallShield 2014 Pro Unicode *ISc ( v21.00 - 25.00 / Silent 7.0 )
FIX AND UPDATE : 859. RustemSoft Skater .NET Obfuscator v.4.8 - 9.5
fixed x86 / x64 : 389.Microsoft Visual C++ v.14.29 - 2020
update : 1022.WINDEV Express v.26.0.7.1 PC SOFT
update : 599.Advanced Installer [ v18.0.0.0 ] - 2003-2021
www Ripper fixed for long strings
added detector : .vcproj , .vcxproj , .vbproj , .dproj
PreScan added
[ WinLicense SDK for Trial ]
[ Del/Emb.32 Debug section data FB09 ]
[ Intel IPP libraries ] for C++ compiler

and other user fixes

 

02.07.2021

     Update main exe only !
 

Exeinfo Pe v. 0.0.6.6

1092 / 104 signatures

 info : many changes and updates old signatures

 DLL fix : 5047. x64 Themida & WinLicense 2.0 - 2.4.6.0
DLL fix : 230.[section protection] VMProtect v.1.25
x64 added [ WinLicense SDK used for Trial ] x64 MS Visual C++
upd.906.InstallAware for Windows Installer [ v30 X13 ]
fix : 800. .NET - dotfuscator - PreEmpire Solutions v.5.0
add : Obfuscated : Babel v9.3 - 9.7 2021
fix : 1079.Babel v9.3.3.1 - 9.7.3 (2020-21)
fix : 946.ESET Live Installer [ v10 ]
fix : 960.(Nstd) Radstudio v10.x ESD ( C++ Builder 10.1 - 10.4 )
fix : 963.Comodo installer - 7-zip.Sfx
add : 900.Obsidium [ v.1.7.1.4 ]
FIX AND UPDATE : 859. RustemSoft Skater .NET Obfuscator v.4.8 - 9.5
add : 655.[ 7-zip SFX stub ] [ v21.01 - GENUINE Stub ]
www Ripper fixed for long strings
added detector : .vcproj , .vcxproj , .vbproj , .dproj
PreScan added
[ WinLicense SDK for Trial ]
[ Del/Emb.32 Debug section data FB09 ]


and more ...
 

25.04.2021

Exeinfo Pe ver.0.0.6.5 IV Test

1088 / 101 signatures

( Ext_detector  v.0.5.9.5  )

userdb.txt : 4437 
 

 info : many changes and updates old signatures

Themida/Winlicense fix ( NonSt. OEP code detector "dummy" )
Autoit v3.3.12.0 - v3.3.15.3 ( UPX )
Installer - Astrum InstallWizard 2.2x
WINDEV Express v.26
Eazfuscator.NET v2020.2-4
Embarcadero fix 32 / 64

GUI many changes , Config , Multiscan
fixed save overlay
added Multiscan - hiew colors button
- back Dir button

pre scan added :

UPX packed sec.II Del/Emb.32
UPX packed sec.II Del/Emb.64

.NET Detector detect v4.x and v5.02/3

CPU Info added on Config GUI

Buffer 255 MB for exe files
Don't close/crash on big files
and more ...
 

17.02.2021

Exeinfo Pe ver.0.0.6.5 II Test

1087 / 101 signatures

( Ext_detector  v.0.5.9.1  )

userdb.txt : 4437 
 

 info : many GUI changes and fixes

Buffer for exe file 202 MB

pre scan added - [ Real .NET reloc section ]

many changes for test only !

and more ...

 

27.01.2021

Exeinfo Pe ver.0.0.6.4 prev

1086 / 100 signatures

( Ext_detector  v.0.5.8.0  )

userdb.txt : 4434 
 

 info : many changes and updates old signatures

- Ripper work faster 50 %

- Section GUI - Pre-Scan Button
added
.js crypted , [ Autoit .a3x script ] , MinGW / C-Free .stabstr sec.

FIXED : x64 GO Programming Language

added : NOT EXE - .dex - Dalvik Executable File ( for Android system v.9.0+ )
added : NOT Win EXE - .o - ELF [ 32bit obj. Exe file - CPU : QUALCOMM DSP6 ]
added version detector :800.NET - dotfuscator - PreEmpire Solutions

- www Ripper added : "https://" - in unicode

and more ...
 

08.10.2020

Exeinfo Pe ver.0.0.6.3 Final

1086 / 100 signatures

( Ext_detector  v.0.5.6.8  )

userdb.txt : 4433 
 

fix for dll - 5047. x64 Themida & WinLicense 2.0 - 2.4.6.0

added : 5099. x64 Code Virtualizer v3.0.8.0

fix NOT Win EXE - (.) - Mac OS X Mach-O 64bit Intel executable - CPU/Sub

added to section Pre-Scan :

[ BASE_64 Table ] , [ Asprotect v2.x DATA ] ,

CrashPAD Info section on C++ , ovl : Digital X509 Certificate

Trial txt ascii ,

added support F6 key - run Die v.3.0 ( Admin on exe must be OFF )

MS C++ linker - support up to 14.27

Fixed Multiscan mode - scan faster

update Linux/OS2 header

14.09.2020

Exeinfo Pe - Advanced config tool 

ver. 1.5.0.3

You can enable hidden  Config options

 down link

added : support shell Die v.3.0

updated !

16.09.2020

Exeinfo Pe ver.0.0.6.3 Test

1085 / 99 signatures

( Ext_detector  v.0.5.6.7  )

userdb.txt : 4432 
 

fixed Button [<] back oep if value bigger then 0 ( if config fast scan = off )

added to section Pre-Scan :

MS C++ version , Embarcadero , Delphi , Codegear ver. string , Go build Compiler ID/inf , Go Packed section .zlb data ,
GCC:GNU libgc(*) runtime library , Cygwin runtime library , CNU C Compiler version Section

Go build Compiler ID/inf section , Packed section .zlb data section,
[ .QT METADATA Section ] , [ Armadillo 32/64 v5-9 zlib/* ] , [*Armadillo v6-9 zlib ] ,
[ TAGGANT data section - Packer Software with Crypto secure sign SHA256 ]
[ Import like Themida/Winlicense section ]
[ Themida & WinLicense DATA section ]
[* .NET RESources ] , * RSA sign ] ,
png/jpg/Gif pictures ,
[ SHA1 crypto ] , [ MFC C++ API ]
Str.Version info - Resources
[ Zlib v1.x.x ] max 1.2.8
[ Borland Delphi/C++ Runtime ]
Export data
exe , cab , cab xor FF , zip , msi , rar , 7z , [ LZMA Archive 23 def ]
Delphi TPForm
 

08.08.2020

Exeinfo Pe ver.0.0.6.2 Final

1083 / 97 signatures

( Ext_detector  v.0.5.6.7  )

userdb.txt : 4432 
 

update old detections :

GO Programming Language Compiler v1.14.5

fixed 935.VMProtect v3.00 - 3.5.0 2003-202

960.Radstudio v10.x ESD ( C++ Builder 10.1 - 10.4 - DLL library ) -

added support for bmp files v4

added for Delphi   10.4 Sydney - pas,dfm,dpr

www ripper - fixed for unicode www

Scan files faster ! - visible on big NET files

24.07.2020

Exeinfo Pe ver.0.0.6.2 II Test

1081 / 94 signatures

( Ext_detector  v.0.5.6.7  )

userdb.txt : 4430 
 

added Multiscan GUI - user directory paste for fast change Diectory.

section GUI - adde Pre-Scan for 7z , zip , rar , exe , msi , TPF , zlib 1.x.x , ...

Support : Media Info Lite  from K-lite codec pack

update old detections

added : ( ovl : Inno Setup Mode : Lzma2 or Crypted )

556.[ E ] Inno Setup Module 5 SFX - [ v.6.0.0 ] - detect protector

Import GUI - added sort alphabetical on column click (under constr.)
Sectiond GUI - added sort alphabetical on column click

added to exe pe ripper -

Question in [10,20,40,65,100]) stop ripping , max ripped files to 65535

added :
NOT EXE - .img/EXT2..EXT4 Linux extended file system image
NOT EXE - .VHDX Disk2vhd v2 disk image ( empty offset :00 ) - www.sysinternals.com
 

many bugs fixed ,

13.07.2020

Exeinfo Pe ver.0.0.6.1

1064 / 86 signatures

( Ext_detector  v.0.5.6.2  )

userdb.txt : 4426 
 

New buffer size for exe file : 128 MB

GrowUp section scan 1 MB  to 2.5 MB

fixed . Inno Setup ( PUP/PUA Generic - Tampared EP )

[dUP] diablo2oo2's Universal Patcher , Sun Java Installer v8 , ....

.EIS script Engine - added :

savefile.xxx - if you need your extension
Ascii/ Hex Ripper tool

added : NOT EXE - .md5 checksum file , - .key wincmd.key - Total Commander v9.x

added detection for

VMProtect NET ,  .NET DotNetGuard v1.2 , VMProtect v3.3.4

.NET - dotfuscator - PreEmpire Solutions

( detect version only on Registered stub - trial/hacked stub not detected - v.?.?  )

Import GUI fix and others

many bugs fixed ,

 included .Eis script :

- WebP/Avi Ripper
- 7zip header fixer for tampared archives
( tampared .7z you can send via gmail.com )
 

15.05.2020

Exeinfo Pe ver.0.0.6.0

1066 / 86 signatures

( Ext_detector  v.0.5.5.2  )

userdb.txt : 4425 
 

many bugs fixed ,fixed 965.Hamrick Software - VueScan Installer

fixed pdf files : name , added ovl detect 32/64 :  distutils installer

added 1064.PyInstaller v.3.6

ADDED - .egg Python Distribution Package ,.

PY - Python Script file - .PYZ - Python Zip Application,

(.exe-ovl) Python ZlibArchive - created by PyInstaller - www.pyinstaller.org

update for Obfuscated like Babel 9.3 info

fixed :
800. .NET - dotfuscator - PreEmpire Solutions - www.preemptive.com

( added version detector for protected with regged versions )

fixed 641.Generic Detector new : Obsidium v1.3.x - 1.4.x

added 900. Obsidium - update to 1.6.10.3

fixed 973.Trend Micro Installer v11-v16

added on x64 Downloader - Internet Behavior

File pullDown Menu - changed - malware scan

QuickSand.io to : Hybrid Analysis ( https://www.hybrid-analysis.com )

small changes on Header_GUI Form

27.02.2020

Exeinfo Pe ver.0.0.5.9

1064 / 85 signatures

( Ext_detector  v.0.5.4.9  )

userdb.txt : 4423 
 

many bugs fixed ,

Added :  Python package detector - zlib , .pyz files

ovl - Distutil detector

many small updated and fixed GUI size on Multiscan

10.02.2020

Exeinfo Pe ver.0.0.5.9

1063 / 85 signatures

( Ext_detector  v.0.5.4.8  )

userdb.txt : 4423 
 

many bugs fixed ,

Fixed DEEP scanning Engine 

Added :  NOT Win EXE - .o - ELF exe [ 32bit obj. Exe file - CPU : NVIDIA CUDA

Added .tips : Xvolkolak v0.22 unpacker

Installers update : InstallSimple v.3.0 , Install Creator , WinRar sfx

generic [ Setup / Installer ] fix

ovl - Install Shield 201x fix for new version

fixed .bin/rom - BIOS ROM Extension (IA-32) Intel

1015.VMProtect v3.00 - 3.1.2 [ *nstd EP ] - fixed

946.ESET Live Installer - fix update

many small updated and fixed GUI size on Multiscan

( added 20 skin )

03.01.2020

Exeinfo Pe ver.0.0.5.8 Final

1062 / 85 signatures

( Ext_detector  v.0.5.4.1  )

userdb.txt : 4422 
 

many bugs fixed ,

Added new DEEP scanning Engine 

( exe/zip/rar/7z/cab/Lzma m.23 on biggest section )

Added : : ELF executable ripper to EXE PE (  for ROM Bios files )

Added .lzma40 nstd ripper for Installers

Buffer for exe files - now 112 MB  - not 96 MB

added Generic Setup detector

many signatures updated and fixed

and other...

22.10.2019

Cryptographic plugins for Exeinfo Pe

kanal v2.92

and

Hash & Crypto Detector v1.4

07.03.2019

Exeinfo Pe ver.0.0.5.0

1015 / 67 signatures 

Ext_detector.dll

for : Exeinfo Pe   &   Xor Data Uncrypter

version 0.4.9.0

new signatures added : Detect VMProtect v3.1 ( 32 & 64 bit )

many diagnose changed , added new Ripper for Packed .js files

changed  :Quick Unpack registry from v2.2 -> v3.4 , v2.2 not supported !

External scan - userdb.txt support up to : 4800 sign

.ico Ripper error fix

fix : Not Windows PE -> Signature : LX <- OS/2 ver.2.0 or higher , EIP : 00xxx

added to DOS exe : Not Windows PE -> Sign. : DOS 8 bit - CS:IP : 0000:00xx

961.[ Obsidium ver.1.6.43.0 ] fix TAGG

946. fix : ESET Live Installer

external db signatures : 4524

GUI - Windows Visual Style - fixed

....

12.04.2018

Exeinfo Pe ver.0.0.4.8 Test

994 / 64 signatures

( Ext_detector  v.0.4.5.2 )

Many fixes : Added detection for  Go language x64

old signatures updated GNU GCC MinGW + ver.detector ,

added : GO language detector , STATIC - Qt v5.x App.devel.

fix for ScreenShot create - Multiscan GUI Win7 , Inno Setup updated

External scan changed : minimum 4 bytes length ( ex. E8 ?? ?? ?? ?? ) !!!

10.09.2017

Exeinfo Pe ver.0.0.4.3 Win 10

( Ext_detector v.0.3.8.2 )

 960 / 49 signatures

Base64 exe Ripper added , Form view fixed , Time convert UTC ...

Debug pdb  added ,  console "/lol:' added  , new signatures update !

external signatures 4700 userdb.txt support ! + 4511 userdb.txt

11.08.2016

   Adv_scan.dll plugin  - A.S.L version fixed

-> no trojan on Anti Virus scanners

For Developers / Programmers

           Exeinfo Pe / PeID  plugin

   Source code  : 

PowerBASIC ,

C++ ,

Delphi ,

MASM

           Exeinfo Pe / PeID  plugin

   Example code :  Delphi source code

 How to use Ext_detector.dll from  Exeinfo Pe

    Language : Delphi 2006 - Console only 

              minimum code  - source

Send suggestions   :   asl@onet.eu