Exetools - Exeinfo PE

Exetools (https://forum.exetools.com/index.php)

- Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)

- - Exeinfo PE (https://forum.exetools.com/showthread.php?t=20044)

Quote:

Originally Posted by riverstore (Post 81159)

Thanks for the news and the attachment, but it still doesn't detect Themida :(

Latest private version:

Quote:

Last sign :

659. FastPack 32 bits ver.2.x C 2012 by Jean-Marie BARONE ( packer for
Win7/8) http://fastpack.free.fr *ACM
660. CreateInstall v5.1x Gentee ( 2007 - 2012 ) - www.createinstall.com
661. Microsoft SFX CAB Archive ( WiX Installer ) - MS C++ v10 -
www.microsoft.com
662. Software key wrapper 2.0. Copyright 2007-2012 GiveawayOfTheDay.com
663. generic check - MinGW/GCC v.4.7.x - NEW with TLS
664. Themida/Winlicense v.2.1.x.x ( std ) -> Oreans Technologies -
www.oreans.com *ACM
665. Microsoft Visual C++ ver. 9.0/10.0 [ DEBUG ] - E8 System Win7/8 sign.

but where i can find the latest signs (659 to 664) please

EXEInfo PE v.0.0.3.2 Beta II with 665 signatures

Quote:

Extra added :

- Ext_detector.dll - ver.0.3.8

Plugins :

- advanced_scan.dll v1.07 ( with UserDB.TXT 7076 signatures )
- Hash & Crypto Detector v1.4 ( RSA ,CRC32 , MD5 ... detect )
- PeID Signature Maker v1.2.0 ( You can add new signatures )
- user skins fo ExeinfoPe ( 25 skins )

Last sign :

659. FastPack 32 bits ver.2.x C 2012 by Jean-Marie BARONE ( packer for
Win7/8) http://fastpack.free.fr *ACM
660. CreateInstall v5.1x Gentee ( 2007 - 2012 ) - www.createinstall.com
661. Microsoft SFX CAB Archive ( WiX Installer ) - MS C++ v10 -
www.microsoft.com
662. Software key wrapper 2.0. Copyright 2007-2012 GiveawayOfTheDay.com
663. generic check - MinGW/GCC v.4.7.x - NEW with TLS
664. Themida/Winlicense v.2.1.x.x ( std ) -> Oreans Technologies -
www.oreans.com *ACM
665. Microsoft Visual C++ ver. 9.0/10.0 [ DEBUG ] - E8 System Win7/8 sign.

A.S.L

Download
http://www.datafilehost.com/download-e7ba8568.html

Have fun :)

Quote:

Originally Posted by JeRRy (Post 81188)

EXEInfo PE v.0.0.3.2 Beta II with 665 signatures
Download
http://www.datafilehost.com/download-e7ba8568.html

Have fun :)

It can detect Themida now, Thanks a lot! :)

Quote:

Originally Posted by riverstore (Post 81166)

Thanks! In a video tutorial by giv, I see that his ExeInfo can detect Themida

You can add sig for exeinfo.
or
try PEiD mod by Vic4Key.

Download:

Quote:

hxxp://www.mediafire.com/?qvwjbuk2wp4fan4

New private version

Quote:

Exeinfo Pe v.0.0.3.2 - 2012.09.11 with 667 signatures

extra added :
- Ext_detector.dll - ver.0.3.8 ( non executable data detect )

Plugins :
- advanced_scan.dll v1.07 ( with UserDB.TXT 7076 signatures )
- Hash & Crypto Detector v1.4 ( RSA ,CRC32 , MD5 ... detect )
- PeID Signature Maker v1.2.0 ( You can add new signatures )

- user skins fo ExeinfoPe ( 2o skins )

Exeinfo Pe v0.0.3.2 PowerPack with 667 signatures

http://www.mirrorcreator.com/files/0PKCO1XG/Exeinfo_Pe_v0.0.3.2_PowerPack.rar_links

almost final ready, it won't see any test version dialog.

Quote:

Originally Posted by cxj98 (Post 81394)

almost final ready, it won't see any test version dialog.

Final version indeed!

Download on official webpage:

Quote:

http://www.exeinfo.antserve.com/exeinfope.zip

Exeinfo PE - ver 0.0.3.3 Beta 680 sign
Attachment 6722

Exeinfo PE - ver.0.0.3.3 - 680 sign 2012.12.25 FULL

Ext_Detector.dll updated to version 0.0.7.0

Attachment 6850

Official site www.exeinfo.xn.pl updated on 2013-06-15

Readme_ExeinfoPe.TxT

Quote:

Exeinfo Pe v.0.0.3.3 Full_2 - with 680 signatures

extra added :
- Ext_detector.dll - ver.0.8.0 ( non executable data detect )

Plugins :
advanced_scan.dll + UserDB.TXT with 7075 Signatures

Languages :
Empty sample language file .lng
Russian .lng
Chinese_CHS.lng
Chinese_Big5.lng

Hint :
Click on Config "Language:" string to configure language file.

A.S.L

version : 0.0.3.3 Full - ( 680 sign )
http://www.exeinfo.antserve.com/exeinfope.zip

Code:

extra added :

Ext_detector.dll - ver.0.8.0 ( non executable data detect )

Plugins : advanced_scan.dll + UserDB.TXT with 7075 Signatures

Languages :

Empty sample language file .lng

Russian .lng

Chinese_CHS.lng 

Chinese_Big5.lng

ExeinfoPE v.0.0.3.4 Beta2 696 sign/Ext_Detector v.1.0.0

ReadMe.txt for ExeinfoPE

Code:

ExeinfoPE v.0.0.3.4 Beta2 696 sign - for Beta Tester only not for usage ( with NAG )



Total not tested version , possible nonSense diagnose !!! , many signatures modified



fixed :



- file scaner changed ( ex. VMProtect ) Faster scan 

- compiler detector - add Cygwin - detect console app

- fixed detection for 2 section dll    *generic check - Microsoft Visual C# / Basic.NET / MS Visual Basic 

- Fixed - inteli check : MINGW - Bloodshed Software ( www.bloodshed.net )

- StatWin GUI - MD5 copy to clip fixed

- Copy As .bak - close removed and .ext fixed / path

- Rename file - fixed path and txt 

- added detection for : Private exe Protector v.4.1.2

- rar ripper file names changed to Hex "XX-rip.rar"

- rar added pass info : NOT EXE - its archive - .RAR >  Used : [ Password needed - HEADER Crypted ]

- Export view fixed

- added : LE - Linear Executable ( VxD driver Win 3.x / Dos Ext. /  OS/2 ) - mixed 16/32 bit



and more



new sign :



681. InstallIQ - 2012-2013 InstallX, LLC  [ MS C++ v.xx ] - www.installiqlearnmore.com

682. ToolBelt Installer - www.?????.com - Microsoft Visual C++ 9.0 - Visual Studio 2008

683. ( UPX 3.x modified ) Softonic Downloader - PUA / Adware / Downware - www.softonic.com*

684. Google Installer  www.google.com -  Microsoft Visual C++ ver. 8.0 / Visual Studio 2005

685. Squeez Sqx Archive Selfextractor v.5.63 SQ5SFX overlay - www.speedproject.de/enu/support/updates.html ( Upx / not Upx )

686. Adobe Flash Player v11.x - www.adobe.com - Microsoft Visual C++ 9.0 - Visual Studio 2008 (E8)

687. FreeArc 0.5x -0.67 SFX stub - ovl .Arc Archive [ v0.xx ] - Dev-C++ / UPX stub

688. Tampared : Inno Setup -> [ '????' Setup v.5.1.13 ]

689. Logic Protect EXE Ceator 2.0.4 - www.logicprotect.com ( stub : Microsoft Visual C++ ver. 8.0 )

690. CodeWall 2010 v4.1.1.0 ( *trial .NET Protector ) - www.codewall.net - Microsoft Visual C# / Basic.NET

691. Private exe Protector v.4.1.2 (30.01.2013)  - www.setisoft.com

692. Private exe Protector v.4.1.2 *Trial- DLL - (30.01.2013)  - www.setisoft.com

693. Kaspersky AV Pack  ( exe/dll ) - www.kaspersky.com    *ACM

694. InstallAware DRM ( Trialware Creator )  Copyright 1998-2009 Softwrap Ltd.

695. [.NET source exe ] - InstallAware DRM ( Trialware Creator )  Copyright 1998-2009 Softwrap Ltd.

696. Themida/Winlicense v.2.1.0.0 ( std mode ) -> Oreans Technologies - www.oreans.com  *ACM



A.S.L.

Improved File Scaner. For example, VMProtect 2.09 & apps protected by Themida/Winlicense v.2.1.0.0 can be identified now.

ReadMe.txt for Ext_Detector

Code:

  ********************************************************

  *                                                      *

  *                Ext_Detector.dll                      *

  *                                                      *

  *      Non executable detector for Exeinfo Pe          *

  *                                                      *

  *      ver.1.0.0 - required Exeinfo v.0.0.3.1          *

  *                                                      *

  *               www.exeinfo.xwp.pl                     *

  *                                                      *

  *               2013.07.06 by A.S.L                    *

  *                                                      *

  *                freeware version                      *

  *                                                      *

  ********************************************************

...

Attachment 7140
Attachment 7141

0.0.3.4 Beta 700 sign

update : 2013-10-10
10.10.2013 - ver.0.0.3.4 Beta 700
15.06.2013 - ver.0.0.3.3 Full - fixed version (2)
30.03.2013 - ver.0.0.3.3 Beta - new user language files added , Hex2Dec converter , ovl click detector
11.02.2012 - updated : Ext_detector.dll - 62 signatures - non executable data file detector
10.11.2012 - added new Rippers , new signatures , .NET exe info , many fixes
22.07.2012 - doc/xls/msi ripper added , bug fixed , new sign added , config text color for user Skin
30.08.2011 - small GUI changes , new signature added , plugin detector added , ver.0.0.3.0
03.01.2011 - added xml ripper, compiler detector, process killer,... ver.0.0.2.9
05.12.2010 - new option , new signatures bug fixes

Code:

http://exeinfo.atwebpages.com