Exetools - Exeinfo PE

Page 5 of 5

« First

Show 40 post(s) from this thread on one page

Exetools (https://forum.exetools.com/index.php)

- Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)

- - Exeinfo PE (https://forum.exetools.com/showthread.php?t=20044)

Dr.FarFar

01-03-2023 09:57

Exeinfo Pe v0.0.7.6

1 Attachment(s)

New Update ( Test version ) :D

Quote:

Exeinfo Pe v. 0.0.7.6

1150 + 151 Signatures x64
Ext_detector - v6.7.5 ( 675 Non eXe Signatures )
userdb.txt : 4451

Quote:

Signatures Update

- Strong update .NET obfuscator x86 / x64 , fixed fake detection !
- DLL Characteristics GUI updated
- .NET GUI added Hex view
- Added .jp2 jpeg2000 Ripper ( for .pdf files )
- fixed : x64 GO Programming Language
- 5045.x64 - AutoIt [ v3.3.14.5 ]
- 5045.x64 - AutoIt [ v3.3.16 2022.09 ]
- 5012.x64 Embarcadero Delphi NSTD
- 5035.x64 Paquet Builder v21.0.0
- 016.PEcompact ver.3.02.2
update : 5076.[ x64 Enigma ver.5.x - 7.0 ]
update ver.VMProtect v.3.5.1 - 3.7.3 2022
fixed & upd.723.Ahk2Exe for AutoHotkey [ v1.1.36.02 ]
added v10 : 588.Enigma Virtual Box - v10.00 (2022.12.14)
fix detector :
5135.x64 VMProtect v.3.6.0 - 3.7.3 2022
added new version :
1021.InstallAware Virtualization v6 ( BoxedApp packer v2.x - 14.0 )
1021.BoxedApp Packer 2018 / 2019 14.0
added x64 : [ ESET module MZ-Header ]
added v5 generic :
760.Generic Crypto Obfuscator For .Net v5 - LogicNP Software
added tampared exe :
Windows PE exe for .NET / GNU compiler but no "PE" tampared/compr.
Windows PE exe compressed LZ77
fix : NOT EXE - .dex - Dalvik Executable v5.0 - 9.0

- This Version Not Support : Windows 10 ( Arabic version )

A.S.L ( c ) 2022.12.29

Quote:

hxxps://www22.zippyshare.com/v/RoJZCnQ8/file.html

Dr.FarFar

01-30-2023 21:09

Exeinfo Pe v. 0.0.7.7

1 Attachment(s)

New Update ( Test version ) :D

Quote:

Exeinfo Pe v. 0.0.7.7

1156 / 157 Signatures x64
Ext_detector - v6.8.4 ( 675 Non eXe Signatures )
userdb.txt : 4453

Quote:

Signatures Update

- Strong update .NET obfuscator x86 / x64 ,

fixed fake detection !

- added for test : x64 ArmDot 2023 v3.0.0 - www.armdot.com

( I have trial version only )

IF result is : Sign. for DLL : RustemSoft Skater .NET Obfusc.

on EXE file , you can change this result :

Click on Main form [ < ] Button

Exeinfo ignore this detection.

many NON EXE detection added

- This Version Not Support : Windows 10 ( Arabic version )

Last signatures :

x86

1138.EasyCode v2.0 x86 + MASM ( std sign no Deb ) - www.easycode.cat
1139.EasyCode v2.0 x86 + MASM ( Dbg sign ) - www.easycode.cat
1140.[ WARNING : Tampared - Nullsoft Install System v3.0x ] - not packed stub / v.3.05
1141.EuroAssembler ver.20190402 - http://euroassembler.eu *ACM
1142.Standalone EXE Document Locker v1.1 - 2022.11.29 www.4dots-software.com
1143.ZIP SelfExtractor Maker Setup v1.11 2022.11 - www.4dots-software.com
1144.BoxedApp packer v4 2021 (c) Softanics - BozedAppSDK.dll incl. - stub : Delphi/C++/FPC detect only !
1145.[ BoxedApp SDK32 - 2018-2021 ] DLL library - www.boxedapp.com - stub : C++ 12 NSTD EP
1146.DeepSea Obfuscator v.x.x - 4.4.4 ┬ر 2001-2013 TallApplications - obsolete tool ! - 90% detector
1147.Generic for DLL : RustemSoft Skater .NET Obfuscator v.4.8 - 9.9 - 2022 - www.rustemsoft.com ( only if config fast : OFF)
1148..NET - DNGuard HVM v.2 - 4.20 by ZiYuXuan Studio - 2022.11 - www.dnguard.net - stub : MS Visual C#
1149.[ DNGuard HVM Runtime - v3.x - 4.x 2022 ] DLL library - www.dnguard.net - stub : MS C++
1150.DNGuard v4.x 2022 ( static stub x86/x64 .NET inside ) - www.dnguard.net - stub : Microsoft Visual C++ v.8.0
1151.Baymax Patch Tools v3.1.0 - 3.x 2023.01 by Nisy/PYG www.chinapyg.com - stub : Microsoft Visual C++ v.9.00 & UPX Stub
1152.Metrowerks CodeWarrior C/C++ x86 V2.4 ( MAC OS ) CW Tools 6.0 - obsolete compiler - www.freescale.com *ACM
1153.Struct 3 : VMProtect v.3.6.0 - 3.7.3 2022 [ Exe , Option : packed ] - www.vmpsoft.com
1154.Yano v1.0.15.0 ntoolbox.bom/yano 2012 obsolete! - stub : MS Visual C# / Basic.NET
1155.ArmDot 2023 v3.0.0 - www.armdot.com ( protector/license creator ) - stub : MS Visual C# / Basic.NET

x64

5141. x64 MASM , Linker 14.xx - [ DBG_13 sign ] - no www.microsoft link to masm64 sdk
5142. x64 MASM , Linker 2.50 POLINK v8 2015 - smorgasbordet.com , no www.microsoft link to masm64 sdk
5143. x64 - EuroAssembler ver.20190402 - http://euroassembler.eu *ACM
5144. x64 Microsoft VC++ 14.29 exe [ CPU : AA64 ARMv8 ]
5145. x64 - SecureUPDATE_Installer ( Wizard or Patch - Delta instaler for patch/update ) - stub : [ Tampared file ] x64 UPX v.3.9-4.0
5146. x64 BoxedApp packer v4 2021 www.boxedapp.com - Softanics - BoxedAppSDK.dll incl. - stub : xxxx
5147. x64 [ BoxedAppSDK64 - 2018-2021 ] DLL library - www.boxedapp.com - stub : C++ 12 NSTD EP
5148. x64 - DeepSea Obfuscator v.x - v4.4.4 ┬ر 2001-2013 TallApplications - 96% detector , NO *ACM can detect Fake results !
5149. x64 [ DNGuard HVM Runtime - v4.x 2022 ] DLL library - www.dnguard.net - stub : x64 Microsoft Visual C++ v8.x
5150. x64 .NET - DNGuard HVM v4.20 by ZiYuXuan Studio - 2022.11 - www.dnguard.net - stub : EP=0000
5151. x64 DLL from : Microsoft AppStore ( Export : RHBinder__ShimExeMain ) - stub : NSTD MSV C++ built by: PROJECTNREL
5152. x64 EXE from : Microsoft AppStore ( exe run dll -> RHBinder__ShimExeMain ) - stub : NSTD MSV C++ built by: PROJECTNREL
5153. x64 Baymax Patch Tools v3.1.0 - 3.x 2023.01 by Nisy/PYG www.chinapyg.com - stub : Microsoft Visual C++ v.9.00 & UPX Stub
5154. x64 Microsoft Visual C++ v14.16 - 2017 - DLL ( push rbx , DisableThreadLib.Cs. )
5155. x64 Yano v1.0.15.0 ntoolbox.bom/yano 2012 obsolete! - stub : x64 .NET exe file : 00 Entry Point
5156. x64 ArmDot 2023 v3.0.0 - www.armdot.com ( protector/license creator ) - stub : x64 .NET DLL with : 00 Entry Point - CPU : AMD64

A.S.L ( c ) 2023.01

Quote:

hxxps://www79.zippyshare.com/v/VzUzsPAk/file.html

Dr.FarFar

03-23-2023 07:33

Exeinfo Pe v. 0.0.7.7 V

New Update ( Test version 5 ) :D

Quote:

Exeinfo Pe v. 0.0.7.7 V

115x / 15x Signatures x64
Ext_detector - v6.8.4 ( 675 Non eXe Signatures )
userdb.txt : 4453

Quote:

.NET - Babel v9.x updated , IntelliLock 3.0

console mode fixed - window no flash

overlay xor - changed ! , you can use on non executable files ( un-xor binary file )

fix : 426.Themida & WinLicense 2.0 - 2.4.6 - struct (Hide from PE scanners II-V)

Config - if set to English , I delete config lng file for external language like : Chinese.lng

added on MSV C++ for PUA App. : [ WARNING : File use VirtualProtect ]

update [ 7-zip SFX stub ] [ v22.01 Con - GENUINE Stub ]

1145.[ BoxedApp SDK32 - 2018-2021 ] DLL library - www.boxedapp.com

All signs : imptoved VMProtect 3.5.x - 3.6.x - x86 & x64 - Strong detection POWER !

fix 797.DeployLX Software Protection System - Codeveil 5.x for .NET

added
800.[ NETSecureFake Signature ! ] .NET + dotfuscator - PreEmpire Solutions

fixed Non exe - .h264 movie detector

Quote:

hxxps://anonfiles.com/v2Ues0g8z0/Exeinfo_0077fixed_console5_zip

Dr.FarFar

03-29-2023 22:36

Exeinfo Pe v.0.0.7.8

New Update ( Test version ) :D

Quote:

Exeinfo Pe v.0.0.7.8

1167 / 161 Signatures x64
Ext_detector - v0.6.9.6
userdb.txt : 4453

Quote:

console mode fixed - window no flash

Now detect All exe xor-ed -combination on binary files*

fix and update 32/64 : VMware/BitRock InstallBuilder ver: 22.x

fixed console mode option '/se' scan with external signatures userdb.txt

added detection :
925.Make SFX v5.x http://74.cz

NOT EXE - .ZIP archive - .appxbundle Windows 8.1 App Bundle

851.VirtualBox Installer [v.7.00.6 ] 2023

[ Sfx Easy 7-Zip 0.1.6 James Hoo

added 32/64 & update :
[ Update Tool ] - x64 Microsoft Visual C++ v14.34

update EP
VMProtect v.3.6.0 - 3.7.3 2022 [ Exe , Option : packed ]

now detect v.23
1054.Yandex browser installer v19 - 23.x full

update detector
970.Google UPDATE (MS Edge/Chrome) Update Setup Installer

added only x86 stub : [ Opera 2023 Installer ]

fixed : x64 for Alexandria ver35
5012.x64 Embarcadero Delphi compiler

added signatures :

5150. x64 .NET - DNGuard HVM v4.20 by ZiYuXuan Studio - 2022.11 - www.dnguard.net - stub : EP=0000
5151. x64 DLL from : Microsoft AppStore ( Export : RHBinder__ShimExeMain ) - stub : NSTD MSV C++ built by: PROJECTNREL
5152. x64 EXE from : Microsoft AppStore ( exe run dll -> RHBinder__ShimExeMain ) - stub : NSTD MSV C++ built by: PROJECTNREL
5153. x64 Baymax Patch Tools v3.1.0 - 3.x 2023.01 by Nisy/PYG www.chinapyg.com - stub : Microsoft Visual C++ v.9.00 & UPX Stub
5154. x64 Microsoft Visual C++ v14.16 - 2017 - DLL ( push rbx , DisableThreadLib.Cs. )
5155. x64 Yano v1.0.15.0 ntoolbox.bom/yano 2012 obsolete! - stub : x64 .NET exe file : 00 Entry Point
5156. x64 ArmDot 2023 v3.0.0 - www.armdot.com ( protector/license creator ) - stub : x64 .NET DLL with : 00 Entry Point - CPU : AMD64
5157. x64 GO Programming Language - Compiler v1.19.7
5158. x64 - DLL to EXE converter v1.1 - for 32 & 64 bit DLLs - 2018-10-10
5159. x64 .NET - DLL to EXE converter v1.1 - for 32 & 64 bit DLLs - 2018-10-10
5160. x64 .NET IntelliLock 2.9 - 3.0 ( unreg.js script ) .NET Reactor

and x86 signatures :

1155.ArmDot 2023 v3.0.0 - www.armdot.com ( protector/license creator ) - stub : MS Visual C# / Basic.NET
1156.[ PUP/PUA - Softonic Downloader v6.4x 2022 ] - Inno Setup Module 5 SFX - [ v.6.1.0 ]
1157.InstallForge Setup v.1.4.2 ( free ) 2007-2020 - http://installforge.net - stub : PureBasic v4.20 - v6.0
1158.[ A.S.L - NSIS Setup Protector ver.0.01 ] - Nullsoft Install System v2.xx - 3.0 / v.2.12
1159..NET exe bytepress v1.0.0.2 by Adam Roach - http://github.com/roachadam/bytepress ( Mode : lzma/gzip/quickLz )
1160..NET Bat2Exe v2.1 ( 17.11.2021 ) - http://github.com/dehoisted
1161.[ Overlay crypted PUP/PUA - Unknown Pack ] - Generic : Installer Nullsoft PiMP Stub / v.20-Sep-2022.cvs
1162.Generic new : AVAST/AVG Software Sfx installer v23.x 2023 - www.avast.com - stub : NSTD MS VC++ 14.x
1163.x86/x64 Chromium Installer v.113.x - 2023 - stub : Microsoft Visual C++ v.14 - 2015 ( NSTD ) microsoft.com
1164.x86/x64 Generic/Modded : Chromium Installer v.xx - 2023 - stub : Microsoft Visual C++ v.14 - 2015 ( NSTD ) microsoft.com ( ex.Maxton )
1165.x86 - DLL to EXE converter v1.1 - for 32 & 64 bit DLLs - 2018-10-10
1166.Adobe Installer downloader v2.11.0.30 - upx stub 3.91
1167..NET IntelliLock 2.9 - 3.0 ( unreg.js script ) .NET Reactor

Quote:

hxxps://anonfiles.com/h0A2Fch6z6/ExeinfoPE_0078_zip

Dr.FarFar

06-06-2023 00:21

New Update ( Test version ) :D

Quote:

Exeinfo Pe v.0.0.7.8 II

1169 / 161 Signatures x64
Ext_detector - v0.7.0.7
userdb.txt : 4455

Quote:

hxxps://anonfiles.com/W8E9v4v1z7/ExeinfoPE_0078_II_zip

Dr.FarFar

07-13-2023 21:36

Ext_detector.dll

New Update ( Ext_detector.dll ) :D

Quote:

Ext_detector.dll

for : Exeinfo Pe & Xor Data Uncrypter
version 0.7.1.0

LAST SIGNATURES :

690. NOT EXE - .JB2$ bitmap picture - stream without file header ! - Joint Bi-level Image 691. NOT EXE - (.) Win PE File Crypted with XOR FF (exe/dll/ocx/sys)
692. NOT EXE - (.) Win PE File Crypted with XOR 77h (exe/dll/ocx/sys)
693. NOT EXE - .apmx86/64 API Monitor v2 log file - www.rohitab.com
694. NOT EXE - .loov AV Database - Smadav 2022 v14.x - www.smadav.net
695. NOT EXE - .dat Zillya Antivirus Bases 2.0.0 - http://zillya.com
696. NOT EXE - (.) PA19 Binary Delta Compression (BDC) Technology
697. NOT EXE - .dat ZPKG packet data ( *Zillya Antivirus - http://zillya.com )
698. NOT EXE - .bin MTK_BLOADER [ v.xx ] binary file - 2021, MediaTek Inc.
699. NOT EXE - .bin MediaTek firmware binary file - wikipedia.org/wiki/MediaTek - 2021, MediaTek Inc. http://spflashtools.com/category/windows
700. NOT EXE - .txt END USER LICENSE - text file
701. NOT EXE - .ovl VMWare v12-17 Installation Launcher data ( overlay from exe )
702. NOT EXE - (.) Edge WebCache data file - microsoft.com
703. NOT EXE - .FIR Canon Digital camera firmware file [ v.1.x.x ] - www.canon.com
704. NOT EXE - .jxl JPEG XL royalty free raster graphics ( Exif sign. ) ( lossy / lossless ) 705. NOT EXE - .jxl JPEG XL royalty free raster graphics [ 70% detector only ]
706. NOT EXE - .wp2 WebP2 bitmap picture experimental format

707. NOT EXE - .fas FASM v1.73 ( x86/x64 ) symbols data - - http://flatassembler.net 708. NOT EXE - .obj CodeVisionAVR V2/3 C lang. object file - www.hpinfotech.com
709. NOT EXE - .prj CodeVisionAVR V3 C lang. project file - www.hpinfotech.com
710. NOT EXE - .o Xojo object - REALbasic Binary File - www.xojo.com

Quote:

hxxps://anonfiles.com/6cTeXe12z5/Ext_Detector_v710_ViP_zip

Dr.FarFar

08-02-2023 04:37

Exeinfo Pe v. 0.0.8.0

New Update ( Test version ) :D

Quote:

Exeinfo Pe v. 0.0.8.0

1172 / 162 Signatures x64
Ext_detector - v0.7.1.2
userdb.txt : 4455

- NON exe file format many fixes , mp4 , jpg , pdf, img/EXT2/3/4 Linux extended file system image
- add size on mp4/avif - file ( MPEG 4 container H.265 ) - [ 2048 x 1536 ]
- jpg file added GPS - data detector !
- added NSIS Installer Nullsoft NSTD detector for GCC compiler
- fixed result for NSIS exe if file size over 1 GB
- update C++ MS linker to 14.36 x86/x64
- Zip ripper fixed
- added detector on Linux ELF files for hidden : .SQUASHFS image files
- x64 - MinGW-w64 GCC: (GNU) version detector fix
- added New to Compiler detector menu for : GCC GNU v11/MinGW-W64 v4/MSYS v12 - 32/64 compiler

and other detection fixes

small visible on GUI

and other

Quote:

hxxps://anonfiles.com/M4TeK455z6/ExeinfoPe_0080_ViP_zip

TechEx

09-05-2023 06:58

Quote:

Originally Posted by Dr.FarFar (Post 128102)

New Update ( Test version ) :D

Link isn't working.

sendersu

09-05-2023 12:55

reup 0080 https://www.sendspace.com/file/tbqv0d

Dr.FarFar

09-24-2023 21:34

Exeinfo Pe v. 0.0.8.1 (ViP)

1 Attachment(s)

New Update ( Test version ) :D

Quote:

Exeinfo Pe v. 0.0.8.1

1173 / 164 Signatures x64
Ext_detector - v0.7.1.4
userdb.txt : 4455

update to ver.45.5 : 1156.PUP/PUA - Softonic Downloader
fixed :
589.Generic - Free Pascal compiler (MinGW/FPC) familly
NOT EXE - .vcproj Visual Studio C++ Project v8.0-9.0
NOT EXE - .PDF format ( ver.1.6 ) - [ *ENCRYPTED ]
5138. x64 NET IntelliLock v.1.5 - 3.0 ( .NET Reactor 6.x ) - for DLL 00 EP
5088. x64 Java installer v.11-20.0 offline/online
673.Sun Java Installer v8.0.x
added NOT EXE - .cbproj Radstudio ( C++ Builder )
NOT EXE - .Zip Arch. - .msixbundle
NOT EXE - .Zip Arch. - .msix/appv
Detector for Dos , win 32 , win 64 - UniLink creator
added : over 100 mb info in zip and rar files

and other

Quote:

hxxps://we.tl/t-pZ0gUvEhrs

LordGarfio

10-08-2023 02:14

1 Attachment(s)

ExeInfoPE Ext Detector v0.7.1.8

Non executable detector for Exe Info PE and XbyOR Data Uncrypter.

2023-09-30 by A.S.L.

Hess	10-16-2023 17:40

Hi ,

ExeInfoPE v0.0.8.1 has problems with some plugins - upx unpacker complains that there's missing ImpREC.dll file , but it's in the same directory with it , also program fails to detect GUID.dll which is also present in plugins directory. Also , can you make all plugins available on your website or is it VIP only thing?

Thanks in advance.

sendersu

10-17-2023 16:00

run procmon util and see on what path does it look for file

LordGarfio

11-07-2023 02:31

1 Attachment(s)

ExeInfo PE v0.0.8.1 II and Ext Detector v7.1.8

06.10.2023 by A.S.L.

A.S.L

02-15-2024 01:19

Exeinfo PE

1 Attachment(s)

Temporary download link to v0.0.8.3 Alpha III

https://app.box.com/s/i0da5n5sj19oypbj6cf3rorx8c1ig021

still under constructon not on my www :-)

giahh

05-13-2024 23:31

Thanks for uploading

wx69wx2023

05-21-2024 18:41

1 Attachment(s)

Exeinfo Pe v. 0.0.8.4 (ViP)

kozlof

10-24-2024 20:15

New Update Exeinfo PE v.0.0.8.6

1 Attachment(s)

Exeinfo PE v.0.0.8.6 and Ext detector v.0.7.3.5

22.10.2024 by A.S.L.

Quote:

Version : 0.0.8.6 ( 1201 + 177 signatures x64 )
: Ext_detector - v7.3.5 ( 735 non exe signatures )
: external signatures : userdb.txt : 4460

for Windows XP : run exeinfope_Win_XP.exe !
many changes , signatures updated , and few hidden options
fixed : 1199.XerinFuscator v.1.0.0
NET_GUI changed visible
added support for 5,6 NET Streams - view streams enabled ( Bug fixed )
added detector zip sfx : Beijing JJJsafe Technology - unpack problem Xpack mode
added better password detector for .7z files AES and AES*
added to .7z archives ZS compressions detector - not supported with std 7zip Archiver
( Zstd , Liz, LZ5, Brotoli )

Code:

hxxps://www.upload.ee/files/17303589/Exeinfo_PE_0.0.8.6.zip.html

wx69wx2023

10-27-2024 01:01

1 Attachment(s)

Integrate plugins：
https://www.52pojie.cn/thread-1975821-1-1.html

https://prnt.sc/gmS6wEr3PVFK

download:
https://od.cloudsploit.top/api/raw/?path=/tools/exeinfo/Exeinfo%20PE%200.0.8.6.exe

A.S.L

12-23-2024 19:09

Exeinfo Pe 0.0.8.7 Beta II

https://app.box.com/s/5dr1x2gf42pg3x61kj9dvvrhws0uyag0

DARKER

01-27-2025 00:04

0.0.8.8 (25.01.2025)

1209 + 181 signatures x64
Ext_detector - v7.4.7 ( 747 non exe signatures )
external signatures : userdb.txt : 4462

Whats new:

added .NET GUI auto click on .NET 4 / 6 detector
added .PYD x86 v2.x 3.x / x64 v3.x version detector
fixed cpu version detector added
added [ generic - CPU : 0x01C4 ARMv7 ] for : GO Programming Language Compiler
added x86 only : [ plugin : Photoshop plugin ]
fix 5005. x64 Microsoft Visual C++ v14.20 - 2008 [ RT_CODE ] - DLL
added to .pdb - NOT EXE - .IDB Microsoft Developer intermediate
added .zlib ripper fixed - Zlib - false Alarm - skipped ( now ripp more files ) - fixed for Android backup : fullbackup.ab
added .zlib added ripper for zlib v2 - if Fast scan off option in Config (example : installer LLC SysDev Laboratories )
added detector NOT EXE - .zlib v2 files
added dll detector - XerinVM.Runtime v1.0 2024
small fixed XerinFuscator v1.0 - 3.0 , XFUSCATOR 1.0.0.4
added x64 [ NSTD section packed data/vmp ] - stub : x64 Microsoft Visual C++ v14.28
fixed added h265 - NOT EXE - .mp4/m4v ( MPEG-4 )
Buffor for exe set to : 380 MB
overlay - scan deeper for 7zip , zip , ect...
fixed x64 VMProtect
fixed MS C++ detector for VMProtect SDK used x86/x64
Header GUI - added DBG string text label
added runtime detector for x86/x64 - [ dotNet Protector Runtime PvLog ]
added [ VMProtect SDK used ] Borland Delphi 2009-2010 - borland.com
added .NET GUI BSJB button
and more

Home:

Code:

https://github.com/ExeinfoASL/ASL

Download:

Code:

https://github.com/ExeinfoASL/ASL/releases/download/v0.0.8.8/exeinfope.zip

DARKER

04-10-2025 14:33

0.0.9.0 (2025.03.29) - NOT Tested version

1214 + 181 signatures x64
Ext_detector - v7.5.4 ( 754 non exe signatures )

Whats new:

for Windows XP - added x86 7z v22.09 ( ZS/LIZ mode not supported only on Windows 10 )
*fixed resources for XP
Inno unpacker update v.1.77
added "x" on main GUI for unpacking .zip files
Console modefor zip files :
- Zip unpacking ( .zip archives ) exeinfope.exe FileName /un7zip - unpack .zip archive )
- for many files ( mask files ) : exeinfope.exe FileName* /un7zip - unpack .zip files
updated : GEMPlayer v1.0 protected data - ThunderSoft DRM Protection / Gilisoft Free DRM Protection
fixed updated 1136.DotFix NiceProtect v6.9 - 7x demo x86
.NET added to signatures ( Meta nstd struct ) . 080 , 1129 " - [ First Meta Data stream as Confuser/Xfuscator ] "
and more

Home:

Code:

https://github.com/ExeinfoASL/ASL

Download:

Code:

https://github.com/ExeinfoASL/ASL/releases/download/v0.0.9.0/Exeinfo_0090.zip

A.S.L

04-16-2025 06:17

testing version 0.0.9.1

RDGMax

04-16-2025 10:24

you have forgotten the download link

v0.0.9.1

https://ydray.com/get/t/u17451881325082WBgh217cd148cb3aes
https://filebin.net/fvch7fgp050f4vd6
https://limewire.com/?referrer=lj66prqm1u
https://limewire.com/?referrer=pq7i8xx7p2
https://sprend.com/download?C=81c616051c1b4f45ae1d99c3c559236a

Best Regards

Fyyre

04-19-2025 05:08

$15 for lifetime updates? come on... just pay the author. tool is worth it.

A.S.L

04-21-2025 05:28

leaked version :-)

A.S.L

05-01-2025 19:52

Exeinfo Pe hints v.0.0.9.2

2 Attachment(s)

updated usage infos and create Arabic Windows compatible version

RDGMax

05-04-2025 07:23

Exeinfo_0092_alpha

You forgot to upload the link again.

https://file.kiwi/e938e971#IMElDCjApdo2F21Byo6cSg
https://fromsmash.com/LbzN.QpG1g-et
https://fex.net/s/cenetsn
https://filebin.net/guzvx9ehjr2fv22s
https://easyupload.io/mq5f4t
https://www.filemail.com/d/xuhhknktondrxts
https://limewire.com/d/hBgUk#0x4BTFzWck

Best Regards

A.S.L

09-04-2025 18:25

bad links : ;)

https://app.box.com/s/63uxokbtnhqyprz0960k39er5k9xa56j

RDGMax

09-04-2025 19:42

You're right, my dear. Here's an updated link.

Exeinfo Pe v. 0.0.9.3 Beta2

https://limewire.com/d/yTNZN#YA2zAADXpT
https://fromsmash.com/Exeinfo-0093-Beta2zip
https://limewire.com/d/CgZNt#HRI0H6Tw0N
https://wormhole.app/08Wqj1#fouJejN8cb3VOtLPuc3igg
https://fex.net/s/2cseaoo
https://toffeeshare.com/c/lFsHfpcCTm

DARKER

11-05-2025 16:02

0.0.9.3 (2025.11.04)

1226 + 190 signatures x64 )
Ext_detector - v7.7.4 ( 774 non exe signatures )

Whats new:

Inno Unpacker updated to v2.64
Detect Embarcadero Delphi / C++ VCL exe files and RAD v12 DevExpress as STD files
added on x64 .gz section detector - x64 Microsoft Visual C++ v14.29 - 2019 - (exe 4883EC28-48) [ .GZ archive sec.6 ] ,
Go compiler detector engine - detect tampared GO string
mp4 Ripper fixed via "mp4" string
NOT EXE - .gz archive - added "x" key press , unpack file on Main GUI
fixed crash bug
NOT Win EXE - .dylib - Mac OS X Universal Binary executable
to :
NOT EXE - .class - Java Bytecode object oriented programming language http://java.sun.com
fixed
5175. x64 - MinGW-w64 GCC: (GNU) compiler (exe) v11 [ ~ 14.x ] - http://mingw-w64.sourceforge.net ,
to :
5175. x64 - MinGW-w64 GCC: (GNU) compiler (exe) v11 [ (MinGW-W64 x86_64-ucrt-posix-seh ...]
NOT EXE - .aac detector fixed
changed .pdb function - support unicode string ,
fixed detection : 5004. x64 DLL with : 00 Entry Point - RESOURCES Only : xx,x KB no CODE - CPU : AMD64
MS VC++ linker 14.44 updated to 2025
for Windows XP - added x86 7z v22.09 ( ZS/LIZ mode not supported only on Windows 10 )
*fixed resources for XP
added "x" on main GUI for unpacking .zip files
Console mode for zip files :
Zip unpacking ( .zip archives )
exeinfope.exe FileName /un7zip - unpack .zip archive )
for many files ( mask files ) :
exeinfope.exe FileName* /un7zip - unpack .zip files
updated : GEMPlayer v1.0 protected data - ThunderSoft DRM Protection / Gilisoft Free DRM Protection
fixed updated 1136.DotFix NiceProtect v6.9 - 7x demo x86
.NET added to signatures ( Meta nstd struct ) . 080 , 1129
" - [ First Meta Data stream as Confuser/Xfuscator ] "
update v34 x17 - not detected
908.InstallAware for Windows Installer v34.0.6 X17 2025
detect v2025.01
x86./ x64 - Ahk2Exe for AutoHotkey [ v1.1.37.02 Ans/Uni 2025 ] - Script to EXE Converter - www.autohotkey.com
NOT EXE - .bmp detector - fixed !
changed :
x64 - Embarcadero Technologies Inc. clang version 5.0.2 (f0862325.f3a671d2.38570) (based on LLVM 5.0.2) ( EXE )
to :
x64 - C++ Builder 10.x [ Embarcadero RAD Studio 29.1 - Copyright 2025 Embarcadero Technologies, Inc. ]
Fixed .gz Ripper - now detect gzip with [Unknown System} on -> NOT EXE - .pak Chromium format v5 - Chrome
added on Linux ELF
NOT Win EXE - .o - ELF [ 64bit obj. - CPU : AMD x86-64 - OS/ABI: unspecified ]
-> Compiler : Embarcadero Technologies Inc. clang version 5.0.2 (f0862325.f3a671d2.38570) (based on LLVM 5.0.2)
update
655.[ 7-zip SFX stub ] [ v25.01 GUI - GENUINE ] - stub : Microsoft Visual C++ v.6-9 - Name : 7z SFX.
x64 - 7z Sfx GUI 25.01 ZS v1.5.7 - 2025 Tino Reichardt- CPU : AMD x64 , if overlay added 7z
added x64 DLL Generic codec unpacker ( lz4/zl5/7z/7za/brotli/lizard/zstd/flzma2 )
x64 Microsoft Visual C++ v14.29 - 2019
[ GEN plugin unpacker LZ/Lizard/Lzma ] - Not packed
[ 7z* plugin by Igor Pavlov ]
( 7z unpacker update x64 only - no About GUI info , still 22.01 x86 ! )
x64 7za ZS v22.01 unpacker updated to v25.01
fixed get dimensions - movies from www.savevid.com
NOT EXE - .mp4/m4v ( MPEG-4 ) codec : avc1 - H.264 - [ 532x924 cmfciso6dsmsmsixdash ]
fixed ver detection
x64 - MinGW-w64 GCC: (GNU) compiler v.4 exe ( xx C7 ) - [ v4.?.? ] - http://mingw-w64.sourceforge.net ,
to :
x64 - MinGW-w64 GCC: (GNU) compiler v.4 exe ( xx C7 ) - (x86_64-posix-sjlj-rev0, Built by MinGW-W64 project) 4.8.4 - http://mingw-w64.sourceforge.net ,
fixed overlay detector offset for : ( save overlay and click on Overlay view ) only for this 657 sign.
657.Nullsoft SFX v2.46.2-5 Setup Unicode Installer
sign 630.Generic : Installer Nullsoft PiMP Stub [ v.3.02.1 ]
fixed 1123.[ Rust Compiler v1.89.0 - www.rust-lang.org ] - stub : MS Visual C++ v.14.44 - 2025 (E8)
sign
6000. x64 ( GENERIC ) MinGW-w64 GCC: (GNU) Cygwin Fedora compiler no TLS - http://gcc.gnu.org
fixed version info
6000. x64 ( GENERIC ) MinGW-w64 GCC: (GNU) Cygwin Fedora compiler no TLS - http://gcc.gnu.org - [ GNU compiler v.15.1.0 ] ,
fixed detector ( x64 unknown file ):
5144. x64 Microsoft VC++ 14.00 DLL [ CPU : AA64 ARMv8 ] - [Deb: 02] [ PE Header can be Rust/LLVM/GCC Mingw compiler ]
fixed NSTD + mingw detect
1204.Microsoft VC++ 14.00 [ dll - CPU : ARMv7 ] - [ Deb : 02 C++ CodeView ] - [ PE Header be Rust/LLVM/GCC Mingw compiler - 100% mingw ]
fixed ver. if C++ v4
595.GCC MINGW-64w compiler for 32/64 bit ( exe ) - http://mingw-w64.sourceforge.net
to
595.GCC MINGW-64w compiler for 32/64 bit ( exe ) - http://mingw-w64.sourceforge.net - [ GNU C++ 4.7.2 ]

and more

Home:

Code:

https://github.com/ExeinfoASL/ASL

Download:

Code:

https://github.com/ExeinfoASL/ASL/releases/download/v0.0.9.3/exeinfope.zip

Dr.FarFar

11-10-2025 06:44

ExeinfoPE v0.0.9.4 Beta [ViP]

1 Attachment(s)

Program name : Exeinfo Pe
Version : 0.0.9.4 Beta ( 1227 + 190 signatures x64 )
: Ext_detector - v7.7.4 ( 774 non exe signatures )
: external signatures : userdb.txt : 4467

Quote:

- Inno Unpacker updated to : v.2.65.2 ! <- press 'x' key on main form for all exe unpacking
- Fixed dissasemble and Hex view for x64 files
- Header GUI - added click on dir/import/export/resources/iat/... Hex view in DASM GUI blue
- added detect Sfx module IZArc version 4.6 - https://www.izarc.org - only : 7z , zip , rar
- fixed added NSTD struct EP and sections x64 :
5187. x64 - C++ Builder 10 - VCL Modern Compiled - RAD 29.0 *NSTD [ Embarcadero RAD Studio 23.0 ]
- Added x64 - 1211. x64 - [ PyInstaller v.3.6 - v6.1 - 2005ΓÇô2024
- detect .NET Goldobfuscator x32 only for test

and more

A.S.L ( c ) 2025.11.06

Sh4DoVV

11-11-2025 17:22

Quote:

Originally Posted by Dr.FarFar (Post 134097)

Program name : Exeinfo Pe
Version : 0.0.9.4 Beta ( 1227 + 190 signatures x64 )
: Ext_detector - v7.7.4 ( 774 non exe signatures )
: external signatures : userdb.txt : 4467

A.S.L ( c ) 2025.11.06

Hi , can you upload please on mega or anything ?

Dr.FarFar

12-31-2025 14:59

ExeinfoPE_v0.0.9.4 [ViP]

1 Attachment(s)

Program name : Exeinfo Pe
Version : 0.0.9.4 ( 1233 + 193 signatures x64 )
Ext_detector - v7.7.5 ( 775 non exe signatures )
external signatures : userdb.txt : 4467

Code:

- added because Exeinfo detect VMProtec struct !

  1231.EXECryptor v.2.1.17 ( TLS prot. obsolete software ) - strongbit.com



- Compilators GUI - fixed on GCC 32/64  ver.detector string



- Section GUI adde Xerinfuscator detector



- Inno unpacker updated to v.2.66.1



- fixed detector !!!  if digi signed

  Inno Setup Module 5 SFX - [ v.6.3.0 ] - [ Protected with Inno Protect v1.0 by A.S.L ] 



- added : Dell sfx / HP sfx



and more sign updated

A.S.L ( c ) 2025.12.12

Dr.FarFar

01-08-2026 17:53

ExeinfoPE v0.0.9.5 Beta [ViP] - 6-Jan-2026

1 Attachment(s)

Program name : Exeinfo Pe Beta
Version: 0.0.9.5 Beta Nag ( 1238 + 198 signatures x64 )
Ext_detector - v7.7.9 ( 779 non exe signatures )
external signatures : userdb.txt : 4467

Quote:

- many changes and old signatures updated
- warnings added
- sections detector updated
- internal Inno unpacker v2.66.1

Last signatures :

x86

1218.Paquet Builder v.25.0 www.installpackbuilder.com
1219.UltraZip Sfx module v1.5 - stub : MS Visual C++ v.9.0 - 2008 (E8) Visual Studio 2008
1220.Obfuscar v2.2.x by 2007-2018, Ryan Williams - www.obfuscar.com - stub : MS Visual C# / Basic.NET
1221.(x64) EFSoftware Setup 2024 ( EF 8F ) ovl data not lzma - www..efsoftware.com - stub : MS Visual C++ v.9.0
1222.Babel v9.9.5 / 10.5 / 11.0.0 ( 2021-24 ) .NET Obfuscator - www.babelfor.net - stub : MS Visual C# / Basic.NET
1223.InstallAware for Windows Installer [ v34.6 X17 ] www.installaware.com - stub : MS Visual C++ v.14.16
1224.Developer Express Inc. SFX module - www.devExpress.com - stub : Delphi v11.0 Alexandria
1225.Celesty Binder ( malware installer ) Coded by DarkCoderSc - Unremote.org / malwaregallery.com : stub C++ 10 (UPX not detected)
1226.Veridium Vigilia Installer - http://veridium.net ( ovl .zlib ) - stub : MS Visual C++ ( v2023/x86/x64 )
1227.Installer Nullsoft [ MSVC++ Recompiled - v.29-Apr-2020.cvs ] - http://nsis.sourceforge.net
1228..NET Goldfuscator [ v1.4 ] 2019.09.18 - http://github.com/AnErrupTion/Goldfuscator
1229.XerinFuscator G3 v.3.0.0.85 by Inx Company [ DNG mode : no pack? ] - discord.gg/sU6Cv4MGev - stub : std .NET / NSTD .NET struct
1230.XerinFuscator G3 v.3.0.0.85 by Inx Company [ mode : minimal Anticrk/Obf only ] - discord.gg/sU6Cv4MGev - stub : MS Visual C#
1231.EXECryptor v.2.1.17 ( TLS prot. obsolete software ) - strongbit.com/SoftComplete Devel.
1232.[ Malware installer - set Autorun->SynaptiCS.exe ] - not a real Synaptics installer - stub : Borland Delphi
1233.HP Inc. Soft paq wrapper v.0.2.x Installer ( 7z/Cab ) - www.hp.com ( x86 / x64 stub )
1234..NET Reactor [ v.7.5.0.0 ] Native Method exe - .NET / MS C++ stub 9.0
1235.Self-extracting Installer v1.0.x - www.KurtZimmermann.com ( .zip )
1236.LLVM compiler v14-21 , GCC (GNU) [ v.4.8.3 ] ( 83EC ) - linker 14.00 exe - Debug 02
1237.Embarcadero Delphi compiler : XE - Delphi v12 Yukon / RAD Athens ( NSTD - exe via Bool.) - www.embarcadero.com
1238.Self-Extract Package v25.x ( icarus_sfx - ON/OFF-line installer ) - stub : MSVC+ v14.42 - 2024 ( NSTD stub )

x64

5176. x64 Awast Ransomware Decryptor v1.0.x 2022-2024 - www.awast.com
5177. x64 PureBasic v6.1x - ( 2024 ) Fantaisie Software - www.purebasic.com - stub : x64 Microsoft Visual C++ v14.00
5178.[ x64 Rust Compiler GNU v1.xx - www.rust-lang.org ] - stub : x64 - MinGW-w64 GCC: (GNU) compiler (exe)
5179.[ Nuitka python compiler - http://nuitka.net ] x64 - MinGW-w64 and MS C++14 compiller
5180. x64 Py2exe ( .py script to exe ) - stub : x64 Microsoft Visual C++ v14.29
5181. x64 VMProtect v.3.x - 3.5.1 [ not/packed mode ] - www.vmpsoft.com , stub : x64 .NET exe with : 00 Entry Point
5182. x64 Obsidium v1.8.6.x [ option xx MZ Head ] - 2025.04 - www.obsidium.de
5183. x64 - MS C++ Compiler ( icu/vcp/crt14_app ) DLL with Zero EP
5184. x64 [ Created with : WINDEV Express/Framework v22.0 - 30.x - www.windev.com ] - stub : MS C++
5185. x64 Babel v9.9.5 / 10.0 / 11.0.0 ( 2020-24 ) .NET Obfuscator - www.babelfor.net
5186. x64 Delphi v10.4 Sydney [ Embarcadero Delphi for Win64 compiler version 34.0 (27.0.x) ] - embarcadero.com
5187. x64 - C++ Builder 10 - VCL Modern Compiled - RAD 29.0 [ Embarcadero RAD Studio 23.0 ]
5188. x64 [ SFX64 v55.1 ( 2025-07-29 ) zpaqfranz v62.5 ] - stub : x64 ( Generic ) MinGW-w64 GCC
5189. [ x64 Rust Compiler www.rust-lang.org / www.llvm.org LLVM compiler ] - stub : MSVC C++ v14.00 ( detector via not EP bytes !)
5190. x64 .NET Goldfuscator [ v1.4 ] 2019.09.18 - http://github.com/AnErrupTion/Goldfuscator
5191. x64 Qt Installer v4.4.0 - 4.9.0 [ Gzip sec.5 ] - www.qt.io - stub : x64 - Microsoft Visual C++ v14.29
5192. x64 XerinFuscator G3 v.3.0.0.85 by Inx Company - [ mode : pack / minimal Anticrk/Obf only ] - discord.gg/sU6Cv4MGev - stub : x64 .NET DLL
5193. x64 .NET Reactor [ v.7.5.0.0 ] Native Method x64 exe - .NET / MS C++ stub v14 - www.eziriz.com
5194. x64 Paquet Builder v.25.x www.installpackbuilder.com - stub : *unknown - MS Visual C++ v.14.0 ( LLVM v14/Rust Head )
5195. x64 LLVM compiler v.14-21.1.0 ( sub rsp,28 ) - MSVC++ linker 14.x
5196. x64 LLVM compiler v.14-21.1.0 ( DLL Debug 02 *ACM ) - MSVC++ linker 14.x
5197. x64 Embarcadero Delphi compiler : XE - Delphi v12 Yukon / RAD Athens ( NSTD - exe - no Boolean VLC ) - www.embarcadero.com

!!! NOT Tested version !!!
A.S.L ( c ) 2026.01.06

A.S.L

02-11-2026 06:22

:-)
not last version

Dr.FarFar

02-18-2026 00:41

ExeinfoPE v0.0.9.5 [ViP] 29-Jan-2026

1 Attachment(s)

Program name : Exeinfo Pe
Version: 0.0.9.5 ( 1238 + 199 signatures x64 )
Ext_detector - v7.8.2 ( 782 non exe signatures )
external signatures : userdb.txt : 4467

Quote:

Added on this version only :
- Inno unpacker updated to : v.2.67.2 - 18.01.2026
- old signatures update
- version for Windows XP included

and more bugs fixed

!!! NOT Tested version !!!
A.S.L ( c ) 2026.01.06

DARKER

02-22-2026 20:12

0.0.9.5 (22.02.2026)

Official release:

Code:

https://github.com/ExeinfoASL/ASL/releases/tag/v0.0.9.5

DARKER

05-07-2026 15:24

0.0.9.7 II (06.05.2026)

Added on this version only :

Inno unpacker updated to : v.2.67.6
old signatures updated
ELF Ripper limit added to 50 MB if set
non exe detector updated wav or other files

1247 + 206 signatures x64
783 non exe signatures

Official release:

Code:

https://github.com/ExeinfoASL/ASL/releases/tag/v0.0.9.7

All times are GMT +8. The time now is 13:42.

Page 5 of 5

« First

Show 40 post(s) from this thread on one page