Exetools  

Go Back   Exetools > General > Community Tools

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #11  
Old 03-29-2023, 22:36
Dr.FarFar's Avatar
Dr.FarFar Dr.FarFar is offline
Family
 
Join Date: Oct 2021
Location: Egypt ( ❤️ Palestine ❤️ )
Posts: 182
Rept. Given: 35
Rept. Rcvd 44 Times in 32 Posts
Thanks Given: 235
Thanks Rcvd at 585 Times in 160 Posts
Dr.FarFar Reputation: 44
Lightbulb Exeinfo Pe v.0.0.7.8

New Update ( Test version )

Quote:
Exeinfo Pe v.0.0.7.8

1167 / 161 Signatures x64
Ext_detector - v0.6.9.6
userdb.txt : 4453
Quote:

console mode fixed - window no flash

Now detect All exe xor-ed -combination on binary files*

fix and update 32/64 : VMware/BitRock InstallBuilder ver: 22.x

fixed console mode option '/se' scan with external signatures userdb.txt

added detection :
925.Make SFX v5.x http://74.cz

NOT EXE - .ZIP archive - .appxbundle Windows 8.1 App Bundle

851.VirtualBox Installer [v.7.00.6 ] 2023

[ Sfx Easy 7-Zip 0.1.6 James Hoo

added 32/64 & update :
[ Update Tool ] - x64 Microsoft Visual C++ v14.34

update EP
VMProtect v.3.6.0 - 3.7.3 2022 [ Exe , Option : packed ]

now detect v.23
1054.Yandex browser installer v19 - 23.x full

update detector
970.Google UPDATE (MS Edge/Chrome) Update Setup Installer

added only x86 stub : [ Opera 2023 Installer ]

fixed : x64 for Alexandria ver35
5012.x64 Embarcadero Delphi compiler

added signatures :

5150. x64 .NET - DNGuard HVM v4.20 by ZiYuXuan Studio - 2022.11 - www.dnguard.net - stub : EP=0000
5151. x64 DLL from : Microsoft AppStore ( Export : RHBinder__ShimExeMain ) - stub : NSTD MSV C++ built by: PROJECTNREL
5152. x64 EXE from : Microsoft AppStore ( exe run dll -> RHBinder__ShimExeMain ) - stub : NSTD MSV C++ built by: PROJECTNREL
5153. x64 Baymax Patch Tools v3.1.0 - 3.x 2023.01 by Nisy/PYG www.chinapyg.com - stub : Microsoft Visual C++ v.9.00 & UPX Stub
5154. x64 Microsoft Visual C++ v14.16 - 2017 - DLL ( push rbx , DisableThreadLib.Cs. )
5155. x64 Yano v1.0.15.0 ntoolbox.bom/yano 2012 obsolete! - stub : x64 .NET exe file : 00 Entry Point
5156. x64 ArmDot 2023 v3.0.0 - www.armdot.com ( protector/license creator ) - stub : x64 .NET DLL with : 00 Entry Point - CPU : AMD64
5157. x64 GO Programming Language - Compiler v1.19.7
5158. x64 - DLL to EXE converter v1.1 - for 32 & 64 bit DLLs - 2018-10-10
5159. x64 .NET - DLL to EXE converter v1.1 - for 32 & 64 bit DLLs - 2018-10-10
5160. x64 .NET IntelliLock 2.9 - 3.0 ( unreg.js script ) .NET Reactor

and x86 signatures :

1155.ArmDot 2023 v3.0.0 - www.armdot.com ( protector/license creator ) - stub : MS Visual C# / Basic.NET
1156.[ PUP/PUA - Softonic Downloader v6.4x 2022 ] - Inno Setup Module 5 SFX - [ v.6.1.0 ]
1157.InstallForge Setup v.1.4.2 ( free ) 2007-2020 - http://installforge.net - stub : PureBasic v4.20 - v6.0
1158.[ A.S.L - NSIS Setup Protector ver.0.01 ] - Nullsoft Install System v2.xx - 3.0 / v.2.12
1159..NET exe bytepress v1.0.0.2 by Adam Roach - http://github.com/roachadam/bytepress ( Mode : lzma/gzip/quickLz )
1160..NET Bat2Exe v2.1 ( 17.11.2021 ) - http://github.com/dehoisted
1161.[ Overlay crypted PUP/PUA - Unknown Pack ] - Generic : Installer Nullsoft PiMP Stub / v.20-Sep-2022.cvs
1162.Generic new : AVAST/AVG Software Sfx installer v23.x 2023 - www.avast.com - stub : NSTD MS VC++ 14.x
1163.x86/x64 Chromium Installer v.113.x - 2023 - stub : Microsoft Visual C++ v.14 - 2015 ( NSTD ) microsoft.com
1164.x86/x64 Generic/Modded : Chromium Installer v.xx - 2023 - stub : Microsoft Visual C++ v.14 - 2015 ( NSTD ) microsoft.com ( ex.Maxton )
1165.x86 - DLL to EXE converter v1.1 - for 32 & 64 bit DLLs - 2018-10-10
1166.Adobe Installer downloader v2.11.0.30 - upx stub 3.91
1167..NET IntelliLock 2.9 - 3.0 ( unreg.js script ) .NET Reactor



Quote:
hxxps://anonfiles.com/h0A2Fch6z6/ExeinfoPE_0078_zip
Reply With Quote
The Following User Gave Reputation+1 to Dr.FarFar For This Useful Post:
user1 (05-13-2023)
The Following 9 Users Say Thank You to Dr.FarFar For This Useful Post:
binarylaw (04-15-2023), Doit (06-14-2023), Mendax47 (04-04-2023), niculaita (03-30-2023), RAMPage (03-30-2023), TQN (03-30-2023), user1 (05-13-2023), wilson bibe (03-30-2023), Zeokat (04-02-2023)
 

Tags
dr.farfar, exeinfo, support the author, this thread is lame


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 03:55.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )