Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 01-27-2009, 13:48
ravi124
 
Posts: n/a
How can we know a foxpro exe braned by which software ?

Hi,

Is there any way to find an exe branded by which software (like Refox, .....).


Thank you,
Ravi
Reply With Quote
  #2  
Old 04-05-2011, 15:17
giv's Avatar
giv giv is offline
VIP
 
Join Date: Jan 2011
Location: Romania
Posts: 1,657
Rept. Given: 801
Rept. Rcvd 1,283 Times in 561 Posts
Thanks Given: 226
Thanks Rcvd at 562 Times in 240 Posts
giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299 giv Reputation: 1100-1299
KONxiSE packer for VFP files is recognised by RDG packer detector.
Armadillo packer is recognised by PEID.
Refox branded files are recognised (level I, level I+) if you are trying to load the exe or app file into refox.
Refox branded files level II or III are not recognised by any known packer detector.
Reply With Quote
The Following User Gave Reputation+1 to giv For This Useful Post:
Molasar (04-10-2011)
  #3  
Old 04-10-2011, 03:33
goku goku is offline
Banned User
 
Join Date: Feb 2009
Location: https://t.me/pump_upp
Posts: 128
Rept. Given: 30
Rept. Rcvd 34 Times in 15 Posts
Thanks Given: 23
Thanks Rcvd at 6 Times in 4 Posts
goku Reputation: 34
rgd packer detector
Reply With Quote
  #4  
Old 04-17-2011, 17:33
Leonid Leonid is offline
Friend
 
Join Date: Feb 2006
Posts: 30
Rept. Given: 0
Rept. Rcvd 25 Times in 7 Posts
Thanks Given: 0
Thanks Rcvd at 2 Times in 2 Posts
Leonid Reputation: 25
Quote:
Originally Posted by ravi124 View Post
Hi,

Is there any way to find an exe branded by which software (like Refox, .....).


Thank you,
Ravi
Code:
if ".idata" $ left(filetostr("MyFile.exe"),0x400)
   ? "Refox"
endif

if ".xdata" $ left(filetostr("MyFile.exe"),0x400)
   ? "Defox"
endif
Most other protectors also have their specific sections.
Reply With Quote
The Following User Says Thank You to Leonid For This Useful Post:
vilciucostel (10-21-2022)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 23:01.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )