Exetools  

Go Back   Exetools > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #151  
Old 07-29-2022, 14:30
Dr.FarFar Dr.FarFar is offline
Friend
 
Join Date: Oct 2021
Location: Background
Posts: 101
Rept. Given: 0
Rept. Rcvd 21 Times in 15 Posts
Thanks Given: 131
Thanks Rcvd at 348 Times in 92 Posts
Dr.FarFar Reputation: 21
Lightbulb

New Update ( Test version )

Quote:
Exeinfo Pe v. 0.0.7.2

1126 / 136 signatures

Quote:

NOT compatible with - Arabic Windows 10 !!!

this version try detect x64 dotfuscator

VMProtect v.3.6.1 2022

fix : x64 .NET + dotfuscator - PreEmpire Solutions v1.2 - 6.5.x

update :
1085.Code Virtualizer v3.0.8.0 - 3.1.3.0

added
5131. x64 InstallShield [ 2014-2021 Pro Unicode v21.00-27.00 ]

and others


Quote:
hxxps://www57.zippyshare.com/v/VD6x45li/file.html
Attached Files
File Type: zip ExeinfoPe_0072.zip (1.96 MB, 37 views)
Reply With Quote
The Following 2 Users Gave Reputation+1 to Dr.FarFar For This Useful Post:
ahmadmansoor (08-02-2022), chessgod101 (08-10-2022)
The Following 9 Users Say Thank You to Dr.FarFar For This Useful Post:
ahmadmansoor (08-02-2022), alekine322 (07-30-2022), darkBLACK (08-02-2022), Doit (08-01-2022), pnta (08-25-2022), TechEx (08-11-2022), tonyweb (07-31-2022), Top10 (08-23-2022), wilson bibe (07-29-2022)
  #152  
Old 08-09-2022, 22:08
Vosiyons Vosiyons is offline
Friend
 
Join Date: Jan 2022
Posts: 24
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 56
Thanks Rcvd at 41 Times in 11 Posts
Vosiyons Reputation: 0
Exeinfo Pe v.0.0.7.2

Exeinfo Pe v.0.0.7.2 (23.07.2022) VIP
Attached Images
File Type: png Exeinfo Pe v.0.0.7.2 Image.PNG (115.5 KB, 8 views)
Attached Files
File Type: zip ExeinfoPe_0072.zip (1.96 MB, 18 views)
Reply With Quote
The Following 2 Users Say Thank You to Vosiyons For This Useful Post:
niculaita (08-10-2022), pnta (08-25-2022)
  #153  
Old 08-10-2022, 00:00
bolo2002 bolo2002 is offline
VIP
 
Join Date: Apr 2002
Posts: 567
Rept. Given: 107
Rept. Rcvd 14 Times in 13 Posts
Thanks Given: 186
Thanks Rcvd at 222 Times in 143 Posts
bolo2002 Reputation: 14
dupe:
https://forum.exetools.com/showpost.php?p=125650&postcount=14
__________________
I like this forum!
Reply With Quote
  #154  
Old 08-10-2022, 01:49
Vosiyons Vosiyons is offline
Friend
 
Join Date: Jan 2022
Posts: 24
Rept. Given: 0
Rept. Rcvd 0 Times in 0 Posts
Thanks Given: 56
Thanks Rcvd at 41 Times in 11 Posts
Vosiyons Reputation: 0
I didn't know this version was shared on the forum, can the authorized admin please delete the topic?
Reply With Quote
  #155  
Old 08-12-2022, 05:56
Fyyre's Avatar
Fyyre Fyyre is offline
Fyyre
 
Join Date: Dec 2009
Location: 0°N 0°E / 0°N 0°E / 0; 0
Posts: 236
Rept. Given: 63
Rept. Rcvd 85 Times in 38 Posts
Thanks Given: 113
Thanks Rcvd at 322 Times in 107 Posts
Fyyre Reputation: 85
I agree. You can get VIP subscription for all of $5 USD -- Exeinfope is an excellent tool. No need to warez it...
__________________
Best Wishes,

Fyyre

--

https://github.com/Fyyre
Reply With Quote
The Following 3 Users Say Thank You to Fyyre For This Useful Post:
bolo2002 (08-12-2022), ontryit (08-18-2022), Vosiyons (08-13-2022)
  #156  
Old 08-30-2022, 18:04
Dr.FarFar Dr.FarFar is offline
Friend
 
Join Date: Oct 2021
Location: Background
Posts: 101
Rept. Given: 0
Rept. Rcvd 21 Times in 15 Posts
Thanks Given: 131
Thanks Rcvd at 348 Times in 92 Posts
Dr.FarFar Reputation: 21
Exeinfo Pe v. 0.0.7.3

New Update ( Test version )

Quote:
Exeinfo Pe v. 0.0.7.3

1132 / 138 signatures
userdb.txt : 4447
Quote:

NOT compatible with - Arabic Windows 10 !

signatures update

added Flip EOF to offset 0000 - binary file tool

added Fake detector for : 800..NET + dotfuscator - PreEmpire Solutions

fix : 5096. x64 Eazfuscator.NET v2022.1

fix For : Inx .NET Protector & Obfuscator ( Strong ConfuserEx Mod )

and others


Quote:
hxxps://www24.zippyshare.com/v/5Y02vRqQ/file.html
Attached Files
File Type: zip ExeinfoPe_v0073.zip (1.76 MB, 20 views)
Reply With Quote
The Following User Gave Reputation+1 to Dr.FarFar For This Useful Post:
Asus (08-31-2022)
The Following 3 Users Say Thank You to Dr.FarFar For This Useful Post:
alekine322 (08-31-2022), TechEx (08-31-2022), wilson bibe (08-31-2022)
  #157  
Old 09-24-2022, 21:43
Dr.FarFar Dr.FarFar is offline
Friend
 
Join Date: Oct 2021
Location: Background
Posts: 101
Rept. Given: 0
Rept. Rcvd 21 Times in 15 Posts
Thanks Given: 131
Thanks Rcvd at 348 Times in 92 Posts
Dr.FarFar Reputation: 21
Lightbulb Exeinfo Pe v. 0.0.7.3 II

New Update ( Test version )

Quote:
Exeinfo Pe v. 0.0.7.3 II

1134 + 139 Signatures x64
userdb.txt : 4447
Quote:

NOT compatible with - Arabic Windows 10 !

signatures update

added x64 only if EP=0000 .NET Reactor 6.x - www.eziriz.com

added on 32 bit .NET

[ WARNING : .NET Reactor ? AntiDebug option detected* ]

645. .NET Reactor v.6.8.0.0 Native Method (.NET / MS C++ stub 9.0 )

.NET exe changes !!!

and other

detect flipped zip files

and others


Quote:
hxxps://www54.zippyshare.com/v/fGHErCI8/file.html
Attached Files
File Type: zip ExeinfoPe_0073II.zip (2.19 MB, 27 views)
Reply With Quote
The Following 5 Users Say Thank You to Dr.FarFar For This Useful Post:
niculaita (09-25-2022), TechEx (09-28-2022), user_hidden (09-25-2022), Vosiyons (09-24-2022), wilson bibe (09-25-2022)
  #158  
Old 09-29-2022, 05:08
souz souz is offline
Friend
 
Join Date: Jan 2005
Posts: 120
Rept. Given: 0
Rept. Rcvd 20 Times in 14 Posts
Thanks Given: 7
Thanks Rcvd at 72 Times in 30 Posts
souz Reputation: 20
Exeinfo Pe v. 0.0.7.3 II VIP

Exeinfo Pe v. 0.0.7.3 II (VIP Version)

- signatures update 1134 / 139
- userdb.txt : 4447
- added x64 only if EP=0000 .NET Reactor 6.x - www.eziriz.com
- added on 32 bit .NET
- NET Reactor v.6.8.0.0 Native Method (.NET / MS C++ stub 9.0 )
- detect flipped zip files
Attached Files
File Type: rar ExeinfoPe_0073II.rar (2.10 MB, 21 views)
Reply With Quote
  #159  
Old 09-29-2022, 14:25
DARKER DARKER is offline
VIP
 
Join Date: Jul 2004
Location: Côte d'Ivoire
Posts: 403
Rept. Given: 14
Rept. Rcvd 111 Times in 46 Posts
Thanks Given: 10
Thanks Rcvd at 561 Times in 153 Posts
DARKER Reputation: 100-199 DARKER Reputation: 100-199
Use search before you post ;-)
Code:
https://forum.exetools.com/showthread.php?p=126134#post126134

Last edited by DARKER; 09-29-2022 at 18:45.
Reply With Quote
  #160  
Old 12-28-2022, 16:59
Dr.FarFar Dr.FarFar is offline
Friend
 
Join Date: Oct 2021
Location: Background
Posts: 101
Rept. Given: 0
Rept. Rcvd 21 Times in 15 Posts
Thanks Given: 131
Thanks Rcvd at 348 Times in 92 Posts
Dr.FarFar Reputation: 21
Lightbulb Exeinfo Pe v. 0.0.7.4

New Update ( Test version )

Quote:
Exeinfo Pe v. 0.0.7.4

1141 / 144 Signatures x64
userdb.txt : 4450
Quote:

signatures update

File Characteristics GUI updated items :

0020 : Handle a high entropy 64 bit VA

added .NET RES in > 20 kb - search : [ .GZ archive inside - try Ripper ]

fix 961.[ Enigma new ver.5.x - 6.80.x ] -[ DotFix NiceProtect - 6.x ]

Added version detector : 599.Advanced Installer [ v7.x - v19.x ]

599. added detection v32
InstallAware for Windows Installer [ v32 X15 2022 ]

fix for dll
147.Open WATCOM C/C++32

NOT Win EXE - .o - ELF WATCOM C/C++32 v2.0

added detector : 067.Rar Sfx Archive [ MESSAGES OVL ] , Overlay

update
5044. x64 Rar Sfx Archive v6.xx - 6.20

added double app dos/windows in one
*Unknown exe

added
NOT EXE - .nrproj .NET Reactor Project xml file

- Strong update version , fixed old detection !


- Do not Distribute only for test .NET exe diagnose many changes

- added plugin : wwwHelper v0.2
updated www links for unpackers


and other


Quote:
hxxps://www42.zippyshare.com/v/QWwOpnvU/file.html
Attached Files
File Type: zip ExeinfoPe_0074.zip (2.55 MB, 28 views)
Reply With Quote
The Following 5 Users Say Thank You to Dr.FarFar For This Useful Post:
Artic (12-28-2022), Doit (01-03-2023), niculaita (12-28-2022), wilson bibe (12-29-2022), Zeokat (12-28-2022)
  #161  
Old 01-03-2023, 09:57
Dr.FarFar Dr.FarFar is offline
Friend
 
Join Date: Oct 2021
Location: Background
Posts: 101
Rept. Given: 0
Rept. Rcvd 21 Times in 15 Posts
Thanks Given: 131
Thanks Rcvd at 348 Times in 92 Posts
Dr.FarFar Reputation: 21
Lightbulb Exeinfo Pe v0.0.7.6

New Update ( Test version )

Quote:
Exeinfo Pe v. 0.0.7.6

1150 + 151 Signatures x64
Ext_detector - v6.7.5 ( 675 Non eXe Signatures )
userdb.txt : 4451
Quote:

Signatures Update

- Strong update .NET obfuscator x86 / x64 , fixed fake detection !
- DLL Characteristics GUI updated
- .NET GUI added Hex view
- Added .jp2 jpeg2000 Ripper ( for .pdf files )
- fixed : x64 GO Programming Language
- 5045.x64 - AutoIt [ v3.3.14.5 ]
- 5045.x64 - AutoIt [ v3.3.16 2022.09 ]
- 5012.x64 Embarcadero Delphi NSTD
- 5035.x64 Paquet Builder v21.0.0
- 016.PEcompact ver.3.02.2
update : 5076.[ x64 Enigma ver.5.x - 7.0 ]
update ver.VMProtect v.3.5.1 - 3.7.3 2022
fixed & upd.723.Ahk2Exe for AutoHotkey [ v1.1.36.02 ]
added v10 : 588.Enigma Virtual Box - v10.00 (2022.12.14)
fix detector :
5135.x64 VMProtect v.3.6.0 - 3.7.3 2022
added new version :
1021.InstallAware Virtualization v6 ( BoxedApp packer v2.x - 14.0 )
1021.BoxedApp Packer 2018 / 2019 14.0
added x64 : [ ESET module MZ-Header ]
added v5 generic :
760.Generic Crypto Obfuscator For .Net v5 - LogicNP Software
added tampared exe :
Windows PE exe for .NET / GNU compiler but no "PE" tampared/compr.
Windows PE exe compressed LZ77
fix : NOT EXE - .dex - Dalvik Executable v5.0 - 9.0




- This Version Not Support : Windows 10 ( Arabic version )


A.S.L ( c ) 2022.12.29


Quote:
hxxps://www22.zippyshare.com/v/RoJZCnQ8/file.html
Attached Files
File Type: zip ExeinfoPE_0076 [Dr.FarFar].zip (1.85 MB, 13 views)
Reply With Quote
The Following 3 Users Say Thank You to Dr.FarFar For This Useful Post:
Doit (01-15-2023), niculaita (01-03-2023), wilson bibe (01-03-2023)
  #162  
Old 01-30-2023, 21:09
Dr.FarFar Dr.FarFar is offline
Friend
 
Join Date: Oct 2021
Location: Background
Posts: 101
Rept. Given: 0
Rept. Rcvd 21 Times in 15 Posts
Thanks Given: 131
Thanks Rcvd at 348 Times in 92 Posts
Dr.FarFar Reputation: 21
Lightbulb Exeinfo Pe v. 0.0.7.7

New Update ( Test version )

Quote:
Exeinfo Pe v. 0.0.7.7

1156 / 157 Signatures x64
Ext_detector - v6.8.4 ( 675 Non eXe Signatures )
userdb.txt : 4453
Quote:

Signatures Update

- Strong update .NET obfuscator x86 / x64 ,

fixed fake detection !


- added for test : x64 ArmDot 2023 v3.0.0 - www.armdot.com

( I have trial version only )


IF result is : Sign. for DLL : RustemSoft Skater .NET Obfusc.

on EXE file , you can change this result :

Click on Main form [ < ] Button

Exeinfo ignore this detection.


many NON EXE detection added

- This Version Not Support : Windows 10 ( Arabic version )

Last signatures :

x86

1138.EasyCode v2.0 x86 + MASM ( std sign no Deb ) - www.easycode.cat
1139.EasyCode v2.0 x86 + MASM ( Dbg sign ) - www.easycode.cat
1140.[ WARNING : Tampared - Nullsoft Install System v3.0x ] - not packed stub / v.3.05
1141.EuroAssembler ver.20190402 - http://euroassembler.eu *ACM
1142.Standalone EXE Document Locker v1.1 - 2022.11.29 www.4dots-software.com
1143.ZIP SelfExtractor Maker Setup v1.11 2022.11 - www.4dots-software.com
1144.BoxedApp packer v4 2021 (c) Softanics - BozedAppSDK.dll incl. - stub : Delphi/C++/FPC detect only !
1145.[ BoxedApp SDK32 - 2018-2021 ] DLL library - www.boxedapp.com - stub : C++ 12 NSTD EP
1146.DeepSea Obfuscator v.x.x - 4.4.4 ┬ر 2001-2013 TallApplications - obsolete tool ! - 90% detector
1147.Generic for DLL : RustemSoft Skater .NET Obfuscator v.4.8 - 9.9 - 2022 - www.rustemsoft.com ( only if config fast : OFF)
1148..NET - DNGuard HVM v.2 - 4.20 by ZiYuXuan Studio - 2022.11 - www.dnguard.net - stub : MS Visual C#
1149.[ DNGuard HVM Runtime - v3.x - 4.x 2022 ] DLL library - www.dnguard.net - stub : MS C++
1150.DNGuard v4.x 2022 ( static stub x86/x64 .NET inside ) - www.dnguard.net - stub : Microsoft Visual C++ v.8.0
1151.Baymax Patch Tools v3.1.0 - 3.x 2023.01 by Nisy/PYG www.chinapyg.com - stub : Microsoft Visual C++ v.9.00 & UPX Stub
1152.Metrowerks CodeWarrior C/C++ x86 V2.4 ( MAC OS ) CW Tools 6.0 - obsolete compiler - www.freescale.com *ACM
1153.Struct 3 : VMProtect v.3.6.0 - 3.7.3 2022 [ Exe , Option : packed ] - www.vmpsoft.com
1154.Yano v1.0.15.0 ntoolbox.bom/yano 2012 obsolete! - stub : MS Visual C# / Basic.NET
1155.ArmDot 2023 v3.0.0 - www.armdot.com ( protector/license creator ) - stub : MS Visual C# / Basic.NET


x64

5141. x64 MASM , Linker 14.xx - [ DBG_13 sign ] - no www.microsoft link to masm64 sdk
5142. x64 MASM , Linker 2.50 POLINK v8 2015 - smorgasbordet.com , no www.microsoft link to masm64 sdk
5143. x64 - EuroAssembler ver.20190402 - http://euroassembler.eu *ACM
5144. x64 Microsoft VC++ 14.29 exe [ CPU : AA64 ARMv8 ]
5145. x64 - SecureUPDATE_Installer ( Wizard or Patch - Delta instaler for patch/update ) - stub : [ Tampared file ] x64 UPX v.3.9-4.0
5146. x64 BoxedApp packer v4 2021 www.boxedapp.com - Softanics - BoxedAppSDK.dll incl. - stub : xxxx
5147. x64 [ BoxedAppSDK64 - 2018-2021 ] DLL library - www.boxedapp.com - stub : C++ 12 NSTD EP
5148. x64 - DeepSea Obfuscator v.x - v4.4.4 ┬ر 2001-2013 TallApplications - 96% detector , NO *ACM can detect Fake results !
5149. x64 [ DNGuard HVM Runtime - v4.x 2022 ] DLL library - www.dnguard.net - stub : x64 Microsoft Visual C++ v8.x
5150. x64 .NET - DNGuard HVM v4.20 by ZiYuXuan Studio - 2022.11 - www.dnguard.net - stub : EP=0000
5151. x64 DLL from : Microsoft AppStore ( Export : RHBinder__ShimExeMain ) - stub : NSTD MSV C++ built by: PROJECTNREL
5152. x64 EXE from : Microsoft AppStore ( exe run dll -> RHBinder__ShimExeMain ) - stub : NSTD MSV C++ built by: PROJECTNREL
5153. x64 Baymax Patch Tools v3.1.0 - 3.x 2023.01 by Nisy/PYG www.chinapyg.com - stub : Microsoft Visual C++ v.9.00 & UPX Stub
5154. x64 Microsoft Visual C++ v14.16 - 2017 - DLL ( push rbx , DisableThreadLib.Cs. )
5155. x64 Yano v1.0.15.0 ntoolbox.bom/yano 2012 obsolete! - stub : x64 .NET exe file : 00 Entry Point
5156. x64 ArmDot 2023 v3.0.0 - www.armdot.com ( protector/license creator ) - stub : x64 .NET DLL with : 00 Entry Point - CPU : AMD64


A.S.L ( c ) 2023.01



Quote:
hxxps://www79.zippyshare.com/v/VzUzsPAk/file.html
Attached Files
File Type: zip ExeinfoPE_0077.zip (1.77 MB, 144 views)
Reply With Quote
The Following 4 Users Say Thank You to Dr.FarFar For This Useful Post:
alekine322 (01-31-2023), niculaita (01-31-2023), TQN (01-31-2023), wilson bibe (01-31-2023)
Reply

Tags
dr.farfar, exeinfo

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 19:07.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2022 )