Windows exe PE files detector

Windows exe PE files detector

• improved Protect DiSC detection
  
• updated SecuROM 7.26.xxxx versions, added 7.27 support
  
• added more packer / protector support
  

• scanning of PC Games & Application files to detect the protection used(s)
• detects most of the available executable compressor / crypter and it´s up to date in detecting the newest PC-Game protections

PFS is a small tool similar PEiD.

Features:

• Integrated Generic Upack Detector
• Integrated String Viewer
• Integrated Yet another Enabler
• ...

• File format analyzer
• Commandline program
• Especially for archives (> 50) and executable modifier (~600)
• Detection of many COM/DOS-EXE/PE-EXE/NE-EXE/LE-EXE modifier and compiler

• Major new version!
  
• New container package for the filetypes' defs.
  
• Batch scanning & renaming.
  
• Ported to FreeBASIC compiler.
  

TrID is a utility designed to identify file types from their binary signatures. TrID uses an XML-based database of definitions which describe recurring patterns for supported file types. The first 2,000 bytes of a file are examined for these patterns. Contains 1660 file definitions.

• Too much is new to remember.
• MFS, Task Viewer and Disassembler windows maximizable.
• New smaller and lighter disassembler core CADT.
• New KANAL 2.88 with much more detections.

PEiD detects most common packers, cryptors and compilers for PE files. It can currently detect more than 430 different signatures in PE files.

Plugins. External signatures. Community board. 

This is a fully-functional utility for working with PE/PE +(64bit) files. Including: Editor PE of files, Task Viewer, Win32 PE files optimizer, detector of compiler/packer and many other things.

• Task Viewer

FRET is a Unix command line tool that examines any file or files and attempts to identify the data structures and patterns within those file(s). It does this by firstly scanning files using heuristic algorithms to identify structures and then by comparing files to identify common patterns. Results are compared and ranked using a probabilistic approach. It outputs a sorted list of the detected structures within the file(s) which can then be parsed by other tools and scripts. libfret is the library used to implement FRET. It provides a clear interface to allow for the analysis of buffers of raw data. It is designed to be integrated with a range of other programs such as hex editors, packet analysers and other development tools.

MRipper is an easy-to use application which can help you to restore your lost source code. If you lose your Delphi or C++Builder project sources, but have an executable file, then this tool can rescue part of lost sources. MRipper produces all project forms and data modules with all assigned properties and events. Produced event procedures don't have a body (it is not a decompiler). In most cases MRipper saves 50-90% of your time to project restoration

Language 2000 is the ultimate compiler detection utility. Using this program you can determine which compiler used to make your binary file or with which compressor the file is compressed. You should just open your binary (EXE, DLL, ....) in this program (or simply drag and drop the file on it) and the program will determine the compiler and maybe modifier. The database of compilers and modifiers will update frequently.