Description
Handed an unknown exe, you want to know what it was built with, whether it is packed and which protector it uses, and the usual routine is a handful of separate tools. Detect It Easy puts that in one window: drop the file in and a few seconds later you see the compiler, linker, language, libraries and packer.
Detection runs on an editable script-based signature database and adds heuristic scanning to guess at obfuscation and anti-debugging. Beyond PE it handles ELF, Mach-O and archives, which is why reverse engineers and malware analysts often start here.
One-step identification: drag in a file and it lists compilers, languages, libraries, packers and protectors.
Heuristics: flags obfuscation, anti-debug tricks and high-entropy packed data instead of relying only on known signatures.
Inspection views: built-in hex, strings, import and export tables, entropy and memory map.
Extensible rules: signatures are scripts you can write or edit, and a command-line edition suits batch jobs.
Many formats: PE, ELF, Mach-O and more, with a portable build that needs no installation.
Detection runs on an editable script-based signature database and adds heuristic scanning to guess at obfuscation and anti-debugging. Beyond PE it handles ELF, Mach-O and archives, which is why reverse engineers and malware analysts often start here.
Features
One-step identification: drag in a file and it lists compilers, languages, libraries, packers and protectors.
Heuristics: flags obfuscation, anti-debug tricks and high-entropy packed data instead of relying only on known signatures.
Inspection views: built-in hex, strings, import and export tables, entropy and memory map.
Extensible rules: signatures are scripts you can write or edit, and a command-line edition suits batch jobs.
Many formats: PE, ELF, Mach-O and more, with a portable build that needs no installation.
