From Collaborative RCE Tool Library
Detect It Easy
|Tool name:||Detect It Easy||
|Last updated:||March 23, 2016|
|Direct D/L link:||https://www.dropbox.com/s/h3sjlmhgcx7qfx2/DIE_1.01_win.zip?dl=1|
|License type:||Free (both for commercial and non-commercial usage) and open source|
|Description:||Detect it Easy
Detect It Easy, or abbreviated “DIE” is a program for determining types of files.
“DIE” is a cross-platform application, apart from Windows version there are also available versions for Linux and Mac OS.
Many programs of the kind (PEID, PE tools) allow to use third-party signatures. Unfortunately, those signatures scan only bytes by the pre-set mask, and it is not possible to specify additional parameters. As the result, false triggering often occur. More complicated algorithms are usually strictly set in the program itself. Hence, to add a new complex detect one needs to recompile the entire project. No one, except the authors themselves, can change the algorithm of a detect. As time passes, such programs lose relevance without the constant support.
DIE exists in three versions. Basic version (“DIE”), Lite version (“DIEL”) and console version (“DIEC”). All the three use the same signatures, which are located in the folder “db”. If you open this folder, nested sub-folders will be found (“Binary”, “PE” and others). The names of sub-folders correspond to the types of files. First, DIE determines the type of file, and then sequentially loads all the signatures, which lie in the corresponding folder. Currently the program defines the following types:
• MSDOS executable files MS-DOS
• PE executable files Windows
• ELF executable files Linux
• MACH executable files Mac OS
• Text files
• Binary all other files
You are welcome to add your own useful notes about this tool, for others to see!
(please also edit it if you think it fits well in some additional category, since this can also be controlled)