Skip to content

Remove duplicate and invalid signature entries of PEID pattern file(userdb.txt)

License

Notifications You must be signed in to change notification settings

winest/FixUserDb

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 
 
 

Repository files navigation

About FixUserDb

When analyzing files, one of the information we need to know at first is it's compiler or packer signature. Some tools like [PEID] (http://www.softpedia.com/get/Programming/Packers-Crypters-Protectors/PEiD-updated.shtml) or [exeinfo PE] (http://exeinfo.atwebpages.com/) use a public signature format and save them in a plaintext file "userdb.txt".
However, there are lots of invalid entries inside after being modified by researchers or public users years after years. So I write this utility to help you to remove those invalid entries.

###Main features:

  • Remove entry that already has the same signature and section name previously.
  • Remove entry that has invalid signature which is neither hex nor ? format.

Author

[ChienWei Hung] (https://www.linkedin.com/profile/view?id=351402223)

About

Remove duplicate and invalid signature entries of PEID pattern file(userdb.txt)

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages