Mark0's Forum

Software => TrID File Identifier => Topic started by: Scrapie on November 28, 2008, 06:40:31 PM

Title: Own TrIDDefs.TRD ?
Post by: Scrapie on November 28, 2008, 06:40:31 PM
Hi

I'm just wondering if it's possible to generate a personal TrIDDefs.TRD for the CMD-Version of TrID or make it use personal *.xml-definitions only ?

Found out that the detection of UPX and Yoda in the general TrIDDefs.TRD isn't very good and I would like to build my own TrIDDefs.TRD wich detect every single on of the 22 different UPX-Versions more accurate (like PEiD). Depending on the UPX-Version TrID shows up to 33% yoda and 38% UPX - wich isn't very good.


Thx for you answer,
Scrapie

PS:
You recieved my submission via email ?
Title: Re: Own TrIDDefs.TRD ?
Post by: Mark0 on November 29, 2008, 01:13:15 PM
Hi!

I'm just wondering if it's possible to generate a personal TrIDDefs.TRD for the CMD-Version of TrID or make it use personal *.xml-definitions only ?

Yes! Just use the TrIDDefsPack tool you can find on the TrIDScan page (http://mark0.net/soft-tridscan-e.html). It will take all the *.trid.xml files in the current dir and create a new TRD file.
Then you could use TrID with that (or various other) definitions pack specififing it with the "-d:<filepath+filename>" parameter.

Quote
Found out that the detection of UPX and Yoda in the general TrIDDefs.TRD isn't very good and I would like to build my own TrIDDefs.TRD wich detect every single on of the 22 different UPX-Versions more accurate (like PEiD). Depending on the UPX-Version TrID shows up to 33% yoda and 38% UPX - wich isn't very good.

Yes. Clearly while it can identify many EXE types, TrID isn't clearly the best tool for a so specific job.

Bye!

Title: Re: Own TrIDDefs.TRD ?
Post by: Scrapie on November 30, 2008, 05:17:39 PM
Hi

Thx for our reply.
Must have been blind, sorry. Found what you suggested and I'm able to creat my own TRD now :)

Thank you also for this nice little DLL you created. It works great with VB and is very easy to implement.


Cheers,
Scrapie
Title: Re: Own TrIDDefs.TRD ?
Post by: Mark0 on December 01, 2008, 05:51:31 PM
Perfect.
If you'll develop something using TrIDLib, let me know and I will be happy to cite / link it!

Thanks,
Bye!