A call to arms - Identify .exe files!

[REM]

Hello everyone,

A request from alt.comp.freeware was for a program that can scan a drive, or a partition, and list the program executable files, and also list the SFX (installation) files.

I searched pretty good, but I've yet to find such a program. I'm wondering if some of the regulars here might be interested in joining forces to solve this problem, and to add definition files for TrID via TrIDscan.

Obviously, there are a great many programs that make SFX files, and installation files, hence, the reason I ask. One person is overwhelmed.

I had limited success using a small utility that I wrote that creates a list of all .exe files on C:, and then calls Shaid v2.70 supplying the path of each .exe file. Shaid hasn't been updated in awhile though, and there were files that were incorrectly identified as program .exe files. Inno Setup files are one example.

Shaid v2.70: http://www.pcuf.fi/~heiska/shs/shaid.htm

My utility: http://www.woundedmoon.org/SHAID/ID.exe

Extract Shaid into a directory, and copy "ID.exe" into that directory. Then run "ID.exe" to get an idea of what I am trying to accomplish.

In whatever directory Shaid and "ID.exe" are in:

It will list all .exe files in "exe.txt"

It will list all sfx files correctly in "SFX.TXT"

It will list all program .exe files, along with sfx files that are not properly identified, which should be in SFX.TXT, in "Program.txt".

Does anyone have a better approach to solve this problem?

I've checked the Inno forum, and I got a hint to check out this program. It looks great!! But it does need the ability to better identify .exe files. I'm game.

Old versions of Inno have "Inno" in the .exe header, but the new version does not. I'm downloading several older versions of Inno now. I plan to make a bunch of install files with each version, and to use TrIDscan to locate the unique bytes in each version. I'll send them in as soon as I've properly tested that I did use enough files to correctly identify files made with each version.

If anyone else would like to chip in on a large job, advise is welcome, a list of obscure programs that make .exe files is welcome, and I'd really love it if you too, can select another program that makes SFX files, make a bunch of them (sfx files per version), and send in the info, so that new definitions can be made to TrID!

Just a thought... a group effort would be really great! Thanks for reading.

Jimmy Scott
Nanu nanu



 

[Mark0]

Hi REM!
Thanks for the idea and the effort.

A note.
While TrID with TrIDScan help can be made able to identify probably a good number of EXEs, it's probably not the best tool for the jobs. Since EXEs structure is largely similar, usually a more specific approach (like reading the code at PE's Entry Point) is needed to discern the little details that may differ from one kind of EXE to another.

The best EXE file identifier is probably PEiD.

Anyway, any new (or refined) EXE defs for TrID will be surely more than welcome!

Thanks,
Bye!