This plugin is used to store and display information about detected file types.. For example you could store the URL for the detected packer, or known unpackers, if file runs in Win 9x only, or any other kind of information you are are interested in.
Credit to Haggar for the idea as a suggestion on PEiD Forum ..
Usage:
The plugin will add a button on PEiD's main window under the about button..
If PEiD detected the file as something that is in the database then the button will say Info, and you can press it to display the information in the database about the file type..
If the filetype is not found in the database then the button will say Set Info, and you can press it to open the editor.
The editor can also be accessed by pressing the button again, if info exists and has been displayed, and also by running the plugin from the plugins menu of PEiD ..
Hopefully (!) this plugin is future-proof, unless snaker does something different with the window title, this plugin should still work until PEiD v1.10 .. :)
But we'll all live in virtual reality while robots do everything by then so who will care..
It has been tested with 0.93, 0.94 and 0.95 beta version, and works fine with all.
The DataBase:
There is very limited database included, and I have chosen to use the format of UserDB.TXT to make things easy.
For example:
[detection string]
Info=Some information about the detection
Working example:
[Upx-Lock]
Info=Protector for Upx -> http://www.Team-X.ru
This will be the information available for any file detected with the string "Upx-Lock" (Case-insensitive) by PEiD ..
To make the info only for an exact string, put the exact string into detection name..
Remove any " *" put by PEiD if external detection, it is ignored.
Obviously putting something like this is stupid:
[pack]
Info=A packer
As everything with the word pack would have the same info..
Also, as the detection is based on partial match, you should put EG Upx-Lock above Upx, or Upx-Lock detected file will have info of Upx, because Upx is in the string Upx-lock .. You can move files up and down in the editor for this reason ..
The database lives in the PEiD dir, with UserDB.TXT, and is called xInfo.TXT ..
You can edit it by hand in notepad, or run the plugin to open the editor.
The Editor:
I wrote a simple editor which opens when Set Info button is pressed, or plugin is run from PEiD Plugin menu ..
The editor has a list of Detection Text and Information Text ..
The detection text is what is looked for in the detection string from PEiD ..
The Information text is what info you want displayed for a detected type of file ..
When you first open the editor, the detection string taken from PEiD is in the edit box marked Detection Text ..
This is to make it easy to add a new detection information..
You can fill in the information and press the add button to add some information for a detected filetype to the list ..
If you select an item the info is copied to the edit boxes and if you change the item, press the update button to save it ..
If you select an item, you can also delete it from the list by pressing the remove button ..
If two or more items have the same detection text and information text, the first one will be deleted when you press the remove button.
All changes to the database are immediate.
If you delete the database file, or don't have one, when the plugin is run a small starter database will be created. This has some help and examples of information for filetypes.
o Add any kind of information about any kind of file ..
o Simple to use..
o Includes built-in editor to quickly add information ..
o Works with PEiD v0.92 -> PEiD v0.94 and probably future ..
o Written in 1 day! :)
Version 1.00 - 30-Mar-2007
o Adds button to PEiD interface to show info about a detected file ..
o Works from database (xInfo.TXT) in PEiD directory ..
o Has editor to edit list ..
Version 1.01 - 10-Apr-2007
o Moved button next to small buttons .. (Hi Pusher :)
o Now refreshes itself if you open a file, scan with different mode or scan with external list .. (Suggested by Pusher)
o Added shortcut for info button (Alt-I) ..
Greets to: snaker, Jibz & Qwerton, Jupiter, BuLLeT, Jeremy Collake, _pusher_, dila, mr Haggar, Fly and all peeps on
PEiD forum
Comments? Bugs? You look like Jessica Alba? ;) Email : BobSoft@GMail.com
For more plugins see my plugins site - Hosted by BuLLeT (Thanks!)
Thanks again to whoever invented coffee, without which I would never get anything done.. ;)
~ A program without bugs has either too few users, or too few uses ~