Skip to content

Latest commit

 

History

History
34 lines (28 loc) · 898 Bytes

README.md

File metadata and controls

34 lines (28 loc) · 898 Bytes

peid-finder

Will find extract a portable executable entrypoint string (up to 32 characters) from an executable for the purpose of identifying it.

NOTE: an issue with arch misidentification has been fixed for 32 bit node on 64 bit windows. 
32 bit detection has been fixed in general.
Also, at some point I will get this moved over to a node-gyp based install.
This will strip out some of the unnessary objdump stuff and (MAYBE?!) help with running this cross-platform.

This can be used as a NodeJS module

var peidFinder = require("peid-finder");
var peidFinder.find("**/*.exe",8,function (error, peids) {
});

Or from command line after install:

$ peid-finder **/*.exe 8

Both options will return an array of objects that have an executable name and peid, like below:

[
 {
   "executable":"file.exe",
   "peid":"12345678",
 }
]