首页
社区
课程
招聘
问答 CTF 排行榜 知识库 工具下载 峰会 看雪商城 证书查询
  1. 社区
  2. 加壳脱壳
    3. 发新帖
公布goodmorning的PEID数据库
发表于: 2005-6-15 14:06 9465

公布goodmorning的PEID数据库

Themida 活跃值
2005-6-15 14:06
9465
heXer说过，留着也没用，不如放出来

全部为原创，如有雷同，纯属巧合

转载请保留版权

;goodmorning制作，转载请保留

[PE-Armor 0.46 -> Hying]
signature = E8 AA 00 00 00 2D ?? ?? ?? 00 00 00 00 00 00 00 00 3D
ep_only = true

[PE-Armor 0.49 -> Hying]
signature = 56 52 51 53 55 E8 15 01 00 00 32 ?? ?? 00 00 00 00 00
ep_only = true

[* ShellModify 0.1 -> pll621]
signature = 55 8B EC 6A FF 68 98 66 41 00 68 3C 3D 41 00 64 A1 00 00 00 00
ep_only = true

[* XJ / XPAL -> LiNSoN]
signature = 55 8B EC 6A FF 68 ?? ?? 40 00 68 ?? ?? 40 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 83 EC 44 53 56 57 66 9C
ep_only = true

[* iPB Protect 0.1.3 - 0.1.7 -> forgot]
signature = 55 8B EC 6A FF 68 4B 43 55 46 68 54 49 48 53 64 A1 00 00 00 00
ep_only = true

[Excalibur 1.03 -> forgot]
signature = E9 00 00 00 00 60 E8 14 00 00 00 5D 81 ED 00 00 00 00
ep_only = true

[EmbedPE 1.13 -> cyclotron]
signature = 83 EC 50 60 68 5D B9 52 5A E8 2F 99 00 00
ep_only = true

[xPEP 0.3x -> xIkUg]
signature = 55 53 56 51 52 57 E8 16 00 00 00
ep_only = true

[Safeguard 1.0 -> Simonzh]
signature = E8 00 00 00 00 EB 29
ep_only = true

[AHPack 0.1 -> FEUERRADER]
signature = 60 68 54 ?? ?? 00 B8 48 ?? ?? 00 FF 10 68 B3 ?? ?? 00 50 B8 44 ?? ?? 00 FF 10 68 00
ep_only = true

[AHTeam EP Protector 0.3 - 0.41 -> FEUERRADER]
signature = 90 ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? 90 90 90 90 FF E0
ep_only = true

[Xtreme-Protector 1.08 / Themida -> Oreans Technologies]
signature = B8 00 00 00 00 60 0B C0 74 58 E8 00 00 00 00 58 05 43 00 00 00 80 38 E9 75 03 61 EB 35 E8
ep_only = true

[ACProtect 1.3x - 1.4x DLL -> Risco Software Inc.]
signature = 80 7C 24 08 01 0F 85
ep_only = true

[Thinstall 2.4x - 2.5x -> Jitit Software]
signature = 55 8B EC B8 ?? ?? ?? ?? BB ?? ?? ?? ?? 50 E8 00 00 00 00 58 2D ?? ?? ?? ?? B9 ?? ?? ?? ?? BA ?? ?? ?? ?? BE ?? ?? ?? ?? BF ?? ?? ?? ?? BD ?? ?? ?? ?? 03 E8
ep_only = true

[NsPack 1.4 -> Liuxingping]
signature = 9C 60 E8 00 00 00 00 5D B8 ?? ?? 40 00 2D ?? ?? 40 00
ep_only = true

[Obsidium 1.2.0.0 -> Obsidium Software]
signature = EB 02 ?? ?? E8 3F 1E 00 00
ep_only = true

[Obsidium 1.2.5.0 -> Obsidium Software]
signature = E8 0E 00 00 00 8B 54 24 0C 83 82 B8 00 00 00
ep_only = true

[* Soft Defender 1.1x -> Randy Li]
signature = 74 07 75 05 19 32 67 E8 E8 74 1F 75 1D E8 68 39 44
ep_only = true

[* SDProtector 1.1x -> Randy Li]
signature = 55 8B EC 6A FF 68 1D 32 13 05 68 88 88 88 08 64 A1
ep_only = true

[yoda's Protector 1.0x -> Ashkbiz Danehkar]
signature = E8 03 00 00 00 EB 01 ?? BB 55 00 00 00 E8 03
ep_only = true

[vcasm 1.0 - 1.1 -> vcasm]
signature = EB 01 9A 60
ep_only = true

[* Vcasm-Protector 1.0a - 1.0d -> vcasm]
signature = 55 8B EC 6A FF 68 ?? ?? ?? 00 68 ?? ?? ?? 00 64 A1 00 00 00 00 50 64 89 25 00 00 00 00 E8 03 00 00 00
ep_only = true

[Vcasm-Protector 1.0e -> vcasm]
signature = EB 0A 5B 56 50 72 6F 74 65 63 74 5D
ep_only = true

[Vcasm-Protector 1.1 - 1.2 -> vcasm]
signature = EB 0B 5B 56 50 72 6F 74 65 63 74 5D
ep_only = true

[tElock 0.98 Special Build -> forgot & heXer]
signature = E9 99 D7 FF FF 00 00 00 ?? ?? ?? ?? AA ?? ?? 00 00 00 00 00 00 00 00 00 CA
ep_only = true

[tElock 0.99 -> tE!]
signature = E9 5E DF FF FF 00 00 00 ?? ?? ?? ?? E5 ?? ?? 00 00 00 00 00 00 00 00 00 05
ep_only = true

[tElock 0.99 - 1.0 private -> tE!]
signature = E9 ?? ?? FF FF 00 00 00 ?? ?? ?? ?? ?? ?? ?? 00 00 00 00 00 00 00 00 00
ep_only = true

[EncryptPE 1.2003.5.18 -> WFS]
signature = 60 9C 64 FF 35 00 00 00 00 E8 79
ep_only = true

[EncryptPE 2.2004.8.10 - 2.2005.3.14 -> WFS]
signature = 60 9C 64 FF 35 00 00 00 00 E8 7A
ep_only = true

[* JDPack 2.x -> JDPack]
signature = 55 8B EC 6A FF 68 68 51 40 00 68 04 25 40 00 64 A1 00 00 00 00
ep_only = true

[PECrc32 0.88 -> ZhouJinYu]
signature = 60 E8 00 00 00 00 5D 81 ED B6 A4 45 00 8D BD B0 A4 45 00 81 EF 82 00 00 00
ep_only = true

[EXEStealth 2.75 -> WebtoolMaster]
signature = 90 60 90 E8 00 00 00 00 5D 81 ED D1 27 40 00 B9 15 00 00 00
ep_only = true

[eXPressor 1.1 -> CGSoftLabs]
signature = E9 ?? ?? 00 00 E9 ?? ?? 00 00 E9 ?? 12 00 00 E9 ?? 0C 00 00 E9 ?? ?? 00 00 E9 ?? ?? 00 00 E9 ?? ?? 00 00
ep_only = true

[eXPressor 1.2 -> CGSoftLabs]
signature = 55 8B EC 81 EC D4 01 00 00 53 56 57 EB 0C 45 78 50 72 2D 76 2E 31 2E 32 2E 2E
ep_only = true

[Upack 0.1x -> Dwing]
signature = BE 48 01 40 00 AD 8B F8
ep_only = true

[Upack 0.2x -> Dwing]
signature = BE 88 01 40 00 AD 8B F8
ep_only = true

[Upack 0.22 - 0.23 -> Dwing]
signature = 6A 07 BE 88 01 40 00 AD
ep_only = true

[MSLRH 0.31 -> emadicius]
signature = 60 D1 CB 0F CA C1 CA E0 D1 CA 0F C8 EB 01 F1
ep_only = true

[G!X Protector 1.2 -> Guru.eXe]
signature = 60 EB 05 E8 EB 04 40 00 EB FA E8 0A 00 00 00
ep_only = true

[Crunch 4 -> Bit-Arts]
signature = EB 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 E8 00 00 00 00
ep_only = true

[Crunch 5 / Fusion 4 -> Bit-Arts]
signature = EB 15 03 00 00 00 06 00 00 00 00 00 00 00 00 00 00 00 68 00 00 00 00 55 E8 00 00 00 00
ep_only = true

[* ExeShield Protector 3.6 -> www.exeshield.com]
signature = B8 ?? ?? ?? 00 50 64 FF 35 00 00 00 00 64 89 25 00 00 00 00 33 C0 89 08 50 45 43 6F 6D 70 61 63 74 32 00 CE 1E 42 AF F8 D6 CC
ep_only = true

[Spalsher 1.0 - 3.0 -> Amok]
signature = 9C 60 8B 44 24 24 E8 00 00 00 00
ep_only = true

[Packman Executable Image Packer 0.0.0.1 -> bubba]
signature = 60 E8 00 00 00 00 58 8D A8 ?? ?? FF FF 8D 98 ?? ?? ?? FF
ep_only = true

[ASProtect 1.33 - 2.1 Registered -> Alexey Solodovnikov]
signature = 68 01 ?? ?? ?? E8 01 00 00 00 C3 C3
ep_only = true

[StarForce ProActive 1.1 -> StarForce Technology]
signature = 68 ?? ?? ?? ?? FF 25 ?? ?? 57
ep_only = true

[StarForce 3.0 -> StarForce Technology]
signature = 68 ?? ?? ?? ?? FF 25 ?? ?? 63
ep_only = true

[Exe Locker 1.0 -> IonIce]
signature = E8 00 00 00 00 60 8B 6C 24 20 81 ED 05 00 00 00
ep_only = true

[SecureEXE 3.0 -> ZipWorx]
signature = E9 B8 00 00 00 ?? ?? ?? 00 ?? ?? ?? 00 ?? ?? ?? 00 00 00 00 00 00
ep_only = true

[Alex Protector 1.0 -> Alex]
signature = 60 E8 00 00 00 00 5D 81 ED 06 10 40 00 E8 24 00 00 00
ep_only = true

[Hide&Protect 1.016 -> SoftWar Company]
signature = 90 90 90 E9 D8 ?? 05 00 95 ?? 53 00 95 4A 50 00
ep_only = true

[WARNING -> TROJAN -> RobinPE]
signature = 60 6A 00 6A 20 6A 02 6A 00 6A 03 68 00 00 00
ep_only = true

[WARNING -> TROJAN -> HuiGeZi]
signature = 55 8B EC 81 C4 ?? FE FF FF 53 56 57 33 C0 89 85 ?? FE FF FF
ep_only = true

[WARNING -> TROJAN -> XiaoHui]
signature = 60 9C E8 00 00 00 00 5D B8 ?? 85 40 00 2D ?? 85 40 00
ep_only = true

[WARNING -> TROJAN -> ADinjector]
signature = 90 61 BE 00 20 44 00 8D BE 00 F0 FB FF C7 87 9C E0 04 00 6A F0 8A 5E 57 83 CD FF EB 0E
ep_only = true

[Fusion 1.0 -> jaNooNi]
signature = 68 04 30 40 00 68 04 30 40 00 E8 09 03 00 00 68 04 30 40 00 E8 C7 02 00 00
ep_only = true

[Nakedbind 1.0 -> nakedcrew]
signature = 64 8B 38 48 8B C8 F2 AF AF 8B 1F 66 33 DB 66 81 3B 4D 5A 74 08 81 EB 00 00
ep_only = true

[ExeJoiner 1.0 -> Yoda f2f]
signature = 68 00 10 40 00 68 04 01 00 00 E8 39 03 00 00 05 00 10 40 00 C6 00 5C 68 04 01 00 00
ep_only = true

[MicroJoiner 1.1 -> coban2k]
signature = BE 0C 70 40 00 BB F8 11 40 00 33 ED 83 EE 04 39 2E 74 11
ep_only = true

[MicroJoiner 1.5 -> coban2k]
signature = BF 05 10 40 00 83 EC 30 8B EC E8 C8 FF FF FF E8 C3 FF FF FF
ep_only = true

[MicroJoiner 1.6 -> coban2k]
signature = 33 C0 64 8B 38 48 8B C8 F2 AF AF 8B 1F 66 33 DB 66 81 3B
ep_only = true

[MicroJoiner 1.7 -> coban2k]
signature = BF 00 10 40 00 8D 5F 21 6A 0A 58 6A 04 59 60 57 E8 8E 00 00 00
ep_only = true

[E language]
signature = E8 06 00 00 00 50 E8 ?? 01 00 00 55 8B EC 81 C4 F0 FE FF FF
ep_only = true

[Microsoft CAB SFX]
signature = E8 0A 00 00 00 E9 7A FF FF FF CC CC CC CC CC
ep_only = true

[EXECryptor 2.x -> SoftComplete Developement]
signature = A4 ?? ?? 00 00 00 00 00 FF FF FF FF 3C ?? ?? 00 94 ?? ?? 00 D8 ?? ?? 00 00 00 00 00 FF FF FF FF
ep_only = false

[ACProtect 1.41 -> AntiCrack Software]
signature = E8 01 00 00 00 ?? 83
ep_only = false

[PolyEnE 0.01+ -> Lennart Hedlund]
signature = 50 6F 6C 79 45 6E 45 00 4D 65 73 73 61 67 65 42 6F 78 41 00 55 53 45 52 33 32 2E 64 6C 6C
ep_only = false

;copyright by goodmorning

[招生]科锐逆向工程师培训(2024年11月15日实地，远程教学同时开班, 第51期)

收藏
免费 ・0
支持
分享
最新回复 (13)
zeror
雪    币： 186
活跃值： (69)
能力值： ( LV2，RANK：10 )
在线值：
发帖
回帖
粉丝
私信
2 楼
支持，抢个位置！
2005-6-15 14:24
0
wekabc
雪    币： 211
活跃值： (10)
能力值： ( LV2，RANK：10 )
在线值：
发帖
回帖
粉丝
私信
3 楼
[WARNING -> TROJAN -> HuiGeZi]
signature = 55 8B EC 81 C4 ?? FE FF FF 53 56 57 33 C0 89 85 ?? FE FF FF
ep_only = true
[WARNING -> TROJAN -> XiaoHui]
signature = 60 9C E8 00 00 00 00 5D B8 ?? 85 40 00 2D ?? 85 40 00
ep_only = true
2005-6-15 14:25
0
血草
雪    币： 207
活跃值： (40)
能力值： ( LV4，RANK：50 )
在线值：
发帖
回帖
粉丝
私信
4 楼
[nSpack V1.1b -> Liuxingping]
signature = 9C 60 E8 00 00 00 00 5D B8 57 84 40 00 2D 50 84 40 00
ep_only = true

[nSpack V1.3 -> Liuxingping]
signature = 9C 60 E8 00 00 00 00 5D B8 B3 85 40 00 2D AC 85 40 00
ep_only = true

[DxPack V0.86 ->Dxd]
signature = 60 E8 00 00 00 00 5D 8B FD 81 ED 06 10 40 00 2B BD 94 12 40 00 81 EF 06 00 00 00 83 BD 14 13 40 00 01 0F 84 2F 01 00 00
ep_only = true

[nSpack V1.4 -> xuecao]
signature = 9C 60 E8 00 00 00 00 5D B8 B1 85 40 00 2D AA 85 40 00
ep_only = true

[bambam V0.01 -> bedrock]
signature = 6A 14 E8 9A 05 00 00 8B D8 53 68 ?? ?? ?? ?? E8 6C FD FF FF
ep_only = true

[MSLRHv0.31 -> xuecao]
signature = 60 D1 CB 0F CA C1 CA E0 D1 CA 0F C8 EB 01 F1 0F C0 C9 D2 D1
ep_only = true
2005-6-15 14:44
0
systembug
雪    币： 223
活跃值： (101)
能力值： ( LV2，RANK：10 )
在线值：
发帖
回帖
粉丝
私信
5 楼
晕  没人整理下吗
2005-6-16 02:16
0
bbsxwk
雪    币： 239
活跃值： (190)
能力值： ( LV4，RANK：50 )
在线值：
发帖
回帖
粉丝
私信
6 楼
好东西 收藏了
2005-6-16 21:00
0
孤星释狼
雪    币： 201
活跃值： (10)
能力值： ( LV2，RANK：10 )
在线值：
发帖
回帖
粉丝
私信
7 楼
真的是好东西 已经收藏 保存
2005-6-16 22:44
0
LOVE
雪    币： 2003
活跃值： (61)
能力值： ( LV2，RANK：10 )
在线值：
发帖
回帖
粉丝
私信
8 楼
好 非常需要
2005-7-12 15:06
0
tzk
雪    币： 200
活跃值： (10)
能力值： ( LV2，RANK：10 )
在线值：
发帖
回帖
粉丝
私信
tzk
9 楼
好多，收藏了再说
2005-7-12 15:30
0
国士无双
雪    币： 200
活跃值： (10)
能力值： ( LV2，RANK：10 )
在线值：
发帖
回帖
粉丝
私信
10 楼
这是个好东西.
我是新手,使用PEIDV0.92检查某软件的壳,居然出现是多重的,无法识别.更新了壳的数据库后,一下就出来了.
万分感谢!!!
2005-7-19 09:58
0
blueyestar
雪    币： 200
活跃值： (10)
能力值： ( LV2，RANK：10 )
在线值：
发帖
回帖
粉丝
私信
11 楼
怎么用？！！！
2005-12-13 15:43
0
林海雪原
雪    币： 242
活跃值： (163)
能力值： ( LV9，RANK：250 )
在线值：
发帖
回帖
粉丝
私信
12 楼
好！顶一下！
2005-12-13 15:50
0
Kernel64
雪    币： 224
活跃值： (50)
能力值： ( LV2，RANK：10 )
在线值：
发帖
回帖
粉丝
私信
13 楼
如果可以的话,RORDbg想借用您的数据,希望您能够同意.
2005-12-13 20:48
0
linhanshi
雪    币： 97697
活跃值： (200734)
能力值： (RANK：10 )
在线值：
发帖
回帖
粉丝
私信
14 楼
最初由 Kernel64 发布
如果可以的话,RORDbg想借用您的数据,希望您能够同意.


FLY版主的也可以.
2005-12-13 22:32
0
游客
登录 | 注册 方可回帖
回帖 表情 雪币赚取及消费
高级回复
返回
//