some examples:
a calculator from Win7 | calc.exe |
|
a calculator from Win7, packed with UPX | calc_upx.exe |
|
a calculator from Win7, packed with ASPack | calc_asp.exe |
|
MUI Localization file with a lot of String resources | calc.exe.mui | |
some binaries from the
corkami
project: foldedhdr.exe manyimportsW7.exe imports_badterm.exe imports_nothunk.exe |
latest uploads:
size | ClamAV scan results | filename & link | |
---|---|---|---|
69523968 | scan pending | crackme.exe |
|
38135808 | scan pending | WINFENIX_ERP.unpacked.exe |
|
38125056 | scan pending | WINFENIX_ERP.exe |
|
1086696 | scan pending | $RXUTAC4.exe |
|
1040896 | scan pending | TemplateEditor.exe |
|
5255680 | scan pending | DSLS.LicGen.v1.6.SSQ.exe |
|
208384 | scan pending | iphlpapi.dll |
|
532480 | scan pending | ShellExecAsUser.dll |
|
454120 | scan pending | AnimatorDV_SimplePlus_SERIAL#ADV00843072-243.exe |
|
3492880 | scan pending | wGjSC.exe_ |
|
299008 | scan pending | mypassion.exe |
|
4278784 | scan pending | SO3D_original.exe |
|
commandline usage:
-
install
(you must have ruby 1.9+ with rubygems installed)
gem install pedump
-
run
(for example output and available switches see pedump at github, also take a look at
-W
switch )pedump filename.exe
- contribute