Alternatives to Detect It Easy
A program that identifies file types, packers, compilers and protectors used in executables. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Detect It Easy
A program that identifies file types, packers, compilers and protectors used in executables.
Replacements
Listings that take over the same core job as Detect It Easy.
pestudio
A Windows tool for quick static assessment of executable files that highlights suspicious indicators.
pestudio is a Windows-only freemium tool for static triage of executables that flags suspicious indicators, while Detect It Easy is free, open source and runs on Windows, Linux and macOS.
PE-bear
A multiplatform viewer and editor for reversing Windows Portable Executable (PE) files.
PE-bear is a free open-source viewer and editor for Windows PE files with Capstone disassembly, but it covers only the PE format instead of identifying packers across many file types.
capa
Identify likely capabilities inside executable files.
capa is an open-source command-line tool that identifies likely capabilities in executables using rules, reporting what a binary may do rather than which packer or compiler built it.
Also worth comparing
These listings name Detect It Easy as their own alternative, so the relationship runs both ways.
binsider
Inspect executable files through a terminal interface.
Detect It Easy identifies packers, compilers and protectors in executables on Windows, Linux and macOS, but it reports what a file is without hex inspection or tracing.
Similar software
Related functionality, not a direct replacement.
YARA
Pattern-matching engine for identifying and classifying malware samples.
YARA-X
Match files against rules describing suspicious binary patterns.
Ghidra
The NSA's reverse engineering framework, with a decompiler that turns machine code back into readable C.
FLARE-VM
Installation scripts that turn a Windows virtual machine into a malware analysis and reverse-engineering workstation.
REMnux
Linux toolkit for reverse engineering and analysing malicious software.
unblob
Command-line extraction tool that finds and unpacks archives and compressed streams inside arbitrary binary files.
