Detect It Easy
A program that identifies file types, packers, compilers and protectors used in executables.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
2 more ways to get Detect It Easy
Other download sites
Run by third parties, not by horsicq. Prefer the official page above when it works.
About Detect It Easy
Detect It Easy (DIE) examines a file and reports what it is, including the compiler, packer or protector used to build an executable. Detection relies on signature databases kept in the repository, along with PEiD and YARA rules.
It runs on Windows, Linux and macOS, and a Dockerfile is included. Reverse engineers and malware analysts use it as a first step to decide how to approach an unknown binary.
Strengths
- Identifies packers, compilers and protectors
- Extensive signature databases plus PEiD and YARA rules
- Runs on Windows, Linux and macOS
Limitations
- Reports what a file is but does not unpack or decompile it
Details
- Pricing
- FreeFree and open source.
- License
- Open source, license not stated
- Developer
- horsicq
- Platforms
- Windows, macOS, Linux
- How it runs
- Downloadable app
- Account
- Not required
- Works offline
- Yes
- Best suited for
- Malware analysts triaging unknown executables
- Categories
- Security tools, Developer tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to Detect It Easy
Compare allSoftware that can replace Detect It Easy for an important use case, and what changes if you switch.
pestudio
A Windows tool for quick static assessment of executable files that highlights suspicious indicators.
pestudio is a Windows-only freemium tool for static triage of executables that flags suspicious indicators, while Detect It Easy is free, open source and runs on Windows, Linux and macOS.
PE-bear
A multiplatform viewer and editor for reversing Windows Portable Executable (PE) files.
PE-bear is a free open-source viewer and editor for Windows PE files with Capstone disassembly, but it covers only the PE format instead of identifying packers across many file types.
capa
Identify likely capabilities inside executable files.
capa is an open-source command-line tool that identifies likely capabilities in executables using rules, reporting what a binary may do rather than which packer or compiler built it.
Detect It Easy as an alternative
Listings that name Detect It Easy as an alternative.
binsider
Inspect executable files through a terminal interface.
Detect It Easy identifies packers, compilers and protectors in executables on Windows, Linux and macOS, but it reports what a file is without hex inspection or tracing.
Similar software
Related functionality, not necessarily a direct replacement.
YARA
Pattern-matching engine for identifying and classifying malware samples.
YARA-X
Match files against rules describing suspicious binary patterns.
Ghidra
The NSA's reverse engineering framework, with a decompiler that turns machine code back into readable C.
FLARE-VM
Installation scripts that turn a Windows virtual machine into a malware analysis and reverse-engineering workstation.
REMnux
Linux toolkit for reverse engineering and analysing malicious software.
unblob
Command-line extraction tool that finds and unpacks archives and compressed streams inside arbitrary binary files.
