(PEiD is a well-known shell checking tool, which is powerful enough to detect almost all shells, and its number has exceeded the packing types and signatures of 470 PE documents. Modify the scan mode of PEID in this paragraph. Normal scan mode: can scan the signatures of all records at the entry point of the PE document; Deep scan mode: can deeply scan the signatures of all records. This mode has a wider range than the previous scan. Wider and deeper; ●Core scan mode: It can scan all PE documents completely. It is recommended to use this mode as the final choice. PEiD has built-in fault control technology, so it can generally guarantee the accuracy of scanning results. The first two scan modes delivered results almost instantaneously, the last one was a bit slower for obvious reasons. Modify the command line options for PEID in this section ● peid-time〓 Display information ● peid-r〓 Scan subdirectories ● peid-nr〓 Do not scan subdirectories ● peid-hard〓 Select core scan mode ● peid-deep〓 Select deep scan mode ● peid-norm〓 Choose normal scan mode to modify other main modules of PEiD in this section. multiple documents. Select "Show only PE files" to filter non-PE documents; select "Recursive scan" to scan all documents, including subdirectories. ● Hex hexadecimal detection module: can quickly detect documents in hexadecimal. Modify the official website of PEiD in this paragraph ● peid official website: peid.info ● peid official forum: peid.info/forum/)
收藏
