SabreTools/BinaryObjectScanner
1
0
Fork 0
mirror of https://github.com/SabreTools/BinaryObjectScanner.git synced 2026-02-04 05:35:49 +00:00
Code Issues 295 Packages Projects Releases 20 Wiki Activity

Another round of cleanup and normalization

Browse Source
This commit is contained in:
Matt Nadareski
2025-09-20 19:18:08 -04:00
parent 0afd189fe0
commit 6a5afd8d2c
13 changed files with 38 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
BinaryObjectScanner/Packer/AutoPlayMediaStudio.cs
View File

@@ -12,8 +12,9 @@ namespace BinaryObjectScanner.Packer
/// <inheritdoc/>
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
// Known to detect versions 5.0.0.3 - 8.1.0.0
string? name = exe.ProductName;
// Known to detect versions 5.0.0.3 - 8.1.0.0
if (name.OptionalStartsWith("AutoPlay Media Studio", StringComparison.OrdinalIgnoreCase))
return $"AutoPlay Media Studio {GetVersion(exe)}";

3
BinaryObjectScanner/Packer/GPInstall.cs
View File

@@ -11,8 +11,9 @@ namespace BinaryObjectScanner.Packer
/// <inheritdoc/>
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
// <see href="https://www.virustotal.com/gui/file/0e0a93cba8163cef9c979cbb49a6f15604956b9441aba6fb9e9f0c6897cc73ed/details"/>
string? name = exe.FileDescription;
// <see href="https://www.virustotal.com/gui/file/0e0a93cba8163cef9c979cbb49a6f15604956b9441aba6fb9e9f0c6897cc73ed/details"/>
if (name.OptionalContains("GP-Install"))
return "GP-Install";

13
BinaryObjectScanner/Packer/GenteeInstaller.cs
View File

@@ -10,6 +10,13 @@ namespace BinaryObjectScanner.Packer
/// <inheritdoc/>
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
string? name = exe.AssemblyName;
// <see href="https://www.virustotal.com/gui/file/40e222d35fe8bdd94360462e2f2b870ec7e2c184873e2a481109408db790bfe8/details"/>
// This was found in a "Create Install 2003"-made installer
if (name.OptionalEquals("Gentee.Installer.Install"))
return "Gentee Installer";
// Get the .data/DATA section strings, if they exist
var strs = exe.GetFirstSectionStrings(".data") ?? exe.GetFirstSectionStrings("DATA");
if (strs != null)
@@ -21,12 +28,6 @@ namespace BinaryObjectScanner.Packer
return "Gentee Installer";
}
// <see href="https://www.virustotal.com/gui/file/40e222d35fe8bdd94360462e2f2b870ec7e2c184873e2a481109408db790bfe8/details"/>
// This was found in a "Create Install 2003"-made installer
string? name = exe.AssemblyName;
if (name.OptionalEquals("Gentee.Installer.Install"))
return "Gentee Installer";
return null;
}
}

6
BinaryObjectScanner/Packer/GkWareSFX.cs
View File

@@ -11,13 +11,15 @@ namespace BinaryObjectScanner.Packer
/// <inheritdoc/>
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
// <see href="https://www.virustotal.com/gui/file/867726b7afc1b2343651497bbbe35618f781bb82491a2a768922117c44a897d3/details"/>
string? name = exe.FileDescription;
// <see href="https://www.virustotal.com/gui/file/867726b7afc1b2343651497bbbe35618f781bb82491a2a768922117c44a897d3/details"/>
if (name.OptionalContains("GkWare Self extractor"))
return "GkWare SFX";
// <see href="https://www.virustotal.com/gui/file/867726b7afc1b2343651497bbbe35618f781bb82491a2a768922117c44a897d3/details"/>
name = exe.ProductName;
// <see href="https://www.virustotal.com/gui/file/867726b7afc1b2343651497bbbe35618f781bb82491a2a768922117c44a897d3/details"/>
if (name.OptionalContains("GkWare Self extractor"))
return "GkWare SFX";

2
BinaryObjectScanner/Packer/InstallAnywhere.cs
View File

@@ -12,10 +12,12 @@ namespace BinaryObjectScanner.Packer
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
string? name = exe.FileDescription;
if (name.OptionalStartsWith("InstallAnywhere Self Extractor", StringComparison.OrdinalIgnoreCase))
return $"InstallAnywhere {GetVersion(exe)}";
name = exe.ProductName;
if (name.OptionalStartsWith("InstallAnywhere", StringComparison.OrdinalIgnoreCase))
return $"InstallAnywhere {GetVersion(exe)}";

2
BinaryObjectScanner/Packer/IntelInstallationFramework.cs
View File

@@ -11,6 +11,7 @@ namespace BinaryObjectScanner.Packer
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
string? name = exe.FileDescription;
if (name.OptionalEquals("Intel(R) Installation Framework", StringComparison.OrdinalIgnoreCase)
|| name.OptionalEquals("Intel Installation Framework", StringComparison.OrdinalIgnoreCase))
{
@@ -18,6 +19,7 @@ namespace BinaryObjectScanner.Packer
}
name = exe.ProductName;
if (name.OptionalEquals("Intel(R) Installation Framework", StringComparison.OrdinalIgnoreCase)
|| name.OptionalEquals("Intel Installation Framework", StringComparison.OrdinalIgnoreCase))
{

2
BinaryObjectScanner/Packer/MicrosoftCABSFX.cs
View File

@@ -11,10 +11,12 @@ namespace BinaryObjectScanner.Packer
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
string? name = exe.InternalName;
if (name.OptionalEquals("Wextract", StringComparison.OrdinalIgnoreCase))
return $"Microsoft CAB SFX {GetVersion(exe)}";
name = exe.OriginalFilename;
if (name.OptionalEquals("WEXTRACT.EXE", StringComparison.OrdinalIgnoreCase))
return $"Microsoft CAB SFX {GetVersion(exe)}";

1
BinaryObjectScanner/Packer/NSIS.cs
View File

@@ -10,6 +10,7 @@ namespace BinaryObjectScanner.Packer
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
string? name = exe.AssemblyDescription;
if (name.OptionalStartsWith("Nullsoft Install System"))
return $"NSIS {name!.Substring("Nullsoft Install System".Length).Trim()}";

7
BinaryObjectScanner/Packer/SetupFactory.cs
View File

@@ -12,17 +12,20 @@ namespace BinaryObjectScanner.Packer
/// <inheritdoc/>
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
// Known to detect versions 7.0.5.1 - 9.1.0.0
string? name = exe.LegalCopyright;
// Known to detect versions 7.0.5.1 - 9.1.0.0
if (name.OptionalStartsWith("Setup Engine", StringComparison.OrdinalIgnoreCase))
return $"Setup Factory {GetVersion(exe)}";
name = exe.ProductName;
if (name.OptionalStartsWith("Setup Factory", StringComparison.OrdinalIgnoreCase))
return $"Setup Factory {GetVersion(exe)}";
// Known to detect version 5.0.1 - 6.0.1.3
name = exe.FileDescription;
// Known to detect version 5.0.1 - 6.0.1.3
if (name.OptionalStartsWith("Setup Factory", StringComparison.OrdinalIgnoreCase))
return $"Setup Factory {GetVersion(exe)}";

8
BinaryObjectScanner/Packer/SevenZipSFX.cs
View File

@@ -8,27 +8,27 @@ namespace BinaryObjectScanner.Packer
/// <inheritdoc/>
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
// Get the assembly description, if possible
string? name = exe.AssemblyDescription;
if (name.OptionalStartsWith("7-Zip Self-extracting Archive"))
return $"7-Zip SFX {exe.AssemblyDescription!.Substring("7-Zip Self-extracting Archive ".Length)}";
// Get the file description, if it exists
name = exe.FileDescription;
if (name.OptionalEquals("7z SFX"))
return "7-Zip SFX";
if (name.OptionalEquals("7z Self-Extract Setup"))
return "7-Zip SFX";
// Get the original filename, if it exists
name = exe.OriginalFilename;
if (name.OptionalEquals("7z.sfx.exe"))
return "7-Zip SFX";
else if (name.OptionalEquals("7zS.sfx"))
return "7-Zip SFX";
// Get the internal name, if it exists
name = exe.InternalName;
if (name.OptionalEquals("7z.sfx"))
return "7-Zip SFX";
else if (name.OptionalEquals("7zS.sfx"))

3
BinaryObjectScanner/Packer/SmartInstallMaker.cs
View File

@@ -11,8 +11,9 @@ namespace BinaryObjectScanner.Packer
/// <inheritdoc/>
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
// <see href="https://www.virustotal.com/gui/file/43b5791a7d87830025efae0db8f1cc5a02b6001f4703b0189adf1412cdbe22ac/details"/>
string? name = exe.AssemblyDescription;
// <see href="https://www.virustotal.com/gui/file/43b5791a7d87830025efae0db8f1cc5a02b6001f4703b0189adf1412cdbe22ac/details"/>
if (name.OptionalContains("Smart Install Maker"))
return "Smart Install Maker";

6
BinaryObjectScanner/Packer/SpoonInstaller.cs
View File

@@ -11,14 +11,16 @@ namespace BinaryObjectScanner.Packer
/// <inheritdoc/>
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
// <see href="https://www.virustotal.com/gui/file/ad876d9aa59a2c51af776ce7c095af69f41f2947c6a46cfe87a724ecf8745084/details"/>
string? name = exe.AssemblyDescription;
// <see href="https://www.virustotal.com/gui/file/ad876d9aa59a2c51af776ce7c095af69f41f2947c6a46cfe87a724ecf8745084/details"/>
if (name.OptionalEquals("Spoon Installer"))
return "Spoon Installer";
name = exe.AssemblyName;
// <see href="https://www.virustotal.com/gui/file/40e222d35fe8bdd94360462e2f2b870ec7e2c184873e2a481109408db790bfe8/details"/>
// This was found in a "Create Install 2003"-made installer
name = exe.AssemblyName;
if (name.OptionalEquals("Illustrate.Spoon.Installer"))
return "Spoon Installer";

1
BinaryObjectScanner/Packer/WinRARSFX.cs
View File

@@ -9,6 +9,7 @@ namespace BinaryObjectScanner.Packer
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
{
string? name = exe.AssemblyDescription;
if (name.OptionalContains("WinRAR archiver"))
return "WinRAR SFX";