detectiteasy

File type identification tool.

detectiteasy: Detect It Easy, or abbreviated "DIE" is a program for determining types of
files. The program defines the types MSDOS, PE, ELF, MACH and Binary.

  • filetype: <string> "PE32", "PE64", "ELF32", "ELF64", "Mach-O64".
  • values: list of artifacts detected in the file.
    • info: <string> context of the artifact (i.e. "Native", "GUI32", "NRV", etc).
    • version: <string>.
    • type: <string> general type of detection ("Linker", "Compiler", "Packer", etc).
    • name: <string> item specific name ("UPX", "Microsoft Linker", "gcc(GNU)", etc).
{
    "data": {
        ...
        "attributes": {
            ...
            "detectiteasy": {
                "filetype": "<string>",
                "values": [{
                    "info": "<string>",
                    "version": "<string>",
                    "type": "<string>",
                    "name": "<string>"
                }, ...]
            }
        }
    }
}
{
    "data": {
        "attributes": {
            "detectiteasy": {
                "filetype": "PE32",
                "values": [{
                        "version": "2.12-2.42",
                        "type": "Packer",
                        "name": "ASPack"
                    },
                    {
                        "type": "Compiler",
                        "name": "Borland Delphi"
                    },
                    {
                        "info": "GUI32",
                        "version": "2.25*,Delphi",
                        "type": "Linker",
                        "name": "Turbo Linker"
                    }
                ]
            }
        }
    }
}