What are some good programs that can detect which protection software has been used on or in other programs and their libraries?


Also, try Detect It Easy. The project is alive and updated frequently.


You can try to use YARA with appropriates rules. Or, if you're lazy, you can give a try to radare2, since it integrates YARA, and has a shitload of packer-related rules. You could also grab the rule files here.


I've found Protection ID to be fast and comprehensive (last update in late 2013).


There is no "best" I've used PEiD in the past which always worked pretty well.


  • Please improve your answer by adding a link to the mentioned program.
    – ixje
    May 19 '14 at 5:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.