Detect-It-Easy icon indicating copy to clipboard operation
Detect-It-Easy copied to clipboard
verified publisher icon horsicq

Visual Studio 6 signature scan missing libc type?

Open krystalgamer opened this issue 7 months ago • 8 comments

I remember prior versions would tell whether an exe was built with libc or libcmt and even debug versions. Has the interface moved it somewhere else or is simply not displayed anymore?

krystalgamer avatar Sep 15 '25 22:09 krystalgamer

Hello, @krystalgamer! This functionality has not been moved or removed anywhere and is still located in the Microsoft.6.sg module.

UPD.: Latest beta. Image

DosX-dev avatar Sep 16 '25 12:09 DosX-dev

hey @DosX-dev

Here's the side by side of stable and beta

Image

like your screenshot I remember it showed next to the compiler, i had used DiE prior to identify the proper libc version for this exe. is there a way to debug why it's not showing/identifying?

krystalgamer avatar Sep 16 '25 16:09 krystalgamer

I dare to assume that you mean the functionality from the module `EP.MSVC.4.sg". It is planned to completely rewrite it due to problems with codebase conflicts.

However, to use it, just enable the option as in the screenshot below

Image

DosX-dev avatar Sep 16 '25 19:09 DosX-dev

I'ts enabled and still can't see libc*

Image

krystalgamer avatar Sep 17 '25 16:09 krystalgamer

I don't understand what functionality we are talking about. Can you try scanning with the old version of DiE?

DosX-dev avatar Sep 19 '25 08:09 DosX-dev

Image

As you can see the version 3.04 contains [libcmt] while 3.11 is missing. This is for the same exe.

krystalgamer avatar Sep 19 '25 21:09 krystalgamer

Can you provide sample files?

DosX-dev avatar Sep 20 '25 07:09 DosX-dev

samples.zip

Image Image

krystalgamer avatar Sep 20 '25 09:09 krystalgamer