Kick10's plugins and utilities on TOTALCMD.NET
Author Profile: Kick10 All Plugins and Files by Kick10
Content plugin with gentlemen's feature set to determine the malware :)
Is able to identify Windows PE executable files, regardless of extension being used and show the following information on them:
- Is file packed or encrypted (heuristically determines)
- The validity of digital signature
- The name of PE section in which program entry point is located (useful for determining infection with file viruses)
- A list of PE sections and their entropy in percents
- The presence of a file version information(the information itself is not displayed, only the fact of its presence for the convenience of the Advanced Search)
- A summary of the use of some winapi-functions (does application use a network, files, registry, processes, etc). It analyzes the import table, so the dynamically loaded libraries are not considered. List of api functions can be edited in the file funcgroups.json
- Detection of the file by antivirus software. Plugin checks detection using file MD5 hash with online detection service http://www.virustotal.com (uses 50+ antiviruses). This function can be very slow with poor internet connection. Detects are cached on the user's computer, if you need to rescan the files, you need to delete the cache file "verdicts" in the plugin folder.
You can also use the plug-in columns for advanced search and file highlighting.
309 KB - Updated: 7.04.2013 - x32/x64 - Downloaded 6327 times
This plugin is browser for Microsoft Networks and is a replacement for standard network neighbourhood
Main features :
1. Netbios scan of specified IP ranges
2. Basic file/dir operations like copy/rename/delete/search ...
3. Resume download after failure.
4. Works on all OS Windows
Does not use system domain service, should work even with not working DNS servers
104 KB - Updated: 21.02.2006 - x32 - Downloaded 108690 times
|
|
