I'm trying to find a copy of this file. It used to reside here:
http://epsilon.nlitened.org/dev/utilities/PEChecksum14.7z
I would also be interested so see what else might have been available by this author if anyone has that logged somewhere too.
After a bunch of Internet research, I give you this. Scans clean with VirusTotal.
That said, I suspect that some of the other PEChecksum's out there are related and you could use them in place of this.
Kahenraz wrote on 2021-11-28, 21:13:I would also be interested so see what else might have been available by this author if anyone has that logged somewhere too.
I also suspect that "n7Epsilon" is a unique user identifier and a simple Google search will help you find what those are.
Seems to be:
CVTAddon (discontinued) - https://ryanvm.net/forum/viewtopic.php?t=4418
cWnd - cWnd.exe - https://ryanvm.net/forum/viewtopic.php?t=5017
FCGBA - File Gatherer and Cab Builder for AddOns - fgcba.exe / fgcbahandler.exe - https://ryanvm.net/forum/viewtopic.php?t=1577 / https://web.archive.org/web/20080916133017/ht … gcba/index.html
Reg2Inf - reg2inf.exe - https://ryanvm.net/forum/viewtopic.php?t=2169
PEChecksum - pechecksum.exe - https://ryanvm.net/forum/viewtopic.php?t=5381
WMP11 Slipstreamer (Windows Media Player 11 Slipstreamer) - WMP11Slipstreamer.exe (Boooggy & n7Epsilon) - https://ryanvm.net/forum/viewtopic.php?t=5895
maybe others
"I see a little silhouette-o of a man, Scaramouche, Scaramouche, will you
do the Fandango!" - Queen
Stiletto
@Stilleto - very nice google-fu there! 😀
This is excellent. Thank you so much. 😀
This tool is useful for when you want to hex edit kernel mode drivers. Microsoft enforces the PE header checksum for these files whereas it's optional for anything that runs unprivileged or exclusively in userland.
