2

. Hello, everybody!

For my scientific work I need big amount of benign PE-files(dll, exe, scr, com). An amount of 500-600 files would be great. While there are plenty of websites where you can download malware, I have not found one where you may download a big amount of non malicious executables.

Do you have some ideas where I could obtain such a big amount of Portable Executables which are not malicious? Thank you in advance!

0xDEADC0DE
  • 426
  • 6
  • 15
  • 4
    I'm voting to close this question as off-topic because it's not a question and it way off-topic for this website. – perror Mar 21 '16 at 11:50
  • 1
    But why is it not an off-topic to ask where you can download malware?(see: http://reverseengineering.stackexchange.com/questions/206/where-can-i-as-an-individual-get-malware-samples-to-analyze) While to ask where you can download non-malware PEs for purposes of reverse engineering or research is an off-topic? – 0xDEADC0DE Mar 21 '16 at 11:55
  • Getting malware is certainly related but this site is more dedicated to discuss about technical stuff. Somehow, asking for an URL is just off topic (first, because it is changing at a too high pace and second because it is not technical). – perror Mar 21 '16 at 15:24
  • 1
    Asking for an URL - is not an off topic, since it may be needed by another people who are, for example, trying to find out how to recognise malware by PE-Malformation or obfuscation in static fashion. These people may need additional benign files along with malware to compare them and do a research. That is why it is technical too and I believe that it is changing with the same pace as malware stuff. Don't be so strict, there are plenty of questions where somebody asks to find something. – 0xDEADC0DE Mar 21 '16 at 15:58
  • look for getgnuwin32 and get all the windows port of unix utilities it should amount to 1200 executables – blabb Mar 21 '16 at 22:05

1 Answers1

1

You can try to use an automated analysis system like http://bsa.isoftware.nl/ or https://www.cuckoosandbox.org/. They have the option to automate installation of setups and also keep the dropped files.

You can go to download.com or softpedia.com and download a large amount of setups/installers(crawler is suggested), put them in a folder and run an automatic analysis on them. You will get a list of folders with each analysis where you can search for *.exe, *.dll, etc.

Suggestion: as some setups come bundled with toolbars, adware, etc, I suggest running a virustotal scan for all the files you obtain in order to have 100% clean set.

xistense
  • 34
  • 3
  • Thank you for your comment. On download.com or softpedia.com I have to download files manually one by one, which is very tedious work. I would like to download them at once. – 0xDEADC0DE Mar 21 '16 at 13:23
  • @0xDEADC0DE: See https://en.wikipedia.org/wiki/Offline_reader#List – Jason Geffner Mar 22 '16 at 00:24
  • In this case, your best bet is to contact an antivirus vendor, antivirus vendors can easily put together an archive of safe PEs (even with certain characteristics) from their databases, but unfortunately don't know if you'll be able to reach to them, unless you provide more details and proper motivation for your project. If it's an academic project, they might provide to you. Except them, I don't know who else might have such lists of safe PEs. – xistense Mar 22 '16 at 07:58