What's new
RevTeam.Re - Reverse Engineering Team

Welcome Guest! Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your own topics and posts, as well as connect with other members through your own private inbox! Register and wait for our approve!

verspoof v0.1 - Process Loader and OS version spoofing engine for installer EXEs

Stingered

Well-known member
Joined
Jan 11, 2022
Messages
131
Reaction score
832
Usage:
verspoof [-osver 10|11] installer.exe (to include any parameters)


Sample command line:
verspoof -osver 10 testinstaller.exe
[*] Target Executable : testinstaller.exe
[*] Command Line : testinstaller.exe
[*] Target OS Build : 19045 (Win 10)
[*] Hook Payload Path : D:\test\spoof_hook.dll
[+] spoof_hook.dll successfully injected.
[*] Hooks active. Resuming target process...


Details:
A C++ CLI tool designed to spoof OS version information for installer EXE requiring later versions
of the OS when attempting to install on older OS (Windows 7). This done by loading and injecting
spoof_hook.dll into the installer EXE process, intercepting calls that determine the current OS, and
then returning later/neweer OS information (Windows 10/11).


Why I wrote this tool:
I was getting very aggravated that newer installers were not allowing installation on Windows 7/8.
My main RE VM is Windows 7 and I did not want to setup a whole new Win10 RE VM just for these dumb
installer EXEs.

More information:
Yes, I understand there may be OS dependencies required by the installed app and the very reason for
the latest OS requirements. That said, this tool has/is saving me time. It has been tested on multiple
installers and even MS C++ redist packages. That said, it will likely not work for every installer
creation tool out there.

I hope someone finds this tool useful.


Stingered (2026)
 
Top