PeStudio - подробная информация о приложениях

[Risovod]

PeStudio
Скриншот

PeStudio - компактная программа, дающая подробную информацию о приложениях без необходимости их запуска. PeStudio дает информацию о любом приложении (*.exe,*.dll,*.cpl,*.ocx,*.sys,...), не запуская его. Для начала проверки - просто перетащите мышкой проверяемый файл в окно программы PeStudio.

Возможности программы:

- является ли приложение 32 или 64 битным;
- использует ли приложение потенциально опасные для Вашего компьютера функции;
- используется ли структурная обработка исключений (SEH);
- показывает все библиотеки, используемые приложением;
- информация об импорте/экспорте функций приложением;
- другую существенную информацию о приложении.

Разработчик: Winitor
Лицензия: FreeWare
Язык интерфейса: English
Размер: ≈ 400 KB
ОС: Windows XP/2003/Vista/7/8 (32-bit & 64-bit)

[SerVer_UA]

PeStudio 8.47

Изменения:

Version 8.47
. Added computation of Imports Hash (imphash)
. Added detection of strings embedded in non-PE files
. Extended detection of processor types
. Fixed a hangup
. Updated AV list

Скачать (872 kb)

[SerVer_UA]

PeStudio 8.48

Изменения:

Version 8.48
. Extended Thresholds
. Extended Indicators
. Show virustotal score for Overlay (when available)
. Fixed an issue in the Debug detection
. Fixed an issue in imported symbols by ordinal for 64bit files

Скачать (876 kb)

[SerVer_UA]

PeStudio 8.49

Изменения:

Version 8.49
. Added detection of Windows builtin services
. Fixed a bug when handling strings
. Leveraged Indicators for embedded files

Скачать (904 kb)

[SerVer_UA]

PeStudio 8.50

Изменения:

Version 8.50
. Fixed a bug when handling exported functions of 54bit executables

Скачать (905 kb)

[SerVer_UA]

PeStudio 8.51

Изменения:

Version 8.51
. renamed pestudioprompt.exe into pestudiox.exe
. Added virustotal scoring of hardcoded URL
. Added detection of pipes
. Added Network Watchdog to update Virustotal score automatically
. Added XML switches to define the colors of the front-end
. Fixed ordinal functions mapping for 64bit images
. Fixed a crash when handling overlay
. Fixed a bug when retrieving the Description of the delay-loaded libraries

Скачать (747 kb)

[SerVer_UA]

PeStudio 8.52

Изменения:

Version 8.52
. Differentiate between standard and professional (pro) versions of pestudio
. Added deletion of overlay
. Added computation of entropy
. Added detection of TLS Callback functions
. Show more details about sections
. Fixed bugs and crash

Скачать (914 kb)

[SerVer_UA]

PeStudio 8.54

Изменения:

Version 8.54
. fixed bug with libraries

Version 8.53
. Added indicators
. Show overlay strings numbers
. Detect duplicated exported symbols
. Enhanced unicode strings detection
. Show strings location map with colors
. Differentiate URLs referenced in the certificate
. Fixed bugs

Скачать (922 kb)

[SerVer_UA]

PeStudio 8.55

Изменения:

Version 8.55
. Extented Indicators
. Dump PKCS7 Certificate
. fixed bugs

Скачать (921 kb)

[SerVer_UA]

PeStudio 8.56

Изменения:

Version 8.56
. Compute file-ratio for resources, sections, overlay and dos-stub
. Extent file summary
. Extent file signature detection
. Fix bugs

Скачать (909 kb)

[SerVer_UA]

PeStudio 8.60

Изменения:

Version 8.60
. Add detection of Control Flow Guard (CFG)
. Add details for Virustotal view

Version 8.59
. Show first bytes (hex) of resources
. Show first bytes (hex and text) of file
. Handle empty entry-point
. Extend Indicators

Version 8.58
. Fix a crash with some 64bit executables
. Add detection of missing libraries
. Extend status-bar

Version 8.57
. Extend translations
. Extend Exports handling
. Extend Imports handling
. Extend signatures
. Clean and Extend indicators
. Show first bytes of entrypoint
. Show first bytes of overlay
. Show dos-stub message

Скачать (926 kb)

[SerVer_UA]

PeStudio 8.70

Изменения:

Version 8.70
. Expose the indicators id number in the output XML file
. Extend grouping of utilities
. Extend grouping of imports by types and colors

Скачать (1,10 Mb)

[SerVer_UA]

PeStudio 8.72

Изменения:

Version 8.72
. Show functions that are delay-loaded
. Fix a bug when handling deprecated functions
. Extend context menu for imports to cope with functions.xml file
. Extend groups of imports

Version 8.71
. Extend groups of imports

Скачать (1,11 Mb)

[SerVer_UA]

PeStudio 8.73

Изменения:

Version 8.73
. Add functions groups to the strings View
. Extend functions groups to the delay-loaded functions

Скачать (1,24 Mb)

[SerVer_UA]

PeStudio 8.74

Изменения:

Version 8.74
. Fix a bug with the creation of the XML report file

Скачать (1,17 Mb)

[SerVer_UA]

PeStudio 8.76

Изменения:

Version 8.76
. Fix sorting of Virustotal scores
. Extend context Menu of Virustotal view
. Add support of "favorite-engine" for Virustotal

Скачать (1,18 Mb)